last executing test programs: 9.565347925s ago: executing program 1 (id=1007): syz_emit_ethernet(0x4a, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd"], 0x0) 9.386673795s ago: executing program 1 (id=1008): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x16b301, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xe6da) pipe2(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x0, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r3, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}, r5}}}, @tclass={{0x14}}], 0x40}}], 0x1, 0x0) r6 = syz_io_uring_setup(0x4072, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0xc, 0x1, 0x0, "18e889d15b38429faa8ff6243800000000000000059382b392b049e33948b16c"}) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000140)={0x9b8, [0x0, 0x2a1c0000]}, 0x10) r11 = fcntl$dupfd(r9, 0x0, r10) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r11, 0x400455c8, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) 6.951577208s ago: executing program 1 (id=1013): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20082, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod$loop(0x0, 0x0, 0x1) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='msdos\x00', 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) openat$audio(0xffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="54010000100013070000000000000000e0000002000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143e0000000000000000000000000000000032000000ac1e00010000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000020000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c000000000000000000000000000000000028bd700000000000"], 0x154}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x7f, 0x0, &(0x7f0000001180)) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) 4.077849551s ago: executing program 2 (id=1022): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x5}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x7, 0x302, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x40) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xc, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1403, 0x13, 0x70bd2a, 0x1, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x38}}, 0x20044010) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000005c0), 0x88) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x3, 0x0, 0x31e, 0x0, 0x88, 0x6, 0x8}, &(0x7f0000000200)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r6, 0x40}, 0x8) socket(0x1c, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r7, 0x7, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x100000001) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x7ffe, 0x0, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) 3.930193453s ago: executing program 0 (id=1024): socket$can_j1939(0x1d, 0x2, 0x7) io_setup(0xff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket(0x2, 0x5, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x44000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x81, 0xfff, 0x9, 0x804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) fcntl$setstatus(r4, 0x4, 0x2c00) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x12, r6, 0x200, &(0x7f0000000480)={0x0}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 3.671021019s ago: executing program 1 (id=1025): r0 = socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$sock(r2, &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000a40)={0x2020}, 0x2) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r5 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r5, &(0x7f0000000080), 0xffffff9d, 0xff0f, 0x0, 0x0) recvfrom(r5, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) 3.616959668s ago: executing program 2 (id=1026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000000058000000000a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30"], 0xa0}, 0x1, 0x2000000}, 0x0) 3.371355397s ago: executing program 2 (id=1028): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') r2 = socket(0x0, 0x0, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @local, 'vxcan1\x00'}}, 0x1e) sendfile(r2, r1, 0x0, 0x8) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000240)={0x1, 0x101}) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$USBDEVFS_RESET(r0, 0x5514) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x12, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000080)={0x0, r4, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r4, r6, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, "65366a50432be7cfc6fa7272f3bf0a71b5d0c19323826000"}}) 3.081912074s ago: executing program 0 (id=1029): r0 = socket$unix(0x1, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x4) fcntl$addseals(r2, 0x409, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x1a75800, 0xfffffff9, 0x1c0c8, r2, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x0, @value, @void, @value}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/sync_on_suspend', 0x0, 0x80) finit_module(r4, 0x0, 0x0) r5 = io_uring_setup(0x547f, &(0x7f0000000080)={0x0, 0xf7d1, 0x0, 0x0, 0xfffffffe, 0x0, r4}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8003, 0x0) write$P9_RSTATu(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/548, @ANYRES32=0x0, @ANYRESDEC=r0], 0x232) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000700)) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0xc}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0}, &(0x7f0000000000)=0xc) ioprio_set$pid(0x1, r8, 0x2007) 2.402253192s ago: executing program 2 (id=1032): r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000480), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000a00)="c218b8fb4f2711662cda1925942565487e7d348d3cb55586a0b8af4c8b0e15dd9b6a54e2b1949a11fd43529b6d7178ad1bca2c14db39ff5a5cc5653035257088bc479654863b4172cad06d296711c31da28fd6ee8733d014bdff64c5adb64d1df761b14bf856875d2ccbe1d4559c3a7600ffffff237a5aa929", 0x79, r0) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}, 0x0, 0x40000}) 2.322424436s ago: executing program 2 (id=1033): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20082, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod$loop(0x0, 0x0, 0x1) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='msdos\x00', 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) openat$audio(0xffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="54010000100013070000000000000000e0000002000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143e0000000000000000000000000000000032000000ac1e00010000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000020000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c000000000000000000000000000000000028bd700000000000"], 0x154}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x7f, 0x0, &(0x7f0000001180)) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.791511855s ago: executing program 3 (id=1036): process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, @val=@perf_event={0x5}}, 0x18) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r2 = openat$mice(0xffffff9c, &(0x7f0000000080), 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYRES16=r0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000180)="1800000001000356c88710219d879c993e3701ca61ba8168dfb9f9f16b269e548c2c6118539b8d06c6a0", 0x2a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xd) 1.571248645s ago: executing program 0 (id=1037): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)={0xa8, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x31, {0x2, 0x4e22, @empty}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.442325756s ago: executing program 1 (id=1038): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x99, &(0x7f0000000180)=""/153, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x68) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e00000004000000040000000c00000000000000637c5c023565bce634cbd248ce9dcd9c560be4ed92e0db29ed86559f9d0cf5c7a54b22e57d7ccea0ee954a87df60c8055f776b4b6504e104f7c850234b15e0fac331573fb8002930e49b7aa1e252371ebb437c7fb7da19a918735da8bb332f29ad9a6cf3dee47c9bbd6843d96b791f3b5833dfcaeef04a28acac104cd79461e835345aeabdcb049fc7a3ea59b977f99485d6eb9bb35c427c7b6e8e6e9bf6353f4767707b56dfd23441d03efddfb6056b7c97688a895dcb2c088e067943183e0568ed760c10189cae6100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080), &(0x7f0000000540)) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$packet(0x11, 0x3, 0x300) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) fsetxattr$system_posix_acl(r4, &(0x7f00000000c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000001480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000885000000a00000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = getuid() setreuid(0xee00, r8) ioprio_get$uid(0x3, r8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000100), &(0x7f0000000140)=r7}, 0x20) 1.44166424s ago: executing program 0 (id=1039): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000002f00)=ANY=[@ANYBLOB], 0x14}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), r1) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0103007568000000000004"], 0x14}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='swiotlb_bounced\x00', r3}, 0x10) r4 = getpid() r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000004f00000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b509050000000000dbaaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x8020a00, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="b3369fa6283d0e790d08b1f4e9ea6115f54024d93ffda417a9e09f6dad7731158c2fdfe6f389f158a465d2485e393de9fd006ae536d9315749dc289000be97b290f31f73735346304323a037028bcd86c08bf518444daeabe570e6264433ac75805c9fb734ed5731196a4cf7714626793b7212ad927587ca1f56adee1160d7c605bba8e88d6fd09d7c803cdceb51d0d9bfdc89b15ffcd92115ba2ed4116faf25d594bb0addd7c72bb7513cce12ab5d70118b4a91a16d7542b6d69ab4b43aa435a2b3017cee0a720a8ab2469db84b5bb6217e2288a9ddb9160f", @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) creat(0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x16, 0x200, &(0x7f0000000880)="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"}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) 1.352449454s ago: executing program 3 (id=1040): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, @in6={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e21, 0x2, @mcast2, 0x1000}], 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001c000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="800000000a000200aaaaaaaaaa00000008000f0073"], 0x38}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="01070000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="24000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843"], 0x730}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.3476267s ago: executing program 3 (id=1041): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) sendmmsg$sock(r1, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000000fc0)="7abb450efc3833afdd4214d281b3f0230cf12a4d2dd104128aae5708fa7f83b45129b1c09af9d08b25970cb12fd006a3cb57a46de1cee7a68919527361f4360a9f068d4676e9f8fb33388a34914237c596f825502967e1bb112fd2cfc06a0d6d8c8f45f70888449d7681411642b9fb4b273d569c08c88c69416abad0ef88bfa14dfd2dfb70b533886aafdd75197a9d3294da9419f589d71d6211d6bdd1f7b8483854d389599b14631b60a94bae992c5ba99456fa67b8bf000c5f793f3fe53897d2acc6f707a6dda3fddbc1c293b1c5c0a400e4f756c2dbd1734d2cddce84cab067425c0698e4583c0b3c353eb369d9cc67e7c92beb1a7cb06e258d462f293efadf7bad14fbc77fe5f23a7ba0fb0c16b91461b69a5e72051ce6b25b4b6a73d7c11a1532e68982fcc76e001c5f3fdc5f1c0cb37ec34bf3394d34cf9121a9b6aca9ec474026ba079495936ebe311241c78ba3e1dbcf885ea4c6f98bb6c8cf847487e16ac2a8cb4b4ae793f30d17cb524f63f8790aa6cfbe50b3c0c4851f4c6fb53c82ea0a18144a314b896e70a2c3cdd253dc53", 0x192}, {&(0x7f0000002740)="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", 0xed9}], 0x2}}], 0x1, 0x8811) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x28, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32, @ANYBLOB="3c0002"], 0x58}, 0x1, 0xf000}, 0x0) sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b000100000000000000001808"], 0x114}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/102, 0x66}], 0x1}}], 0x1, 0x1, 0x0) 1.23185867s ago: executing program 3 (id=1042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f00000018c0)=ANY=[@ANYBLOB="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", @ANYBLOB="98db1b0e3fb60352cf1c95e8e03519190c1bd3b1f25e1bead6e8771ce8f7817ed7c3253b908b910025feb92d9d9ea7ca9b31467eb02388ac69e146439311e1e44d63770976338cfb3368cad1bf5db52547f0a826b8f4c6d067d9865f0d5c5c11e642b516e6c81b3c91e5143e033b627f13fe860e6337733e1195de052bb7b683eed7200a6219bbcfbcf71894fbe582fe212cc6d331bcd7de6b5c15c851229de00202dbf9d171e9537c47af56516f73ead47bb5b452", @ANYBLOB="b8bbd01ba7d23c9f693b70825082e45aaece4215426e674ad760206baa4a36e3402b7f43e647b29551951cc2b765fa7c0a9ae37291d501f9553bb0145aeab2435bf72c7449bb26213a649a0929f898d2301d660ce27fe7845dead5767c98aeb03f8d96a853ee86bda3ad00d293053f4e301cae0950d7f0f8b7f71178f3c9df036d017b48f3f8858dcafb01b88282d66037c2a5e7d0ebb316f0b359c759acfcc93aec16e2fde8eecd3437c38c5ab60621ead5ee9561a220ed7dba2bd8058112e7df41ee4d621b2a90bccee39937db69f963d7676a0f9add5c548985a041f85f226aaf6fbc83da190abc424299f32298d244"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1}, 0x8, 0x10, &(0x7f00000003c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x2000000, 0x93, 0x0, &(0x7f0000000600)="168e43acc18169514039c5bcdb7a44ca7b73908b0e0245bb78fefed08041a1231bdb4729d55fa1e5b413df0c757252630588a43d899a24818d78c9b4b148de20b812fd893157d5046238c9c82df5a649a4781baeac4da0bf1151b932a24f43608a48841f8083e2bf008a0c7a6415d630057bde8c3589ec5aad0876bd342598daa8affb10c0bccb023f824d8e9fdc94ab245a5d", 0x0, 0xc699, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x200000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc2c45513, &(0x7f00000015c0)={{0xa, 0x2, 0x4, 0xfffffffd, 'syz0\x00', 0xe}, 0x0, [0x85, 0xdac, 0x4, 0x6, 0x0, 0x8, 0x2, 0x0, 0x500000, 0x0, 0x80000000, 0x2, 0xffffbeea, 0x400, 0x9, 0x6, 0x29b8, 0x7e, 0x42da, 0x80, 0x1, 0x8001, 0xbae, 0x3, 0x8, 0x0, 0x7, 0x8, 0x6, 0x4, 0x100, 0x10000, 0x9, 0x8, 0xe, 0x9, 0xa000, 0xcb, 0x2, 0x5, 0x80000001, 0xc, 0x8001, 0x3, 0x2, 0x0, 0x2, 0x1, 0x1, 0xffffd8a6, 0x8, 0x7, 0x80000000, 0xd, 0x7980, 0x4, 0x0, 0x9, 0x7, 0x80000000, 0x2, 0xb, 0x101, 0x8, 0xc, 0xfffffff7, 0x6, 0x3, 0xe, 0x9, 0x2, 0x6, 0x7, 0x9, 0x6, 0x0, 0x7, 0x5, 0x4, 0x7743a6eb, 0xd1a, 0x90, 0x5547, 0xc42b, 0x7, 0x6, 0x0, 0x2, 0x5, 0x7, 0x8, 0x10001, 0x4, 0x2, 0xfffffff9, 0xce1, 0xc, 0x6, 0x0, 0x6, 0xb046, 0x3, 0x101, 0x5, 0xffff4b42, 0x0, 0x9, 0x7f, 0x7ff, 0x5b1, 0x3, 0x3, 0x0, 0x80000000, 0x8, 0x4, 0x6, 0x7, 0x8, 0x2, 0x1, 0x7, 0x8000, 0x82, 0x4, 0x80000000, 0x9, 0x4]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000090ff000703000002feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @rand_addr=' \x01\x00'}}) syz_usbip_server_init(0x5) socket$inet(0xa, 0x801, 0x0) 852.006129ms ago: executing program 0 (id=1043): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_emit_vhci(0x0, 0x22) syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x68) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080), &(0x7f0000000540)) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_open_procfs$userns(0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000001480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000885000000a00000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = getuid() setreuid(0xee00, r4) ioprio_get$uid(0x3, r4) 462.447394ms ago: executing program 1 (id=1044): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/consoles\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001200), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0xc00455d0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x4, 0x7, 0x4, [0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4]}}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x1, 0x2404c004, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000003c0), &(0x7f0000000240)=0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000800)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x38, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 242.085492ms ago: executing program 2 (id=1045): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x87b], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x24b) write$uinput_user_dev(r0, &(0x7f00000021c0)={'syz0\x00', {}, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00], [0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}, 0x45c) 123.510581ms ago: executing program 0 (id=1046): socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="500100001a0001000000000002000000020000000000c808ffffffea080006000700000008000400", @ANYRES32=r1, @ANYBLOB="06001c004e21000008000140ac1414"], 0x150}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r3, 0x7ffffb, 0x0) write$vhost_msg(r3, &(0x7f0000000600)={0x1, {0x0, 0x0, 0x0}}, 0x48) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x2) socket(0x40000000015, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 123.017403ms ago: executing program 3 (id=1047): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000100)={{@host}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000200)={{@local}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000240)={&(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x6, 0x400}) 0s ago: executing program 3 (id=1048): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000003b40)=""/102392, 0x18ff8) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x4, 0x84, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) syz_emit_ethernet(0xde, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xa8, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @remote, [{0x4, 0x10, "9595f429ae08a565c9a41d413270a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0c"}]}}}}}}, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20009015) (async, rerun: 32) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 64) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0xc, 0xfeff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfeff}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000010c0)=ANY=[], 0x1a3) (async) recvmmsg(r2, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 5520][ T7479] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 243.780289][ T7479] RSP: 002b:00000000f569656c EFLAGS: 00000296 ORIG_RAX: 0000000000000120 [ 243.782346][ T7479] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000020000100 [ 243.784329][ T7479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 243.786271][ T7479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.788254][ T7479] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 243.790210][ T7479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.792263][ T7479] [ 244.276944][ T5373] Bluetooth: hci0: command 0x0406 tx timeout [ 244.834707][ T7508] syzkaller0: entered promiscuous mode [ 244.891600][ T7508] syzkaller0: entered allmulticast mode [ 245.077037][ T5367] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 245.168687][ T7513] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 245.429330][ T7520] program syz.2.634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.121075][ T7540] openvswitch: netlink: Missing key (keys=44, expected=2000) [ 248.169136][ T7536] FAULT_INJECTION: forcing a failure. [ 248.169136][ T7536] name failslab, interval 1, probability 0, space 0, times 0 [ 248.173695][ T7536] CPU: 2 UID: 0 PID: 7536 Comm: syz.0.640 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 248.177378][ T7536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 248.181261][ T7536] Call Trace: [ 248.182504][ T7536] [ 248.183599][ T7536] dump_stack_lvl+0x16c/0x1f0 [ 248.185319][ T7536] should_fail_ex+0x497/0x5b0 [ 248.187062][ T7536] ? fs_reclaim_acquire+0xae/0x160 [ 248.188960][ T7536] should_failslab+0xc2/0x120 [ 248.190710][ T7536] __kmalloc_cache_noprof+0x6b/0x310 [ 248.192648][ T7536] ? netlbl_cipsov4_add+0x3b6/0x2450 [ 248.194610][ T7536] ? kasan_save_track+0x14/0x30 [ 248.196396][ T7536] netlbl_cipsov4_add+0x3b6/0x2450 [ 248.198237][ T7536] ? __nla_parse+0x40/0x60 [ 248.199840][ T7536] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 248.201812][ T7536] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 248.204374][ T7536] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 248.206712][ T7536] genl_family_rcv_msg_doit+0x202/0x2f0 [ 248.208684][ T7536] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 248.210938][ T7536] ? bpf_lsm_capable+0x9/0x10 [ 248.212388][ T7536] ? security_capable+0x7e/0x260 [ 248.213691][ T7536] genl_rcv_msg+0x565/0x800 [ 248.215010][ T7536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.216370][ T7536] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 248.217853][ T7536] ? __pfx___lock_acquire+0x10/0x10 [ 248.219305][ T7536] netlink_rcv_skb+0x165/0x410 [ 248.220597][ T7536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.221945][ T7536] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.223353][ T7536] ? down_read+0xc9/0x330 [ 248.224514][ T7536] ? __pfx_down_read+0x10/0x10 [ 248.225780][ T7536] ? netlink_deliver_tap+0x1ae/0xcf0 [ 248.227389][ T7536] genl_rcv+0x28/0x40 [ 248.228866][ T7536] netlink_unicast+0x53c/0x7f0 [ 248.230351][ T7536] ? __pfx_netlink_unicast+0x10/0x10 [ 248.231761][ T7536] ? __phys_addr_symbol+0x30/0x80 [ 248.233109][ T7536] ? __check_object_size+0x4b0/0x720 [ 248.234508][ T7536] netlink_sendmsg+0x8b8/0xd70 [ 248.236135][ T7536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.237601][ T7536] ____sys_sendmsg+0x9ae/0xb40 [ 248.238894][ T7536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.240325][ T7536] ? get_compat_msghdr+0x11b/0x170 [ 248.241718][ T7536] ? __pfx___lock_acquire+0x10/0x10 [ 248.243135][ T7536] ? __lock_task_sighand+0xc2/0x340 [ 248.244522][ T7536] ___sys_sendmsg+0x135/0x1e0 [ 248.245773][ T7536] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.247216][ T7536] ? find_held_lock+0x2d/0x110 [ 248.248501][ T7536] ? __fget_light+0x173/0x210 [ 248.249747][ T7536] __sys_sendmsg+0x117/0x1f0 [ 248.251054][ T7536] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.252438][ T7536] ? bpf_trace_run2+0x2a6/0x590 [ 248.253722][ T7536] ? rcu_is_watching+0x12/0xc0 [ 248.255004][ T7536] __do_fast_syscall_32+0x73/0x120 [ 248.256360][ T7536] do_fast_syscall_32+0x32/0x80 [ 248.257675][ T7536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 248.259373][ T7536] RIP: 0023:0xf7f13579 [ 248.260491][ T7536] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 248.266269][ T7536] RSP: 002b:00000000f569656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 248.268548][ T7536] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000580 [ 248.270671][ T7536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 248.272796][ T7536] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.274864][ T7536] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 248.276960][ T7536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.279088][ T7536] [ 248.422502][ T7552] netlink: 'syz.2.645': attribute type 33 has an invalid length. [ 248.737533][ T58] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 248.832309][ T7569] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 248.922102][ T58] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 248.925442][ T58] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 248.928401][ T58] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 248.931249][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.944661][ T7552] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 248.959791][ T58] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.227693][ T58] usb 7-1: USB disconnect, device number 5 [ 249.550091][ T39] kauditd_printk_skb: 35 callbacks suppressed [ 249.550108][ T39] audit: type=1326 audit(1726597510.225:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.1.650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7fc00000 [ 250.188117][ T39] audit: type=1326 audit(1726597510.855:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.0.656" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x0 [ 250.827614][ T7599] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 251.068787][ T7606] netlink: 92 bytes leftover after parsing attributes in process `syz.1.661'. [ 251.071205][ T7606] netlink: 92 bytes leftover after parsing attributes in process `syz.1.661'. [ 251.081024][ T7608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.662'. [ 251.084310][ T7608] netlink: 'syz.3.662': attribute type 7 has an invalid length. [ 251.086928][ T7608] netlink: 'syz.3.662': attribute type 8 has an invalid length. [ 251.089647][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 251.100271][ T7608] gretap0: entered promiscuous mode [ 251.105891][ T7608] batadv_slave_1: entered promiscuous mode [ 251.191240][ T7610] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 251.193027][ T7610] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 251.205684][ T7610] vhci_hcd vhci_hcd.0: Device attached [ 251.500157][ T7611] vhci_hcd: connection closed [ 251.503286][ T45] vhci_hcd: stop threads [ 251.507308][ T5349] usb 16-1: SetAddress Request (14) to port 0 [ 251.509909][ T45] vhci_hcd: release socket [ 251.511400][ T5349] usb 16-1: new SuperSpeed USB device number 14 using vhci_hcd [ 251.513753][ T45] vhci_hcd: disconnect device [ 251.537003][ T5349] usb 16-1: enqueue for inactive port 0 [ 251.854263][ T7622] netlink: 'syz.2.665': attribute type 33 has an invalid length. [ 251.967733][ T5349] usb usb16-port1: attempt power cycle [ 252.047181][ T5347] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 252.156789][ T58] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 252.240010][ T5347] usb 5-1: config 0 has no interfaces? [ 252.244164][ T5347] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.247441][ T5347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.250191][ T5347] usb 5-1: Product: syz [ 252.251659][ T5347] usb 5-1: Manufacturer: syz [ 252.253262][ T5347] usb 5-1: SerialNumber: syz [ 252.257686][ T5347] usb 5-1: config 0 descriptor?? [ 252.338716][ T58] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 252.344565][ T58] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 252.350626][ T58] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 252.359785][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.363906][ T7622] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 252.367774][ T58] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 252.466282][ T835] usb 5-1: USB disconnect, device number 6 [ 252.578915][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'. [ 252.629317][ T5349] usb usb16-port1: unable to enumerate USB device [ 252.645921][ T5349] usb 7-1: USB disconnect, device number 6 [ 252.772324][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'. [ 253.036322][ T7645] ipt_REJECT: TCP_RESET invalid for non-tcp [ 253.082159][ T7645] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 253.475491][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.674'. [ 253.708314][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 254.892108][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.680'. [ 255.669958][ T7681] FAULT_INJECTION: forcing a failure. [ 255.669958][ T7681] name failslab, interval 1, probability 0, space 0, times 0 [ 255.673349][ T7681] CPU: 2 UID: 0 PID: 7681 Comm: syz.0.683 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 255.676070][ T7681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 255.678971][ T7681] Call Trace: [ 255.679919][ T7681] [ 255.680798][ T7681] dump_stack_lvl+0x16c/0x1f0 [ 255.682176][ T7681] should_fail_ex+0x497/0x5b0 [ 255.683526][ T7681] ? fs_reclaim_acquire+0xae/0x160 [ 255.684930][ T7681] should_failslab+0xc2/0x120 [ 255.686213][ T7681] __kmalloc_noprof+0xcb/0x410 [ 255.687509][ T7681] ? rcu_is_watching+0x12/0xc0 [ 255.688788][ T7681] tomoyo_encode2+0x100/0x3e0 [ 255.690031][ T7681] tomoyo_realpath_from_path+0x1a7/0x710 [ 255.691525][ T7681] tomoyo_check_open_permission+0x2a7/0x3b0 [ 255.693083][ T7681] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 255.694817][ T7681] ? __pfx___lock_acquire+0x10/0x10 [ 255.696251][ T7681] ? __pfx_hook_file_open+0x10/0x10 [ 255.697750][ T7681] ? path_get+0x61/0x80 [ 255.698996][ T7681] tomoyo_file_open+0x6b/0x90 [ 255.700829][ T7681] security_file_open+0x64c/0x9d0 [ 255.702314][ T7681] do_dentry_open+0x57c/0x1530 [ 255.703617][ T7681] vfs_open+0x82/0x3f0 [ 255.704708][ T7681] dentry_open+0x71/0xd0 [ 255.705837][ T7681] ns_ioctl+0x7d8/0xd30 [ 255.706943][ T7681] ? __pfx_ns_ioctl+0x10/0x10 [ 255.708179][ T7681] ? __fget_files+0x244/0x3f0 [ 255.709437][ T7681] ? __pfx_ns_ioctl+0x10/0x10 [ 255.710709][ T7681] compat_ptr_ioctl+0x6b/0xa0 [ 255.711992][ T7681] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 255.713525][ T7681] __do_compat_sys_ioctl+0x2bd/0x330 [ 255.715096][ T7681] __do_fast_syscall_32+0x73/0x120 [ 255.716586][ T7681] do_fast_syscall_32+0x32/0x80 [ 255.717924][ T7681] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.719624][ T7681] RIP: 0023:0xf7f13579 [ 255.720700][ T7681] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 255.725699][ T7681] RSP: 002b:00000000f569656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 255.727854][ T7681] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000005000940c [ 255.729900][ T7681] RDX: 0000000001000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.731938][ T7681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.733991][ T7681] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 255.736143][ T7681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 255.738884][ T7681] [ 255.743597][ T7681] ERROR: Out of memory at tomoyo_realpath_from_path. [ 255.786877][ T39] audit: type=1326 audit(1726597516.455:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.3.681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 255.793977][ T39] audit: type=1326 audit(1726597516.455:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.3.681" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 255.800503][ T39] audit: type=1326 audit(1726597516.455:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.3.681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 255.807452][ T39] audit: type=1326 audit(1726597516.455:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.3.681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 255.814822][ T39] audit: type=1326 audit(1726597516.455:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.3.681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 255.823182][ T39] audit: type=1326 audit(1726597516.455:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.3.681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 255.829852][ T39] audit: type=1326 audit(1726597516.455:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.3.681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 255.836583][ T39] audit: type=1326 audit(1726597516.455:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.3.681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 255.844065][ T39] audit: type=1326 audit(1726597516.455:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.3.681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 255.852980][ T39] audit: type=1326 audit(1726597516.455:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.3.681" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 256.003450][ T7692] vxfs: WRONG superblock magic 00000000 at 1 [ 256.012216][ T7692] vxfs: WRONG superblock magic 00000000 at 8 [ 256.014573][ T7692] vxfs: can't find superblock. [ 256.090570][ T7694] befs: Unrecognized mount option "¼]<…±‚s_úï4÷ËœrÝÚ3wS1y³›ÏCl* º©]ûÇŽ Ê–ðb"§eÌ#(r’«" or missing value [ 256.095367][ T7694] befs: (nullb0): cannot parse mount options [ 256.107233][ T7694] netlink: 3 bytes leftover after parsing attributes in process `syz.0.687'. [ 256.118569][ T7694] 0ªX¹¦À: renamed from caif0 [ 256.192280][ T7694] 0ªX¹¦À: entered allmulticast mode [ 256.194184][ T7694] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 256.996982][ T5367] Bluetooth: hci1: command tx timeout [ 257.859583][ T7724] syz.1.695 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 258.111870][ T7722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.918677][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 258.926693][ T7749] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 258.933865][ T7748] bond_slave_0: entered promiscuous mode [ 258.935929][ T7748] bond_slave_1: entered promiscuous mode [ 258.949626][ T7748] macvtap1: entered promiscuous mode [ 258.951115][ T7748] bond0: entered promiscuous mode [ 258.952757][ T7748] macvtap1: entered allmulticast mode [ 258.954187][ T7748] bond0: entered allmulticast mode [ 258.955652][ T7748] bond_slave_0: entered allmulticast mode [ 258.981926][ T7748] bond_slave_1: entered allmulticast mode [ 258.984306][ T7748] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 259.002589][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 260.290478][ T7780] FAULT_INJECTION: forcing a failure. [ 260.290478][ T7780] name failslab, interval 1, probability 0, space 0, times 0 [ 260.295109][ T7780] CPU: 1 UID: 0 PID: 7780 Comm: syz.2.712 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 260.298925][ T7780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 260.302768][ T7780] Call Trace: [ 260.303996][ T7780] [ 260.305091][ T7780] dump_stack_lvl+0x16c/0x1f0 [ 260.306832][ T7780] should_fail_ex+0x497/0x5b0 [ 260.308566][ T7780] should_failslab+0xc2/0x120 [ 260.310297][ T7780] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 260.312268][ T7780] ? skb_clone+0x190/0x3f0 [ 260.313940][ T7780] skb_clone+0x190/0x3f0 [ 260.315586][ T7780] netlink_deliver_tap+0xb26/0xcf0 [ 260.317415][ T7780] netlink_unicast+0x6b4/0x7f0 [ 260.319216][ T7780] ? __pfx_netlink_unicast+0x10/0x10 [ 260.321142][ T7780] netlink_ack+0x6a5/0xb20 [ 260.322793][ T7780] netlink_rcv_skb+0x327/0x410 [ 260.324551][ T7780] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 260.326548][ T7780] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.328475][ T7780] ? __pfx_aa_get_newest_label+0x10/0x10 [ 260.330526][ T7780] ? bpf_lsm_capable+0x9/0x10 [ 260.332208][ T7780] ? security_capable+0x7e/0x260 [ 260.333974][ T7780] ? ns_capable+0xd7/0x110 [ 260.335627][ T7780] nfnetlink_rcv+0x1b4/0x430 [ 260.337291][ T7780] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 260.339197][ T7780] ? netlink_deliver_tap+0x1ae/0xcf0 [ 260.341122][ T7780] netlink_unicast+0x53c/0x7f0 [ 260.342891][ T7780] ? __pfx_netlink_unicast+0x10/0x10 [ 260.344815][ T7780] ? __phys_addr_symbol+0x30/0x80 [ 260.346661][ T7780] ? __check_object_size+0x497/0x720 [ 260.348531][ T7780] netlink_sendmsg+0x8b8/0xd70 [ 260.350258][ T7780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.352212][ T7780] ____sys_sendmsg+0x9ae/0xb40 [ 260.353980][ T7780] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.355914][ T7780] ? get_compat_msghdr+0x11b/0x170 [ 260.357809][ T7780] ? __pfx___lock_acquire+0x10/0x10 [ 260.359757][ T7780] ___sys_sendmsg+0x135/0x1e0 [ 260.361495][ T7780] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.363401][ T7780] ? find_held_lock+0x2d/0x110 [ 260.365172][ T7780] ? ksys_write+0x21c/0x260 [ 260.366867][ T7780] ? __fget_light+0x173/0x210 [ 260.368598][ T7780] __sys_sendmsg+0x117/0x1f0 [ 260.370296][ T7780] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.372192][ T7780] __do_fast_syscall_32+0x73/0x120 [ 260.374003][ T7780] do_fast_syscall_32+0x32/0x80 [ 260.375797][ T7780] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.378101][ T7780] RIP: 0023:0xf7fd7579 [ 260.379606][ T7780] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 260.386503][ T7780] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 260.389525][ T7780] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 260.392351][ T7780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.395192][ T7780] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.398033][ T7780] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 260.400914][ T7780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.403799][ T7780] [ 260.405086][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.460993][ T7783] netlink: 'syz.2.713': attribute type 10 has an invalid length. [ 260.471058][ T7783] team0: Port device netdevsim0 added [ 260.486883][ T5349] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 260.534482][ T7785] netlink: 'syz.2.714': attribute type 12 has an invalid length. [ 260.690640][ T5349] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.701553][ T5349] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 260.705133][ T5349] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 260.716800][ T5349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.730051][ T7767] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 260.740533][ T5349] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.993188][ T7767] netlink: 32 bytes leftover after parsing attributes in process `syz.1.708'. [ 261.048810][ T7767] Process accounting resumed [ 261.078680][ T5349] usb 6-1: USB disconnect, device number 8 [ 261.632167][ T7808] netlink: 32 bytes leftover after parsing attributes in process `syz.1.721'. [ 261.642097][ T7808] netlink: 'syz.1.721': attribute type 1 has an invalid length. [ 261.644247][ T7808] netlink: 'syz.1.721': attribute type 2 has an invalid length. [ 261.682379][ T7810] input: syz0 as /devices/virtual/input/input6 [ 262.446932][ T7824] xt_hashlimit: Unknown mode mask 1C000000, kernel too old? [ 263.069685][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'. [ 264.093116][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 264.097561][ T7852] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 264.100091][ T7852] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 264.663388][ T7860] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 264.665798][ T7860] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 264.679656][ T7860] vhci_hcd vhci_hcd.0: Device attached [ 264.783961][ T7864] usb 2-1: USB disconnect, device number 2 [ 264.972387][ T7866] hub 2-0:1.0: USB hub found [ 264.983647][ T7866] hub 2-0:1.0: 6 ports detected [ 265.023469][ T58] usb 18-1: SetAddress Request (3) to port 0 [ 265.037491][ T58] usb 18-1: new SuperSpeed USB device number 3 using vhci_hcd [ 265.062644][ T7869] FAULT_INJECTION: forcing a failure. [ 265.062644][ T7869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.073119][ T7869] CPU: 1 UID: 0 PID: 7869 Comm: syz.1.737 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 265.075810][ T7869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 265.078614][ T7869] Call Trace: [ 265.079502][ T7869] [ 265.080287][ T7869] dump_stack_lvl+0x16c/0x1f0 [ 265.081533][ T7869] should_fail_ex+0x497/0x5b0 [ 265.082788][ T7869] _copy_to_user+0x30/0xc0 [ 265.083969][ T7869] copy_ns_info_to_user+0x137/0x1e0 [ 265.085338][ T7869] ns_ioctl+0x828/0xd30 [ 265.086511][ T7869] ? __pfx_ns_ioctl+0x10/0x10 [ 265.088065][ T7869] ? __fget_files+0x244/0x3f0 [ 265.089387][ T7869] ? __pfx_ns_ioctl+0x10/0x10 [ 265.090826][ T7869] compat_ptr_ioctl+0x6b/0xa0 [ 265.092113][ T7869] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 265.093781][ T7869] __do_compat_sys_ioctl+0x2bd/0x330 [ 265.095231][ T7869] __do_fast_syscall_32+0x73/0x120 [ 265.097007][ T7869] do_fast_syscall_32+0x32/0x80 [ 265.098400][ T7869] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.100135][ T7869] RIP: 0023:0xf73ae579 [ 265.101338][ T7869] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 265.106912][ T7869] RSP: 002b:00000000f569656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 265.109093][ T7869] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000005000940c [ 265.111192][ T7869] RDX: 0000000001000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 265.113379][ T7869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 265.115460][ T7869] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 265.117523][ T7869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.119734][ T7869] [ 265.219082][ T7862] vhci_hcd: connection reset by peer [ 265.222796][ T1105] vhci_hcd: stop threads [ 265.224375][ T1105] vhci_hcd: release socket [ 265.226678][ T1105] vhci_hcd: disconnect device [ 265.229160][ T5425] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 265.230824][ T7871] netlink: 'syz.1.738': attribute type 3 has an invalid length. [ 265.480739][ T5425] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 265.484195][ T5425] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 265.487482][ T5425] usb 2-1: Product: QEMU USB Tablet [ 265.489080][ T5425] usb 2-1: Manufacturer: QEMU [ 265.490878][ T5425] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 265.576491][ T5425] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0003/input/input7 [ 265.671490][ T5425] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 265.982609][ T7875] FAULT_INJECTION: forcing a failure. [ 265.982609][ T7875] name failslab, interval 1, probability 0, space 0, times 0 [ 265.986117][ T7875] CPU: 1 UID: 0 PID: 7875 Comm: syz.2.740 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 265.988782][ T7875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 265.991558][ T7875] Call Trace: [ 265.992448][ T7875] [ 265.993267][ T7875] dump_stack_lvl+0x16c/0x1f0 [ 265.994514][ T7875] should_fail_ex+0x497/0x5b0 [ 265.995759][ T7875] should_failslab+0xc2/0x120 [ 265.996993][ T7875] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 265.998431][ T7875] ? skb_clone+0x190/0x3f0 [ 265.999627][ T7875] skb_clone+0x190/0x3f0 [ 266.000752][ T7875] netlink_deliver_tap+0xb26/0xcf0 [ 266.002462][ T7875] netlink_unicast+0x6b4/0x7f0 [ 266.003731][ T7875] ? __pfx_netlink_unicast+0x10/0x10 [ 266.005106][ T7875] ? genl_rcv_msg+0x4bd/0x800 [ 266.006385][ T7875] netlink_ack+0x6a5/0xb20 [ 266.007588][ T7875] netlink_rcv_skb+0x327/0x410 [ 266.008840][ T7875] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.010174][ T7875] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.011573][ T7875] ? down_read+0xc9/0x330 [ 266.012712][ T7875] ? __pfx_down_read+0x10/0x10 [ 266.013975][ T7875] ? netlink_deliver_tap+0x1ae/0xcf0 [ 266.015371][ T7875] genl_rcv+0x28/0x40 [ 266.016422][ T7875] netlink_unicast+0x53c/0x7f0 [ 266.017687][ T7875] ? __pfx_netlink_unicast+0x10/0x10 [ 266.019091][ T7875] ? __phys_addr_symbol+0x30/0x80 [ 266.020415][ T7875] ? __check_object_size+0x497/0x720 [ 266.021828][ T7875] netlink_sendmsg+0x8b8/0xd70 [ 266.023099][ T7875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.024488][ T7875] ____sys_sendmsg+0x9ae/0xb40 [ 266.025743][ T7875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.027134][ T7875] ? get_compat_msghdr+0x11b/0x170 [ 266.028530][ T7875] ? __pfx___lock_acquire+0x10/0x10 [ 266.029946][ T7875] ___sys_sendmsg+0x135/0x1e0 [ 266.031484][ T7875] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.032845][ T7875] ? find_held_lock+0x2d/0x110 [ 266.034101][ T7875] ? ksys_write+0x21c/0x260 [ 266.035311][ T7875] ? __fget_light+0x173/0x210 [ 266.036541][ T7875] __sys_sendmsg+0x117/0x1f0 [ 266.037747][ T7875] ? __pfx___sys_sendmsg+0x10/0x10 [ 266.039147][ T7875] __do_fast_syscall_32+0x73/0x120 [ 266.040481][ T7875] do_fast_syscall_32+0x32/0x80 [ 266.041759][ T7875] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.043430][ T7875] RIP: 0023:0xf7fd7579 [ 266.044495][ T7875] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 266.049404][ T7875] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 266.051522][ T7875] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 266.053577][ T7875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 266.055644][ T7875] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 266.057805][ T7875] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 266.059864][ T7875] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.062245][ T7875] [ 266.636941][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.743'. [ 267.805045][ T1379] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.807516][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.872463][ T7910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.751'. [ 268.144998][ T7913] fuse: Bad value for 'user_id' [ 268.147139][ T7913] fuse: Bad value for 'user_id' [ 269.079462][ T7921] trusted_key: syz.0.754 sent an empty control message without MSG_MORE. [ 270.116921][ T58] usb 18-1: device descriptor read/8, error -110 [ 270.537867][ T58] usb usb18-port1: attempt power cycle [ 271.095034][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 271.178191][ T58] usb usb18-port1: unable to enumerate USB device [ 271.246125][ T39] kauditd_printk_skb: 82 callbacks suppressed [ 271.246138][ T39] audit: type=1326 audit(1726597531.915:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.1.760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7fc00000 [ 271.255874][ T39] audit: type=1326 audit(1726597531.915:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.1.760" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ae579 code=0x7fc00000 [ 271.262784][ T39] audit: type=1326 audit(1726597531.915:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.1.760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7fc00000 [ 271.268447][ T39] audit: type=1326 audit(1726597531.915:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.1.760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7fc00000 [ 271.273887][ T39] audit: type=1326 audit(1726597531.915:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.1.760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7fc00000 [ 271.567749][ T7969] netlink: 92 bytes leftover after parsing attributes in process `syz.1.769'. [ 271.570877][ T7969] netlink: 92 bytes leftover after parsing attributes in process `syz.1.769'. [ 271.901474][ T7970] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 271.903269][ T7970] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 271.965944][ T7970] vhci_hcd vhci_hcd.0: Device attached [ 272.187692][ T7980] program syz.0.771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.294548][ T58] usb 16-1: SetAddress Request (18) to port 0 [ 272.300708][ T58] usb 16-1: new SuperSpeed USB device number 18 using vhci_hcd [ 272.371049][ T7974] vhci_hcd: connection reset by peer [ 272.390311][ T75] vhci_hcd: stop threads [ 272.393272][ T75] vhci_hcd: release socket [ 272.400154][ T75] vhci_hcd: disconnect device [ 272.427501][ T39] audit: type=1326 audit(1726597533.095:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.0.772" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x0 [ 273.326534][ T7988] netlink: 232 bytes leftover after parsing attributes in process `syz.1.773'. [ 273.336908][ T7988] netlink: 72 bytes leftover after parsing attributes in process `syz.1.773'. [ 273.914183][ T7998] bridge0: port 3(syz_tun) entered blocking state [ 273.916431][ T7998] bridge0: port 3(syz_tun) entered disabled state [ 273.919831][ T7998] syz_tun: entered allmulticast mode [ 273.923667][ T7998] syz_tun: entered promiscuous mode [ 273.925390][ T7998] bridge0: port 3(syz_tun) entered blocking state [ 273.927210][ T7998] bridge0: port 3(syz_tun) entered forwarding state [ 273.963127][ T39] audit: type=1326 audit(1726597534.635:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7993 comm="syz.2.776" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x0 [ 275.615208][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'. [ 275.629536][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'. [ 277.396873][ T58] usb 16-1: device descriptor read/8, error -110 [ 277.759344][ T8045] netlink: 232 bytes leftover after parsing attributes in process `syz.0.789'. [ 277.762356][ T8045] netlink: 72 bytes leftover after parsing attributes in process `syz.0.789'. [ 277.828895][ T58] usb usb16-port1: attempt power cycle [ 278.327803][ T8053] netlink: 'syz.2.792': attribute type 4 has an invalid length. [ 278.468018][ T58] usb usb16-port1: unable to enumerate USB device [ 278.902169][ T8067] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 279.591821][ T8072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.798'. [ 279.594180][ T8072] netlink: 'syz.0.798': attribute type 7 has an invalid length. [ 279.596178][ T8072] netlink: 'syz.0.798': attribute type 8 has an invalid length. [ 279.598264][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'. [ 279.604814][ T8072] gretap0: entered promiscuous mode [ 279.608507][ T8072] batadv_slave_1: entered promiscuous mode [ 279.610951][ T8072] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 279.613056][ T8072] Cannot create hsr debugfs directory [ 279.669966][ T8074] openvswitch: netlink: Missing key (keys=44, expected=2000) [ 279.675836][ T8076] openvswitch: netlink: Missing key (keys=44, expected=2000) [ 280.628259][ T8133] netlink: 232 bytes leftover after parsing attributes in process `syz.2.809'. [ 280.632152][ T8133] netlink: 72 bytes leftover after parsing attributes in process `syz.2.809'. [ 280.947215][ T8156] vcan0: Master is either lo or non-ether device [ 280.971351][ T8158] openvswitch: netlink: Missing key (keys=44, expected=2000) [ 281.857394][ T8189] openvswitch: netlink: Missing key (keys=44, expected=2000) [ 281.901904][ T39] audit: type=1326 audit(1726597542.575:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.2.813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7fc00000 [ 281.947904][ T8191] netlink: 92 bytes leftover after parsing attributes in process `syz.2.824'. [ 281.950875][ T8191] netlink: 92 bytes leftover after parsing attributes in process `syz.2.824'. [ 282.059526][ T8192] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 282.061323][ T8192] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 282.074423][ T8192] vhci_hcd vhci_hcd.0: Device attached [ 282.122949][ T8198] netlink: 'syz.0.826': attribute type 7 has an invalid length. [ 282.153046][ T8200] input: syz0 as /devices/virtual/input/input8 [ 282.186679][ T5367] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 282.192544][ T8193] vhci_hcd: connection closed [ 282.197310][ T75] vhci_hcd: stop threads [ 282.200654][ T75] vhci_hcd: release socket [ 282.201974][ T75] vhci_hcd: disconnect device [ 282.412151][ T8212] fuse: Unknown parameter '' [ 282.416054][ T8212] netlink: 232 bytes leftover after parsing attributes in process `syz.0.829'. [ 282.419720][ T8212] netlink: 72 bytes leftover after parsing attributes in process `syz.0.829'. [ 282.904433][ T8221] netlink: 'syz.2.833': attribute type 2 has an invalid length. [ 282.908141][ T8221] netlink: 36 bytes leftover after parsing attributes in process `syz.2.833'. [ 282.956771][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'. [ 283.118314][ T8231] xt_hashlimit: Unknown mode mask 38020000, kernel too old? [ 283.254962][ T39] audit: type=1326 audit(1726597543.925:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.3.836" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x0 [ 283.985085][ T8248] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 283.988825][ T8248] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 285.158049][ T8256] mkiss: ax0: crc mode is auto. [ 285.237198][ T5367] Bluetooth: hci0: command 0x0406 tx timeout [ 285.864840][ T8265] tmpfs: Bad value for 'huge' [ 286.444307][ T8278] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 288.788824][ T8303] netlink: 'syz.1.858': attribute type 33 has an invalid length. [ 289.116794][ T58] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 289.308858][ T58] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 289.316418][ T58] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 289.330077][ T58] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 289.338793][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.354434][ T8303] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 289.356369][ T8311] __nla_validate_parse: 2 callbacks suppressed [ 289.356379][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'. [ 289.362987][ T8311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.859'. [ 289.370350][ T58] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 289.615274][ T58] usb 6-1: USB disconnect, device number 9 [ 289.626929][ T8303] FAULT_INJECTION: forcing a failure. [ 289.626929][ T8303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.636668][ T8303] CPU: 1 UID: 0 PID: 8303 Comm: syz.1.858 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 289.639546][ T8303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 289.642356][ T8303] Call Trace: [ 289.643297][ T8303] [ 289.644133][ T8303] dump_stack_lvl+0x16c/0x1f0 [ 289.645473][ T8303] should_fail_ex+0x497/0x5b0 [ 289.646820][ T8303] _copy_to_user+0x30/0xc0 [ 289.648645][ T8303] simple_read_from_buffer+0xd0/0x160 [ 289.650592][ T8303] proc_fail_nth_read+0x198/0x270 [ 289.651969][ T8303] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.653470][ T8303] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.654942][ T8303] vfs_read+0x1ce/0xbd0 [ 289.656104][ T8303] ? __fdget_pos+0xe8/0x170 [ 289.657370][ T8303] ? __pfx_vfs_read+0x10/0x10 [ 289.658658][ T8303] ? __pfx___mutex_lock+0x10/0x10 [ 289.659995][ T8303] ? __fget_files+0x244/0x3f0 [ 289.661255][ T8303] ksys_read+0x12f/0x260 [ 289.662412][ T8303] ? __pfx_ksys_read+0x10/0x10 [ 289.663701][ T8303] __do_fast_syscall_32+0x73/0x120 [ 289.665089][ T8303] do_fast_syscall_32+0x32/0x80 [ 289.666408][ T8303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.668351][ T8303] RIP: 0023:0xf73ae579 [ 289.669620][ T8303] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 289.675441][ T8303] RSP: 002b:00000000f56965a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 289.678003][ T8303] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f5696620 [ 289.680412][ T8303] RDX: 000000000000000f RSI: 00000000f739bff4 RDI: 0000000000000000 [ 289.682713][ T8303] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 289.685104][ T8303] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 289.687488][ T8303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.689884][ T8303] [ 290.992206][ T5367] Bluetooth: hci1: link tx timeout [ 290.993876][ T5367] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 290.999213][ T4780] Bluetooth: hci1: link tx timeout [ 291.001472][ T4780] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 291.004529][ T4780] Bluetooth: hci1: link tx timeout [ 291.006405][ T4780] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 291.009663][ T4780] Bluetooth: hci1: link tx timeout [ 291.011645][ T4780] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 291.014422][ T4780] Bluetooth: hci1: link tx timeout [ 291.016297][ T4780] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 291.019157][ T4780] Bluetooth: hci1: link tx timeout [ 291.021029][ T4780] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 291.023813][ T4780] Bluetooth: hci1: link tx timeout [ 291.025648][ T4780] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 291.028544][ T4780] Bluetooth: hci1: link tx timeout [ 291.030440][ T4780] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 291.233073][ T8344] FAULT_INJECTION: forcing a failure. [ 291.233073][ T8344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.255467][ T8344] CPU: 1 UID: 0 PID: 8344 Comm: syz.2.869 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 291.258200][ T8344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.261002][ T8344] Call Trace: [ 291.261919][ T8344] [ 291.262715][ T8344] dump_stack_lvl+0x16c/0x1f0 [ 291.263970][ T8344] should_fail_ex+0x497/0x5b0 [ 291.265224][ T8344] _copy_from_user+0x30/0xf0 [ 291.266466][ T8344] memdup_user+0x71/0xd0 [ 291.267556][ T8344] strndup_user+0x78/0xe0 [ 291.268724][ T8344] __ia32_sys_mount+0x181/0x310 [ 291.270083][ T8344] ? __pfx___ia32_sys_mount+0x10/0x10 [ 291.271534][ T8344] __do_fast_syscall_32+0x73/0x120 [ 291.272879][ T8344] do_fast_syscall_32+0x32/0x80 [ 291.274172][ T8344] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.275855][ T8344] RIP: 0023:0xf7fd7579 [ 291.276924][ T8344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 291.281903][ T8344] RSP: 002b:00000000f573556c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 291.284224][ T8344] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000020000040 [ 291.286346][ T8344] RDX: 0000000000000000 RSI: 0000000000001001 RDI: 0000000000000000 [ 291.288553][ T8344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.290726][ T8344] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 291.292827][ T8344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.294938][ T8344] [ 291.640095][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.873'. [ 291.643578][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.873'. [ 291.874924][ T8364] netlink: 'syz.3.877': attribute type 2 has an invalid length. [ 291.878796][ T8364] netlink: 36 bytes leftover after parsing attributes in process `syz.3.877'. [ 291.977962][ T5349] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 292.166678][ T5349] usb 7-1: too many configurations: 65, using maximum allowed: 8 [ 292.198930][ T5349] usb 7-1: config 0 has no interfaces? [ 292.201576][ T5349] usb 7-1: config 0 has no interfaces? [ 292.206613][ T5349] usb 7-1: config 0 has no interfaces? [ 292.227538][ T5349] usb 7-1: config 0 has no interfaces? [ 292.230804][ T5349] usb 7-1: config 0 has no interfaces? [ 292.233509][ T5349] usb 7-1: config 0 has no interfaces? [ 292.236166][ T5349] usb 7-1: config 0 has no interfaces? [ 292.241950][ T5349] usb 7-1: config 0 has no interfaces? [ 292.243735][ T5349] usb 7-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 292.246484][ T5349] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.260930][ T5349] usb 7-1: config 0 descriptor?? [ 292.431553][ T8380] fuse: Bad value for 'user_id' [ 292.433453][ T8380] fuse: Bad value for 'user_id' [ 292.559336][ T8358] hid-generic 0003:0627:0001.0003: pid 8358 passed too large report [ 292.567795][ T8358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.572104][ T8358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.650123][ T8384] FAULT_INJECTION: forcing a failure. [ 292.650123][ T8384] name failslab, interval 1, probability 0, space 0, times 0 [ 292.653521][ T8384] CPU: 1 UID: 0 PID: 8384 Comm: syz.1.883 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 292.656241][ T8384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 292.659063][ T8384] Call Trace: [ 292.659951][ T8384] [ 292.660735][ T8384] dump_stack_lvl+0x16c/0x1f0 [ 292.662155][ T8384] should_fail_ex+0x497/0x5b0 [ 292.663395][ T8384] ? fs_reclaim_acquire+0xae/0x160 [ 292.664748][ T8384] should_failslab+0xc2/0x120 [ 292.665991][ T8384] __kmalloc_noprof+0xcb/0x410 [ 292.667273][ T8384] mpi_alloc_limb_space+0x31/0x60 [ 292.668818][ T8384] mpi_alloc+0x199/0x230 [ 292.669937][ T8384] mpi_read_raw_data+0x133/0x4a0 [ 292.671253][ T8384] ? crypto_dh_decode_key+0x3d1/0x490 [ 292.672658][ T8384] ? trace_kmalloc+0x2d/0xe0 [ 292.673887][ T8384] dh_set_secret+0x197/0x410 [ 292.675119][ T8384] ? __pfx_dh_set_secret+0x10/0x10 [ 292.676464][ T8384] ? crypto_alloc_tfmmem.isra.0+0xd2/0x110 [ 292.678036][ T8384] ? crypto_alloc_tfm_node+0x126/0x260 [ 292.679470][ T8384] __keyctl_dh_compute+0x4ec/0xf50 [ 292.680976][ T8384] ? __pfx_lock_release+0x10/0x10 [ 292.682305][ T8384] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 292.683794][ T8384] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 292.685273][ T8384] ? __pfx_lock_release+0x10/0x10 [ 292.686620][ T8384] compat_keyctl_dh_compute+0x161/0x1d0 [ 292.688069][ T8384] ? __pfx_compat_keyctl_dh_compute+0x10/0x10 [ 292.689653][ T8384] ? __fget_files+0x244/0x3f0 [ 292.690901][ T8384] ? ksys_write+0x1ab/0x260 [ 292.692098][ T8384] ? __pfx_ksys_write+0x10/0x10 [ 292.693386][ T8384] __do_compat_sys_keyctl+0x27b/0x440 [ 292.694800][ T8384] __do_fast_syscall_32+0x73/0x120 [ 292.696161][ T8384] do_fast_syscall_32+0x32/0x80 [ 292.697446][ T8384] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.699111][ T8384] RIP: 0023:0xf73ae579 [ 292.700186][ T8384] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 292.705485][ T8384] RSP: 002b:00000000f569656c EFLAGS: 00000296 ORIG_RAX: 0000000000000120 [ 292.707604][ T8384] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000020000100 [ 292.709650][ T8384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 292.711723][ T8384] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 292.713767][ T8384] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 292.715814][ T8384] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.717876][ T8384] [ 292.796522][ T58] usb 7-1: USB disconnect, device number 7 [ 293.019806][ T8389] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 293.054931][ T8389] 9pnet_fd: Insufficient options for proto=fd [ 293.077098][ T4780] Bluetooth: hci1: command 0x0406 tx timeout [ 293.491918][ T39] audit: type=1326 audit(1726597554.165:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.2.885" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 293.504050][ T39] audit: type=1326 audit(1726597554.165:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.2.885" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 293.523192][ T39] audit: type=1326 audit(1726597554.165:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.2.885" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 293.534355][ T39] audit: type=1326 audit(1726597554.165:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.2.885" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 293.543059][ T39] audit: type=1326 audit(1726597554.165:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.2.885" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 293.555436][ T39] audit: type=1326 audit(1726597554.165:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.2.885" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 293.564768][ T39] audit: type=1326 audit(1726597554.205:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.2.885" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 293.575844][ T39] audit: type=1326 audit(1726597554.205:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.2.885" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 293.586524][ T39] audit: type=1326 audit(1726597554.205:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.2.885" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 293.597008][ T39] audit: type=1326 audit(1726597554.215:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.2.885" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 294.909697][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.889'. [ 295.181675][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 295.189931][ T8412] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 295.192690][ T8412] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 295.956828][ T5484] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 296.106841][ T5484] usb 5-1: device descriptor read/64, error -71 [ 296.376825][ T5484] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 296.536889][ T5484] usb 5-1: device descriptor read/64, error -71 [ 296.657156][ T5484] usb usb5-port1: attempt power cycle [ 296.731704][ T8437] FAULT_INJECTION: forcing a failure. [ 296.731704][ T8437] name failslab, interval 1, probability 0, space 0, times 0 [ 296.738689][ T8437] CPU: 1 UID: 0 PID: 8437 Comm: syz.2.901 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 296.741482][ T8437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 296.744314][ T8437] Call Trace: [ 296.745220][ T8437] [ 296.746309][ T8437] dump_stack_lvl+0x16c/0x1f0 [ 296.748040][ T8437] should_fail_ex+0x497/0x5b0 [ 296.749396][ T8437] ? fs_reclaim_acquire+0xae/0x160 [ 296.750788][ T8437] should_failslab+0xc2/0x120 [ 296.752064][ T8437] __kmalloc_node_noprof+0xd1/0x440 [ 296.753467][ T8437] ? __kvmalloc_node_noprof+0x9d/0x1a0 [ 296.755034][ T8437] __kvmalloc_node_noprof+0x9d/0x1a0 [ 296.756503][ T8437] nf_tables_commit+0xa8a/0x5e20 [ 296.757836][ T8437] ? __pfx_nf_tables_commit+0x10/0x10 [ 296.759367][ T8437] ? __pfx_nf_tables_newrule+0x10/0x10 [ 296.760800][ T8437] ? net_generic+0xea/0x2a0 [ 296.762088][ T8437] ? __pfx_lock_release+0x10/0x10 [ 296.763452][ T8437] ? __nla_parse+0x40/0x60 [ 296.764661][ T8437] nfnetlink_rcv_batch+0xa52/0x24e0 [ 296.766129][ T8437] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 296.767628][ T8437] ? __pfx_lock_release+0x10/0x10 [ 296.769020][ T8437] ? __local_bh_enable_ip+0xa4/0x120 [ 296.770538][ T8437] ? lockdep_hardirqs_on+0x7c/0x110 [ 296.771958][ T8437] ? __pfx___dev_queue_xmit+0x10/0x10 [ 296.773448][ T8437] ? __nla_parse+0x40/0x60 [ 296.774826][ T8437] nfnetlink_rcv+0x3c3/0x430 [ 296.776611][ T8437] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 296.778739][ T8437] netlink_unicast+0x53c/0x7f0 [ 296.780418][ T8437] ? __pfx_netlink_unicast+0x10/0x10 [ 296.782265][ T8437] ? __phys_addr_symbol+0x30/0x80 [ 296.783944][ T8437] ? __check_object_size+0x497/0x720 [ 296.785714][ T8437] netlink_sendmsg+0x8b8/0xd70 [ 296.787314][ T8437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.789220][ T8437] ____sys_sendmsg+0x9ae/0xb40 [ 296.790972][ T8437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.792731][ T8437] ? get_compat_msghdr+0x11b/0x170 [ 296.794151][ T8437] ? __pfx___lock_acquire+0x10/0x10 [ 296.795706][ T8437] ___sys_sendmsg+0x135/0x1e0 [ 296.797512][ T8437] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.799443][ T8437] ? find_held_lock+0x2d/0x110 [ 296.800778][ T8437] ? ksys_write+0x21c/0x260 [ 296.801971][ T8437] ? __fget_light+0x173/0x210 [ 296.803236][ T8437] __sys_sendmsg+0x117/0x1f0 [ 296.804439][ T8437] ? __pfx___sys_sendmsg+0x10/0x10 [ 296.805752][ T8437] __do_fast_syscall_32+0x73/0x120 [ 296.807054][ T8437] do_fast_syscall_32+0x32/0x80 [ 296.808288][ T8437] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 296.809897][ T8437] RIP: 0023:0xf7fd7579 [ 296.810956][ T8437] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 296.816119][ T8437] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 296.818841][ T8437] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000500 [ 296.820981][ T8437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.823441][ T8437] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 296.825590][ T8437] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 296.827708][ T8437] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 296.829816][ T8437] [ 297.138573][ T5484] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 297.167641][ T5484] usb 5-1: device descriptor read/8, error -71 [ 297.439880][ T5484] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 297.470731][ T5484] usb 5-1: device descriptor read/8, error -71 [ 297.597158][ T5484] usb usb5-port1: unable to enumerate USB device [ 297.974075][ T8459] FAULT_INJECTION: forcing a failure. [ 297.974075][ T8459] name failslab, interval 1, probability 0, space 0, times 0 [ 298.017464][ T8459] CPU: 1 UID: 0 PID: 8459 Comm: syz.3.909 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 298.020664][ T8459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.024165][ T8459] Call Trace: [ 298.025081][ T8459] [ 298.025904][ T8459] dump_stack_lvl+0x16c/0x1f0 [ 298.027546][ T8459] should_fail_ex+0x497/0x5b0 [ 298.029027][ T8459] ? fs_reclaim_acquire+0xae/0x160 [ 298.030744][ T8459] should_failslab+0xc2/0x120 [ 298.032056][ T8459] __kmalloc_node_track_caller_noprof+0xcf/0x440 [ 298.033744][ T8459] ? alloc_trial_cpuset+0x1e/0x230 [ 298.035240][ T8459] kmemdup_noprof+0x29/0x60 [ 298.036489][ T8459] alloc_trial_cpuset+0x1e/0x230 [ 298.037803][ T8459] cpuset_write_resmask+0x2cb/0x3890 [ 298.039342][ T8459] ? __pfx___lock_acquire+0x10/0x10 [ 298.040887][ T8459] ? __pfx_cpuset_write_resmask+0x10/0x10 [ 298.042890][ T8459] ? __pfx_lock_acquire+0x10/0x10 [ 298.044314][ T8459] cgroup_file_write+0x211/0x7d0 [ 298.045784][ T8459] ? __pfx_cpuset_write_resmask+0x10/0x10 [ 298.047673][ T8459] ? __pfx_cgroup_file_write+0x10/0x10 [ 298.049533][ T8459] kernfs_fop_write_iter+0x33d/0x500 [ 298.051055][ T8459] ? __pfx_cgroup_file_write+0x10/0x10 [ 298.052652][ T8459] iter_file_splice_write+0x90f/0x10b0 [ 298.054227][ T8459] ? __pfx_iter_file_splice_write+0x10/0x10 [ 298.056451][ T8459] ? __pfx_lock_acquire+0x10/0x10 [ 298.058358][ T8459] ? __pfx_iter_file_splice_write+0x10/0x10 [ 298.060522][ T8459] direct_splice_actor+0x18f/0x6c0 [ 298.062059][ T8459] splice_direct_to_actor+0x346/0xa40 [ 298.064011][ T8459] ? __pfx_direct_splice_actor+0x10/0x10 [ 298.065658][ T8459] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 298.067577][ T8459] ? __fget_files+0x23a/0x3f0 [ 298.068952][ T8459] ? __pfx_lock_release+0x10/0x10 [ 298.070917][ T8459] do_splice_direct+0x178/0x250 [ 298.072725][ T8459] ? __pfx_do_splice_direct+0x10/0x10 [ 298.074491][ T8459] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 298.076331][ T8459] do_sendfile+0xb0a/0xe40 [ 298.077674][ T8459] ? __pfx_do_sendfile+0x10/0x10 [ 298.079380][ T8459] __ia32_compat_sys_sendfile+0x1e7/0x230 [ 298.081305][ T8459] ? ksys_write+0x1ab/0x260 [ 298.082944][ T8459] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 298.085426][ T8459] __do_fast_syscall_32+0x73/0x120 [ 298.087377][ T8459] do_fast_syscall_32+0x32/0x80 [ 298.089133][ T8459] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.091274][ T8459] RIP: 0023:0xf7f65579 [ 298.092695][ T8459] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.098509][ T8459] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 298.101109][ T8459] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 298.103525][ T8459] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000 [ 298.105754][ T8459] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.108265][ T8459] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 298.110922][ T8459] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.113144][ T8459] [ 298.174053][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.910'. [ 298.380510][ T8473] FAULT_INJECTION: forcing a failure. [ 298.380510][ T8473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.383951][ T8473] CPU: 2 UID: 0 PID: 8473 Comm: syz.3.914 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 298.387003][ T8473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.390180][ T8473] Call Trace: [ 298.391338][ T8473] [ 298.392372][ T8473] dump_stack_lvl+0x16c/0x1f0 [ 298.393939][ T8473] should_fail_ex+0x497/0x5b0 [ 298.395262][ T8473] _copy_from_user+0x30/0xf0 [ 298.396524][ T8473] get_compat_msghdr+0xa8/0x170 [ 298.397823][ T8473] ? __pfx_get_compat_msghdr+0x10/0x10 [ 298.399278][ T8473] ? __pfx___lock_acquire+0x10/0x10 [ 298.400725][ T8473] ___sys_sendmsg+0x1b0/0x1e0 [ 298.401984][ T8473] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.403382][ T8473] ? find_held_lock+0x2d/0x110 [ 298.404645][ T8473] ? ksys_write+0x21c/0x260 [ 298.405864][ T8473] ? __fget_light+0x173/0x210 [ 298.407137][ T8473] __sys_sendmsg+0x117/0x1f0 [ 298.408360][ T8473] ? __pfx___sys_sendmsg+0x10/0x10 [ 298.409719][ T8473] __do_fast_syscall_32+0x73/0x120 [ 298.411088][ T8473] do_fast_syscall_32+0x32/0x80 [ 298.412373][ T8473] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.414037][ T8473] RIP: 0023:0xf7f65579 [ 298.415112][ T8473] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.420211][ T8473] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 298.422387][ T8473] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000340 [ 298.424447][ T8473] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.426457][ T8473] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.428523][ T8473] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 298.430634][ T8473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.432714][ T8473] [ 298.800801][ T8483] GUP no longer grows the stack in syz.1.917 (8483): 20004000-2000a000 (20002000) [ 298.812964][ T8483] CPU: 1 UID: 0 PID: 8483 Comm: syz.1.917 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 298.815899][ T8483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.818960][ T8483] Call Trace: [ 298.819807][ T8483] [ 298.820613][ T8483] dump_stack_lvl+0x16c/0x1f0 [ 298.821904][ T8483] gup_vma_lookup+0x1d2/0x220 [ 298.823134][ T8483] __get_user_pages+0x261/0x15c0 [ 298.824501][ T8483] ? __pfx___get_user_pages+0x10/0x10 [ 298.826216][ T8483] get_user_pages_remote+0x25e/0xb30 [ 298.828114][ T8483] ? __pfx_get_user_pages_remote+0x10/0x10 [ 298.829639][ T8483] __access_remote_vm+0x3f0/0x920 [ 298.830962][ T8483] ? __pfx___access_remote_vm+0x10/0x10 [ 298.832385][ T8483] proc_pid_cmdline_read+0x4f4/0x8d0 [ 298.833749][ T8483] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 298.835362][ T8483] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 298.837224][ T8483] vfs_readv+0x6bf/0x890 [ 298.838367][ T8483] ? __pfx_vfs_readv+0x10/0x10 [ 298.839576][ T8483] ? find_held_lock+0x2d/0x110 [ 298.840819][ T8483] ? __pfx_lock_release+0x10/0x10 [ 298.842120][ T8483] ? __fget_files+0x244/0x3f0 [ 298.843367][ T8483] ? do_preadv+0x1b2/0x260 [ 298.844544][ T8483] do_preadv+0x1b2/0x260 [ 298.846112][ T8483] ? __pfx_do_preadv+0x10/0x10 [ 298.847591][ T8483] __do_fast_syscall_32+0x73/0x120 [ 298.848943][ T8483] do_fast_syscall_32+0x32/0x80 [ 298.850221][ T8483] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.851853][ T8483] RIP: 0023:0xf73ae579 [ 298.852895][ T8483] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.858974][ T8483] RSP: 002b:00000000f569656c EFLAGS: 00000296 ORIG_RAX: 000000000000014d [ 298.861582][ T8483] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000040 [ 298.863965][ T8483] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000000 [ 298.866592][ T8483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.868761][ T8483] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 298.871001][ T8483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.873107][ T8483] [ 299.206877][ T58] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 299.406801][ T58] usb 6-1: Using ep0 maxpacket: 8 [ 299.409713][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 299.413037][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 299.416656][ T58] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 299.427670][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.471360][ T58] usb 6-1: config 0 descriptor?? [ 299.695604][ T58] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 299.892180][ T8483] iowarrior 6-1:0.0: Error -90 while submitting URB [ 299.896071][ T1426] usb 6-1: USB disconnect, device number 10 [ 299.899850][ T1426] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 299.930630][ T8510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.927'. [ 299.998882][ T8514] overlayfs: failed to resolve './file1': -2 [ 300.103275][ T8516] netlink: 232 bytes leftover after parsing attributes in process `syz.3.926'. [ 300.106398][ T8516] netlink: 72 bytes leftover after parsing attributes in process `syz.3.926'. [ 300.914313][ T8524] openvswitch: netlink: Missing key (keys=44, expected=2000) [ 301.552788][ T8537] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 301.555175][ T8537] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 301.683182][ T8540] netlink: 'syz.0.935': attribute type 33 has an invalid length. [ 302.067966][ T57] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 302.269963][ T57] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 302.273181][ T57] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 302.276244][ T57] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 302.296964][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.303408][ T8540] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 302.324055][ T57] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 302.476027][ T8550] FAULT_INJECTION: forcing a failure. [ 302.476027][ T8550] name failslab, interval 1, probability 0, space 0, times 0 [ 302.492403][ T8550] CPU: 2 UID: 0 PID: 8550 Comm: syz.3.938 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 302.496593][ T8550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.500567][ T8550] Call Trace: [ 302.501762][ T8550] [ 302.502825][ T8550] dump_stack_lvl+0x16c/0x1f0 [ 302.504497][ T8550] should_fail_ex+0x497/0x5b0 [ 302.506160][ T8550] ? fs_reclaim_acquire+0xae/0x160 [ 302.507905][ T8550] should_failslab+0xc2/0x120 [ 302.509547][ T8550] __kmalloc_noprof+0xcb/0x410 [ 302.511257][ T8550] sock_kmalloc+0x111/0x170 [ 302.512868][ T8550] af_alg_sendmsg+0x14a9/0x2a80 [ 302.514623][ T8550] ? skcipher_check_key.isra.0+0x78/0x1e0 [ 302.516708][ T8550] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 302.518725][ T8550] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 302.520715][ T8550] ? skcipher_check_key.isra.0+0x78/0x1e0 [ 302.522802][ T8550] ? __local_bh_enable_ip+0xa4/0x120 [ 302.524667][ T8550] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.526517][ T8550] ? skcipher_check_key.isra.0+0x78/0x1e0 [ 302.528523][ T8550] ? __local_bh_enable_ip+0xa4/0x120 [ 302.530416][ T8550] skcipher_sendmsg_nokey+0x12c/0x190 [ 302.532325][ T8550] __sys_sendto+0x479/0x4d0 [ 302.534062][ T8550] ? __pfx___sys_sendto+0x10/0x10 [ 302.535863][ T8550] ? __fget_files+0x244/0x3f0 [ 302.537551][ T8550] ? ksys_write+0x1ab/0x260 [ 302.539184][ T8550] ? __pfx_ksys_write+0x10/0x10 [ 302.540903][ T8550] __ia32_sys_sendto+0xdd/0x1b0 [ 302.542756][ T8550] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.544715][ T8550] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 302.547249][ T8550] __do_fast_syscall_32+0x73/0x120 [ 302.549188][ T8550] do_fast_syscall_32+0x32/0x80 [ 302.550923][ T8550] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.553131][ T8550] RIP: 0023:0xf7f65579 [ 302.554579][ T8550] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 302.561664][ T8550] RSP: 002b:00000000f56c556c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 302.565027][ T8550] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000080 [ 302.567882][ T8550] RDX: 00000000ffffff9d RSI: 0000000000000000 RDI: 0000000000000000 [ 302.570729][ T8550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.573502][ T8550] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 302.576333][ T8550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.579321][ T8550] [ 302.659292][ T835] usb 5-1: USB disconnect, device number 11 [ 302.665863][ T5367] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 302.668808][ T5367] CPU: 0 UID: 0 PID: 5367 Comm: kworker/u33:3 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 302.671564][ T5367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.674360][ T5367] Workqueue: hci2 hci_rx_work [ 302.675649][ T5367] Call Trace: [ 302.676526][ T5367] [ 302.677324][ T5367] dump_stack_lvl+0x16c/0x1f0 [ 302.678586][ T5367] sysfs_warn_dup+0x7f/0xa0 [ 302.679789][ T5367] sysfs_create_dir_ns+0x24d/0x2b0 [ 302.681336][ T5367] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 302.682891][ T5367] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 302.684314][ T5367] ? do_raw_spin_unlock+0x172/0x230 [ 302.685689][ T5367] kobject_add_internal+0x2c8/0x990 [ 302.687106][ T5367] kobject_add+0x16f/0x240 [ 302.688390][ T5367] ? __pfx_kobject_add+0x10/0x10 [ 302.689781][ T5367] ? do_raw_spin_unlock+0x172/0x230 [ 302.691460][ T5367] ? kobject_put+0xab/0x5a0 [ 302.692668][ T5367] device_add+0x289/0x1a70 [ 302.693885][ T5367] ? __pfx_dev_set_name+0x10/0x10 [ 302.695637][ T5367] ? __pfx_device_add+0x10/0x10 [ 302.697187][ T5367] ? mgmt_send_event_skb+0x2f2/0x460 [ 302.698845][ T5367] hci_conn_add_sysfs+0x17e/0x230 [ 302.700318][ T5367] le_conn_complete_evt+0xfc7/0x1cf0 [ 302.702174][ T5367] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 302.703914][ T5367] ? trace_contention_end+0xea/0x140 [ 302.705858][ T5367] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 302.708007][ T5367] ? skb_pull_data+0x166/0x210 [ 302.709744][ T5367] hci_le_meta_evt+0x2e2/0x5d0 [ 302.711441][ T5367] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 302.713587][ T5367] hci_event_packet+0x666/0x1190 [ 302.714908][ T5367] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 302.716342][ T5367] ? __pfx_hci_event_packet+0x10/0x10 [ 302.717752][ T5367] ? mark_held_locks+0x9f/0xe0 [ 302.719012][ T5367] ? kcov_remote_start+0x3cf/0x6e0 [ 302.720671][ T5367] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.722583][ T5367] hci_rx_work+0x2c6/0x1610 [ 302.724283][ T5367] process_one_work+0x958/0x1ad0 [ 302.726209][ T5367] ? __pfx_lock_acquire+0x10/0x10 [ 302.727703][ T5367] ? __pfx_process_one_work+0x10/0x10 [ 302.729154][ T5367] ? assign_work+0x1a0/0x250 [ 302.730392][ T5367] worker_thread+0x6c8/0xf00 [ 302.731655][ T5367] ? __pfx_worker_thread+0x10/0x10 [ 302.732999][ T5367] kthread+0x2c1/0x3a0 [ 302.734121][ T5367] ? _raw_spin_unlock_irq+0x23/0x50 [ 302.735498][ T5367] ? __pfx_kthread+0x10/0x10 [ 302.736720][ T5367] ret_from_fork+0x45/0x80 [ 302.737924][ T5367] ? __pfx_kthread+0x10/0x10 [ 302.739157][ T5367] ret_from_fork_asm+0x1a/0x30 [ 302.740390][ T5367] [ 302.742066][ T5367] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 302.746059][ T5367] Bluetooth: hci2: failed to register connection device [ 303.111124][ T5367] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 304.280355][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'. [ 304.284018][ T8568] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 304.288067][ T8568] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 304.321126][ T8569] syz.3.941: attempt to access beyond end of device [ 304.321126][ T8569] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 304.327337][ T8569] SQUASHFS error: Failed to read block 0x0: -5 [ 304.329339][ T8569] unable to read squashfs_super_block [ 304.770508][ T5367] Bluetooth: hci2: command tx timeout [ 305.387404][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 306.509019][ T8601] kernel profiling enabled (shift: 9) [ 306.517213][ T8601] overlayfs: failed to resolve './file0/file0': -13 [ 306.746626][ T8608] FAULT_INJECTION: forcing a failure. [ 306.746626][ T8608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.751273][ T8608] CPU: 1 UID: 0 PID: 8608 Comm: syz.0.953 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 306.754322][ T8608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 306.758333][ T8608] Call Trace: [ 306.759517][ T8608] [ 306.760545][ T8608] dump_stack_lvl+0x16c/0x1f0 [ 306.762185][ T8608] should_fail_ex+0x497/0x5b0 [ 306.763724][ T8608] _copy_to_user+0x30/0xc0 [ 306.765154][ T8608] simple_read_from_buffer+0xd0/0x160 [ 306.766803][ T8608] proc_fail_nth_read+0x198/0x270 [ 306.768293][ T8608] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.769970][ T8608] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.771452][ T8608] vfs_read+0x1ce/0xbd0 [ 306.772646][ T8608] ? __fdget_pos+0xe8/0x170 [ 306.773894][ T8608] ? __pfx_vfs_read+0x10/0x10 [ 306.775458][ T8608] ? __pfx___mutex_lock+0x10/0x10 [ 306.777089][ T8608] ? __pfx_lock_release+0x10/0x10 [ 306.778553][ T8608] ? __fget_files+0x244/0x3f0 [ 306.780479][ T8608] ksys_read+0x12f/0x260 [ 306.782116][ T8608] ? __pfx_ksys_read+0x10/0x10 [ 306.783756][ T8608] ? rcu_is_watching+0x12/0xc0 [ 306.785378][ T8608] __do_fast_syscall_32+0x73/0x120 [ 306.787107][ T8608] do_fast_syscall_32+0x32/0x80 [ 306.788788][ T8608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 306.790956][ T8608] RIP: 0023:0xf7f13579 [ 306.792351][ T8608] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 306.798656][ T8608] RSP: 002b:00000000f56965a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 306.800862][ T8608] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5696620 [ 306.803437][ T8608] RDX: 000000000000000f RSI: 00000000f739bff4 RDI: 0000000000000000 [ 306.805610][ T8608] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 306.807724][ T8608] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 306.810216][ T8608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.812775][ T8608] [ 306.983517][ T8621] FAULT_INJECTION: forcing a failure. [ 306.983517][ T8621] name failslab, interval 1, probability 0, space 0, times 0 [ 306.988194][ T8621] CPU: 1 UID: 0 PID: 8621 Comm: syz.1.956 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 306.990995][ T8621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 306.993771][ T8621] Call Trace: [ 306.994671][ T8621] [ 306.995581][ T8621] dump_stack_lvl+0x16c/0x1f0 [ 306.997028][ T8621] should_fail_ex+0x497/0x5b0 [ 306.998399][ T8621] ? fs_reclaim_acquire+0xae/0x160 [ 307.000085][ T8621] should_failslab+0xc2/0x120 [ 307.001744][ T8621] kmem_cache_alloc_node_noprof+0x71/0x310 [ 307.003704][ T8621] ? __alloc_skb+0x2b3/0x380 [ 307.005253][ T8621] __alloc_skb+0x2b3/0x380 [ 307.006593][ T8621] ? __pfx___alloc_skb+0x10/0x10 [ 307.008194][ T8621] ? __pfx___might_resched+0x10/0x10 [ 307.009602][ T8621] netlink_alloc_large_skb+0x69/0x130 [ 307.011018][ T8621] netlink_sendmsg+0x689/0xd70 [ 307.012281][ T8621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.013677][ T8621] ____sys_sendmsg+0x9ae/0xb40 [ 307.014947][ T8621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.016369][ T8621] ? get_compat_msghdr+0x11b/0x170 [ 307.017785][ T8621] ? __pfx___lock_acquire+0x10/0x10 [ 307.019190][ T8621] ___sys_sendmsg+0x135/0x1e0 [ 307.020680][ T8621] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.022487][ T8621] ? find_held_lock+0x2d/0x110 [ 307.024215][ T8621] ? ksys_write+0x21c/0x260 [ 307.025890][ T8621] ? __fget_light+0x173/0x210 [ 307.027623][ T8621] __sys_sendmsg+0x117/0x1f0 [ 307.028980][ T8621] ? __pfx___sys_sendmsg+0x10/0x10 [ 307.030673][ T8621] __do_fast_syscall_32+0x73/0x120 [ 307.032517][ T8621] do_fast_syscall_32+0x32/0x80 [ 307.034055][ T8621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.036266][ T8621] RIP: 0023:0xf73ae579 [ 307.037727][ T8621] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 307.043479][ T8621] RSP: 002b:00000000f569656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 307.045709][ T8621] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000340 [ 307.047885][ T8621] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.050493][ T8621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.053399][ T8621] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 307.056283][ T8621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.059146][ T8621] [ 307.150352][ T39] kauditd_printk_skb: 85 callbacks suppressed [ 307.150362][ T39] audit: type=1326 audit(1726597567.825:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.3.954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 307.168061][ T39] audit: type=1326 audit(1726597567.835:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.3.954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 307.472219][ T8635] netlink: 68 bytes leftover after parsing attributes in process `syz.3.961'. [ 307.475594][ T8635] netlink: 68 bytes leftover after parsing attributes in process `syz.3.961'. [ 307.749480][ T8636] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 307.751710][ T8636] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 307.783222][ T8636] vhci_hcd vhci_hcd.0: Device attached [ 307.850490][ T8641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.962'. [ 307.894426][ T8638] vhci_hcd: connection closed [ 307.896332][ T45] vhci_hcd: stop threads [ 307.902311][ T45] vhci_hcd: release socket [ 307.907099][ T45] vhci_hcd: disconnect device [ 308.102132][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.963'. [ 308.360970][ T39] audit: type=1326 audit(1726597569.035:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.1.966" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73ae579 code=0x0 [ 308.685415][ T8662] syz.1.966: attempt to access beyond end of device [ 308.685415][ T8662] nbd1: rw=0, sector=16, nr_sectors = 8 limit=0 [ 308.747424][ T8662] REISERFS warning (device nbd1): sh-2006 read_super_block: bread failed (dev nbd1, block 2, size 4096) [ 308.797182][ T8662] syz.1.966: attempt to access beyond end of device [ 308.797182][ T8662] nbd1: rw=0, sector=128, nr_sectors = 8 limit=0 [ 308.867917][ T8662] REISERFS warning (device nbd1): sh-2006 read_super_block: bread failed (dev nbd1, block 16, size 4096) [ 308.878037][ T8670] netlink: 'syz.3.967': attribute type 2 has an invalid length. [ 308.880886][ T8670] netlink: 36 bytes leftover after parsing attributes in process `syz.3.967'. [ 308.888705][ T8662] REISERFS warning (device nbd1): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd1 [ 309.714636][ T8690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.973'. [ 310.846854][ T8705] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 310.897783][ T8705] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 311.267804][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 311.283081][ T8722] netlink: 72 bytes leftover after parsing attributes in process `syz.3.985'. [ 311.286023][ T8722] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 311.631886][ T8732] FAULT_INJECTION: forcing a failure. [ 311.631886][ T8732] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 311.636613][ T8732] CPU: 2 UID: 0 PID: 8732 Comm: syz.3.987 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 311.640221][ T8732] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 311.643948][ T8732] Call Trace: [ 311.645144][ T8732] [ 311.646202][ T8732] dump_stack_lvl+0x16c/0x1f0 [ 311.647848][ T8732] should_fail_ex+0x497/0x5b0 [ 311.649481][ T8732] ? fs_reclaim_acquire+0xae/0x160 [ 311.651285][ T8732] should_fail_alloc_page+0xe7/0x130 [ 311.652895][ T8732] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 311.654630][ T8732] ? __pfx_mark_lock+0x10/0x10 [ 311.656247][ T8732] __alloc_pages_noprof+0x194/0x2460 [ 311.658167][ T8732] ? kasan_save_track+0x14/0x30 [ 311.659934][ T8732] ? __kasan_kmalloc+0xaa/0xb0 [ 311.661673][ T8732] ? af_alg_sendmsg+0x14a9/0x2a80 [ 311.663517][ T8732] ? skcipher_sendmsg_nokey+0x12c/0x190 [ 311.665500][ T8732] ? __sys_sendto+0x479/0x4d0 [ 311.667159][ T8732] ? __ia32_sys_sendto+0xdd/0x1b0 [ 311.669016][ T8732] ? __do_fast_syscall_32+0x73/0x120 [ 311.670992][ T8732] ? do_fast_syscall_32+0x32/0x80 [ 311.672820][ T8732] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.675129][ T8732] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 311.677016][ T8732] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 311.679025][ T8732] ? policy_nodemask+0xea/0x4e0 [ 311.680786][ T8732] alloc_pages_mpol_noprof+0x275/0x610 [ 311.682770][ T8732] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 311.684965][ T8732] ? __kmalloc_noprof+0x207/0x410 [ 311.686821][ T8732] af_alg_sendmsg+0x110e/0x2a80 [ 311.688657][ T8732] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 311.690598][ T8732] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 311.692598][ T8732] ? skcipher_check_key.isra.0+0x78/0x1e0 [ 311.694739][ T8732] ? __local_bh_enable_ip+0xa4/0x120 [ 311.696689][ T8732] ? lockdep_hardirqs_on+0x7c/0x110 [ 311.698646][ T8732] ? skcipher_check_key.isra.0+0x78/0x1e0 [ 311.700858][ T8732] ? __local_bh_enable_ip+0xa4/0x120 [ 311.702879][ T8732] skcipher_sendmsg_nokey+0x12c/0x190 [ 311.704881][ T8732] __sys_sendto+0x479/0x4d0 [ 311.706598][ T8732] ? __pfx___sys_sendto+0x10/0x10 [ 311.708481][ T8732] ? __fget_files+0x244/0x3f0 [ 311.710152][ T8732] ? ksys_write+0x1ab/0x260 [ 311.711643][ T8732] ? __pfx_ksys_write+0x10/0x10 [ 311.713391][ T8732] __ia32_sys_sendto+0xdd/0x1b0 [ 311.715116][ T8732] ? lockdep_hardirqs_on+0x7c/0x110 [ 311.716951][ T8732] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 311.719297][ T8732] __do_fast_syscall_32+0x73/0x120 [ 311.721111][ T8732] do_fast_syscall_32+0x32/0x80 [ 311.722853][ T8732] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.725090][ T8732] RIP: 0023:0xf7f65579 [ 311.726592][ T8732] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 311.733606][ T8732] RSP: 002b:00000000f56c556c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 311.736624][ T8732] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000080 [ 311.739515][ T8732] RDX: 00000000ffffff9d RSI: 0000000000000000 RDI: 0000000000000000 [ 311.742358][ T8732] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.745218][ T8732] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 311.748276][ T8732] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.751280][ T8732] [ 323.667539][ T4780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 323.674002][ T4780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 323.678492][ T4780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 323.697061][ T4780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 323.700465][ T4780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 323.706941][ T5373] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 323.708805][ T66] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 323.714855][ T66] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 323.731342][ T66] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 323.742151][ T66] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 323.747569][ T66] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 323.750613][ T66] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 323.801060][ T4780] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 323.808543][ T4780] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 323.816893][ T4780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 323.821141][ T4780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 323.824687][ T5369] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 323.837856][ T4780] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 323.841792][ T4780] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 323.844454][ T4780] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 323.848938][ T5367] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.885528][ T5367] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 323.891212][ T5367] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 323.895569][ T5367] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 323.971500][ T5361] bridge0: port 3(syz_tun) entered disabled state [ 323.986200][ T5361] syz_tun (unregistering): left allmulticast mode [ 323.988200][ T5361] syz_tun (unregistering): left promiscuous mode [ 323.991051][ T5361] bridge0: port 3(syz_tun) entered disabled state [ 324.077412][ T7015] bridge0: port 3(syz_tun) entered disabled state [ 324.105329][ T7015] syz_tun (unregistering): left allmulticast mode [ 324.107296][ T7015] syz_tun (unregistering): left promiscuous mode [ 324.109141][ T7015] bridge0: port 3(syz_tun) entered disabled state [ 324.160966][ T7823] bridge0: port 3(syz_tun) entered disabled state [ 324.178464][ T7823] syz_tun (unregistering): left allmulticast mode [ 324.180830][ T7823] syz_tun (unregistering): left promiscuous mode [ 324.183141][ T7823] bridge0: port 3(syz_tun) entered disabled state [ 324.284527][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.434289][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.496970][ T8742] chnl_net:caif_netlink_parms(): no params data found [ 324.603603][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.715878][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.795586][ T8742] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.798478][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.801593][ T8742] bridge_slave_0: entered allmulticast mode [ 324.805153][ T8742] bridge_slave_0: entered promiscuous mode [ 324.837601][ T8742] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.840242][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.843120][ T8742] bridge_slave_1: entered allmulticast mode [ 324.847165][ T8742] bridge_slave_1: entered promiscuous mode [ 324.967809][ T8742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.971541][ T8745] chnl_net:caif_netlink_parms(): no params data found [ 324.986126][ T8748] chnl_net:caif_netlink_parms(): no params data found [ 325.027139][ T8742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.240982][ T8742] team0: Port device team_slave_0 added [ 325.316374][ T8742] team0: Port device team_slave_1 added [ 325.385084][ T8745] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.387665][ T8745] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.389928][ T8745] bridge_slave_0: entered allmulticast mode [ 325.392889][ T8745] bridge_slave_0: entered promiscuous mode [ 325.401974][ T8745] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.404268][ T8745] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.410441][ T8745] bridge_slave_1: entered allmulticast mode [ 325.413177][ T8745] bridge_slave_1: entered promiscuous mode [ 325.516303][ T8749] chnl_net:caif_netlink_parms(): no params data found [ 325.522165][ T12] bridge_slave_1: left allmulticast mode [ 325.524477][ T12] bridge_slave_1: left promiscuous mode [ 325.527322][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.535809][ T12] bridge_slave_0: left allmulticast mode [ 325.538224][ T12] bridge_slave_0: left promiscuous mode [ 325.540428][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.709458][ T12] gretap0 (unregistering): left promiscuous mode [ 325.797118][ T5367] Bluetooth: hci4: command tx timeout [ 325.877220][ T5367] Bluetooth: hci7: command tx timeout [ 325.877273][ T66] Bluetooth: hci5: command tx timeout [ 325.957114][ T66] Bluetooth: hci6: command tx timeout [ 326.126978][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.132280][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.140269][ T12] bond0 (unregistering): Released all slaves [ 326.150344][ T12] bond1 (unregistering): Released all slaves [ 326.306646][ T12] bond2 (unregistering): Released all slaves [ 326.316524][ T12] bond3 (unregistering): Released all slaves [ 326.326919][ T12] bond4 (unregistering): Released all slaves [ 326.339481][ T12] bond5 (unregistering): Released all slaves [ 326.378669][ T8742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.381117][ T8742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.393658][ T8742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.409359][ T8748] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.414228][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.417272][ T8748] bridge_slave_0: entered allmulticast mode [ 326.420569][ T8748] bridge_slave_0: entered promiscuous mode [ 326.424819][ T8748] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.428241][ T8748] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.431258][ T8748] bridge_slave_1: entered allmulticast mode [ 326.434741][ T8748] bridge_slave_1: entered promiscuous mode [ 326.497375][ T8745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.500612][ T8742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.503070][ T8742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.512211][ T8742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.583682][ T8745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.654430][ T8748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.867646][ T8748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.894794][ T8745] team0: Port device team_slave_0 added [ 326.904776][ T8745] team0: Port device team_slave_1 added [ 326.907506][ T8749] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.910069][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.912609][ T8749] bridge_slave_0: entered allmulticast mode [ 326.915940][ T8749] bridge_slave_0: entered promiscuous mode [ 326.939904][ T8742] hsr_slave_0: entered promiscuous mode [ 326.952070][ T8742] hsr_slave_1: entered promiscuous mode [ 326.955247][ T8742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.958580][ T8742] Cannot create hsr debugfs directory [ 327.066965][ T8749] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.069610][ T8749] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.072820][ T8749] bridge_slave_1: entered allmulticast mode [ 327.076686][ T8749] bridge_slave_1: entered promiscuous mode [ 327.109798][ T8748] team0: Port device team_slave_0 added [ 327.169261][ T8749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.178176][ T8748] team0: Port device team_slave_1 added [ 327.245968][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.250865][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.260151][ T8745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.299890][ T8749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.329419][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.332055][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.341606][ T8748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.346481][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.349260][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.358775][ T8745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.442157][ T12] batadv_slave_1: left promiscuous mode [ 327.451359][ T12] hsr_slave_0: left promiscuous mode [ 327.454481][ T12] hsr_slave_1: left promiscuous mode [ 327.459902][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.462895][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.466954][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.469954][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.515952][ T12] veth1_macvtap: left promiscuous mode [ 327.519854][ T12] veth0_macvtap: left promiscuous mode [ 327.522168][ T12] veth1_vlan: left promiscuous mode [ 327.524558][ T12] veth0_vlan: left promiscuous mode [ 327.892660][ T66] Bluetooth: hci4: command tx timeout [ 327.959672][ T66] Bluetooth: hci5: command tx timeout [ 327.961319][ T5367] Bluetooth: hci7: command tx timeout [ 328.037214][ T5367] Bluetooth: hci6: command tx timeout [ 328.923083][ T12] team0 (unregistering): Port device team_slave_1 removed [ 329.061093][ T12] team0 (unregistering): Port device team_slave_0 removed [ 329.242607][ T1379] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.244244][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.899280][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.901847][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.912644][ T8748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.955087][ T8749] team0: Port device team_slave_0 added [ 329.956981][ T5367] Bluetooth: hci4: command tx timeout [ 330.037810][ T5367] Bluetooth: hci7: command tx timeout [ 330.037839][ T66] Bluetooth: hci5: command tx timeout [ 330.082125][ T8745] hsr_slave_0: entered promiscuous mode [ 330.085203][ T8745] hsr_slave_1: entered promiscuous mode [ 330.094301][ T8749] team0: Port device team_slave_1 added [ 330.105171][ T8748] hsr_slave_0: entered promiscuous mode [ 330.111846][ T8748] hsr_slave_1: entered promiscuous mode [ 330.117652][ T66] Bluetooth: hci6: command tx timeout [ 330.119748][ T8748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.122911][ T8748] Cannot create hsr debugfs directory [ 330.209208][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.211633][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.220481][ T8749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.290997][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.293502][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.304035][ T8749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.646207][ T8749] hsr_slave_0: entered promiscuous mode [ 330.648803][ T8749] hsr_slave_1: entered promiscuous mode [ 330.650925][ T8749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.652901][ T8749] Cannot create hsr debugfs directory [ 331.111884][ T8742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 331.171062][ T8748] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.183411][ T8742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 331.189948][ T8742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 331.201347][ T8742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 331.266194][ T8748] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.323397][ T8742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.346358][ T8742] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.358685][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.361385][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.386594][ T8748] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.408297][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.410957][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.507684][ T8748] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.600124][ T8742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.648055][ T8742] veth0_vlan: entered promiscuous mode [ 331.684638][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.711284][ T8742] veth1_vlan: entered promiscuous mode [ 331.759731][ T8748] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 331.770603][ T8748] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 331.807985][ T8745] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.825435][ T8748] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 331.852682][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.862623][ T8742] veth0_macvtap: entered promiscuous mode [ 331.866171][ T8748] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 331.916163][ T8745] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.951501][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.961377][ T8742] veth1_macvtap: entered promiscuous mode [ 332.008693][ T8745] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.020414][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.023559][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.026326][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.030742][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.033528][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.036415][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.037144][ T66] Bluetooth: hci4: command tx timeout [ 332.042029][ T8742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.068425][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.079204][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.082118][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.084831][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.089084][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.091748][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.094472][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.098561][ T8742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.111454][ T8742] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.114326][ T8742] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.117332][ T8742] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.120256][ T8742] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.126849][ T66] Bluetooth: hci5: command tx timeout [ 332.128342][ T5367] Bluetooth: hci7: command tx timeout [ 332.152148][ T8745] team0: Port device netdevsim0 removed [ 332.155401][ T8745] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.197471][ T5367] Bluetooth: hci6: command tx timeout [ 332.248908][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.251028][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.258154][ T8748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.325373][ T1219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.330672][ T1219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.333565][ T8748] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.353731][ T45] bridge_slave_1: left allmulticast mode [ 332.359493][ T45] bridge_slave_1: left promiscuous mode [ 332.361644][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.367315][ T45] bridge_slave_0: left allmulticast mode [ 332.369759][ T45] bridge_slave_0: left promiscuous mode [ 332.372110][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.378831][ T45] bridge_slave_1: left allmulticast mode [ 332.380649][ T45] bridge_slave_1: left promiscuous mode [ 332.382613][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.388685][ T45] bridge_slave_0: left allmulticast mode [ 332.390236][ T45] bridge_slave_0: left promiscuous mode [ 332.391812][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.399391][ T45] bridge_slave_1: left allmulticast mode [ 332.400919][ T45] bridge_slave_1: left promiscuous mode [ 332.402488][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.406585][ T45] bridge_slave_0: left allmulticast mode [ 332.414370][ T45] bridge_slave_0: left promiscuous mode [ 332.416666][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.948312][ T45] gretap0 (unregistering): left promiscuous mode [ 332.992354][ T45] gretap0 (unregistering): left promiscuous mode [ 333.604235][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.608735][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.612337][ T45] bond0 (unregistering): Released all slaves [ 333.691814][ T45] bond0 (unregistering): left allmulticast mode [ 333.693495][ T45] bond_slave_0: left allmulticast mode [ 333.694910][ T45] bond_slave_1: left allmulticast mode [ 333.696601][ T45] bond0 (unregistering): left promiscuous mode [ 333.704573][ T45] bond_slave_0: left promiscuous mode [ 333.707110][ T45] bond_slave_1: left promiscuous mode [ 333.732980][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.740845][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.746696][ T45] bond0 (unregistering): Released all slaves [ 333.758620][ T45] bond1 (unregistering): Released all slaves [ 333.770146][ T45] bond2 (unregistering): Released all slaves [ 333.782662][ T45] bond3 (unregistering): Released all slaves [ 333.796693][ T45] bond4 (unregistering): Released all slaves [ 333.943432][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.949358][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.954702][ T45] bond0 (unregistering): Released all slaves [ 333.965883][ T45] bond1 (unregistering): Released all slaves [ 333.977456][ T45] bond2 (unregistering): Released all slaves [ 333.984929][ T45] bond3 (unregistering): Released all slaves [ 334.039729][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.042448][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.164630][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.167675][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.671312][ T8745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 334.676378][ T8745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 334.687898][ T8745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 334.692569][ T8745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 334.723169][ T8748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.847019][ T8828] sctp: [Deprecated]: syz.0.994 (pid 8828) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.847019][ T8828] Use struct sctp_sack_info instead [ 334.852459][ T8749] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 334.862709][ T8749] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 334.870881][ T8749] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 334.875485][ T8749] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 334.978029][ T8748] veth0_vlan: entered promiscuous mode [ 334.989069][ T8748] veth1_vlan: entered promiscuous mode [ 335.046082][ T8748] veth0_macvtap: entered promiscuous mode [ 335.090124][ T8748] veth1_macvtap: entered promiscuous mode [ 335.133056][ T8745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.157957][ T8749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.172693][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.175570][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.189541][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.192465][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.194755][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.197867][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.200274][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.202699][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.206304][ T8748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.210784][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.213204][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.215489][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.220833][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.223143][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.225606][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.231396][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.234343][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.239562][ T8748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.245717][ T8745] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.255202][ T45] batadv_slave_1: left promiscuous mode [ 335.262537][ T45] hsr_slave_0: left promiscuous mode [ 335.265211][ T45] hsr_slave_1: left promiscuous mode [ 335.268175][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.270901][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.274417][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.277623][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.286543][ T45] hsr_slave_0: left promiscuous mode [ 335.306928][ T45] hsr_slave_1: left promiscuous mode [ 335.309990][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.313063][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.316632][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.319846][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.323979][ T45] batadv_slave_1: left promiscuous mode [ 335.338665][ T45] hsr_slave_0: left promiscuous mode [ 335.341457][ T45] hsr_slave_1: left promiscuous mode [ 335.350442][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.353238][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.357608][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.360222][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.395928][ T8836] netlink: 40 bytes leftover after parsing attributes in process `syz.0.997'. [ 335.524385][ T45] veth1_macvtap: left promiscuous mode [ 335.526571][ T45] veth0_macvtap: left promiscuous mode [ 335.531529][ T45] veth1_vlan: left promiscuous mode [ 335.534302][ T45] veth0_vlan: left promiscuous mode [ 335.541428][ T45] veth1_macvtap: left promiscuous mode [ 335.543530][ T45] veth0_macvtap: left promiscuous mode [ 335.546340][ T45] veth1_vlan: left promiscuous mode [ 335.548910][ T45] veth0_vlan: left promiscuous mode [ 335.556101][ T45] veth1_macvtap: left promiscuous mode [ 335.558901][ T45] veth0_macvtap: left promiscuous mode [ 335.560957][ T45] veth1_vlan: left promiscuous mode [ 335.564447][ T45] veth0_vlan: left promiscuous mode [ 336.922325][ T45] team0 (unregistering): Port device team_slave_1 removed [ 337.035018][ T45] team0 (unregistering): Port device team_slave_0 removed [ 338.742561][ T45] team0 (unregistering): Port device team_slave_1 removed [ 338.848656][ T45] team0 (unregistering): Port device team_slave_0 removed [ 340.420192][ T45] team0 (unregistering): Port device team_slave_1 removed [ 340.506479][ T45] team0 (unregistering): Port device team_slave_0 removed [ 341.325651][ T8749] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.333211][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.335758][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.341815][ T8748] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.344647][ T8748] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.348106][ T8748] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.351043][ T8748] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.365665][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.368342][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.411637][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.413825][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.417651][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.419699][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.570872][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.573691][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.642068][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.652963][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.736106][ T8745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.762091][ T8855] input: syz0 as /devices/virtual/input/input10 [ 341.781168][ T8745] veth0_vlan: entered promiscuous mode [ 341.791665][ T8745] veth1_vlan: entered promiscuous mode [ 341.826390][ T8745] veth0_macvtap: entered promiscuous mode [ 341.842243][ T8749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.845237][ T8745] veth1_macvtap: entered promiscuous mode [ 341.897544][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.900466][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.903013][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.906052][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.911631][ T8745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.942969][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.947586][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.951060][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.954900][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.961067][ T8745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.975594][ T8749] veth0_vlan: entered promiscuous mode [ 341.984258][ T8745] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.988941][ T8745] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.991953][ T8745] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.994944][ T8745] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.015591][ T8749] veth1_vlan: entered promiscuous mode [ 342.110682][ T8749] veth0_macvtap: entered promiscuous mode [ 342.114931][ T1219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.121027][ T1219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.150844][ T8749] veth1_macvtap: entered promiscuous mode [ 342.173730][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.176894][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.197346][ T8749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.200409][ T8749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.203030][ T8749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.205822][ T8749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.217195][ T8749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.219975][ T8749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.228197][ T8749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.236077][ T8749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.242333][ T8749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.245044][ T8749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.251288][ T8749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.255141][ T8749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.262385][ T8749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.276162][ T8749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.284416][ T8749] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.287647][ T8749] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.290091][ T8749] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.292358][ T8749] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.376469][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.378751][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.403953][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.408728][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.515048][ T45] IPVS: stop unused estimator thread 0... [ 342.576065][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'. [ 342.966846][ T30] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 343.179169][ T30] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.182430][ T30] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 343.185428][ T30] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 343.203587][ T30] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 343.206184][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.211478][ T30] usb 7-1: Product: syz [ 343.212853][ T30] usb 7-1: Manufacturer: syz [ 343.214294][ T30] usb 7-1: SerialNumber: syz [ 343.659188][ T8884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1003'. [ 343.754479][ T8871] input: syz0 as /devices/virtual/input/input11 [ 345.603802][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 346.137655][ T8897] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(155242977352379) <= P.seqno(0) <= S.SWH(155242977352453)) and (P.ackno exists or LAWL(223882343455497) <= P.ackno(223882343455499) <= S.AWH(223882343455499), sending SYNC... [ 346.774952][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 347.841995][ T8905] xt_hashlimit: Unknown mode mask 80FFFFFF, kernel too old? [ 348.617111][ T30] cdc_ncm 7-1:1.0: bind() failure [ 348.620843][ T30] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 348.627163][ T30] cdc_ncm 7-1:1.1: bind() failure [ 348.837433][ T66] Bluetooth: hci0: command 0x1003 tx timeout [ 348.838775][ T5367] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 348.950350][ T8912] overlayfs: overlapping lowerdir path [ 349.033369][ T30] usb 7-1: USB disconnect, device number 8 [ 349.087703][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1013'. [ 349.322057][ T8925] program syz.0.1015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.519136][ T8932] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1017'. [ 349.521475][ T8932] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1017'. [ 349.857316][ T8935] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 349.857370][ T8935] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 349.857666][ T8935] vhci_hcd vhci_hcd.0: Device attached [ 350.167590][ T1426] usb 18-1: SetAddress Request (7) to port 0 [ 350.169563][ T1426] usb 18-1: new SuperSpeed USB device number 7 using vhci_hcd [ 350.348733][ T8939] vhci_hcd: connection reset by peer [ 350.356496][ T46] vhci_hcd: stop threads [ 350.359855][ T46] vhci_hcd: release socket [ 350.363924][ T46] vhci_hcd: disconnect device [ 351.148514][ T39] audit: type=1326 audit(1726597611.825:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.3.1020" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x0 [ 351.337481][ T8948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.974962][ T8952] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 352.001012][ T8952] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 352.262891][ T8964] wg2: entered allmulticast mode [ 352.461928][ T8971] netlink: 'syz.2.1026': attribute type 2 has an invalid length. [ 352.467090][ T8971] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1026'. [ 353.171583][ T8983] FAULT_INJECTION: forcing a failure. [ 353.171583][ T8983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.176068][ T8983] CPU: 3 UID: 0 PID: 8983 Comm: syz.3.1030 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 353.180078][ T8983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 353.183983][ T8983] Call Trace: [ 353.185143][ T8983] [ 353.186189][ T8983] dump_stack_lvl+0x16c/0x1f0 [ 353.187942][ T8983] should_fail_ex+0x497/0x5b0 [ 353.189666][ T8983] _copy_to_user+0x30/0xc0 [ 353.191405][ T8983] simple_read_from_buffer+0xd0/0x160 [ 353.193485][ T8983] proc_fail_nth_read+0x198/0x270 [ 353.195285][ T8983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 353.197095][ T8983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 353.199009][ T8983] vfs_read+0x1ce/0xbd0 [ 353.200326][ T8983] ? __fdget_pos+0xe8/0x170 [ 353.201811][ T8983] ? __pfx_vfs_read+0x10/0x10 [ 353.203345][ T8983] ? __pfx___mutex_lock+0x10/0x10 [ 353.205513][ T8983] ? __fget_files+0x244/0x3f0 [ 353.207566][ T8983] ksys_read+0x12f/0x260 [ 353.209329][ T8983] ? __pfx_ksys_read+0x10/0x10 [ 353.211098][ T8983] __do_fast_syscall_32+0x73/0x120 [ 353.212755][ T8983] do_fast_syscall_32+0x32/0x80 [ 353.214402][ T8983] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 353.216545][ T8983] RIP: 0023:0xf7f37579 [ 353.217937][ T8983] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 353.224049][ T8983] RSP: 002b:00000000f56b65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 353.226771][ T8983] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f56b6620 [ 353.229518][ T8983] RDX: 000000000000000f RSI: 00000000f73bbff4 RDI: 0000000000000000 [ 353.232332][ T8983] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 353.235200][ T8983] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 353.238219][ T8983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 353.241205][ T8983] [ 353.437629][ T8985] netlink: 'syz.3.1031': attribute type 15 has an invalid length. [ 353.686311][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'. [ 354.552114][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1040'. [ 354.555020][ T9009] netlink: 1737 bytes leftover after parsing attributes in process `syz.3.1040'. [ 354.594815][ T9012] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1041'. [ 354.606777][ T9012] netlink: 'syz.3.1041': attribute type 1 has an invalid length. [ 354.870652][ T9017] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 354.872873][ T9017] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 354.878093][ T9017] vhci_hcd vhci_hcd.0: Device attached [ 354.987016][ T9018] vhci_hcd: connection closed [ 354.987251][ T12] vhci_hcd: stop threads [ 354.989835][ T12] vhci_hcd: release socket [ 354.991080][ T12] vhci_hcd: disconnect device [ 355.247138][ T1426] usb 18-1: device descriptor read/8, error -110 [ 355.681820][ T1426] usb usb18-port1: attempt power cycle [ 355.728003][ T9026] netlink: 'syz.1.1044': attribute type 29 has an invalid length. [ 355.731428][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'. [ 355.746863][ T9028] input: syz0 as /devices/virtual/input/input12 [ 355.819599][ T9030] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1046'. [ 355.870905][ T9030] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x20ab0 pfn:0x679d0 [ 355.875177][ T9030] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 355.879744][ T9030] raw: 04fff00000000000 ffffea0001acf1c8 ffffea00019e7448 0000000000000000 [ 355.883087][ T9030] raw: 0000000000020ab0 0000000000000000 00000000ffffffff 0000000000000000 [ 355.886944][ T9030] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 355.890965][ T9030] page_owner tracks the page as freed [ 355.893413][ T9030] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 9005, tgid 9004 (syz.0.1039), ts 354770686790, free_ts 354992753892 [ 355.900395][ T9030] post_alloc_hook+0x2d1/0x350 [ 355.902187][ T9030] get_page_from_freelist+0x1351/0x2e50 [ 355.904237][ T9030] __alloc_pages_noprof+0x22b/0x2460 [ 355.906115][ T9030] alloc_pages_mpol_noprof+0x275/0x610 [ 355.909832][ T9030] folio_alloc_mpol_noprof+0x36/0xd0 [ 355.912116][ T9030] vma_alloc_folio_noprof+0xee/0x1b0 [ 355.913815][ T9030] do_wp_page+0xf59/0x3360 [ 355.914992][ T9030] __handle_mm_fault+0x23c4/0x5470 [ 355.917579][ T9030] handle_mm_fault+0x498/0xa60 [ 355.919349][ T9030] do_user_addr_fault+0x7a3/0x13f0 [ 355.921241][ T9030] exc_page_fault+0x5c/0xc0 [ 355.923039][ T9030] asm_exc_page_fault+0x26/0x30 [ 355.924991][ T9030] page last free pid 9010 tgid 9004 stack trace: [ 355.928090][ T9030] free_unref_folios+0x9e9/0x1390 [ 355.929937][ T9030] folios_put_refs+0x560/0x760 [ 355.931227][ T9030] free_pages_and_swap_cache+0x36d/0x510 [ 355.932711][ T9030] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 355.934416][ T9030] tlb_flush_mmu+0xe9/0x590 [ 355.935878][ T9030] unmap_page_range+0x1c74/0x3bf0 [ 355.938828][ T9030] unmap_single_vma+0x194/0x2b0 [ 355.940166][ T9030] unmap_vmas+0x22f/0x490 [ 355.941324][ T9030] exit_mmap+0x1b8/0xb20 [ 355.942488][ T9030] __mmput+0x12a/0x480 [ 355.943635][ T9030] mmput+0x62/0x70 [ 355.944655][ T9030] do_exit+0x9bf/0x2bb0 [ 355.945852][ T9030] do_group_exit+0xd3/0x2a0 [ 355.948054][ T9030] get_signal+0x2658/0x26d0 [ 355.949319][ T9030] arch_do_signal_or_restart+0x90/0x7e0 [ 355.950940][ T9030] syscall_exit_to_user_mode+0x150/0x2a0 [ 355.953684][ T9030] ------------[ cut here ]------------ [ 355.955151][ T9030] kernel BUG at include/linux/mm.h:1460! [ 355.957255][ T9030] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 355.959709][ T9030] CPU: 3 UID: 0 PID: 9030 Comm: syz.0.1046 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 355.963288][ T9030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 355.966347][ T9030] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 355.968114][ T9030] Code: b0 8b 48 89 df e8 32 4b 4e fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 f2 db 09 fd 48 c7 c6 20 44 b0 8b 4c 89 e7 e8 13 4b 4e fd 90 <0f> 0b e8 db db 09 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 355.973335][ T9030] RSP: 0018:ffffc90006806e48 EFLAGS: 00010246 [ 355.975021][ T9030] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90004052000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 355.977129][ T9030] RDX: 0000000000040000 RSI: ffffffff848148dd RDI: ffff88801c3dccc4 [ 355.979725][ T9030] RBP: ffffea00019e7434 R08: 0000000000000001 R09: fffffbfff2d2791f [ 355.982274][ T9030] R10: ffffffff9693c8ff R11: ffff88802b928a40 R12: ffffea00019e7400 [ 355.984936][ T9030] R13: ffff888022536800 R14: 0000000000001000 R15: 0000000000001000 [ 355.987383][ T9030] FS: 0000000000000000(0000) GS:ffff88802b900000(0063) knlGS:00000000f5746b40 [ 355.990155][ T9030] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 355.992125][ T9030] CR2: 000000000c3b4273 CR3: 0000000022632000 CR4: 0000000000350ef0 [ 355.994719][ T9030] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.997189][ T9030] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 355.999700][ T9030] Call Trace: [ 356.000642][ T9030] [ 356.001720][ T9030] ? show_regs+0x8c/0xa0 [ 356.003244][ T9030] ? die+0x36/0xa0 [ 356.004610][ T9030] ? do_trap+0x232/0x430 [ 356.005862][ T9030] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 356.007457][ T9030] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 356.009409][ T9030] ? do_error_trap+0xf4/0x230 [ 356.010662][ T9030] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 356.012244][ T9030] ? handle_invalid_op+0x34/0x40 [ 356.013721][ T9030] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 356.015832][ T9030] ? exc_invalid_op+0x2e/0x50 [ 356.017482][ T9030] ? asm_exc_invalid_op+0x1a/0x20 [ 356.019241][ T9030] ? __iov_iter_get_pages_alloc+0x1d1d/0x2240 [ 356.021354][ T9030] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 356.023466][ T9030] ? __iov_iter_get_pages_alloc+0x1d1d/0x2240 [ 356.025558][ T9030] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 356.027708][ T9030] ? delete_node+0x207/0x8e0 [ 356.029296][ T9030] iov_iter_get_pages_alloc2+0x53/0xf0 [ 356.031191][ T9030] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 356.033573][ T9030] ? p9pdu_vwritef+0x368/0x21d0 [ 356.035383][ T9030] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 356.037721][ T9030] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 356.039230][ T9030] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 356.040934][ T9030] ? p9_tag_alloc+0x4cc/0x870 [ 356.042516][ T9030] ? __pfx_lock_release+0x6/0x10 [ 356.044091][ T9030] p9_virtio_zc_request+0x1ac/0x1460 [ 356.045870][ T9030] ? p9pdu_writef+0xc4/0x100 [ 356.047237][ T9030] ? __pfx_p9pdu_writef+0x10/0x10 [ 356.049018][ T9030] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 356.050701][ T9030] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 356.052832][ T9030] ? rcu_is_watching+0x12/0xc0 [ 356.054523][ T9030] ? trace_9p_protocol_dump+0x192/0x220 [ 356.056597][ T9030] ? rcu_is_watching+0x12/0xc0 [ 356.058323][ T9030] ? p9_client_prepare_req+0x111/0x4d0 [ 356.060002][ T9030] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 356.061799][ T9030] ? hlock_class+0x4e/0x130 [ 356.063352][ T9030] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 356.065587][ T9030] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 356.067820][ T9030] ? __pfx___lock_acquire+0x10/0x10 [ 356.069597][ T9030] ? hlock_class+0x4e/0x130 [ 356.071116][ T9030] ? mark_lock+0xb5/0xc60 [ 356.072677][ T9030] ? __pfx_mark_lock+0x10/0x10 [ 356.074555][ T9030] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 356.076573][ T9030] p9_client_write+0x447/0x680 [ 356.078138][ T9030] ? __pfx_p9_client_write+0x10/0x10 [ 356.079531][ T9030] ? mark_held_locks+0x9f/0xe0 [ 356.080803][ T9030] v9fs_issue_write+0xe2/0x180 [ 356.082259][ T9030] ? __pfx_v9fs_issue_write+0x10/0x10 [ 356.084122][ T9030] ? rcu_is_watching+0x12/0xc0 [ 356.085811][ T9030] ? trace_netfs_sreq+0x193/0x220 [ 356.087589][ T9030] netfs_do_issue_write+0x92/0x110 [ 356.089345][ T9030] netfs_advance_write+0x384/0xbd0 [ 356.091106][ T9030] ? netfs_buffer_append_folio+0x569/0x750 [ 356.092964][ T9030] netfs_write_folio+0xc44/0x18f0 [ 356.094780][ T9030] netfs_writepages+0x2ba/0xb90 [ 356.096764][ T9030] ? __pfx_netfs_writepages+0x10/0x10 [ 356.098459][ T9030] ? is_bpf_text_address+0x94/0x1a0 [ 356.099901][ T9030] ? __pfx___lock_acquire+0x10/0x10 [ 356.101332][ T9030] ? __kernel_text_address+0xd/0x40 [ 356.102746][ T9030] ? unwind_get_return_address+0x45/0xe0 [ 356.104637][ T9030] ? __pfx_netfs_writepages+0x10/0x10 [ 356.106236][ T9030] do_writepages+0x1a3/0x7f0 [ 356.107676][ T9030] ? __pfx_do_writepages+0x10/0x10 [ 356.109386][ T9030] ? __pfx_lock_acquire+0x10/0x10 [ 356.110926][ T9030] ? do_raw_spin_lock+0x12d/0x2c0 [ 356.112426][ T9030] ? do_raw_spin_unlock+0x172/0x230 [ 356.114119][ T9030] ? _raw_spin_unlock+0x28/0x50 [ 356.115974][ T9030] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 356.117924][ T9030] filemap_fdatawrite_wbc+0x148/0x1c0 [ 356.119707][ T9030] __filemap_fdatawrite_range+0xba/0x100 [ 356.121564][ T9030] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 356.123708][ T9030] ? find_held_lock+0x2d/0x110 [ 356.125317][ T9030] ? v9fs_fid_lookup+0xe9/0xec0 [ 356.126866][ T9030] ? current_time+0x7e/0xc0 [ 356.128314][ T9030] v9fs_vfs_setattr+0x93a/0xab0 [ 356.129729][ T9030] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 356.131272][ T9030] ? evm_inode_setattr+0x65/0x680 [ 356.132824][ T9030] ? __pfx_make_vfsgid+0x10/0x10 [ 356.134493][ T9030] ? __pfx_current_time+0x10/0x10 [ 356.136114][ T9030] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 356.137869][ T9030] notify_change+0x6a6/0x1230 [ 356.139465][ T9030] do_truncate+0x15c/0x220 [ 356.140986][ T9030] ? __pfx_do_truncate+0x10/0x10 [ 356.142361][ T9030] ? get_current_fs_domain+0x188/0x1f0 [ 356.144178][ T9030] vfs_truncate+0x3ef/0x4e0 [ 356.145739][ T9030] __ia32_compat_sys_truncate+0x173/0x1e0 [ 356.147223][ T9030] ? __pfx___ia32_compat_sys_truncate+0x10/0x10 [ 356.149162][ T9030] ? __secure_computing+0x273/0x3f0 [ 356.151048][ T9030] __do_fast_syscall_32+0x73/0x120 [ 356.152870][ T9030] do_fast_syscall_32+0x32/0x80 [ 356.154707][ T9030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 356.157013][ T9030] RIP: 0023:0xf7fbf579 [ 356.158235][ T9030] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 356.164422][ T9030] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 000000000000005c [ 356.167358][ T9030] RAX: ffffffffffffffda RBX: 00000000200000c0 RCX: 0000000000000000 [ 356.170375][ T9030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 356.172619][ T9030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 356.175332][ T9030] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 356.178062][ T9030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 356.180853][ T9030] [ 356.182079][ T9030] Modules linked in: [ 356.193592][ T9030] ---[ end trace 0000000000000000 ]--- [ 356.204536][ T9030] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 356.208557][ T9030] Code: b0 8b 48 89 df e8 32 4b 4e fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 f2 db 09 fd 48 c7 c6 20 44 b0 8b 4c 89 e7 e8 13 4b 4e fd 90 <0f> 0b e8 db db 09 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 356.217816][ T9030] RSP: 0018:ffffc90006806e48 EFLAGS: 00010246 [ 356.220300][ T9030] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90004052000 [ 356.224193][ T9030] RDX: 0000000000040000 RSI: ffffffff848148dd RDI: ffff88801c3dccc4 [ 356.228300][ T9030] RBP: ffffea00019e7434 R08: 0000000000000001 R09: fffffbfff2d2791f [ 356.231356][ T9030] R10: ffffffff9693c8ff R11: ffff88802b928a40 R12: ffffea00019e7400 [ 356.234184][ T9030] R13: ffff888022536800 R14: 0000000000001000 R15: 0000000000001000 [ 356.238406][ T9030] FS: 0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:00000000f5746b40 [ 356.245494][ T9030] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 356.249817][ T9030] CR2: 0000000020005000 CR3: 0000000022632000 CR4: 0000000000350ef0 [ 356.252642][ T9030] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 356.255375][ T9030] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 356.259820][ T9030] Kernel panic - not syncing: Fatal exception [ 356.262621][ T9030] Kernel Offset: disabled [ 356.264264][ T9030] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:26:57 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc9000118f870 RCX=ffffffff81c80553 RDX=ffffed1003d11be5 RSI=0000000000000008 RDI=ffff88801e88df20 RBP=ffff8880220b5e00 RSP=ffffc9000118f720 R8 =0000000000000001 R9 =ffffed1003d11be4 R10=ffff88801e88df27 R11=1ffff11004b40512 R12=0000000000000017 R13=ffff88801e88df20 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81c8055c RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71bcc80 CR3=0000000063f44000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000097a6f4 RBX=0000000000000001 RCX=ffffffff8b094f29 RDX=ffffed10056e6fda RSI=ffffffff8bb09d00 RDI=ffffffff816353dc RBP=ffffed10037e5910 RSP=ffffc90000477e08 R8 =0000000000000000 R9 =ffffed10056e6fd9 R10=ffff88802b737ecb R11=ffffffff8b4f5bc0 R12=0000000000000001 R13=ffff88801bf2c880 R14=ffffffff901b3398 R15=0000000000000000 RIP=ffffffff8b09630f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002001c000 CR3=00000000266fa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001e800000000 0000000900000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000020 RCX=ffffffff8488f80e RDX=ffff88802389c880 RSI=0000000000000008 RDI=0000000000000001 RBP=ffffc9000386f508 RSP=ffffc9000386f368 R8 =0000000000000001 R9 =0000000000000008 R10=0000000000000023 R11=dffffc0000000000 R12=0000000000000023 R13=ffffc9000386f4e8 R14=ffff888022ae52ae R15=ffffc9000386f510 RIP=ffffffff818b24c0 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7be472ed00 ffffffff 00c00000 GS =0000 ffff88802b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005626b673a000 CR3=0000000047eb0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=7d5ebaaf7d5ebaaf 7d5ebaaf7d5ebaaf 7d5ebaaf7d5ebaaf 7d5ebaaf7d5ebaaf 7d5ebaaf7d5ebaaf 7d5ebaaf7d5ebaaf 7d5ebaaf7d5ebaaf 7d5ebaaf7d5ebaaf ZMM22=e5408751e5408751 e5408751e5408751 e5408751e5408751 e5408751e5408751 e5408751e5408751 e5408751e5408751 e5408751e5408751 e5408751e5408751 ZMM23=a01c49b2a01c49b2 a01c49b2a01c49b2 a01c49b2a01c49b2 a01c49b2a01c49b2 a01c49b2a01c49b2 a01c49b2a01c49b2 a01c49b2a01c49b2 a01c49b2a01c49b2 ZMM24=e63e5268e63e5268 e63e5268e63e5268 e63e5268e63e5268 e63e5268e63e5268 e63e5268e63e5268 e63e5268e63e5268 e63e5268e63e5268 e63e5268e63e5268 ZMM25=9e4d89109e4d8910 9e4d89109e4d8910 9e4d89109e4d8910 9e4d89109e4d8910 9e4d89109e4d8910 9e4d89109e4d8910 9e4d89109e4d8910 9e4d89109e4d8910 ZMM26=f3cb6b22f3cb6b22 f3cb6b22f3cb6b22 f3cb6b22f3cb6b22 f3cb6b22f3cb6b22 f3cb6b22f3cb6b22 f3cb6b22f3cb6b22 f3cb6b22f3cb6b22 f3cb6b22f3cb6b22 ZMM27=c319e449c319e449 c319e449c319e449 c319e449c319e449 c319e449c319e449 c319e449c319e449 c319e449c319e449 c319e449c319e449 c319e449c319e449 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ef070000ef070000 ef070000ef070000 ef070000ef070000 ef070000ef070000 ef070000ef070000 ef070000ef070000 ef070000ef070000 ef070000ef070000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fcd3b5 RDI=ffffffff9a5e9460 RBP=ffffffff9a5e9420 RSP=ffffc900068067d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000020 R14=ffffffff84fcd350 R15=0000000000000000 RIP=ffffffff84fcd3df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b900000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3b4273 CR3=0000000022632000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000044000000 Opmask01=00000000fffffff8 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3fd63020 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000a3937 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000