last executing test programs: 6.419973433s ago: executing program 1 (id=1839): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.334580884s ago: executing program 1 (id=1840): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 6.229971239s ago: executing program 1 (id=1842): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_clone3(&(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180), {0x2a}, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000540)=[0x0], 0x1, {r1}}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_getaffinity(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000240)=""/194, 0x36, 0xc2, 0x1, 0x0, 0x0, @void, @value}, 0x20) socket$packet(0x11, 0x0, 0x300) r3 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f00000005c0)) gettid() r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) timer_create(0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r9}, 0x38) 5.040052917s ago: executing program 3 (id=1850): r0 = socket(0x18, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) getsockname$packet(r0, 0x0, &(0x7f0000000080)) 4.97003684s ago: executing program 3 (id=1851): modify_ldt$write(0x1, &(0x7f00000005c0)={0x0, 0x1000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0xc, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x90) getsockname(r0, 0x0, &(0x7f0000000180)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f0000002200), r3}}, 0x18) (fail_nth: 5) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="64000000020601004c0003ce000000000000fffd05000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000fff116000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) pselect6(0x40, &(0x7f00000000c0)={0x7, 0x3, 0x101, 0x14fa, 0x7, 0x8001, 0x1, 0xa}, &(0x7f0000000100)={0x8, 0x2, 0xffd, 0xf, 0xfffffffffffffffe, 0x8000, 0x8, 0x101}, &(0x7f0000000140)={0x60, 0x6, 0xfffffffffffffff8, 0x100, 0x0, 0x37, 0x8000000000000000, 0xa46c}, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x7, 0x56]}, 0x8}) socket$kcm(0x10, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x22701, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000ffff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) socket$netlink(0x10, 0x3, 0x0) read$FUSE(r6, &(0x7f00000041c0)={0x2020}, 0x2020) 4.73025321s ago: executing program 3 (id=1852): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x6, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="8000"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@gettfilter={0x3c, 0x2e, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xfff3, 0xc}, {0x8, 0x1}, {0xb, 0xffe0}}, [{0x8, 0xb, 0x400}, {0x8}, {0x8, 0xb, 0x200009}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008) syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x280000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000380)={0xc}) 4.580126978s ago: executing program 3 (id=1854): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={r2}, 0x1) prctl$PR_SET_PTRACER(0x59616d61, r1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c000000020601030a0000000000000000000000100003006269746d61703a706f72740405000400000000000900020073797a30000000000500050000000000050001000600000004000780"], 0x4c}}, 0x0) 3.090180788s ago: executing program 1 (id=1862): link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) socket(0x1a, 0x6, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000e2ffffff18110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007faff00f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01f0fffffe0100000000000000000000000000004000000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00'}, 0x10) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@bloom_filter={0x1e, 0x9, 0x4, 0x5, 0x2090, r0, 0x9d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x5, @void, @value, @void, @value}, 0x48) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) futex(&(0x7f0000000240)=0x1, 0x9, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x2, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000002c0)=[@release], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7) fcntl$addseals(r4, 0x409, 0x8) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000}) unshare(0x68040200) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) 2.952383655s ago: executing program 1 (id=1863): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x6, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="8000"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r7, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@gettfilter={0x3c, 0x2e, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xfff3, 0xc}, {0x8, 0x1}, {0xb, 0xffe0}}, [{0x8, 0xb, 0x400}, {0x8}, {0x8, 0xb, 0x200009}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008) syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x280000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48}) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000380)={0xc}) 2.119188355s ago: executing program 3 (id=1864): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xbc6b, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000002700)=[@rthdrdstopts={{0x18, 0x29, 0x32, {0x2c}}}], 0x18}}], 0x1, 0x24000814) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x8, 0xfffffff8, 0x139, 0x5564, 0x1, 0x4, '\x00', 0x0, r1, 0x2, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000440)={0x5, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0]}) syz_create_resource$binfmt(&(0x7f0000000380)='./file0\x00') sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast1}}}}, &(0x7f0000000200)=0xb0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@loopback, 0x0}, &(0x7f0000000100)=0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0xb, [@ptr={0xb}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xb}, {}, {0x5, 0x3}, {0x6, 0x5}, {0x8, 0x1}, {0xd, 0x3}]}, @typedef={0xd, 0x0, 0x0, 0x8, 0x5}, @struct={0x1, 0x3, 0x0, 0x4, 0x0, 0x9, [{0xc, 0x2, 0x4}, {0x0, 0x3, 0x3ff}, {0xf, 0x4, 0x8}]}, @var={0xb, 0x0, 0x0, 0xe, 0x2, 0x2}, @var={0xf, 0x0, 0x0, 0xe, 0x5, 0x2}, @const={0xf, 0x0, 0x0, 0xa, 0x5}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x0, 0x4}, {0x3, 0x3}, {0x9, 0x2}, {0xf, 0x2}, {0xf, 0x5}]}]}, {0x0, [0x30, 0x61, 0x30, 0x5f, 0x0, 0x2e, 0x0, 0x0, 0x5f]}}, &(0x7f0000000280)=""/15, 0x107, 0xf, 0x1, 0x2, 0x0, @void, @value}, 0x28) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', r5, r6, 0x3, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000001380)={0x23b0, 0x1e, 0x400, 0x70bd2a, 0x25dfdbfd, {0x10}, [@generic="d43033506869c44048da410b30dc65f47ac6719ff8199ee359ed1cb596fedfab34083eece90958fa9835738a28ccfa5475b8af0f93801ad3447896d780c776064814f9446289748d16945d8e", @generic="4f70245d131b0968091d98fcc2b172ee8fca2854bda62ab657637d112dd555777c703b196b70a9af78f77ab4e70ac2264e9627c75752d056ec65ee09d9dbb5120bbf9cc28e63ad2d0f150840a6e38c383218518236b59c6db007fee6e3563e5107c625418ef4f10ea98e4a34f98fc89964ce9c1d43848b6c3e62d46eb23092bd7a9c06e2c0ee64421d1b330bb3219dd5e035e460c98dee31e2abbf7d1e18dc6d1c6814f57a5ed6a1", @generic="9b290cf9eda483d2949aa999787cbaa9e9ca2aa39d835900cd91d07b0473cb35c1f2f4fe65205f41044c9a08312e6e", @generic="5cea704db7bedc93bea6e528a85106bfb0c4e4baaeae26442a07cad72ceca08b1de572127dbd6166261154eca2ed6ca87499929e405a51f152311ec25250e15d9bc53cac0b12526552e7181a89", @nested={0x28, 0x50, 0x0, 0x1, [@generic="5fc43d6ea53751947e20e2f450a406b90cb384fac617ee1ae1051fcee45264", @generic="e40f813483"]}, @nested={0x2202, 0xb2, 0x0, 0x1, [@typed={0x1004, 0xcb, 0x0, 0x0, @binary="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"}, @generic="46491a19fadb45ba9f4249b191bdf929dddc328162ec36cfa4cebb01a8b0c2d71680d4b36a20a6903e60510a04ad92a120dcce65d2ecee3a3aa542a4cd6d029c8e13002fcf8beed80669ca750d82ff16d15b917702028c47f13e5ddc4ff076672bcbc6de32d96f02937d83e0cb4dabc610c8a825dc76c9ffd3f0efa2492791fb9309d066da22918b229103b0e40bbe866f569c734dabfcb2b369313d7f1668ecb6ab356e896371a55595c1eb26d99ca3e2d9e1db02e972bfecd2f5ae158a0b133c0179f4424653f7bfc3e848ae2b", @typed={0x5, 0xcd, 0x0, 0x0, @str='\x00'}, @generic="880158afe0da2c2b4ceee7b2f3b8a350ec0f2445e2fd9c410639497c468f6c8c854d150674dfc1a72beb", @generic="8a48b1f6ba3ea71809e8fd3d9683e9faf34ac3843e418a7fa1c23a952a347baaf18616ffaa80372e352aee7a98bfd582a14698f4e6b04cef93f338745e5f215bdcdb1f26b320b162df18ef11a54e22dff0894d0466d3c948cee88ce6d539e764cd393d3b7ea669b4d5e77b3899b41eaa64e1d63a914df0948181d61b0237191b22faf9ef6e9a5784f7be563f10a7620bf9465765efb18ce572f31fe36d3d32850607b29903fe4f373b31273ce83602f3ebcde0684c70", @generic="e15f9fe949e4c3cc504967749be459da25a7a282c0a9f2b2b580957a33792ffd0cd1efec4d3ab56d", @typed={0x14, 0x100, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0xff, 0x0, 0x0, @fd=r7}, @generic="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"]}]}, 0x23b0}, 0x1, 0x0, 0x0, 0x20044040}, 0x4) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc0046209, &(0x7f0000001340)) 2.019641936s ago: executing program 3 (id=1865): r0 = io_uring_setup(0x1d3, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0xb, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x20000000009) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="06000000", @ANYRES16=r6, @ANYBLOB="010000000000000000001d0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0000000000"], 0x3c}}, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="ff", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @private1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 2.019334878s ago: executing program 0 (id=1866): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000a40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000200)={r3, 0x0, 0xfffffffe}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r4, 0x0, r2}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000280)={r4}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000001480)) r6 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000080), 0x10002, 0x0) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0x28319574, 0x2, 0x800]}, &(0x7f00000000c0)=0x44) 1.994734434s ago: executing program 2 (id=1867): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001780)=[{&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x200000000000009c, &(0x7f0000000480)=ANY=[@ANYBLOB="14c80f000093d91f16b600000000000000000000b60d4e060000005bb804c815d2101566603e10f932a172650d90c79fbaf16e495597dbaad801000052569e310000000000d64c3b2159213304da64d9a642151dac26807faca70eab08ee7d87aed27d58519c47495f62f5da466b03a959"], 0x14}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r2 = dup3(r1, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x56) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x0, 0x200, 0x0, 0x0, r3}}], 0x1c}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000003c0)={r3, 0xfbc9, 0x30, 0x3, 0x3}, &(0x7f0000000400)=0x18) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$alg(0x26, 0x5, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000200)={0x2, 0xb57}) r7 = syz_io_uring_setup(0x24f9, &(0x7f00000002c0)={0x0, 0x3, 0x200, 0x40000000, 0x0, 0x0, r5}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r10 = open$dir(&(0x7f0000000280)='./file0\x00', 0x311080, 0x100) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r11 = syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0xf10, 0x10100, 0x0, 0x18d}, &(0x7f0000000100), &(0x7f0000001440)) io_uring_enter(r11, 0xa3d, 0x0, 0x0, 0x0, 0x0) r12 = io_uring_setup(0x6249, &(0x7f0000000040)) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0x18, 0x20000000, r13) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_LINKAT={0x27, 0x68, 0x0, r5, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0\x00', r10, 0x1400, 0x0, {0x0, r13}}) io_uring_enter(r7, 0xa3d, 0x0, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) fremovexattr(r6, &(0x7f0000000340)=@known='user.syz\x00') setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000380), 0x4) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 1.948198448s ago: executing program 1 (id=1868): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000002340)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) signalfd(r0, &(0x7f00000001c0)={[0x401, 0x77f]}, 0x8) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0xa94, 0x0, &(0x7f0000000300)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x129301) r4 = syz_io_uring_setup(0x20f4, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]}) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r7, 0x0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000180)=ANY=[@ANYBLOB="0200200c1000070060"]) r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[], 0x0) syz_usb_disconnect(r8) 1.020095069s ago: executing program 2 (id=1869): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.018549001s ago: executing program 0 (id=1870): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x44800) r1 = open(&(0x7f0000000000)='.\x00', 0x400, 0x0) symlinkat(&(0x7f0000000040)='./file0/file0/file0\x00', r1, &(0x7f00000000c0)='./file0\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) userfaultfd(0x801) syz_open_dev$dri(&(0x7f0000000580), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x320e, &(0x7f0000000800), 0x0, 0x0) syz_io_uring_setup(0x2978, &(0x7f0000000200)={0x0, 0x0, 0x8}, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x24fa, &(0x7f0000000280)={0x0, 0xd3b6, 0x10100, 0x0, 0x3}, &(0x7f0000000100), &(0x7f0000000180)) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.018105448s ago: executing program 2 (id=1871): link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) socket(0x1a, 0x6, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000e2ffffff18110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007faff00f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x200, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00'}, 0x10) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@bloom_filter={0x1e, 0x9, 0x4, 0x5, 0x2090, r1, 0x9d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x5, @void, @value, @void, @value}, 0x48) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000002c0)=[@release], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7) fcntl$addseals(r5, 0x409, 0x8) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000}) unshare(0x68040200) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) 949.434651ms ago: executing program 0 (id=1872): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1022004, &(0x7f0000000180)={'trans=virtio,', {[{@nodevmap}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x35, 0x62, 0x30, 0x0, 0x34, 0x34, 0x36], 0x2d, [0x43d57937118e60b0, 0x34, 0x36, 0x62], 0x2d, [0x33, 0x32, 0x65, 0x39], 0x2d, [0x65, 0x33, 0x31, 0xc24dac31bb43be9d], 0x2d, [0x63, 0x38, 0x32, 0x34, 0x61, 0x34, 0x8, 0x34]}}}, {@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/kvm\x00'}}, {@hash}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fallocate(r2, 0x4, 0xb4d, 0x8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000001380)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000200)={@local, 0x1}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000070}]}) 948.953355ms ago: executing program 2 (id=1873): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r1 = openat$random(0xffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000400)) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x5, 0x1, 0x635, 0x1, 0x19}, &(0x7f0000000200)=0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003100), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdf252500000005002a000500000008002f000001000008000200", @ANYRES32=r4, @ANYBLOB="185c8441c247d7689e0e1c1f0875cf94f241db7e88b5a5069cdb5d4edd05af241aad8fd600"/49], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[@ANYBLOB="88010000", @ANYRES16=r7, @ANYBLOB="010000000000000000002300000038002f800c0002000000000000000000280003802400038006000100000000000c0004000201aaaaaaaaaaaa0c0004008bd7b84e2d86341908000300", @ANYRES32=r10, @ANYBLOB="34012f80"], 0x188}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000fbdbdf252700000008000200", @ANYRES32=0x0, @ANYBLOB="05002e00100000000500310001000300000032003b380bbe802c77f9d15044638814e77c1f233b8f0a59a7d2ccd25105f156917f08000200", @ANYRES32=r10, @ANYBLOB="050031008b000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r8) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r11, 0x107, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48}, 0x8880) 849.814919ms ago: executing program 0 (id=1874): syz_emit_ethernet(0x52, &(0x7f0000000580)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0x7, "0402000200"}, @timestamp_addr={0x44, 0x14, 0x2, 0x1, 0x0, [{@multicast1}, {@multicast2}]}]}}, {{0xfffe, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000980)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) getsockopt$inet6_opts(r1, 0x11a, 0x3, 0x0, &(0x7f0000000000)=0x4) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xd) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='exfat\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x164, r7, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x164}, 0x1, 0x0, 0x0, 0x24000080}, 0x80) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000080)={@random="0000001e00", @dev, @val={@val={0x88a8, 0x5}, {0x8902, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "17e7f4", 0x44, 0x2f, 0x1, @empty, @loopback, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x7, 0x1, 0x7, 0x3, 0x1, 0x0, 0x4}, 0x1, {0x81}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x2, 0x2, 0x1, 0x3, 0x4}, 0x2, {0x5, 0x1, 0x3, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 788.910855ms ago: executing program 0 (id=1875): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x200, r1, 0xe11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x2}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x4}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x81}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xfffffffffffffff4}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xe}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x13, 0x24, [{0x6c, 0x1}, {0x16, 0x1}, {0xb}, {0x48}, {0x24}, {0x18}, {0xb}, {0x48, 0x1}, {0x9, 0x1}, {0x36, 0x1}, {0x18, 0x1}, {0x60}, {0x2, 0x1}, {0x24}, {0x18}]}, @NL80211_ATTR_TX_RATES={0x148, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x24, 0x48, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe2, 0x8, 0xad4, 0x8, 0x3fb6, 0x43, 0x10, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x0, 0x6, 0xfffc, 0x6, 0x5, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x19, 0x1b, 0x1, 0x6c, 0x18, 0x60, 0x4, 0x30, 0xc, 0x48, 0x6, 0x43, 0x48, 0xc, 0x13, 0xc, 0x6c, 0x5, 0x12, 0x30, 0x7, 0x5, 0xb, 0x3, 0x6c, 0x48, 0x48, 0x5]}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x18, 0x24, 0x30, 0x3, 0x1b, 0x36, 0x16, 0x5, 0x36, 0x18, 0x30, 0x57, 0x3, 0xf]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x9}, {0x5, 0x6}, {0x4, 0x4}, {0x1, 0x6}, {0x0, 0xa}, {0x0, 0x7}, {0x4, 0x2}, {0x1, 0x1}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x8}, {0x2, 0x4}, {0x2, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x0, 0x7}, {0x5, 0x3}, {0x5, 0x2}, {0x3, 0x5}, {0x2, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x6}, {0x5, 0x8}, {0x2}, {0x2, 0x3}, {0x3, 0x2}, {0x5, 0x2}, {0x2, 0x7}, {0x0, 0x2}, {0x2, 0x7}, {0x0, 0x1}, {0x6, 0x7}, {0x2, 0x5}, {0x0, 0x2}, {0x5, 0x1}, {0x6, 0x4}, {0x6, 0x8}, {0x6, 0x7}, {0x6, 0x1}, {0x3, 0x1}, {0x0, 0x11}, {0x6, 0x7}, {0x1, 0xa}, {0x3}, {0x6, 0x8}, {0x7, 0x3}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x9}, {0x1, 0x8}, {0x1}, {0x2, 0x7}, {0x7}, {0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x12, 0x6c, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x9, 0x6, 0x30, 0x48, 0xb, 0x36, 0x5, 0x6, 0x30, 0x48, 0xc, 0x60, 0x36, 0x9, 0x1, 0xc, 0x5, 0x6, 0x36]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x48, 0xc, 0xfe8d387075fb6b16, 0x5, 0x60, 0x30, 0x3, 0x36, 0x2, 0x48, 0x12, 0x2, 0x1, 0xb, 0x16, 0x30, 0xc, 0x60, 0x4, 0x24, 0x6, 0x9, 0x36, 0x18, 0x16, 0x18, 0x1b, 0x48, 0x36, 0x6c, 0xb, 0x2]}]}]}, @NL80211_ATTR_MESH_SETUP={0x4c, 0x70, [@NL80211_MESH_SETUP_IE={0x3f, 0x3, "7680ac2f8f1b594629f0edc3a81900a2e84f4ca4c2478e9c3210ce9e0b9439c355ad4f5963bac91a7551477d4559303492b72cfcec2aa01b5dd027"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}]}]}, 0x200}}, 0x4000000) (async) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f00000003c0)={{0x3, @default}, [@netrom, @default, @bcast, @default, @remote, @default, @default, @rose]}, &(0x7f0000000440)=0x48, 0x80000) bind$ax25(r2, &(0x7f0000000480)={{0x3, @default, 0x2}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null]}, 0x48) (async) r3 = openat$null(0xffffff9c, &(0x7f0000000500), 0x101000, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000580)='GPL\x00', 0x2, 0xde, &(0x7f00000005c0)=""/222, 0x41000, 0x62, '\x00', r0, 0x25, r4, 0x8, &(0x7f0000000700)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x6, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000780)=[{0x3, 0x2, 0x9, 0x9}, {0x3, 0x2, 0x5, 0xb}, {0x0, 0x2, 0xb, 0xc}, {0x0, 0x3, 0x8, 0x9}], 0x10, 0x8, @void, @value}, 0x94) writev(r4, &(0x7f0000001e00)=[{&(0x7f0000000880)="bdc30aff5586c4546bd0d6a58d7854ed00df03ebb7d955f7e11b42cda18e240d7f4698a8ead70e02f4c9975515121914bbe6505693d35a51129b3583491604dcb3036f3ee874fd1611738e015c7a0e99dea513bf5492", 0x56}, {&(0x7f0000000900)="99c21a6a7702ee0d73", 0x9}, {&(0x7f0000000940)="fcf9bc63c7aa6b6e895b87d5da615dfe7fc3b64f6bdb04526f7ce19a0b713678cbd4a65941200a4274ee686fee016ae440a20125ed4561221e3b11607b75ee9d4f325cd50d6d75a9ba7fe8a1c91b1908a4bdc34b38e333ba1793bedf3b020d3cee359855a313b9ee672c8a451c9f0efbbaaa7bb04a3106c8", 0x78}, {&(0x7f00000009c0)="fe9fcd3f5352b0a1bd3a5c4913a590b6a715036215972ed2fa468277c6155d1f1452217dc916380b373273186660ce99272f8048755168173e6d4cb2b6b54935ae0155d7c9195561eef4d36631a7f0cc64ed23219fa3f1aaca296999084e131560ca97726a706c8e7581ee0b2a4a06a830a9eb506491e62718221ade94495eb0e3f8880162f330d28c0ef1110452177ab670882c3b1e80f2a6db800319748ba54c2062403c3fb98fb820fcb68a25993be0da59a8b4629c770cedffa558fbc6e7a3b2a128977720cb2f8d011545bd650ba5b3d94bcc2d5e96dd2bb4b4cd0adb9068b4074a181b014b69a32003bdf69e71b51534b3413a3b", 0xf7}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="0a79a7d75db1f53398128488f994785ec9f3e4021d38c950dc2af57071915ba1cbbff9f049061a80d9e81a4764c42635fe30de7c08ab1d356890841b993f9e0905564a38694d0766e0bbf4b9d2d1fab3c078aca6ee3ab15bd66b81826915cb16427d64098af0bc0980588929b4b18a087c8ed8573b4928ef5f6f3f170565d7ce2184a6b47a44d60379ae730e", 0x8c}, {&(0x7f0000001b80)="0b078c03b3c938f7ec7b4ed25a66f7fd7d7df30a5c50a50e91755ad0bdc53867e6148335a33255fe29f0e5609da9adb9637e1b856de48ddabdc780580a24de92325914ac3a4a687d27a632bf2408ff19b79eea40430eb0cd1876886ad73f3137bf2c3f0ee809d5c996afb04161aa152e3e912a1eb806c1b96050886e214d58eb6c5d405d002ca7ffef307e0ff4078cb3e1e4cd1f8488e54e3406ecb5028bd3a508a79a559fda1f00aca16a677670f6325eb0151cfe0dfd47e20f0e0f67797a6c562cc04ceff85da32486db92ac18a2868e71cdadc0f91b1810d01b343a1f608f1c9a4a591eb7a3acbfa9", 0xea}, {&(0x7f0000001c80)}, {&(0x7f0000001cc0)="26a58d78887e2eebe12fbc56e304ad3efb51c1b50a648b8a69b0426b2b763bea4cb07f0c13442982dd17a9046ab314461a36870acdc65f40c9ffa40fca58bcd2348c4913dd9a6e2a7370e460", 0x4c}, {&(0x7f0000001d40)="6a23e8f5037ed43f8ebecbbe82d4677fd0e818436c162e2671c1f40561ba307515e8d3b9264613abb2294b25fb73a640369dfb1caa4e6b076d617df646b2860f6974a215080693ef426a536cb8e910aaddf34efee42f1af241d7ca5ed92e5fc2ee2d43433ee4b5228d35211dc107e10dee8c52cf59aabb6bcd04c24aca9b58b44e1c7c401faa5e9dba8edcb0ab3b3fc70776d0d498aaa0ed903b360a648b4191014f8256cfcbf9c36cf53b", 0xab}], 0xa) (async) writev(r3, &(0x7f0000002040)=[{&(0x7f0000001e80)="2386a7c41449530b224a57830981349b645372b4d7ef22a3b644519cf91e586bf26a25a4fb3efc70eeaac45d26fb4ef5845948992b6d807f2a89979b9195be8368c12188cec47ce2c54ec264a04e27c25e89e3affc669f817a8ba78faa7dc2ab43076d3ecc7610518ad8751cf7354e2513ed10c65fc8b12ef293dbde1577ec223c27831ce3c1ac0e274b2031c0dda46a305e47dd94ef5f4073e78f2882ec946dac09ebac76ddc7a2dc3708fa392e979719e80a8a82e12e797a8d1883864d95833a03bd8cf5013919cd1acc61b7638085027c", 0xd2}, {&(0x7f0000001f80)="74b186f2e0469bf9266c18fd0a174bd2f9932a3364b72ed4c4519fddc1b946fe6b17f572e51ca1da57b148f772e1f0c817797183a8f5313314c2267fc5f10f3b843f866ad2607382167e7c7e7462811c506a8efae3049e8bf17cfb907846b75114e082ff6078721d1f16670555757dd44acd109cc4d3f0ba48386b43128e0517b2b0c8096adc3bed1f7d12a48e4639920014dd7ccc4d5c9a0e094d14f349d96a42b1fb9e3b58822f3b5fd1", 0xab}], 0x2) (async) sendfile(r3, r3, 0x0, 0x401) (async) openat$tun(0xffffff9c, &(0x7f0000002080), 0x10100, 0x0) (async) r5 = fcntl$getown(r3, 0x9) (async) r6 = syz_io_uring_complete(0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f0000002100), r4) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000021c0)={r6, 0x58, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000002200)=0x0, &(0x7f0000002240)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000029c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002980)={&(0x7f00000022c0)={0x6b4, r7, 0x8, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r0}, {0x4}}, {{0x8, 0x1, r0}, {0x1d8, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xf831, 0x4, 0x45, 0x8}, {0x8001, 0x4, 0xe1, 0x10}, {0x5, 0x8, 0x2, 0x6}, {0x0, 0xb7, 0x25, 0x6}, {0x7, 0x6, 0x40, 0x101}, {0x8, 0x3, 0x7, 0x6e6a1928}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe47e}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4224291a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r0}, {0xc8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r0}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r10}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xf0bd, 0x80, 0xf0, 0x1ff}, {0x8, 0xc2, 0x9a, 0x7}, {0x0, 0x7, 0xd3, 0x7f}, {0x800, 0xc0, 0x3, 0x7f}, {0x3, 0xc, 0x5}, {0x9, 0x0, 0x0, 0xfffffff7}, {0x8, 0x7, 0x5, 0x5e490215}, {0xffff, 0xa, 0x74, 0x5}, {0x8, 0x4, 0x1, 0x1}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}]}}]}, 0x6b4}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x20, 0x1405, 0x10, 0x70bd29, 0x25dfdbfd, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4085}, 0x4000880) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002cc0)={0x7f, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002d40)=@bpf_lsm={0x1d, 0x1, &(0x7f0000002b00)=@raw=[@call={0x85, 0x0, 0x0, 0xaf}], &(0x7f0000002b40)='GPL\x00', 0x5e0, 0xc2, &(0x7f0000002b80)=""/194, 0x41100, 0x0, '\x00', r10, 0x1b, r3, 0x8, &(0x7f0000002c80)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r11, 0x0, 0x4, 0x0, &(0x7f0000002d00)=[{0x5, 0x4, 0xd, 0x8}, {0x3, 0x4, 0x3, 0xc}, {0x3, 0x5, 0xf, 0x5}, {0x4, 0x5, 0x6, 0x1}], 0x10, 0x2, @void, @value}, 0x94) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002e40), r4) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000004000)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x40010002}, 0xc, &(0x7f0000003fc0)={&(0x7f0000002e80)={0x1118, r12, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x1070, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "92476edb865746a7c12d92fdf167b68d16dfdc0a7189a501f1a4f00549be156bfd5b00ba"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1000}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1118}, 0x1, 0x0, 0x0, 0x24048000}, 0x400c045) (async) open(&(0x7f0000004040)='./file0\x00', 0x810401, 0x8) (async) process_vm_readv(r5, &(0x7f0000005180)=[{&(0x7f0000004080)=""/11, 0xb}, {&(0x7f00000040c0)=""/44, 0x2c}, {&(0x7f0000004100)=""/84, 0x54}, {&(0x7f0000004180)=""/4096, 0x1000}], 0x4, &(0x7f0000005640)=[{&(0x7f00000051c0)=""/85, 0x55}, {&(0x7f0000005240)=""/167, 0xa7}, {&(0x7f0000005300)=""/12, 0xc}, {&(0x7f0000005340)=""/166, 0xa6}, {&(0x7f0000005400)=""/138, 0x8a}, {&(0x7f00000054c0)=""/19, 0x13}, {&(0x7f0000005500)=""/245, 0xf5}, {&(0x7f0000005600)=""/62, 0x3e}], 0x8, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005680)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000056c0)={0x2, 0x1}) (async) write$char_usb(r4, &(0x7f0000005700)="6226b125b5aff837a0a2f2f60dd98557a4d88ec1e383344969c7c8", 0x1b) (async) sendto(r6, &(0x7f0000005740)="5c9efe3382ae13363f977058f6af8ee52c41ee16f8cb4a6d81855e5609c5444856145fb0409e9dfa7ae1d848072f72d03c78deebe003dbf825eb3f3d69c7fed517a27e218aa2e9d7", 0x48, 0xde58e8bd98639b38, 0x0, 0x0) 788.527157ms ago: executing program 0 (id=1876): r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x80, 0x10, 0x547e, 0x81, {{0x9, 0x4, 0x3, 0x3f, 0x24, 0x67, 0x0, 0xb, 0x29, 0x0, @broadcast, @multicast1, {[@end, @generic={0x88, 0x6, "9a97ab18"}, @generic={0x89, 0x7, "e13058b552"}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1a, 0x2e, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0x9, 0x1, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x1, 0x4, 0x1, 0x5, 0xfffffffffffffff8, 0xfffffffffffffffc}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xe8c54f6dba14cf}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xa9, 0x58, &(0x7f0000000380)=""/88, 0x43300, 0x20, '\x00', r5, @tracing=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x1, 0x8, 0x14033eb5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000540)=[r1, r1, r3], &(0x7f0000000580)=[{0x0, 0x3, 0x6, 0x3}, {0x1, 0x1, 0x8, 0xc}, {0x3, 0x3, 0xd, 0x2}, {0x2, 0x4, 0xa, 0xa}, {0x1, 0x1, 0xf, 0x7}, {0x0, 0x5, 0x6, 0x4}], 0x10, 0x6, @void, @value}, 0x94) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') open_by_handle_at(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="0c000000010000003000000000000000000000000cf87d38200e21e4d301059acd450077eaddef2468089bd6577a5401000080e4c216663e89e4e7a703d4a769a705fc2b5f9bc4f08e8f46671ff16e922b47c0a66505eda52e72f415b06d74eca2238d78b85946f01abd45c00946f68e548f0a17e340ef0daecca73622150895f831cdccb84237264cdf92845b9f3115a0ff6ce95bd6ab4a1ae817f8b4367ebe0360ba316093fc774cb2a75f24d7976190df521f33c32dfc488d5fc7e8fc4372af95729f3999ff9bfe33ecff5cc38015c054cccaa8d1"], 0x9e4b) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r8, 0x6, &(0x7f0000002000)={0x1}) write$6lowpan_enable(r7, &(0x7f0000000880)='1', 0x1) iopl(0x3) fcntl$lock(r8, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x8, 0x2}) 49.9254ms ago: executing program 2 (id=1877): syz_emit_vhci(0x0, 0x1d) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bca) (async) r0 = getpgid(0xffffffffffffffff) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x3) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r2 = getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESOCT=r3, @ANYRES32=r0, @ANYRESOCT=r1], 0x58}, 0x1, 0x0, 0x0, 0x4881}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x58}, 0x1, 0x0, 0x0, 0x6804}, 0x20044045) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000001200), &(0x7f0000001240), 0x2, 0x3) (async) sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) write$binfmt_elf64(r5, &(0x7f0000000e40)=ANY=[], 0xfdef) (async) close(r5) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x38}}, 0x10040095) (async) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a14e5f40700426e2400000000ff00000000000000", 0x23) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001e00), r6) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r6, @ANYBLOB="0100000000000000000002910000080001000000"], 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 0s ago: executing program 2 (id=1878): link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) socket(0x1a, 0x6, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000e2ffffff18110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007faff00f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x200, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00'}, 0x10) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@bloom_filter={0x1e, 0x9, 0x4, 0x5, 0x2090, r0, 0x9d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x5, @void, @value, @void, @value}, 0x48) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000002c0)=[@release], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7) fcntl$addseals(r4, 0x409, 0x8) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x2000000}) unshare(0x68040200) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) kernel console output (not intermixed with test programs): m eth1 [ 579.103372][T10822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 579.115681][T10822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 579.118634][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.121346][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.124334][T10817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.128051][T10817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.130359][T10817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.132577][T10817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.134818][T10817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.284065][T10823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 579.296655][T10823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 579.349348][T10822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.364806][T10822] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.376443][T10823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 579.379589][T10823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 579.441472][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.444106][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.465899][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.467758][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.499061][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.500929][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.520056][T10821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.568446][T10821] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.596000][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.598021][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.598260][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.602316][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.621856][T10822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 579.625868][T10822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 579.656871][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.658729][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.766250][T10823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.774216][T10823] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.783186][T10985] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1249'. [ 579.807021][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.809015][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.832946][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.834812][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.881170][T10822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.888672][T10823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 579.891374][T10823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 579.919844][T10822] veth0_vlan: entered promiscuous mode [ 579.935310][T10821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.948968][T10822] veth1_vlan: entered promiscuous mode [ 579.970864][T10821] veth0_vlan: entered promiscuous mode [ 579.997393][T10822] veth0_macvtap: entered promiscuous mode [ 580.000160][T10822] veth1_macvtap: entered promiscuous mode [ 580.008091][T10822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.010734][T10822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.013195][T10822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.016333][T10822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.019509][T10822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.022313][T10822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.024953][T10822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.027606][T10822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.030150][T10822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.033258][T10822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.038674][T10822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.041027][T10822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.043529][T10822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.046888][T10822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.078655][T10821] veth1_vlan: entered promiscuous mode [ 580.125812][T10821] veth0_macvtap: entered promiscuous mode [ 580.129661][T10823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.133266][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.137523][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.140959][T10821] veth1_macvtap: entered promiscuous mode [ 580.158369][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.160404][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.170949][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.173658][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.176249][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.178976][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.181490][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.185839][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.190437][T10821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.204021][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.213882][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.226053][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.228818][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.231424][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.235204][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.256896][T10821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.342260][T10823] veth0_vlan: entered promiscuous mode [ 580.355895][T10821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.358627][T10821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.360964][T10821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.363277][T10821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.375931][T10823] veth1_vlan: entered promiscuous mode [ 580.411511][T10823] veth0_macvtap: entered promiscuous mode [ 580.419609][T10823] veth1_macvtap: entered promiscuous mode [ 580.432719][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.437789][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.443868][T10823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.447225][T10823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.449831][T10823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.452595][T10823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.458464][T10823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.461216][T10823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.463791][T10823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.466829][T10823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.470300][T10823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.481020][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.483940][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.487942][T10823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.491811][T10823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.494414][T10823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.497474][T10823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.500023][T10823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.502772][T10823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.505998][T10823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.508750][T10823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.512038][T10823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.523052][T10823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.529067][T10823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.531374][T10823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.535336][T10823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.586369][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.588442][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.620741][ T6699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.628349][ T6699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.027829][T11049] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1251'. [ 582.949264][T11096] usb usb8: usbfs: process 11096 (syz.0.1266) did not claim interface 0 before use [ 584.004853][T11115] libceph: resolve '. [ 584.004853][T11115] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 584.004853][T11115] ' (ret=-3): failed [ 584.055462][T11115] No control pipe specified [ 585.995334][T11133] 9pnet_fd: p9_fd_create_tcp (11133): problem connecting socket to 127.0.0.1 [ 588.096470][T11158] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1281'. [ 588.587035][T11164] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1282'. [ 589.306355][T11194] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1289'. [ 589.635206][ T8] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 589.815443][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 589.826434][ T8] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 589.839878][ T8] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 589.842999][ T8] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 589.855236][ T8] usb 7-1: Product: syz [ 589.857423][ T8] usb 7-1: Manufacturer: syz [ 589.862406][ T8] usb 7-1: SerialNumber: syz [ 589.864688][ T8] usb 7-1: config 0 descriptor?? [ 589.866482][T11186] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 589.897487][T11212] syzkaller0: entered allmulticast mode [ 590.410446][T11220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.415473][T11220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.004139][T11236] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1300'. [ 591.434765][T11255] overlay: Unknown parameter '/' [ 592.117038][ T35] usb 7-1: USB disconnect, device number 11 [ 592.374759][T11265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1308'. [ 592.377438][T11265] netlink: 'syz.2.1308': attribute type 7 has an invalid length. [ 592.379466][T11265] netlink: 'syz.2.1308': attribute type 8 has an invalid length. [ 592.381433][T11265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1308'. [ 592.835266][ T9838] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 593.005489][ T9838] usb 7-1: Using ep0 maxpacket: 16 [ 593.011328][ T9838] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.013949][ T9838] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 593.017362][ T9838] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 593.019851][ T9838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.029773][ T9838] usb 7-1: config 0 descriptor?? [ 593.053797][ T9838] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 593.153352][T11278] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1312'. [ 593.236424][T11277] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1313'. [ 593.336828][T11286] 9pnet_fd: Insufficient options for proto=fd [ 595.855209][ T5404] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 596.009397][ T5404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.014761][ T5404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.027337][ T5404] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 596.039032][ T5404] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 596.041642][ T5404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.052750][ T5404] usb 5-1: config 0 descriptor?? [ 596.121557][ T1291] usb 7-1: USB disconnect, device number 12 [ 596.331589][T11332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1327'. [ 596.667042][ T5404] hid-udraw 0003:20D6:CB17.0009: report_id 485083276 is invalid [ 596.669580][ T5404] hid-udraw 0003:20D6:CB17.0009: item 0 4 1 8 parsing failed [ 596.689655][ T5404] hid-udraw 0003:20D6:CB17.0009: parse failed [ 596.693787][ T5404] hid-udraw 0003:20D6:CB17.0009: probe with driver hid-udraw failed with error -22 [ 596.997837][T11364] binder: 11363:11364 ioctl 4018620d 0 returned -22 [ 597.032483][T11364] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1333'. [ 597.592277][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 597.724378][T11384] binder: Unknown parameter 'sm/proc/partitions' [ 598.413088][T11395] syzkaller0: entered promiscuous mode [ 598.416751][T11395] syzkaller0: entered allmulticast mode [ 598.570824][ T1235] Bluetooth: (null): Too short H5 packet [ 598.574945][ T1235] Bluetooth: (null): Invalid header checksum [ 598.578952][ T1235] Bluetooth: (null): Invalid header checksum [ 598.676199][ T12] Bluetooth: (null): Invalid header checksum [ 598.785404][ T1235] Bluetooth: (null): Invalid header checksum [ 598.900001][ T69] Bluetooth: (null): Invalid header checksum [ 599.005560][ T11] Bluetooth: (null): Invalid header checksum [ 599.116483][ T69] Bluetooth: (null): Invalid header checksum [ 601.377135][ T30] usb 5-1: USB disconnect, device number 22 [ 601.454210][T11401] openvswitch: netlink: Message has 8 unknown bytes. [ 601.505672][T11403] binder: 11402:11403 ioctl 4018620d 0 returned -22 [ 601.597870][T11403] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1342'. [ 601.710666][ T39] kauditd_printk_skb: 39 callbacks suppressed [ 601.710677][ T39] audit: type=1326 audit(1729084185.339:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.3.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 601.720037][T11409] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 601.734970][ T39] audit: type=1326 audit(1729084185.349:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.3.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 601.742048][ T39] audit: type=1326 audit(1729084185.349:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.3.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 601.755288][ T39] audit: type=1326 audit(1729084185.349:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.3.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 601.769776][ T39] audit: type=1326 audit(1729084185.349:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.3.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 601.775549][ T39] audit: type=1326 audit(1729084185.349:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.3.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 601.781319][ T39] audit: type=1326 audit(1729084185.369:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.3.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 601.797098][ T39] audit: type=1326 audit(1729084185.369:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.3.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 601.802705][ T39] audit: type=1326 audit(1729084185.369:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.3.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 601.813560][ T39] audit: type=1326 audit(1729084185.369:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.3.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 602.043032][ T5349] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 602.047896][ T5349] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 602.051014][ T5349] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 602.053869][ T5349] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 602.056475][ T5349] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 602.058815][ T5349] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 602.238545][ T1101] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.370633][ T1101] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.452520][T11422] chnl_net:caif_netlink_parms(): no params data found [ 602.499939][ T1101] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.670539][ T1101] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.772338][T11422] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.775530][T11422] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.785718][T11422] bridge_slave_0: entered allmulticast mode [ 602.794713][T11422] bridge_slave_0: entered promiscuous mode [ 602.799755][T11422] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.805702][T11422] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.810886][T11422] bridge_slave_1: entered allmulticast mode [ 602.825768][T11422] bridge_slave_1: entered promiscuous mode [ 602.846718][T11422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.850492][T11422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.908374][T11422] team0: Port device team_slave_0 added [ 602.934375][T11422] team0: Port device team_slave_1 added [ 603.003991][T11422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.008710][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.025478][T11422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.056140][T11422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.057958][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.070196][T11422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.116260][ T1101] bridge_slave_1: left allmulticast mode [ 603.124079][ T1101] bridge_slave_1: left promiscuous mode [ 603.135549][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.139126][ T1101] bridge_slave_0: left allmulticast mode [ 603.140645][ T1101] bridge_slave_0: left promiscuous mode [ 603.142405][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.788150][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.794228][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.809122][ T1101] bond0 (unregistering): Released all slaves [ 604.061992][T11422] hsr_slave_0: entered promiscuous mode [ 604.064174][T11422] hsr_slave_1: entered promiscuous mode [ 604.135314][ T5349] Bluetooth: hci4: command tx timeout [ 604.381727][ T1101] hsr_slave_0: left promiscuous mode [ 604.384503][ T1101] hsr_slave_1: left promiscuous mode [ 604.387940][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.389899][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.398001][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.399958][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.439812][ T1101] veth1_macvtap: left promiscuous mode [ 604.441327][ T1101] veth0_macvtap: left promiscuous mode [ 604.442817][ T1101] veth1_vlan: left promiscuous mode [ 604.444221][ T1101] veth0_vlan: left promiscuous mode [ 605.617614][T11453] raw_sendmsg: syz.3.1356 forgot to set AF_INET. Fix it! [ 605.836362][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 606.001007][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 606.228219][ T5349] Bluetooth: hci4: command tx timeout [ 606.380432][T11458] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1358'. [ 606.382967][T11458] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1358'. [ 606.495296][T11460] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1358'. [ 607.722262][T11422] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 607.728426][T11422] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 607.738268][T11422] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 607.746741][T11422] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 607.858081][T11422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.910195][T11422] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.914959][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.916904][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.923329][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.925249][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.198760][T11422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.269613][T11422] veth0_vlan: entered promiscuous mode [ 608.287799][T11422] veth1_vlan: entered promiscuous mode [ 608.305573][ T5349] Bluetooth: hci4: command tx timeout [ 608.332298][T11422] veth0_macvtap: entered promiscuous mode [ 608.337266][T11422] veth1_macvtap: entered promiscuous mode [ 608.350119][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.352849][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.360894][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.363726][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.375840][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.378968][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.382316][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.385404][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.388947][T11422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.406962][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.410340][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.412892][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.419275][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.422771][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.430709][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.433243][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.447102][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.451353][T11422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.472962][T11422] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.482919][T11422] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.491051][T11422] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.494512][T11422] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.580486][ T6699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.583557][ T6699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.620942][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.623576][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.738493][ T5349] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 608.741513][ T5349] CPU: 3 UID: 0 PID: 5349 Comm: kworker/u33:3 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 608.744306][ T5349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 608.747146][ T5349] Workqueue: hci0 hci_rx_work [ 608.748409][ T5349] Call Trace: [ 608.749298][ T5349] [ 608.750080][ T5349] dump_stack_lvl+0x16c/0x1f0 [ 608.751457][ T5349] sysfs_warn_dup+0x7f/0xa0 [ 608.753078][ T5349] sysfs_create_dir_ns+0x24d/0x2b0 [ 608.754929][ T5349] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 608.756473][ T5349] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 608.757872][ T5349] ? kobject_add_internal+0x12d/0x990 [ 608.759729][ T5349] ? do_raw_spin_unlock+0x172/0x230 [ 608.761110][ T5349] kobject_add_internal+0x2c8/0x990 [ 608.762467][ T5349] kobject_add+0x16f/0x240 [ 608.763630][ T5349] ? __pfx_kobject_add+0x10/0x10 [ 608.764960][ T5349] ? class_to_subsys+0x3e/0x160 [ 608.766276][ T5349] ? do_raw_spin_unlock+0x172/0x230 [ 608.767629][ T5349] ? kobject_put+0xab/0x5a0 [ 608.768822][ T5349] device_add+0x289/0x1a70 [ 608.769980][ T5349] ? __pfx_dev_set_name+0x10/0x10 [ 608.771290][ T5349] ? __pfx_device_add+0x10/0x10 [ 608.772788][ T5349] ? mgmt_send_event_skb+0x2f2/0x460 [ 608.774559][ T5349] hci_conn_add_sysfs+0x17e/0x230 [ 608.775823][ T5349] le_conn_complete_evt+0xfc7/0x1cf0 [ 608.777207][ T5349] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 608.778666][ T5349] ? trace_contention_end+0xea/0x140 [ 608.780034][ T5349] ? __mutex_lock+0x1a6/0x9c0 [ 608.781271][ T5349] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 608.782802][ T5349] ? skb_pull_data+0x166/0x210 [ 608.784046][ T5349] hci_le_meta_evt+0x2e2/0x5d0 [ 608.785310][ T5349] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 608.787016][ T5349] hci_event_packet+0x666/0x1190 [ 608.788449][ T5349] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 608.790189][ T5349] ? __pfx_hci_event_packet+0x10/0x10 [ 608.791588][ T5349] ? mark_held_locks+0x9f/0xe0 [ 608.792853][ T5349] ? kcov_remote_start+0x3cf/0x6e0 [ 608.794181][ T5349] ? lockdep_hardirqs_on+0x7c/0x110 [ 608.795525][ T5349] hci_rx_work+0x2c6/0x16c0 [ 608.796743][ T5349] ? lock_acquire+0x2f/0xb0 [ 608.797923][ T5349] ? process_one_work+0x8bb/0x1b30 [ 608.799936][ T5349] process_one_work+0x958/0x1b30 [ 608.801759][ T5349] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 608.803649][ T5349] ? __pfx_process_one_work+0x10/0x10 [ 608.805088][ T5349] ? assign_work+0x1a0/0x250 [ 608.806328][ T5349] worker_thread+0x6c8/0xf00 [ 608.807542][ T5349] ? __pfx_worker_thread+0x10/0x10 [ 608.808875][ T5349] kthread+0x2c1/0x3a0 [ 608.809943][ T5349] ? _raw_spin_unlock_irq+0x23/0x50 [ 608.811296][ T5349] ? __pfx_kthread+0x10/0x10 [ 608.812927][ T5349] ret_from_fork+0x45/0x80 [ 608.814572][ T5349] ? __pfx_kthread+0x10/0x10 [ 608.816277][ T5349] ret_from_fork_asm+0x1a/0x30 [ 608.817715][ T5349] [ 608.819658][ T5349] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 608.824427][ T5349] Bluetooth: hci0: failed to register connection device [ 608.829021][T11501] netlink: 'syz.0.1362': attribute type 4 has an invalid length. [ 608.831091][T11501] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1362'. [ 608.851243][T11501] netlink: 'syz.0.1362': attribute type 1 has an invalid length. [ 608.854480][T11501] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1362'. [ 608.857052][T11501] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1362'. [ 610.453923][ T5349] Bluetooth: hci4: command tx timeout [ 610.855459][ T5349] Bluetooth: hci0: command tx timeout [ 612.017764][T11555] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1374'. [ 612.313378][T11571] 9pnet_fd: Insufficient options for proto=fd [ 612.911891][T11579] syzkaller0: entered promiscuous mode [ 612.913424][T11579] syzkaller0: entered allmulticast mode [ 613.046990][ T82] Bluetooth: (null): Too short H5 packet [ 613.048535][ T82] Bluetooth: (null): Invalid header checksum [ 613.050192][ T82] Bluetooth: (null): Invalid header checksum [ 613.156043][ T92] Bluetooth: (null): Invalid header checksum [ 613.265441][ T82] Bluetooth: (null): Invalid header checksum [ 613.378445][ T82] Bluetooth: (null): Invalid header checksum [ 613.485547][ T11] Bluetooth: (null): Invalid header checksum [ 613.595567][ T92] Bluetooth: (null): Invalid header checksum [ 613.905260][ T5349] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 614.282744][T11587] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1383'. [ 615.690875][T11601] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1386'. [ 615.917607][T11615] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1396'. [ 616.603239][T11634] syzkaller0: entered allmulticast mode [ 616.742703][T11632] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1402'. [ 617.765636][T11667] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1401'. [ 617.962671][T11673] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1404'. [ 618.279015][T11681] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1405'. [ 618.419206][T11682] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1407'. [ 618.748825][T11693] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1408'. [ 619.839659][T11709] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1413'. [ 619.902546][T11712] FAULT_INJECTION: forcing a failure. [ 619.902546][T11712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.934911][T11712] CPU: 3 UID: 0 PID: 11712 Comm: syz.1.1414 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 619.938833][T11712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 619.942556][T11712] Call Trace: [ 619.943433][T11712] [ 619.944201][T11712] dump_stack_lvl+0x16c/0x1f0 [ 619.945462][T11712] should_fail_ex+0x497/0x5b0 [ 619.946712][T11712] _copy_from_iter+0x29b/0x13e0 [ 619.947976][T11712] ? __pfx__copy_from_iter+0x10/0x10 [ 619.949653][T11712] ? rawv6_sendmsg+0x9e4/0x43e0 [ 619.951415][T11712] ? __pfx_lock_release+0x10/0x10 [ 619.953246][T11712] ? trace_lock_acquire+0x14a/0x1d0 [ 619.955117][T11712] rawv6_sendmsg+0x238c/0x43e0 [ 619.956868][T11712] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 619.958719][T11712] ? __pfx___lock_acquire+0x10/0x10 [ 619.960626][T11712] ? __fget_files+0x23a/0x3f0 [ 619.962332][T11712] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 619.964506][T11712] ? __pfx_aa_sk_perm+0x10/0x10 [ 619.966281][T11712] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 619.968140][T11712] ? inet_sendmsg+0x119/0x140 [ 619.969868][T11712] inet_sendmsg+0x119/0x140 [ 619.971526][T11712] __sys_sendto+0x426/0x4d0 [ 619.973187][T11712] ? __pfx___sys_sendto+0x10/0x10 [ 619.975051][T11712] ? ksys_write+0x1ad/0x260 [ 619.976684][T11712] ? __pfx_ksys_write+0x10/0x10 [ 619.978454][T11712] __ia32_sys_sendto+0xdd/0x1b0 [ 619.980224][T11712] ? lockdep_hardirqs_on+0x7c/0x110 [ 619.982153][T11712] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 619.984559][T11712] __do_fast_syscall_32+0x73/0x120 [ 619.986427][T11712] do_fast_syscall_32+0x32/0x80 [ 619.988208][T11712] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 619.990510][T11712] RIP: 0023:0xf7f43579 [ 619.991993][T11712] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 619.998898][T11712] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 620.001869][T11712] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 620.004818][T11712] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.007630][T11712] RBP: 00000000fffffdfd R08: 0000000000000000 R09: 0000000000000000 [ 620.009927][T11712] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 620.011943][T11712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.014602][T11712] [ 620.889154][T11724] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1417'. [ 621.205205][ T9] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 621.357103][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.360876][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.364121][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 621.369009][ T9] usb 8-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 621.372287][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.506292][ T9] usb 8-1: config 0 descriptor?? [ 622.520051][T11747] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1422'. [ 623.100996][ T9] hid-udraw 0003:20D6:CB17.000A: report_id 485083276 is invalid [ 623.103161][ T9] hid-udraw 0003:20D6:CB17.000A: item 0 4 1 8 parsing failed [ 623.105488][ T9] hid-udraw 0003:20D6:CB17.000A: parse failed [ 623.107097][ T9] hid-udraw 0003:20D6:CB17.000A: probe with driver hid-udraw failed with error -22 [ 623.642608][T11769] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1427'. [ 624.186038][ T5404] usb 8-1: USB disconnect, device number 22 [ 624.413756][T11788] usb usb8: usbfs: process 11788 (syz.2.1434) did not claim interface 0 before use [ 625.697022][T11804] netlink: 516 bytes leftover after parsing attributes in process `syz.3.1439'. [ 625.699360][T11804] netlink: 516 bytes leftover after parsing attributes in process `syz.3.1439'. [ 625.704821][T11804] netlink: 134716 bytes leftover after parsing attributes in process `syz.3.1439'. [ 625.738789][T11804] openvswitch: netlink: Message has 5 unknown bytes. [ 625.782415][T11810] FAULT_INJECTION: forcing a failure. [ 625.782415][T11810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.786577][T11810] CPU: 1 UID: 0 PID: 11810 Comm: syz.0.1442 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 625.789478][T11810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 625.792391][T11810] Call Trace: [ 625.793270][T11810] [ 625.794025][T11810] dump_stack_lvl+0x16c/0x1f0 [ 625.795232][T11810] should_fail_ex+0x497/0x5b0 [ 625.796455][T11810] _copy_from_user+0x30/0xf0 [ 625.797773][T11810] csum_and_copy_from_iter_full+0x218/0x1eb0 [ 625.799296][T11810] ? __lock_acquire+0xbdd/0x3ce0 [ 625.800524][T11810] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 625.802151][T11810] ? policy_nodemask+0xea/0x4e0 [ 625.803414][T11810] ? alloc_pages_mpol_noprof+0x315/0x610 [ 625.804886][T11810] ip_generic_getfrag+0x175/0x260 [ 625.806201][T11810] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 625.807623][T11810] ? do_csum+0x280/0x2e0 [ 625.808751][T11810] raw6_getfrag+0x1ed/0x270 [ 625.809893][T11810] __ip6_append_data.isra.0+0x1b45/0x4540 [ 625.811291][T11810] ? __pfx_raw6_getfrag+0x10/0x10 [ 625.812572][T11810] ? __pfx___ip6_append_data.isra.0+0x10/0x10 [ 625.814227][T11810] ip6_append_data+0x1e6/0x500 [ 625.815445][T11810] ? __pfx_raw6_getfrag+0x10/0x10 [ 625.816875][T11810] rawv6_sendmsg+0x1578/0x43e0 [ 625.818234][T11810] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 625.819572][T11810] ? __pfx___lock_acquire+0x10/0x10 [ 625.820929][T11810] ? __fget_files+0x23a/0x3f0 [ 625.822125][T11810] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 625.823596][T11810] ? __pfx_aa_sk_perm+0x10/0x10 [ 625.824861][T11810] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 625.826170][T11810] ? inet_sendmsg+0x119/0x140 [ 625.827396][T11810] inet_sendmsg+0x119/0x140 [ 625.828733][T11810] __sys_sendto+0x426/0x4d0 [ 625.829996][T11810] ? __pfx___sys_sendto+0x10/0x10 [ 625.831259][T11810] ? ksys_write+0x1ad/0x260 [ 625.832500][T11810] ? __pfx_ksys_write+0x10/0x10 [ 625.833729][T11810] __ia32_sys_sendto+0xdd/0x1b0 [ 625.835003][T11810] ? lockdep_hardirqs_on+0x7c/0x110 [ 625.836420][T11810] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 625.838471][T11810] __do_fast_syscall_32+0x73/0x120 [ 625.839904][T11810] do_fast_syscall_32+0x32/0x80 [ 625.841333][T11810] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 625.842981][T11810] RIP: 0023:0xf73ce579 [ 625.844135][T11810] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 625.849011][T11810] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 625.851137][T11810] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 625.853170][T11810] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 625.855192][T11810] RBP: 00000000fffffdfd R08: 0000000000000000 R09: 0000000000000000 [ 625.857236][T11810] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 625.859258][T11810] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 625.861257][T11810] [ 627.099546][T11839] libceph: resolve '. [ 627.099546][T11839] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 627.099546][T11839] ' (ret=-3): failed [ 627.127271][T11839] No control pipe specified [ 628.640489][T11858] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1457'. [ 628.642846][T11858] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1457'. [ 628.763101][T11860] syz.0.1457: attempt to access beyond end of device [ 628.763101][T11860] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 628.771090][T11860] syz.0.1457: attempt to access beyond end of device [ 628.771090][T11860] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 628.774717][T11860] Mount JFS Failure: -5 [ 628.805260][T11860] jfs_mount failed w/return code = -5 [ 628.813899][T11863] FAULT_INJECTION: forcing a failure. [ 628.813899][T11863] name failslab, interval 1, probability 0, space 0, times 0 [ 628.820004][T11863] CPU: 3 UID: 0 PID: 11863 Comm: syz.3.1458 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 628.822786][T11863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 628.825554][T11863] Call Trace: [ 628.826426][T11863] [ 628.827200][T11863] dump_stack_lvl+0x16c/0x1f0 [ 628.828454][T11863] should_fail_ex+0x497/0x5b0 [ 628.829689][T11863] should_failslab+0xc2/0x120 [ 628.830918][T11863] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 628.832312][T11863] ? skb_clone+0x190/0x3f0 [ 628.833486][T11863] skb_clone+0x190/0x3f0 [ 628.834588][T11863] ip6_finish_output2+0xc6b/0x19a0 [ 628.835924][T11863] ip6_finish_output+0x3f9/0x1300 [ 628.837226][T11863] ip6_output+0x1f8/0x540 [ 628.838383][T11863] ? __pfx_ip6_output+0x10/0x10 [ 628.839667][T11863] ip6_local_out+0xcd/0x4a0 [ 628.840879][T11863] ip6_send_skb+0x112/0x460 [ 628.842075][T11863] ip6_push_pending_frames+0xe0/0x110 [ 628.843476][T11863] rawv6_sendmsg+0x2f9e/0x43e0 [ 628.844756][T11863] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 628.846079][T11863] ? __pfx___lock_acquire+0x10/0x10 [ 628.847458][T11863] ? __fget_files+0x23a/0x3f0 [ 628.848706][T11863] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 628.850269][T11863] ? __pfx_aa_sk_perm+0x10/0x10 [ 628.851542][T11863] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 628.852869][T11863] ? inet_sendmsg+0x119/0x140 [ 628.854103][T11863] inet_sendmsg+0x119/0x140 [ 628.855298][T11863] __sys_sendto+0x426/0x4d0 [ 628.856499][T11863] ? __pfx___sys_sendto+0x10/0x10 [ 628.857803][T11863] ? ksys_write+0x1ad/0x260 [ 628.858989][T11863] ? __pfx_ksys_write+0x10/0x10 [ 628.860238][T11863] __ia32_sys_sendto+0xdd/0x1b0 [ 628.861485][T11863] ? lockdep_hardirqs_on+0x7c/0x110 [ 628.862816][T11863] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 628.864536][T11863] __do_fast_syscall_32+0x73/0x120 [ 628.865875][T11863] do_fast_syscall_32+0x32/0x80 [ 628.867130][T11863] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 628.868684][T11863] RIP: 0023:0xf7fb0579 [ 628.869710][T11863] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 628.874412][T11863] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 628.876510][T11863] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 628.878513][T11863] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 628.880527][T11863] RBP: 00000000fffffdfd R08: 0000000000000000 R09: 0000000000000000 [ 628.882548][T11863] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 628.884567][T11863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 628.886583][T11863] [ 628.988946][T11864] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1456'. [ 631.258721][T11904] FAULT_INJECTION: forcing a failure. [ 631.258721][T11904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.271182][T11904] CPU: 1 UID: 0 PID: 11904 Comm: syz.0.1468 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 631.274681][T11904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 631.278332][T11904] Call Trace: [ 631.279480][T11904] [ 631.280501][T11904] dump_stack_lvl+0x16c/0x1f0 [ 631.282125][T11904] should_fail_ex+0x497/0x5b0 [ 631.283734][T11904] _copy_to_user+0x30/0xc0 [ 631.285308][T11904] simple_read_from_buffer+0xd0/0x160 [ 631.287165][T11904] proc_fail_nth_read+0x198/0x270 [ 631.288901][T11904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 631.290780][T11904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 631.292672][T11904] vfs_read+0x1ce/0xbd0 [ 631.294133][T11904] ? __fget_files+0x23a/0x3f0 [ 631.295764][T11904] ? fdget_pos+0x24c/0x360 [ 631.297424][T11904] ? __pfx_lock_release+0x10/0x10 [ 631.299122][T11904] ? trace_lock_acquire+0x14a/0x1d0 [ 631.300866][T11904] ? __pfx_vfs_read+0x10/0x10 [ 631.302433][T11904] ? __pfx___mutex_lock+0x10/0x10 [ 631.304160][T11904] ? __fget_files+0x244/0x3f0 [ 631.305758][T11904] ksys_read+0x12f/0x260 [ 631.306864][T11904] ? __pfx_ksys_read+0x10/0x10 [ 631.308224][T11904] __do_fast_syscall_32+0x73/0x120 [ 631.309978][T11904] do_fast_syscall_32+0x32/0x80 [ 631.311669][T11904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 631.313819][T11904] RIP: 0023:0xf73ce579 [ 631.315213][T11904] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 631.321660][T11904] RSP: 002b:00000000f56b65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 631.324476][T11904] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56b6620 [ 631.327113][T11904] RDX: 000000000000000f RSI: 00000000f73bbff4 RDI: 0000000000000000 [ 631.329128][T11904] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 631.331138][T11904] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 631.333155][T11904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 631.335176][T11904] [ 631.712073][T11908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1469'. [ 633.745395][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1480'. [ 633.747762][T11951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.749999][T11951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.837415][T11951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.840237][T11951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.637974][T11957] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1482'. [ 635.661752][T11992] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1491'. [ 635.843119][T12002] netlink: 'syz.3.1493': attribute type 1 has an invalid length. [ 635.890118][T12002] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 635.890142][T12002] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 635.897861][T12002] bond1: (slave ipip0): making interface the new active one [ 635.898237][T12002] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 637.043301][T12026] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1500'. [ 637.443954][T12035] block nbd3: shutting down sockets [ 637.461687][T12034] ptrace attach of "/syz-executor exec"[10822] was attempted by "/syz-executor exec"[12034] [ 638.705575][T12045] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1505'. [ 639.073882][T12050] afs: Unknown parameter '' [ 639.815616][T12069] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1509'. [ 639.962984][T12086] syz_tun: entered promiscuous mode [ 639.982565][T12086] batadv_slave_1: entered promiscuous mode [ 641.197306][T12156] block nbd1: NBD_DISCONNECT [ 644.710026][T12222] netlink: 186996 bytes leftover after parsing attributes in process `syz.2.1555'. [ 645.055284][ T5404] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 645.206777][ T5404] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.210476][ T5404] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.213752][ T5404] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 645.221217][ T5404] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 645.224490][ T5404] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.229590][ T5404] usb 7-1: config 0 descriptor?? [ 648.236406][ T5404] usbhid 7-1:0.0: can't add hid device: -71 [ 648.237986][ T5404] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 648.253996][ T5404] usb 7-1: USB disconnect, device number 13 [ 649.412531][T12290] 9pnet_fd: Insufficient options for proto=fd [ 649.414302][T12291] 9pnet_fd: Insufficient options for proto=fd [ 649.459280][T12290] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.463761][T12290] bridge_slave_1: left allmulticast mode [ 649.466116][T12290] bridge_slave_1: left promiscuous mode [ 649.467666][T12290] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.765945][ T6652] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 649.996953][ T6652] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.000262][ T6652] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.002851][ T6652] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 650.015505][ T6652] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 650.017907][ T6652] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.041266][ T6652] usb 7-1: config 0 descriptor?? [ 650.119295][T12315] can0: slcan on pts0. [ 650.317192][T12317] can0 (unregistered): slcan off pts0. [ 650.677856][T12322] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1583'. [ 651.160213][ T6652] usbhid 7-1:0.0: can't add hid device: -71 [ 651.162430][ T6652] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 651.164682][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 651.164690][ T39] audit: type=1326 audit(1729084234.789:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.0.1586" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x0 [ 651.175451][ T6652] usb 7-1: USB disconnect, device number 14 [ 651.510698][ T1291] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 651.735539][ T1291] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 651.737715][ T1291] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 651.740256][ T1291] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 651.742472][ T1291] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 651.747884][ T1291] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 651.755454][ T1291] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 651.757694][ T1291] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 651.759898][ T1291] usb 5-1: Product: syz [ 652.018465][ T1291] usb 5-1: Manufacturer: syz [ 652.024447][ T1291] cdc_wdm 5-1:1.0: skipping garbage [ 652.025866][ T1291] cdc_wdm 5-1:1.0: skipping garbage [ 652.028007][ T1291] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 652.029509][ T1291] cdc_wdm 5-1:1.0: Unknown control protocol [ 652.235392][ T1291] usb 5-1: USB disconnect, device number 23 [ 652.496058][T12361] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1592'. [ 652.821020][T12381] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1599'. [ 652.925288][ T1291] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 653.102320][ T1291] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.105113][ T1291] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.115225][ T1291] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 653.118514][ T1291] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 653.120805][ T1291] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.136342][ T1291] usb 7-1: config 0 descriptor?? [ 654.689617][T12404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1604'. [ 655.030969][T12417] netlink: 'syz.0.1605': attribute type 21 has an invalid length. [ 655.217610][ T39] audit: type=1326 audit(1729084238.849:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.0.1605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 655.243270][ T39] audit: type=1326 audit(1729084238.849:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.0.1605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 655.256877][ T39] audit: type=1326 audit(1729084238.849:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.0.1605" exe="/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 655.262451][ T39] audit: type=1326 audit(1729084238.849:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.0.1605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 655.281903][ T39] audit: type=1326 audit(1729084238.849:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.0.1605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 655.287461][ T39] audit: type=1326 audit(1729084238.849:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.0.1605" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 655.292998][ T39] audit: type=1326 audit(1729084238.849:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.0.1605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 655.300201][ T39] audit: type=1326 audit(1729084238.849:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.0.1605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 655.326467][ T39] audit: type=1326 audit(1729084238.869:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.0.1605" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 655.719950][T12436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1614'. [ 655.723939][T12436] bridge_slave_1: left allmulticast mode [ 655.725557][T12436] bridge_slave_1: left promiscuous mode [ 655.727575][T12436] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.747420][T12436] bridge_slave_0: left allmulticast mode [ 655.749262][T12436] bridge_slave_0: left promiscuous mode [ 655.750754][T12436] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.875532][T12437] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1613'. [ 656.722963][ T1291] usbhid 7-1:0.0: can't add hid device: -71 [ 656.724596][ T1291] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 656.727405][ T1291] usb 7-1: USB disconnect, device number 15 [ 656.779911][T12458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1621'. [ 657.366513][T12479] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1626'. [ 657.465513][ T8] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 657.616885][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.619701][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.622198][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 657.634138][ T8] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 657.641821][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.652489][ T8] usb 5-1: config 0 descriptor?? [ 658.536397][T12504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 659.613505][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 659.615223][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 659.618705][ T8] usb 5-1: USB disconnect, device number 24 [ 660.177742][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1636'. [ 660.213522][T12514] FAULT_INJECTION: forcing a failure. [ 660.213522][T12514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.229838][T12514] CPU: 1 UID: 0 PID: 12514 Comm: syz.0.1637 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 660.232621][T12514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 660.235430][T12514] Call Trace: [ 660.236577][T12514] [ 660.237407][T12514] dump_stack_lvl+0x16c/0x1f0 [ 660.238627][T12514] should_fail_ex+0x497/0x5b0 [ 660.239847][T12514] _copy_from_user+0x30/0xf0 [ 660.241059][T12514] get_compat_msghdr+0xa8/0x170 [ 660.242323][T12514] ? __pfx_get_compat_msghdr+0x10/0x10 [ 660.243726][T12514] ? __pfx___lock_acquire+0x10/0x10 [ 660.245215][T12514] ___sys_sendmsg+0x1b0/0x1e0 [ 660.246432][T12514] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.247774][T12514] ? lock_acquire+0x2f/0xb0 [ 660.248961][T12514] ? __fget_files+0x40/0x3f0 [ 660.250170][T12514] ? fdget+0x176/0x210 [ 660.251226][T12514] __sys_sendmsg+0x117/0x1f0 [ 660.252436][T12514] ? __pfx___sys_sendmsg+0x10/0x10 [ 660.253756][T12514] ? __fget_files+0x244/0x3f0 [ 660.255024][T12514] __do_fast_syscall_32+0x73/0x120 [ 660.256369][T12514] do_fast_syscall_32+0x32/0x80 [ 660.257626][T12514] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 660.259245][T12514] RIP: 0023:0xf73ce579 [ 660.260308][T12514] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 660.265240][T12514] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 660.267381][T12514] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020004340 [ 660.269409][T12514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 660.271474][T12514] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 660.273499][T12514] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 660.275564][T12514] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 660.277602][T12514] [ 660.278464][ C1] vkms_vblank_simulate: vblank timer overrun [ 660.457720][T12520] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 661.205290][ T30] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 661.239742][T12541] FAULT_INJECTION: forcing a failure. [ 661.239742][T12541] name failslab, interval 1, probability 0, space 0, times 0 [ 661.252132][T12541] CPU: 3 UID: 0 PID: 12541 Comm: syz.3.1647 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 661.254923][T12541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 661.257677][T12541] Call Trace: [ 661.258547][T12541] [ 661.259319][T12541] dump_stack_lvl+0x16c/0x1f0 [ 661.260570][T12541] should_fail_ex+0x497/0x5b0 [ 661.261798][T12541] ? fs_reclaim_acquire+0xae/0x150 [ 661.263130][T12541] should_failslab+0xc2/0x120 [ 661.264394][T12541] kmem_cache_alloc_node_noprof+0x71/0x310 [ 661.265913][T12541] ? __alloc_skb+0x2b3/0x380 [ 661.267129][T12541] __alloc_skb+0x2b3/0x380 [ 661.268322][T12541] ? __pfx___alloc_skb+0x10/0x10 [ 661.269605][T12541] ? lock_acquire+0x2f/0xb0 [ 661.271005][T12541] netlink_alloc_large_skb+0x69/0x130 [ 661.272686][T12541] netlink_sendmsg+0x689/0xd70 [ 661.273928][T12541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.275298][T12541] ? lock_acquire+0x2f/0xb0 [ 661.276511][T12541] ____sys_sendmsg+0x9ae/0xb40 [ 661.277761][T12541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.279132][T12541] ? get_compat_msghdr+0x11b/0x170 [ 661.280483][T12541] ? __pfx___lock_acquire+0x10/0x10 [ 661.281835][T12541] ___sys_sendmsg+0x135/0x1e0 [ 661.283060][T12541] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.284447][T12541] ? lock_acquire+0x2f/0xb0 [ 661.285632][T12541] ? __fget_files+0x40/0x3f0 [ 661.286840][T12541] ? fdget+0x176/0x210 [ 661.287906][T12541] __sys_sendmsg+0x117/0x1f0 [ 661.289137][T12541] ? __pfx___sys_sendmsg+0x10/0x10 [ 661.290471][T12541] ? __fget_files+0x244/0x3f0 [ 661.291712][T12541] __do_fast_syscall_32+0x73/0x120 [ 661.293078][T12541] do_fast_syscall_32+0x32/0x80 [ 661.294409][T12541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 661.296035][T12541] RIP: 0023:0xf7fb0579 [ 661.297117][T12541] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 661.302058][T12541] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 661.304234][T12541] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000340 [ 661.306262][T12541] RDX: 0000000000008880 RSI: 0000000000000000 RDI: 0000000000000000 [ 661.308314][T12541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 661.310337][T12541] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 661.312394][T12541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 661.314433][T12541] [ 661.376893][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.379680][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.382149][ T30] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 661.385449][ T30] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 661.388036][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.390824][ T30] usb 6-1: config 0 descriptor?? [ 661.516351][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 661.516365][ T39] audit: type=1326 audit(1729084245.149:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12547 comm="syz.3.1650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 661.539735][ T39] audit: type=1326 audit(1729084245.169:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12547 comm="syz.3.1650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 664.189573][ T30] usbhid 6-1:0.0: can't add hid device: -71 [ 664.192662][ T30] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 664.236019][ T30] usb 6-1: USB disconnect, device number 15 [ 664.245713][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1658'. [ 664.445202][ T6652] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 664.596490][ T6652] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 664.600935][ T6652] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 664.609808][ T6652] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 664.614568][ T6652] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 664.629488][ T6652] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 664.633936][ T6652] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 664.640508][ T6652] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 664.652927][ T6652] usb 5-1: Product: syz [ 664.656147][ T6652] usb 5-1: Manufacturer: syz [ 664.668620][ T6652] cdc_wdm 5-1:1.0: skipping garbage [ 664.670040][ T6652] cdc_wdm 5-1:1.0: skipping garbage [ 664.671882][ T6652] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 664.676067][ T6652] cdc_wdm 5-1:1.0: Unknown control protocol [ 664.869603][ T6652] usb 5-1: USB disconnect, device number 25 [ 666.510451][T12616] xfs: Unknown parameter 'grpquota®Å¬ñé—²†¯èFû' [ 666.682223][T12620] FAULT_INJECTION: forcing a failure. [ 666.682223][T12620] name failslab, interval 1, probability 0, space 0, times 0 [ 666.695198][T12620] CPU: 3 UID: 0 PID: 12620 Comm: syz.3.1667 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 666.697927][T12620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 666.700635][T12620] Call Trace: [ 666.701508][T12620] [ 666.702283][T12620] dump_stack_lvl+0x16c/0x1f0 [ 666.703502][T12620] should_fail_ex+0x497/0x5b0 [ 666.704745][T12620] ? fs_reclaim_acquire+0xae/0x150 [ 666.706064][T12620] should_failslab+0xc2/0x120 [ 666.707294][T12620] __kmalloc_noprof+0xcb/0x410 [ 666.708557][T12620] ? __pfx___mutex_trylock_common+0x10/0x10 [ 666.710101][T12620] ? genl_rcv_msg+0x580/0x800 [ 666.711332][T12620] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 666.713162][T12620] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 666.714574][T12620] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 666.716155][T12620] ? bpf_lsm_capable+0x9/0x10 [ 666.717390][T12620] ? security_capable+0x7e/0x260 [ 666.718696][T12620] genl_rcv_msg+0x565/0x800 [ 666.719884][T12620] ? __pfx_genl_rcv_msg+0x10/0x10 [ 666.721215][T12620] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 666.722627][T12620] ? __pfx_nl802154_set_cca_mode+0x10/0x10 [ 666.724150][T12620] ? __pfx_nl802154_post_doit+0x10/0x10 [ 666.725581][T12620] ? __pfx___lock_acquire+0x10/0x10 [ 666.726939][T12620] netlink_rcv_skb+0x165/0x410 [ 666.728185][T12620] ? __pfx_genl_rcv_msg+0x10/0x10 [ 666.729490][T12620] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 666.730862][T12620] ? down_read+0xc9/0x330 [ 666.731992][T12620] ? __pfx_down_read+0x10/0x10 [ 666.733257][T12620] ? netlink_deliver_tap+0x1ae/0xcf0 [ 666.734628][T12620] genl_rcv+0x28/0x40 [ 666.735677][T12620] netlink_unicast+0x53c/0x7f0 [ 666.736941][T12620] ? __pfx_netlink_unicast+0x10/0x10 [ 666.738323][T12620] ? __phys_addr_symbol+0x30/0x80 [ 666.739649][T12620] ? __check_object_size+0x4a1/0x710 [ 666.741036][T12620] netlink_sendmsg+0x8b8/0xd70 [ 666.742299][T12620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.743670][T12620] ? lock_acquire+0x2f/0xb0 [ 666.744878][T12620] ____sys_sendmsg+0x9ae/0xb40 [ 666.746127][T12620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 666.747489][T12620] ? get_compat_msghdr+0x11b/0x170 [ 666.748817][T12620] ? __pfx___lock_acquire+0x10/0x10 [ 666.750161][T12620] ___sys_sendmsg+0x135/0x1e0 [ 666.751404][T12620] ? __pfx____sys_sendmsg+0x10/0x10 [ 666.752770][T12620] ? lock_acquire+0x2f/0xb0 [ 666.753956][T12620] ? __fget_files+0x40/0x3f0 [ 666.755155][T12620] ? fdget+0x176/0x210 [ 666.756225][T12620] __sys_sendmsg+0x117/0x1f0 [ 666.757433][T12620] ? __pfx___sys_sendmsg+0x10/0x10 [ 666.758752][T12620] ? __fget_files+0x244/0x3f0 [ 666.760112][T12620] __do_fast_syscall_32+0x73/0x120 [ 666.761527][T12620] do_fast_syscall_32+0x32/0x80 [ 666.762865][T12620] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 666.764572][T12620] RIP: 0023:0xf7fb0579 [ 666.765671][T12620] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 666.770614][T12620] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 666.772749][T12620] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000340 [ 666.774812][T12620] RDX: 0000000000008880 RSI: 0000000000000000 RDI: 0000000000000000 [ 666.776879][T12620] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 666.778902][T12620] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 666.780955][T12620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 666.782992][T12620] [ 667.573271][T12627] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1669'. [ 668.475638][ T6633] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 668.626665][ T6633] usb 5-1: config 0 has no interfaces? [ 668.628124][ T6633] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 668.638204][ T6633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.645493][ T6633] usb 5-1: config 0 descriptor?? [ 668.985480][ T6633] usb 5-1: USB disconnect, device number 26 [ 670.957919][ T979] libceph: connect (1)[c::]:6789 error -101 [ 670.959623][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 671.012719][ T8] libceph: connect (1)[b::]:6789 error -101 [ 671.014435][ T8] libceph: mon0 (1)[b::]:6789 connect error [ 671.215445][ T979] libceph: connect (1)[c::]:6789 error -101 [ 671.217443][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 671.276289][ T8] libceph: connect (1)[b::]:6789 error -101 [ 671.282259][ T8] libceph: mon0 (1)[b::]:6789 connect error [ 671.725630][ T979] libceph: connect (1)[c::]:6789 error -101 [ 671.727320][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 671.768610][T12705] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.1682'. [ 671.771658][T12705] netlink: 183228 bytes leftover after parsing attributes in process `syz.3.1682'. [ 671.774389][T12685] ceph: No mds server is up or the cluster is laggy [ 671.782087][T12688] ceph: No mds server is up or the cluster is laggy [ 671.796623][ T8] libceph: connect (1)[b::]:6789 error -101 [ 671.798433][ T8] libceph: mon0 (1)[b::]:6789 connect error [ 674.135656][ T1291] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 674.837286][T12778] warn_alloc: 1 callbacks suppressed [ 674.837302][T12778] syz.3.1700: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 674.866670][T12778] CPU: 3 UID: 0 PID: 12778 Comm: syz.3.1700 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 674.870520][T12778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 674.874274][T12778] Call Trace: [ 674.875477][T12778] [ 674.876545][T12778] dump_stack_lvl+0x16c/0x1f0 [ 674.878249][T12778] warn_alloc+0x24d/0x3a0 [ 674.879799][T12778] ? __pfx_warn_alloc+0x10/0x10 [ 674.881322][T12778] ? __get_vm_area_node+0x190/0x2d0 [ 674.882693][T12778] ? __get_vm_area_node+0x1bc/0x2d0 [ 674.884100][T12778] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 674.885672][T12778] ? __pfx___lock_acquire+0x10/0x10 [ 674.887423][T12778] ? newary+0x175/0xc40 [ 674.888597][T12778] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 674.890813][T12778] ? rcu_is_watching+0x12/0xc0 [ 674.892458][T12778] ? rcu_is_watching+0x12/0xc0 [ 674.894093][T12778] ? trace_kmalloc+0x2d/0xe0 [ 674.895661][T12778] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 674.897562][T12778] ? newary+0x175/0xc40 [ 674.898977][T12778] __kvmalloc_node_noprof+0x14f/0x1a0 [ 674.900801][T12778] ? newary+0x175/0xc40 [ 674.902216][T12778] newary+0x175/0xc40 [ 674.903539][T12778] ? __pfx_perf_event_namespaces+0x10/0x10 [ 674.905477][T12778] ? lock_acquire.part.0+0x11b/0x380 [ 674.907372][T12778] ipcget+0xe5/0xd80 [ 674.908872][T12778] ? __pfx_do_futex+0x10/0x10 [ 674.910550][T12778] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 674.912364][T12778] ? __pfx_ipcget+0x10/0x10 [ 674.913869][T12778] ? __ia32_sys_futex_time32+0x1da/0x460 [ 674.915723][T12778] ? __ia32_sys_futex_time32+0x2fd/0x460 [ 674.917599][T12778] __ia32_sys_semget+0x1b8/0x250 [ 674.919264][T12778] ? __pfx___ia32_sys_semget+0x10/0x10 [ 674.921091][T12778] __do_fast_syscall_32+0x73/0x120 [ 674.922790][T12778] do_fast_syscall_32+0x32/0x80 [ 674.924517][T12778] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 674.926628][T12778] RIP: 0023:0xf7fb0579 [ 674.928136][T12778] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 674.934489][T12778] RSP: 002b:00000000f571556c EFLAGS: 00000296 ORIG_RAX: 0000000000000189 [ 674.937309][T12778] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000004000 [ 674.940013][T12778] RDX: 0000000000000764 RSI: 0000000000000000 RDI: 0000000000000000 [ 674.942608][T12778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 674.945298][T12778] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 674.947896][T12778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 674.950533][T12778] [ 674.951984][T12778] Mem-Info: [ 674.953355][T12778] active_anon:1638 inactive_anon:2328 isolated_anon:0 [ 674.953355][T12778] active_file:14136 inactive_file:4887 isolated_file:0 [ 674.953355][T12778] unevictable:784 dirty:324 writeback:0 [ 674.953355][T12778] slab_reclaimable:4854 slab_unreclaimable:59192 [ 674.953355][T12778] mapped:20896 shmem:775 pagetables:647 [ 674.953355][T12778] sec_pagetables:340 bounce:0 [ 674.953355][T12778] kernel_misc_reclaimable:0 [ 674.953355][T12778] free:98303 free_pcp:740 free_cma:0 [ 674.968614][T12778] Node 0 active_anon:84kB inactive_anon:216kB active_file:0kB inactive_file:36kB unevictable:1600kB isolated(anon):0kB isolated(file):0kB mapped:3120kB dirty:20kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9292kB pagetables:1444kB sec_pagetables:1264kB all_unreclaimable? no [ 674.980216][T12778] Node 1 active_anon:6368kB inactive_anon:8712kB active_file:56544kB inactive_file:19512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:80464kB dirty:1276kB writeback:0kB shmem:1564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1976kB pagetables:1144kB sec_pagetables:96kB all_unreclaimable? no [ 674.995283][T12778] Node 0 DMA free:920kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:300kB local_pcp:4kB free_cma:0kB [ 675.002762][T12778] lowmem_reserve[]: 0 273 0 0 0 [ 675.004165][T12778] Node 0 DMA32 free:22588kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:2048KB active_anon:36kB inactive_anon:332kB active_file:0kB inactive_file:36kB unevictable:1600kB writepending:20kB present:1032196kB managed:306284kB mlocked:64kB bounce:0kB free_pcp:632kB local_pcp:188kB free_cma:0kB [ 675.013675][T12778] lowmem_reserve[]: 0 0 0 0 0 [ 675.025212][T12778] Node 1 DMA32 free:372224kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:6368kB inactive_anon:7572kB active_file:25904kB inactive_file:50180kB unevictable:1536kB writepending:1276kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:1820kB local_pcp:936kB free_cma:0kB [ 675.037890][T12778] lowmem_reserve[]: 0 0 0 0 0 [ 675.039597][T12778] Node 0 DMA: 16*4kB (U) 43*8kB (U) 21*16kB (U) 6*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 936kB [ 675.044903][T12778] Node 0 DMA32: 471*4kB (UMEH) 290*8kB (UMEH) 64*16kB (UME) 37*32kB (UMEH) 27*64kB (UME) 25*128kB (UME) 13*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 22860kB [ 675.050950][T12778] Node 1 DMA32: 1194*4kB (UME) 986*8kB (UME) 892*16kB (UME) 499*32kB (UME) 240*64kB (UME) 666*128kB (UME) 485*256kB (UME) 133*512kB (UME) 23*1024kB (UME) 7*2048kB (UM) 0*4096kB = 373656kB [ 675.059156][T12778] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 675.061657][T12778] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 675.065554][T12778] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 675.069029][T12778] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 675.071461][T12778] 20272 total pagecache pages [ 675.073085][T12778] 686 pages in swap cache [ 675.074556][T12778] Free swap = 92264kB [ 675.076066][T12778] Total swap = 124996kB [ 675.077494][T12778] 524155 pages RAM [ 675.079010][T12778] 0 pages HighMem/MovableOnly [ 675.080623][T12778] 206681 pages reserved [ 675.082037][T12778] 0 pages cma reserved [ 675.226221][T12792] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1704'. [ 675.239579][T12792] binder: 12791:12792 ioctl 4018620d 0 returned -22 [ 675.367563][T12801] netlink: 'syz.0.1705': attribute type 1 has an invalid length. [ 677.701984][T12840] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1715'. [ 677.711551][T12840] binder: 12838:12840 ioctl 4018620d 0 returned -22 [ 678.557739][T12857] xt_CT: No such helper "syz0" [ 679.578271][T12885] ./file1: Can't lookup blockdev [ 679.583276][T12885] netlink: 'syz.2.1728': attribute type 10 has an invalid length. [ 680.140471][T12895] hub 9-0:1.0: USB hub found [ 680.195752][T12895] hub 9-0:1.0: 1 port detected [ 680.511040][T12909] Process accounting resumed [ 680.978103][T12919] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1736'. [ 681.080272][T12922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1737'. [ 681.891580][T12941] vivid-007: disconnect [ 682.040534][T12946] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 682.057964][ T5359] Bluetooth: hci2: command 0x0406 tx timeout [ 682.060424][ T5359] Bluetooth: hci0: command 0x0406 tx timeout [ 682.065418][ T5352] Bluetooth: hci3: command 0x0406 tx timeout [ 682.171119][T12950] 9pnet: Could not find request transport: rd [ 682.334198][T12941] vivid-007: reconnect [ 682.423235][ T1162] Bluetooth: hci5: Frame reassembly failed (-84) [ 683.040383][T12982] FAULT_INJECTION: forcing a failure. [ 683.040383][T12982] name failslab, interval 1, probability 0, space 0, times 0 [ 683.043742][T12982] CPU: 3 UID: 0 PID: 12982 Comm: syz.2.1748 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 683.046961][T12982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 683.050519][T12982] Call Trace: [ 683.051753][T12982] [ 683.052969][T12982] dump_stack_lvl+0x16c/0x1f0 [ 683.054552][T12982] should_fail_ex+0x497/0x5b0 [ 683.055981][T12982] ? fs_reclaim_acquire+0xae/0x150 [ 683.057551][T12982] should_failslab+0xc2/0x120 [ 683.058942][T12982] __kmalloc_noprof+0xcb/0x410 [ 683.060283][T12982] ? simple_dname+0x148/0x1c0 [ 683.061501][T12982] tomoyo_encode2+0x100/0x3e0 [ 683.062654][T12982] tomoyo_realpath_from_path+0x1a7/0x710 [ 683.064187][T12982] ? tomoyo_path_number_perm+0x232/0x5b0 [ 683.065636][T12982] tomoyo_path_number_perm+0x245/0x5b0 [ 683.067108][T12982] ? tomoyo_path_number_perm+0x232/0x5b0 [ 683.068552][T12982] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 683.070138][T12982] ? trace_lock_acquire+0x14a/0x1d0 [ 683.071504][T12982] ? lock_acquire+0x2f/0xb0 [ 683.072700][T12982] ? __fget_files+0x40/0x3f0 [ 683.073899][T12982] ? __fget_files+0x244/0x3f0 [ 683.075149][T12982] security_file_ioctl_compat+0x9b/0x240 [ 683.076608][T12982] __do_compat_sys_ioctl+0x52/0x2b0 [ 683.077976][T12982] __do_fast_syscall_32+0x73/0x120 [ 683.079324][T12982] do_fast_syscall_32+0x32/0x80 [ 683.080596][T12982] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 683.082223][T12982] RIP: 0023:0xf7f78579 [ 683.083280][T12982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 683.088278][T12982] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 683.090376][T12982] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000040305829 [ 683.092318][T12982] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 683.094502][T12982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 683.097281][T12982] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 683.099750][T12982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 683.101891][T12982] [ 683.103741][T12982] ERROR: Out of memory at tomoyo_realpath_from_path. [ 683.176894][T12982] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1748'. [ 683.639149][T13000] netlink: 'syz.2.1752': attribute type 10 has an invalid length. [ 683.653210][T13000] team0: Port device netdevsim0 added [ 683.665559][T13000] netlink: 'syz.2.1752': attribute type 10 has an invalid length. [ 683.678369][T13000] team0: Port device netdevsim0 removed [ 683.682799][T13000] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 684.127479][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1754'. [ 684.465263][ T5349] Bluetooth: hci5: command 0x1003 tx timeout [ 684.465735][ T5354] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 684.544055][T13016] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 684.545817][T13016] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 684.548594][T13016] vhci_hcd vhci_hcd.0: Device attached [ 684.550664][T13017] vhci_hcd: cannot find the pending unlink 5 [ 684.688353][T13017] vhci_hcd: connection closed [ 684.688604][ T1162] vhci_hcd: stop threads [ 684.690984][ T1162] vhci_hcd: release socket [ 684.692234][ T1162] vhci_hcd: disconnect device [ 684.725294][ T8] vhci_hcd: vhci_device speed not set [ 684.997616][ T39] audit: type=1326 audit(1729084268.629:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.1.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 685.012861][ T39] audit: type=1326 audit(1729084268.639:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.1.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 685.019317][ T39] audit: type=1326 audit(1729084268.639:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.1.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 685.032012][ T39] audit: type=1326 audit(1729084268.639:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.1.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 685.047137][ T39] audit: type=1326 audit(1729084268.639:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.1.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 685.055526][ T39] audit: type=1326 audit(1729084268.639:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.1.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 685.061251][ T39] audit: type=1326 audit(1729084268.639:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.1.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 685.072116][ T39] audit: type=1326 audit(1729084268.639:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.1.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 685.079216][ T39] audit: type=1326 audit(1729084268.639:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.1.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 685.084770][T13039] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1763'. [ 685.087170][ T39] audit: type=1326 audit(1729084268.639:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.1.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 685.569997][T13059] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1768'. [ 685.572724][T13059] netlink: 'syz.3.1768': attribute type 1 has an invalid length. [ 685.574920][T13059] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1768'. [ 685.594140][T13059] Process accounting resumed [ 685.601256][T13061] netlink: 'syz.1.1770': attribute type 11 has an invalid length. [ 685.604341][T13061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1770'. [ 685.716907][T13065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.750079][T13065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.843129][T13074] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1775'. [ 685.955896][ T25] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 686.107159][ T25] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 686.110179][ T25] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 686.113640][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 686.116812][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 686.120542][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 686.131151][ T25] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 686.134291][ T25] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 686.137179][ T25] usb 6-1: Product: syz [ 686.138632][ T25] usb 6-1: Manufacturer: syz [ 686.143701][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 686.145620][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 686.156094][ T25] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 686.157658][ T25] cdc_wdm 6-1:1.0: Unknown control protocol [ 686.305581][ T30] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 686.420333][ T8] usb 6-1: USB disconnect, device number 16 [ 686.487160][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 686.490660][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 686.494673][ T30] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 686.515307][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.528086][ T30] usb 7-1: config 0 descriptor?? [ 686.734861][ T30] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 686.855212][T13066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.868802][T13066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.902784][T13105] input: syz1 as /devices/virtual/input/input16 [ 687.115218][ T30] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 687.267093][ T30] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 687.269348][ T30] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 687.278938][ T30] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 687.281274][ T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 687.287950][ T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 687.291192][ T9838] usb 7-1: USB disconnect, device number 16 [ 687.293807][ T9838] iowarrior 7-1:0.0: I/O-Warror #0 now disconnected [ 687.306399][ T30] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 687.309117][ T30] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 687.311202][ T30] usb 6-1: Product: syz [ 687.312291][ T30] usb 6-1: Manufacturer: syz [ 687.319968][ T30] cdc_wdm 6-1:1.0: skipping garbage [ 687.321369][ T30] cdc_wdm 6-1:1.0: skipping garbage [ 687.326815][ T30] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 687.328445][ T30] cdc_wdm 6-1:1.0: Unknown control protocol [ 687.595210][ T30] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 687.768890][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.772260][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.775991][ T30] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 687.780366][ T30] usb 8-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 687.782986][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.790750][ T30] usb 8-1: config 0 descriptor?? [ 687.880927][ T8] usb 6-1: USB disconnect, device number 17 [ 690.636412][ T30] usbhid 8-1:0.0: can't add hid device: -71 [ 690.641480][ T30] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 690.645062][ T30] usb 8-1: USB disconnect, device number 24 [ 690.777506][T13154] IPv6: addrconf: prefix option has invalid lifetime [ 691.146908][ T5354] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 691.147760][T13172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.385195][ T25] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 691.566310][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.569930][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.572416][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 691.578128][ T25] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 691.580692][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.589940][ T25] usb 6-1: config 0 descriptor?? [ 692.452752][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1806'. [ 692.460938][T13193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1806'. [ 692.543279][T13196] FAULT_INJECTION: forcing a failure. [ 692.543279][T13196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.551636][T13196] CPU: 3 UID: 0 PID: 13196 Comm: syz.3.1807 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 692.555847][T13196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 692.559982][T13196] Call Trace: [ 692.561409][T13196] [ 692.562535][T13196] dump_stack_lvl+0x16c/0x1f0 [ 692.564345][T13196] should_fail_ex+0x497/0x5b0 [ 692.566090][T13196] _copy_from_user+0x30/0xf0 [ 692.568031][T13196] ucma_write+0x129/0x330 [ 692.569747][T13197] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1805'. [ 692.569897][T13196] ? __pfx_ucma_write+0x10/0x10 [ 692.576168][T13196] ? bpf_lsm_file_permission+0x9/0x10 [ 692.578671][T13196] ? security_file_permission+0x71/0x210 [ 692.580739][T13196] ? __pfx_ucma_write+0x10/0x10 [ 692.582516][T13196] vfs_write+0x28e/0x1140 [ 692.584138][T13196] ? __fget_files+0x23a/0x3f0 [ 692.585875][T13196] ? __pfx_lock_release+0x10/0x10 [ 692.587710][T13196] ? trace_lock_acquire+0x14a/0x1d0 [ 692.589659][T13196] ? __pfx_vfs_write+0x10/0x10 [ 692.591472][T13196] ? lock_acquire+0x2f/0xb0 [ 692.593151][T13196] ? __fget_files+0x40/0x3f0 [ 692.594891][T13196] ? __fget_files+0x244/0x3f0 [ 692.596688][T13196] ksys_write+0x1fa/0x260 [ 692.598269][T13196] ? __pfx_ksys_write+0x10/0x10 [ 692.600191][T13196] __do_fast_syscall_32+0x73/0x120 [ 692.602456][T13196] do_fast_syscall_32+0x32/0x80 [ 692.604594][T13196] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 692.607436][T13196] RIP: 0023:0xf7fb0579 [ 692.609173][T13196] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 692.615697][T13196] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 692.618569][T13196] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000180 [ 692.621904][T13196] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 692.625495][T13196] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 692.628727][T13196] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 692.631826][T13196] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 692.634636][T13196] [ 693.355232][ T979] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 693.506483][ T979] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 693.508657][ T979] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 693.511774][ T979] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 693.514588][ T979] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 693.535229][ T979] usb 8-1: config 0 interface 0 has no altsetting 0 [ 693.538862][ T979] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 693.541810][ T979] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 693.544634][ T979] usb 8-1: Product: syz [ 693.545819][ T979] usb 8-1: Manufacturer: syz [ 693.547039][ T979] usb 8-1: SerialNumber: syz [ 693.549288][ T979] usb 8-1: config 0 descriptor?? [ 693.553660][ T979] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 693.557052][ T979] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 693.857094][ T30] usb 8-1: USB disconnect, device number 25 [ 693.872953][ T30] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 694.234432][ T25] usbhid 6-1:0.0: can't add hid device: -71 [ 694.236191][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 694.245492][ T25] usb 6-1: USB disconnect, device number 18 [ 694.431241][T13230] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1816'. [ 695.354593][T13244] FAULT_INJECTION: forcing a failure. [ 695.354593][T13244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.359407][T13244] CPU: 3 UID: 0 PID: 13244 Comm: syz.2.1819 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 695.362418][T13244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 695.365217][T13244] Call Trace: [ 695.366083][T13244] [ 695.366895][T13244] dump_stack_lvl+0x16c/0x1f0 [ 695.368550][T13244] should_fail_ex+0x497/0x5b0 [ 695.370347][T13244] _copy_from_user+0x30/0xf0 [ 695.372157][T13244] ucma_query_route+0xe6/0xda0 [ 695.374112][T13244] ? __pfx_ucma_query_route+0x10/0x10 [ 695.376216][T13244] ? __might_fault+0xe3/0x190 [ 695.377951][T13244] ? __pfx_ucma_query_route+0x10/0x10 [ 695.379832][T13244] ucma_write+0x1f9/0x330 [ 695.381346][T13244] ? __pfx_ucma_write+0x10/0x10 [ 695.383021][T13244] ? bpf_lsm_file_permission+0x9/0x10 [ 695.384897][T13244] ? security_file_permission+0x71/0x210 [ 695.386802][T13244] ? __pfx_ucma_write+0x10/0x10 [ 695.388333][T13244] vfs_write+0x28e/0x1140 [ 695.389465][T13244] ? __fget_files+0x23a/0x3f0 [ 695.390836][T13244] ? __pfx_lock_release+0x10/0x10 [ 695.392405][T13244] ? trace_lock_acquire+0x14a/0x1d0 [ 695.394647][T13244] ? __pfx_vfs_write+0x10/0x10 [ 695.396598][T13244] ? lock_acquire+0x2f/0xb0 [ 695.398278][T13244] ? __fget_files+0x40/0x3f0 [ 695.399888][T13244] ? __fget_files+0x244/0x3f0 [ 695.401649][T13244] ksys_write+0x1fa/0x260 [ 695.403182][T13244] ? __pfx_ksys_write+0x10/0x10 [ 695.404996][T13244] __do_fast_syscall_32+0x73/0x120 [ 695.406869][T13244] do_fast_syscall_32+0x32/0x80 [ 695.408663][T13244] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 695.410423][T13244] RIP: 0023:0xf7f78579 [ 695.411568][T13244] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 695.416693][T13244] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 695.419253][T13244] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000180 [ 695.422865][T13244] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 695.426094][T13244] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 695.428331][T13244] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 695.430487][T13244] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 695.432652][T13244] [ 695.942386][ T5405] libceph: connect (1)[c::]:6789 error -101 [ 695.944050][ T5405] libceph: mon0 (1)[c::]:6789 connect error [ 696.036038][T13263] ceph: No mds server is up or the cluster is laggy [ 696.064606][ T5349] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 696.068820][ T5349] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 696.071944][ T5349] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 696.078155][ T5349] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 696.080454][ T5349] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 696.082489][ T5349] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 696.293404][T13271] chnl_net:caif_netlink_parms(): no params data found [ 696.410496][T13271] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.418749][T13271] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.424372][T13271] bridge_slave_0: entered allmulticast mode [ 696.440578][T13271] bridge_slave_0: entered promiscuous mode [ 696.457201][T13271] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.462004][T13271] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.470232][T13271] bridge_slave_1: entered allmulticast mode [ 696.476742][T13271] bridge_slave_1: entered promiscuous mode [ 696.574123][T13271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.594653][T13271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.675611][T13271] team0: Port device team_slave_0 added [ 696.690606][T13271] team0: Port device team_slave_1 added [ 696.766626][T13271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.768482][T13271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.776740][T13271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.806502][T13271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.808951][T13271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.817385][T13271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.821207][T13269] netlink: 'syz.1.1827': attribute type 10 has an invalid length. [ 696.835029][T13269] bond0: (slave bond_slave_0): Releasing backup interface [ 696.863471][T13281] FAULT_INJECTION: forcing a failure. [ 696.863471][T13281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.868433][T13281] CPU: 3 UID: 0 PID: 13281 Comm: syz.3.1829 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 696.872178][T13281] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 696.875687][T13281] Call Trace: [ 696.876582][T13281] [ 696.877365][T13281] dump_stack_lvl+0x16c/0x1f0 [ 696.878592][T13281] should_fail_ex+0x497/0x5b0 [ 696.879841][T13281] _copy_to_user+0x30/0xc0 [ 696.881012][T13281] ucma_query_route+0x46e/0xda0 [ 696.882391][T13281] ? __pfx_ucma_query_route+0x10/0x10 [ 696.884307][T13281] ? __might_fault+0xe3/0x190 [ 696.887701][T13281] ? __pfx_ucma_query_route+0x10/0x10 [ 696.887746][T13281] ucma_write+0x1f9/0x330 [ 696.890900][T13281] ? __pfx_ucma_write+0x10/0x10 [ 696.892552][T13281] ? bpf_lsm_file_permission+0x9/0x10 [ 696.893943][T13281] ? security_file_permission+0x71/0x210 [ 696.895480][T13281] ? __pfx_ucma_write+0x10/0x10 [ 696.897498][T13281] vfs_write+0x28e/0x1140 [ 696.899096][T13281] ? __fget_files+0x23a/0x3f0 [ 696.900732][T13281] ? __pfx_lock_release+0x10/0x10 [ 696.902482][T13281] ? trace_lock_acquire+0x14a/0x1d0 [ 696.903925][T13281] ? __pfx_vfs_write+0x10/0x10 [ 696.905194][T13281] ? lock_acquire+0x2f/0xb0 [ 696.906711][T13281] ? __fget_files+0x40/0x3f0 [ 696.908142][T13281] ? __fget_files+0x244/0x3f0 [ 696.909575][T13281] ksys_write+0x1fa/0x260 [ 696.910894][T13281] ? __pfx_ksys_write+0x10/0x10 [ 696.912391][T13281] __do_fast_syscall_32+0x73/0x120 [ 696.913972][T13281] do_fast_syscall_32+0x32/0x80 [ 696.915477][T13281] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 696.917404][T13281] RIP: 0023:0xf7fb0579 [ 696.918643][T13281] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 696.924434][T13281] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 696.926909][T13281] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000180 [ 696.929251][T13281] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 696.931629][T13281] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 696.934031][T13281] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 696.936414][T13281] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 696.938698][T13281] [ 697.160784][T13271] hsr_slave_0: entered promiscuous mode [ 697.162910][T13271] hsr_slave_1: entered promiscuous mode [ 697.164741][T13271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 697.167301][T13271] Cannot create hsr debugfs directory [ 697.732564][T13271] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.889857][T13271] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.082195][T13304] overlayfs: failed to resolve './file1': -2 [ 698.102673][T13271] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.145370][ T5349] Bluetooth: hci5: command tx timeout [ 698.199589][T13271] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.372009][T13271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 698.379655][T13271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 698.385421][T13271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 698.394606][T13271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 698.479216][T13271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.490490][T13271] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.501212][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.503290][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.553983][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.556663][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.810449][T13327] FAULT_INJECTION: forcing a failure. [ 698.810449][T13327] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 698.814086][T13327] CPU: 0 UID: 0 PID: 13327 Comm: syz.3.1838 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 698.816837][T13327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 698.819772][T13327] Call Trace: [ 698.820678][T13327] [ 698.821452][T13327] dump_stack_lvl+0x16c/0x1f0 [ 698.822685][T13327] should_fail_ex+0x497/0x5b0 [ 698.823937][T13327] ? fs_reclaim_acquire+0xae/0x150 [ 698.825263][T13327] should_fail_alloc_page+0xe7/0x130 [ 698.826635][T13327] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 698.828233][T13327] ? is_bpf_text_address+0x8a/0x1a0 [ 698.829645][T13327] __alloc_pages_noprof+0x190/0x25a0 [ 698.831026][T13327] ? __pfx_mark_lock+0x10/0x10 [ 698.832272][T13327] ? __pfx_mark_lock+0x10/0x10 [ 698.833510][T13327] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 698.835205][T13327] ? is_bpf_text_address+0x94/0x1a0 [ 698.836568][T13327] ? hlock_class+0x4e/0x130 [ 698.836726][T13271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.837823][T13327] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 698.841107][T13327] ? hlock_class+0x4e/0x130 [ 698.842287][T13327] ? mark_lock+0xb5/0xc60 [ 698.843406][T13327] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 698.844959][T13327] ? policy_nodemask+0xea/0x4e0 [ 698.846213][T13327] alloc_pages_mpol_noprof+0x2c9/0x610 [ 698.847611][T13327] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 698.849190][T13327] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 698.850632][T13327] folio_alloc_mpol_noprof+0x36/0xd0 [ 698.852003][T13327] vma_alloc_folio_noprof+0xee/0x1b0 [ 698.853354][T13327] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 698.854879][T13327] ? find_held_lock+0x2d/0x110 [ 698.856137][T13327] do_pte_missing+0x2010/0x3e50 [ 698.857405][T13327] __handle_mm_fault+0x100a/0x2a10 [ 698.858748][T13327] ? __pfx_mt_find+0x10/0x10 [ 698.860292][T13327] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 698.862292][T13327] ? __pfx___handle_mm_fault+0x10/0x10 [ 698.864284][T13327] ? find_vma+0xc0/0x140 [ 698.865687][T13327] ? __pfx_find_vma+0x10/0x10 [ 698.866894][T13327] handle_mm_fault+0x3fa/0xaa0 [ 698.868195][T13327] do_user_addr_fault+0x7a3/0x13f0 [ 698.869673][T13327] exc_page_fault+0x5c/0xc0 [ 698.871189][T13327] asm_exc_page_fault+0x26/0x30 [ 698.872828][T13327] RIP: 0010:_copy_to_user+0xa7/0xc0 [ 698.874557][T13327] Code: 89 ee 48 89 ef e8 69 a7 03 fd 4d 85 f6 75 b5 e8 af a5 03 fd 89 de 4c 89 e7 e8 85 f5 64 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb eb 8d 66 66 2e 0f 1f 84 00 00 00 [ 698.880554][T13327] RSP: 0018:ffffc9000607fa78 EFLAGS: 00050246 [ 698.882112][T13327] RAX: 0000000000000001 RBX: 00000000000000d0 RCX: 00000000000000d0 [ 698.884148][T13327] RDX: fffff52000c0ff7c RSI: ffffc9000607fb10 RDI: 0000000020002200 [ 698.886163][T13327] RBP: 0000000020002200 R08: 0000000000000000 R09: fffff52000c0ff7b [ 698.888289][T13327] R10: ffffc9000607fbdf R11: 0000000000000000 R12: ffffc9000607fb10 [ 698.888440][T13271] veth0_vlan: entered promiscuous mode [ 698.890319][T13327] R13: 00000000200022d0 R14: 0000000000000000 R15: 0000000000000000 [ 698.890336][T13327] ? _copy_to_user+0x9b/0xc0 [ 698.895426][T13327] ucma_query_route+0x46e/0xda0 [ 698.896712][T13327] ? __pfx_ucma_query_route+0x10/0x10 [ 698.897564][T13271] veth1_vlan: entered promiscuous mode [ 698.898104][T13327] ? __pfx_ucma_query_route+0x10/0x10 [ 698.900952][T13327] ? ucma_write+0x188/0x330 [ 698.902131][T13327] ? ucma_write+0x196/0x330 [ 698.903306][T13327] ? __pfx_ucma_query_route+0x10/0x10 [ 698.904710][T13327] ucma_write+0x1f9/0x330 [ 698.905837][T13327] ? __pfx_ucma_write+0x10/0x10 [ 698.907099][T13327] ? bpf_lsm_file_permission+0x9/0x10 [ 698.908490][T13327] ? security_file_permission+0x71/0x210 [ 698.909983][T13327] ? __pfx_ucma_write+0x10/0x10 [ 698.911233][T13327] vfs_write+0x28e/0x1140 [ 698.912358][T13327] ? __fget_files+0x23a/0x3f0 [ 698.913574][T13327] ? __pfx_lock_release+0x10/0x10 [ 698.914882][T13327] ? trace_lock_acquire+0x14a/0x1d0 [ 698.916230][T13327] ? __pfx_vfs_write+0x10/0x10 [ 698.917477][T13327] ? lock_acquire+0x2f/0xb0 [ 698.918124][T13271] veth0_macvtap: entered promiscuous mode [ 698.918655][T13327] ? __fget_files+0x40/0x3f0 [ 698.921405][T13327] ? __fget_files+0x244/0x3f0 [ 698.922629][T13327] ksys_write+0x1fa/0x260 [ 698.923763][T13327] ? __pfx_ksys_write+0x10/0x10 [ 698.925023][T13327] __do_fast_syscall_32+0x73/0x120 [ 698.926344][T13327] do_fast_syscall_32+0x32/0x80 [ 698.926723][T13271] veth1_macvtap: entered promiscuous mode [ 698.927609][T13327] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 698.930889][T13327] RIP: 0023:0xf7fb0579 [ 698.931962][T13327] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 698.936870][T13327] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 698.939009][T13327] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000180 [ 698.941829][T13327] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 698.944398][T13327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 698.946072][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.946428][T13327] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 698.949109][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.949118][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.951772][T13327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 698.951789][T13327] [ 698.970440][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.975621][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.980608][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.983141][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.995290][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.001212][T13271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.017642][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.021154][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.023978][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.028206][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.031307][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.035978][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.039348][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.045258][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.051195][T13271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.058588][T13271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.061528][T13271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.064375][T13271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.067625][T13271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.117716][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.119778][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.130501][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.133392][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.344749][T13343] binder: 13338:13343 ioctl c018620c 200005c0 returned -1 [ 699.499446][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1842'. [ 700.215345][ T5349] Bluetooth: hci5: command tx timeout [ 700.244560][T13364] syz.0.1848: page allocation failure: order:10, mode:0x40cc0(GFP_KERNEL|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 700.265278][T13364] CPU: 0 UID: 0 PID: 13364 Comm: syz.0.1848 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 700.268059][T13364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 700.270795][T13364] Call Trace: [ 700.271665][T13364] [ 700.272434][T13364] dump_stack_lvl+0x16c/0x1f0 [ 700.273637][T13364] warn_alloc+0x24d/0x3a0 [ 700.274755][T13364] ? __pfx_warn_alloc+0x10/0x10 [ 700.275974][T13364] ? __alloc_pages_direct_compact+0x45a/0x590 [ 700.277465][T13364] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 700.279039][T13364] ? psi_memstall_leave+0x17d/0x250 [ 700.280788][T13364] __alloc_pages_noprof+0x159c/0x25a0 [ 700.282392][T13364] ? hlock_class+0x4e/0x130 [ 700.283966][T13364] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 700.285660][T13364] ? __pfx___schedule+0x10/0x10 [ 700.287123][T13364] ? find_held_lock+0x2d/0x110 [ 700.288266][T13364] ? rds_info_getsockopt+0x376/0x4f0 [ 700.289894][T13364] ___kmalloc_large_node+0x84/0x1b0 [ 700.291496][T13364] ? trace_lock_acquire+0x14a/0x1d0 [ 700.293442][T13364] __kmalloc_large_node_noprof+0x1c/0x70 [ 700.295352][T13364] __kmalloc_noprof.cold+0xc/0x61 [ 700.296846][T13364] ? __might_fault+0xe3/0x190 [ 700.298378][T13364] rds_info_getsockopt+0x376/0x4f0 [ 700.300221][T13364] ? __might_fault+0x13b/0x190 [ 700.301577][T13364] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 700.303001][T13364] ? lock_acquire+0x2f/0xb0 [ 700.304346][T13364] ? __might_fault+0xe3/0x190 [ 700.305483][T13364] ? __might_fault+0xe3/0x190 [ 700.307077][T13364] rds_getsockopt+0x173/0x2d0 [ 700.308296][T13364] ? __pfx_rds_getsockopt+0x10/0x10 [ 700.310010][T13364] do_sock_getsockopt+0x3fe/0x870 [ 700.311302][T13364] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 700.313648][T13364] ? __fget_files+0x244/0x3f0 [ 700.314863][T13364] __sys_getsockopt+0x1a1/0x270 [ 700.317024][T13364] ? __pfx___sys_getsockopt+0x10/0x10 [ 700.318413][T13364] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 700.321175][T13364] __ia32_sys_getsockopt+0xbc/0x160 [ 700.322530][T13364] ? lockdep_hardirqs_on+0x7c/0x110 [ 700.324531][T13364] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 700.326407][T13364] __do_fast_syscall_32+0x73/0x120 [ 700.327734][T13364] do_fast_syscall_32+0x32/0x80 [ 700.328992][T13364] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 700.331007][T13364] RIP: 0023:0xf7fd3579 [ 700.332671][T13364] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 700.340559][T13364] RSP: 002b:00000000f573556c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 700.343595][T13364] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000114 [ 700.346521][T13364] RDX: 000000000000271d RSI: 0000000000000000 RDI: 0000000020000000 [ 700.348879][T13364] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 700.351052][T13364] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 700.353146][T13364] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 700.355169][T13364] [ 700.359240][T13364] Mem-Info: [ 700.360112][T13364] active_anon:1859 inactive_anon:1014 isolated_anon:0 [ 700.360112][T13364] active_file:3220 inactive_file:12967 isolated_file:0 [ 700.360112][T13364] unevictable:787 dirty:1048 writeback:0 [ 700.360112][T13364] slab_reclaimable:4962 slab_unreclaimable:60558 [ 700.360112][T13364] mapped:25312 shmem:775 pagetables:707 [ 700.360112][T13364] sec_pagetables:341 bounce:0 [ 700.360112][T13364] kernel_misc_reclaimable:0 [ 700.360112][T13364] free:92542 free_pcp:223 free_cma:0 [ 700.420832][T13364] Node 0 active_anon:40kB inactive_anon:260kB active_file:244kB inactive_file:68kB unevictable:1612kB isolated(anon):0kB isolated(file):0kB mapped:3432kB dirty:304kB writeback:0kB shmem:2120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9244kB pagetables:1636kB sec_pagetables:1268kB all_unreclaimable? no [ 700.462618][T13364] Node 1 active_anon:7348kB inactive_anon:3980kB active_file:12656kB inactive_file:51780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97816kB dirty:3888kB writeback:0kB shmem:980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2212kB pagetables:1268kB sec_pagetables:96kB all_unreclaimable? no [ 700.475244][T13364] Node 0 DMA free:1060kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:4kB unevictable:0kB writepending:24kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 700.505271][T13364] lowmem_reserve[]: 0 273 0 0 0 [ 700.507001][T13364] Node 0 DMA32 free:21112kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:2048KB active_anon:0kB inactive_anon:4kB active_file:280kB inactive_file:8kB unevictable:1612kB writepending:280kB present:1032196kB managed:306284kB mlocked:76kB bounce:0kB free_pcp:668kB local_pcp:220kB free_cma:0kB [ 700.514616][T13364] lowmem_reserve[]: 0 0 0 0 0 [ 700.524003][T13364] Node 1 DMA32 free:347996kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:7448kB inactive_anon:3976kB active_file:12556kB inactive_file:52076kB unevictable:1536kB writepending:3888kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:480kB local_pcp:132kB free_cma:0kB [ 700.535532][T13364] lowmem_reserve[]: 0 0 0 0 0 [ 700.537301][T13364] Node 0 DMA: 28*4kB (U) 55*8kB (U) 20*16kB (U) 7*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1096kB [ 700.542128][T13364] Node 0 DMA32: 235*4kB (UMEH) 278*8kB (UMEH) 40*16kB (UMEH) 38*32kB (UMEH) 31*64kB (UME) 16*128kB (UME) 14*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 20828kB [ 700.547851][T13364] Node 1 DMA32: 508*4kB (UM) 426*8kB (UME) 421*16kB (UME) 259*32kB (UME) 154*64kB (UME) 543*128kB (UME) 502*256kB (UME) 150*512kB (UME) 30*1024kB (UME) 6*2048kB (UM) 0*4096kB = 348144kB [ 700.554473][T13364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 700.559326][T13364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 700.562924][T13364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 700.566563][T13364] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 700.570798][T13364] 17660 total pagecache pages [ 700.572604][T13364] 709 pages in swap cache [ 700.573815][T13364] Free swap = 86296kB [ 700.575587][T13370] FAULT_INJECTION: forcing a failure. [ 700.575587][T13370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.578991][T13370] CPU: 0 UID: 0 PID: 13370 Comm: syz.3.1851 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 700.581852][T13370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 700.584624][T13370] Call Trace: [ 700.585493][T13370] [ 700.586268][T13370] dump_stack_lvl+0x16c/0x1f0 [ 700.587498][T13370] should_fail_ex+0x497/0x5b0 [ 700.588761][T13370] _copy_to_user+0x30/0xc0 [ 700.590030][T13370] simple_read_from_buffer+0xd0/0x160 [ 700.591458][T13370] proc_fail_nth_read+0x198/0x270 [ 700.592799][T13370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 700.594255][T13370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 700.595715][T13370] vfs_read+0x1ce/0xbd0 [ 700.596813][T13370] ? __fget_files+0x23a/0x3f0 [ 700.598095][T13370] ? fdget_pos+0x24c/0x360 [ 700.599442][T13370] ? __pfx_lock_release+0x10/0x10 [ 700.601294][T13370] ? trace_lock_acquire+0x14a/0x1d0 [ 700.603188][T13370] ? __pfx_vfs_read+0x10/0x10 [ 700.604864][T13370] ? __pfx___mutex_lock+0x10/0x10 [ 700.606499][T13370] ? __fget_files+0x244/0x3f0 [ 700.608046][T13370] ksys_read+0x12f/0x260 [ 700.609364][T13370] ? __pfx_ksys_read+0x10/0x10 [ 700.610602][T13370] __do_fast_syscall_32+0x73/0x120 [ 700.611893][T13370] do_fast_syscall_32+0x32/0x80 [ 700.613178][T13370] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 700.614810][T13370] RIP: 0023:0xf7fb0579 [ 700.615884][T13370] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 700.621538][T13370] RSP: 002b:00000000f57365a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 700.623849][T13370] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5736620 [ 700.625884][T13370] RDX: 000000000000000f RSI: 00000000f743bff4 RDI: 0000000000000000 [ 700.627941][T13370] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 700.630107][T13370] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 700.632122][T13370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 700.634062][T13370] [ 700.635289][T13364] Total swap = 124996kB [ 700.636531][T13364] 524155 pages RAM [ 700.637507][T13364] 0 pages HighMem/MovableOnly [ 700.638730][T13364] 206681 pages reserved [ 700.640077][T13364] 0 pages cma reserved [ 702.305227][ T5349] Bluetooth: hci5: command tx timeout [ 702.411415][T13407] netlink: 'syz.0.1861': attribute type 15 has an invalid length. [ 702.541612][T13410] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1862'. [ 703.544325][ T6699] Bluetooth: hci6: Frame reassembly failed (-84) [ 703.548761][ T1162] Bluetooth: hci6: Frame reassembly failed (-84) [ 703.550601][ T1162] Bluetooth: hci6: Frame reassembly failed (-84) [ 703.552321][ T1162] Bluetooth: hci6: Frame reassembly failed (-84) [ 703.555513][ T1162] Bluetooth: hci6: Frame reassembly failed (-84) [ 703.557245][ T1162] Bluetooth: hci6: Frame reassembly failed (-84) [ 703.559062][ T1162] Bluetooth: hci6: Frame reassembly failed (-84) [ 703.641431][ T39] kauditd_printk_skb: 41 callbacks suppressed [ 703.641447][ T39] audit: type=1326 audit(1729084287.269:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.0.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7fc00000 [ 703.657160][ T39] audit: type=1326 audit(1729084287.269:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.0.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd3579 code=0x7fc00000 [ 703.955186][ T25] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 704.085201][ T25] usb 6-1: device descriptor read/64, error -71 [ 704.325219][ T25] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 704.348591][ T39] audit: type=1326 audit(1729084287.979:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.0.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7fc00000 [ 704.355211][ T39] audit: type=1326 audit(1729084287.979:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.0.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd3579 code=0x7fc00000 [ 704.362298][ T39] audit: type=1326 audit(1729084287.979:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.0.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7fc00000 [ 704.369514][ T39] audit: type=1326 audit(1729084287.979:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.0.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7fc00000 [ 704.376019][ T39] audit: type=1326 audit(1729084287.979:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.0.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7fc00000 [ 704.383160][ T39] audit: type=1326 audit(1729084287.979:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.0.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7fc00000 [ 704.385215][ T5354] Bluetooth: hci5: command tx timeout [ 704.389521][ T39] audit: type=1326 audit(1729084287.979:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.0.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7fc00000 [ 704.397766][ T39] audit: type=1326 audit(1729084287.979:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.0.1866" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7fc00000 [ 704.456678][ T25] usb 6-1: device descriptor read/64, error -71 [ 704.534346][T13438] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1871'. [ 704.565602][ T25] usb usb6-port1: attempt power cycle [ 704.905535][ T25] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 704.927549][ T25] usb 6-1: device descriptor read/8, error -71 [ 705.165256][ T25] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 705.185794][ T25] usb 6-1: device descriptor read/8, error -71 [ 705.297818][ T25] usb usb6-port1: unable to enumerate USB device [ 705.576315][T10827] Bluetooth: hci6: command 0xfc11 tx timeout [ 705.578889][ T5349] Bluetooth: hci6: Entering manufacturer mode failed (-110) SYZFAIL: bad allocate request allocated=0 size=4193825/4193832 (errno 9: Bad file descriptor) [ 705.634979][T13469] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1878'. [ 706.337702][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.433687][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.510632][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.644470][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.960230][ T11] bond1 (unregistering): (slave ipip0): Releasing backup interface [ 707.073406][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.081315][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.084880][ T11] bond0 (unregistering): Released all slaves [ 707.089031][ T11] bond1 (unregistering): Released all slaves [ 707.589006][ T11] hsr_slave_0: left promiscuous mode [ 707.591343][ T11] hsr_slave_1: left promiscuous mode [ 707.593838][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.597601][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.600260][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.602312][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.641537][ T11] veth1_macvtap: left promiscuous mode [ 707.643678][ T11] veth0_macvtap: left promiscuous mode [ 707.646281][ T11] veth1_vlan: left promiscuous mode [ 707.647845][ T11] veth0_vlan: left promiscuous mode [ 708.552525][ T11] team0 (unregistering): Port device team_slave_1 removed [ 708.649123][ T11] team0 (unregistering): Port device team_slave_0 removed [ 709.968824][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.106048][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.191914][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.281831][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.416539][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.504165][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.598647][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.713745][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.870326][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.019122][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.115891][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.234857][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 711.250872][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.392376][ T11] bridge_slave_1: left allmulticast mode [ 711.393886][ T11] bridge_slave_1: left promiscuous mode [ 711.395922][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.399710][ T11] bridge_slave_0: left allmulticast mode [ 711.401323][ T11] bridge_slave_0: left promiscuous mode [ 711.402821][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.406575][ T11] bridge_slave_1: left allmulticast mode [ 711.407992][ T11] bridge_slave_1: left promiscuous mode [ 711.409448][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.412456][ T11] bridge_slave_0: left allmulticast mode [ 711.413930][ T11] bridge_slave_0: left promiscuous mode [ 711.416385][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.420010][ T11] bridge_slave_1: left allmulticast mode [ 711.421440][ T11] bridge_slave_1: left promiscuous mode [ 711.424593][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.436163][ T11] bridge_slave_0: left allmulticast mode [ 711.437767][ T11] bridge_slave_0: left promiscuous mode [ 711.439193][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.137142][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.147694][ T11] bond0 (unregistering): Released all slaves [ 712.243487][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.248154][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.252294][ T11] bond0 (unregistering): Released all slaves [ 712.383966][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.387629][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.392461][ T11] bond0 (unregistering): Released all slaves [ 713.336295][ T11] hsr_slave_0: left promiscuous mode [ 713.339163][ T11] hsr_slave_1: left promiscuous mode [ 713.351105][ T11] hsr_slave_0: left promiscuous mode [ 713.353904][ T11] hsr_slave_1: left promiscuous mode [ 713.357477][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.360199][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.363603][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.366604][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.378190][ T11] hsr_slave_0: left promiscuous mode [ 713.380866][ T11] hsr_slave_1: left promiscuous mode [ 713.383507][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.386237][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.389568][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.392340][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.492340][ T11] veth1_macvtap: left promiscuous mode [ 713.493826][ T11] veth0_macvtap: left promiscuous mode [ 713.495379][ T11] veth1_vlan: left promiscuous mode [ 713.496770][ T11] veth0_vlan: left promiscuous mode [ 713.499298][ T11] veth1_macvtap: left promiscuous mode [ 713.500850][ T11] veth0_macvtap: left promiscuous mode [ 713.502306][ T11] veth1_vlan: left promiscuous mode [ 713.503701][ T11] veth0_vlan: left promiscuous mode [ 713.519202][ T11] veth1_macvtap: left promiscuous mode [ 713.520705][ T11] veth0_macvtap: left promiscuous mode [ 713.522259][ T11] veth1_vlan: left promiscuous mode [ 713.524868][ T11] veth0_vlan: left promiscuous mode [ 714.589857][ T11] team0 (unregistering): Port device team_slave_1 removed [ 714.708457][ T11] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 13:11:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000000fe7c27 RBX=0000000000000000 RCX=ffffffff8b137a49 RDX=0000000000000000 RSI=ffffffff8b4cc8e0 RDI=ffffffff8bb12ae0 RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20 R8 =0000000000000001 R9 =ffffed1005687025 R10=ffff88802b43812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff901ce188 R15=0000000000000000 RIP=ffffffff8b138e2f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffaece50 CR3=0000000060770000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000040 RCX=ffffffff848f781d RDX=ffff8880297f4880 RSI=0000000000000004 RDI=0000000000000005 RBP=ffffc900032df538 RSP=ffffc900032df3f0 R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000004 R11=0000000000000000 R12=ffffffff8bb1d604 R13=dffffc0000000000 R14=0000000000000004 R15=0000000000000040 RIP=ffffffff818cb910 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7778b65d00 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000564046a47000 CR3=0000000028a58000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0ab4985f0ab4985f 0ab4985f0ab4985f 0ab4985f0ab4985f 0ab4985f0ab4985f 0ab4985f0ab4985f 0ab4985f0ab4985f 0ab4985f0ab4985f 0ab4985f0ab4985f ZMM22=3815af243815af24 3815af243815af24 3815af243815af24 3815af243815af24 3815af243815af24 3815af243815af24 3815af243815af24 3815af243815af24 ZMM23=3c63e37e3c63e37e 3c63e37e3c63e37e 3c63e37e3c63e37e 3c63e37e3c63e37e 3c63e37e3c63e37e 3c63e37e3c63e37e 3c63e37e3c63e37e 3c63e37e3c63e37e ZMM24=4f88bd784f88bd78 4f88bd784f88bd78 4f88bd784f88bd78 4f88bd784f88bd78 4f88bd784f88bd78 4f88bd784f88bd78 4f88bd784f88bd78 4f88bd784f88bd78 ZMM25=c70cea88c70cea88 c70cea88c70cea88 c70cea88c70cea88 c70cea88c70cea88 c70cea88c70cea88 c70cea88c70cea88 c70cea88c70cea88 c70cea88c70cea88 ZMM26=87d8ba0d87d8ba0d 87d8ba0d87d8ba0d 87d8ba0d87d8ba0d 87d8ba0d87d8ba0d 87d8ba0d87d8ba0d 87d8ba0d87d8ba0d 87d8ba0d87d8ba0d 87d8ba0d87d8ba0d ZMM27=e3184b61e3184b61 e3184b61e3184b61 e3184b61e3184b61 e3184b61e3184b61 e3184b61e3184b61 e3184b61e3184b61 e3184b61e3184b61 e3184b61e3184b61 ZMM28=000000c0000000bf 000000be000000bd 000000bc000000bb 000000ba000000b9 000000b8000000b7 000000b6000000b5 000000b4000000b3 000000b2000000b1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7c0d00007c0d0000 7c0d00007c0d0000 7c0d00007c0d0000 7c0d00007c0d0000 7c0d00007c0d0000 7c0d00007c0d0000 7c0d00007c0d0000 7c0d00007c0d0000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff888050458000 RCX=ffffffff81f9637a RDX=ffff888029a5c880 RSI=0000000001411600 RDI=0000000000000000 RBP=ffffea0001411600 RSP=ffffc90007f9f6d8 R8 =0000000000000005 R9 =0000000000000003 R10=0000000000000001 R11=0000000000000000 R12=ffffea0001411628 R13=ffffea0001411600 R14=ffff8880214ed6c8 R15=0000000000000001 RIP=ffffffff818cbaf8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7422a70 CR3=0000000024f80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffffff8e91c0ea RCX=ffffffff848f3adb RDX=ffff88801f664880 RSI=ffffffff848f449f RDI=0000000000000005 RBP=00000000fffffffe RSP=ffffc9000135ecd8 R8 =0000000000000005 R9 =00000000fffffffe R10=00000000fffffffe R11=ffff888029ef0030 R12=dffffc0000000000 R13=0000000000000004 R14=0000000000000001 R15=ffff888029ef0000 RIP=ffffffff818cb976 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020002000 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b1d70842ec314721 49f3eec6486be52c ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c866827dc6bef37 68aeb2cabe8877fe ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 02b17a229477e722 03f598f02a30d121 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 daf15836725a827f 48007d72ccd07d9b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000060 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 100fade2cf65aa22 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c1ec5b1400000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ea8b062827969378 19ecb1f1ec5af115 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000009fa0e2ed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 87f3819164f4acef 61f8f414dcb54323 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c67d0bdf1e79dd48 f576f8060b997dc3 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000