last executing test programs: 5.199526069s ago: executing program 3 (id=202): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffec1, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x10) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) 5.069303882s ago: executing program 3 (id=205): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x6008045}, 0x10) fchdir(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x4000}]}) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'macvtap0\x00', 0x0}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x8, 0x1, 0xfffffffa, @vifc_lcl_ifindex=r3, @multicast1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@deltaction={0xc4, 0x31, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1cc2}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0xc4}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000140021010000e0ffffff000023000000", @ANYRES32=0x0, @ANYBLOB="140002"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) socket$igmp(0x2, 0x3, 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000006480)=ANY=[@ANYBLOB="7ceb46bf", @ANYRES16=r9, @ANYBLOB="100027bd7040fedbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x40441c5) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001500)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3f0c3c287e29fb602d3a8c1e20e0fcbb10638bd6cc0f7442db07632d3709653b751ddc7f75e6cfbf93d4677a4ed205ac9755d2b3aeb8188d199544fd5b28240233d72b6ca69d5bcd82614b9127c455bb36129ccb15a2c496636b7943beb38ee262625846759105449dc6479ab38d9c74445f1a354cec38293df36d3cc7e8aebf95f5ac2079b5dc57136f58fbf75624", @ANYRES16=r11, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x24040894}, 0x20040000) timer_create(0x0, &(0x7f0000000680)={0x0, 0x16, 0x1, @thr={&(0x7f0000000340)="b14dea8a1af8794e93b29954319ad5e642618d0a0a57d97e2db04a21da2eb1d174f5d057d1a04eee39a922adb9146d5e44735e1f6dc4035504be4168908a70de9732655d994104b368a84ff83f6bf807a7401649811f28867efc9708", &(0x7f0000000400)="0dda6c1d70213789c1c902b0448bf0f8ef7cbf594516b6602b762b44cd7194ed741ceb5f4b7c3a344bf9861cdd013c11a2b718b991bd56228f3085f9144b6024f6992d0683dca00a549cba102e797e12240e68c143d57fa362d854e54cea8bacd4cceb5e699280472e2c9adfddd8061412bb34668b1898f3a917ea2085f7d26f2bff20cca0f7ed30e7599958f79af6d6d9d0287be586ec81a914d970cb82bd0cadd4052875adff5c0b48132d25b49efff760172417727bf1f86ee2ec7791d8ed53a55b0fde999c67297ea15057503aed95a37ff33db964e3e6fc51c9b39adec928a3d406282ef2eae1a468c704e9cda202b9"}}, &(0x7f0000000100)) 4.145725845s ago: executing program 3 (id=214): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0/file0\x00', 0x32) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x70000, 0x0) 4.122908686s ago: executing program 3 (id=216): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) (async) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004200)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat$null(0xffffff9c, &(0x7f0000000000), 0x200100, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x6, 0xffffffff}}, 0x28) syz_fuse_handle_req(r0, &(0x7f0000004280), 0x2000, &(0x7f0000006280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000062c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.977887304s ago: executing program 3 (id=217): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x27, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x800, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_buf(r2, 0x1, 0x37, 0x0, &(0x7f0000000d00)) r3 = dup(r1) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00'}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) sendfile(r5, r4, &(0x7f00000000c0)=0x8e, 0x180000504) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000100), 0x8) listen(0xffffffffffffffff, 0x0) 3.260625693s ago: executing program 3 (id=224): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) chmod(&(0x7f0000000200)='./file0\x00', 0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000019340), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x141a42, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x7, 0x0, 0x0, 0x0, 0x54}, 0x9c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000019380)=ANY=[@ANYBLOB="0b0004bb050000000004000009002fb4010005005422f98052a1bbbff861a627ee091e1ba6a63a49a719e7272d0ee3a13587a7090e5baf2b4c983a90c6b23fafe3bd3bd6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) sendmmsg$inet6(r6, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = open(0x0, 0x14927e, 0x0) fallocate(r8, 0x0, 0x0, 0x1001f0) ioctl$KDSETMODE(r8, 0x4b3a, 0x1) timer_gettime(0x0, &(0x7f0000019300)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f}, 0x4c) 2.72918317s ago: executing program 2 (id=228): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x201, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0xc080) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000ec0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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"}, 0x26c) r5 = dup(r3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = socket(0x11, 0x2, 0x0) setsockopt(r7, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) close(r7) connect$unix(r7, &(0x7f000057eff8)=@file={0x1, './bus\x00'}, 0x6e) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r8, 0x40204706, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r10 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xf120, 0x0, 0x1000, 0x23e}) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) write$UHID_INPUT(r5, &(0x7f00000007c0)={0xc, {"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", 0xca1}}, 0x1006) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x3, 0x2, 0x401, 0x6, 0x4, 0x1, 0x8, {0x0, @in={{0x2, 0x4e21, @private=0xa010101}}, 0x0, 0x9, 0x4, 0x1, 0x2}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x1, 0x1, 0x8004, 0x5, 0x2, 0x1, 0x1, 0x8, r11}, &(0x7f0000000240)=0x20) accept4(r2, 0x0, 0x0, 0x0) 2.35789498s ago: executing program 2 (id=230): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000090c00"/20, @ANYRES32=0x0, @ANYBLOB="8100050000000000280012800b0001006272696467650000180002800c00230000000000eea5e14605002a"], 0x48}}, 0x0) (async) r1 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00003ac000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x1}) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f00004ed000/0x1000)=nil, 0x1) 2.259408255s ago: executing program 2 (id=231): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000000b000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001c000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000004000000632af8ff00000000b509000000000000c3aaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7375e00080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.039530937s ago: executing program 2 (id=232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = io_uring_setup(0x253d, &(0x7f0000000180)={0x0, 0x3}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="07000000010000", 0x7) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@redirect_dir_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4d) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x55af) fsetxattr$security_capability(r4, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) fchdir(r4) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.metacopy\x00', 0x0, 0x2000) r5 = dup3(r3, r3, 0x0) renameat2(r5, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000440)='./file0\x00', 0x2) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000380)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffc4f) setreuid(0x0, r7) mount$overlay(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x1010012, &(0x7f0000000480)={[{@xino_on}, {@redirect_dir_on}, {@nfs_export_off}, {@redirect_dir_nofollow}, {@uuid_null}, {@userxattr}, {@uuid_on}], [{@fowner_gt={'fowner>', r6}}, {@fowner_gt={'fowner>', r7}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@dont_appraise}, {@hash}]}) 1.819040012s ago: executing program 2 (id=235): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004000"/16], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r4, 0xffff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8]}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000b80)=ANY=[@ANYRES8, @ANYRES16=r5, @ANYRES8=r0], 0x14}}, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000080)=0x80000001, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000001140)=0x2, 0x4) sendmmsg$inet(r6, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="3cdf9a0df115c376edfe5a129e71cc04a100846663b0fa4576b19cbb131cc17fb88f775547cd8571ace7c507ed037f2183abffd89ab8b4ca62ca863357b6b48d305c30d5b69887d2472f508896925e0660adb38902b29f791d95c838042f98b9", 0x60}, {&(0x7f0000000180)="eea99986e4f7ccb042247fe67856fc8e253ecb6f4fa3016ef0e762ac2738fb7f6a4346ac99b50fb421267a17645365b35e566b3354639752c01185e7f41e3d5c2672ea3c4624e84cabd527c74c9da01a2e0f5b964a2ad0f5fb9b740dd54086652a1ca05c64aa67ba434e688ef70287442299c908", 0x74}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)="49e645d1377f5f3ca1b267498c94", 0xe}, {&(0x7f0000000380)="f3d064919ec3e096b13d306ef7b6c4ca11bfb2191bfe0e715fbe8337c71b05ba4a5015a3f3f3fe7b3464b5f0a76b4fc0594d7234cc6cae2bb3f49e0e671b3bb10d59e4c31a52ee84f26d336d696a43f49c626fc25ffd24cbd689046473665225ecab", 0x62}, {&(0x7f0000000440)="6d7ddccc0f4bde59f95c2f2f8e9f63bfd3bf597c226526ed889b6b4921b44e21a9e15c477b2fd46764ed28b5ec13f817dcf9926ae2d4ca4f3b90307305c94c2013cb0470c4c074b1e64dfae11d4a1f481e544b515582563e1bf7eff481deb32e35b59ba9320af0386c875d370ee2ac22283c2a5df00312c4708382afc65bb9367bd247df", 0x84}, {&(0x7f0000000500)="82ecd52e29fc43073eadc02b964dae38fd1a4dda4e8845559de2", 0x1a}, {&(0x7f0000000540)="2918e647a78743e1ab60dbe7e59065085e24f575e5b944ec946ab1f1b5b6c23cc289096b1ed2ba487aac4679a98b854e7b9405783efdaec6b9fa25bdce1f4ea4d08967466b4ad46acca659b2c3eb7568ea3ae4b08dea296cf35efde79dc9941a798b72545ac8ff4d25a62349c8b42975811fff007f74749382f452c1163ef2ade0bab7e7ff0e835f685f107593941da36c647c803d8cb574538d2d27263890dd94b3c9c6eab09e06b38b2e773cb328691a2c7bb7004fdbf2e4a58e41e2e75dbe63266050c0f906d5d9f24dc50072560a96ad1f02c3ecb022f9e9e249daea6a49940728d3b84a11", 0xe7}, {&(0x7f0000000640)="6576f33482e91c81", 0x8}, {&(0x7f0000000880)="3fde694efb6b43c17bf92103d75945c4668991b5a8b6b181db8705a39503a922e50e087b2df249cdc1924ef996bc941b10d8ad0fe3b9cebbd95618ae0bfffde89500f4df8b949435b2b1eadf771b73bbbb7df9872cb63cc5658772f49545175e5ab784c5130d46", 0x67}, {&(0x7f00000006c0)="5d5e0d1d45bc6a12144312041aca0360e3b269367b1ce7921eb6ab68f2e1c8eb352d6710e18688e3f497f17a85fa70d1b5ee5c1dd2c8cd3da4cf5e441c925a9db29858329a7458fce81f0c7afcf50f29539eb1528e5915134f63c899164844e88e2b71c76a4f3fcdc105b6c0bf7041f1e74cee", 0x73}, {&(0x7f0000000740)="b01bdc442c79626417868bd6d9cee7c3312817e415ec2b4cf10e19e2f8263018109c49", 0x23}, {&(0x7f0000000780)="9bf4187f38b4f98574142f7e6a924765", 0x10}], 0xa}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000ac0)="14e9eb2b4328892813f7a65cbad23a6a1484efeba29d36f200bf436d544c1d5f566464e8be16d1e0287842f7a547aa903342772221fcb36e448a980dcc9b46bdc8adad97ab335f8eb53a5931acdc2dd54674028b2a57b06db577355be0646070d18ec93f1ad96ffc497fec11e3cabecceb22504b118f62beea15b30d5f39e466652b2e60d66b39ed8f5c", 0x8a}, {&(0x7f0000000940)="faced4a3c55a0baee904aa452aadf862fbb1665f60bf5ef26c53d0fe2fb3b84cebdca71c7161135d8dfca94143a2cd93642230ea0568fe0687bc2b748fdebee6c271b4358c1cf71be8829dde3d4ed97f70c5ba8a5cd1ed9e", 0x58}, {&(0x7f00000009c0)="fd8af5e10c88a4544d81f9175dc1f0cddcd9501d8e0157b3fa05e888c2015ee5087ba1f4e9453adb7113f76f8aab87999da78bc4ff2637b6eb5110a460f52a631926f7d44be900e725411402ee71a20057642c6a61c07425483391521405a242af2671f5cc30c2a70d88a7b36d8425ad54b5adb03b43894dd70a61b3ad234193b78f629fa4746b89448ad8da47aee1d5733cb46ffa004b1af613612fb5608bcd01ab90f8d1c6c2761b0de2dfe2b1f23e9125603e543d08d64fd1b7a3d96f7b53a476ac2055c109f5d38b8267cd88a358ebc833139bfe5512233959f4321338649c23", 0xe2}], 0x3}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="e726305e41d163b72c8b089344a057aa42a9c154e1090843a1958bf26669fa", 0x1f}], 0x1}}], 0x4, 0x24048844) recvmsg(r6, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x2000) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086200, 0x0) 1.817605629s ago: executing program 1 (id=236): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000500), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) unshare(0xa020480) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x64, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x200}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x522}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1c7498c7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0) unshare(0x26020480) 1.701615275s ago: executing program 1 (id=238): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) io_setup(0x589, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x4, 0x4, 0x324, 0xffffffff, 0x194, 0xc8, 0x0, 0xfeffffff, 0xffffffff, 0x25c, 0x25c, 0x25c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [], [], 'batadv_slave_0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @private0, [], [], 'hsr0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x380) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000100100000d000000"], 0x10, 0xe000}, 0x5}], 0x1, 0xfffe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000001740)={0x0, @reserved}) openat$ttynull(0xffffffffffffff9c, 0x0, 0x14800, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e000000090000000900000001000000c0250500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000050000000a0000000000000000000000c3a616c073997242d0f5ea4c0f13520f4051e2876abaff8ca7804c74282e906b8d253a8ab84a88cf6f57c32f5ccbada83b5b9e18ab7ea0ce7cb504f2fbb4172a50485be15dc2875ef8014d391456161b8bdc41652ba325b4f4e454ce290dcfde97a83a6c2e2b451ab0744de8c0af93bb35435d1bbec4de12a92154f603f859972e237e4bf63fe2ccec723fb7b5504bddd2908d8823a3c91a09bf8e3184fb3d028c0cf7f4da9d79b5409de4a1b5fa2a7c65df6ad9d4521bfdacae09aa6b3149b9af86bfc6dabb641d4e24a45b9787564684604c21648e", @ANYRES32=r5, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x68, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x2e85375e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r7}, 0x10) pivot_root(0x0, 0x0) 1.627083522s ago: executing program 2 (id=239): io_uring_setup(0x1d3, &(0x7f0000000080)) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32=r0], 0x14}, 0x1, 0x40030000000000, 0x0, 0x4044041}, 0x80) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="1000f95a800c00018004000100040002"], 0x2c}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r5 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r5, 0x0, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) r6 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$binfmt_aout(r7, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ppoll(&(0x7f00000013c0)=[{r7}], 0x1, 0x0, 0x0, 0x0) syz_usb_disconnect(r6) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0x1d, &(0x7f0000fee000)=0x1, 0x4) r10 = syz_usb_connect_ath9k(0x3, 0x69, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0x1a4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) sendto$inet6(r8, &(0x7f0000000040)="ff", 0x1, 0x4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffe}, 0x30) 489.58056ms ago: executing program 0 (id=242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x80, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)={0x2, 0x5, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x7}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 376.159601ms ago: executing program 1 (id=243): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b83, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = eventfd2(0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup3(r4, r3, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r9}, 0x18) syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0x5) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c910180014"], 0x1d) sendmsg$rds(r6, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000001540)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="989b0000", @ANYRES16=0x0, @ANYBLOB="000025bd7000ffdbdf256f00000008000300", @ANYRES32=r2, @ANYBLOB="0c0099005b000000450000000500d600d50000000a00060008021100000100000500d600080000000a000600ffffffffffff00000a00060008021100000100000a000600ffffffffffff00000800a000080000000800a1000200000008009f00070000000500d60006000000050019010b0000000800220155020000080026006c090000050019010700000008002201b502000008009f00020000000800a000030000000800a000ffffff7f080027000200000008009f0004000000"], 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x4004c0c0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x1, 0x10, 0x8, 0xf, 0x0, 0x1000067b, 0x5, 0x8}}) r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000640)={'wlan1\x00', 0x1000}) 375.596381ms ago: executing program 0 (id=244): r0 = openat$ttyprintk(0xffffff9c, &(0x7f0000000480), 0x210503, 0x0) ioctl$TIOCCBRK(r0, 0x5428) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000018000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000000000006001600000000000500120000000000060011000000000008000b0000000000080001007063690011000200303030303a30303a31302e3000000000007eae6c9608000b000000000006001600000000000500120000000000060011000000000008000b0000000000"], 0xac}}, 0x80) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuse\x00', 0x2000, &(0x7f0000000440)='nfs\x00') ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa08, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000400)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) mount(&(0x7f0000000000)=@md0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='nfsd\x00', 0x0, &(0x7f0000000180)='%+{\x00') mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') 238.713759ms ago: executing program 0 (id=245): r0 = socket(0x10, 0x6, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000003147df800000000400000000900020073797a32000000000800410004006500140033007465616d5f736c6176655f31"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 238.283175ms ago: executing program 1 (id=246): syz_emit_ethernet(0x7f, &(0x7f0000000300)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x49, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x88be, 0x5, 0x0, [], "54812cbd3b"}, {}, {}, {0x543}}}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x8, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x1, r0, 0x9, 0x4, 0x9a, 0x549e}) 149.360338ms ago: executing program 0 (id=247): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r1, &(0x7f0000000000)='E', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040000) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x7}}], {0x14}}, 0x3c}}, 0x0) (async, rerun: 32) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) (async, rerun: 32) fsconfig$FSCONFIG_SET_STRING(r2, 0x5, &(0x7f0000000940)='sourcev\xc6\xa86\xa6\xd7\xff\rQW\x94 \x86\xf0\b\x1co)\xc6\xdbZ\x12\xa8\xc6\x1f\xf3\x9e\x87\xf7\xc3\x1a\x03\x85\xd3\xa7L\x02\x86Q\xa8:\xce\x84\xe3\b\x82\xf0\xce\xb2\xf2\xed\xd7\xfd\xd0\x7f\x10\xa7]\x82*\xab\x00\x12\x00'/82, &(0x7f0000000240)='s\x86u\x00p\x00\x00\x00\x00', 0x0) (async) syz_open_dev$sndmidi(&(0x7f00000007c0), 0xd, 0x402000) (async, rerun: 64) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) (async, rerun: 64) r6 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r6, &(0x7f0000000a40)='ns/uts\x00') (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000840)='./binderfs/binder0\x00', &(0x7f0000000880)='./bus\x00', r2) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000080), 0x9c000002) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r5, 0x0) (async) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xd, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"/1120], 0x46c}}, 0x40) (async) ftruncate(r2, 0x1f) sendfile(r4, 0xffffffffffffffff, 0x0, 0x101) unlinkat$binderfs_device(0xffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00') (async, rerun: 64) r7 = creat(&(0x7f0000000340)='./bus\x00', 0x98) (rerun: 64) inotify_rm_watch(r7, 0x0) (async, rerun: 32) write$cgroup_type(r2, &(0x7f0000000200), 0x175d9003) (rerun: 32) listen(r1, 0x8) (async) r8 = accept4(r1, 0x0, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)={0x0, 0x3, 0x9, [0x5, 0x8a0a, 0x6, 0x1bf, 0x0, 0x7ff, 0xd2, 0x17b, 0x2]}, &(0x7f0000000a00)=0x1a) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000080)={r9, @in={{0x2, 0x4e22, @loopback}}, 0x9, 0xffff, 0x7ffc, 0x6, 0x41, 0x40, 0x58}, &(0x7f0000000140)=0x9c) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x14, 0x30, 0x10b}, 0x14}}, 0x0) (rerun: 32) 148.750383ms ago: executing program 1 (id=248): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000700000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r1, 0x180000000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000080), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r8 = openat$vcsa(0xffffff9c, &(0x7f0000000200), 0x100, 0x0) r9 = accept4$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14, 0x800) getpeername$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0xe5b03170f3ceaafd) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="f000fedbdf2500000000", @ANYBLOB="2f2629919fbd3c41d04fb12cda053ae4e9103739351fd3620d242b89f12f65db85811a92165875ee1a82bcb8727ea6aee037583729797b8516bd28951379aacd9704923c72a2c7b0a24fb0d91adbf9a72289b620289e1039b446d35a3f2e575217758dea0b92f0697a0b9dd66ee1ce466270526e1e14814cd512b0b7ecd914be67634a0b5839112d99e990ac9b45b8d724f84c224d5d2447114c64c0011ad203b28c0d3ee80f42908a26761e61e1e028559e3af5926581c33cc1d24865854337c99a0c4cfd68e471e7432b8a0f75350ad6ea9c6b", @ANYBLOB="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"], 0x2f0}, 0x1, 0x0, 0x0, 0x8000}, 0x40805) 80.119402ms ago: executing program 0 (id=249): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000775a001904e2ffffffffffffff0a000000040000008d980400"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000775a001904e2ffffffffffffff0a000000040000008d980400"], 0x1c}}, 0x0) 79.743078ms ago: executing program 0 (id=250): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x3}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086406, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) unshare(0x8000000) mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}) socket$pppoe(0x18, 0x1, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x7, 0x24080) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 0s ago: executing program 1 (id=251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)={0x40, r3, 0x801, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "c4e1575b6a"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_SEQ={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x50000}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:43178' (ED25519) to the list of known hosts. [ 43.085682][ T5938] cgroup: Unknown subsys name 'net' [ 43.229693][ T5938] cgroup: Unknown subsys name 'cpuset' [ 43.235328][ T5938] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 44.192448][ T5938] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.837406][ T5959] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.841209][ T5964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.841304][ T5959] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.844381][ T5964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.846894][ T5959] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.848932][ T5964] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.852066][ T5959] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.856708][ T5964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.857833][ T5959] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 48.859241][ T5967] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.859896][ T5964] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 48.860465][ T5967] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.860977][ T5967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.861553][ T5967] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.861913][ T5967] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 48.862175][ T5967] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.862641][ T5959] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.864499][ T5964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.868138][ T5966] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.890512][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.893493][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.896942][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.900581][ T5955] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 48.903615][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.127809][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 49.237044][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 49.262911][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 49.288667][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.292252][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.296032][ T5952] bridge_slave_0: entered allmulticast mode [ 49.299240][ T5952] bridge_slave_0: entered promiscuous mode [ 49.311388][ T5960] chnl_net:caif_netlink_parms(): no params data found [ 49.340013][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.343186][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.347026][ T5952] bridge_slave_1: entered allmulticast mode [ 49.350033][ T5952] bridge_slave_1: entered promiscuous mode [ 49.462273][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.536937][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.574434][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.577828][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.580744][ T5958] bridge_slave_0: entered allmulticast mode [ 49.584441][ T5958] bridge_slave_0: entered promiscuous mode [ 49.619508][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.621771][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.623419][ T5951] bridge_slave_0: entered allmulticast mode [ 49.625540][ T5951] bridge_slave_0: entered promiscuous mode [ 49.628542][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.631314][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.634166][ T5958] bridge_slave_1: entered allmulticast mode [ 49.638011][ T5958] bridge_slave_1: entered promiscuous mode [ 49.670279][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.673717][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.677646][ T5951] bridge_slave_1: entered allmulticast mode [ 49.681273][ T5951] bridge_slave_1: entered promiscuous mode [ 49.748606][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.751595][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.754047][ T5960] bridge_slave_0: entered allmulticast mode [ 49.756881][ T5960] bridge_slave_0: entered promiscuous mode [ 49.763016][ T5952] team0: Port device team_slave_0 added [ 49.783144][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.787312][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.789693][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.792216][ T5960] bridge_slave_1: entered allmulticast mode [ 49.795033][ T5960] bridge_slave_1: entered promiscuous mode [ 49.799660][ T5952] team0: Port device team_slave_1 added [ 49.803899][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.809020][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.813774][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.929874][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.933715][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.938359][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.948332][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.955094][ T5951] team0: Port device team_slave_0 added [ 49.958613][ T5958] team0: Port device team_slave_0 added [ 49.963989][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.967775][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.969964][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.979320][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.984669][ T5951] team0: Port device team_slave_1 added [ 49.988182][ T5958] team0: Port device team_slave_1 added [ 50.050662][ T5960] team0: Port device team_slave_0 added [ 50.057411][ T5960] team0: Port device team_slave_1 added [ 50.070675][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.072882][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.081045][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.084921][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.086764][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.093072][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.114093][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.116200][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.123657][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.192111][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.195331][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.203834][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.219512][ T5952] hsr_slave_0: entered promiscuous mode [ 50.223155][ T5952] hsr_slave_1: entered promiscuous mode [ 50.227190][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.229575][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.239075][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.246266][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.248569][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.256540][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.300692][ T5958] hsr_slave_0: entered promiscuous mode [ 50.303050][ T5958] hsr_slave_1: entered promiscuous mode [ 50.305271][ T5958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.307438][ T5958] Cannot create hsr debugfs directory [ 50.332087][ T5951] hsr_slave_0: entered promiscuous mode [ 50.335212][ T5951] hsr_slave_1: entered promiscuous mode [ 50.338557][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.341700][ T5951] Cannot create hsr debugfs directory [ 50.414385][ T5960] hsr_slave_0: entered promiscuous mode [ 50.418197][ T5960] hsr_slave_1: entered promiscuous mode [ 50.420797][ T5960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.423668][ T5960] Cannot create hsr debugfs directory [ 50.733609][ T5951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.739403][ T5951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.744209][ T5951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.750685][ T5951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.801931][ T5952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.805938][ T5952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.812108][ T5952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.817948][ T5952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.840852][ T5960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.846047][ T5960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.857742][ T5960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.863573][ T5960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.878158][ T5955] Bluetooth: hci2: command tx timeout [ 50.878165][ T5963] Bluetooth: hci1: command tx timeout [ 50.920911][ T5958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.926790][ T5958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.933456][ T5958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.948478][ T5958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.959114][ T5963] Bluetooth: hci3: command tx timeout [ 50.959142][ T5955] Bluetooth: hci0: command tx timeout [ 50.983105][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.039079][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.047170][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.053657][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.057492][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.081361][ T219] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.084118][ T219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.089268][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.099511][ T219] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.102310][ T219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.117869][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.121764][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.131880][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.159286][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.176189][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.179005][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.195423][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.201278][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.203725][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.220543][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.246918][ T219] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.249298][ T219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.260901][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.263535][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.282493][ T5960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.383534][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.418014][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.427050][ T5951] veth0_vlan: entered promiscuous mode [ 51.442693][ T5951] veth1_vlan: entered promiscuous mode [ 51.458698][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.477481][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.516903][ T5951] veth0_macvtap: entered promiscuous mode [ 51.530064][ T5951] veth1_macvtap: entered promiscuous mode [ 51.542100][ T5952] veth0_vlan: entered promiscuous mode [ 51.560556][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.564065][ T5960] veth0_vlan: entered promiscuous mode [ 51.569626][ T5958] veth0_vlan: entered promiscuous mode [ 51.582804][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.588147][ T5960] veth1_vlan: entered promiscuous mode [ 51.591530][ T5952] veth1_vlan: entered promiscuous mode [ 51.600699][ T5951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.604554][ T5951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.608359][ T5951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.611835][ T5951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.637592][ T5958] veth1_vlan: entered promiscuous mode [ 51.646962][ T5960] veth0_macvtap: entered promiscuous mode [ 51.661463][ T5960] veth1_macvtap: entered promiscuous mode [ 51.716726][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.719791][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.727730][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.731989][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.737705][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.759197][ T5958] veth0_macvtap: entered promiscuous mode [ 51.763486][ T5952] veth0_macvtap: entered promiscuous mode [ 51.771928][ T5952] veth1_macvtap: entered promiscuous mode [ 51.775749][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.780115][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.786279][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.790748][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.793332][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.795828][ T5958] veth1_macvtap: entered promiscuous mode [ 51.797847][ T5960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.802705][ T5960] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.807015][ T5960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.810228][ T5960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.833704][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.838114][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.842165][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.847361][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.853245][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.861001][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.865588][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.866886][ T5951] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.869069][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.879905][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.886012][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.893199][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.897373][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.902171][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.906579][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.910097][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.914553][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.920581][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.934380][ T5958] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.938414][ T5958] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.941935][ T5958] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.946609][ T5958] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.956493][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.961675][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.966104][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.969917][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.973792][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.980544][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.988352][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.006092][ T5952] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.009166][ T5952] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.012590][ T5952] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.016734][ T5952] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.058013][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.062210][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.099842][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.102184][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.127686][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.133520][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.165822][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.168693][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.188752][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.196137][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.213714][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.217542][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.311107][ T6020] netlink: 47 bytes leftover after parsing attributes in process `syz.2.5'. [ 52.333514][ T6021] netlink: 'syz.1.2': attribute type 21 has an invalid length. [ 52.373610][ T39] audit: type=1800 audit(1730257064.680:2): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="bus" dev="9p" ino=39190895 res=0 errno=0 [ 52.386795][ T6024] netfs: Couldn't get user pages (rc=-14) [ 52.635806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.644915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.689864][ T6037] fuse: Bad value for 'user_id' [ 52.691878][ T6037] fuse: Bad value for 'user_id' [ 52.785548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 52.788362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 52.790802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 52.955373][ T5955] Bluetooth: hci1: command tx timeout [ 52.965602][ T5955] Bluetooth: hci2: command tx timeout [ 53.005981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 53.035584][ T5955] Bluetooth: hci3: command tx timeout [ 53.038186][ T5963] Bluetooth: hci0: command tx timeout [ 53.038348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 53.126582][ T6045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.204904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 53.212096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 53.326501][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 53.403476][ C2] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 53.440464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 53.845198][ T6056] can0: slcan on pts0. [ 53.935571][ T6056] can0 (unregistered): slcan off pts0. [ 54.014192][ T6058] mmap: syz.3.13 (6058) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.590507][ T6067] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.679270][ T6067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15'. [ 54.691315][ T6067] : entered promiscuous mode [ 54.868538][ T6080] netlink: 'syz.2.19': attribute type 1 has an invalid length. [ 54.871666][ T6080] netlink: 'syz.2.19': attribute type 3 has an invalid length. [ 54.876830][ T6080] netlink: 224 bytes leftover after parsing attributes in process `syz.2.19'. [ 54.909264][ T58] libceph: connect (1)[c::]:6789 error -101 [ 54.911884][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 55.033058][ T6090] netlink: 52 bytes leftover after parsing attributes in process `syz.3.17'. [ 55.041030][ T6080] ceph: No mds server is up or the cluster is laggy [ 55.045396][ T5955] Bluetooth: hci2: command tx timeout [ 55.047480][ T5955] Bluetooth: hci1: command tx timeout [ 55.125036][ T5963] Bluetooth: hci3: command tx timeout [ 55.127051][ T5955] Bluetooth: hci0: command tx timeout [ 55.144987][ T2369] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.299387][ T2369] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.303562][ T2369] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.310069][ T2369] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 55.313555][ T2369] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.317634][ T2369] usb 6-1: config 0 descriptor?? [ 55.385034][ T58] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.530196][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.537802][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.549332][ T39] audit: type=1800 audit(1730257067.860:3): pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.23" name="bus" dev="9p" ino=39190895 res=0 errno=0 [ 55.561625][ T2369] usbhid 6-1:0.0: can't add hid device: -71 [ 55.566990][ T2369] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 55.572852][ T2369] usb 6-1: USB disconnect, device number 2 [ 55.576533][ T58] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 55.579730][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.585950][ T58] usb 7-1: Product: syz [ 55.587790][ T58] usb 7-1: Manufacturer: syz [ 55.588122][ T6106] netfs: Couldn't get user pages (rc=-14) [ 55.589592][ T58] usb 7-1: SerialNumber: syz [ 55.597396][ T58] usb 7-1: config 0 descriptor?? [ 55.748397][ T6113] syz.1.24 uses obsolete (PF_INET,SOCK_PACKET) [ 55.825358][ T6000] usb 7-1: USB disconnect, device number 2 [ 55.913158][ T6116] Zero length message leads to an empty skb [ 56.593870][ T6120] netlink: 'syz.2.27': attribute type 21 has an invalid length. [ 56.598808][ T6120] netlink: 132 bytes leftover after parsing attributes in process `syz.2.27'. [ 56.664511][ T6127] warning: `syz.3.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 56.713812][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 56.787096][ T6126] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.826222][ T6138] netfs: Couldn't get user pages (rc=-14) [ 56.851700][ T39] audit: type=1800 audit(1730257069.130:4): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.33" name="bus" dev="9p" ino=39190895 res=0 errno=0 [ 57.116456][ T5963] Bluetooth: hci2: command tx timeout [ 57.119264][ T5955] Bluetooth: hci1: command tx timeout [ 57.197001][ T5963] Bluetooth: hci3: command tx timeout [ 57.201479][ T5955] Bluetooth: hci0: command tx timeout [ 58.279738][ T6157] VFS: could not find a valid V7 on nullb0. [ 58.283515][ T6157] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.43'. [ 58.562705][ T6174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 59.362585][ T39] audit: type=1800 audit(1730257071.670:5): pid=6196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.44" name="bus" dev="9p" ino=39190895 res=0 errno=0 [ 59.377679][ T6196] netfs: Couldn't get user pages (rc=-14) [ 59.669031][ T6217] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 59.672659][ T6217] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 59.676229][ T6217] capability: warning: `syz.2.48' uses 32-bit capabilities (legacy support in use) [ 59.969914][ T6241] 9pnet_virtio: no channels available for device syz [ 59.988079][ T6227] Cannot find set identified by id 0 to match [ 60.004388][ T6227] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 60.253490][ T6248] vivid-007: disconnect [ 60.952409][ T6247] vivid-007: reconnect [ 61.274706][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 61.418394][ T39] audit: type=1800 audit(1730257073.730:6): pid=6276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.63" name="bus" dev="9p" ino=39190895 res=0 errno=0 [ 61.425247][ T6276] netfs: Couldn't get user pages (rc=-14) [ 61.695774][ T6282] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 62.384735][ T6296] capability: warning: `syz.3.69' uses deprecated v2 capabilities in a way that may be insecure [ 62.455561][ T58] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.498889][ T58] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 63.248997][ T6314] VFS: could not find a valid V7 on nullb0. [ 64.100928][ T6361] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 64.123335][ T6363] block nbd3: NBD_DISCONNECT [ 64.209752][ T39] audit: type=1800 audit(1730257076.520:7): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.84" name="bus" dev="9p" ino=39190895 res=0 errno=0 [ 64.217698][ T6366] netfs: Couldn't get user pages (rc=-14) [ 64.848961][ T6380] netlink: 'syz.3.89': attribute type 10 has an invalid length. [ 64.862933][ T6380] team0: Port device netdevsim0 added [ 64.872457][ T6380] netlink: 'syz.3.89': attribute type 10 has an invalid length. [ 64.897737][ T6380] team0: Port device netdevsim0 removed [ 64.902052][ T6380] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 66.634575][ T6423] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.102'. [ 66.758067][ T6433] trusted_key: syz.0.102 sent an empty control message without MSG_MORE. [ 66.835575][ T6440] Bluetooth: MGMT ver 1.23 [ 67.213108][ T6453] netlink: 132 bytes leftover after parsing attributes in process `syz.2.112'. [ 68.728102][ T6474] netlink: 44 bytes leftover after parsing attributes in process `syz.2.117'. [ 68.750022][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'. [ 68.935244][ T39] audit: type=1326 audit(1730257081.240:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.3.122" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x0 [ 69.160673][ T6493] netlink: 'syz.1.123': attribute type 4 has an invalid length. [ 69.164428][ T6493] netlink: 17 bytes leftover after parsing attributes in process `syz.1.123'. [ 69.287960][ T6495] hfs: can't find a HFS filesystem on dev nullb0 [ 69.292587][ T6495] hfs: can't find a HFS filesystem on dev nullb0 [ 69.298384][ T6495] hfs: can't find a HFS filesystem on dev nullb0 [ 69.302514][ T6495] hfs: can't find a HFS filesystem on dev nullb0 [ 69.307436][ T6495] hfs: can't find a HFS filesystem on dev nullb0 [ 69.335267][ T6495] syz.2.124 (6495) used greatest stack depth: 20512 bytes left [ 70.147361][ T5955] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 70.150839][ T5955] CPU: 3 UID: 0 PID: 5955 Comm: kworker/u33:2 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 70.155682][ T5955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.159529][ T5955] Workqueue: hci1 hci_rx_work [ 70.161344][ T5955] Call Trace: [ 70.162554][ T5955] [ 70.163668][ T5955] dump_stack_lvl+0x16c/0x1f0 [ 70.165533][ T5955] sysfs_warn_dup+0x7f/0xa0 [ 70.167369][ T5955] sysfs_create_dir_ns+0x24d/0x2b0 [ 70.169694][ T5955] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 70.172682][ T5955] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 70.175152][ T5955] ? kobject_add_internal+0x12d/0x990 [ 70.177020][ T5955] ? do_raw_spin_unlock+0x172/0x230 [ 70.179893][ T5955] kobject_add_internal+0x2c8/0x990 [ 70.181979][ T5955] kobject_add+0x16f/0x240 [ 70.183597][ T5955] ? __pfx_kobject_add+0x10/0x10 [ 70.185634][ T5955] ? class_to_subsys+0x3e/0x160 [ 70.187215][ T5955] ? do_raw_spin_unlock+0x172/0x230 [ 70.187890][ T39] audit: type=1800 audit(1730257082.490:9): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.131" name="bus" dev="overlay" ino=10 res=0 errno=0 [ 70.188891][ T5955] ? kobject_put+0xab/0x5a0 [ 70.199359][ T5955] device_add+0x289/0x1a70 [ 70.201036][ T5955] ? __pfx_dev_set_name+0x10/0x10 [ 70.202846][ T5955] ? __pfx_device_add+0x10/0x10 [ 70.204466][ T5955] ? mgmt_send_event_skb+0x2f2/0x460 [ 70.206280][ T5955] hci_conn_add_sysfs+0x17e/0x230 [ 70.208055][ T5955] le_conn_complete_evt+0xfc7/0x1cf0 [ 70.209839][ T5955] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 70.211646][ T5955] ? trace_contention_end+0xea/0x140 [ 70.213191][ T5955] ? __mutex_lock+0x1a6/0x9c0 [ 70.214774][ T5955] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 70.217041][ T5955] ? skb_pull_data+0x166/0x210 [ 70.219018][ T5955] hci_le_meta_evt+0x2e2/0x5d0 [ 70.220919][ T5955] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 70.223975][ T5955] hci_event_packet+0x666/0x1190 [ 70.226177][ T5955] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 70.228408][ T5955] ? __pfx_hci_event_packet+0x10/0x10 [ 70.230680][ T5955] ? mark_held_locks+0x9f/0xe0 [ 70.232639][ T5955] ? kcov_remote_start+0x3cf/0x6e0 [ 70.234555][ T5955] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.236651][ T5955] hci_rx_work+0x2c6/0x16c0 [ 70.238657][ T5955] ? lock_acquire+0x2f/0xb0 [ 70.240618][ T5955] ? process_one_work+0x8bb/0x1b30 [ 70.242454][ T5955] process_one_work+0x958/0x1b30 [ 70.244251][ T5955] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 70.246371][ T5955] ? __pfx_process_one_work+0x10/0x10 [ 70.249029][ T5955] ? assign_work+0x1a0/0x250 [ 70.251665][ T5955] worker_thread+0x6c8/0xf00 [ 70.253991][ T5955] ? __kthread_parkme+0x148/0x220 [ 70.256203][ T5955] ? __pfx_worker_thread+0x10/0x10 [ 70.258117][ T5955] kthread+0x2c1/0x3a0 [ 70.259653][ T5955] ? _raw_spin_unlock_irq+0x23/0x50 [ 70.261725][ T5955] ? __pfx_kthread+0x10/0x10 [ 70.263474][ T5955] ret_from_fork+0x45/0x80 [ 70.265150][ T5955] ? __pfx_kthread+0x10/0x10 [ 70.266896][ T5955] ret_from_fork_asm+0x1a/0x30 [ 70.268723][ T5955] [ 70.272656][ T5955] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 70.279662][ T5955] Bluetooth: hci1: failed to register connection device [ 70.417107][ T6524] loop9: detected capacity change from 0 to 7 [ 70.426822][ T6524] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 70.429193][ T6524] loop9: partition table partially beyond EOD, truncated [ 70.433221][ T6524] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 70.490709][ T6112] udevd[6112]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 70.720348][ T1407] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.723029][ T1407] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.815391][ T4675] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 70.955026][ T4675] usb 8-1: device descriptor read/64, error -71 [ 71.226759][ T4675] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 71.365067][ T4675] usb 8-1: device descriptor read/64, error -71 [ 71.475088][ T4675] usb usb8-port1: attempt power cycle [ 71.811908][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 71.817409][ T4675] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 71.848494][ T4675] usb 8-1: device descriptor read/8, error -71 [ 72.095018][ T4675] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 72.116125][ T4675] usb 8-1: device descriptor read/8, error -71 [ 72.227043][ T4675] usb usb8-port1: unable to enumerate USB device [ 72.325139][ T5955] Bluetooth: hci1: command tx timeout [ 73.210870][ T6564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.145'. [ 73.478829][ T39] audit: type=1800 audit(1730257341.789:10): pid=6581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.149" name="bus" dev="9p" ino=39190895 res=0 errno=0 [ 73.492941][ T6581] netfs: Couldn't get user pages (rc=-14) [ 73.709881][ T6585] netlink: 'syz.1.151': attribute type 4 has an invalid length. [ 74.086915][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.153'. [ 75.857810][ T1014] cfg80211: failed to load regulatory.db [ 76.114597][ T39] audit: type=1800 audit(1730257344.419:11): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.159" name="bus" dev="9p" ino=39190895 res=0 errno=0 [ 76.134112][ T6619] netfs: Couldn't get user pages (rc=-14) [ 76.297284][ T5955] Bluetooth: hci0: unexpected cc 0x042d length: 63 > 7 [ 76.485086][ T25] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 76.569039][ T6637] process 'syz.1.163' launched './file0' with NULL argv: empty string added [ 76.645141][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 76.648796][ T25] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 76.654028][ T25] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 76.659134][ T25] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 76.663225][ T25] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 76.670395][ T25] usb 8-1: config 0 interface 0 has no altsetting 0 [ 76.676922][ T25] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 76.681028][ T25] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 76.684128][ T25] usb 8-1: Product: syz [ 76.686874][ T25] usb 8-1: Manufacturer: syz [ 76.688455][ T25] usb 8-1: SerialNumber: syz [ 76.691834][ T25] usb 8-1: config 0 descriptor?? [ 76.699067][ T25] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 76.709782][ T25] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 76.906264][ T6642] netlink: 140 bytes leftover after parsing attributes in process `syz.2.165'. [ 76.933465][ T6555] usb 8-1: USB disconnect, device number 6 [ 76.936329][ C3] ldusb 8-1:0.0: usb_submit_urb failed (-19) [ 76.943482][ T6555] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 77.319448][ T6652] FAULT_INJECTION: forcing a failure. [ 77.319448][ T6652] name failslab, interval 1, probability 0, space 0, times 1 [ 77.324548][ T6652] CPU: 2 UID: 0 PID: 6652 Comm: syz.0.168 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 77.327880][ T6652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.331254][ T6652] Call Trace: [ 77.332313][ T6652] [ 77.333334][ T6652] dump_stack_lvl+0x16c/0x1f0 [ 77.334976][ T6652] should_fail_ex+0x497/0x5b0 [ 77.336981][ T6652] ? fs_reclaim_acquire+0xae/0x150 [ 77.339088][ T6652] should_failslab+0xc2/0x120 [ 77.340703][ T6652] kmem_cache_alloc_node_noprof+0x71/0x310 [ 77.342883][ T6652] ? __alloc_skb+0x2b3/0x380 [ 77.344551][ T6652] __alloc_skb+0x2b3/0x380 [ 77.346229][ T6652] ? __pfx___alloc_skb+0x10/0x10 [ 77.348104][ T6652] ? lock_acquire+0x2f/0xb0 [ 77.349893][ T6652] netlink_alloc_large_skb+0x69/0x130 [ 77.352330][ T6652] netlink_sendmsg+0x689/0xd70 [ 77.353976][ T6652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.355773][ T6652] ? lock_acquire+0x2f/0xb0 [ 77.357496][ T6652] ? __might_fault+0xe3/0x190 [ 77.359450][ T6652] ____sys_sendmsg+0x9ae/0xb40 [ 77.361290][ T6652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.363334][ T6652] ? get_compat_msghdr+0x11b/0x170 [ 77.365240][ T6652] ? __pfx___lock_acquire+0x10/0x10 [ 77.367126][ T6652] ___sys_sendmsg+0x135/0x1e0 [ 77.368834][ T6652] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.371120][ T6652] ? lock_acquire+0x2f/0xb0 [ 77.373139][ T6652] ? __fget_files+0x40/0x3f0 [ 77.375067][ T6652] ? fdget+0x176/0x210 [ 77.376501][ T6652] __sys_sendmsg+0x117/0x1f0 [ 77.378058][ T6652] ? __pfx___sys_sendmsg+0x10/0x10 [ 77.379781][ T6652] ? __fget_files+0x244/0x3f0 [ 77.381438][ T6652] __do_fast_syscall_32+0x73/0x120 [ 77.383205][ T6652] do_fast_syscall_32+0x32/0x80 [ 77.384879][ T6652] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.387040][ T6652] RIP: 0023:0xf7f00579 [ 77.388635][ T6652] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 77.397319][ T6652] RSP: 002b:00000000f568655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 77.401229][ T6652] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001200 [ 77.403970][ T6652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.406631][ T6652] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.409387][ T6652] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 77.412112][ T6652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.414976][ T6652] [ 77.491327][ T39] audit: type=1800 audit(1730257345.799:12): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.169" name="bus" dev="9p" ino=39190895 res=0 errno=0 [ 77.508603][ T6654] netfs: Couldn't get user pages (rc=-14) [ 78.298607][ T6662] afs: Unknown parameter 'uid<00000000000000000000' [ 78.385124][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 78.401511][ T6666] macvlan2: entered promiscuous mode [ 78.403740][ T6666] macvlan2: entered allmulticast mode [ 78.822224][ T39] audit: type=1800 audit(1730257347.129:13): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.178" name="bus" dev="9p" ino=39190895 res=0 errno=0 [ 78.837160][ T6680] netfs: Couldn't get user pages (rc=-14) [ 79.726035][ T64] hid (null): bogus close delimiter [ 79.728296][ T64] hid (null): report_id 0 is invalid [ 79.730631][ T64] hid (null): unknown global tag 0xc [ 79.732912][ T64] hid (null): unknown global tag 0xe [ 79.734725][ T64] hid (null): unknown global tag 0xe [ 79.736954][ T64] hid (null): unknown global tag 0xd [ 79.740479][ T64] hid (null): invalid report_size 2244 [ 79.748892][ T64] hid (null): invalid report_size 434752555 [ 79.751600][ T64] hid (null): unknown global tag 0x1f [ 79.754383][ T64] hid (null): bogus close delimiter [ 79.756421][ T64] hid (null): unknown global tag 0xc [ 79.759054][ T64] hid (null): unknown global tag 0xe [ 79.761338][ T64] hid (null): report_id 52324 is invalid [ 79.764378][ T64] hid (null): unknown global tag 0xcf [ 79.767461][ T64] hid (null): unknown global tag 0xe [ 79.770643][ T64] hid (null): invalid report_count 1132090337 [ 79.773907][ T64] hid (null): report_id 62958 is invalid [ 79.776982][ T64] hid (null): unknown global tag 0xe [ 79.798344][ T64] hid (null): unknown global tag 0xac [ 79.801329][ T64] hid (null): bogus close delimiter [ 79.803821][ T64] hid (null): report_id 0 is invalid [ 79.810102][ T64] hid (null): bogus close delimiter [ 79.815222][ T64] hid (null): unknown global tag 0xd [ 79.997626][ T64] hid (null): report_id 61163 is invalid [ 80.002724][ T64] hid (null): unknown global tag 0xc [ 80.006027][ T64] hid (null): unknown global tag 0xe [ 80.009071][ T64] hid (null): unknown global tag 0xc [ 80.012708][ T64] hid (null): unknown global tag 0xd [ 80.015873][ T64] hid (null): invalid report_size 1402302980 [ 80.020974][ T64] hid (null): report_id 61162 is invalid [ 80.034037][ T64] hid (null): unknown global tag 0x98 [ 80.039635][ T64] hid (null): bogus close delimiter [ 80.041845][ T64] hid (null): unknown global tag 0xc [ 80.044666][ T64] hid (null): report_id 0 is invalid [ 80.070232][ T64] hid-generic 0003:0000:0003.0003: bogus close delimiter [ 80.081126][ T6715] netlink: 224 bytes leftover after parsing attributes in process `syz.3.189'. [ 80.087089][ T6716] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 80.091172][ T6715] dccp_v6_rcv: dropped packet with invalid checksum [ 80.165222][ T64] hid-generic 0003:0000:0003.0003: item 0 0 2 10 parsing failed [ 80.426514][ T6719] FAULT_INJECTION: forcing a failure. [ 80.426514][ T6719] name failslab, interval 1, probability 0, space 0, times 0 [ 80.431302][ T6719] CPU: 2 UID: 0 PID: 6719 Comm: syz.3.190 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 80.434770][ T6719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.438613][ T6719] Call Trace: [ 80.439867][ T6719] [ 80.440807][ T6719] dump_stack_lvl+0x16c/0x1f0 [ 80.442133][ T6719] should_fail_ex+0x497/0x5b0 [ 80.443664][ T6719] should_failslab+0xc2/0x120 [ 80.445594][ T6719] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 80.449165][ T6719] ? skb_clone+0x190/0x3f0 [ 80.451700][ T6719] skb_clone+0x190/0x3f0 [ 80.453936][ T6719] netlink_deliver_tap+0xb26/0xcf0 [ 80.455833][ T6719] netlink_unicast+0x5e1/0x7f0 [ 80.457531][ T6719] ? __pfx_netlink_unicast+0x10/0x10 [ 80.459165][ T6719] ? __phys_addr_symbol+0x30/0x80 [ 80.460516][ T6719] ? __check_object_size+0x4a1/0x710 [ 80.462194][ T6719] netlink_sendmsg+0x8b8/0xd70 [ 80.463573][ T6719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.465095][ T6719] ? lock_acquire+0x2f/0xb0 [ 80.466529][ T6719] ? __might_fault+0xe3/0x190 [ 80.468076][ T6719] ____sys_sendmsg+0x9ae/0xb40 [ 80.469652][ T6719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.471338][ T6719] ? get_compat_msghdr+0x11b/0x170 [ 80.473226][ T6719] ? __pfx___lock_acquire+0x10/0x10 [ 80.475152][ T6719] ___sys_sendmsg+0x135/0x1e0 [ 80.477016][ T6719] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.479194][ T6719] ? lock_acquire+0x2f/0xb0 [ 80.480772][ T6719] ? __fget_files+0x40/0x3f0 [ 80.482422][ T6719] ? fdget+0x176/0x210 [ 80.483715][ T6719] __sys_sendmsg+0x117/0x1f0 [ 80.485357][ T6719] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.486913][ T6719] ? __fget_files+0x244/0x3f0 [ 80.488377][ T6719] __do_fast_syscall_32+0x73/0x120 [ 80.490237][ T6719] do_fast_syscall_32+0x32/0x80 [ 80.492072][ T6719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.494339][ T6719] RIP: 0023:0xf7f42579 [ 80.495629][ T6719] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 80.501883][ T6719] RSP: 002b:00000000f56c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 80.505815][ T6719] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001200 [ 80.508755][ T6719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.511357][ T6719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.513696][ T6719] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 80.516295][ T6719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.518609][ T6719] [ 80.839923][ T64] hid-generic 0003:0000:0003.0003: probe with driver hid-generic failed with error -22 [ 81.101846][ T6732] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 81.102637][ T6731] IPVS: stopping backup sync thread 6732 ... [ 81.241093][ T6740] FAULT_INJECTION: forcing a failure. [ 81.241093][ T6740] name failslab, interval 1, probability 0, space 0, times 0 [ 81.246525][ T6740] CPU: 0 UID: 0 PID: 6740 Comm: syz.3.199 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 81.250294][ T6740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.254220][ T6740] Call Trace: [ 81.255482][ T6740] [ 81.256658][ T6740] dump_stack_lvl+0x16c/0x1f0 [ 81.258469][ T6740] should_fail_ex+0x497/0x5b0 [ 81.260198][ T6740] ? fs_reclaim_acquire+0xae/0x150 [ 81.261893][ T6740] should_failslab+0xc2/0x120 [ 81.263921][ T6740] kmem_cache_alloc_node_noprof+0x71/0x310 [ 81.266223][ T6740] ? __alloc_skb+0x2b3/0x380 [ 81.268362][ T6740] __alloc_skb+0x2b3/0x380 [ 81.270426][ T6740] ? __pfx___alloc_skb+0x10/0x10 [ 81.272545][ T6740] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 81.274824][ T6740] netlink_ack+0x164/0xb20 [ 81.276871][ T6740] netlink_rcv_skb+0x327/0x410 [ 81.278783][ T6740] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.281092][ T6740] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 81.283066][ T6740] ? netlink_deliver_tap+0x1ae/0xcf0 [ 81.285187][ T6740] netlink_unicast+0x53c/0x7f0 [ 81.287313][ T6740] ? __pfx_netlink_unicast+0x10/0x10 [ 81.289864][ T6740] ? __phys_addr_symbol+0x30/0x80 [ 81.292158][ T6740] ? __check_object_size+0x488/0x710 [ 81.294463][ T6740] netlink_sendmsg+0x8b8/0xd70 [ 81.296462][ T6740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.298429][ T6740] ? lock_acquire+0x2f/0xb0 [ 81.300397][ T6740] ? __might_fault+0xe3/0x190 [ 81.302176][ T6740] ____sys_sendmsg+0x9ae/0xb40 [ 81.304049][ T6740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.306090][ T6740] ? get_compat_msghdr+0x11b/0x170 [ 81.308225][ T6740] ? __pfx___lock_acquire+0x10/0x10 [ 81.310560][ T6740] ___sys_sendmsg+0x135/0x1e0 [ 81.312832][ T6740] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.315496][ T6740] ? lock_acquire+0x2f/0xb0 [ 81.317317][ T6740] ? __fget_files+0x40/0x3f0 [ 81.319419][ T6740] ? fdget+0x176/0x210 [ 81.321328][ T6740] __sys_sendmsg+0x117/0x1f0 [ 81.323180][ T6740] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.325214][ T6740] ? __fget_files+0x244/0x3f0 [ 81.327165][ T6740] __do_fast_syscall_32+0x73/0x120 [ 81.329381][ T6740] do_fast_syscall_32+0x32/0x80 [ 81.331445][ T6740] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.334337][ T6740] RIP: 0023:0xf7f42579 [ 81.336084][ T6740] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 81.344076][ T6740] RSP: 002b:00000000f56c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 81.347158][ T6740] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001200 [ 81.350061][ T6740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.353055][ T6740] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.356906][ T6740] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 81.360377][ T6740] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.364395][ T6740] [ 81.370640][ T6745] fuse: Unknown parameter 'GR' [ 81.569679][ T39] audit: type=1326 audit(1730257349.879:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.3.205" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x0 [ 81.674430][ T6758] netlink: 'syz.3.205': attribute type 2 has an invalid length. [ 81.887308][ T39] audit: type=1326 audit(1730257350.199:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.1.208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 81.893874][ T39] audit: type=1326 audit(1730257350.199:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.1.208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 81.901408][ T39] audit: type=1326 audit(1730257350.199:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.1.208" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 81.908311][ T39] audit: type=1326 audit(1730257350.199:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.1.208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 81.915455][ T39] audit: type=1326 audit(1730257350.199:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.1.208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 81.926073][ T39] audit: type=1326 audit(1730257350.199:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.1.208" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 81.934445][ T39] audit: type=1326 audit(1730257350.199:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.1.208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 81.943169][ T39] audit: type=1326 audit(1730257350.199:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.1.208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 81.951941][ T39] audit: type=1326 audit(1730257350.199:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.1.208" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f0f579 code=0x7ffc0000 [ 82.032727][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'. [ 82.126288][ T6772] FAULT_INJECTION: forcing a failure. [ 82.126288][ T6772] name failslab, interval 1, probability 0, space 0, times 0 [ 82.130942][ T6772] CPU: 2 UID: 0 PID: 6772 Comm: syz.1.210 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 82.134204][ T6772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.138212][ T6772] Call Trace: [ 82.140114][ T6772] [ 82.141715][ T6772] dump_stack_lvl+0x16c/0x1f0 [ 82.143873][ T6772] should_fail_ex+0x497/0x5b0 [ 82.145918][ T6772] ? fs_reclaim_acquire+0xae/0x150 [ 82.147895][ T6772] should_failslab+0xc2/0x120 [ 82.149597][ T6772] kmem_cache_alloc_node_noprof+0x71/0x310 [ 82.151943][ T6772] ? __alloc_skb+0x2b3/0x380 [ 82.153826][ T6772] __alloc_skb+0x2b3/0x380 [ 82.155832][ T6772] ? __pfx___alloc_skb+0x10/0x10 [ 82.157772][ T6772] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 82.159673][ T6772] netlink_ack+0x164/0xb20 [ 82.161083][ T6772] netlink_rcv_skb+0x327/0x410 [ 82.162445][ T6772] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 82.164106][ T6772] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.165873][ T6772] ? netlink_deliver_tap+0x1ae/0xcf0 [ 82.167549][ T6772] netlink_unicast+0x53c/0x7f0 [ 82.169415][ T6772] ? __pfx_netlink_unicast+0x10/0x10 [ 82.171665][ T6772] ? __phys_addr_symbol+0x30/0x80 [ 82.173949][ T6772] ? __check_object_size+0x488/0x710 [ 82.175819][ T6772] netlink_sendmsg+0x8b8/0xd70 [ 82.179367][ T6772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.182491][ T6772] ? lock_acquire+0x2f/0xb0 [ 82.184048][ T6772] ? __might_fault+0xe3/0x190 [ 82.185888][ T6772] ____sys_sendmsg+0x9ae/0xb40 [ 82.187273][ T6772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.189100][ T6772] ? get_compat_msghdr+0x11b/0x170 [ 82.191330][ T6772] ? __pfx___lock_acquire+0x10/0x10 [ 82.193637][ T6772] ___sys_sendmsg+0x135/0x1e0 [ 82.195354][ T6772] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.197252][ T6772] ? lock_acquire+0x2f/0xb0 [ 82.199094][ T6772] ? __fget_files+0x40/0x3f0 [ 82.200859][ T6772] ? fdget+0x176/0x210 [ 82.202312][ T6772] __sys_sendmsg+0x117/0x1f0 [ 82.203925][ T6772] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.206132][ T6772] ? __fget_files+0x244/0x3f0 [ 82.208052][ T6772] __do_fast_syscall_32+0x73/0x120 [ 82.209740][ T6772] do_fast_syscall_32+0x32/0x80 [ 82.211576][ T6772] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.214535][ T6772] RIP: 0023:0xf7f0f579 [ 82.215915][ T6772] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 82.223547][ T6772] RSP: 002b:00000000f569655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 82.226530][ T6772] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001200 [ 82.228953][ T6772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.231403][ T6772] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.233909][ T6772] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 82.236103][ T6772] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.239133][ T6772] [ 82.527977][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.211'. [ 82.628255][ T6793] netlink: 48 bytes leftover after parsing attributes in process `syz.1.215'. [ 82.846240][ T6801] can0: slcan on ptm0. [ 82.859098][ T6801] netlink: 'syz.2.219': attribute type 1 has an invalid length. [ 82.888873][ T6801] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.905259][ T6801] netlink: 830 bytes leftover after parsing attributes in process `syz.2.219'. [ 83.065022][ T6800] can0 (unregistered): slcan off ptm0. [ 83.662470][ T6833] netlink: 'syz.1.226': attribute type 10 has an invalid length. [ 83.713174][ T6833] netlink: 152 bytes leftover after parsing attributes in process `syz.1.226'. [ 83.765197][ T6836] netlink: 'syz.2.227': attribute type 10 has an invalid length. [ 83.770330][ T6836] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.774199][ T6836] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.808613][ T6836] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.812636][ T6836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.817162][ T6836] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.819874][ T6836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.826155][ T6836] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 84.014871][ T6850] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.228'. [ 84.020074][ T6850] netlink: zone id is out of range [ 84.023410][ T6850] netlink: zone id is out of range [ 84.032412][ T6850] netlink: zone id is out of range [ 84.034424][ T6850] netlink: zone id is out of range [ 84.036704][ T6850] netlink: zone id is out of range [ 84.038311][ T6850] netlink: zone id is out of range [ 84.040353][ T6850] netlink: zone id is out of range [ 84.041770][ T6850] netlink: zone id is out of range [ 84.043183][ T6850] netlink: zone id is out of range [ 84.629602][ T6862] overlayfs: missing 'workdir' [ 84.987437][ T6875] xt_NFQUEUE: number of total queues is 0 [ 85.067108][ T6881] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.237'. [ 85.244249][ T6886] netlink: 'syz.0.241': attribute type 21 has an invalid length. [ 85.384940][ T64] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 85.544022][ T64] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 85.548372][ T64] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.552657][ T64] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 85.557916][ T64] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.581053][ T64] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 85.584580][ T64] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 85.587606][ T64] usb 7-1: Product: syz [ 85.589206][ T64] usb 7-1: Manufacturer: syz [ 85.680780][ T64] cdc_wdm 7-1:1.0: skipping garbage [ 85.682892][ T64] cdc_wdm 7-1:1.0: skipping garbage [ 85.717549][ T64] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 85.719929][ T64] cdc_wdm 7-1:1.0: Unknown control protocol [ 85.937110][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 85.940053][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 85.945008][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 85.947852][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 85.951909][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 85.955084][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 85.961481][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 85.963980][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 85.966632][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 85.969066][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 85.971654][ T5996] usb 7-1: USB disconnect, device number 3 [ 85.974097][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 85.974123][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 85.974140][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 86.250629][ T6893] input: syz0 as /devices/virtual/input/input5 [ 86.342423][ T5963] Bluetooth: Unexpected continuation frame (len 24) [ 86.445035][ T4675] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 86.501643][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 86.626284][ T4675] usb 7-1: config 1 descriptor has 1 excess byte, ignoring [ 86.629417][ T4675] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 86.635531][ T5955] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 86.639676][ T5963] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.642280][ T4675] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 86.656866][ T4675] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.659819][ T4675] usb 7-1: Product: syz [ 86.661370][ T4675] usb 7-1: Manufacturer: syz [ 86.663143][ T4675] usb 7-1: SerialNumber: syz [ 86.676937][ T4675] usb 7-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 86.691360][ T6921] [ 86.692431][ T6921] ====================================================== [ 86.695575][ T6921] WARNING: possible circular locking dependency detected [ 86.698560][ T6921] 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 Not tainted [ 86.703465][ T6921] ------------------------------------------------------ [ 86.706268][ T6921] syz.0.250/6921 is trying to acquire lock: [ 86.708460][ T6921] ffff88804c593a98 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x3a9/0x6a0 [ 86.712710][ T6921] [ 86.712710][ T6921] but task is already holding lock: [ 86.716386][ T6921] ffff8880123771d0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x86/0x140 [ 86.721021][ T6921] [ 86.721021][ T6921] which lock already depends on the new lock. [ 86.721021][ T6921] [ 86.724634][ T6921] [ 86.724634][ T6921] the existing dependency chain (in reverse order) is: [ 86.728066][ T6921] [ 86.728066][ T6921] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 86.731190][ T6921] down_write+0x93/0x200 [ 86.732911][ T6921] process_measurement+0x39c/0x2370 [ 86.734952][ T6921] ima_file_mmap+0x146/0x1d0 [ 86.736868][ T6921] security_mmap_file+0x8bd/0x990 [ 86.739985][ T6921] __do_sys_remap_file_pages+0x526/0x900 [ 86.742869][ T6921] __do_fast_syscall_32+0x73/0x120 [ 86.745253][ T6921] do_fast_syscall_32+0x32/0x80 [ 86.747349][ T6921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.749993][ T6921] [ 86.749993][ T6921] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 86.752817][ T6921] __lock_acquire+0x250b/0x3ce0 [ 86.755172][ T6921] lock_acquire.part.0+0x11b/0x380 [ 86.757263][ T6921] down_read_killable+0x9d/0x380 [ 86.759494][ T6921] lock_mm_and_find_vma+0x3a9/0x6a0 [ 86.761566][ T6921] do_user_addr_fault+0x2b5/0x13f0 [ 86.763975][ T6921] exc_page_fault+0x5c/0xc0 [ 86.766741][ T6921] asm_exc_page_fault+0x26/0x30 [ 86.768876][ T6921] fault_in_readable+0x160/0x200 [ 86.771106][ T6921] fault_in_iov_iter_readable+0x101/0x2c0 [ 86.773346][ T6921] generic_perform_write+0x21b/0x920 [ 86.775833][ T6921] shmem_file_write_iter+0x10e/0x140 [ 86.778080][ T6921] vfs_write+0x5ae/0x1150 [ 86.779972][ T6921] ksys_write+0x12f/0x260 [ 86.781659][ T6921] __do_fast_syscall_32+0x73/0x120 [ 86.783821][ T6921] do_fast_syscall_32+0x32/0x80 [ 86.785710][ T6921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.788228][ T6921] [ 86.788228][ T6921] other info that might help us debug this: [ 86.788228][ T6921] [ 86.791787][ T6921] Possible unsafe locking scenario: [ 86.791787][ T6921] [ 86.794809][ T6921] CPU0 CPU1 [ 86.796929][ T6921] ---- ---- [ 86.799504][ T6921] lock(&sb->s_type->i_mutex_key#12); [ 86.801524][ T6921] lock(&mm->mmap_lock); [ 86.804153][ T6921] lock(&sb->s_type->i_mutex_key#12); [ 86.806937][ T6921] rlock(&mm->mmap_lock); [ 86.808528][ T6921] [ 86.808528][ T6921] *** DEADLOCK *** [ 86.808528][ T6921] [ 86.811509][ T6921] 3 locks held by syz.0.250/6921: [ 86.813439][ T6921] #0: ffff888026b7d7b8 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24c/0x360 [ 86.817286][ T6921] #1: ffff88802244e420 (sb_writers#5){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 86.821262][ T6921] #2: ffff8880123771d0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x86/0x140 [ 86.825317][ T6921] [ 86.825317][ T6921] stack backtrace: [ 86.827415][ T6921] CPU: 3 UID: 0 PID: 6921 Comm: syz.0.250 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 86.831183][ T6921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.834826][ T6921] Call Trace: [ 86.836063][ T6921] [ 86.837546][ T6921] dump_stack_lvl+0x116/0x1f0 [ 86.840770][ T6921] print_circular_bug+0x419/0x5d0 [ 86.843857][ T6921] check_noncircular+0x31a/0x400 [ 86.845655][ T6921] ? __pfx_check_noncircular+0x10/0x10 [ 86.847449][ T6921] ? lockdep_lock+0xc6/0x200 [ 86.849163][ T6921] ? __pfx_lockdep_lock+0x10/0x10 [ 86.851071][ T6921] __lock_acquire+0x250b/0x3ce0 [ 86.853299][ T6921] ? __pfx___lock_acquire+0x10/0x10 [ 86.855191][ T6921] ? cmp_ex_search+0x8b/0xb0 [ 86.857165][ T6921] ? bsearch+0x9e/0xc0 [ 86.858899][ T6921] lock_acquire.part.0+0x11b/0x380 [ 86.861060][ T6921] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 86.863104][ T6921] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 86.865022][ T6921] ? rcu_is_watching+0x12/0xc0 [ 86.867048][ T6921] ? trace_lock_acquire+0x14a/0x1d0 [ 86.869839][ T6921] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 86.873224][ T6921] ? lock_acquire+0x2f/0xb0 [ 86.875539][ T6921] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 86.877559][ T6921] down_read_killable+0x9d/0x380 [ 86.879426][ T6921] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 86.881431][ T6921] ? __pfx_down_read_killable+0x10/0x10 [ 86.883530][ T6921] ? __pfx_search_extable+0x10/0x10 [ 86.885394][ T6921] ? fault_in_readable+0x160/0x200 [ 86.887053][ T6921] lock_mm_and_find_vma+0x3a9/0x6a0 [ 86.888851][ T6921] do_user_addr_fault+0x2b5/0x13f0 [ 86.890712][ T6921] exc_page_fault+0x5c/0xc0 [ 86.892409][ T6921] asm_exc_page_fault+0x26/0x30 [ 86.894289][ T6921] RIP: 0010:fault_in_readable+0x160/0x200 [ 86.896763][ T6921] Code: 42 e8 45 31 f6 e8 70 36 ba ff 48 39 eb 75 13 eb 2e e8 64 36 ba ff 48 81 c3 00 10 00 00 48 39 eb 74 1d e8 53 36 ba ff 45 89 f7 <8a> 03 31 ff 44 89 fe 88 44 24 28 e8 80 38 ba ff 45 85 ff 74 d2 e8 [ 86.905137][ T6921] RSP: 0018:ffffc9000e9c7b08 EFLAGS: 00050246 [ 86.907454][ T6921] RAX: 0000000000040000 RBX: 00000000205c9000 RCX: ffffc9000c202000 [ 86.911453][ T6921] RDX: 0000000000040000 RSI: ffffffff81d26f9d RDI: 0000000000000007 [ 86.915286][ T6921] RBP: 0000000020600000 R08: 0000000000000007 R09: 0000000000000000 [ 86.918690][ T6921] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000037000 [ 86.922227][ T6921] R13: 00000000205c9000 R14: 0000000000000000 R15: 0000000000000000 [ 86.925311][ T6921] ? fault_in_readable+0x15d/0x200 [ 86.927246][ T6921] ? fault_in_readable+0x15d/0x200 [ 86.929015][ T6921] ? __pfx_fault_in_readable+0x10/0x10 [ 86.930888][ T6921] ? inode_to_bdi+0x9e/0x160 [ 86.934030][ T6921] fault_in_iov_iter_readable+0x101/0x2c0 [ 86.936808][ T6921] generic_perform_write+0x21b/0x920 [ 86.939961][ T6921] ? __pfx_generic_perform_write+0x10/0x10 [ 86.942211][ T6921] ? __pfx_generic_write_checks+0x10/0x10 [ 86.944516][ T6921] ? trace_lock_acquire+0x14a/0x1d0 [ 86.947171][ T6921] shmem_file_write_iter+0x10e/0x140 [ 86.949633][ T6921] vfs_write+0x5ae/0x1150 [ 86.951467][ T6921] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 86.953552][ T6921] ? trace_lock_acquire+0x14a/0x1d0 [ 86.955194][ T6921] ? __pfx_vfs_write+0x10/0x10 [ 86.956755][ T6921] ? __pfx___mutex_lock+0x10/0x10 [ 86.958472][ T6921] ksys_write+0x12f/0x260 [ 86.960085][ T6921] ? __pfx_ksys_write+0x10/0x10 [ 86.961980][ T6921] __do_fast_syscall_32+0x73/0x120 [ 86.963601][ T6921] do_fast_syscall_32+0x32/0x80 [ 86.966014][ T6921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.968298][ T6921] RIP: 0023:0xf7f00579 [ 86.969837][ T6921] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 86.978313][ T6921] RSP: 002b:00000000f568655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 86.982745][ T6921] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 86.987408][ T6921] RDX: 000000000208e24b RSI: 0000000000000000 RDI: 0000000000000000 [ 86.990349][ T6921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.994025][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.997493][ T6921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.000835][ T6921] [ 87.007215][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 87.007232][ T39] audit: type=1326 audit(1730257355.319:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.0.250" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f00579 code=0x0 [ 88.007395][ T5996] usb 7-1: USB disconnect, device number 4 [ 88.395018][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.395099][ T58] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 88.399673][ T58] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 90.474999][ T5955] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.475663][ T58] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 90.479779][ T58] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 92.555106][ T58] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 92.557967][ T58] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 94.635102][ T58] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 94.635126][ T5955] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.637751][ T58] Bluetooth: hci3: Error when powering off device on rfkill (-110) VM DIAGNOSIS: 02:58:19 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b744cc0 RCX=ffffffff8180988c RDX=ffff888024dca440 RSI=ffffffff81809866 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90006ec79a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed10056e8999 R13=0000000000000001 R14=ffff88802b744cc8 R15=ffff88802b440100 RIP=ffffffff81809868 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007faf8bbcf270 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001bf164 RBX=0000000000000001 RCX=ffffffff8b142f59 RDX=ffffed10056a7026 RSI=ffffffff8bb12f60 RDI=ffffffff8164049c RBP=ffffed10036e9910 RSP=ffffc90000477e08 R8 =0000000000000000 R9 =ffffed10056a7025 R10=ffff88802b53812b R11=0000000000000002 R12=0000000000000001 R13=ffff88801b74c880 R14=ffffffff901cea88 R15=0000000000000000 RIP=ffffffff8b14433f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c3bb954 CR3=0000000026aa6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000097cfc RBX=0000000000000002 RCX=ffffffff8b142f59 RDX=ffffed10056c7026 RSI=ffffffff8bb12f60 RDI=ffffffff8164049c RBP=ffffed10036ec000 RSP=ffffc90000487e08 R8 =0000000000000000 R9 =ffffed10056c7025 R10=ffff88802b63812b R11=0000000000000001 R12=0000000000000002 R13=ffff88801b760000 R14=ffffffff901cea88 R15=0000000000000000 RIP=ffffffff8b14433f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055e2b0e72000 CR3=000000004e2ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f746cff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85042b35 RDI=ffffffff9a6412a0 RBP=ffffffff9a641260 RSP=ffffc9000e9c7068 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000020 R14=ffffffff85042ad0 R15=0000000000000000 RIP=ffffffff85042b5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000205c9000 CR3=000000002ae98000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000