last executing test programs: 11.86985349s ago: executing program 2 (id=1495): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000340)) r1 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000080)=0x8000, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x15, &(0x7f0000000740)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r5, 0x3f00}}, 0x18) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = epoll_create(0x10000e9) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000100)={r8, 0x0, 0x0, 0x1000}) r10 = fcntl$dupfd(r9, 0x0, r6) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r9, &(0x7f0000000080)={0x9000001d}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r10, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r10, &(0x7f0000000000)={0x40002009}) epoll_pwait2(r6, &(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000058010000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038e3000d400acc20f896064e79c929702145fa63595955b57c5c023e63c8a0b353b0f092392779d44d411d6ad83ca91a8e8b282cc8bfb1ab91caa2ade3593a098f600f3e5645182a9ca5ace4cf126873c040cb3327edf3073be8b51d83cd436a3de9f9797c6d6bbb2a290d1c41dc2d836f9e12779d77160fe31758fff54b25fe4976ec2f65358361ce1aa371dc03936b25fa521423d30d6fd8e686ad9eef8dc1727308b716ab4cb4427bdc9d723e2f68c19720b3e4845cb19a245c71238051c5c201ddb4b8ee1f6c6ca36e130e8b6830d099231338203da1cf819ddd17f9f54507"], 0x1d0}}, 0x0) 11.546559628s ago: executing program 2 (id=1498): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000640)={0x0, 0x0, '\x00', @bt={0x0, 0x9, 0x0, 0x800080, 0x1000, 0x7, 0x10, 0x2}}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r3, r3) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003600)={0x1}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003680)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000001200)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="000000000000006418110000", @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000004749d0108000000185b00000f000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000006203ffff01000000"], &(0x7f0000001300)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001340)=""/4096, 0x40f00, 0x17, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000003440)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x8cde, 0xffffffffffffffff, 0x0, &(0x7f0000003640), 0x0, 0x10, 0xdaf}, 0x90) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000049000000000000000000020000000000"]) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000180)=[{&(0x7f0000000380)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa41013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r11 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000004ea300000000000d0000006b0000950000000000004627b7a47233b013a76a46aa87fa9420e6ad84d0e1541761e593db8483249439643e9dfdf150171bd029d7b3b5541ad24119b2331ffd7d03d0bee68867f0ba516d962dad4014bde34835353e9fbc5c4b3cc467f3d0e63e83e59f8ffb09c772a7c3332f5bb8eef05ff1aad000d05d4808dc2b4be170317b6e4e626420"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000000)="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", 0x176) 10.148454623s ago: executing program 2 (id=1503): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$xdp(0x2c, 0x3, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="38000000031401000000000000000008090002"], 0x38}, 0x1, 0x0, 0x0, 0x40090}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r5, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000140)=""/121, 0x79}], 0x2) ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) 7.979149396s ago: executing program 0 (id=1513): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000640)={0x0, 0x0, '\x00', @bt={0x0, 0x9, 0x0, 0x800080, 0x1000, 0x7, 0x10, 0x2}}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r3, r3) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003600)={0x1}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003680)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000001200)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="000000000000006418110000", @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000004749d0108000000185b00000f000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000006203ffff01000000"], &(0x7f0000001300)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001340)=""/4096, 0x40f00, 0x17, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000003440)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x8cde, 0xffffffffffffffff, 0x0, &(0x7f0000003640)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4], 0x0, 0x10, 0xdaf}, 0x90) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000049000000000000000000020000000000"]) preadv(r5, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000180)=[{&(0x7f0000000380)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa41013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r11 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000004ea300000000000d0000006b0000950000000000004627b7a47233b013a76a46aa87fa9420e6ad84d0e1541761e593db8483249439643e9dfdf150171bd029d7b3b5541ad24119b2331ffd7d03d0bee68867f0ba516d962dad4014bde34835353e9fbc5c4b3cc467f3d0e63e83e59f8ffb09c772a7c3332f5bb8eef05ff1aad000d05d4808dc2b4be170317b6e4e626420"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000000)="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", 0x176) 7.36061794s ago: executing program 3 (id=1516): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x9200, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x6, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x6000, 0x0, 0x2, r1, 0xa}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x82) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000580)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/39, 0x27}, {&(0x7f0000006180)=""/142, 0x8e}, {&(0x7f00000015c0)=""/241, 0xf1}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/90, 0x5a}], 0x5, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfc, {}, [{0x54}]}, 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x103800, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x5452, &(0x7f0000000100)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000580)={0x0, 0x0, 0x2, r1, 0xe}) 6.99137444s ago: executing program 1 (id=1517): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) write$nbd(r1, &(0x7f0000000cc0)={0x67446698, 0x0, 0x0, 0x2, 0x0, "f3280d11a27c39296384651df259bdb13b20bdd867be03c7f6fa497be2f49e57bffdad467418d88463260494994562bdc7baca1d38da93e2da4fea3c041f5f64bbf9727789d5f6cd743fc0a58be090ec70a03277c1ead2e67e22492ba1ce4585e1dd9fb5feaa91410b78b4015f7420123ea821ccb947b814b24a16535271577ff23a5e57d9fb0406fde485961cc27be0dbb62e1911883cb7097987f7aa6305ec88aaeac9dba1f46a14ab1edeb26def926a2642ba7338830750452d7fa37da405fe4dafb9feaad7b06c4ea3df462b714c76c04f67204aa0f2c653af0bf1dddf874d000517d10ce702e9f07548e1895596"}, 0x100) setreuid(0x0, 0xee01) r2 = shmget$private(0x0, 0x3000, 0x386, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x140}, 0x0, 0x0, 0x0, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) shmctl$IPC_RMID(r2, 0x0) 6.990962923s ago: executing program 3 (id=1518): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) memfd_create(&(0x7f0000002180)='\xa3\xcb\x04=\x827\xe7\x81S\bD\xd8K| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xa5\x9e\x1f`\x05q5\xee\xde\xdf\xba\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000704000/0x4000)=nil, 0x4000}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x9, 0x212902) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES32=0x41424344, @ANYRES8=r4], 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r5, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000080), &(0x7f0000000300)=@v3={0x3000000, [{0x0, 0x2}, {0x8, 0x2}]}, 0x18, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000440)="0f005a012e6765660fc7b12de166b83b018ec0b8010000000f01d9c4c21536ddf4b805000000b929d400000f01c1260f01c30f1296fe24771e26650f78b46c07000000", 0xfffffffffffffe42}], 0x1, 0x34, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000980)=@newtaction={0x48, 0x30, 0x36eac49ec043b62f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4, 0x3}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) write$P9_RLCREATE(r2, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x0, 0x0, 0x2}, 0x1ff}}, 0x18) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES64=r6]) 6.900256265s ago: executing program 0 (id=1519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000200)='syzkaller\x00'}, 0x90) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000080)) r6 = socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1fc}, 0x0, 0x0) sendmmsg(r6, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={0x0, @initdev, @empty}, &(0x7f00000009c0)=0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x38, r9, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', r11}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000a00)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000000ac0)={&(0x7f00000003c0), 0xc, &(0x7f0000000a80)={&(0x7f0000001400)={0x734, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0xfffffffffffffcbf, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x4c, 0x1, @lb_tx_hash_to_port_mapping}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8c3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r7}, {0x4}}, {{0x8, 0x1, r12}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}]}, 0x734}, 0x1, 0x0, 0x0, 0x4004846}, 0x20000800) ioctl$sock_SIOCDELDLCI(r4, 0x8981, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB="26ceca65403a84a78a534a5711e0f5cfdd7a138f362aae0eac9cd4f239c627ca55c16645ee49886539c4cfc2f3", @ANYBLOB="f3000000000000e14f003b00000008000300", @ANYRESHEX=r4, @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="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", @ANYRES64, @ANYRES8=0x0], 0x6f4}, 0x1, 0x0, 0x0, 0x1acce5bcb8091975}, 0x0) 6.089590804s ago: executing program 2 (id=1520): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r2}, 0x10) recvmsg(r1, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000009700)=""/4096, 0x1000}], 0x1}, 0x3) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) r3 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x10000) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x5000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) syz_io_uring_setup(0x6291, &(0x7f0000000340)={0x0, 0x722f, 0x400, 0x2}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r6}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0x703, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x0, 0xffff7fff, 0x0, 0x0, 0x0, "518aba4d000000000000000000000000002000"}) 5.975383808s ago: executing program 1 (id=1521): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x30}, 0xc) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x1}], 0x1, 0x0, 0x0, 0x3000000}, 0x0) close(0x3) 5.831114778s ago: executing program 0 (id=1522): r0 = openat$nullb(0xffffff9c, &(0x7f0000000100), 0x2102, 0x0) pwritev(r0, &(0x7f00000022c0)=[{&(0x7f0000001040)='-', 0x1}], 0x1, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x1, &(0x7f0000000080)=""/102400, &(0x7f0000000040)=0x19039) 5.650788986s ago: executing program 1 (id=1523): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x4, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, 0x0, &(0x7f0000000200)=0x1e) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000002180)={0x0, 0x0, {0x0, 0x0, 0x0, 0x9}}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}}, 0x0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000080)) 5.111006301s ago: executing program 1 (id=1524): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) (fail_nth: 27) 4.793091456s ago: executing program 2 (id=1525): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x9200, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x6, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x6000, 0x0, 0x2, r1, 0xa}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x82) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000580)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/39, 0x27}, {&(0x7f0000006180)=""/142, 0x8e}, {&(0x7f00000015c0)=""/241, 0xf1}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/90, 0x5a}], 0x5, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfc, {}, [{0x54}]}, 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x103800, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x5452, &(0x7f0000000100)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000580)={0x0, 0x0, 0x2, r1, 0xe}) 4.671467105s ago: executing program 1 (id=1526): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file2\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000000)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x36]}}]}) (fail_nth: 24) 4.575809171s ago: executing program 2 (id=1527): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$xdp(0x2c, 0x3, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="38000000031401000000000000000008090002"], 0x38}, 0x1, 0x0, 0x0, 0x40090}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000140)=""/121, 0x79}], 0x2) ioctl$HIDIOCSFLAG(r4, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) 4.290278487s ago: executing program 1 (id=1528): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$xdp(0x2c, 0x3, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="38000000031401000000000000000008090002"], 0x38}, 0x1, 0x0, 0x0, 0x40090}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r5, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000140)=""/121, 0x79}], 0x2) ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) 3.935122011s ago: executing program 0 (id=1529): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r0, @ANYBLOB="00012bbd7000fddbdf253f0000000c0099000d0000002d0000003c005e800800020002000000080003000a000000080005000600000008000200820c0000080003000300000008000300fcffffff08000300000000804c005e800800090007000000080006000100000008000700e0030000080005005d00000008002e02000008000700d60300000800010004000000090002000500000024005e800800060007000000080009000200000008000600f7ffffff080009006c0800"/198], 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x54) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="44030900000000000000000000000000080000003f59db41a4641d2cbc9a97637985e364cc439177986a6628a6f4d8db507fd88072bd15a425a57b03e17a5a7b1201581ec0ddbc8529f113e6413b09a06b53adec5e03b15934edb134cd29f1ea321de05273458303670fe991b841beff6b056da2f8b46d2fd05b2a5ad4d68f5b8cbef783f5336a8eff93642338f4fff8d87dd1052814", @ANYRES32=r2, @ANYRES8=r1], 0x344}], 0x1}, 0x20004801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) close(r3) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000365000/0x1000)=nil, 0x1000}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x2, 0x1, 0x2}, 0x48) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r7 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r7, 0x7a98, 0x0, 0x0, 0x0, 0x0) r10 = userfaultfd(0x1) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x40c}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000467000/0x1000)=nil, &(0x7f00009a9000/0x9000)=nil, 0x1000}) quotactl_fd$Q_QUOTAOFF(r4, 0x0, r5, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) write$cgroup_pid(r3, 0x0, 0x2) shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/164) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.751129483s ago: executing program 0 (id=1530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000200)='syzkaller\x00'}, 0x90) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000080)) r6 = socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1fc}, 0x0, 0x0) sendmmsg(r6, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={0x0, @initdev, @empty}, &(0x7f00000009c0)=0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x38, r9, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', r11}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000a00)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000000ac0)={&(0x7f00000003c0), 0xc, &(0x7f0000000a80)={&(0x7f0000001400)={0x734, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0xfffffffffffffcbf, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x4c, 0x1, @lb_tx_hash_to_port_mapping}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8c3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r7}, {0x4}}, {{0x8, 0x1, r12}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}]}, 0x734}, 0x1, 0x0, 0x0, 0x4004846}, 0x20000800) ioctl$sock_SIOCDELDLCI(r4, 0x8981, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB="26ceca65403a84a78a534a5711e0f5cfdd7a138f362aae0eac9cd4f239c627ca55c16645ee49886539c4cfc2f3", @ANYBLOB="f3000000000000e14f003b00000008000300", @ANYRESHEX=r4, @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="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", @ANYRES64, @ANYRES8=0x0], 0x6f4}, 0x1, 0x0, 0x0, 0x1acce5bcb8091975}, 0x0) 1.966608752s ago: executing program 3 (id=1531): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000007000)={[{&(0x7f00000003c0)="9e1f2e319323846ab0ae4cf76ef953d42ca0ea0eaa31d883b98c9ecc27625c0f28b99a1ebb00d5426f53728ee516d07a47d948daa4dba7de5ca959f5a069156c127e58d1353900f3463f0ac6b4b7b26f6c82547475c2b3648ee0156bd59394bc982b1cf63b95fcab2e86ce1cbe5e16b992fc0f733577e9dd06d7e18e24f1d00f6952766945514f4cdf97049bdd27adc719f9c11b24f841734c91cb8f045cae6bedacb4d30b5af08c152fc915bb5ba11f90342fc7bf984cdc64200a05fb30f71889acf4659351e5af6949ce04b0ddf23f8dfc36b3a3b572926916375c0f314fd415bd24008aefa4790166e41e", 0xec, 0x1}, {&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000005c0)="b3449d804f8a822c48aba1d8e1835fd9528c5e2fd3588a69f5a86f1521835b7dcb215b9226c3e54b59bb4586c7bd19d0974110369357adaf048ff7cf10e2f4b7fc4c9b30719b96c3d4870066b04ca3e7f183d5fa7c2e6a6f4ec020a81e9690695b7b38306197b861f901e2", 0x6b, 0x3}, {&(0x7f0000000640)="759b11ad181a435e39cb0fc293c8c098a7f457a28d0766dbfc82c4ec17f3d0ae3afc42bd3bca36b9cb876e52bf909d0d2518bccf6c086b5593286d98450916a084fbe5b5d86f4aa7d4f337c4c0db730593a1594dd345e05be95c925bfd641ec1a0a715d382e55b927dc08f9469cfbeaf04e4d68f", 0x74, 0x1}]}, 0x4}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffc49) socket(0x0, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0), 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) listen(r4, 0xfffffffc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000002380)={{{@in=@loopback, @in=@private}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) sendmsg(r6, &(0x7f0000003600)={&(0x7f0000002480)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000002500)="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", 0xf80}, {&(0x7f0000003500)="f7ade4ba107c5f2c057ef5d39a011197d090011ce76321460fd1e84044f6fd88161c3224c4d14e0664041771d13f2669beb88326abfd3eb5b688a2de0301cc0c9faf9ccff5c05d5cdfa7a4d13af7d259b386c8bcf07d1b523f4765f518e9b03a564d66be8fcd7a80ac84801fa4c88de03436913c8d7f7f472697a86a", 0x7c}, {&(0x7f0000004500)="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", 0x1000}], 0x3, &(0x7f0000003580)=ANY=[@ANYBLOB="6c000000080100000600000006fea7389e2112a0386693752e8eaa7cd82b9086d3b6600f749185c4554d4dcf43269054738ddf7687e0a03c32c5f15db5439287bbb254967e6461274b80016827b982899406aecee8f368520cb857a9a1fb404e779205106c4c585a92b08f65"], 0x6c}, 0x15) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x41, &(0x7f0000003640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="c37fd4855165", @void, {@x25={0x805, {0x2, 0x10, 0x1f, "b47f51b64ae511da829522ae0201256e5f3af37c2dfe33aaf78b45e25a8210843978c0f92a8daf9de213f825b4a61384"}}}}, &(0x7f00000036c0)={0x1, 0x4, [0xef0, 0xcd9, 0x0, 0x1]}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r8, 0x701, 0x0, 0x0, {0x26}, [@handle=@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x1c, 0x0, &(0x7f00000061c0)) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a00, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x88}}, 0x0) 1.809641364s ago: executing program 0 (id=1532): mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') read$FUSE(r0, &(0x7f0000007700)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) pread64(r0, &(0x7f0000004c40)=""/103, 0x67, 0x0) socket(0x11, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0383e04, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES16=r2], &(0x7f0000000b40)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f00000006c0)="2340834b80040d8c560a117436c379000000000000002758000b4824ca945f6400940d6a0325018ebc00000000000000", 0x30}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f0000001040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x6f, 0x0, 0x0, 0x41000, 0x11}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup, 0x1d, 0x1, 0x9, &(0x7f00000003c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) 1.288179968s ago: executing program 3 (id=1533): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r2}, 0x10) recvmsg(r1, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000009700)=""/4096, 0x1000}], 0x1}, 0x3) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) r3 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x10000) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x5000, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="17090000000000000000010000000500070000000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_io_uring_setup(0x6291, &(0x7f0000000340)={0x0, 0x722f, 0x400, 0x2}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca6433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84222000000005335001db43a5c000000000000000024000000000000000000e75a812ded5297d531afbf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cbc30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a3830007462b5543f2c1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f401058690350000000000000000000000000025902e4a196fb169780000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad39e42a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b07121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d2814dc630ad1a9913934849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e80b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d2320101d575a83f33e75011ed8b48a2f52a03ec09c277b596d5eb491b6b380533be019894e7fc1a414ae38f1f448a7f6423bb12169d6f41665c5edfa3b47acd4d23b826d15361528d7c5a27e1120ca9537c8c8cccbb3ae86a91894372120488b82ecad3538899e53a36844aa515ebdbb1cd69a33b584f8e1c796827703f3894c93dd5a77607cb6c1191b89b303c1381f3e6016bf6c0e710750b43eb9a8fd0d7d71492ac43baec4994396f0fdfe7cecf248b88ba9406c7b8e5ec4882d52a0cd4b9b1c8327e811e6ba2572ff5a59dc8c5c90464aa3942b4a256e8a513155fae5b3ebcc47d2e1a8768c2da219f47595f83239688ef9f55937c9e3447fb532cabc44bd5b805356cf12b89514"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r6}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0x703, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x0, 0xffff7fff, 0x0, 0x0, 0x0, "518aba4d000000000000000000000000002000"}) 171.141711ms ago: executing program 3 (id=1534): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioperm(0x0, 0x7ff, 0x101) setresuid(0xee01, 0xee00, 0x0) setpriority(0x2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x48, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x169802, 0x0) r2 = dup(r1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xe, &(0x7f0000000440)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe35a}}], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0xfffffffffffffd3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x1, 0xc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) vmsplice(r0, &(0x7f0000000100), 0x0, 0x8) write$binfmt_script(r2, &(0x7f0000001100)={'#! ', './file0/file0', [{0x20, 'Q\x84\xf6ui\xfa\xf5\x16i\x859o\xe5\x13\xd5gV\x04@\x98\xb0\bQ+\xe2G\xa1\x1e\x01\xa9\xd6w\xdf\xa6\x9d\xcc<\x86\xfd\x18\x99\x19\xed\xc2\xdc\xf4\xbdV\xfeF)T\xb6\xc6\v`\xbf\xec2\xf5\x12R\xa1\x18\x9a<\x8fx\xf4\xcc\x18\xfc\xdb\x0e\xe7\xde^\x88vN\xe0\xe4P\x1dj\xd6&7\x7f\xe82\x92w\x12\t\xff\x19$\x93\xd5\xa4\xe2}\x9aA9p\xffk0\x8c\xc3\xae[n1\xb4\xd7\xe6\xa4\xc2\x86M\x83\x1d\xd7\x84\xa4\x85n(\xd3\x95\x82\xe0\xff\x89=\xe6\xceM\x12'}, {0x20, '/dev/nullb0\x00'}, {0x20, '+{[{#P\x80P\xc8Z\xc6\x19?\x8f\xbf\xbde\xfa\xd3en\xe8\xbeN]`\x1f\x895\x1e\x8d\x9dz\xdc\xf1\xaa\xbau\f\xbaSw4\xf2s(}\xebo\x9d\r \x13}\"wS\xe1\\\x19\xcb\x8b\xfa,V\xa0\xd8\xb2\xb9\x12\xc6w01\x90%\xb7?\xee'}, {0x20, '\t\x00\x00\x00\x00\x00\x00\x00\xb2%}\x88\xd0\xfd\xa3\xf7i\x00!\x00J\xd1\xa7\xb1\xb1\xae\x1b\xb4\xf2\x985\xe6M5Px\xbe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd9\x8c\xa8S\x1eO\x8f\xd9kY\x89\xf2\xccW\xbf\xa0\xd2UT\x10 n<\xf3\n\x9c\xa1P\xfa\x89-\f\x05\x97\x19BTT/C\xfc'}, {0x20, '~\x05\x82\xb9\x996.\xb9\x98Zla\x03\xcc\x894\xa6\xcb\b\xfd\xdc\xfa\xaa\x9d\xa1\xcc\xe0\xa8S\xf0\b!x\bj)\x87\xeb\xc8\xca\x1aH\x9e\x06\xbe\x1cJ\x91f\x0f\xa4H\xbe\x02\xdac\x85\xee\x9c#\x10\\\x01.\t:\xf22o\',H\x12$\xd3\x00Nj\xa4Q\xeeM\xd9)S\xb9\xa0\xed\xb9\xb6\x9d\xb8U?c\x11\x06\x00]\xd0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc7\v\xf0\x86\xf7\xa5\x9e\x96\xba\x90\x8e\xff\xc5\xdf_\xec\xef*-P\x102q&R\x925\xff\xff\xff\xff\xff\xff\xff@\x13\xde\xf7\xba\xa0\xab\xd7\xf3\xdb\xae\x991C\n\xfej0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d000000fdf0000000000000000000000000000000000000000000000000000000000000000000000000006465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYRES16=r5, @ANYRES64=r3], 0x68}, 0x1, 0x0, 0x0, 0x4008058}, 0x44) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x0, 0x0, 0x0) sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x0, 0x0) r8 = openat$dsp(0xffffff9c, &(0x7f0000000300), 0x8442, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000400)=0x71) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) kernel console output (not intermixed with test programs): 6reg1: entered promiscuous mode [ 663.524141][ T9427] pim6reg1: entered allmulticast mode [ 663.720566][ T9431] Bluetooth: hci3: unsupported parameter 28 [ 663.723086][ T9431] Bluetooth: hci3: unsupported parameter 28 [ 663.961408][ T9446] ecryptfs_parse_options: eCryptfs: unrecognized option [bcache_journal_write] [ 663.965273][ T9446] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 663.971507][ T9446] Error parsing options; rc = [-22] [ 668.359928][ T9514] lo speed is unknown, defaulting to 1000 [ 668.435793][ T9515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1054'. [ 669.439093][ T9558] syzkaller0: entered promiscuous mode [ 669.441712][ T9558] syzkaller0: entered allmulticast mode [ 669.557887][ T9570] input: syz1 as /devices/virtual/input/input23 [ 670.428593][ T9576] serio: Serial port pts0 [ 670.476032][ T4781] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 670.488113][ T4781] Bluetooth: hci0: Injecting HCI hardware error event [ 670.492567][ T4781] Bluetooth: hci0: hardware error 0x00 [ 672.552642][ T4781] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 673.254186][ T9595] input: syz0 as /devices/virtual/input/input24 [ 674.254978][ T40] kauditd_printk_skb: 54 callbacks suppressed [ 674.254995][ T40] audit: type=1326 audit(1725461085.348:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.1.1090" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf747e579 code=0x0 [ 674.813914][ T40] audit: type=1326 audit(1725461085.908:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.1091" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 674.826365][ T40] audit: type=1326 audit(1725461085.908:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.1091" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 674.844615][ T40] audit: type=1326 audit(1725461085.928:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.1091" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 674.863319][ T40] audit: type=1326 audit(1725461085.928:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.1091" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 674.885782][ T40] audit: type=1326 audit(1725461085.928:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.1091" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 674.906500][ T40] audit: type=1326 audit(1725461085.938:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.1091" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 674.925778][ T40] audit: type=1326 audit(1725461085.938:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.1091" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 674.949298][ T40] audit: type=1326 audit(1725461085.938:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.1091" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 674.974083][ T40] audit: type=1326 audit(1725461085.968:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.1091" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 676.926852][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 677.115852][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 677.219642][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.223833][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 677.227948][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 677.232783][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 677.238367][ T8] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 677.242100][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.252563][ T8] hub 5-1:1.0: bad descriptor, ignoring hub [ 677.256661][ T8] hub 5-1:1.0: probe with driver hub failed with error -5 [ 677.260026][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 677.261949][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 677.265570][ T8] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 677.269075][ T8] cdc_wdm 5-1:1.0: Unknown control protocol [ 678.306288][ T9636] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1100'. [ 678.835559][ T9633] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 678.841915][ T9633] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 679.499611][ T5430] usb 5-1: USB disconnect, device number 7 [ 682.336249][ T9667] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1109'. [ 682.596009][ T834] IPVS: starting estimator thread 0... [ 682.660630][ T9673] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 682.706088][ T9674] IPVS: using max 20 ests per chain, 48000 per kthread [ 684.615512][ T9694] FAULT_INJECTION: forcing a failure. [ 684.615512][ T9694] name failslab, interval 1, probability 0, space 0, times 0 [ 684.622141][ T9694] CPU: 1 UID: 0 PID: 9694 Comm: syz.3.1115 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 684.626180][ T9694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 684.630252][ T9694] Call Trace: [ 684.631577][ T9694] [ 684.632757][ T9694] dump_stack_lvl+0x16c/0x1f0 [ 684.634595][ T9694] should_fail_ex+0x497/0x5b0 [ 684.636373][ T9694] ? fs_reclaim_acquire+0xae/0x160 [ 684.638369][ T9694] should_failslab+0xc2/0x120 [ 684.640222][ T9694] __kmalloc_cache_noprof+0x6b/0x310 [ 684.642263][ T9694] ? ovl_encode_real_fh+0xd3/0x430 [ 684.644266][ T9694] ovl_encode_real_fh+0xd3/0x430 [ 684.646216][ T9694] ? __pfx_ovl_encode_real_fh+0x10/0x10 [ 684.648342][ T9694] ovl_verify_origin_xattr+0x42/0x1a0 [ 684.650451][ T9694] ovl_fill_super+0x4959/0x6970 [ 684.652301][ T9694] ? __pfx_ovl_fill_super+0x10/0x10 [ 684.654282][ T9694] ? lockdep_init_map_type+0x16d/0x7d0 [ 684.656362][ T9694] ? lockdep_init_map_type+0x16d/0x7d0 [ 684.658467][ T9694] ? __init_swait_queue_head+0xca/0x150 [ 684.660511][ T9694] ? sget_fc+0x488/0xb90 [ 684.661757][ T9694] ? __pfx_ovl_fill_super+0x10/0x10 [ 684.663551][ T9694] ? get_tree_nodev+0xda/0x190 [ 684.665481][ T9694] get_tree_nodev+0xda/0x190 [ 684.667288][ T9694] vfs_get_tree+0x8f/0x380 [ 684.669072][ T9694] path_mount+0x6e1/0x1f10 [ 684.670731][ T9694] ? __pfx_path_mount+0x10/0x10 [ 684.672539][ T9694] ? putname+0x12e/0x170 [ 684.674213][ T9694] ? putname+0x12e/0x170 [ 684.675848][ T9694] __ia32_sys_mount+0x292/0x310 [ 684.677740][ T9694] ? __pfx___ia32_sys_mount+0x10/0x10 [ 684.679863][ T9694] __do_fast_syscall_32+0x73/0x120 [ 684.681644][ T9694] do_fast_syscall_32+0x32/0x80 [ 684.683316][ T9694] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 684.685496][ T9694] RIP: 0023:0xf7f33579 [ 684.686890][ T9694] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 684.693610][ T9694] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 684.696902][ T9694] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200000c0 [ 684.700164][ T9694] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 00000000200001c0 [ 684.703211][ T9694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 684.706342][ T9694] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 684.709120][ T9694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 684.711849][ T9694] [ 684.726237][ T9694] overlayfs: failed to verify upper (289/file1, ino=1569, err=-12) [ 684.729308][ T9694] overlayfs: failed to verify index dir 'upper' xattr [ 684.733015][ T9694] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 685.315864][ T5430] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 685.505891][ T5430] usb 6-1: Using ep0 maxpacket: 8 [ 685.512547][ T5430] usb 6-1: config 0 has no interfaces? [ 685.519926][ T5430] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 685.524008][ T5430] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.527883][ T5430] usb 6-1: Product: syz [ 685.529618][ T5430] usb 6-1: Manufacturer: syz [ 685.531652][ T5430] usb 6-1: SerialNumber: syz [ 685.537072][ T5430] usb 6-1: config 0 descriptor?? [ 686.056850][ T9706] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1120'. [ 686.220004][ T9708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1121'. [ 686.238517][ T5042] usb 6-1: USB disconnect, device number 11 [ 686.533774][ T6129] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 686.737807][ T6129] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.745824][ T6129] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 686.761962][ T6129] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 686.800370][ T6129] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.815482][ T6129] usb 8-1: config 0 descriptor?? [ 687.136694][ T9715] FAULT_INJECTION: forcing a failure. [ 687.136694][ T9715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.145877][ T9715] CPU: 0 UID: 0 PID: 9715 Comm: syz.1.1122 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 687.151147][ T9715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 687.156009][ T9715] Call Trace: [ 687.157509][ T9715] [ 687.158890][ T9715] dump_stack_lvl+0x16c/0x1f0 [ 687.161431][ T9715] should_fail_ex+0x497/0x5b0 [ 687.163789][ T9715] save_fsave_header+0x17c/0x2e0 [ 687.166001][ T9715] ? __pfx_save_fsave_header+0x10/0x10 [ 687.168544][ T9715] ? copy_fpstate_to_sigframe+0x2b2/0xaa0 [ 687.171210][ T9715] ? __local_bh_enable_ip+0xa4/0x120 [ 687.173483][ T9715] copy_fpstate_to_sigframe+0x734/0xaa0 [ 687.175944][ T9715] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 687.179085][ T9715] ? __pfx_lock_acquire+0x10/0x10 [ 687.181354][ T9715] ? do_raw_spin_unlock+0x172/0x230 [ 687.183589][ T9715] ? do_raw_spin_lock+0x12d/0x2c0 [ 687.185888][ T9715] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 687.188382][ T9715] ? find_held_lock+0x2d/0x110 [ 687.190676][ T9715] get_sigframe+0x455/0x930 [ 687.192744][ T9715] ? __pfx_get_sigframe+0x10/0x10 [ 687.194982][ T9715] ? _raw_spin_unlock_irq+0x23/0x50 [ 687.197224][ T9715] ? siginfo_layout+0x177/0x290 [ 687.199935][ T9715] ia32_setup_rt_frame+0xe4/0xb20 [ 687.202531][ T9715] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 687.205106][ T9715] arch_do_signal_or_restart+0x47b/0x7e0 [ 687.208143][ T9715] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 687.211488][ T9715] ? __pfx_do_readv+0x10/0x10 [ 687.214081][ T9715] syscall_exit_to_user_mode+0x150/0x2a0 [ 687.216996][ T9715] do_int80_emulation+0x111/0x200 [ 687.219439][ T9715] asm_int80_emulation+0x1a/0x20 [ 687.222101][ T9715] RIP: 0023:0xf747e577 [ 687.223920][ T9715] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 687.232521][ T9715] RSP: 002b:00000000f575556c EFLAGS: 00000296 ORIG_RAX: 0000000000000091 [ 687.235747][ T9715] RAX: 0000000000000091 RBX: 0000000000000003 RCX: 00000000200018c0 [ 687.239361][ T9715] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 687.243183][ T9715] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 687.246616][ T9715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.250099][ T9715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 687.253566][ T9715] [ 687.278145][ T6129] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 687.295492][ T6129] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 688.795399][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'. [ 690.365886][ T979] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 690.545914][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 690.568709][ T979] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.578345][ T979] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 690.607316][ T979] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 690.612290][ T979] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 690.619703][ T979] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 690.646215][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.695640][ T979] hub 5-1:1.0: bad descriptor, ignoring hub [ 690.698777][ T979] hub 5-1:1.0: probe with driver hub failed with error -5 [ 690.702641][ T979] cdc_wdm 5-1:1.0: skipping garbage [ 690.705476][ T979] cdc_wdm 5-1:1.0: skipping garbage [ 690.711458][ T979] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 690.714909][ T979] cdc_wdm 5-1:1.0: Unknown control protocol [ 691.051735][ T9747] netlink: 'syz.0.1130': attribute type 21 has an invalid length. [ 691.063525][ T9747] netlink: 'syz.0.1130': attribute type 1 has an invalid length. [ 691.069725][ T9747] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1130'. [ 696.452877][ T9754] sp0: Synchronizing with TNC [ 696.469986][ T9754] sp0: Found TNC [ 696.513104][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 696.935794][ T9579] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 696.943463][ T9579] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 696.949006][ T9579] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 696.953309][ T9579] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 696.960502][ T9579] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 696.964287][ T9579] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 696.990574][ T4781] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 697.006472][ T4781] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 697.009655][ T4781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 697.016829][ T4781] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 697.022273][ T4781] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 697.028307][ T4781] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 697.055029][ T9753] [U] è` [ 697.165513][ T9763] lo speed is unknown, defaulting to 1000 [ 697.468153][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 697.468167][ T40] audit: type=1326 audit(1725461108.568:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.2.1134" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf747e579 code=0x0 [ 697.647254][ T9763] chnl_net:caif_netlink_parms(): no params data found [ 698.033632][ T9763] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.051896][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.072517][ T9763] bridge_slave_0: entered allmulticast mode [ 698.086946][ T9763] bridge_slave_0: entered promiscuous mode [ 698.095524][ T9763] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.114701][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.120138][ T9763] bridge_slave_1: entered allmulticast mode [ 698.128756][ T9763] bridge_slave_1: entered promiscuous mode [ 698.381970][ T9763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.473785][ T9763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.601997][ T9720] plantronics 0003:047F:FFFF.000C: timeout initializing reports [ 698.855620][ T9780] bond0: entered promiscuous mode [ 698.858657][ T9780] bond_slave_0: entered promiscuous mode [ 698.862804][ T9780] bond_slave_1: entered promiscuous mode [ 698.987437][ T9763] team0: Port device team_slave_0 added [ 699.003362][ T9763] team0: Port device team_slave_1 added [ 699.066189][ T6129] usb 5-1: USB disconnect, device number 8 [ 699.116542][ T4781] Bluetooth: hci6: command tx timeout [ 699.599141][ T6129] usb 8-1: USB disconnect, device number 18 [ 699.889514][ T1161] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.946261][ T9763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.950022][ T9763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.971658][ T9763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.042937][ T9763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.050491][ T9763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.088764][ T9763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.274012][ T1161] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.405971][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1140'. [ 700.551544][ T9579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 700.579337][ T9579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 700.585318][ T9579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 700.593460][ T9579] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 700.599053][ T9579] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 700.603109][ T9579] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 700.744919][ T1161] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.832472][ T9763] hsr_slave_0: entered promiscuous mode [ 700.838386][ T9763] hsr_slave_1: entered promiscuous mode [ 700.860479][ T9763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.863445][ T9763] Cannot create hsr debugfs directory [ 701.050705][ T40] audit: type=1326 audit(1725461112.148:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.2.1142" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf747e579 code=0x0 [ 701.188616][ T9579] Bluetooth: hci6: command tx timeout [ 701.240978][ T1161] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.510033][ T9798] lo speed is unknown, defaulting to 1000 [ 702.253850][ T9812] overlayfs: failed to resolve './file1': -2 [ 702.394844][ T1379] ieee802154 phy0 wpan0: encryption failed: -22 [ 702.397835][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 [ 702.559637][ T9814] netlink: 'syz.2.1144': attribute type 4 has an invalid length. [ 702.565175][ T9814] netlink: 126052 bytes leftover after parsing attributes in process `syz.2.1144'. [ 702.723743][ T9579] Bluetooth: hci5: command tx timeout [ 702.975005][ T1161] team0: Port device bond0 removed [ 702.979529][ T1161] bond0 (unregistering): Released all slaves [ 703.278149][ T9579] Bluetooth: hci6: command tx timeout [ 703.305387][ T1161] tipc: Left network mode [ 703.894898][ T9798] chnl_net:caif_netlink_parms(): no params data found [ 704.227423][ T9798] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.230642][ T9798] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.235726][ T9798] bridge_slave_0: entered allmulticast mode [ 704.239565][ T9798] bridge_slave_0: entered promiscuous mode [ 704.251429][ T1161] hsr_slave_0: left promiscuous mode [ 704.264364][ T1161] hsr_slave_1: left promiscuous mode [ 704.413483][ T1161] veth1_macvtap: left promiscuous mode [ 704.423045][ T1161] veth0_macvtap: left promiscuous mode [ 704.427205][ T1161] veth1_vlan: left promiscuous mode [ 704.793425][ T9579] Bluetooth: hci5: command tx timeout [ 705.356280][ T9579] Bluetooth: hci6: command tx timeout [ 706.865940][ T9579] Bluetooth: hci5: command tx timeout [ 708.948962][ T9579] Bluetooth: hci5: command tx timeout [ 712.617907][ T4781] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 712.669367][ T4781] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 712.701782][ T4781] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 712.778953][ T4781] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 712.785430][ T4781] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 712.793784][ T4781] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 713.697065][ T4781] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 713.703639][ T4781] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 713.708033][ T4781] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 713.713930][ T4781] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 713.718265][ T4781] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 713.721947][ T4781] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 714.624418][ T9798] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.631982][ T9798] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.636144][ T9798] bridge_slave_1: entered allmulticast mode [ 714.639821][ T9798] bridge_slave_1: entered promiscuous mode [ 714.867839][ T4781] Bluetooth: hci7: command tx timeout [ 715.012737][ T9798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.179902][ T9798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.220839][ T9834] lo speed is unknown, defaulting to 1000 [ 715.458237][ T9763] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 715.481229][ T9839] lo speed is unknown, defaulting to 1000 [ 715.640129][ T9763] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 715.764541][ T9798] team0: Port device team_slave_0 added [ 715.779969][ T9798] team0: Port device team_slave_1 added [ 715.825972][ T4781] Bluetooth: hci8: command tx timeout [ 715.896001][ T9763] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 715.933235][ T9763] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 716.207265][ T9798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.209872][ T9798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.229323][ T9798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.334054][ T9808] syz_tun (unregistering): left allmulticast mode [ 716.344955][ T9808] syz_tun (unregistering): left promiscuous mode [ 716.365396][ T9808] bridge0: port 3(syz_tun) entered disabled state [ 716.538594][ T9798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.545856][ T9798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.576860][ T9798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.892580][ T9798] hsr_slave_0: entered promiscuous mode [ 716.898453][ T9798] hsr_slave_1: entered promiscuous mode [ 716.946782][ T4781] Bluetooth: hci7: command tx timeout [ 717.503173][ T1161] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.739905][ T1161] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.907257][ T4781] Bluetooth: hci8: command tx timeout [ 718.145281][ T1161] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.395148][ T1161] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.476311][ T9763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.632173][ T9839] chnl_net:caif_netlink_parms(): no params data found [ 718.744945][ T9834] chnl_net:caif_netlink_parms(): no params data found [ 718.859830][ T9798] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.045934][ T4781] Bluetooth: hci7: command tx timeout [ 719.222826][ T9798] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.417549][ T9763] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.516892][ T1161] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.598767][ T9798] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.814272][ T1161] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.961545][ T9798] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.997163][ T4781] Bluetooth: hci8: command tx timeout [ 720.049840][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.053215][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.076220][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.081219][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.158909][ T9834] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.163092][ T9834] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.208996][ T9834] bridge_slave_0: entered allmulticast mode [ 720.233168][ T9834] bridge_slave_0: entered promiscuous mode [ 720.424960][ T1161] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.484218][ T9834] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.496179][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.499415][ T9834] bridge_slave_1: entered allmulticast mode [ 720.531471][ T9834] bridge_slave_1: entered promiscuous mode [ 720.545600][ T9839] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.567682][ T9839] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.571246][ T9839] bridge_slave_0: entered allmulticast mode [ 720.579915][ T9839] bridge_slave_0: entered promiscuous mode [ 720.706777][ T1161] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.965925][ T9839] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.969103][ T9839] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.972442][ T9839] bridge_slave_1: entered allmulticast mode [ 721.001626][ T9839] bridge_slave_1: entered promiscuous mode [ 721.107719][ T9839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.116467][ T9839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.116521][ T4781] Bluetooth: hci7: command tx timeout [ 721.212078][ T9834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.234680][ T9834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.532597][ T9834] team0: Port device team_slave_0 added [ 721.618385][ T9839] team0: Port device team_slave_0 added [ 721.636498][ T9839] team0: Port device team_slave_1 added [ 721.997661][ T9834] team0: Port device team_slave_1 added [ 722.066045][ T4781] Bluetooth: hci8: command tx timeout [ 722.129004][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.132485][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.147495][ T9839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.223850][ T9834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.232469][ T9834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.246280][ T9834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.263086][ T9834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.266793][ T9834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.277248][ T9834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.282715][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.285647][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.299638][ T9839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.363022][ T9798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 722.544924][ T9798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 722.973163][ T9798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 722.983275][ T1161] bridge_slave_1: left allmulticast mode [ 722.986165][ T1161] bridge_slave_1: left promiscuous mode [ 722.988672][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.995633][ T1161] bridge_slave_0: left allmulticast mode [ 723.005798][ T1161] bridge_slave_0: left promiscuous mode [ 723.008153][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.284132][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.337883][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.346864][ T1161] bond0 (unregistering): Released all slaves [ 724.855335][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.883733][ T1161] bond_slave_0: left promiscuous mode [ 724.924452][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.947971][ T1161] bond_slave_1: left promiscuous mode [ 724.952282][ T1161] bond0 (unregistering): Released all slaves [ 725.023074][ T9839] hsr_slave_0: entered promiscuous mode [ 725.048271][ T9839] hsr_slave_1: entered promiscuous mode [ 725.053261][ T9839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.065774][ T9839] Cannot create hsr debugfs directory [ 725.180777][ T9834] hsr_slave_0: entered promiscuous mode [ 725.198172][ T9834] hsr_slave_1: entered promiscuous mode [ 725.224024][ T9834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.245859][ T9834] Cannot create hsr debugfs directory [ 725.276169][ T9798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 725.660486][ T9763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.509358][ T9798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.797723][ T9798] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.801265][ T9763] veth0_vlan: entered promiscuous mode [ 727.019640][ T1161] hsr_slave_0: left promiscuous mode [ 727.023941][ T1161] hsr_slave_1: left promiscuous mode [ 727.046913][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.049627][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.112539][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.129999][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.153844][ T1161] hsr_slave_0: left promiscuous mode [ 727.172708][ T1161] hsr_slave_1: left promiscuous mode [ 727.196080][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.205845][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.216752][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.219109][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.422497][ T1161] veth1_macvtap: left promiscuous mode [ 727.425066][ T1161] veth0_macvtap: left promiscuous mode [ 727.429006][ T1161] veth1_vlan: left promiscuous mode [ 727.432937][ T1161] veth0_vlan: left promiscuous mode [ 727.471469][ T1161] veth1_macvtap: left promiscuous mode [ 727.473674][ T1161] veth0_macvtap: left promiscuous mode [ 727.478742][ T1161] veth1_vlan: left promiscuous mode [ 727.481518][ T1161] veth0_vlan: left promiscuous mode [ 730.237058][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 730.602846][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 736.604626][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 736.923070][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 738.851349][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.854599][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.861480][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.864733][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.894431][ T9737] bridge0: port 3(syz_tun) entered disabled state [ 738.938031][ T9737] syz_tun (unregistering): left allmulticast mode [ 738.941009][ T9737] syz_tun (unregistering): left promiscuous mode [ 738.943937][ T9737] bridge0: port 3(syz_tun) entered disabled state [ 738.993914][ T979] lo speed is unknown, defaulting to 1000 [ 739.000752][ T9763] veth1_vlan: entered promiscuous mode [ 739.170602][ T9763] veth0_macvtap: entered promiscuous mode [ 739.280613][ T9763] veth1_macvtap: entered promiscuous mode [ 739.395596][ T9763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.401567][ T9763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.412398][ T9763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.482668][ T9763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.495671][ T9763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.537090][ T9763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.564591][ T9763] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.605096][ T9763] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.625888][ T9763] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.629729][ T9763] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.708603][ T9834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 739.740666][ T9834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 739.811351][ T9834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 739.883971][ T9834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 740.032395][ T9798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.193006][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.208042][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.409088][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.413438][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.452301][ T1161] IPVS: stop unused estimator thread 0... [ 740.473800][ T9798] veth0_vlan: entered promiscuous mode [ 740.520419][ T9834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.606532][ T9798] veth1_vlan: entered promiscuous mode [ 740.614767][ T9834] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.694024][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.697942][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.726503][ T1161] bridge_slave_1: left allmulticast mode [ 740.730903][ T1161] bridge_slave_1: left promiscuous mode [ 740.738558][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.752372][ T1161] bridge_slave_0: left allmulticast mode [ 740.754807][ T1161] bridge_slave_0: left promiscuous mode [ 740.768964][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.300046][ T1161] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 741.579188][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.616121][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.631968][ T1161] bond0 (unregistering): (slave bond1): Releasing backup interface [ 741.642620][ T1161] bond0 (unregistering): Released all slaves [ 741.858774][ T1161] bond1 (unregistering): Released all slaves [ 742.034147][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.036815][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.230352][ T9798] veth0_macvtap: entered promiscuous mode [ 742.426218][ T9839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 742.443172][ T9839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 742.460964][ T9839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 742.510082][ T9798] veth1_macvtap: entered promiscuous mode [ 742.593262][ T9834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 742.612172][ T9839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 742.777336][ T9927] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1150'. [ 742.799560][ T9798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.803871][ T9798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.812712][ T9798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.821566][ T9798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.838285][ T9798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.882915][ T1161] hsr_slave_0: left promiscuous mode [ 742.903646][ T1161] hsr_slave_1: left promiscuous mode [ 743.032704][ T1161] team0: left allmulticast mode [ 743.046941][ T1161] team_slave_0: left allmulticast mode [ 743.049647][ T1161] team_slave_1: left allmulticast mode [ 743.052731][ T1161] team0: left promiscuous mode [ 743.062094][ T1161] team_slave_0: left promiscuous mode [ 743.064587][ T1161] team_slave_1: left promiscuous mode [ 743.074281][ T1161] veth1_macvtap: left promiscuous mode [ 743.086956][ T1161] veth0_macvtap: left promiscuous mode [ 743.097886][ T40] audit: type=1326 audit(1725461154.198:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9933 comm="syz.3.1151" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f60579 code=0x0 [ 743.126413][ T1161] veth1_vlan: left promiscuous mode [ 743.128666][ T1161] veth0_vlan: left promiscuous mode [ 744.144707][ T9946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1152'. [ 745.165885][ T25] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 745.405920][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.412187][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 745.425829][ T25] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 745.429722][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.435080][ T25] usb 8-1: config 0 descriptor?? [ 745.732874][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 745.953125][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 746.019721][ T25] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 746.051729][ T25] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 748.018608][ T5430] usb 8-1: USB disconnect, device number 19 [ 748.278276][ T9798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.282326][ T9798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.309416][ T9798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.315217][ T9798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.324198][ T9798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.468424][ T9798] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.471833][ T9798] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.475143][ T9798] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.555778][ T9798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.006615][ T9839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.160056][ T9834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.214009][ T9839] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.253118][ T6419] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.257884][ T6419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.274221][ T6419] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.278046][ T6419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.288026][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.291833][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.408157][ T6419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.411534][ T6419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.439225][ T9834] veth0_vlan: entered promiscuous mode [ 749.504551][ T9834] veth1_vlan: entered promiscuous mode [ 749.680054][ T9834] veth0_macvtap: entered promiscuous mode [ 749.857098][ T9834] veth1_macvtap: entered promiscuous mode [ 750.041454][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.049931][ T9973] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1155'. [ 750.098182][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.101874][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.105550][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.126265][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.143616][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.189204][ T9834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.196405][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.226415][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.231998][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.237862][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.243086][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.249331][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.255481][ T9834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.291030][ T9834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.355757][ T9834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.360022][ T9834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.364026][ T9834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.496447][ T9983] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1156'. [ 750.733188][ T9839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.848194][ T1202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.851515][ T1202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.970638][ T1202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.983018][ T9839] veth0_vlan: entered promiscuous mode [ 750.985891][ T1202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.096929][ T9839] veth1_vlan: entered promiscuous mode [ 751.185040][ T9839] veth0_macvtap: entered promiscuous mode [ 751.218677][ T9839] veth1_macvtap: entered promiscuous mode [ 751.239763][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.248788][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.265920][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.270602][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.293847][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.298995][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.308284][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.314371][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.323106][ T9839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.331053][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.339447][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.344808][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.351737][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.357377][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.362725][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.369878][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.385945][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.392882][ T9839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.483516][ T9839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.497563][ T9839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.501233][ T9839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.505240][ T9839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.607849][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'. [ 751.702734][ T6419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.715929][ T6419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.831246][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.847986][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.922536][T10016] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1164'. [ 752.224787][ T40] audit: type=1326 audit(1725461163.318:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.1.1166" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f12579 code=0x0 [ 752.335788][ T5442] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 752.568975][ T5442] usb 8-1: Using ep0 maxpacket: 8 [ 752.580305][ T5442] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.595753][ T5442] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.624746][ T5442] usb 8-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 752.635780][ T5442] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.652259][ T5442] usb 8-1: config 0 descriptor?? [ 752.936732][T10018] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 753.029425][T10031] netlink: 'syz.0.1168': attribute type 3 has an invalid length. [ 753.035663][T10034] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1169'. [ 753.051487][ C3] vkms_vblank_simulate: vblank timer overrun [ 753.217285][ T40] audit: type=1326 audit(1725461164.318:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.2.1170" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe8579 code=0x0 [ 753.651468][ C3] vkms_vblank_simulate: vblank timer overrun [ 754.329705][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 755.073858][ T5442] usbhid 8-1:0.0: can't add hid device: -71 [ 755.084383][ T5442] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 755.097845][ T5442] usb 8-1: USB disconnect, device number 20 [ 755.295876][T10062] FAULT_INJECTION: forcing a failure. [ 755.295876][T10062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.301686][T10062] CPU: 3 UID: 0 PID: 10062 Comm: syz.1.1176 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 755.305963][T10062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 755.310161][T10062] Call Trace: [ 755.311582][T10062] [ 755.312707][T10062] dump_stack_lvl+0x16c/0x1f0 [ 755.314576][T10062] should_fail_ex+0x497/0x5b0 [ 755.316596][T10062] _copy_from_user+0x30/0xf0 [ 755.318602][T10062] get_compat_msghdr+0xa8/0x170 [ 755.320614][T10062] ? __pfx_get_compat_msghdr+0x10/0x10 [ 755.322663][T10062] ? kfree+0x245/0x3b0 [ 755.324371][T10062] ? find_held_lock+0x2d/0x110 [ 755.326443][T10062] ___sys_recvmsg+0x193/0x1a0 [ 755.328548][T10062] ? __pfx____sys_recvmsg+0x10/0x10 [ 755.330838][T10062] ? __pfx___might_resched+0x10/0x10 [ 755.333160][T10062] ? __fget_light+0x173/0x210 [ 755.335238][T10062] do_recvmmsg+0x51a/0x750 [ 755.337231][T10062] ? __pfx_do_recvmmsg+0x10/0x10 [ 755.339379][T10062] ? __pfx_lock_release+0x10/0x10 [ 755.341581][T10062] ? vfs_write+0x14d/0x1140 [ 755.343641][T10062] __sys_recvmmsg+0x21e/0x280 [ 755.345713][T10062] ? __pfx___sys_recvmmsg+0x10/0x10 [ 755.347956][T10062] ? __pfx_ksys_write+0x10/0x10 [ 755.350080][T10062] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 755.352800][T10062] ? lockdep_hardirqs_on+0x7c/0x110 [ 755.355054][T10062] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 755.357659][T10062] __do_fast_syscall_32+0x73/0x120 [ 755.359694][T10062] do_fast_syscall_32+0x32/0x80 [ 755.361815][T10062] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 755.364509][T10062] RIP: 0023:0xf7f12579 [ 755.366271][T10062] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 755.373665][T10062] RSP: 002b:00000000f568556c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 755.376658][T10062] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000200066c0 [ 755.379784][T10062] RDX: 0000000000000a0d RSI: 0000000000000000 RDI: 0000000000000000 [ 755.383011][T10062] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 755.386327][T10062] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 755.389464][T10062] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 755.392713][T10062] [ 755.394090][ C3] vkms_vblank_simulate: vblank timer overrun [ 757.427458][T10066] block device autoloading is deprecated and will be removed. [ 758.246016][ T6378] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 758.425923][ T6378] usb 8-1: Using ep0 maxpacket: 8 [ 758.436696][ T6378] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 758.443371][ T6378] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 758.448003][ T6378] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 758.452203][ T6378] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 758.457558][ T6378] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 758.460979][ T6378] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.798856][T10068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.823939][T10068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.312282][T10073] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1181'. [ 759.336474][ T6378] usb 8-1: GET_CAPABILITIES returned 0 [ 759.338753][ T6378] usbtmc 8-1:16.0: can't read capabilities [ 759.992508][ T25] usb 8-1: USB disconnect, device number 21 [ 760.753380][T10098] FAULT_INJECTION: forcing a failure. [ 760.753380][T10098] name failslab, interval 1, probability 0, space 0, times 0 [ 760.760068][T10098] CPU: 0 UID: 0 PID: 10098 Comm: syz.0.1189 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 760.766240][T10098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 760.771526][T10098] Call Trace: [ 760.772989][T10098] [ 760.774761][T10098] dump_stack_lvl+0x116/0x1f0 [ 760.777455][T10098] should_fail_ex+0x497/0x5b0 [ 760.780636][T10098] should_failslab+0xc2/0x120 [ 760.783684][T10098] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 760.788447][T10098] ? __sigqueue_alloc+0x244/0x6b0 [ 760.792393][T10098] __sigqueue_alloc+0x244/0x6b0 [ 760.794980][T10098] __send_signal_locked+0x74c/0x1090 [ 760.798434][T10098] force_sig_info_to_task+0x31d/0x660 [ 760.800713][T10098] force_sig_fault+0xad/0xf0 [ 760.802633][T10098] ? __pfx_force_sig_fault+0x10/0x10 [ 760.804913][T10098] ? __pfx_is_prefetch.constprop.0+0x10/0x10 [ 760.807533][T10098] ? fixup_vdso_exception+0x34b/0x400 [ 760.809896][T10098] __bad_area_nosemaphore+0x30d/0x6a0 [ 760.812188][T10098] ? __bad_area+0x4d/0x230 [ 760.814037][T10098] bad_area_access_error+0xab/0x210 [ 760.816117][T10098] do_user_addr_fault+0xa4b/0x13f0 [ 760.818467][T10098] ? trace_irq_disable.constprop.0+0xe4/0x130 [ 760.821020][T10098] exc_page_fault+0x5c/0xc0 [ 760.822913][T10098] asm_exc_page_fault+0x26/0x30 [ 760.824935][T10098] RIP: 0023:0x20000000 [ 760.826603][T10098] Code: Unable to access opcode bytes at 0x1fffffd6. [ 760.830437][T10098] RSP: 002b:00000000f570476c EFLAGS: 00010296 [ 760.833553][T10098] RAX: 000000000000000d RBX: 0000000000000003 RCX: 0000000000000000 [ 760.837090][T10098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 760.840424][T10098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 760.843763][T10098] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 760.847063][T10098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 760.850353][T10098] [ 760.908554][T10100] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 760.917129][T10102] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1192'. [ 761.351947][T10116] input: syz0 as /devices/virtual/input/input30 [ 761.566310][T10122] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.570382][T10122] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.585996][T10122] bridge0: entered allmulticast mode [ 761.731508][T10122] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.734346][T10122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.737769][T10122] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.740796][T10122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.756265][T10122] bridge0: entered promiscuous mode [ 761.780123][T10126] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1200'. [ 761.806385][T10126] gretap0: entered promiscuous mode [ 761.912035][T10126] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1200'. [ 761.915479][T10126] 0ªX¹¦D: renamed from gretap0 [ 761.923122][T10129] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1201'. [ 761.929872][T10126] 0ªX¹¦D: left promiscuous mode [ 761.932013][T10126] 0ªX¹¦D: entered allmulticast mode [ 761.959094][T10126] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 762.887727][T10160] FAULT_INJECTION: forcing a failure. [ 762.887727][T10160] name failslab, interval 1, probability 0, space 0, times 0 [ 762.896634][T10160] CPU: 2 UID: 0 PID: 10160 Comm: syz.0.1207 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 762.901328][T10160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 762.906026][T10160] Call Trace: [ 762.907507][T10160] [ 762.908789][T10160] dump_stack_lvl+0x16c/0x1f0 [ 762.911194][T10160] should_fail_ex+0x497/0x5b0 [ 762.913485][T10160] ? fs_reclaim_acquire+0xae/0x160 [ 762.915965][T10160] should_failslab+0xc2/0x120 [ 762.917889][T10160] __kmalloc_cache_noprof+0x6b/0x310 [ 762.919987][T10160] ? ovl_init_fs_context+0x96/0x5d0 [ 762.922061][T10160] ? kasan_save_track+0x14/0x30 [ 762.924281][T10160] ovl_init_fs_context+0x96/0x5d0 [ 762.926620][T10160] ? __pfx_ovl_init_fs_context+0x10/0x10 [ 762.929331][T10160] alloc_fs_context+0x54a/0x9c0 [ 762.931695][T10160] path_mount+0xbfb/0x1f10 [ 762.933711][T10160] ? __pfx_path_mount+0x10/0x10 [ 762.936196][T10160] ? putname+0x12e/0x170 [ 762.938413][T10160] ? putname+0x12e/0x170 [ 762.940732][T10160] __ia32_sys_mount+0x292/0x310 [ 762.943299][T10160] ? __pfx___ia32_sys_mount+0x10/0x10 [ 762.945786][T10160] __do_fast_syscall_32+0x73/0x120 [ 762.948154][T10160] do_fast_syscall_32+0x32/0x80 [ 762.950408][T10160] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 762.953330][T10160] RIP: 0023:0xf742e579 [ 762.955209][T10160] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 762.963844][T10160] RSP: 002b:00000000f570556c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 762.967685][T10160] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200000c0 [ 762.971141][T10160] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000020000900 [ 762.974690][T10160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 762.978334][T10160] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 762.981954][T10160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 762.985543][T10160] [ 763.839006][ T1379] ieee802154 phy0 wpan0: encryption failed: -22 [ 763.841883][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 [ 764.180940][T10170] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1212'. [ 765.794077][T10183] netlink: 'syz.1.1217': attribute type 3 has an invalid length. [ 765.803014][T10183] netlink: 'syz.1.1217': attribute type 3 has an invalid length. [ 765.816526][T10183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1217'. [ 766.569297][T10189] hub 1-0:1.0: USB hub found [ 766.571860][T10189] hub 1-0:1.0: 2 ports detected [ 767.291101][T10199] mkiss: ax0: crc mode is auto. [ 767.443797][T10203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1224'. [ 768.575786][ T834] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 768.859958][ T834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.865665][ T834] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 768.873319][ T834] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 768.886844][ T834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.895579][ C2] vkms_vblank_simulate: vblank timer overrun [ 768.896910][ T834] usb 6-1: config 0 descriptor?? [ 769.234235][ T40] audit: type=1326 audit(1725461180.328:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10215 comm="syz.2.1227" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe8579 code=0x0 [ 769.359292][ C2] vkms_vblank_simulate: vblank timer overrun [ 769.411342][ T834] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 769.436799][ T834] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 769.634305][T10220] IPv6: NLM_F_CREATE should be specified when creating new route [ 770.468691][T10229] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1233'. [ 770.563297][ C2] vkms_vblank_simulate: vblank timer overrun [ 771.354425][T10245] overlayfs: conflicting lowerdir path [ 771.498237][ T10] usb 6-1: USB disconnect, device number 12 [ 771.835875][ T40] audit: type=1326 audit(1725461182.918:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.1.1240" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f12579 code=0x0 [ 772.165413][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'. [ 772.233516][T10259] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1242'. [ 773.100003][T10269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1248'. [ 774.265969][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 774.318568][ T40] audit: type=1326 audit(1725461185.418:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.3.1253" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f60579 code=0x0 [ 774.337697][T10282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1252'. [ 774.451313][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.482378][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 774.487765][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 774.494773][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.505434][ T10] usb 5-1: config 0 descriptor?? [ 774.976829][ T10] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 774.989993][ T10] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 777.049761][ T10] usb 5-1: USB disconnect, device number 9 [ 778.341819][T10314] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1263'. [ 778.385056][ T40] audit: type=1326 audit(1725461189.478:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10315 comm="syz.2.1265" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe8579 code=0x0 [ 778.818758][T10325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1269'. [ 779.436706][ T5442] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 779.745893][ T5442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.796066][ T5442] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 779.803588][ T5442] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 779.808786][ T5442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.837782][ T5442] usb 6-1: config 0 descriptor?? [ 780.062949][T10342] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1274'. [ 780.278175][ T5442] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 780.285161][ T5442] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 780.422844][T10346] FAULT_INJECTION: forcing a failure. [ 780.422844][T10346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.436063][T10346] CPU: 0 UID: 0 PID: 10346 Comm: syz.0.1276 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 780.440452][T10346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 780.446471][T10346] Call Trace: [ 780.447786][T10346] [ 780.448947][T10346] dump_stack_lvl+0x16c/0x1f0 [ 780.450780][T10346] should_fail_ex+0x497/0x5b0 [ 780.452653][T10346] _copy_from_user+0x30/0xf0 [ 780.454471][T10346] copy_from_buffer+0x86/0xb0 [ 780.457161][T10346] copy_uabi_to_xstate+0x3c7/0x670 [ 780.459401][T10346] ? find_held_lock+0x2d/0x110 [ 780.461387][T10346] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 780.463555][T10346] ? __pfx_lock_release+0x10/0x10 [ 780.465923][T10346] ? __fpu_restore_sig+0xc2c/0x1430 [ 780.468230][T10346] ? __local_bh_enable_ip+0xa4/0x120 [ 780.470644][T10346] __fpu_restore_sig+0x1070/0x1430 [ 780.472876][T10346] ? __pfx___fpu_restore_sig+0x10/0x10 [ 780.475219][T10346] ? __might_fault+0xe3/0x190 [ 780.477445][T10346] fpu__restore_sig+0x102/0x180 [ 780.479170][T10346] ia32_restore_sigcontext+0x40f/0x5d0 [ 780.481555][T10346] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 780.484142][T10346] ? __pfx_lock_release+0x10/0x10 [ 780.486438][T10346] ? _raw_spin_unlock_irq+0x23/0x50 [ 780.489112][T10346] ? lockdep_hardirqs_on+0x7c/0x110 [ 780.491777][T10346] __do_compat_sys_rt_sigreturn+0x116/0x1f0 [ 780.494541][T10346] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 780.497446][T10346] do_int80_emulation+0x104/0x200 [ 780.499598][T10346] asm_int80_emulation+0x1a/0x20 [ 780.501656][T10346] RIP: 0023:0xf742e577 [ 780.503575][T10346] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 780.511762][T10346] RSP: 002b:00000000f572656c EFLAGS: 00000296 [ 780.514301][T10346] RAX: 000000000000016c RBX: 0000000000000003 RCX: 0000000000000000 [ 780.517596][T10346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 780.520917][T10346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 780.524198][T10346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.527223][T10346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 780.530418][T10346] [ 780.763353][ T40] audit: type=1326 audit(1725461191.858:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.0.1278" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742e579 code=0x0 [ 782.288617][ T5440] usb 6-1: USB disconnect, device number 13 [ 782.726534][T10364] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1283'. [ 783.526151][ T40] audit: type=1326 audit(1725461194.618:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10375 comm="syz.0.1287" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742e579 code=0x0 [ 784.419751][T10384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1290'. [ 784.968230][T10389] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1292'. [ 785.395881][ T5411] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 785.646085][ T5411] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.669166][ T5411] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 785.696609][ T5411] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 785.700277][ T5411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.723469][ T5411] usb 6-1: config 0 descriptor?? [ 786.179725][ T5411] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 786.200750][ T5411] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 786.639801][ T9579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 786.654626][ T9579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 786.661221][ T9579] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 786.665993][ T9579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 786.669751][ T9579] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 786.673344][ T9579] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 787.078872][ T40] audit: type=1326 audit(1725461198.178:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.0.1299" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742e579 code=0x0 [ 787.275436][T10401] chnl_net:caif_netlink_parms(): no params data found [ 787.608110][T10401] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.611151][T10401] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.636027][T10401] bridge_slave_0: entered allmulticast mode [ 787.639829][T10401] bridge_slave_0: entered promiscuous mode [ 787.645325][T10401] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.656255][T10401] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.659294][T10401] bridge_slave_1: entered allmulticast mode [ 787.663160][T10401] bridge_slave_1: entered promiscuous mode [ 787.791888][T10401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.803284][T10401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.959181][T10401] team0: Port device team_slave_0 added [ 787.980391][T10401] team0: Port device team_slave_1 added [ 788.116779][ T6129] usb 6-1: USB disconnect, device number 14 [ 788.166936][ C3] vkms_vblank_simulate: vblank timer overrun [ 788.178126][T10401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.181065][T10401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.192100][T10401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.200207][T10401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.216773][T10401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.243309][T10401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.347677][T10419] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1301'. [ 788.490194][T10401] hsr_slave_0: entered promiscuous mode [ 788.513151][T10401] hsr_slave_1: entered promiscuous mode [ 788.521410][T10401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 788.524780][T10401] Cannot create hsr debugfs directory [ 788.793152][ T4781] Bluetooth: hci0: command tx timeout [ 789.002677][T10401] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.147618][T10432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1308'. [ 789.214517][ T40] audit: type=1326 audit(1725461200.308:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10433 comm="syz.0.1307" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742e579 code=0x0 [ 789.226124][T10401] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.418796][T10401] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.618573][T10401] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.856648][T10401] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 789.878850][T10401] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 789.919067][T10401] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 789.939410][T10401] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 789.966504][ T5430] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 790.133532][T10401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.159847][ T5430] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.164693][ T5430] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 790.172834][ T5430] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 790.176517][ T5430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.181255][ T5430] usb 6-1: config 0 descriptor?? [ 790.197453][T10401] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.219304][ T1202] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.222314][ T1202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.271600][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.274420][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.532732][ T9579] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 790.538610][ T9579] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 790.544982][ T9579] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 790.555989][ T9579] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 790.560151][ T9579] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 790.563779][ T9579] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 790.682483][ T5430] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 790.711062][ T5430] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 790.871332][ T9579] Bluetooth: hci0: command tx timeout [ 790.885220][T10401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.092181][T10401] veth0_vlan: entered promiscuous mode [ 791.120400][T10401] veth1_vlan: entered promiscuous mode [ 791.185620][T10446] chnl_net:caif_netlink_parms(): no params data found [ 791.387752][T10401] veth0_macvtap: entered promiscuous mode [ 791.394353][T10401] veth1_macvtap: entered promiscuous mode [ 791.503403][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.514532][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.521783][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.526728][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.531106][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.537009][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.542820][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.547391][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.551392][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.556110][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.562363][T10401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.620391][T10446] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.624076][T10446] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.629997][T10446] bridge_slave_0: entered allmulticast mode [ 791.636313][T10446] bridge_slave_0: entered promiscuous mode [ 791.645404][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.665994][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.708108][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.712102][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.771140][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.775520][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.784340][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.801080][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.805919][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.810378][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.818889][T10401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.824466][T10446] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.829968][T10446] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.833812][T10446] bridge_slave_1: entered allmulticast mode [ 791.840573][T10446] bridge_slave_1: entered promiscuous mode [ 791.858586][T10401] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.862318][T10401] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.883417][T10401] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.899111][T10401] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.080487][T10446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.114401][T10446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.379979][T10446] team0: Port device team_slave_0 added [ 792.415344][T10446] team0: Port device team_slave_1 added [ 792.597552][T10446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.612272][T10446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.624755][T10446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.636506][ T9579] Bluetooth: hci1: command tx timeout [ 792.679423][T10446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.682875][T10446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.694667][ T5430] usb 6-1: USB disconnect, device number 15 [ 792.716118][T10446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.946522][ T9579] Bluetooth: hci0: command tx timeout [ 792.982276][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.986821][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.101370][T10446] hsr_slave_0: entered promiscuous mode [ 793.119190][ T40] audit: type=1326 audit(1725461204.208:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10468 comm="syz.1.1316" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f12579 code=0x0 [ 793.127967][T10446] hsr_slave_1: entered promiscuous mode [ 793.134308][T10446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 793.137018][T10446] Cannot create hsr debugfs directory [ 793.369661][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.373263][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.872300][T10446] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.129286][T10446] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.270334][T10446] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.350159][T10487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1322'. [ 794.456367][T10446] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.697804][T10446] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 794.736487][ T9579] Bluetooth: hci1: command tx timeout [ 794.770439][T10446] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 794.779494][T10446] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 794.796338][T10446] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 794.955833][ T834] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 794.994272][T10446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.025454][T10446] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.036138][ T9579] Bluetooth: hci0: command tx timeout [ 795.067132][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.070427][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.085870][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.089262][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.156163][ T834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.181186][ T834] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 795.194572][ T834] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 795.212871][ T834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.259992][ T834] usb 8-1: config 0 descriptor?? [ 795.618394][T10446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.689238][ T834] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 795.710803][ T834] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 795.805907][T10446] veth0_vlan: entered promiscuous mode [ 795.884263][ T40] audit: type=1326 audit(1725461206.968:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.0.1328" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742e579 code=0x0 [ 795.896424][T10446] veth1_vlan: entered promiscuous mode [ 795.952923][T10446] veth0_macvtap: entered promiscuous mode [ 795.971013][T10446] veth1_macvtap: entered promiscuous mode [ 796.009416][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.014626][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.018880][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.023057][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.026840][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.063407][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.068375][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.073023][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.086725][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.094719][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.100375][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.106902][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.115636][T10446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.157687][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.161978][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.167826][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.171746][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.186221][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.194301][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.200596][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.208687][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.213155][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.226902][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.247027][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.251384][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.257727][T10446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.288907][T10446] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.331450][T10446] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.335074][T10446] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.341074][T10446] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.481210][ T25] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 796.609952][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.613544][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.666009][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 796.702713][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.728063][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.732399][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 796.745589][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.762785][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 796.794484][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 796.796120][ T9579] Bluetooth: hci1: command tx timeout [ 796.831914][ T25] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 796.836440][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.867621][ T25] hub 6-1:1.0: bad descriptor, ignoring hub [ 796.886348][ T25] hub 6-1:1.0: probe with driver hub failed with error -5 [ 796.920871][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 796.923284][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 796.939842][ T25] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 796.942462][ T25] cdc_wdm 6-1:1.0: Unknown control protocol [ 797.056188][T10519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1310'. [ 797.100204][ T40] audit: type=1326 audit(1725461208.188:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10520 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 797.121763][ T40] audit: type=1326 audit(1725461208.188:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10520 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 797.134453][ T40] audit: type=1326 audit(1725461208.188:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10520 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 797.149815][ T40] audit: type=1326 audit(1725461208.188:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10520 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 797.174639][ T40] audit: type=1326 audit(1725461208.188:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10520 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 797.193973][T10521] overlay: ./file1 is not a directory [ 797.196795][ T40] audit: type=1326 audit(1725461208.188:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10520 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 797.215049][ T40] audit: type=1326 audit(1725461208.188:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10520 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 797.224263][ T40] audit: type=1326 audit(1725461208.188:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10520 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 797.717744][ T5430] usb 8-1: USB disconnect, device number 22 [ 798.053726][T10535] FAULT_INJECTION: forcing a failure. [ 798.053726][T10535] name failslab, interval 1, probability 0, space 0, times 0 [ 798.061530][T10535] CPU: 0 UID: 0 PID: 10535 Comm: syz.3.1336 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 798.080244][T10535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 798.096760][T10535] Call Trace: [ 798.101761][T10535] [ 798.111776][T10535] dump_stack_lvl+0x16c/0x1f0 [ 798.114681][T10535] should_fail_ex+0x497/0x5b0 [ 798.116739][T10535] ? fs_reclaim_acquire+0xae/0x160 [ 798.123868][T10535] should_failslab+0xc2/0x120 [ 798.125969][T10535] __kmalloc_node_noprof+0xd1/0x440 [ 798.131464][T10535] ? __kvmalloc_node_noprof+0x9d/0x1a0 [ 798.134117][T10535] __kvmalloc_node_noprof+0x9d/0x1a0 [ 798.136679][T10535] alloc_fdtable+0x158/0x290 [ 798.138702][T10535] dup_fd+0x9ea/0xf60 [ 798.140845][T10535] ? security_task_alloc+0x1b6/0x280 [ 798.145517][T10535] copy_process+0x226a/0x6f50 [ 798.148140][T10535] ? __pfx_copy_process+0x10/0x10 [ 798.151266][T10535] ? _copy_from_user+0x5d/0xf0 [ 798.153975][T10535] kernel_clone+0xfd/0x960 [ 798.156890][T10535] ? __pfx_kernel_clone+0x10/0x10 [ 798.160302][T10535] ? hlock_class+0x4e/0x130 [ 798.162675][T10535] __do_sys_clone3+0x1f5/0x270 [ 798.164841][T10535] ? __pfx___do_sys_clone3+0x10/0x10 [ 798.167714][T10535] ? count_memcg_event_mm.part.0+0x12c/0x340 [ 798.171428][T10535] ? __up_read+0x1fb/0x760 [ 798.173448][T10535] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 798.189585][T10535] __do_fast_syscall_32+0x73/0x120 [ 798.191914][T10535] do_fast_syscall_32+0x32/0x80 [ 798.194059][T10535] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 798.196777][T10535] RIP: 0023:0xf742e579 [ 798.206639][T10535] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 798.214529][T10535] RSP: 002b:00000000f572643c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 798.217824][T10535] RAX: ffffffffffffffda RBX: 00000000f5726470 RCX: 0000000000000058 [ 798.221185][T10535] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 798.224481][T10535] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 798.227779][T10535] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 798.231428][T10535] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 798.235280][T10535] [ 798.410281][ T25] usb 6-1: USB disconnect, device number 16 [ 798.428428][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 798.428443][ T40] audit: type=1326 audit(1725461209.518:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10539 comm="syz.3.1337" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742e579 code=0x0 [ 798.879244][ T9579] Bluetooth: hci1: command tx timeout [ 799.290952][T10546] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1338'. [ 800.559573][T10565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1345'. [ 801.391157][ T5430] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 801.626469][ T5430] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.631046][ T5430] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 801.637706][ T5430] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 801.641374][ T5430] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.652885][ T5430] usb 7-1: config 0 descriptor?? [ 801.673110][ T40] audit: type=1326 audit(1725461212.758:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10582 comm="syz.1.1351" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f12579 code=0x0 [ 801.694551][T10580] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1350'. [ 802.132749][ T5430] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 802.155880][ T5430] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 802.839872][T10596] netlink: 'syz.3.1356': attribute type 11 has an invalid length. [ 802.931748][T10596] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 803.236495][T10604] input: syz0 as /devices/virtual/input/input45 [ 803.444848][T10610] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1360'. [ 803.861271][ T40] audit: type=1326 audit(1725461214.958:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.0.1363" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742e579 code=0x0 [ 804.126717][ T6129] usb 7-1: USB disconnect, device number 6 [ 804.303568][T10625] 9pnet_fd: Insufficient options for proto=fd [ 804.594921][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1369'. [ 804.709585][T10634] mac80211_hwsim hwsim47 ÿÿÿÿÿÿ: renamed from wlan1 (while UP) [ 805.330300][T10642] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1370'. [ 805.598192][T10649] 9pnet_fd: Insufficient options for proto=fd [ 806.167919][T10656] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1376'. [ 806.302187][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1379'. [ 806.317856][ T40] audit: type=1326 audit(1725461217.418:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10662 comm="syz.2.1378" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd7579 code=0x0 [ 806.823894][T10671] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1381'. [ 807.131073][ T10] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 807.317729][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.352063][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 807.390634][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 807.394644][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.402893][ T10] usb 8-1: config 0 descriptor?? [ 807.882882][ T10] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 807.915915][ T10] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 808.347229][T10689] FAULT_INJECTION: forcing a failure. [ 808.347229][T10689] name failslab, interval 1, probability 0, space 0, times 0 [ 808.352947][T10689] CPU: 3 UID: 0 PID: 10689 Comm: syz.2.1387 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 808.358999][T10689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 808.365749][T10689] Call Trace: [ 808.367838][T10689] [ 808.369686][T10689] dump_stack_lvl+0x16c/0x1f0 [ 808.372576][T10689] should_fail_ex+0x497/0x5b0 [ 808.375343][T10689] ? fs_reclaim_acquire+0xae/0x160 [ 808.377829][T10689] should_failslab+0xc2/0x120 [ 808.380383][T10689] kmem_cache_alloc_node_noprof+0x71/0x310 [ 808.383238][T10689] ? __alloc_skb+0x2b3/0x380 [ 808.386182][T10689] __alloc_skb+0x2b3/0x380 [ 808.388671][T10689] ? __pfx___alloc_skb+0x10/0x10 [ 808.391766][T10689] netlink_ack+0x164/0xb20 [ 808.394553][T10689] netlink_rcv_skb+0x327/0x410 [ 808.397310][T10689] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 808.400551][T10689] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 808.403408][T10689] ? bpf_lsm_capable+0x9/0x10 [ 808.405843][T10689] ? security_capable+0x98/0xd0 [ 808.408572][T10689] ? ns_capable+0xd7/0x110 [ 808.411357][T10689] nfnetlink_rcv+0x1b4/0x430 [ 808.414244][T10689] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 808.417434][T10689] ? netlink_deliver_tap+0x1ae/0xcf0 [ 808.420658][T10689] netlink_unicast+0x53c/0x7f0 [ 808.423601][T10689] ? __pfx_netlink_unicast+0x10/0x10 [ 808.426878][T10689] ? __phys_addr_symbol+0x30/0x80 [ 808.429808][T10689] ? __check_object_size+0x497/0x720 [ 808.432706][T10689] netlink_sendmsg+0x8b8/0xd70 [ 808.435268][T10689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 808.438083][T10689] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 808.440914][T10689] ____sys_sendmsg+0x9b4/0xb50 [ 808.442966][T10689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 808.446155][T10689] ? get_compat_msghdr+0x11b/0x170 [ 808.448834][T10689] ? __pfx___lock_acquire+0x10/0x10 [ 808.451475][T10689] ___sys_sendmsg+0x135/0x1e0 [ 808.453903][T10689] ? __pfx____sys_sendmsg+0x10/0x10 [ 808.456483][T10689] ? ksys_write+0x21c/0x260 [ 808.459056][T10689] ? __fget_light+0x173/0x210 [ 808.461508][T10689] __sys_sendmsg+0x117/0x1f0 [ 808.463842][T10689] ? __pfx___sys_sendmsg+0x10/0x10 [ 808.466183][T10689] __do_fast_syscall_32+0x73/0x120 [ 808.468929][T10689] do_fast_syscall_32+0x32/0x80 [ 808.471574][T10689] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 808.475203][T10689] RIP: 0023:0xf7fd7579 [ 808.477033][T10689] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 808.485482][T10689] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 808.488957][T10689] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 808.493170][T10689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 808.497155][T10689] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 808.500585][T10689] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 808.503466][T10689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 808.507124][T10689] [ 808.746318][T10698] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1390'. [ 809.009244][ T40] audit: type=1326 audit(1725461220.108:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.2.1391" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd7579 code=0x0 [ 809.925799][ T5429] usb 8-1: USB disconnect, device number 23 [ 810.101148][T10714] loop6: detected capacity change from 0 to 524287999 [ 810.130540][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 810.134622][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 810.182840][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 810.188535][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 810.205862][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 810.209800][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 810.213958][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 810.217570][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 810.221095][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 810.224959][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 810.231026][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 810.234755][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 810.241462][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 810.247754][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 810.252468][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 810.258068][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 810.262494][T10714] ldm_validate_partition_table(): Disk read failed. [ 810.267336][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 810.272377][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 810.281902][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 810.286258][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 810.338223][T10714] Dev loop6: unable to read RDB block 0 [ 810.344835][T10714] loop6: unable to read partition table [ 810.347892][T10714] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 810.420972][ T4844] ldm_validate_partition_table(): Disk read failed. [ 810.428023][ T4844] Dev loop6: unable to read RDB block 0 [ 810.431541][ T4844] loop6: unable to read partition table [ 811.199304][ T979] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 811.356676][ T979] usb 6-1: device descriptor read/64, error -71 [ 811.382391][T10730] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1400'. [ 811.447475][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 811.515824][T10731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1399'. [ 811.574618][ T40] audit: type=1326 audit(1725461222.668:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10734 comm="syz.2.1402" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd7579 code=0x0 [ 811.625864][ T979] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 811.787059][ T979] usb 6-1: device descriptor read/64, error -71 [ 811.906053][ T979] usb usb6-port1: attempt power cycle [ 812.336979][ T979] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 812.376704][ T979] usb 6-1: device descriptor read/8, error -71 [ 812.701067][T10752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1404'. [ 812.706154][ T979] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 812.736281][ T979] usb 6-1: device descriptor read/8, error -71 [ 812.856065][ T979] usb usb6-port1: unable to enumerate USB device [ 813.495888][ T5430] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 813.735840][ T5430] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.740403][ T5430] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 813.876032][ T5430] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 813.890919][ T5430] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.913139][ T5430] usb 7-1: config 0 descriptor?? [ 814.107932][T10774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1410'. [ 814.366577][ T5430] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 814.399406][ T5430] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 814.511815][ T40] audit: type=1326 audit(1725461225.608:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.3.1412" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742e579 code=0x0 [ 814.819274][ T5430] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 814.996083][ T5430] usb 5-1: device descriptor read/64, error -71 [ 815.276159][ T5430] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 815.486077][ T5430] usb 5-1: device descriptor read/64, error -71 [ 815.736370][ T5430] usb usb5-port1: attempt power cycle [ 816.057833][T10796] Cannot find add_set index 0 as target [ 816.155914][ T5430] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 816.192403][ T5430] usb 5-1: device descriptor read/8, error -71 [ 816.327922][ T6129] usb 7-1: USB disconnect, device number 7 [ 816.455858][ T5430] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 816.533429][ T5430] usb 5-1: device descriptor read/8, error -71 [ 816.536196][T10800] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1420'. [ 816.677192][ T5430] usb usb5-port1: unable to enumerate USB device [ 816.855491][ T40] audit: type=1326 audit(1725461227.948:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10805 comm="syz.3.1423" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742e579 code=0x0 [ 818.108384][T10829] netlink: 'syz.3.1427': attribute type 10 has an invalid length. [ 818.115667][T10829] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1427'. [ 818.128730][T10829] bridge0: port 3(syz_tun) entered blocking state [ 818.143302][T10829] bridge0: port 3(syz_tun) entered disabled state [ 818.157258][T10829] syz_tun: entered allmulticast mode [ 818.170988][T10829] syz_tun: entered promiscuous mode [ 818.189913][T10829] bridge0: port 3(syz_tun) entered blocking state [ 818.193064][T10829] bridge0: port 3(syz_tun) entered forwarding state [ 818.413825][T10835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1430'. [ 818.521531][T10837] binder: 10830:10837 ioctl c0096616 20000540 returned -22 [ 818.663902][T10833] No such timeout policy "syz0" [ 818.775435][T10843] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1433'. [ 818.998286][ T40] audit: type=1326 audit(1725461230.098:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.2.1435" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd7579 code=0x0 [ 819.085816][ T5411] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 819.316464][ T5411] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.327271][ T5411] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 819.343877][ T5411] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 819.353110][ T5411] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.371514][ T5411] usb 8-1: config 0 descriptor?? [ 819.866123][ T5411] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 819.877875][ T5411] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 820.171301][T10858] netlink: 'syz.0.1437': attribute type 7 has an invalid length. [ 820.207964][T10862] binder: 10861:10862 ioctl c0306201 200001c0 returned -14 [ 821.479689][T10879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1443'. [ 821.837571][ T5429] usb 8-1: USB disconnect, device number 24 [ 822.207969][ T40] audit: type=1326 audit(1725461233.308:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.3.1446" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742e579 code=0x0 [ 822.235577][ T4781] Bluetooth: hci6: command 0x0406 tx timeout [ 823.236602][T10898] block nbd0: NBD_DISCONNECT [ 823.928260][T10916] bridge0: port 3(veth1) entered blocking state [ 823.938456][T10916] bridge0: port 3(veth1) entered disabled state [ 823.942089][T10916] veth1: entered allmulticast mode [ 823.950745][T10916] veth1: entered promiscuous mode [ 823.980705][T10916] bridge0: port 3(veth1) entered blocking state [ 823.984537][T10916] bridge0: port 3(veth1) entered forwarding state [ 824.029711][T10922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1454'. [ 824.507552][T10926] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1456'. [ 824.788471][ T40] audit: type=1326 audit(1725461235.878:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.2.1458" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd7579 code=0x0 [ 824.939571][ T5411] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 825.075924][ T25] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 825.167633][ T5411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.172196][ T5411] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 825.185857][ T5411] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 825.190005][ T5411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.206675][ T5411] usb 5-1: config 0 descriptor?? [ 825.280120][ T1379] ieee802154 phy0 wpan0: encryption failed: -22 [ 825.283097][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 [ 825.287413][ T25] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 825.292985][ T25] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 825.305839][ T25] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 825.317279][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.331739][T10934] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 825.363303][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 825.506007][T10942] syz.3.1461: attempt to access beyond end of device [ 825.506007][T10942] md0: rw=0, sector=16, nr_sectors = 8 limit=0 [ 825.523747][T10942] REISERFS warning (device md0): sh-2006 read_super_block: bread failed (dev md0, block 2, size 4096) [ 825.536314][T10942] syz.3.1461: attempt to access beyond end of device [ 825.536314][T10942] md0: rw=0, sector=128, nr_sectors = 8 limit=0 [ 825.542515][T10942] REISERFS warning (device md0): sh-2006 read_super_block: bread failed (dev md0, block 16, size 4096) [ 825.549197][T10942] REISERFS warning (device md0): sh-2021 reiserfs_fill_super: can not find reiserfs on md0 [ 825.633696][ T5411] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 825.645592][ T5411] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 825.702672][T10934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1459'. [ 825.710755][T10934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1459'. [ 825.857658][ T5429] usb 6-1: USB disconnect, device number 21 [ 825.864779][T10947] bridge0: port 3(veth1) entered blocking state [ 825.880107][T10947] bridge0: port 3(veth1) entered disabled state [ 825.883123][T10947] veth1: entered allmulticast mode [ 825.897833][T10947] veth1: entered promiscuous mode [ 825.900660][T10947] bridge0: port 3(veth1) entered blocking state [ 825.903348][T10947] bridge0: port 3(veth1) entered forwarding state [ 827.355873][ T9579] Bluetooth: hci5: command 0x0406 tx timeout [ 827.635344][ T5430] usb 5-1: USB disconnect, device number 14 [ 828.077023][T10961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1466'. [ 828.891694][ T40] audit: type=1326 audit(1725461239.988:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10973 comm="syz.3.1470" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742e579 code=0x0 [ 829.552951][T10988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1474'. [ 830.038975][T10990] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1475'. [ 830.300228][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1476'. [ 830.755866][ T6129] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 831.006876][ T6129] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.020337][ T6129] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 831.035955][ T6129] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 831.124505][ T6129] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.140796][ T6129] usb 7-1: config 0 descriptor?? [ 831.767540][ T6129] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 831.859897][ T6129] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 831.972304][ T40] audit: type=1326 audit(1725461243.068:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11013 comm="syz.3.1484" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742e579 code=0x0 [ 832.264636][T11020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1485'. [ 832.581497][T11027] netlink: 'syz.1.1487': attribute type 3 has an invalid length. [ 832.606623][T11027] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1487'. [ 832.743809][T11030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1489'. [ 832.830366][T11032] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 833.767634][ T834] usb 7-1: USB disconnect, device number 8 [ 834.135598][ T40] audit: type=1326 audit(1725461245.228:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11050 comm="syz.3.1496" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742e579 code=0x0 [ 834.269459][T11054] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1495'. [ 834.526164][ T40] audit: type=1326 audit(1725461245.608:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11060 comm="syz.1.1499" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f12579 code=0x0 [ 834.566026][ T40] audit: type=1326 audit(1725461245.628:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11058 comm="syz.2.1498" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd7579 code=0x0 [ 834.595614][T11057] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1497'. [ 835.838132][T11076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1503'. [ 836.485803][ T9898] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 836.731390][ T9898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.746358][T11086] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1506'. [ 836.817139][ T9898] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 836.822225][ T9898] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 836.884925][ T9898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.005369][ T9898] usb 7-1: config 0 descriptor?? [ 837.253219][T11094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1509'. [ 837.465530][ T9898] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 837.481861][ T9898] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 837.600197][ T4781] Bluetooth: hci7: command 0x0406 tx timeout [ 837.859271][ T40] audit: type=1326 audit(1725461248.958:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11098 comm="syz.1.1511" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f12579 code=0x0 [ 838.000436][ T40] audit: type=1326 audit(1725461249.098:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11103 comm="syz.0.1513" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742e579 code=0x0 [ 838.100387][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 838.114933][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 839.199277][T11129] netlink: 'syz.3.1518': attribute type 3 has an invalid length. [ 839.453752][ T25] usb 7-1: USB disconnect, device number 9 [ 840.452860][T11139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1523'. [ 840.559214][T11139] netlink: 'syz.1.1523': attribute type 9 has an invalid length. [ 840.865149][T11142] FAULT_INJECTION: forcing a failure. [ 840.865149][T11142] name failslab, interval 1, probability 0, space 0, times 0 [ 840.870698][T11142] CPU: 1 UID: 0 PID: 11142 Comm: syz.1.1524 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 840.887337][T11142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 840.891221][T11142] Call Trace: [ 840.892437][T11142] [ 840.893530][T11142] dump_stack_lvl+0x16c/0x1f0 [ 840.895314][T11142] should_fail_ex+0x497/0x5b0 [ 840.897056][T11142] ? fs_reclaim_acquire+0xae/0x160 [ 840.899731][T11142] should_failslab+0xc2/0x120 [ 840.901500][T11142] __kmalloc_node_track_caller_noprof+0xcf/0x440 [ 840.904115][T11142] ? ovl_parse_layer+0xe6/0x1270 [ 840.916146][T11142] kstrdup+0x3c/0x80 [ 840.917633][T11142] ovl_parse_layer+0xe6/0x1270 [ 840.919441][T11142] ? __pfx_ovl_parse_layer+0x10/0x10 [ 840.921346][T11142] ? __pfx_fs_param_is_string+0x10/0x10 [ 840.923366][T11142] ovl_parse_param+0xaa7/0x1030 [ 840.925177][T11142] ? __pfx_ovl_parse_param+0x10/0x10 [ 840.927156][T11142] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 840.929647][T11142] ? bpf_lsm_fs_context_parse_param+0x9/0x20 [ 840.932365][T11142] ? __pfx_ovl_parse_param+0x10/0x10 [ 840.934472][T11142] vfs_parse_fs_param+0x208/0x3c0 [ 840.936467][T11142] vfs_parse_fs_string+0xea/0x150 [ 840.938470][T11142] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 840.940886][T11142] ? ovl_next_opt+0x143/0x1c0 [ 840.942975][T11142] ? __pfx_ovl_next_opt+0x10/0x10 [ 840.945254][T11142] vfs_parse_monolithic_sep+0x171/0x1f0 [ 840.947592][T11142] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 840.950174][T11142] ? alloc_fs_context+0x59b/0x9c0 [ 840.952153][T11142] path_mount+0x69a/0x1f10 [ 840.953821][T11142] ? __pfx_path_mount+0x10/0x10 [ 840.955852][T11142] ? putname+0x12e/0x170 [ 840.957712][T11142] ? putname+0x12e/0x170 [ 840.959614][T11142] __ia32_sys_mount+0x292/0x310 [ 840.962168][T11142] ? __pfx___ia32_sys_mount+0x10/0x10 [ 840.964724][T11142] __do_fast_syscall_32+0x73/0x120 [ 840.967172][T11142] do_fast_syscall_32+0x32/0x80 [ 840.969312][T11142] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 840.972012][T11142] RIP: 0023:0xf7f12579 [ 840.974073][T11142] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 840.983104][T11142] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 840.986891][T11142] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200000c0 [ 840.990392][T11142] RDX: 0000000020000340 RSI: 0000000000000000 RDI: 0000000020000380 [ 840.993366][T11142] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 840.997003][T11142] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 840.999949][T11142] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 841.003239][T11142] [ 841.311160][T11146] FAULT_INJECTION: forcing a failure. [ 841.311160][T11146] name failslab, interval 1, probability 0, space 0, times 0 [ 841.338249][T11146] CPU: 1 UID: 0 PID: 11146 Comm: syz.1.1526 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 841.347060][T11146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 841.354086][T11146] Call Trace: [ 841.355562][T11146] [ 841.356806][T11146] dump_stack_lvl+0x16c/0x1f0 [ 841.363937][T11146] should_fail_ex+0x497/0x5b0 [ 841.367296][T11146] ? fs_reclaim_acquire+0xae/0x160 [ 841.369501][T11146] should_failslab+0xc2/0x120 [ 841.372157][T11146] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 841.374616][T11146] ? security_inode_alloc+0x3e/0x240 [ 841.377692][T11146] security_inode_alloc+0x3e/0x240 [ 841.380895][T11146] inode_init_always+0xc56/0xf80 [ 841.383033][T11146] alloc_inode+0x7d/0x230 [ 841.384673][T11146] new_inode+0x22/0x210 [ 841.386228][T11146] shmem_get_inode+0x194/0xe90 [ 841.388802][T11146] shmem_fill_super+0xa28/0x1180 [ 841.391597][T11146] ? __pfx_shmem_fill_super+0x10/0x10 [ 841.394056][T11146] ? __pfx_set_anon_super_fc+0x10/0x10 [ 841.396504][T11146] ? __pfx_shmem_fill_super+0x10/0x10 [ 841.398825][T11146] get_tree_nodev+0xda/0x190 [ 841.400847][T11146] vfs_get_tree+0x8f/0x380 [ 841.404116][T11146] path_mount+0x6e1/0x1f10 [ 841.406897][T11146] ? __pfx_path_mount+0x10/0x10 [ 841.409256][T11146] ? putname+0x12e/0x170 [ 841.410884][T11146] ? putname+0x12e/0x170 [ 841.412507][T11146] __ia32_sys_mount+0x292/0x310 [ 841.414645][T11146] ? __pfx___ia32_sys_mount+0x10/0x10 [ 841.416964][T11146] __do_fast_syscall_32+0x73/0x120 [ 841.419193][T11146] do_fast_syscall_32+0x32/0x80 [ 841.421460][T11146] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 841.424582][T11146] RIP: 0023:0xf7f12579 [ 841.426381][T11146] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 841.428495][T11149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1527'. [ 841.434677][T11146] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 841.434726][T11146] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000200 [ 841.447343][T11146] RDX: 0000000020000040 RSI: 0000000000008000 RDI: 0000000020000000 [ 841.451326][T11146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 841.456421][T11146] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 841.459895][T11146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 841.463975][T11146] [ 841.666123][T11151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1528'. [ 842.817972][ T6129] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 843.008937][ T6129] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.014310][ T6129] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 843.022817][ T6129] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 843.050500][ T6129] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.086930][ T6129] usb 7-1: config 0 descriptor?? [ 843.362560][ T9898] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 843.595942][ T9898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.627281][ T6129] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 843.646017][ T9898] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 843.673057][ T9898] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 843.679829][ T9898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.725898][ T6129] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 843.740294][ T9898] usb 6-1: config 0 descriptor?? [ 844.253410][ T9898] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 844.361487][ T9898] plantronics 0003:047F:FFFF.001C: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 844.939564][T11170] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 844.943117][T11170] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 844.986507][T11170] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 845.010769][T11170] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 845.016665][T11170] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 845.019012][T11170] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 845.136382][T11170] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 845.138697][T11170] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 846.001060][ T10] usb 6-1: USB disconnect, device number 22 [ 846.193434][ T6129] usb 7-1: USB disconnect, device number 10 [ 846.388992][T11170] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 846.391680][T11170] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 846.395015][T11183] ------------[ cut here ]------------ [ 846.402305][T11183] WARNING: CPU: 0 PID: 11183 at kernel/workqueue.c:2259 __queue_work+0xc2b/0x1070 [ 846.406598][T11183] Modules linked in: [ 846.408512][T11183] CPU: 0 UID: 0 PID: 11183 Comm: syz.3.1535 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 846.415901][T11183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 846.420384][T11183] RIP: 0010:__queue_work+0xc2b/0x1070 [ 846.422599][T11183] Code: 07 83 c0 03 38 d0 7c 09 84 d2 74 05 e8 ce 41 93 00 8b 5b 2c 31 ff 83 e3 20 89 de e8 1f ad 34 00 85 db 75 60 e8 d6 aa 34 00 90 <0f> 0b 90 e9 08 f8 ff ff e8 c8 aa 34 00 90 0f 0b 90 e9 b7 f7 ff ff [ 846.431961][T11183] RSP: 0018:ffffc9002801f7a0 EFLAGS: 00010083 [ 846.435301][T11183] RAX: 0000000000000aec RBX: 0000000000000000 RCX: ffffc900226db000 [ 846.438815][T11183] RDX: 0000000000040000 RSI: ffffffff81566f4a RDI: 0000000000000005 [ 846.442479][T11183] RBP: ffff88805fb04b10 R08: 0000000000000005 R09: 0000000000000000 [ 846.445888][T11183] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 846.449153][T11183] R13: 0000000000000008 R14: ffff88802b400800 R15: ffff88802b400800 [ 846.452594][T11183] FS: 0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:00000000f5705b40 [ 846.456741][T11183] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 846.460024][T11183] CR2: 00000000f73f12d4 CR3: 000000005ddce000 CR4: 0000000000350ef0 [ 846.463028][T11183] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 846.466416][T11183] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 846.470057][T11183] Call Trace: [ 846.471760][T11183] [ 846.473207][T11183] ? show_regs+0x8c/0xa0 [ 846.475377][T11183] ? __warn+0xe5/0x3c0 [ 846.477178][T11183] ? __queue_work+0xc2b/0x1070 [ 846.479359][T11183] ? report_bug+0x3c0/0x580 [ 846.481276][T11183] ? handle_bug+0x3d/0x70 [ 846.483286][T11183] ? exc_invalid_op+0x17/0x50 [ 846.485492][T11183] ? asm_exc_invalid_op+0x1a/0x20 [ 846.488546][T11183] ? __queue_work+0xc2a/0x1070 [ 846.491021][T11183] ? __queue_work+0xc2b/0x1070 [ 846.493872][T11183] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 846.496832][T11183] ? hci_conn_del_sysfs+0x48/0x180 [ 846.499493][T11183] ? rcu_is_watching+0x12/0xc0 [ 846.501508][T11183] queue_work_on+0x11a/0x140 [ 846.503783][T11183] l2cap_chan_send+0xb86/0x2a30 [ 846.506042][T11183] ? trace_contention_end+0xea/0x140 [ 846.508494][T11183] ? find_held_lock+0x59/0x110 [ 846.510833][T11183] ? find_held_lock+0x2d/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 846.512927][T11183] ? __pfx_l2cap_chan_send+0x10/0x10 [ 846.515393][T11183] ? l2cap_sock_sendmsg+0x1a4/0x300 [ 846.517808][T11183] l2cap_sock_sendmsg+0x228/0x300 [ 846.520205][T11183] ____sys_sendmsg+0x9b4/0xb50 [ 846.533345][T11183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 846.543349][T11183] ? get_compat_msghdr+0x11b/0x170 [ 846.545707][T11183] ? __pfx___lock_acquire+0x10/0x10 [ 846.548201][T11183] ___sys_sendmsg+0x135/0x1e0 [ 846.550194][T11183] ? __pfx____sys_sendmsg+0x10/0x10 [ 846.552352][T11183] ? __pfx_futex_wake_mark+0x10/0x10 [ 846.554315][T11183] ? __fget_light+0x173/0x210 [ 846.562785][T11183] __sys_sendmmsg+0x2a5/0x450 [ 846.571842][T11183] ? __pfx___sys_sendmmsg+0x10/0x10 [ 846.574643][T11183] ? __pfx_do_futex+0x10/0x10 [ 846.582415][T11183] ? fput+0x32/0x390 [ 846.584190][T11183] ? xfd_validate_state+0x5d/0x180 [ 846.588479][T11183] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 846.590648][T11183] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 846.592990][T11183] __do_fast_syscall_32+0x73/0x120 [ 846.594988][T11183] do_fast_syscall_32+0x32/0x80 [ 846.597383][T11183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 846.605102][T11183] RIP: 0023:0xf742e579 [ 846.606695][T11183] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 846.626644][T11183] RSP: 002b:00000000f570556c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 846.639117][T11183] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000020004100 [ 846.654169][T11183] RDX: 00000000ffffff80 RSI: 0000000000000000 RDI: 0000000000000000 [ 846.657683][T11183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 846.661780][T11183] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 846.668683][T11183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 846.682084][T11183] [ 846.683471][T11183] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 846.686572][T11183] CPU: 0 UID: 0 PID: 11183 Comm: syz.3.1535 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 846.690953][T11183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 846.700563][T11183] Call Trace: [ 846.702044][T11183] [ 846.703377][T11183] dump_stack_lvl+0x3d/0x1f0 [ 846.705441][T11183] panic+0x6dc/0x7c0 [ 846.707160][T11183] ? __pfx_panic+0x10/0x10 [ 846.709104][T11183] ? show_trace_log_lvl+0x363/0x500 [ 846.711419][T11183] ? __queue_work+0xc2b/0x1070 [ 846.713607][T11183] check_panic_on_warn+0xab/0xb0 [ 846.715762][T11183] __warn+0xf1/0x3c0 [ 846.717496][T11183] ? __queue_work+0xc2b/0x1070 [ 846.719611][T11183] report_bug+0x3c0/0x580 [ 846.721211][T11183] handle_bug+0x3d/0x70 [ 846.722794][T11183] exc_invalid_op+0x17/0x50 [ 846.724513][T11183] asm_exc_invalid_op+0x1a/0x20 [ 846.726328][T11183] RIP: 0010:__queue_work+0xc2b/0x1070 [ 846.728408][T11183] Code: 07 83 c0 03 38 d0 7c 09 84 d2 74 05 e8 ce 41 93 00 8b 5b 2c 31 ff 83 e3 20 89 de e8 1f ad 34 00 85 db 75 60 e8 d6 aa 34 00 90 <0f> 0b 90 e9 08 f8 ff ff e8 c8 aa 34 00 90 0f 0b 90 e9 b7 f7 ff ff [ 846.736247][T11183] RSP: 0018:ffffc9002801f7a0 EFLAGS: 00010083 [ 846.739087][T11183] RAX: 0000000000000aec RBX: 0000000000000000 RCX: ffffc900226db000 [ 846.742409][T11183] RDX: 0000000000040000 RSI: ffffffff81566f4a RDI: 0000000000000005 [ 846.745753][T11183] RBP: ffff88805fb04b10 R08: 0000000000000005 R09: 0000000000000000 [ 846.749135][T11183] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 846.752522][T11183] R13: 0000000000000008 R14: ffff88802b400800 R15: ffff88802b400800 [ 846.755809][T11183] ? __queue_work+0xc2a/0x1070 [ 846.757662][T11183] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 846.759708][T11183] ? hci_conn_del_sysfs+0x48/0x180 [ 846.761944][T11183] ? rcu_is_watching+0x12/0xc0 [ 846.764018][T11183] queue_work_on+0x11a/0x140 [ 846.766087][T11183] l2cap_chan_send+0xb86/0x2a30 [ 846.768457][T11183] ? trace_contention_end+0xea/0x140 [ 846.770792][T11183] ? find_held_lock+0x59/0x110 [ 846.773255][T11183] ? find_held_lock+0x2d/0x110 [ 846.775654][T11183] ? __pfx_l2cap_chan_send+0x10/0x10 [ 846.777984][T11183] ? l2cap_sock_sendmsg+0x1a4/0x300 [ 846.779978][T11183] l2cap_sock_sendmsg+0x228/0x300 [ 846.781946][T11183] ____sys_sendmsg+0x9b4/0xb50 [ 846.783859][T11183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 846.786138][T11183] ? get_compat_msghdr+0x11b/0x170 [ 846.788381][T11183] ? __pfx___lock_acquire+0x10/0x10 [ 846.790538][T11183] ___sys_sendmsg+0x135/0x1e0 [ 846.792372][T11183] ? __pfx____sys_sendmsg+0x10/0x10 [ 846.794364][T11183] ? __pfx_futex_wake_mark+0x10/0x10 [ 846.796112][T11183] ? __fget_light+0x173/0x210 [ 846.797691][T11183] __sys_sendmmsg+0x2a5/0x450 [ 846.799162][T11183] ? __pfx___sys_sendmmsg+0x10/0x10 [ 846.801235][T11183] ? __pfx_do_futex+0x10/0x10 [ 846.802931][T11183] ? fput+0x32/0x390 [ 846.804823][T11183] ? xfd_validate_state+0x5d/0x180 [ 846.807474][T11183] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 846.810254][T11183] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 846.813306][T11183] __do_fast_syscall_32+0x73/0x120 [ 846.815777][T11183] do_fast_syscall_32+0x32/0x80 [ 846.817811][T11183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 846.820540][T11183] RIP: 0023:0xf742e579 [ 846.822299][T11183] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 846.829854][T11183] RSP: 002b:00000000f570556c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 846.833078][T11183] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000020004100 [ 846.836279][T11183] RDX: 00000000ffffff80 RSI: 0000000000000000 RDI: 0000000000000000 [ 846.839571][T11183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 846.843097][T11183] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 846.846406][T11183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 846.849473][T11183] [ 846.851277][T11183] Kernel Offset: disabled [ 846.853069][T11183] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:39:06 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000049 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fc1325 RDI=ffffffff9a514600 RBP=ffffffff9a5145c0 RSP=ffffc9002801f180 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000049 R14=ffffffff84fc12c0 R15=0000000000000000 RIP=ffffffff84fc134f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73f12d4 CR3=000000005ddce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000617dbb RBX=0000000000000001 RCX=ffffffff8b0830b9 RDX=0000000000000000 RSI=ffffffff8b4cd060 RDI=ffffffff8bb07e20 RBP=ffffed10036fd910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed10056e6fd9 R10=ffff88802b737ecb R11=0000000000000000 R12=0000000000000001 R13=ffff88801b7ec880 R14=ffffffff9011de18 R15=0000000000000000 RIP=ffffffff8b0844af RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002001a000 CR3=000000005ddce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88801a971048 RCX=1ffff920001cdf0c RDX=ffff88801fccc880 RSI=ffffffff84ffc9ac RDI=ffff88801a971048 RBP=0000000000000004 RSP=ffffc90000e6f838 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000004 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000004 R15=ffff88802b470000 RIP=ffffffff84ffc9ad RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000561c8ad771a8 CR3=000000006a370000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fd840008 Opmask01=00000000003fffff Opmask02=00000000fbbfffff Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 69253a6925632500 3d45444f4d564544 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc74c2a510 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 97bf884bf00db883 7373256a9870f67f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737142 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4637343030003078 30004e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4637343030003078 303d4e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 460a090d0d000d45 0d004e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000033386c6c 696b66722f306963 682f68746f6f7465 756c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000141 0000000032386c6c 696b66722f363479 68702f3131323038 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d319f2290 0000561c8acd5dc0 000000000001ffb1 0000003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffffffffd 00007f5dfbcfbff7 e7ecf7dffffffffa 1f007f5dfffffdff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49383a3a2648383a 3a2633383a3a2632 383a3a263d383a3a 263c383a3a263f38 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000210 0000000000000030 676461382d776172 00004e195303450c ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000210 0000000000000030 0000561c2d773470 00004e195303450c ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000003d54a5 RBX=0000000000000003 RCX=ffffffff8b0830b9 RDX=0000000000000000 RSI=ffffffff8b4cd060 RDI=ffffffff8bb07e20 RBP=ffffed100377e488 RSP=ffffc90000497e08 R8 =0000000000000001 R9 =ffffed1005726fd9 R10=ffff88802b937ecb R11=0000000000000000 R12=0000000000000003 R13=ffff88801bbf2440 R14=ffffffff9011de18 R15=0000000000000000 RIP=ffffffff8b0844af RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005606f9a34000 CR3=0000000046554000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=f8c421d6f8c421d6 f8c421d6f8c421d6 f8c421d6f8c421d6 f8c421d6f8c421d6 f8c421d6f8c421d6 f8c421d6f8c421d6 f8c421d6f8c421d6 f8c421d6f8c421d6 ZMM22=d9ab5952d9ab5952 d9ab5952d9ab5952 d9ab5952d9ab5952 d9ab5952d9ab5952 d9ab5952d9ab5952 d9ab5952d9ab5952 d9ab5952d9ab5952 d9ab5952d9ab5952 ZMM23=ac1c1133ac1c1133 ac1c1133ac1c1133 ac1c1133ac1c1133 ac1c1133ac1c1133 ac1c1133ac1c1133 ac1c1133ac1c1133 ac1c1133ac1c1133 ac1c1133ac1c1133 ZMM24=979009e9979009e9 979009e9979009e9 979009e9979009e9 979009e9979009e9 979009e9979009e9 979009e9979009e9 979009e9979009e9 979009e9979009e9 ZMM25=bc925165bc925165 bc925165bc925165 bc925165bc925165 bc925165bc925165 bc925165bc925165 bc925165bc925165 bc925165bc925165 bc925165bc925165 ZMM26=8a3b344b8a3b344b 8a3b344b8a3b344b 8a3b344b8a3b344b 8a3b344b8a3b344b 8a3b344b8a3b344b 8a3b344b8a3b344b 8a3b344b8a3b344b 8a3b344b8a3b344b ZMM27=36d33dc736d33dc7 36d33dc736d33dc7 36d33dc736d33dc7 36d33dc736d33dc7 36d33dc736d33dc7 36d33dc736d33dc7 36d33dc736d33dc7 36d33dc736d33dc7 ZMM28=000000700000006f 0000006e0000006d 0000006c0000006b 0000006a00000069 0000006800000067 0000006600000065 0000006400000063 0000006200000061 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7709000077090000 7709000077090000 7709000077090000 7709000077090000 7709000077090000 7709000077090000 7709000077090000 7709000077090000