last executing test programs: 11.455591315s ago: executing program 3 (id=957): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='yeah\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x218) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) 10.575777015s ago: executing program 3 (id=966): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000640)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)="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", 0x184}, {&(0x7f00000002c0)="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", 0x24c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="938c7959c30c3a8360d9cf9f5abc7996d0294cc485e6ffe94060313e03e303c3588576a9f5fe18afe3", 0x29}, {&(0x7f0000000180)="e7db2694a0f20332333bf9e1b08e425662d0f73c95b220adb7c69c801318da5c9561d694cdb3315c7097ed1396a78e08833ea03dfc58a3a7b03ccceb04a35e4ab9aa6a38e2acd711d29f645b66e274363adf3b2d2667556e132757f28a21bffb8c628f51c0845fb9b03defb1730dc946dbd6cf8a07ec63fa6accedbecf7ecbeadeffb4bc4b331d", 0x87}, {&(0x7f0000000680)="d98c27606c6a145b0819a5599ab2429ea2a9c4bb7a5268594cf1c6ebf02909ce9971117be87a7876c85e282c411ab4ed2ecc1f3325c8dd4f412c6f9f6f3b17506701905987a9143324", 0x49}, {&(0x7f0000000700)}], 0x4}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 7.417143893s ago: executing program 3 (id=982): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) socket$inet6_udp(0xa, 0x2, 0x0) fanotify_init(0x2, 0x0) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(r1, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x16bd, &(0x7f0000002380), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r4, &(0x7f0000000b80)=[{&(0x7f0000000580)=""/85, 0x69}], 0x1, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pselect6(0x40, &(0x7f00000045c0)={0x4, 0x2, 0x4, 0x0, 0x0, 0xfffffffffffffff9, 0x81, 0x8}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8012, r3, 0x0) syz_fuse_handle_req(r1, &(0x7f0000002400)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.088604614s ago: executing program 3 (id=992): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000640)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)="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", 0x184}, {&(0x7f00000002c0)="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", 0x24c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="938c7959c30c3a8360d9cf9f5abc7996d0294cc485e6ffe94060313e03e303c3588576a9f5fe18afe3", 0x29}, {&(0x7f0000000180)="e7db2694a0f20332333bf9e1b08e425662d0f73c95b220adb7c69c801318da5c9561d694cdb3315c7097ed1396a78e08833ea03dfc58a3a7b03ccceb04a35e4ab9aa6a38e2acd711d29f645b66e274363adf3b2d2667556e132757f28a21bffb8c628f51c0845fb9b03defb1730dc946dbd6cf8a07ec63fa6accedbecf7ecbeadeffb4bc4b331d", 0x87}, {&(0x7f0000000680)="d98c27606c6a145b0819a5599ab2429ea2a9c4bb7a5268594cf1c6ebf02909ce9971117be87a7876c85e282c411ab4ed2ecc1f3325c8dd4f412c6f9f6f3b17506701905987a9143324", 0x49}, {&(0x7f0000000700)="417692fb30aacae044b5c8836d1ea765b7adfa05215094e8858c102d2b73b973002b3e19046784846c8777a52cb8866f4c7f7340c8f96638", 0x38}], 0x4}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 4.787994189s ago: executing program 2 (id=1004): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000b000900053582c137153e37000c0180fc0b1d00f80b", 0x33fe0}], 0x1}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r6, @ANYBLOB="05003400fa0000000a000600"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0x5, &(0x7f0000000040)=0x5, 0x4) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f00000000c0), 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r9, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r10, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xfd, 0x39}}}}, [""]}, 0x28}}, 0x4040880) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r12, 0x5452, &(0x7f0000000080)=0xc) 3.523285382s ago: executing program 0 (id=1008): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f00000001c0)=0x5, 0x4) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) dup(r6) r7 = fcntl$dupfd(r4, 0x0, r5) syz_io_uring_setup(0x2c, &(0x7f0000000200)={0x0, 0xfffffffd, 0x2beecfa0c773429d, 0xfffffffc, 0x163}, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x2}, 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x30) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 3.438025391s ago: executing program 2 (id=1009): r0 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x4000172, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001380)='\x00', 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001480)={0x0, 0x7ff, 0x4}, 0x8) ioperm(0x0, 0x9, 0x7) timer_getoverrun(0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000180)="769a59238c7c5e9ef78318302a381722d1", 0x11) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000480)=[@in6={0xa, 0x4e23, 0x5, @remote, 0x2}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x0, @private2, 0x7}, @in6={0xa, 0x4e22, 0x3a3b386e, @mcast2, 0x5d}, @in6={0xa, 0x4e23, 0x2, @local, 0x7}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}], 0xbc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002140)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r6, @ANYBLOB="00000000ff0000001c0016801800018014000b00feffffff"], 0x40}}, 0x0) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r9, 0x1000069) r10 = request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\x00', 0xfffffffffffffffc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r10) connect$unix(r8, &(0x7f0000000640)=@file={0x1}, 0x6e) 3.298142385s ago: executing program 2 (id=1010): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e1050000008906000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3332be2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfdff}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x94) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x2, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x622, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x12dc01, 0x0) write$FUSE_WRITE(r2, &(0x7f00000000c0)={0x18}, 0x18) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000580)=0x20000000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000000c0)={r5, 0x10}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000540)={r5, 0x1}, 0x8) 3.007112075s ago: executing program 3 (id=1011): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x1f00) 3.006829369s ago: executing program 3 (id=1012): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) init_module(0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) write$char_usb(r1, &(0x7f0000000200)='V', 0x1) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x110, r0, 0xf0299000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_on}], [], 0x2c}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setresuid(r4, r4, r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r5, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000f9ffff4a7ae79600000000e3583c5b18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000007b000000bca900000000000035090100980000009500000000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 2.527621054s ago: executing program 0 (id=1014): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000acb4b67f0e616cef00008500000039000000a70000004cef664377be54f3000000009500"/72], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0x10, 0x803, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4e8, 0x0, 0x0, 0x2a8, 0x0, 0x1e8, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@inet=@esp={{0x30}, {[0x4d5, 0x4d4], 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x23, 0x6, @broadcast, 0x4e23}}}, {{@uncond, 0x0, 0xb8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x3f, 0x6, [0x1, 0x3a, 0x27, 0x16, 0x13, 0x2b, 0x26, 0xe, 0x2d, 0xa, 0x23, 0x22, 0xb, 0x25, 0x20, 0x2], 0x0, 0x0, 0x1}}}, {{@ip={@empty, @local, 0xff, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x16, 0x3, 0x51}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "0d13", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x4}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x0, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x1, 0x1}}}, {{@ip={@remote, @loopback, 0xff000000, 0x0, 'ip6tnl0\x00', 'vlan0\x00', {0xff}, {}, 0x33, 0x2, 0x56}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) getsockname$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$@|k', @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf2549000000080001005a00000008000300", @ANYRES32=r0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x9054}, 0x4000001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x7fffffff, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x2}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x74}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x0, @in6=@loopback}}, 0xe4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYRES64=r4]) write$sndseq(r5, 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)) epoll_pwait(r6, &(0x7f0000001280)=[{}], 0x1, 0xffffffff, 0x0, 0x0) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) syz_emit_ethernet(0x5e, &(0x7f0000000bc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004f0000500000000000069078ac1e0001ac1e0001881222378318b736e48dfc691baba367e3464410050300000000000000000000000086060000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0400000000000000"], 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000280)={'wlan1\x00'}) 2.428101562s ago: executing program 2 (id=1015): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x5e, 0x40, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x22100, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x4, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x16, 0x0, 0x0, 0xc}) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.368139525s ago: executing program 2 (id=1016): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$qat_adf_ctl(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000300)) r2 = eventfd(0xffff8001) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x29, 0x49, 0x0, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe01000000000000", 0x1c) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) quotactl_fd$Q_SYNC(r7, 0xffffffff80000100, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 1.618208718s ago: executing program 0 (id=1017): r0 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000180)="769a59238c7c5e9ef78318302a381722d1", 0x11) 1.617744327s ago: executing program 0 (id=1018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) socket$inet6_udp(0xa, 0x2, 0x0) fanotify_init(0x2, 0x0) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(r1, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x16bd, &(0x7f0000002380), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r4, &(0x7f0000000b80)=[{&(0x7f0000000580)=""/85, 0x69}], 0x1, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x2, 0x1}, 0x0, &(0x7f0000000140)) pselect6(0x40, &(0x7f00000045c0)={0x4, 0x2, 0x4, 0x0, 0x0, 0xfffffffffffffff9, 0x81, 0x8}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8012, r3, 0x0) syz_fuse_handle_req(r1, &(0x7f0000002400)="e5764a472ca256e4fa5b5c56951c8f08af5d99e71897669c71fa860cf20a75629af1256217099aca1bda14ba0aa9883f48db9ed5a33a3461dbad1b0cb88d915c13c46e3255dbcef87241d6e8bbdc0af465b5e10de7397890f60b7d673da3f4ada9fd0137de4362bb6075b0b60baa3480333acfd9bc4462c5a0ffb0c0db5d5ce6e5417030c6329e4e0668ccd1f4194092e759ed68ff784037033e0506fdcacd90c7f7ab82d418ff94dd32be27529b78f97f5a6e7617bec7306cc9907ced4a784a573da93140b49f73d9ad5d1058eac72ec68148d31397864a0b1050d28785a85a6acc3c646387d2566ff475585803538cb6d0d538505a48750034348a5e59b542c4c447b81e5bb821986f7b7ea2b5d484d0d015c4fe348942338c81fc84e5d3c9176dbfbfaff46d8ffdbe07755c44efdd2b07deae0312853736e0505a57c977334f43d0d7f6330924af8231eaf28da538745381d650ec1c2112eb5559aa618440bb5b32971e86cd5028035ebfe231b056206a13885da986a6ab7eb272f6a9ce00787c55e9d3e89895ccd3c3200b8a6f762c93b92bdea11733c02c07b42570e9eca34963c1e7df374283ab2cb95dfee7b22623cac2e4be2f09a5707b2df557f1e041296a3c830f4b01749e9996afbd9c29db8febca4aa67b541fca5b9a80231ff8f8da50db95870f39c717e14548248af8948ee0c56dd6f85f7d4f1fa3d979029130813ac8ea51d7736434346b387c02fa3b0620d6aa765e58af683dc7cb7e8b4bf4b53ceddc289e3dec9ff8ea5eededf4fbe3e2204b1a3f1f2a70563aa0db8ca938d23aab42570eb97a03e420f14d1e32b2ae3927c4fd58be2154e5bc8b6aca8aafbe9bad78a6d0177c6f42ea763969339d55424b2f84233f4aaf0f51ca58934b4845cc2a91f774a180bf38bc1b7fe917dc1652f924074a7343e7e07bae9de7823b9ac60e06ad9a89749715c3902f644fa284574bfa606f2d4e0113695d51ac90af285aa80647798f7f552786d72ad8251a11022780e5d4eb01255e74f40ca3826b4cbfb2fce8f482bdec9b50b3c1b50751e5424f53d5be1277cd1ddf0f15b452f04011b4de6d6ad5913b76713f527282eb9ff75187b281433df4b121b5b0c75a37e438608a4ae937060d7996b193ad52cc3d8850846273a94e3d718070064757c0374845a81d70ae139fc9af3df467437a0e0a8a058bcc0feeaf8d4379a690e3f7f96757827d1ff02e9dd287715fef9a5bc48399e102e804a4fe6cc7d04a0381a15c15f2409d1421fd52246b95b936be5327f4d03d172faa82d1198f8693b2385aadee482c2e2cfaf674d2d30953d65bd6bc7016fa22cead75c9f0bf24157020aad51c75d1c8b09830adc0f59a0da7ccfac3b0b7518dee240e32c81d30a62b50a170fbd510197ba1bfc4456aff6383d01624779e54131bb5aec4a0c1c09dae5951b5a62a2f8a1742bea3877adef6c8db75ba03f6730d770f460c686cc93032b4ab56db7a61d3b3f6e2d68b60de52daa2e922ae8207069f090261a7fab9d18ba52c1d191dd8949b3ac13082b9a4faffdce6a0fdb61ba07ceefd3242a228408598c4b4d7f5dbddfe3143221ac6bf7ca0cbe917d011cee0d5cf596c649e06fdabe45098b15fc27f3fd5a39ce9cab4bd3efe65837d600c7fbc3e91538dc54722636f918dd236274bd0aaad67f20adda5c565e793d4b24585ec4e4fdb315e3ed3de851a716ae8bcca394b1db7b467f88e490e75ed204cfaf507fb4740fe8b4e2d59f012c7ed42afc62e6ee446efe39c19bd0767f3691fdd5b8dbe89a040f407e7e6be6adc327d4bee9d8f4cc38731f024ec50dea800a18b9eb86643d10ce4cb8a867803d063093eec9df6656d924096a1554dc6ad7d5c5f35bfb51b404b7f6d82d545eea9d5ab6afb885cf59db15bbb6ed8dc8a6f6d6cf296a61308de0f91cf594def1df755db2385760d2973a381f49bc27138bb065ea75d203b25f543d07786d6d7b022785a5bb718dbdcd3021631b34f7722d9e835c235298e12151c59d1fc14fe36adc8257d7d2dd0dd5b02cabaae66dd7d9b18d8c2f45abe593baa6cb06d88bc5e4eeb573064761beb2163a2be2e6d39499d0b4ceaa5cfde49897e84b1fb0fea6a8ae061e90f16054e6cac934584ecac1706972a59de70b140fdd675764f5218b4553c964d095583335b744947de42bd7adaf22ca0199b12593d82ac4661449725fb1ed1693c36e91304c7a7f27357813bb388b5962c11ab282d8ac2e6c1f2f7bdc1838d75dbd67e7961ab4be3f052eb69664829bf85b13621965e72f86ac82992319a9cf70ad965b68f58ed889834c2aa20eec8e89a95bc1a92df6db2264f6ec7133567325b530212b05622225129c0fa5fa47f61fbc01b3d84cdbbe7bc597c953bf6c1c95e70eabe95cfc154d0d8fb9f3364e4c5fa6b2a0220fd2b0b3f472a925491f4b5c0259ee1730169e8503972d42f60b9380533d08750bf69a06913bed2fbfdcdcc2a7b727a33533242effa756ee8ebede0a64da858db32f3b6a9f37d3aea3dbf762a881e183308b41b3cb439ac8908811c3a57a45e65b9b21c25635c2fe4c3aff7da65b9c90ea47a3b906fba85464718c771387e29118f15d54b63694828f6377bc59bf5f1181027dca4c959eb27e060e9039a5f1fb955b332c9aebcc89be493185c15fdf9a9c74f96e5bba7d192d3263aaf701d36c37323780f1037930d2a2cb58591fa29acd2760e0873151c4570959df1106f435d2fc3a4f897186acf0a0f7be957b5b8efdf892abf99e4ec02a8e957707278c9ce279f1aa1c0f6f3f40e876a3b08959ea6a2f1c7ceb17fe599b33851d6fc4b93254379f0bf28e9954c8abc7151e110a38966f11defe13597bb30c003f6b98d88978c242f57ed3022360d686a0e762b035ba6eca21c86701953c2ffb4d0e9e259c29fb922a4f9138898e038e6925543c6c20777e18a5fadfa3a30ad55c6b8ae42489356764a7ada4565a73128dd7686ebd6a5d599c1f87a70e0534f16eb76dbf3c88e87772ebc7eaf27be2d693e86cdbb93029d9174872997bbc884adb46f6f3b7b560eb0da7ce0a2f0643c6271988321fd6a6597cf904beb1bc2c058c631b927b36fb938000031d79fd3e670746f89d0eea812b3f7e3007eb2f9ca952c1f794b1761d8f3f3e92b15869e9ff431d6280821bcaf374e636a16e1bdf721fff722287e135518163c78921b00e593a5d80efce94766cb197f224839ccebb7316c1f9471454eae766c76708e7cfa1f73e178235858e0f507528d63861bd363d639794c0087b12ce94719c5aa4778c0da6eca565b2c880a5b17cd42e852193e1962dd94862ba8e1f44831a8f708fdd8d03933e2967bd54571c0e8c2305288d87586cf621dc95c7e8d3f3264aea0ca799e098f0efb7ca9c42b686907b8a9da68c1e3e53274461ec3f4d1b60e5a6abf5f126d397ee0f6919e20950127ea092bad9af0c295b1133fb1fa39d974e1523d86f3bb23d238db4b5d025aeb59b7ffbce90ad38f4326a2dadc62b4ab9c62451126ab2a19221367f8bdae9abbbee8acd94f644e0cec7b4535bf4885f677400e727db3fa21cffbf5225e8c2c59bd03b09dd6a3141c6c2bacec5e6232e9f2534947d40ee7250e73fa700d475a58781878d46b91ecaa464af77282b5fe4581720e850e6c6cd720eff24e7fdd682cb278e3994ebd2502ef99d41d473244ac1acca4c36a1f2a0667fb784997c229e0ecd9b70bf3925ec1ca6ebaaa2c33a1e21fd099bd964fa1892b08096b7804fd588627ad549a62806352aeb49f4dbd3ff001e8f08f6dbe04aaa73aec27a822a1ccf03f08c08517c1af8111366ddc19fada67ce1c31092421c8306929fdcfaeeb60c0527a1a800a1317e569fb6fd88f2245c3334f638b4b6665e7f2c6961b6594792218d3398f3cab22250f4be8e8700a57e1dc044f93701239016638ae6c21d53eb42d235ebe03f891e92111462de50b153e60e34263b09beb1dde74f488333d704bee63f67370de17b86c0541b9f4cb02fa2fc0e61f14273f6a3085068e945634440b65bc55fb48b35d763f27cc21eb37009f37c6548de6e6b75bf5d73ebe77ad4926bf03389a6e69d3d67fd40a821a224fb0b27ec005693aa3fc94cfc9ee8ab2ba3555bf1ec303cda06e2f092dd6be7f36befa648a81d953012fa9d09c9931d3e2cd1bf15449c3f93ce091bf4aa345fde77bde9c01bc0aba57f4a78ff383f96296043a40dcd9585a92aa07338ddeaa6809847ee28388c2bdf24d2ade550b0468648628211a99a5d124460533cf99458b0ac138683bb627b44dd3a93caa7d221d9792d63e2908516577885af4d13e5ab08a12307d4a17bbf84dd32ce5d5700cadf01bc297ed0013e1fd44899e0dab47a468099dfdb231588bf007d1544ea6701037b97746dd975535b1e7e37f285e8f4b56a297921513fef951341a5344384d97245f0269b047e02f2e8c6adcfc4d31721d566e1a5cb1b3e73d3f676c7e50cc1294d265b0c4427878c0b26800a7e9dd7d013912bdecd03be666ee2b540c1d70939c7df13f11a44e7d166c4fd3d60394a91c7a9044d141227b052f73f081141200a713af7f7f218ca478ed4448181e8c02ce0f093899620106af2d0d8896df8c5f075741bdd28571b34d5f0c2f89fc46f0900da9c9ed0bd9ad92aa5ec6e351ab7cf8e6da3242a38543e556f7ca1743b8a9cb983b4be8e4d082cea0862aa3bd9f1a03042db0875d2ea16248430575f8b6cfe03f7f4ee35465fad4c3daa404a22469bd3b422c3a5d537e9a3cf0bac559fd51ed3c090bb7efd0569cea9650a1fd9c4479790055960ea5e81a637a47394f4e8cf708a1651a4b32fd0da280f20f39be7d60804de18a3ac86b54428121614953c74155b885c5eb81e2a846b9f795fd1d218866f668b83484995da516f876f7557133d34345ccf78b06d90b438e924eb0ddcfdb7ec8df40aaf65284037d739b3762b15a926f85e95c2fa10cbd0d36a3d1463723cf28fb9c2fa175de373a5f555ec31d02bccc3fabd973e2f630a8c8bacf29beabfffd13b104158e2469a869294e92f7d682dcef4d5ddd388ce6eb4e10a64eae05d91725413e622dd6d313084d26a89e82e6b1394a1a20ee8c27981079611b56086199e888268a41d9f7a93e4a2e2e2bf6a37ee36112a15143789a38e77794e3c47b3313095448dff6de678ffbae2756a9f74b6d5107f2bb474850b845fc3ea7baa08f652e2d304197418e9d57de2686fd7dff13e3c6b9732597d0c8d15a8b80b99c951c1a2033c98cc6e155244974c420f80b7cb62dd5ce77f95a31c48f79d0353df38dac26ba9243e840dbc4c0ce343df6da7a9228e736baf181ce40adcc34170a56b2fd611de20a0d64f71320d2804ae0bbf937839690a1334358d0e9fb400e41cd718e29f0df31ca07ac5c64eba44ef0d13e362c09440114eabd7c2af6a6a75601fd7bf1d5ca7dd5fe09da13745db73d72792647ee8f3a5f6af295ad2d00df40b936aafd6780fbbcb194576af128ffd24fa5c135b8359f9fdbfbe9c626150528e62169a5f7f8490e90def090422d1f0f6417e38b22e8652181242e15b12b835a7ea89bf2693bfe4cbe486e15dd7e270883e4cb2901f41b3c4531c2c09c62c92ab85d666160f563e05c29c52347c88ac45384ed71bc1d5fdc67def268c2eec5768e1a219f483848be33aa7f508681729b583fc0a9345c1336f8799942214e821f801543fe7c2ab8dc52cb2107ef21ed9ccf4234df0a639b01a2621435a93876b399f07dd0e03ca699aa3aad421ccf84540ec4fc9402fb23bf5c555d3a34c72217d011e92d7e8e477e8786f5dedb503816dbeb5aab92e2888a0ca2da214b972ce0390fa9c7bccdc675bfbf5158ca30bcac7f650f1de05eb0a3846c6480289c28fce600a9d6c3dd9f480904497bbefd98e218347f46de84de345da1843e3f47063635a55645b9f9bb7829cf4ad7b434123593c9c3bce1f662975d37a9896be6dfc1f00b0a566adaecc57b8f5ff1eb9205480d1a6f08b2a46dfe1844a05a060b44bdd85cd93550b3fbc76c628c19bf6ce510e3e021145a8f81997679a6bdf841210101866cf0ebcc9ea2d34f58c0c91ecc813263dbfc72a1c188a42425ad88a8be82b9ea6367a996297c57c7ab89fac931822f501e529e583601ca6ec92613520c78e1baebb72745e4639b21162b6e71bdfd91623ad0633980c94cc733c113f25a8fc9d84c778d9cf0ec8120c2aca29578e8d9709240575e0009cd8fa84c98d9718a1d0d8efffd1229b74fe1d05024778df93b1d2db31ac5f18a06852e402165549ae0942554115b5add3d37b4f89cf78579b05bed44d5f358266abe7c78d79474cb6b3ec62b3ddcb2142bb4a19bb26ab92f66b240c38b0a7ac7c164558606f1bbec6977bf6700fbb3fedc09d4e388251ba8d4bbe7fc1eb5d47dec9a783e4543c664b97fd28a4f59dc3fe2e58e843b1f4aa4e5ccb06ee50608e3d39610f422924884df99c43cf2d5821eb16a476d75126d1107a75b20840873915b492f6e77bf40c09c51ef668ae71669ab49be50a885ed65b7a2641f143a7bdcdd35633779f0913e13d461b6fb1b15d2946ecf22e3008f2ad1fdb856da299e924f96566ce5184812d85641737cfef7aa447bd2c51b1d2e7f4f19a291fb20d1860dac1b0417478e5d0b244aac4262437910fb640a905a7b30853a40b83799e6677f1859ff90c8d7bf885923aa129b6917e5bc1647a99440f3317b5ca68aed8037809034ca38db679f2f108804a02a5383cb0be013849ed4d320e8bd9decdf2f109f6148142b8e5c504e2a01a1f5da2efe4d37712c7257785a2d7d3cb480b2f039768c6ff96a1be03bb0ef231b48d1cc83733387fb8628da569e4ea177e05fd49a6252c54e79bacf456de1dcacd37fd0dff3e763efdb5cd024a0be664af60b818de35206b792c986efec24924fecb2dd4f2b35f62c554572c3a1eed1d358bda4b9f7ba1b57cba1824914346461ed04a5f559fb1f5036179b7862f6a8e0cbb2ffc1190ea1e5172895103a3ad1c9d7e0836da723d88976d54520c045f5aee5c22c904143bd77fcebe94508d1b1cd552786678742c5fb9509b1b0301b997a0812a537a78e08af211b1e5d01c07b59b9b3a5d01850e05941c5d4a2bd5dc3a3c992b45908fa4b0178d838b467463dcff946bc6d48545ae40bb1080cac3c6fd6944d0099bdcab049c0e623e499f4a8799032c61ced17272264234a47edf1b3ae25c2988de8c9b98ded411544ce5eb5a273935eb1a437364d749462a40055ddfa62a8fdbc7a6c26a832a2c189a37348b5a3d24a637371d642d7dc6e6bbc9c937856f496b0e53c2a18bf9eca515d662ac3a9dadb56243e28916938b28af06f54e96a6095003f896a971076d738ca515d32c7e21cab0bd85e496a058d4db29f5ae50353bc61a30a5a517a071358f521fbf0cafb95c1fe1166a1778c15bb43c1288bf7f3bad6feddaeab14de1b8906718f167900bdeab2795323cc4f9a6d77a35176798a3ab27c3355f8a1d023dfc7070906060d0cc4556c04db5bf408beeea7fe7469dfad3c85a153ebade2709066d0e78172fe64e555d41259dd00da545ff59b3367116a46ac22e25ffdcbc3795776f554d978466498c8dd3d2cc115352c8bfca181a2a3fd12ec4b61dcd0e5b1cf02f6d2d490a74bf4ec989800aafcee06df27c968930cc1efe36b415db8171e5bdfb7db49237809e46d38b14199f568a0ffde0b237d753da9e98da14b397d206bcd1c28683a4089e8a37845f4e09a78f6309b533e497000fe128ff013f1f4797245ef4697e1a2e8979937b097eccbb547c7f553ad6eb48c7b1a683243fad52af0a72215909ce913d11e2ee5c2b0567e80ae525bc979c2d7f8535e6b4c615fd5a8486c2856fdf8e2d655bdcbcee6f1e324bcb6eec8329e4e0812e401c6453a118f9f75539cef47357e4a9de9f45e92a1acff4af09418350c735d833374fc5ddb14da4e54e70ce182978d7c2325d16e80d61b19bfe68dd24f5fe3c9561665757c7b6a5bf5e83e10eb516cd05613e4dd92ed3ed88b20d5296415a435597f238e95e2af59b8fb2eaffad91705d065a7ff040f0f8ddd9ee2b061d39dfa25f356dec3c755a1519e812e1974df360136aedd7e7548c87ed166f7baf50e4baae7b5693eeb3ee63f2689ace372d45466cc815cb11605bd453b2d918824c1b2f64e623e291c728a9e2e89c4d9cba3acd26af584c69945908c76259d299d3bb53e5b9ae821cfdde11a3de624cdaf569dc970d9af1174032d707b135e9bed30a638d3e13fe70520ad80e95ef39d5f6fb45b8edb017dd2b82b6c4656c546132df5b1c710e798133b15c4f05202e785c78150820f6ad47f6651c8df21bf5eb6ec851df349b13588e02220cdf25227bc63bf254b1e2364247adec4d5957a958da5577e3884754362d4c04b8985ba7f3827fd135a5978ee8a7ee2c0ca66755c1cbb76039b2821577b05636755e5474929b1db27e7088c0a4fc3f723f4427f4005bf4113d21c5fac806c1b9d0e78b1eba78ea74b55e3a4701d13074ed2324a9cc6dd16b21fe4a0b890cee10669b43775f55c73f38f44cbde28fa7dae1ba3c66ec25845f80be816ef93b66ef9c7b7ae86cc1580aa1ef612de516b302063aee622e03f47b0ba65532156634ac4511efcf53524e13e259f9786aefa745bef9eea6fb8c7a1f7556305f225f4cebb09306a97644112b8611e8e67476596de3db229fa3be432cdb2e1e4131cec8ea8c6d70395b374b85303e52cd6f23ecfea536b405b3aa065856b8530b3049acd7bb31ccbf9e02a8e4cdcca252142adc55563be912edcbc5a7210b7358dc9d9d2c9cdabe80de999de9cd40aa9f87295c549f42734a62df307f18c5d850774aab8df61042dd0add51554f7afaf4deb59f73c7238ddc78fdde7266fe479871f76cc037d822d23b3ccad7b591ee9b0c81eab7fe91a150b13f082674a6d079234ca4c1c2f49bc3b4df95a7ba7e9668c385b344060be72a39518c0685f8834fe1d37aa57a9109258f735a6143217166a2613a985f2e3a721b7e71a30a063c8b4f93898a2e4b478b513649a0cedda2a9f37b58145e0a75907d21a806e524a3f5e45297fd4c46280d951d8ada3a761f359164a5c0abb2573f0c65aac8b3542cc32f6a0bfb9484708a0caeefbf3616d03026c2f0614d17963de26d6db565cc463385d5872b5a865a517f55e0cdd817a8cb4f31aa2b1ea8c099ef96fb6d2e5864031d894b5923c474ff00aec195310b0c1aa82536e8e75dc9aba7605544ed86df31122aca480c22cb715ee8df04180e7d3040501379669f3de4adf2acf49a47b7564b52b85006430633fbcee176970d67857552ced405eae8ac2fa8e0c2d980795e7f854f842b811a919313d63164b04f8521225867d8af3ac59360ee7c5f8d3d0a738071a123a2a599c7e2bdbaa746c42f0af77e7b446ab223a0e585da5f403c9bd55a6af48fc8f2d251d5364652991ca7549e282ab85611807329bccfa8249bd600fae28b81ba815a798d12acdc97a2d6bfcae5833b6c0676ce65157675f28f73aeb10443c10c720398e3d75eb2cab9df437af68d25fe0fb282bbebf668da9a082c36889ee22bc13b1c2b9b7125c3270a87f09fe7da289906f7185d84064c5444fce22ab40d57ae504513019fe8e36bfe702083e545b94d1490000f9b5759cded7ca04415200c8e3bdc7a4534d73e8f97a757a2899d69132c3e0a4c7f5deed010e0c4f458c7f379810e304dd47548141ef906a7b96d939f61963d3fbc58b18c9de2903ffb7176025e38941e3e18398c5e387042d4f356d8d009225187cfe77bafb9316fd02e66f3469d4048e5b8f02188ae60f066e32c23ddebb2327996347c974cdf2f215037d96bfacbc7f1f65a95d66e60192d0d9d3902fd73935f281c3b3c50de162d0e9ca250278d32b810797de787fccb79e44e3e1a0a7e188b44971d41cc8fc11e9abb0b9a9cbd220b2c0a4f3fd8d7f8efddfe916bf3df7fc834453d32f61c850061d6d788c63d3f2dc42d0f54a64a09c0e1ffb51c15baef47c36ec8e319daa6ee46b51f2de27817b866a68b78089b5904bf1f9379990ac2a947f4c7dae0db2c17789e07d4b16f054889f6040709c812be047f53cec5fbc71d058772de66f539732abc8c7e75be4bbcec99119007493f6de01f68af52d2dbd594539c44ae4ec34908ef25ba46a02fc90d354a4a83cf2c588c4e1fe41966c0b2443875611cc9f21b08864ffa1f5072720eb756c4ff257e69e6e398b7e84a5904fc69db17879202ceb6c57fe6bd94ca578e3313a9a79538c840af82283a76dd7f53f5c3d8ec17c5be4c36136a53f0c46b14614e71dfe4ba7974ac4494311d4cda2fc7d0402acb637a9a6f491af9068c5c6fe71becfddb9fc07c785da5eddbb3a8100000000000000add53f35dffed09a2127d3e0c5e1057ccec567791d9ce6e8082f0beb7ae912a4b30804abfa5347be87c6eff4fdb70b3064011950efd0ef30b84ee4b00f9247c2005a2dfa8e1c78ba0006185e2feeaea7f2c77d11c7e85499306ba769e404b6e6f7a7e5b45199817b31423eb439c50d850b22c1b63c4831f8da7ed462b0f8827f44c05df2e24673b360a58477e77b4835fae97e7d6375f0ccb339b4549652f20efeff931d14c0688713e78c81387ca6706258f9589090f2c8a4ef9e2cceb1775673f43f61f68736c966f757e6239ec7eb8ea70140f2c967a5a9f80f88b410f160aa14e083f6ff90f3324c59e4eb043e86117c362469e9c55a4689b137ccb04089e5d1ed875332083c41e8e3b28aad11472190b6dfddc18685e492fcf0a9c1f2ee287f7f1044f0bc98a9ad230978f97710839d1fc3e9f150cb03da9a1f55c608124ed27aa6b4c2c3cb7388432e15b02e55e1fcacee563c11f4f0ed9549fcd95d931243b95b394963da03982228f29a9501d7f1df7e44fec415fa7dc0edc1ec86850feb9f0dcd2d9dba983bbf44ff312462c73afc49519eb7440cd7d26ae73a137ae1c2b166d94730bf964452b4c82a49d110f48a894a427dc2cc4dacd66524b137ff54b49ec2938c829bf8934769c076001b54f280f862935a0cee4d69b3c3bf7773f2a7a235f9f188901f655e7b0bf790cfe49f5f079b90e0bad0fdd25e0c302af3687ba1feb58f3d3e78c34cb11f3dc494ddf4702fc009fd7c9e2671730709f60b83c75c1fea0738cbf87a19eff5698a39ecc8c22218be5f9426b225b52e3020b6782ece5451b716c975996afd0fc20fdad4acd8836ffd14d0ae932589be8ddb2b21328cec26d7321cc4cd5a2a01562b597abdd7f81f326c0a0f849d11053e4909db9cd9d18cbd4bdcea72bda5cc1cea86283c8fdebd5e55087cecced746f424bdf4358b65c958b84a2436025996e105425ed4784e2de1602b3ead37b87f104178f5a9db22ccbdae040b01e69b72aabc59c10af1e7f48b6701705b433fec40bbc07846d4c66b16f300906635e4fbf8ba61f2700b1726c6a4c14573fbb16d1af58f6301b41f7022a4c84651354e057d9383ecc10c32f07d332ddca591fd2900", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.558719192s ago: executing program 1 (id=1019): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000640)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb65e44d4957b00ed35a858d44b25d5b8dad1be420467333d9ce17dddc425dad69c4c9395a5c170170a4fa63091786e2a563e3d5982a73c15edf854046e1a33b2728e74c856a58ba74c80f4f4166ac51d720f507c2c205ef5a04370c77928dfde47e15d533060084d4fc271eab837367369218b1bfc59752696396f49c2f58268", 0x184}, {&(0x7f00000002c0)="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", 0x24c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="938c7959c30c3a8360d9cf9f5abc7996d0294cc485e6ffe94060313e03e303c3588576a9f5fe18afe3", 0x29}, {&(0x7f0000000180)="e7db2694a0f20332333bf9e1b08e425662d0f73c95b220adb7c69c801318da5c9561d694cdb3315c7097ed1396a78e08833ea03dfc58a3a7b03ccceb04a35e4ab9aa6a38e2acd711d29f645b66e274363adf3b2d2667556e132757f28a21bffb8c628f51c0845fb9b03defb1730dc946dbd6cf8a07ec63fa6accedbecf7ecbeadeffb4bc4b331d", 0x87}, {&(0x7f0000000680)}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.523943605s ago: executing program 1 (id=1020): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @multicast2}, {0x1}, 0x1a, {0x2, 0x4e23, @empty}, 'veth0_macvtap\x00'}) (fail_nth: 2) 1.458109232s ago: executing program 1 (id=1021): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d5f549a}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000d40)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb65e44d4957b00ed35a858d44b25d5b8dad1be420467333d9ce17dddc425dad69c4c9395a5c170170a4fa63091786e2a563e3d5982a73c15edf854046e1a33b2728e74c856a58ba74c80f4f4166ac51d720f507c2c205ef5a04370c77928dfde47e15d533060084d4fc271eab837367369218b1bfc59752696396f49c2f58268", 0x184}, {&(0x7f0000001040)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96", 0xa3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000f00)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c432193989489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d40004000043b682d653bcf35d53fd33489a3a405042c0de04c24504000031e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc952fd91d2b4066fdc167ae016c1ea8", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="755ca9bd3fd87456466cd4ab09930a7972d7df968a6a6114f3db5548c265a1c0eadf9dc81f4de7a659bf2fd963b62ab6a3291b994ce3e68d29974cbd144ef4803bb11e49afd9e9f6c69e23d94b880d424a56af70b7b3f69ca07b85cd6fa37d39078bf235b355d36147cab8073e1818c615ae34fb38d8c92049fbd2d371eb493d8162d8836b8f9295d17e445e49134b4f94932984566c6d1d7b479a1d292cd39caf50ba08e39a6ac5b4d565b0f4eea211688dfcffad93d9c534ad1c8b2517dcf778797a45b32b88b7880c5122eff57a20ac7211b96753987c85f18d86103e0eb0d2266bd6e51695e6ad", 0xe9}, {&(0x7f0000000a40)="a874f71022111112ec5e2602f419e493ea5b4acf974d9283ee3375a461bb9065c90429ee1e99af0ae05a2cdf6095f3c3bcaf502fe5bc586d74a09a829064afeb21d6a37184cba31f9a404f96368db3439c616b32ca53867d1287a26ea498e4f743acd6252d1590999bc24f950e04e6a96c8637d150e4dca23239ce0412d084932196a057d6486b668c61dd5a01bb22529c0ae2eb008dea68a0770dc99559a527dd152975cbe3751d76d934cafa51e2d9c8cdea4d85e9d6f230d18ad14fdbd9b91a23af1d5d1342d6498847edc850375bd4d65a16c15a271706a98919a7", 0xdd}, {&(0x7f00000003c0)="1ab19edbe25b681773e891fc5c1afd98d5418010c767b52201c900942aa7e965955c", 0x22}, {&(0x7f00000008c0)="6d39fe15634188cee258d64a40c9632217ebadbbccd45f2017d5a1df94c14e8c48abc873f8", 0x25}], 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="800000000000000007000000070b450a010101ac1e000183073cac1e0101071b7dac1414bb64010101ac1414aaac1414bb00000000ac1414bb860916ba75d2956527442c2833ac1414bb00000003e000000100000004e0000002ffffff5dac1414bb0000cf107f000001000001ff8310bbded4a7067d627ba07946ab21900000100000000000000001000000000100000d0000000000000001000000000000000d"], 0xb0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001340)="565f22c57f868101817bab3ced7dd60d3ac9d1fbd7502a803953de3ac6782cfd4833d91253647e92361374f950b8e516af86e93064698099f5215219dd729140f4bd761d6830a236e974f7830cd904bed6f0", 0x52}], 0x1}}], 0x4, 0x4004880) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.358048248s ago: executing program 1 (id=1022): r0 = io_uring_setup(0x1b94, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x0, 0x370}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_open_dev$loop(0x0, 0x6, 0x82200) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r6, &(0x7f0000000040)={'#! ', './file0', [{0x20, '\t'}]}, 0xd) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf2, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, 0x45c) readv(0xffffffffffffffff, &(0x7f0000002300), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x48840, 0x0) 767.793414ms ago: executing program 2 (id=1023): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8541) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) syz_io_uring_setup(0x1868, 0x0, &(0x7f0000000000), 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d0001"], 0x30}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) read$sequencer(r5, &(0x7f0000000200)=""/125, 0x7d) r6 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f041}) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 500.163274ms ago: executing program 1 (id=1024): r0 = openat$vhost_vsock(0xffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, 0x0, 0xff3b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'wlan1\x00', 0x400}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0xc) socket$inet6(0xa, 0x800000000000002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r5], 0x20}}, 0x0) (fail_nth: 12) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x77}, 0x4048880) ioctl$F2FS_IOC_SET_PIN_FILE(r7, 0x4004f50d, &(0x7f0000000280)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@ld, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 127.523769ms ago: executing program 1 (id=1025): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) syz_usb_connect(0x3, 0x34, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001c00ffffffff00000000000002000000", @ANYRES32=r6, @ANYBLOB="080000000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e80)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5}]}}}]}, 0x3c}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0c00031000", @ANYRES16], 0xf) 438.986µs ago: executing program 0 (id=1026): r0 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000180)="769a59238c7c5e9ef78318302a381722d1", 0x11) 0s ago: executing program 0 (id=1027): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7000000002060503000000000000000000070000120003006269746d61703a69"], 0x70}}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000140)) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(r2, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/175, 0xaf}, {&(0x7f00000012c0)=""/207, 0xcf}, {&(0x7f00000013c0)=""/52, 0x34}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/31, 0x1f}, {&(0x7f00000014c0)=""/232, 0xe8}, {&(0x7f00000015c0)=""/57, 0x39}], 0x8, &(0x7f0000001640)=""/206, 0xce}, 0x5}, {{&(0x7f0000001740)=@xdp, 0x80, &(0x7f0000002940)=[{&(0x7f00000017c0)=""/90, 0x5a}, {&(0x7f0000001840)=""/27, 0x1b}, {&(0x7f0000001880)=""/140, 0x8c}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x4, &(0x7f0000002980)=""/119, 0x77}, 0x7f}, {{&(0x7f0000002a00)=@isdn, 0x80, &(0x7f0000003040)=[{&(0x7f0000002a80)=""/176, 0xb0}, {&(0x7f0000002b40)=""/177, 0xb1}, {&(0x7f0000002c00)}, {&(0x7f0000002c40)=""/156, 0x9c}, {&(0x7f0000002d00)=""/205, 0xcd}, {&(0x7f0000002e00)=""/72, 0x48}, {&(0x7f0000002e80)=""/205, 0xcd}, {&(0x7f0000002f80)=""/191, 0xbf}], 0x8, &(0x7f0000003080)=""/136, 0x88}}], 0x3, 0x2, &(0x7f00000031c0)={0x77359400}) r3 = io_uring_setup(0x7854, &(0x7f0000003200)={0x0, 0x39e3, 0x140a, 0x0, 0x1bd}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000032c0)={0xe000000, 0x0, &(0x7f0000003280)=[r2, r2]}, 0x2) writev(r1, &(0x7f00000001c0), 0x0) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r6, 0x40044145, 0x0) setresuid(0x0, r5, 0x0) inotify_init1(0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000002c00)='ipvlan1\x00') bind$packet(r7, 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @empty, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2f, 0x0, @private, @empty}}}}}}, 0x0) mount$9p_xen(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x28040, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=xend>\x00\x00\x00', @ANYRESDEC=r5, @ANYBLOB=',async,appraise_type=imasig,fsmagic=0x0000000000000008,smackfsroot=/dev/qrtr-tun\x00,\x00']) 0s ago: executing program 0 (id=1028): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40082) write$sndseq(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010040000000000000000000000a44000000090a010800000008000540000000250900020073797a300000100008004a4000000000090001b6b9f9151bd8e8950008000980040002801400000011"], 0x6c}}, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x18, &(0x7f0000000800)={r3, 0x1, 0x6, @local}, 0x10) sendto$packet(r4, &(0x7f0000000040)="0205000000040000060045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = fcntl$dupfd(r1, 0x0, r1) r6 = syz_io_uring_setup(0x2ddf, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5c6, &(0x7f00000005c0), &(0x7f0000000300)=0x0, &(0x7f0000000500)) r9 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r10, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0xa3d, 0x0, 0x0, 0x0, 0x0) r11 = io_uring_setup(0x1de4, &(0x7f00000007c0)) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0x15, 0x20000002, r12) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x40, 0x2004, @fd_index=0x4, 0x7ffffffffffffffe, &(0x7f0000000840)="093782a53b67f7cbd8024f49f8498b9aafd112cf67242c5545a79f14f1d688b2ee46a759c72bdb94f1d03ac68c82bc8332ed1814788aec8de9095454c6ed4953469881d02a9099b1c2b4a33ca3c8f21fcf2a815280f7fb4ca0a207cb71ec90b9e9c76c972154949735b7bd5b78b5db4578a32644e272571752ae4896572ea18ae787c4eec8cf5704e479b93aeea718ede82c12f5d9bf05d3094500e76c45b552ebace9debb1c7e746fab593bc7aa04ae643f2f179eaa8540c3782ab30f658f24c52efb99b3e65472f210b6c52297e41573947b0c3c552191", 0xd8, 0x15, 0x1, {0x0, r12}}) io_uring_enter(r6, 0x381b, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f00000000c0)={0x80, 0x8}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r13, 0x400452c8, &(0x7f0000000100)) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045505, &(0x7f00000000c0)={0x1}) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r14, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e22, 0x50e8, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x9}}, 0x0, 0x0, 0x47, 0x0, "5daec8116ee99422044282dbca52a18c99431a9a669372a995a5e9cca7d05c0870dbe1aa97990a8813ed80c8f9b4f7420c8153a201cf4f97a19dad731364307c04ade16464df9b1f4be5f4991ab90686"}, 0xd8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r15, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) kernel console output (not intermixed with test programs): -1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 129.935692][ T5351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.938765][ T5351] usb 8-1: config 0 descriptor?? [ 130.003642][ T7293] binder: 7292:7293 ioctl c0189378 20000140 returned -22 [ 130.005848][ T7293] binder: 7292:7293 ioctl c0306201 200003c0 returned -22 [ 132.033161][ T7313] netlink: 728 bytes leftover after parsing attributes in process `syz.2.580'. [ 132.035790][ T7313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.580'. [ 132.118814][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.121003][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.216204][ T7326] FAULT_INJECTION: forcing a failure. [ 132.216204][ T7326] name failslab, interval 1, probability 0, space 0, times 0 [ 132.220528][ T7326] CPU: 1 UID: 0 PID: 7326 Comm: syz.2.584 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 132.224111][ T7326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.227624][ T7326] Call Trace: [ 132.228761][ T7326] [ 132.229785][ T7326] dump_stack_lvl+0x16c/0x1f0 [ 132.231409][ T7326] should_fail_ex+0x497/0x5b0 [ 132.233033][ T7326] ? fs_reclaim_acquire+0xae/0x150 [ 132.234651][ T7326] should_failslab+0xc2/0x120 [ 132.236302][ T7326] kmem_cache_alloc_node_noprof+0x71/0x310 [ 132.238287][ T7326] ? __alloc_skb+0x2b3/0x380 [ 132.239893][ T7326] __alloc_skb+0x2b3/0x380 [ 132.241422][ T7326] ? __pfx___alloc_skb+0x10/0x10 [ 132.243112][ T7326] ? kasan_quarantine_put+0x10a/0x240 [ 132.244711][ T7326] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.246424][ T7326] ? kfree+0x14f/0x4b0 [ 132.247837][ T7326] mpls_netconf_notify_devconf+0x4a/0x110 [ 132.249549][ T7326] mpls_dev_notify+0x727/0xa20 [ 132.251199][ T7326] notifier_call_chain+0xb9/0x410 [ 132.252925][ T7326] ? __pfx_mpls_dev_notify+0x10/0x10 [ 132.254727][ T7326] call_netdevice_notifiers_info+0xbe/0x140 [ 132.256694][ T7326] unregister_netdevice_many_notify+0x8d5/0x1e50 [ 132.258829][ T7326] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 132.261081][ T7326] ? hlock_class+0x4e/0x130 [ 132.262638][ T7326] ? __pfx___nla_validate_parse+0x10/0x10 [ 132.264566][ T7326] ? unregister_netdevice_queue+0x22f/0x3f0 [ 132.266566][ T7326] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 132.268663][ T7326] ? __nla_parse+0x40/0x60 [ 132.270178][ T7326] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 132.272309][ T7326] rtnl_dellink+0x3c9/0xae0 [ 132.273888][ T7326] ? find_held_lock+0x2d/0x110 [ 132.275532][ T7326] ? __pfx_rtnl_dellink+0x10/0x10 [ 132.277242][ T7326] ? finish_task_switch.isra.0+0x212/0xcc0 [ 132.279247][ T7326] ? trace_contention_end+0xea/0x140 [ 132.281059][ T7326] ? __mutex_lock+0x1a6/0x9c0 [ 132.282639][ T7326] ? rtnetlink_rcv_msg+0x372/0xea0 [ 132.284389][ T7326] ? __pfx___mutex_lock+0x10/0x10 [ 132.286093][ T7326] ? rtnetlink_rcv_msg+0x35a/0xea0 [ 132.287831][ T7326] ? __pfx_rtnl_dellink+0x10/0x10 [ 132.289537][ T7326] rtnetlink_rcv_msg+0x3c7/0xea0 [ 132.291222][ T7326] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 132.293014][ T7326] ? __pfx___lock_acquire+0x10/0x10 [ 132.294795][ T7326] netlink_rcv_skb+0x165/0x410 [ 132.296461][ T7326] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 132.298343][ T7326] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.300165][ T7326] ? rcu_is_watching+0x12/0xc0 [ 132.301801][ T7326] netlink_unicast+0x53c/0x7f0 [ 132.303420][ T7326] ? __pfx_netlink_unicast+0x10/0x10 [ 132.305212][ T7326] ? __phys_addr_symbol+0x30/0x80 [ 132.306921][ T7326] ? __check_object_size+0x4a1/0x710 [ 132.308720][ T7326] netlink_sendmsg+0x8b8/0xd70 [ 132.310360][ T7326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.312182][ T7326] ? lock_acquire+0x2f/0xb0 [ 132.313758][ T7326] ____sys_sendmsg+0x9ae/0xb40 [ 132.315390][ T7326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.317182][ T7326] ? get_compat_msghdr+0x11b/0x170 [ 132.318929][ T7326] ? __pfx___lock_acquire+0x10/0x10 [ 132.320709][ T7326] ___sys_sendmsg+0x135/0x1e0 [ 132.322322][ T7326] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.324114][ T7326] ? lock_acquire+0x2f/0xb0 [ 132.325669][ T7326] ? __fget_files+0x40/0x3f0 [ 132.327251][ T7326] ? fdget+0x176/0x210 [ 132.328358][ T7326] __sys_sendmsg+0x117/0x1f0 [ 132.329599][ T7326] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.331095][ T7326] ? __fget_files+0x244/0x3f0 [ 132.332573][ T7326] __do_fast_syscall_32+0x73/0x120 [ 132.334111][ T7326] do_fast_syscall_32+0x32/0x80 [ 132.335757][ T7326] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.337416][ T7326] RIP: 0023:0xf7f98579 [ 132.338498][ T7326] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 132.343514][ T7326] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 132.345697][ T7326] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000240 [ 132.347779][ T7326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.349844][ T7326] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.351937][ T7326] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 132.354001][ T7326] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.356086][ T7326] [ 132.486300][ T5351] usbhid 8-1:0.0: can't add hid device: -71 [ 132.488171][ T5351] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 132.491271][ T5351] usb 8-1: USB disconnect, device number 10 [ 132.726179][ T30] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 132.856164][ T30] usb 7-1: device descriptor read/64, error -71 [ 133.096144][ T30] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 133.226138][ T30] usb 7-1: device descriptor read/64, error -71 [ 133.336450][ T30] usb usb7-port1: attempt power cycle [ 133.468474][ T7342] syz_tun: entered promiscuous mode [ 133.471035][ T7342] batadv_slave_0: entered promiscuous mode [ 133.475347][ T7342] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 133.478316][ T7342] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.486518][ T7342] syz_tun: left promiscuous mode [ 133.488423][ T7342] batadv_slave_0: left promiscuous mode [ 133.686753][ T30] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 133.718463][ T30] usb 7-1: device descriptor read/8, error -71 [ 133.966119][ T30] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 133.986646][ T30] usb 7-1: device descriptor read/8, error -71 [ 134.097224][ T30] usb usb7-port1: unable to enumerate USB device [ 134.796460][ T980] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 134.959108][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.962417][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.965111][ T980] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 134.967845][ T980] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.972368][ T980] usb 8-1: config 0 descriptor?? [ 136.117679][ T5368] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 136.120387][ T5368] Bluetooth: hci3: Injecting HCI hardware error event [ 136.123303][ T5368] Bluetooth: hci3: hardware error 0x00 [ 137.510261][ T980] usbhid 8-1:0.0: can't add hid device: -71 [ 137.512823][ T980] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 137.515704][ T980] usb 8-1: USB disconnect, device number 11 [ 137.538650][ T7400] netlink: 156 bytes leftover after parsing attributes in process `syz.3.609'. [ 137.541022][ T7400] netlink: 'syz.3.609': attribute type 2 has an invalid length. [ 137.543004][ T7400] netlink: 60 bytes leftover after parsing attributes in process `syz.3.609'. [ 137.682371][ T7408] Bluetooth: MGMT ver 1.23 [ 137.730515][ T7406] 9pnet_fd: Insufficient options for proto=fd [ 137.928983][ T7415] serio: Serial port ptm0 [ 138.196125][ T5368] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 138.407281][ T7403] [U]  [ 138.744008][ T7426] lo speed is unknown, defaulting to 1000 [ 138.745677][ T7426] lo speed is unknown, defaulting to 1000 [ 138.750236][ T7426] lo speed is unknown, defaulting to 1000 [ 138.754413][ T7426] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 138.760834][ T7426] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 138.774726][ T7426] lo speed is unknown, defaulting to 1000 [ 138.783279][ T7426] lo speed is unknown, defaulting to 1000 [ 138.785227][ T7426] lo speed is unknown, defaulting to 1000 [ 138.787778][ T7426] lo speed is unknown, defaulting to 1000 [ 138.906126][ T30] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 138.982561][ T4775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 138.985502][ T4775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 138.990137][ T4775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 138.993853][ T4775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 138.996871][ T4775] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 138.999040][ T4775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.021702][ T7432] lo speed is unknown, defaulting to 1000 [ 139.068821][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.071662][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.074169][ T30] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 139.076868][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.080267][ T30] usb 8-1: config 0 descriptor?? [ 139.089830][ T7432] chnl_net:caif_netlink_parms(): no params data found [ 139.186311][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.188711][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.191011][ T7432] bridge_slave_0: entered allmulticast mode [ 139.194153][ T7432] bridge_slave_0: entered promiscuous mode [ 139.198525][ T7432] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.200869][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.203167][ T7432] bridge_slave_1: entered allmulticast mode [ 139.205836][ T7432] bridge_slave_1: entered promiscuous mode [ 139.242698][ T7432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.248091][ T7432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.292235][ T7432] team0: Port device team_slave_0 added [ 139.299672][ T7432] team0: Port device team_slave_1 added [ 139.337498][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.339522][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.346778][ T7432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.352637][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.355248][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.364316][ T7432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.418248][ T7432] hsr_slave_0: entered promiscuous mode [ 139.421129][ T7432] hsr_slave_1: entered promiscuous mode [ 139.423514][ T7432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.426189][ T7432] Cannot create hsr debugfs directory [ 139.935373][ T7432] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 139.943274][ T7432] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 139.959145][ T7432] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 139.966357][ T7432] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.036024][ T7432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.052242][ T7432] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.061764][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.063667][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.074950][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.077412][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.292957][ T7432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.334306][ T7432] veth0_vlan: entered promiscuous mode [ 140.343328][ T7432] veth1_vlan: entered promiscuous mode [ 140.364733][ T7432] veth0_macvtap: entered promiscuous mode [ 140.370447][ T7432] veth1_macvtap: entered promiscuous mode [ 140.380971][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.384101][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.387664][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.390531][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.394758][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.401483][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.404239][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.407501][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.410344][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.414859][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.421846][ T7432] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.424650][ T7432] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.427467][ T7432] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.429925][ T7432] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.484128][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.490347][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.510250][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.512361][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.540410][ T7446] vlan2: entered allmulticast mode [ 140.542023][ T7446] vlan1: entered allmulticast mode [ 140.543378][ T7446] veth0_vlan: entered allmulticast mode [ 140.545304][ T7446] bridge0: port 3(vlan2) entered blocking state [ 140.550469][ T7446] bridge0: port 3(vlan2) entered disabled state [ 140.552781][ T7446] vlan2: entered promiscuous mode [ 140.554102][ T7446] vlan1: entered promiscuous mode [ 140.644249][ T7455] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 140.739504][ T7446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.745854][ T7446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.765118][ T7446] veth0_vlan: left allmulticast mode [ 140.770013][ T7446] vlan1: left allmulticast mode [ 140.771954][ T7446] vlan1: left promiscuous mode [ 140.792721][ T7446] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.795000][ T7446] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.799502][ T7446] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.801811][ T7446] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.906610][ T5395] lo speed is unknown, defaulting to 1000 [ 140.908748][ T7454] bridge_slave_0: left allmulticast mode [ 140.910329][ T7454] bridge_slave_0: left promiscuous mode [ 140.912210][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.915688][ T7454] bridge_slave_1: left allmulticast mode [ 140.917343][ T7454] bridge_slave_1: left promiscuous mode [ 140.918963][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.922438][ T7454] bond0: (slave bond_slave_0): Releasing backup interface [ 140.925539][ T7454] bond0: (slave bond_slave_1): Releasing backup interface [ 140.931268][ T7454] team0: Port device team_slave_0 removed [ 140.935258][ T7454] team0: Port device team_slave_1 removed [ 140.937907][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.940958][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.945136][ T7454] bond0: (slave netdevsim0): Releasing backup interface [ 140.951900][ T7454] vlan2: left promiscuous mode [ 140.954642][ T7454] bridge0: port 3(vlan2) entered disabled state [ 140.960233][ T7456] pim6reg: entered allmulticast mode [ 141.076266][ T5368] Bluetooth: hci4: command tx timeout [ 141.677554][ T30] usbhid 8-1:0.0: can't add hid device: -71 [ 141.682426][ T30] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 141.689146][ T30] usb 8-1: USB disconnect, device number 12 [ 142.229570][ T7505] evm: overlay not supported [ 142.287523][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 142.456167][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 142.465484][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.468442][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.470976][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 142.475365][ T25] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 142.477876][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.482783][ T25] usb 5-1: config 0 descriptor?? [ 142.913292][ T25] HID 045e:07da: Invalid code 65791 type 1 [ 142.917820][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input12 [ 142.922875][ T25] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 143.122556][ T5351] usb 5-1: USB disconnect, device number 16 [ 143.156205][ T5368] Bluetooth: hci4: command tx timeout [ 143.677029][ T7507] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 143.966167][ T5351] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 144.073415][ T7522] netlink: 9 bytes leftover after parsing attributes in process `syz.2.642'. [ 144.082252][ T7522] gretap0: entered promiscuous mode [ 144.127416][ T5351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.130080][ T5351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.132410][ T5351] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 144.134613][ T5351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.138414][ T5351] usb 5-1: config 0 descriptor?? [ 144.362526][ T5351] usbhid 5-1:0.0: can't add hid device: -71 [ 144.364295][ T5351] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 144.370488][ T5351] usb 5-1: USB disconnect, device number 17 [ 144.983690][ T7532] netlink: 156 bytes leftover after parsing attributes in process `syz.0.645'. [ 144.986211][ T7532] netlink: 'syz.0.645': attribute type 2 has an invalid length. [ 144.988360][ T7532] netlink: 60 bytes leftover after parsing attributes in process `syz.0.645'. [ 145.236280][ T4775] Bluetooth: hci4: command tx timeout [ 145.494615][ T591] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.583644][ T591] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.606958][ T5353] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.616216][ T5353] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.620269][ T5353] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.624060][ T5353] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.637973][ T5353] Bluetooth: hci0: command 0x0c20 tx timeout [ 145.639954][ T5368] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 145.640320][ T5353] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.643797][ T5353] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.662834][ T591] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.677541][ T7548] lo speed is unknown, defaulting to 1000 [ 145.752984][ T591] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.759917][ T7548] chnl_net:caif_netlink_parms(): no params data found [ 145.818348][ T7548] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.820463][ T7548] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.822458][ T7548] bridge_slave_0: entered allmulticast mode [ 145.825998][ T7548] bridge_slave_0: entered promiscuous mode [ 145.830869][ T7548] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.832987][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.835326][ T7548] bridge_slave_1: entered allmulticast mode [ 145.838566][ T7548] bridge_slave_1: entered promiscuous mode [ 145.872020][ T7548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.875673][ T7548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.913799][ T7548] team0: Port device team_slave_0 added [ 145.920855][ T7548] team0: Port device team_slave_1 added [ 145.962311][ T591] bridge_slave_1: left allmulticast mode [ 145.964140][ T591] bridge_slave_1: left promiscuous mode [ 145.967418][ T591] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.972578][ T591] bridge_slave_0: left allmulticast mode [ 145.974237][ T591] bridge_slave_0: left promiscuous mode [ 145.975945][ T591] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.266598][ T591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.271973][ T591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.275452][ T591] bond0 (unregistering): Released all slaves [ 146.279567][ T7548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.281410][ T7548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.288394][ T7548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.318137][ T7548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.320092][ T7548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.336684][ T7548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.353727][ T591] tipc: Disabling bearer [ 146.357665][ T591] tipc: Left network mode [ 146.382832][ T7548] hsr_slave_0: entered promiscuous mode [ 146.384909][ T7548] hsr_slave_1: entered promiscuous mode [ 146.389250][ T7548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.391405][ T7548] Cannot create hsr debugfs directory [ 146.496429][ T7565] FAULT_INJECTION: forcing a failure. [ 146.496429][ T7565] name failslab, interval 1, probability 0, space 0, times 0 [ 146.500043][ T7565] CPU: 0 UID: 0 PID: 7565 Comm: syz.3.655 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 146.502890][ T7565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.505987][ T7565] Call Trace: [ 146.506907][ T7565] [ 146.507923][ T7565] dump_stack_lvl+0x16c/0x1f0 [ 146.509186][ T7565] should_fail_ex+0x497/0x5b0 [ 146.510441][ T7565] ? fs_reclaim_acquire+0xae/0x150 [ 146.511962][ T7565] should_failslab+0xc2/0x120 [ 146.513215][ T7565] kmem_cache_alloc_node_noprof+0x71/0x310 [ 146.514760][ T7565] ? __alloc_skb+0x2b3/0x380 [ 146.516006][ T7565] __alloc_skb+0x2b3/0x380 [ 146.517207][ T7565] ? __pfx___alloc_skb+0x10/0x10 [ 146.518519][ T7565] ? lock_acquire+0x2f/0xb0 [ 146.519740][ T7565] netlink_alloc_large_skb+0x69/0x130 [ 146.521231][ T7565] netlink_sendmsg+0x689/0xd70 [ 146.522668][ T7565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.524078][ T7565] ? lock_acquire+0x2f/0xb0 [ 146.525278][ T7565] ____sys_sendmsg+0x9ae/0xb40 [ 146.526546][ T7565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.527967][ T7565] ? get_compat_msghdr+0x11b/0x170 [ 146.529304][ T7565] ? __pfx___lock_acquire+0x10/0x10 [ 146.530664][ T7565] ___sys_sendmsg+0x135/0x1e0 [ 146.531964][ T7565] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.533340][ T7565] ? lock_acquire+0x2f/0xb0 [ 146.534541][ T7565] ? __fget_files+0x40/0x3f0 [ 146.535766][ T7565] ? fdget+0x176/0x210 [ 146.536849][ T7565] __sys_sendmsg+0x117/0x1f0 [ 146.538072][ T7565] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.539439][ T7565] ? __fget_files+0x244/0x3f0 [ 146.540691][ T7565] __do_fast_syscall_32+0x73/0x120 [ 146.542100][ T7565] do_fast_syscall_32+0x32/0x80 [ 146.543395][ T7565] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.545062][ T7565] RIP: 0023:0xf743e579 [ 146.546164][ T7565] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 146.551250][ T7565] RSP: 002b:00000000f572656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 146.553457][ T7565] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 146.555538][ T7565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.557611][ T7565] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.559690][ T7565] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 146.561765][ T7565] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.563857][ T7565] [ 146.807811][ T591] hsr_slave_0: left promiscuous mode [ 146.809768][ T591] hsr_slave_1: left promiscuous mode [ 146.812952][ T591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.815153][ T591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.818024][ T591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.821223][ T591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.849076][ T591] veth1_macvtap: left promiscuous mode [ 146.850852][ T591] veth0_macvtap: left promiscuous mode [ 146.852511][ T591] veth1_vlan: left promiscuous mode [ 146.854088][ T591] veth0_vlan: left promiscuous mode [ 146.924274][ T591] pim6reg (unregistering): left allmulticast mode [ 147.002371][ T7582] netlink: zone id is out of range [ 147.020123][ T7582] netlink: set zone limit has 4 unknown bytes [ 147.316174][ T4775] Bluetooth: hci4: command tx timeout [ 147.719722][ T4775] Bluetooth: hci3: command tx timeout [ 147.726171][ T4775] Bluetooth: hci0: command 0x0c20 tx timeout [ 147.843713][ T591] team0 (unregistering): Port device team_slave_1 removed [ 147.975423][ T591] team0 (unregistering): Port device team_slave_0 removed [ 148.856771][ T591] team0 (unregistering): Port device batadv0 removed [ 149.078738][ T7595] ubi0: attaching mtd0 [ 149.081269][ T7595] ubi0: scanning is finished [ 149.082506][ T7595] ubi0: empty MTD device detected [ 149.202287][ T7600] bridge0: port 3(ipvlan2) entered blocking state [ 149.213538][ T7600] bridge0: port 3(ipvlan2) entered disabled state [ 149.215367][ T7600] ipvlan2: entered allmulticast mode [ 149.218754][ T7600] bridge0: entered allmulticast mode [ 149.224085][ T7600] ipvlan2: left allmulticast mode [ 149.225503][ T7600] bridge0: left allmulticast mode [ 149.355381][ T7595] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 149.362378][ T7595] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 149.364306][ T7595] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 149.396401][ T7595] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 149.398447][ T7595] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 149.400269][ T7595] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 149.404599][ T7595] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3546543669 [ 149.408126][ T7595] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 149.411393][ T7607] ubi0: background thread "ubi_bgt0d" started, PID 7607 [ 149.412374][ T7596] ubi0: detaching mtd0 [ 149.440919][ T7548] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.447074][ T7548] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.447568][ T7596] ubi0: mtd0 is detached [ 149.460422][ T7548] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.468061][ T7548] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 149.515297][ T7548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.541893][ T7548] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.549307][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.551357][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.555230][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.557218][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.679169][ T7548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.711626][ T7548] veth0_vlan: entered promiscuous mode [ 149.715867][ T7548] veth1_vlan: entered promiscuous mode [ 149.731822][ T7548] veth0_macvtap: entered promiscuous mode [ 149.735695][ T7548] veth1_macvtap: entered promiscuous mode [ 149.747644][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.750486][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.755375][ T7548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.759430][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.762215][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.765640][ T7548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.775414][ T7548] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.777806][ T7548] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.780245][ T7548] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.782572][ T7548] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.806365][ T4775] Bluetooth: hci3: command tx timeout [ 149.910762][ T7598] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 149.914203][ T7598] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 149.925955][ T7598] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 149.929356][ T7598] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.931371][ T7598] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 149.935026][ T7598] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 149.948154][ T7598] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 149.950319][ T7598] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 149.953602][ T7598] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 149.959356][ T7598] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 149.961024][ T7598] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 149.964004][ T7598] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 149.982898][ T1213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.985001][ T1213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.012092][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.016163][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.183070][ T7635] random: crng reseeded on system resumption [ 150.193978][ T7635] Restarting kernel threads ... done. [ 150.326147][ T30] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 150.498025][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.500945][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.503535][ T30] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 150.505925][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.517035][ T30] usb 7-1: config 0 descriptor?? [ 150.777386][ T30] usbhid 7-1:0.0: can't add hid device: -71 [ 150.781103][ T30] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 150.786688][ T30] usb 7-1: USB disconnect, device number 17 [ 151.316279][ T4775] Bluetooth: hci0: command 0x0c20 tx timeout [ 151.947271][ T8] kernel write not supported for file /sg0 (pid: 8 comm: kworker/0:0) [ 151.957712][ T4775] Bluetooth: hci4: command 0x0c1a tx timeout [ 151.957961][ T5353] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.046106][ T5353] Bluetooth: hci3: command 0x0419 tx timeout [ 152.112876][ T4775] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.115869][ T4775] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.120732][ T4775] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.124981][ T4775] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.127817][ T4775] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.129830][ T4775] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.154617][ T7665] lo speed is unknown, defaulting to 1000 [ 152.228498][ T7665] chnl_net:caif_netlink_parms(): no params data found [ 152.307580][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.309754][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.311966][ T7665] bridge_slave_0: entered allmulticast mode [ 152.314574][ T7665] bridge_slave_0: entered promiscuous mode [ 152.319542][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.321536][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.323540][ T7665] bridge_slave_1: entered allmulticast mode [ 152.325711][ T7665] bridge_slave_1: entered promiscuous mode [ 152.326166][ T5361] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 152.363900][ T7665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.370045][ T7665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.408404][ T7665] team0: Port device team_slave_0 added [ 152.416887][ T7665] team0: Port device team_slave_1 added [ 152.433745][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.435615][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.442310][ T7665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.445785][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.447765][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.454423][ T7665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.478223][ T5361] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.481069][ T5361] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.483596][ T5361] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 152.485939][ T5361] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.491778][ T7665] hsr_slave_0: entered promiscuous mode [ 152.493857][ T5361] usb 7-1: config 0 descriptor?? [ 152.499987][ T7665] hsr_slave_1: entered promiscuous mode [ 152.503672][ T7665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.505699][ T7665] Cannot create hsr debugfs directory [ 152.724663][ T5361] usbhid 7-1:0.0: can't add hid device: -71 [ 152.727022][ T5361] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 152.736596][ T5361] usb 7-1: USB disconnect, device number 18 [ 152.867516][ T7665] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 152.871744][ T7665] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 152.874883][ T7665] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 152.887672][ T7665] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 152.899977][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.901888][ T7665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.903866][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.905727][ T7665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.928065][ T7665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.934897][ T591] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.938388][ T591] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.953054][ T7665] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.962993][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.964876][ T1213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.969150][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.971325][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.057893][ T7665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.080939][ T7665] veth0_vlan: entered promiscuous mode [ 153.085103][ T7665] veth1_vlan: entered promiscuous mode [ 153.098581][ T7665] veth0_macvtap: entered promiscuous mode [ 153.103106][ T7665] veth1_macvtap: entered promiscuous mode [ 153.114587][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.117451][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.122757][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.127419][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.132257][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.139780][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.142555][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.146292][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.149075][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.152513][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.159991][ T7665] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.162098][ T7665] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.164144][ T7665] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.166407][ T7665] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.196825][ T591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.202455][ T591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.215275][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.219825][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.316601][ T7687] lo speed is unknown, defaulting to 1000 [ 153.406496][ T5353] Bluetooth: hci0: command 0x0c20 tx timeout [ 153.408328][ T7683] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 153.530814][ T7687] veth0_vlan: left promiscuous mode [ 153.535885][ T7687] veth0_vlan: entered promiscuous mode [ 153.549410][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 153.554970][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.682'. [ 154.039370][ T5353] Bluetooth: hci4: command 0x0c1a tx timeout [ 154.046167][ T5353] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.126297][ T5353] Bluetooth: hci3: command 0x0419 tx timeout [ 154.196198][ T5353] Bluetooth: hci5: command tx timeout [ 154.615277][ T7719] sctp: [Deprecated]: syz.1.690 (pid 7719) Use of int in maxseg socket option. [ 154.615277][ T7719] Use struct sctp_assoc_value instead [ 154.680867][ T7722] netlink: 156 bytes leftover after parsing attributes in process `syz.1.691'. [ 154.685232][ T7722] netlink: 'syz.1.691': attribute type 2 has an invalid length. [ 154.687377][ T7722] netlink: 60 bytes leftover after parsing attributes in process `syz.1.691'. [ 154.757451][ T30] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 154.939695][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.942632][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.945223][ T30] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 154.947637][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.950778][ T30] usb 7-1: config 0 descriptor?? [ 155.170852][ T30] usbhid 7-1:0.0: can't add hid device: -71 [ 155.173681][ T30] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 155.181598][ T30] usb 7-1: USB disconnect, device number 19 [ 155.487969][ T5353] Bluetooth: hci0: command 0x0c20 tx timeout [ 156.126626][ T5353] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.126658][ T5368] Bluetooth: hci4: command 0x0c1a tx timeout [ 156.166084][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.206205][ T5368] Bluetooth: hci3: command 0x0419 tx timeout [ 156.276139][ T5368] Bluetooth: hci5: command 0x041b tx timeout [ 156.331182][ T7749] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 156.908800][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.700'. [ 157.556183][ T5368] Bluetooth: hci0: command 0x0c20 tx timeout [ 157.696106][ T35] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 157.857268][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.859856][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.864400][ T35] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 157.867009][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.872463][ T35] usb 7-1: config 0 descriptor?? [ 158.084835][ T35] usbhid 7-1:0.0: can't add hid device: -71 [ 158.086387][ T35] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 158.092051][ T35] usb 7-1: USB disconnect, device number 20 [ 158.255596][ T7777] netlink: 52 bytes leftover after parsing attributes in process `syz.3.709'. [ 158.276732][ T5368] Bluetooth: hci3: command 0x0419 tx timeout [ 158.357117][ T5368] Bluetooth: hci5: command 0x041b tx timeout [ 158.941323][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 159.000944][ T7788] FAULT_INJECTION: forcing a failure. [ 159.000944][ T7788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.013016][ T7788] CPU: 1 UID: 0 PID: 7788 Comm: syz.1.711 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 159.015822][ T7788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.018658][ T7788] Call Trace: [ 159.019560][ T7788] [ 159.020345][ T7788] dump_stack_lvl+0x16c/0x1f0 [ 159.021609][ T7788] should_fail_ex+0x497/0x5b0 [ 159.022910][ T7788] _copy_from_iter+0x29b/0x13e0 [ 159.024719][ T7788] ? __pfx__copy_from_iter+0x10/0x10 [ 159.026357][ T7788] ? __virt_addr_valid+0x1a4/0x590 [ 159.027730][ T7788] ? __virt_addr_valid+0x5e/0x590 [ 159.029073][ T7788] ? __phys_addr_symbol+0x30/0x80 [ 159.030414][ T7788] ? __check_object_size+0x488/0x710 [ 159.031850][ T7788] netlink_sendmsg+0x813/0xd70 [ 159.033143][ T7788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.034538][ T7788] ? lock_acquire+0x2f/0xb0 [ 159.035757][ T7788] ____sys_sendmsg+0x9ae/0xb40 [ 159.037056][ T7788] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.038463][ T7788] ? get_compat_msghdr+0x11b/0x170 [ 159.039815][ T7788] ? __pfx___lock_acquire+0x10/0x10 [ 159.041216][ T7788] ___sys_sendmsg+0x135/0x1e0 [ 159.042480][ T7788] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.044167][ T7788] ? lock_acquire+0x2f/0xb0 [ 159.045519][ T7788] ? __fget_files+0x40/0x3f0 [ 159.046820][ T7788] ? fdget+0x176/0x210 [ 159.047965][ T7788] __sys_sendmsg+0x117/0x1f0 [ 159.049233][ T7788] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.050524][ T7788] ? __fget_files+0x244/0x3f0 [ 159.051802][ T7788] __do_fast_syscall_32+0x73/0x120 [ 159.053159][ T7788] do_fast_syscall_32+0x32/0x80 [ 159.054448][ T7788] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.056167][ T7788] RIP: 0023:0xf7f41579 [ 159.057185][ T7788] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 159.062187][ T7788] RSP: 002b:00000000f56a556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 159.064489][ T7788] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000020000680 [ 159.066521][ T7788] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.068795][ T7788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.070798][ T7788] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 159.072872][ T7788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.074875][ T7788] [ 159.101897][ T7791] FAULT_INJECTION: forcing a failure. [ 159.101897][ T7791] name failslab, interval 1, probability 0, space 0, times 0 [ 159.105579][ T7791] CPU: 2 UID: 0 PID: 7791 Comm: syz.2.712 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 159.108235][ T7791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.110917][ T7791] Call Trace: [ 159.111796][ T7791] [ 159.112546][ T7791] dump_stack_lvl+0x16c/0x1f0 [ 159.113756][ T7791] should_fail_ex+0x497/0x5b0 [ 159.114958][ T7791] ? fs_reclaim_acquire+0xae/0x150 [ 159.116260][ T7791] should_failslab+0xc2/0x120 [ 159.117460][ T7791] __kmalloc_cache_noprof+0x6b/0x310 [ 159.118806][ T7791] ? mpi_alloc+0x46/0x230 [ 159.119918][ T7791] mpi_alloc+0x46/0x230 [ 159.120996][ T7791] mpi_read_raw_data+0x133/0x4a0 [ 159.122295][ T7791] ? crypto_dh_decode_key+0x3d1/0x490 [ 159.123724][ T7791] ? trace_kmalloc+0x2d/0xe0 [ 159.124955][ T7791] dh_set_secret+0x197/0x410 [ 159.126180][ T7791] ? __pfx_dh_set_secret+0x10/0x10 [ 159.127536][ T7791] ? crypto_alloc_tfmmem.isra.0+0xd2/0x110 [ 159.129074][ T7791] ? crypto_alloc_tfm_node+0x126/0x260 [ 159.130508][ T7791] __keyctl_dh_compute+0x4ec/0xf50 [ 159.131885][ T7791] ? __pfx___lock_acquire+0x10/0x10 [ 159.133258][ T7791] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 159.134773][ T7791] ? arch_scale_cpu_capacity+0x15/0xb0 [ 159.136224][ T7791] ? __pfx_lock_release+0x10/0x10 [ 159.137554][ T7791] ? trace_lock_acquire+0x14a/0x1d0 [ 159.138930][ T7791] compat_keyctl_dh_compute+0x161/0x1d0 [ 159.140403][ T7791] ? __pfx_compat_keyctl_dh_compute+0x10/0x10 [ 159.142003][ T7791] ? ksys_write+0x1ad/0x260 [ 159.143212][ T7791] __do_compat_sys_keyctl+0x27b/0x440 [ 159.144634][ T7791] __do_fast_syscall_32+0x73/0x120 [ 159.145987][ T7791] do_fast_syscall_32+0x32/0x80 [ 159.147296][ T7791] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.148961][ T7791] RIP: 0023:0xf73de579 [ 159.150051][ T7791] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 159.155085][ T7791] RSP: 002b:00000000f56a556c EFLAGS: 00000296 ORIG_RAX: 0000000000000120 [ 159.157261][ T7791] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000020000080 [ 159.159335][ T7791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 159.161393][ T7791] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.163456][ T7791] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 159.165514][ T7791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.167588][ T7791] [ 159.786927][ T591] bond0 (unregistering): Released all slaves [ 159.927204][ T7795] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 160.077926][ T591] hsr_slave_0: left promiscuous mode [ 160.419098][ T5354] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 160.446194][ T4775] Bluetooth: hci5: command 0x041b tx timeout [ 160.567349][ T5354] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.570279][ T5354] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.572976][ T5354] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 160.575571][ T5354] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.581342][ T5354] usb 8-1: config 0 descriptor?? [ 161.521905][ T7820] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 162.528876][ T4775] Bluetooth: hci5: command 0x041b tx timeout [ 162.798000][ T7840] overlayfs: invalid origin (0000007900ff0000000000000000000000000000000000000000000000000000000000000000000000000000) [ 163.143727][ T5354] usbhid 8-1:0.0: can't add hid device: -71 [ 163.145866][ T5354] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 163.160088][ T5354] usb 8-1: USB disconnect, device number 13 [ 163.174924][ T7850] FAULT_INJECTION: forcing a failure. [ 163.174924][ T7850] name failslab, interval 1, probability 0, space 0, times 0 [ 163.178380][ T7850] CPU: 2 UID: 0 PID: 7850 Comm: syz.3.730 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 163.181894][ T7850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.184702][ T7850] Call Trace: [ 163.185838][ T7850] [ 163.186839][ T7850] dump_stack_lvl+0x16c/0x1f0 [ 163.188450][ T7850] should_fail_ex+0x497/0x5b0 [ 163.190043][ T7850] ? fs_reclaim_acquire+0xae/0x150 [ 163.191794][ T7850] should_failslab+0xc2/0x120 [ 163.193584][ T7850] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 163.195022][ T7850] ? security_file_alloc+0x34/0x2b0 [ 163.196419][ T7850] security_file_alloc+0x34/0x2b0 [ 163.197752][ T7850] init_file+0x93/0x230 [ 163.198863][ T7850] alloc_empty_file+0x91/0x1e0 [ 163.200149][ T7850] alloc_file_pseudo+0x13d/0x200 [ 163.201473][ T7850] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 163.202917][ T7850] sock_alloc_file+0x50/0x1d0 [ 163.204184][ T7850] do_accept+0x29c/0x530 [ 163.205317][ T7850] ? __pfx_do_accept+0x10/0x10 [ 163.206592][ T7850] __sys_accept4+0x102/0x1c0 [ 163.207831][ T7850] ? __pfx___sys_accept4+0x10/0x10 [ 163.209178][ T7850] ? __pfx_ksys_write+0x10/0x10 [ 163.210462][ T7850] __ia32_sys_accept4+0x94/0x100 [ 163.211792][ T7850] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 163.213521][ T7850] __do_fast_syscall_32+0x73/0x120 [ 163.214875][ T7850] do_fast_syscall_32+0x32/0x80 [ 163.216173][ T7850] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.217842][ T7850] RIP: 0023:0xf743e579 [ 163.218923][ T7850] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 163.223913][ T7850] RSP: 002b:00000000f572656c EFLAGS: 00000296 ORIG_RAX: 000000000000016c [ 163.226092][ T7850] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 163.228157][ T7850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.230213][ T7850] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.232296][ T7850] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 163.234361][ T7850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.236532][ T7850] [ 163.261813][ T7850] syz.3.730 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 163.304369][ T7853] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 164.596158][ T5354] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 164.748726][ T5354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.752382][ T5354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.755628][ T5354] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 164.776174][ T5354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.781548][ T5354] usb 5-1: config 0 descriptor?? [ 164.826436][ T30] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 164.956143][ T30] usb 8-1: device descriptor read/64, error -71 [ 165.005697][ T5354] usbhid 5-1:0.0: can't add hid device: -71 [ 165.007427][ T5354] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 165.017698][ T5354] usb 5-1: USB disconnect, device number 18 [ 165.143234][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 165.196184][ T30] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 165.326118][ T30] usb 8-1: device descriptor read/64, error -71 [ 165.438422][ T30] usb usb8-port1: attempt power cycle [ 165.776130][ T30] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 165.796096][ T73] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 165.798795][ T30] usb 8-1: device descriptor read/8, error -71 [ 165.946165][ T73] usb 5-1: Using ep0 maxpacket: 8 [ 165.950503][ T73] usb 5-1: config 0 has no interfaces? [ 165.953413][ T73] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 165.955854][ T73] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.960368][ T73] usb 5-1: Product: syz [ 165.961514][ T73] usb 5-1: Manufacturer: syz [ 165.962758][ T73] usb 5-1: SerialNumber: syz [ 165.964918][ T73] usb 5-1: config 0 descriptor?? [ 166.036405][ T30] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 166.056543][ T30] usb 8-1: device descriptor read/8, error -71 [ 166.166272][ T30] usb usb8-port1: unable to enumerate USB device [ 166.223841][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.741'. [ 166.231661][ T4775] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 166.233858][ T4775] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 166.297872][ T5361] usb 5-1: USB disconnect, device number 19 [ 167.717678][ T7919] sctp: [Deprecated]: syz.0.751 (pid 7919) Use of int in max_burst socket option deprecated. [ 167.717678][ T7919] Use struct sctp_assoc_value instead [ 167.736108][ T5399] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 167.746809][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.752'. [ 167.894967][ T5399] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.906125][ T5399] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.908657][ T5399] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 167.910983][ T5399] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.916530][ T5399] usb 8-1: config 0 descriptor?? [ 168.698120][ T7931] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.700151][ T7931] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.772904][ T7931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.784396][ T7931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.827923][ T7931] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.830327][ T7931] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.832702][ T7931] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.835037][ T7931] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.865610][ T7934] bridge_slave_0: left allmulticast mode [ 168.867261][ T7934] bridge_slave_0: left promiscuous mode [ 168.868882][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.872449][ T7934] bridge_slave_1: left allmulticast mode [ 168.874094][ T7934] bridge_slave_1: left promiscuous mode [ 168.875925][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.882553][ T7934] bond0: (slave bond_slave_0): Releasing backup interface [ 168.888136][ T7934] bond0: (slave bond_slave_1): Releasing backup interface [ 168.895260][ T7934] team0: Port device team_slave_0 removed [ 168.902411][ T7934] team0: Port device team_slave_1 removed [ 168.904234][ T7934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.908082][ T7934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.910984][ T7936] netlink: 36 bytes leftover after parsing attributes in process `syz.1.756'. [ 170.277276][ T4775] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 170.280881][ T4775] Bluetooth: hci4: Injecting HCI hardware error event [ 170.284415][ T5368] Bluetooth: hci4: hardware error 0x00 [ 170.441044][ T5399] usbhid 8-1:0.0: can't add hid device: -71 [ 170.443261][ T5399] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 170.451308][ T5399] usb 8-1: USB disconnect, device number 18 [ 171.486225][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 171.659206][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.662207][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.664803][ T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 171.667302][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.670826][ T9] usb 6-1: config 0 descriptor?? [ 171.709500][ T8001] FAULT_INJECTION: forcing a failure. [ 171.709500][ T8001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.713205][ T8001] CPU: 2 UID: 0 PID: 8001 Comm: syz.0.775 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 171.716188][ T8001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 171.718997][ T8001] Call Trace: [ 171.719919][ T8001] [ 171.720722][ T8001] dump_stack_lvl+0x16c/0x1f0 [ 171.722021][ T8001] should_fail_ex+0x497/0x5b0 [ 171.723484][ T8001] _copy_from_user+0x30/0xf0 [ 171.724808][ T8001] get_compat_msghdr+0xa8/0x170 [ 171.726230][ T8001] ? __pfx_get_compat_msghdr+0x10/0x10 [ 171.727693][ T8001] ? __pfx___lock_acquire+0x10/0x10 [ 171.729041][ T8001] ___sys_sendmsg+0x1b0/0x1e0 [ 171.730311][ T8001] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.731741][ T8001] ? lock_acquire+0x2f/0xb0 [ 171.732986][ T8001] ? __fget_files+0x40/0x3f0 [ 171.734521][ T8001] ? fdget+0x176/0x210 [ 171.735625][ T8001] __sys_sendmsg+0x117/0x1f0 [ 171.736885][ T8001] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.738179][ T8001] ? __fget_files+0x244/0x3f0 [ 171.739433][ T8001] __do_fast_syscall_32+0x73/0x120 [ 171.740769][ T8001] do_fast_syscall_32+0x32/0x80 [ 171.742034][ T8001] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.743848][ T8001] RIP: 0023:0xf7f62579 [ 171.744961][ T8001] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 171.749796][ T8001] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 171.752051][ T8001] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 171.754464][ T8001] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.756541][ T8001] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.758600][ T8001] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 171.760626][ T8001] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.762595][ T8001] [ 171.876871][ T8008] netlink: 44 bytes leftover after parsing attributes in process `syz.2.778'. [ 171.891662][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 171.893394][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 171.896615][ T9] usb 6-1: USB disconnect, device number 19 [ 172.356195][ T5368] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 172.496847][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 172.646233][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 172.652786][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.655752][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.659998][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.662623][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.673018][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.675625][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.884761][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 172.887105][ T9] usbtmc 7-1:16.0: can't read capabilities [ 173.090908][ T9] usb 7-1: USB disconnect, device number 21 [ 173.284766][ T8044] netlink: 'syz.0.791': attribute type 22 has an invalid length. [ 173.287179][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'. [ 173.294072][ T8044] netlink: 'syz.0.791': attribute type 22 has an invalid length. [ 173.536318][ T5354] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 173.687201][ T5354] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 173.691451][ T5354] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.694187][ T5354] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.697067][ T5354] usb 5-1: config 0 interface 0 has no altsetting 0 [ 173.699627][ T5354] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.701947][ T5354] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.704897][ T5354] usb 5-1: config 0 interface 0 has no altsetting 0 [ 173.707559][ T5354] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.709877][ T5354] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.712703][ T5354] usb 5-1: config 0 interface 0 has no altsetting 0 [ 173.715351][ T5354] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.718606][ T5354] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.721489][ T5354] usb 5-1: config 0 interface 0 has no altsetting 0 [ 173.723982][ T5354] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.726544][ T5354] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.729353][ T5354] usb 5-1: config 0 interface 0 has no altsetting 0 [ 173.733082][ T5354] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.737564][ T5354] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.740441][ T5354] usb 5-1: config 0 interface 0 has no altsetting 0 [ 173.742936][ T5354] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.745244][ T5354] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.749112][ T5354] usb 5-1: config 0 interface 0 has no altsetting 0 [ 173.751684][ T5354] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.754447][ T5354] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.758140][ T5354] usb 5-1: config 0 interface 0 has no altsetting 0 [ 173.761336][ T5354] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 173.763836][ T5354] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 173.765995][ T5354] usb 5-1: Product: syz [ 173.767283][ T5354] usb 5-1: Manufacturer: syz [ 173.768512][ T5354] usb 5-1: SerialNumber: syz [ 173.771858][ T5354] usb 5-1: config 0 descriptor?? [ 173.776569][ T5354] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 173.823589][ T8059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.797'. [ 173.916477][ T39] audit: type=1326 audit(1728582580.635:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.1.797" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x0 [ 174.654747][ T8069] tipc: Started in network mode [ 174.656998][ T8069] tipc: Node identity ac1414aa, cluster identity 4711 [ 174.659787][ T8069] tipc: Enabled bearer , priority 10 [ 175.490376][ T8070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.657094][ T7459] tipc: Node number set to 2886997162 [ 176.036296][ C2] usb 5-1: yurex_control_callback - control failed: -2 [ 176.068337][ T7459] usb 5-1: USB disconnect, device number 20 [ 176.085881][ T7459] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 176.476709][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 176.637351][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.640184][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.643017][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.646603][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.649080][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.652080][ T9] usb 7-1: config 0 descriptor?? [ 177.059574][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 177.063716][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 177.065689][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 177.067762][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 177.069677][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 177.071598][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 177.073673][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 177.075596][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 177.077891][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 177.079804][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 177.081702][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 177.083598][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 177.085661][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 177.087977][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 177.089884][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 177.092030][ T9] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 177.099172][ T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 177.332896][ T5354] usb 7-1: USB disconnect, device number 22 [ 177.656119][ T73] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 177.829621][ T73] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.837254][ T73] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.841726][ T73] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 177.847639][ T73] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.852756][ T73] usb 6-1: config 0 descriptor?? [ 178.043744][ T8127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.079849][ T73] usbhid 6-1:0.0: can't add hid device: -71 [ 178.085277][ T73] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 178.093410][ T73] usb 6-1: USB disconnect, device number 20 [ 178.639782][ T8130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.818'. [ 178.645680][ T8130] trusted_key: syz.1.818 sent an empty control message without MSG_MORE. [ 179.305061][ T8134] tipc: Started in network mode [ 179.311614][ T8134] tipc: Node identity ffffffff, cluster identity 4711 [ 179.316350][ T8134] tipc: Node number set to 4294967295 [ 180.736202][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 180.764890][ T8157] vlan2: entered allmulticast mode [ 180.766996][ T8157] vlan1: entered allmulticast mode [ 180.768362][ T8157] veth0_vlan: entered allmulticast mode [ 180.770688][ T8157] bridge0: port 3(vlan2) entered blocking state [ 180.772423][ T8157] bridge0: port 3(vlan2) entered disabled state [ 180.774551][ T8157] vlan2: entered promiscuous mode [ 180.775888][ T8157] vlan1: entered promiscuous mode [ 180.777818][ T8157] bridge0: port 3(vlan2) entered blocking state [ 180.779497][ T8157] bridge0: port 3(vlan2) entered forwarding state [ 180.817446][ T8157] bridge0: port 3(vlan2) entered disabled state [ 180.819547][ T8157] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.821929][ T8157] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.892896][ T8157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.898143][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.901327][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.903207][ T8157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.904195][ T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 180.909107][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.915868][ T9] usb 6-1: config 0 descriptor?? [ 180.941747][ T8157] veth0_vlan: left allmulticast mode [ 180.944773][ T8157] vlan1: left allmulticast mode [ 180.946345][ T8157] vlan1: left promiscuous mode [ 180.966669][ T8157] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.969000][ T8157] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.971336][ T8157] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.973626][ T8157] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.995588][ T8158] bridge_slave_0: left allmulticast mode [ 180.998242][ T8158] bridge_slave_0: left promiscuous mode [ 180.999786][ T8158] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.003397][ T8158] bridge_slave_1: left allmulticast mode [ 181.004822][ T8158] bridge_slave_1: left promiscuous mode [ 181.006771][ T8158] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.010206][ T8158] bond0: (slave bond_slave_0): Releasing backup interface [ 181.013314][ T8158] bond0: (slave bond_slave_1): Releasing backup interface [ 181.019970][ T8158] team0: Port device team_slave_0 removed [ 181.023132][ T8158] team0: Port device team_slave_1 removed [ 181.024740][ T8158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.027453][ T8158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.029647][ T8158] vlan2: left promiscuous mode [ 181.030934][ T8158] bridge0: port 3(vlan2) entered disabled state [ 181.192184][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 181.194531][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 181.200301][ T9] usb 6-1: USB disconnect, device number 21 [ 181.512803][ T8163] netlink: 44 bytes leftover after parsing attributes in process `syz.3.828'. [ 182.719007][ T8186] vlan2: entered allmulticast mode [ 182.838891][ T8187] bridge_slave_0: left allmulticast mode [ 182.843518][ T8187] bridge_slave_0: left promiscuous mode [ 182.848892][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.851982][ T8187] bridge_slave_1: left allmulticast mode [ 182.853456][ T8187] bridge_slave_1: left promiscuous mode [ 182.854971][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.874367][ T8187] bond0: (slave bond_slave_0): Releasing backup interface [ 182.881796][ T8187] bond0: (slave bond_slave_1): Releasing backup interface [ 182.911782][ T8187] team0: Port device team_slave_0 removed [ 182.917760][ T8187] team0: Port device team_slave_1 removed [ 182.928412][ T8187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.935770][ T8187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.456342][ T5351] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 184.606223][ T5351] usb 6-1: Using ep0 maxpacket: 8 [ 184.611574][ T5351] usb 6-1: config 0 has no interfaces? [ 184.614414][ T5351] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 184.616979][ T5351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.619049][ T5351] usb 6-1: Product: syz [ 184.620096][ T5351] usb 6-1: Manufacturer: syz [ 184.621333][ T5351] usb 6-1: SerialNumber: syz [ 184.623355][ T5351] usb 6-1: config 0 descriptor?? [ 184.860339][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.849'. [ 184.871132][ T5368] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 185.097232][ T980] usb 6-1: USB disconnect, device number 22 [ 185.665483][ T8235] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 186.551683][ T8251] ubi0: attaching mtd0 [ 186.553279][ T8251] ubi0: scanning is finished [ 186.599746][ T8251] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 186.601754][ T8251] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 186.603658][ T8251] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 186.606745][ T8251] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 186.609128][ T8251] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 186.611869][ T8251] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 186.614729][ T8251] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3546543669 [ 186.618378][ T8251] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 186.621298][ T8252] ubi0: background thread "ubi_bgt0d" started, PID 8252 [ 186.621302][ T8253] ubi0: detaching mtd0 [ 186.627432][ T8253] ubi0: mtd0 is detached [ 187.384414][ T8251] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.393487][ T8251] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.395139][ T8251] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 187.402399][ T8251] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 187.418707][ T8251] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 188.566263][ T980] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 188.596204][ T30] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 188.717571][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.720544][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.723168][ T980] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 188.725593][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.730008][ T980] usb 6-1: config 0 descriptor?? [ 188.756489][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 188.759410][ T30] usb 7-1: config 0 has no interfaces? [ 188.764325][ T30] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 188.767029][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.769906][ T30] usb 7-1: Product: syz [ 188.771327][ T30] usb 7-1: Manufacturer: syz [ 188.772592][ T30] usb 7-1: SerialNumber: syz [ 188.775083][ T30] usb 7-1: config 0 descriptor?? [ 188.836200][ T4775] Bluetooth: hci2: command 0x0c1a tx timeout [ 188.970575][ T980] usbhid 6-1:0.0: can't add hid device: -71 [ 188.972227][ T980] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 188.982612][ T980] usb 6-1: USB disconnect, device number 23 [ 189.022790][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.863'. [ 189.031385][ T4775] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 189.034549][ T4775] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 189.098757][ T9] usb 7-1: USB disconnect, device number 23 [ 189.398043][ T4775] Bluetooth: hci5: command 0x041b tx timeout [ 189.556106][ T30] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 189.707580][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.710398][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.712907][ T30] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 189.715285][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.725181][ T30] usb 5-1: config 0 descriptor?? [ 191.053938][ T8301] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 191.476307][ T4775] Bluetooth: hci5: command 0x041b tx timeout [ 192.269346][ T30] usbhid 5-1:0.0: can't add hid device: -71 [ 192.273210][ T30] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 192.283601][ T30] usb 5-1: USB disconnect, device number 21 [ 192.716170][ T30] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 192.880561][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.886454][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.890326][ T30] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 192.892999][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.899044][ T30] usb 5-1: config 0 descriptor?? [ 193.076270][ T4775] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 193.078826][ T4775] Bluetooth: hci3: Injecting HCI hardware error event [ 193.081791][ T4775] Bluetooth: hci3: hardware error 0x00 [ 193.567383][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.569159][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.571222][ T5368] Bluetooth: hci5: command 0x041b tx timeout [ 195.166265][ T4775] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 195.302320][ T30] usbhid 5-1:0.0: can't add hid device: -71 [ 195.304081][ T30] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 195.310664][ T30] usb 5-1: USB disconnect, device number 22 [ 195.386465][ T8343] tipc: Started in network mode [ 195.388152][ T8343] tipc: Node identity ffffffff, cluster identity 4711 [ 195.390000][ T8343] tipc: Node number set to 4294967295 [ 195.476202][ T5354] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 195.638704][ T5354] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.641544][ T5354] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.644048][ T5354] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 195.646690][ T5354] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.656948][ T5354] usb 8-1: config 0 descriptor?? [ 195.706126][ T30] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 195.859672][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.862669][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.865212][ T30] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 195.867652][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.872586][ T30] usb 5-1: config 0 descriptor?? [ 196.282623][ T30] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 196.288324][ T30] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input13 [ 196.355473][ T30] keytouch 0003:0926:3333.0005: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 196.495457][ T8344] syzkaller1: entered promiscuous mode [ 196.497245][ T8344] syzkaller1: entered allmulticast mode [ 196.515398][ T8344] netlink: 14 bytes leftover after parsing attributes in process `syz.0.889'. [ 196.518164][ T25] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 196.595811][ T8344] hsr_slave_1 (unregistering): left promiscuous mode [ 196.668169][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.671725][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.674248][ T25] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 196.679406][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.690022][ T25] usb 7-1: config 0 descriptor?? [ 196.778607][ T980] usb 5-1: USB disconnect, device number 23 [ 198.188350][ T5354] usbhid 8-1:0.0: can't add hid device: -71 [ 198.190528][ T5354] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 198.194141][ T5354] usb 8-1: USB disconnect, device number 19 [ 198.423133][ T8381] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.897'. [ 199.260276][ T25] usbhid 7-1:0.0: can't add hid device: -71 [ 199.261929][ T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 199.267137][ T25] usb 7-1: USB disconnect, device number 24 [ 199.327366][ T8389] netlink: 32 bytes leftover after parsing attributes in process `syz.2.891'. [ 199.359515][ T8389] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 201.706134][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 201.866130][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 201.870956][ T9] usb 6-1: config 0 has no interfaces? [ 201.875469][ T9] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 201.879355][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.881511][ T9] usb 6-1: Product: syz [ 201.882867][ T9] usb 6-1: Manufacturer: syz [ 201.884474][ T9] usb 6-1: SerialNumber: syz [ 201.888436][ T9] usb 6-1: config 0 descriptor?? [ 202.112928][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.901'. [ 202.126108][ T4775] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 202.202153][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 202.204596][ T30] usb 6-1: USB disconnect, device number 24 [ 202.308899][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.911'. [ 202.753803][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 202.825126][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.906'. [ 202.841437][ T8441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.866920][ T8441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.869282][ T8441] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 202.872801][ T8441] bond1: (slave vti0): Error -95 calling set_mac_address [ 203.461900][ T8452] FAULT_INJECTION: forcing a failure. [ 203.461900][ T8452] name failslab, interval 1, probability 0, space 0, times 0 [ 203.465442][ T8452] CPU: 0 UID: 0 PID: 8452 Comm: syz.2.909 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 203.468193][ T8452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.470960][ T8452] Call Trace: [ 203.471838][ T8452] [ 203.472607][ T8452] dump_stack_lvl+0x16c/0x1f0 [ 203.473842][ T8452] should_fail_ex+0x497/0x5b0 [ 203.475083][ T8452] ? fs_reclaim_acquire+0xae/0x150 [ 203.476416][ T8452] should_failslab+0xc2/0x120 [ 203.477639][ T8452] kmem_cache_alloc_node_noprof+0x71/0x310 [ 203.479160][ T8452] ? __alloc_skb+0x2b3/0x380 [ 203.480373][ T8452] __alloc_skb+0x2b3/0x380 [ 203.481544][ T8452] ? __pfx___alloc_skb+0x10/0x10 [ 203.482846][ T8452] ? __lock_acquire+0xbdd/0x3ce0 [ 203.484135][ T8452] ? aa_label_sk_perm+0x19d/0x5a0 [ 203.485446][ T8452] alloc_skb_with_frags+0xe4/0x850 [ 203.486774][ T8452] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 203.488190][ T8452] sock_alloc_send_pskb+0x7f1/0x980 [ 203.489546][ T8452] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 203.491041][ T8452] ? __pfx_lock_release+0x10/0x10 [ 203.492350][ T8452] ? trace_lock_acquire+0x14a/0x1d0 [ 203.493700][ T8452] ? __pfx___might_resched+0x10/0x10 [ 203.495082][ T8452] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.496628][ T8452] hci_sock_sendmsg+0x1c8/0x25e0 [ 203.497919][ T8452] ? aa_file_perm+0x4d5/0xfe0 [ 203.499174][ T8452] ? __pfx_aa_sk_perm+0x10/0x10 [ 203.500438][ T8452] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 203.501831][ T8452] ? psi_task_switch+0x203/0x8e0 [ 203.503130][ T8452] sock_write_iter+0x4fe/0x5b0 [ 203.504375][ T8452] ? __pfx_sock_write_iter+0x10/0x10 [ 203.505755][ T8452] ? bpf_lsm_file_permission+0x9/0x10 [ 203.507161][ T8452] ? security_file_permission+0x71/0x210 [ 203.508619][ T8452] vfs_write+0x6b5/0x1140 [ 203.509747][ T8452] ? __pfx_sock_write_iter+0x10/0x10 [ 203.511147][ T8452] ? trace_lock_acquire+0x14a/0x1d0 [ 203.512502][ T8452] ? __pfx_vfs_write+0x10/0x10 [ 203.513755][ T8452] ? __fget_files+0x40/0x3f0 [ 203.514971][ T8452] ksys_write+0x1fa/0x260 [ 203.516099][ T8452] ? __pfx_ksys_write+0x10/0x10 [ 203.517404][ T8452] __do_fast_syscall_32+0x73/0x120 [ 203.518742][ T8452] do_fast_syscall_32+0x32/0x80 [ 203.520021][ T8452] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.521660][ T8452] RIP: 0023:0xf73de579 [ 203.522735][ T8452] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 203.527726][ T8452] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 203.529890][ T8452] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000200000c0 [ 203.531956][ T8452] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.533998][ T8452] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 203.536043][ T8452] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 203.537953][ T8452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.539994][ T8452] [ 203.996468][ T5399] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 204.147368][ T5399] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.150196][ T5399] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.152707][ T5399] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 204.155035][ T5399] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.158231][ T5399] usb 7-1: config 0 descriptor?? [ 204.166273][ T5351] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 204.317603][ T5351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.320475][ T5351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.323025][ T5351] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 204.325372][ T5351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.329473][ T5351] usb 6-1: config 0 descriptor?? [ 204.565785][ T5351] usbhid 6-1:0.0: can't add hid device: -71 [ 204.570411][ T5351] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 204.578647][ T5351] usb 6-1: USB disconnect, device number 25 [ 205.266314][ T980] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 205.427476][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.430773][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.433558][ T980] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 205.436359][ T980] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.444826][ T980] usb 8-1: config 0 descriptor?? [ 206.196179][ T4775] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 206.199367][ T4775] Bluetooth: hci5: Injecting HCI hardware error event [ 206.202576][ T5368] Bluetooth: hci5: hardware error 0x00 [ 206.705998][ T5399] usbhid 7-1:0.0: can't add hid device: -71 [ 206.707756][ T5399] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 206.713596][ T5399] usb 7-1: USB disconnect, device number 25 [ 206.858698][ T8504] /dev/sr0: Can't open blockdev [ 206.868993][ T8508] (syz.1.927,8508,3):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 206.872013][ T8508] (syz.1.927,8508,3):ocfs2_fill_super:1178 ERROR: status = -22 [ 207.344326][ T8518] kAFS: unable to lookup cell ' [ 207.344326][ T8518] ä' [ 207.997512][ T980] usbhid 8-1:0.0: can't add hid device: -71 [ 207.999323][ T980] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 208.008710][ T980] usb 8-1: USB disconnect, device number 20 [ 208.276189][ T5368] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 209.286271][ T980] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 209.295248][ T8571] tls_set_device_offload_rx: netdev not found [ 209.467800][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.474710][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.477532][ T980] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 209.480002][ T980] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.485445][ T980] usb 8-1: config 0 descriptor?? [ 210.738634][ T8601] /dev/sr0: Can't open blockdev [ 210.745129][ T8604] (syz.0.951,8604,2):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 210.748344][ T8604] (syz.0.951,8604,2):ocfs2_fill_super:1178 ERROR: status = -22 [ 210.808986][ T8606] FAULT_INJECTION: forcing a failure. [ 210.808986][ T8606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.813692][ T8606] CPU: 2 UID: 0 PID: 8606 Comm: syz.2.952 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 210.816462][ T8606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 210.819237][ T8606] Call Trace: [ 210.820142][ T8606] [ 210.820925][ T8606] dump_stack_lvl+0x16c/0x1f0 [ 210.822169][ T8606] should_fail_ex+0x497/0x5b0 [ 210.823675][ T8606] _copy_from_user+0x30/0xf0 [ 210.825359][ T8606] __do_compat_sys_socketcall+0x14f/0x700 [ 210.826981][ T8606] ? __fget_files+0x244/0x3f0 [ 210.828209][ T8606] ? __pfx___do_compat_sys_socketcall+0x10/0x10 [ 210.829828][ T8606] ? fput+0x30/0x390 [ 210.830878][ T8606] __do_fast_syscall_32+0x73/0x120 [ 210.832214][ T8606] do_fast_syscall_32+0x32/0x80 [ 210.833515][ T8606] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.835182][ T8606] RIP: 0023:0xf73de579 [ 210.836252][ T8606] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 210.841262][ T8606] RSP: 002b:00000000f5683450 EFLAGS: 00000293 ORIG_RAX: 0000000000000066 [ 210.843973][ T8606] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f568346c [ 210.846364][ T8606] RDX: 0000000000000000 RSI: 00000000f5683570 RDI: 00000000f73cbff4 [ 210.848577][ T8606] RBP: 00000000f5683570 R08: 0000000000000000 R09: 0000000000000000 [ 210.850748][ T8606] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 210.852931][ T8606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.855109][ T8606] [ 211.059798][ T8608] netlink: 60 bytes leftover after parsing attributes in process `syz.0.953'. [ 211.781253][ T8616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.955'. [ 212.023014][ T980] usbhid 8-1:0.0: can't add hid device: -71 [ 212.036647][ T980] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 212.043431][ T980] usb 8-1: USB disconnect, device number 21 [ 212.186333][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'. [ 212.256615][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.958'. [ 212.364704][ T8630] netlink: 'syz.1.960': attribute type 11 has an invalid length. [ 212.367042][ T8630] netlink: 211132 bytes leftover after parsing attributes in process `syz.1.960'. [ 212.678634][ T8636] /dev/sr0: Can't open blockdev [ 212.692537][ T8637] (syz.1.962,8637,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 212.694924][ T8637] (syz.1.962,8637,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 212.945380][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'. [ 213.007235][ T39] audit: type=1326 audit(1728582619.713:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.2.965" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 213.014705][ T39] audit: type=1326 audit(1728582619.713:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.2.965" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 213.046113][ T39] audit: type=1326 audit(1728582619.733:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.2.965" exe="/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 213.051278][ T39] audit: type=1326 audit(1728582619.733:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.2.965" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 213.056503][ T39] audit: type=1326 audit(1728582619.733:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.2.965" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 213.061673][ T39] audit: type=1326 audit(1728582619.733:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.2.965" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 213.066994][ T39] audit: type=1326 audit(1728582619.733:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.2.965" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 213.073329][ T39] audit: type=1326 audit(1728582619.733:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.2.965" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 213.079475][ T39] audit: type=1326 audit(1728582619.733:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.2.965" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 213.084546][ T39] audit: type=1326 audit(1728582619.743:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.2.965" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 213.246133][ T5399] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 213.409530][ T5399] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.412088][ T5399] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.414371][ T5399] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 213.426118][ T5399] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.436515][ T5399] usb 8-1: config 0 descriptor?? [ 214.188445][ T8683] (syz.1.972,8683,3):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 214.190481][ T8683] (syz.1.972,8683,3):ocfs2_fill_super:1178 ERROR: status = -22 [ 214.402079][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.974'. [ 214.647641][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 214.705403][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.984'. [ 214.794130][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.978'. [ 215.797923][ T8729] 9pnet_fd: Insufficient options for proto=fd [ 215.938840][ T5399] usbhid 8-1:0.0: can't add hid device: -71 [ 215.940371][ T5399] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 216.179064][ T5399] usb 8-1: USB disconnect, device number 22 [ 216.230817][ T8737] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 216.232568][ T8737] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 216.236396][ T8737] vhci_hcd vhci_hcd.0: Device attached [ 216.240871][ T8738] usbip_core: unknown command [ 216.242174][ T8738] vhci_hcd: unknown pdu 0 [ 216.243357][ T8738] usbip_core: unknown command [ 216.246723][ T45] vhci_hcd: stop threads [ 216.247884][ T45] vhci_hcd: release socket [ 216.249083][ T45] vhci_hcd: disconnect device [ 216.251301][ T8737] syzkaller1: entered promiscuous mode [ 216.253183][ T8737] syzkaller1: entered allmulticast mode [ 216.884843][ T8753] FAULT_INJECTION: forcing a failure. [ 216.884843][ T8753] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 216.888759][ T8753] CPU: 1 UID: 0 PID: 8753 Comm: syz.2.987 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 216.891508][ T8753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 216.894260][ T8753] Call Trace: [ 216.895142][ T8753] [ 216.895927][ T8753] dump_stack_lvl+0x16c/0x1f0 [ 216.897175][ T8753] should_fail_ex+0x497/0x5b0 [ 216.898408][ T8753] ? fs_reclaim_acquire+0xae/0x150 [ 216.899754][ T8753] should_fail_alloc_page+0xe7/0x130 [ 216.901136][ T8753] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 216.902690][ T8753] __alloc_pages_noprof+0x190/0x25a0 [ 216.904413][ T8753] ? __lock_acquire+0xbdd/0x3ce0 [ 216.906077][ T8753] ? __pfx_mark_lock+0x10/0x10 [ 216.907707][ T8753] ? hlock_class+0x4e/0x130 [ 216.908977][ T8753] ? mark_lock+0xb5/0xc60 [ 216.910112][ T8753] ? mark_lock+0xb5/0xc60 [ 216.911276][ T8753] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 216.912760][ T8753] ? hlock_class+0x4e/0x130 [ 216.913948][ T8753] ? mark_lock+0xb5/0xc60 [ 216.915094][ T8753] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 216.916631][ T8753] ? policy_nodemask+0xea/0x4e0 [ 216.917908][ T8753] alloc_pages_mpol_noprof+0x2c9/0x610 [ 216.919342][ T8753] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 216.921311][ T8753] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 216.922944][ T8753] folio_alloc_mpol_noprof+0x36/0xd0 [ 216.924310][ T8753] vma_alloc_folio_noprof+0xee/0x1b0 [ 216.925900][ T8753] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 216.927522][ T8753] ? find_held_lock+0x2d/0x110 [ 216.928785][ T8753] do_pte_missing+0x2010/0x3e50 [ 216.930076][ T8753] __handle_mm_fault+0x100a/0x2a10 [ 216.931458][ T8753] ? __pfx_mt_find+0x10/0x10 [ 216.932676][ T8753] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 216.934141][ T8753] ? __pfx___handle_mm_fault+0x10/0x10 [ 216.935591][ T8753] ? find_vma+0xc0/0x140 [ 216.936708][ T8753] ? __pfx_find_vma+0x10/0x10 [ 216.937947][ T8753] handle_mm_fault+0x3fa/0xaa0 [ 216.939224][ T8753] do_user_addr_fault+0x7a3/0x13f0 [ 216.940570][ T8753] exc_page_fault+0x5c/0xc0 [ 216.941770][ T8753] asm_exc_page_fault+0x26/0x30 [ 216.943066][ T8753] RIP: 0010:_copy_to_user+0xa7/0xc0 [ 216.944476][ T8753] Code: 89 ee 48 89 ef e8 19 13 04 fd 4d 85 f6 75 b5 e8 5f 11 04 fd 89 de 4c 89 e7 e8 e5 5f 65 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb eb 8d 66 66 2e 0f 1f 84 00 00 00 [ 216.949452][ T8753] RSP: 0018:ffffc9000325fbf0 EFLAGS: 00050246 [ 216.951060][ T8753] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000238 [ 216.953201][ T8753] RDX: 0000000000000000 RSI: ffff888000a1adc8 RDI: 0000000020023000 [ 216.955285][ T8753] RBP: 0000000020022238 R08: 0000000000000000 R09: ffffed10001435ff [ 216.957345][ T8753] R10: ffff888000a1afff R11: 0000000000000000 R12: ffff888000a1a000 [ 216.959398][ T8753] R13: 0000000020023238 R14: 0000000000000000 R15: 0000000023201000 [ 216.961466][ T8753] pagemap_read+0x55f/0x8c0 [ 216.962675][ T8753] ? __pfx_pagemap_read+0x10/0x10 [ 216.964019][ T8753] ? __pfx_pagemap_read+0x10/0x10 [ 216.965492][ T8753] vfs_read+0x1ce/0xbd0 [ 216.966545][ T8753] ? __fget_files+0x23a/0x3f0 [ 216.967814][ T8753] ? __pfx_lock_release+0x10/0x10 [ 216.969126][ T8753] ? trace_lock_acquire+0x14a/0x1d0 [ 216.970489][ T8753] ? __pfx_vfs_read+0x10/0x10 [ 216.971739][ T8753] ? lock_acquire+0x2f/0xb0 [ 216.972927][ T8753] ? __fget_files+0x40/0x3f0 [ 216.974146][ T8753] ? __fget_files+0x244/0x3f0 [ 216.975391][ T8753] ksys_pread64+0x178/0x1b0 [ 216.976579][ T8753] ? __pfx_ksys_pread64+0x10/0x10 [ 216.977899][ T8753] __do_fast_syscall_32+0x73/0x120 [ 216.979254][ T8753] do_fast_syscall_32+0x32/0x80 [ 216.980535][ T8753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.982192][ T8753] RIP: 0023:0xf73de579 [ 216.983272][ T8753] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 216.988257][ T8753] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 00000000000000b4 [ 216.990426][ T8753] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000002001a240 [ 216.992494][ T8753] RDX: 0000000000019000 RSI: 0000000000100008 RDI: 0000000000000000 [ 216.994554][ T8753] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 216.996617][ T8753] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 216.998670][ T8753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.000732][ T8753] [ 217.375765][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'. [ 217.382944][ T8762] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 217.385409][ T8762] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 217.518602][ T8769] bond1 (unregistering): Released all slaves [ 217.746113][ T7459] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 217.855825][ T8788] 9pnet_fd: Insufficient options for proto=fd [ 217.907309][ T7459] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.910204][ T7459] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.916363][ T7459] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 217.918738][ T7459] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.924000][ T7459] usb 8-1: config 0 descriptor?? [ 218.194646][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'. [ 218.208336][ T39] kauditd_printk_skb: 42 callbacks suppressed [ 218.208346][ T39] audit: type=1326 audit(1728582624.923:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 218.215431][ T39] audit: type=1326 audit(1728582624.923:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 218.222862][ T39] audit: type=1326 audit(1728582624.923:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 218.230916][ T39] audit: type=1326 audit(1728582624.923:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 218.239526][ T39] audit: type=1326 audit(1728582624.923:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 218.245405][ T39] audit: type=1326 audit(1728582624.933:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 218.251764][ T39] audit: type=1326 audit(1728582624.933:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 218.260216][ T39] audit: type=1326 audit(1728582624.933:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 218.266020][ T39] audit: type=1326 audit(1728582624.933:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 218.271732][ T39] audit: type=1326 audit(1728582624.933:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.1.999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 218.486149][ T980] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 218.521594][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1003'. [ 218.541571][ T8809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.555948][ T8809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.562458][ T8809] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 218.566340][ T8809] bond1: (slave vti0): Error -95 calling set_mac_address [ 218.666180][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 218.669569][ T980] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.673104][ T980] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 218.676580][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.692308][ T980] hub 5-1:4.0: bad descriptor, ignoring hub [ 218.694607][ T980] hub 5-1:4.0: probe with driver hub failed with error -5 [ 218.698572][ T980] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 218.951403][ T8814] syz.0.1000: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 218.951804][ T8814] CPU: 1 UID: 0 PID: 8814 Comm: syz.0.1000 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 218.951819][ T8814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 218.951828][ T8814] Call Trace: [ 218.951831][ T8814] [ 218.951836][ T8814] dump_stack_lvl+0x16c/0x1f0 [ 218.951856][ T8814] warn_alloc+0x24d/0x3a0 [ 218.951872][ T8814] ? __pfx_warn_alloc+0x10/0x10 [ 218.951885][ T8814] ? __pfx_stack_trace_save+0x10/0x10 [ 218.951901][ T8814] ? kasan_save_stack+0x42/0x60 [ 218.951924][ T8814] ? kasan_save_stack+0x33/0x60 [ 218.951936][ T8814] ? kasan_save_track+0x14/0x30 [ 218.951948][ T8814] ? __kasan_kmalloc+0xaa/0xb0 [ 218.951959][ T8814] ? xskq_create+0x52/0x1d0 [ 218.951972][ T8814] ? do_sock_setsockopt+0x222/0x480 [ 218.951983][ T8814] ? __sys_setsockopt+0x1a4/0x270 [ 218.951995][ T8814] ? __ia32_sys_setsockopt+0xbc/0x160 [ 218.952013][ T8814] __vmalloc_node_range_noprof+0x11a7/0x15a0 [ 218.952033][ T8814] ? xskq_create+0xfb/0x1d0 [ 218.952048][ T8814] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 218.952065][ T8814] ? xskq_create+0xfb/0x1d0 [ 218.952078][ T8814] vmalloc_user_noprof+0x6b/0x90 [ 218.952091][ T8814] ? xskq_create+0xfb/0x1d0 [ 218.952103][ T8814] xskq_create+0xfb/0x1d0 [ 218.952118][ T8814] xsk_setsockopt+0x8b0/0xac0 [ 218.952132][ T8814] ? __pfx_xsk_setsockopt+0x10/0x10 [ 218.952151][ T8814] ? __pfx_xsk_setsockopt+0x10/0x10 [ 218.952163][ T8814] do_sock_setsockopt+0x222/0x480 [ 218.952174][ T8814] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 218.952189][ T8814] ? fdget+0x176/0x210 [ 218.952201][ T8814] __sys_setsockopt+0x1a4/0x270 [ 218.952215][ T8814] ? __pfx___sys_setsockopt+0x10/0x10 [ 218.952230][ T8814] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 218.952246][ T8814] __ia32_sys_setsockopt+0xbc/0x160 [ 218.952260][ T8814] ? lockdep_hardirqs_on+0x7c/0x110 [ 218.952273][ T8814] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 218.952286][ T8814] __do_fast_syscall_32+0x73/0x120 [ 218.952300][ T8814] do_fast_syscall_32+0x32/0x80 [ 218.952313][ T8814] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.952328][ T8814] RIP: 0023:0xf7f62579 [ 218.952336][ T8814] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 218.952346][ T8814] RSP: 002b:00000000f56c556c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 218.952356][ T8814] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000011b [ 218.952363][ T8814] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000020 [ 218.952369][ T8814] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.952375][ T8814] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 218.952381][ T8814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.952394][ T8814] [ 218.952477][ T8814] Mem-Info: [ 218.952484][ T8814] active_anon:6455 inactive_anon:290 isolated_anon:0 [ 218.952484][ T8814] active_file:3287 inactive_file:17793 isolated_file:0 [ 218.952484][ T8814] unevictable:799 dirty:441 writeback:0 [ 218.952484][ T8814] slab_reclaimable:4677 slab_unreclaimable:54752 [ 218.952484][ T8814] mapped:24689 shmem:3818 pagetables:712 [ 218.952484][ T8814] sec_pagetables:330 bounce:0 [ 218.952484][ T8814] kernel_misc_reclaimable:0 [ 218.952484][ T8814] free:88754 free_pcp:10136 free_cma:0 [ 218.952510][ T8814] Node 0 active_anon:40kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1660kB isolated(anon):0kB isolated(file):0kB mapped:4604kB dirty:92kB writeback:0kB shmem:1544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9392kB pagetables:1284kB sec_pagetables:1228kB all_unreclaimable? no [ 218.952540][ T8814] Node 1 active_anon:25780kB inactive_anon:1160kB active_file:13076kB inactive_file:71172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:94152kB dirty:1672kB writeback:0kB shmem:13728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2280kB pagetables:1564kB sec_pagetables:92kB all_unreclaimable? no [ 218.952605][ T8814] Node 0 DMA free:880kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:176kB local_pcp:84kB free_cma:0kB [ 218.952634][ T8814] lowmem_reserve[]: 0 273 0 0 0 [ 218.952656][ T8814] Node 0 DMA32 free:19628kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:2048KB active_anon:8kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1660kB writepending:92kB present:1032196kB managed:306280kB mlocked:124kB bounce:0kB free_pcp:3052kB local_pcp:1052kB free_cma:0kB [ 218.952680][ T8814] lowmem_reserve[]: 0 0 0 0 0 [ 218.952699][ T8814] Node 1 DMA32 free:334508kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:25780kB inactive_anon:1160kB active_file:13076kB inactive_file:71172kB unevictable:1536kB writepending:1672kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:37316kB local_pcp:15032kB free_cma:0kB [ 218.952763][ T8814] lowmem_reserve[]: 0 0 0 0 0 [ 218.952784][ T8814] Node 0 DMA: 11*4kB (U) 46*8kB (U) 11*16kB (U) 10*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 908kB [ 218.952852][ T8814] Node 0 DMA32: 595*4kB (UEH) 144*8kB (UMH) 32*16kB (UMEH) 63*32kB (UMEH) 32*64kB (UME) 8*128kB (UME) 9*256kB (UME) 8*512kB (UM) 2*1024kB (M) 1*2048kB (U) 0*4096kB = 19628kB [ 218.952977][ T8814] Node 1 DMA32: 45*4kB (UME) 45*8kB (UME) 153*16kB (UME) 203*32kB (UE) 143*64kB (UE) 59*128kB (UE) 34*256kB (UE) 21*512kB (UE) 22*1024kB (UM) 12*2048kB (UM) 59*4096kB (UM) = 334412kB [ 218.953106][ T8814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.953114][ T8814] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.953122][ T8814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.953130][ T8814] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 219.006671][ T8815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.007108][ T73] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 219.008493][ T8814] 25457 total pagecache pages [ 219.116568][ T8814] 532 pages in swap cache [ 219.116577][ T8814] Free swap = 112992kB [ 219.116582][ T8814] Total swap = 124996kB [ 219.116586][ T8814] 524155 pages RAM [ 219.116590][ T8814] 0 pages HighMem/MovableOnly [ 219.116626][ T8814] 206682 pages reserved [ 219.116632][ T8814] 0 pages cma reserved [ 219.116863][ T8815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.171893][ T73] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 219.173040][ T73] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.173098][ T73] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.173112][ T73] usb 7-1: config 0 interface 0 has no altsetting 0 [ 219.173913][ T73] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.173929][ T73] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.173941][ T73] usb 7-1: config 0 interface 0 has no altsetting 0 [ 219.174763][ T73] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.174828][ T73] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.174842][ T73] usb 7-1: config 0 interface 0 has no altsetting 0 [ 219.175643][ T73] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.216627][ T73] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.216692][ T73] usb 7-1: config 0 interface 0 has no altsetting 0 [ 219.217518][ T73] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.217540][ T73] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.217553][ T73] usb 7-1: config 0 interface 0 has no altsetting 0 [ 219.218423][ T73] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.218443][ T73] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.218456][ T73] usb 7-1: config 0 interface 0 has no altsetting 0 [ 219.219246][ T73] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.219264][ T73] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.219276][ T73] usb 7-1: config 0 interface 0 has no altsetting 0 [ 219.220141][ T73] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 219.220159][ T73] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 219.220170][ T73] usb 7-1: config 0 interface 0 has no altsetting 0 [ 219.221792][ T73] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 219.268590][ T73] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 219.268605][ T73] usb 7-1: Product: syz [ 219.268613][ T73] usb 7-1: Manufacturer: syz [ 219.268620][ T73] usb 7-1: SerialNumber: syz [ 219.269933][ T73] usb 7-1: config 0 descriptor?? [ 219.272904][ T73] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 219.479218][ T8813] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1004'. [ 219.482199][ T8813] openvswitch: netlink: Key type 29 is not supported [ 219.498319][ T25] usb 7-1: USB disconnect, device number 26 [ 219.501497][ T25] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 219.525640][ T8820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.529259][ T980] usb 5-1: USB disconnect, device number 24 [ 219.968112][ T8822] (syz.0.1007,8822,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 219.970500][ T8822] (syz.0.1007,8822,2):ocfs2_fill_super:1178 ERROR: status = -22 [ 220.100376][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 220.468206][ T7459] usbhid 8-1:0.0: can't add hid device: -71 [ 220.469957][ T7459] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 220.476501][ T7459] usb 8-1: USB disconnect, device number 23 [ 220.703708][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1013'. [ 220.806117][ T7459] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 220.967939][ T7459] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 220.972366][ T7459] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.974886][ T7459] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.978976][ T7459] usb 8-1: config 0 interface 0 has no altsetting 0 [ 220.981767][ T7459] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.984183][ T7459] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.987214][ T7459] usb 8-1: config 0 interface 0 has no altsetting 0 [ 220.991439][ T7459] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.993760][ T7459] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.999444][ T7459] usb 8-1: config 0 interface 0 has no altsetting 0 [ 221.003787][ T7459] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.007352][ T7459] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.010186][ T7459] usb 8-1: config 0 interface 0 has no altsetting 0 [ 221.014971][ T7459] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.020010][ T7459] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.022872][ T7459] usb 8-1: config 0 interface 0 has no altsetting 0 [ 221.025885][ T7459] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.028405][ T7459] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.031246][ T7459] usb 8-1: config 0 interface 0 has no altsetting 0 [ 221.033813][ T7459] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.038206][ T7459] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.041108][ T7459] usb 8-1: config 0 interface 0 has no altsetting 0 [ 221.043674][ T7459] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.046639][ T7459] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.050003][ T7459] usb 8-1: config 0 interface 0 has no altsetting 0 [ 221.053437][ T7459] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 221.055997][ T7459] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 221.060564][ T7459] usb 8-1: Product: syz [ 221.061784][ T7459] usb 8-1: Manufacturer: syz [ 221.063049][ T7459] usb 8-1: SerialNumber: syz [ 221.068979][ T7459] usb 8-1: config 0 descriptor?? [ 221.073754][ T7459] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 221.358853][ T8854] overlayfs: missing 'lowerdir' [ 222.866786][ T8880] usb 8-1: USB disconnect, device number 24 [ 222.876089][ C1] usb 8-1: yurex_control_callback - control failed: -2 [ 222.879860][ T8880] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 222.966011][ T8880] vivid-004: disconnect [ 223.112739][ T8883] FAULT_INJECTION: forcing a failure. [ 223.112739][ T8883] name failslab, interval 1, probability 0, space 0, times 0 [ 223.126086][ T8883] CPU: 3 UID: 0 PID: 8883 Comm: syz.1.1024 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 223.128850][ T8883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.132139][ T8883] Call Trace: [ 223.133198][ T8883] [ 223.134130][ T8883] dump_stack_lvl+0x16c/0x1f0 [ 223.135644][ T8883] should_fail_ex+0x497/0x5b0 [ 223.137161][ T8883] ? fs_reclaim_acquire+0xae/0x150 [ 223.138791][ T8883] should_failslab+0xc2/0x120 [ 223.140286][ T8883] kmem_cache_alloc_node_noprof+0x71/0x310 [ 223.142140][ T8883] ? __alloc_skb+0x2b3/0x380 [ 223.143609][ T8883] __alloc_skb+0x2b3/0x380 [ 223.144788][ T8883] ? __pfx___alloc_skb+0x10/0x10 [ 223.146321][ T8883] ? kasan_quarantine_put+0x10a/0x240 [ 223.148019][ T8883] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.149632][ T8883] ? kfree+0x14f/0x4b0 [ 223.150951][ T8883] mpls_netconf_notify_devconf+0x4a/0x110 [ 223.152758][ T8883] mpls_dev_notify+0x727/0xa20 [ 223.154124][ T8883] notifier_call_chain+0xb9/0x410 [ 223.155358][ T8883] ? __pfx_mpls_dev_notify+0x10/0x10 [ 223.156641][ T8883] call_netdevice_notifiers_info+0xbe/0x140 [ 223.158364][ T8883] unregister_netdevice_many_notify+0x8d5/0x1e50 [ 223.160034][ T8883] ? is_bpf_text_address+0x30/0x1a0 [ 223.161312][ T8883] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 223.162929][ T8883] ? __kernel_text_address+0xd/0x40 [ 223.164232][ T8883] ? __pfx___nla_validate_parse+0x10/0x10 [ 223.165594][ T8883] ? arch_stack_walk+0xa7/0x100 [ 223.166817][ T8883] ? unregister_netdevice_queue+0x22f/0x3f0 [ 223.168271][ T8883] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 223.169774][ T8883] ? __nla_parse+0x40/0x60 [ 223.170902][ T8883] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 223.172434][ T8883] rtnl_dellink+0x3c9/0xae0 [ 223.173613][ T8883] ? kasan_save_stack+0x42/0x60 [ 223.175221][ T8883] ? kasan_save_stack+0x33/0x60 [ 223.176692][ T8883] ? __pfx_rtnl_dellink+0x10/0x10 [ 223.178216][ T8883] ? kmem_cache_free+0x152/0x4b0 [ 223.179796][ T8883] ? trace_contention_end+0xea/0x140 [ 223.181524][ T8883] ? __mutex_lock+0x1a6/0x9c0 [ 223.183090][ T8883] ? rtnetlink_rcv_msg+0x372/0xea0 [ 223.184760][ T8883] ? __pfx___mutex_lock+0x10/0x10 [ 223.186414][ T8883] ? rtnetlink_rcv_msg+0x35a/0xea0 [ 223.188097][ T8883] ? __pfx_rtnl_dellink+0x10/0x10 [ 223.189738][ T8883] rtnetlink_rcv_msg+0x3c7/0xea0 [ 223.191374][ T8883] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.193157][ T8883] ? __pfx___dev_queue_xmit+0x10/0x10 [ 223.194904][ T8883] netlink_rcv_skb+0x165/0x410 [ 223.196448][ T8883] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.198229][ T8883] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.199996][ T8883] ? netlink_deliver_tap+0x1ae/0xcf0 [ 223.201749][ T8883] netlink_unicast+0x53c/0x7f0 [ 223.203328][ T8883] ? __pfx_netlink_unicast+0x10/0x10 [ 223.205033][ T8883] ? __phys_addr_symbol+0x30/0x80 [ 223.206697][ T8883] ? __check_object_size+0x488/0x710 [ 223.208377][ T8883] netlink_sendmsg+0x8b8/0xd70 [ 223.209898][ T8883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.211648][ T8883] ? lock_acquire+0x2f/0xb0 [ 223.213054][ T8883] ____sys_sendmsg+0x9ae/0xb40 [ 223.214387][ T8883] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.216022][ T8883] ? get_compat_msghdr+0x11b/0x170 [ 223.217635][ T8883] ? __pfx___lock_acquire+0x10/0x10 [ 223.219246][ T8883] ___sys_sendmsg+0x135/0x1e0 [ 223.220649][ T8883] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.222207][ T8883] ? lock_acquire+0x2f/0xb0 [ 223.223643][ T8883] ? __fget_files+0x40/0x3f0 [ 223.225065][ T8883] ? fdget+0x176/0x210 [ 223.226309][ T8883] __sys_sendmsg+0x117/0x1f0 [ 223.227825][ T8883] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.229491][ T8883] ? __fget_files+0x244/0x3f0 [ 223.231076][ T8883] __do_fast_syscall_32+0x73/0x120 [ 223.232746][ T8883] do_fast_syscall_32+0x32/0x80 [ 223.234330][ T8883] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.236348][ T8883] RIP: 0023:0xf7f41579 [ 223.237658][ T8883] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 223.243787][ T8883] RSP: 002b:00000000f56a556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 223.246455][ T8883] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000240 [ 223.248702][ T8883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.250764][ T8883] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.252825][ T8883] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 223.254886][ T8883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.256944][ T8883] [ 223.588210][ T8893] [ 223.589067][ T8893] ====================================================== [ 223.591371][ T8893] WARNING: possible circular locking dependency detected [ 223.593665][ T8893] 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 Not tainted [ 223.597650][ T8893] ------------------------------------------------------ [ 223.600532][ T8893] syz.0.1028/8893 is trying to acquire lock: [ 223.602708][ T8893] ffffffff8fd521e8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_exists+0x5f/0x1a0 [ 223.605951][ T8893] [ 223.605951][ T8893] but task is already holding lock: [ 223.608591][ T8893] ffffffff8fd571a8 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x9db/0x1e70 [ 223.612509][ T8893] [ 223.612509][ T8893] which lock already depends on the new lock. [ 223.612509][ T8893] [ 223.616161][ T8893] [ 223.616161][ T8893] the existing dependency chain (in reverse order) is: [ 223.619395][ T8893] [ 223.619395][ T8893] -> #3 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 223.622238][ T8893] __mutex_lock+0x175/0x9c0 [ 223.624045][ T8893] rfcomm_dev_ioctl+0x9db/0x1e70 [ 223.625963][ T8893] rfcomm_sock_compat_ioctl+0xba/0xe0 [ 223.628094][ T8893] compat_sock_ioctl+0x17b/0x7e0 [ 223.630040][ T8893] __do_compat_sys_ioctl+0x259/0x2b0 [ 223.632196][ T8893] __do_fast_syscall_32+0x73/0x120 [ 223.634195][ T8893] do_fast_syscall_32+0x32/0x80 [ 223.636149][ T8893] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.638574][ T8893] [ 223.638574][ T8893] -> #2 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 223.641865][ T8893] lock_sock_nested+0x3a/0xf0 [ 223.643745][ T8893] rfcomm_sk_state_change+0x6d/0x3b0 [ 223.645877][ T8893] __rfcomm_dlc_close+0x28c/0x700 [ 223.647848][ T8893] rfcomm_dlc_close+0x1eb/0x240 [ 223.649740][ T8893] __rfcomm_sock_close+0xa7/0x230 [ 223.651708][ T8893] rfcomm_sock_shutdown+0xd5/0x230 [ 223.653689][ T8893] rfcomm_sock_release+0x5d/0x140 [ 223.655652][ T8893] __sock_release+0xb0/0x270 [ 223.657451][ T8893] sock_close+0x1c/0x30 [ 223.659122][ T8893] __fput+0x3f6/0xb60 [ 223.660769][ T8893] task_work_run+0x14e/0x250 [ 223.662612][ T8893] get_signal+0x1d3/0x26d0 [ 223.664400][ T8893] arch_do_signal_or_restart+0x90/0x7e0 [ 223.666612][ T8893] syscall_exit_to_user_mode+0x150/0x2a0 [ 223.668864][ T8893] __do_fast_syscall_32+0x80/0x120 [ 223.670756][ T8893] do_fast_syscall_32+0x32/0x80 [ 223.672157][ T8893] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.674383][ T8893] [ 223.674383][ T8893] -> #1 (&d->lock#2){+.+.}-{3:3}: [ 223.677023][ T8893] __mutex_lock+0x175/0x9c0 [ 223.678806][ T8893] __rfcomm_dlc_close+0x235/0x700 [ 223.680762][ T8893] rfcomm_dlc_close+0x1eb/0x240 [ 223.682697][ T8893] __rfcomm_sock_close+0xa7/0x230 [ 223.684668][ T8893] rfcomm_sock_shutdown+0xd5/0x230 [ 223.686689][ T8893] rfcomm_sock_release+0x5d/0x140 [ 223.688647][ T8893] __sock_release+0xb0/0x270 [ 223.690415][ T8893] sock_close+0x1c/0x30 [ 223.692042][ T8893] __fput+0x3f6/0xb60 [ 223.693620][ T8893] task_work_run+0x14e/0x250 [ 223.695406][ T8893] get_signal+0x1d3/0x26d0 [ 223.697080][ T8878] vivid-004: reconnect [ 223.697156][ T8893] arch_do_signal_or_restart+0x90/0x7e0 [ 223.700346][ T8893] syscall_exit_to_user_mode+0x150/0x2a0 [ 223.702454][ T8893] __do_fast_syscall_32+0x80/0x120 [ 223.704413][ T8893] do_fast_syscall_32+0x32/0x80 [ 223.706234][ T8893] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.708562][ T8893] [ 223.708562][ T8893] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 223.711143][ T8893] __lock_acquire+0x250b/0x3ce0 [ 223.713032][ T8893] lock_acquire.part.0+0x11b/0x380 [ 223.715081][ T8893] __mutex_lock+0x175/0x9c0 [ 223.716924][ T8893] rfcomm_dlc_exists+0x5f/0x1a0 [ 223.718871][ T8893] rfcomm_dev_ioctl+0xabc/0x1e70 [ 223.720828][ T8893] rfcomm_sock_compat_ioctl+0xba/0xe0 [ 223.722948][ T8893] compat_sock_ioctl+0x17b/0x7e0 [ 223.724886][ T8893] __do_compat_sys_ioctl+0x259/0x2b0 [ 223.726928][ T8893] __do_fast_syscall_32+0x73/0x120 [ 223.728883][ T8893] do_fast_syscall_32+0x32/0x80 [ 223.730782][ T8893] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.733213][ T8893] [ 223.733213][ T8893] other info that might help us debug this: [ 223.733213][ T8893] [ 223.736843][ T8893] Chain exists of: [ 223.736843][ T8893] rfcomm_mutex --> sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_ioctl_mutex [ 223.736843][ T8893] [ 223.741835][ T8893] Possible unsafe locking scenario: [ 223.741835][ T8893] [ 223.744414][ T8893] CPU0 CPU1 [ 223.746270][ T8893] ---- ---- [ 223.748105][ T8893] lock(rfcomm_ioctl_mutex); [ 223.749723][ T8893] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 223.752668][ T8893] lock(rfcomm_ioctl_mutex); [ 223.755166][ T8893] lock(rfcomm_mutex); [ 223.756605][ T8893] [ 223.756605][ T8893] *** DEADLOCK *** [ 223.756605][ T8893] [ 223.759373][ T8893] 2 locks held by syz.0.1028/8893: [ 223.761132][ T8893] #0: ffff88802b5a6258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sock_compat_ioctl+0xac/0xe0 [ 223.765200][ T8893] #1: ffffffff8fd571a8 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x9db/0x1e70 [ 223.768576][ T8893] [ 223.768576][ T8893] stack backtrace: [ 223.770613][ T8893] CPU: 2 UID: 0 PID: 8893 Comm: syz.0.1028 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 223.774245][ T8893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.777905][ T8893] Call Trace: [ 223.779083][ T8893] [ 223.780116][ T8893] dump_stack_lvl+0x116/0x1f0 [ 223.781764][ T8893] print_circular_bug+0x419/0x5d0 [ 223.783535][ T8893] check_noncircular+0x31a/0x400 [ 223.785287][ T8893] ? __pfx_check_noncircular+0x10/0x10 [ 223.787189][ T8893] ? __kernel_text_address+0xd/0x40 [ 223.789008][ T8893] ? lockdep_lock+0xc6/0x200 [ 223.790650][ T8893] ? __pfx_lockdep_lock+0x10/0x10 [ 223.791990][ T8893] __lock_acquire+0x250b/0x3ce0 [ 223.793262][ T8893] ? __pfx___lock_acquire+0x10/0x10 [ 223.794610][ T8893] ? add_lock_to_list+0x17d/0x390 [ 223.795968][ T8893] lock_acquire.part.0+0x11b/0x380 [ 223.797303][ T8893] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 223.798620][ T8893] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 223.800108][ T8893] ? rcu_is_watching+0x12/0xc0 [ 223.801354][ T8893] ? trace_lock_acquire+0x14a/0x1d0 [ 223.802725][ T8893] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 223.804038][ T8893] ? lock_acquire+0x2f/0xb0 [ 223.805228][ T8893] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 223.806542][ T8893] __mutex_lock+0x175/0x9c0 [ 223.807750][ T8893] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 223.809058][ T8893] ? find_held_lock+0x2d/0x110 [ 223.810310][ T8893] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 223.811664][ T8893] ? __pfx___mutex_lock+0x10/0x10 [ 223.812979][ T8893] ? __pfx_lock_release+0x10/0x10 [ 223.814296][ T8893] ? trace_lock_acquire+0x14a/0x1d0 [ 223.815671][ T8893] ? apparmor_capable+0x114/0x1d0 [ 223.816989][ T8893] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 223.818315][ T8893] rfcomm_dlc_exists+0x5f/0x1a0 [ 223.819616][ T8893] rfcomm_dev_ioctl+0xabc/0x1e70 [ 223.820906][ T8893] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 223.822298][ T8893] ? __pfx_lock_release+0x10/0x10 [ 223.823633][ T8893] ? mark_held_locks+0x9f/0xe0 [ 223.824886][ T8893] ? rfcomm_sock_compat_ioctl+0xac/0xe0 [ 223.826323][ T8893] ? __local_bh_enable_ip+0xa4/0x120 [ 223.827714][ T8893] rfcomm_sock_compat_ioctl+0xba/0xe0 [ 223.829101][ T8893] compat_sock_ioctl+0x17b/0x7e0 [ 223.830411][ T8893] ? __pfx_rfcomm_sock_compat_ioctl+0x10/0x10 [ 223.832020][ T8893] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 223.833440][ T8893] ? __fget_files+0x244/0x3f0 [ 223.834695][ T8893] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 223.836109][ T8893] __do_compat_sys_ioctl+0x259/0x2b0 [ 223.837487][ T8893] __do_fast_syscall_32+0x73/0x120 [ 223.838841][ T8893] do_fast_syscall_32+0x32/0x80 [ 223.840115][ T8893] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.841763][ T8893] RIP: 0023:0xf7f62579 [ 223.842848][ T8893] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 223.847821][ T8893] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 223.849975][ T8893] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000400452c8 [ 223.852055][ T8893] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.854134][ T8893] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.856199][ T8893] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 223.858239][ T8893] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.860301][ T8893] [ 223.865476][ T25] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 223.904038][ T5338] syz-executor (5338) used greatest stack depth: 21104 bytes left SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 223.933040][ T8903] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 224.701429][ T12] bond0 (unregistering): Released all slaves [ 224.777104][ T12] bond1 (unregistering): Released all slaves [ 225.064107][ T12] hsr_slave_0: left promiscuous mode [ 226.559825][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.629270][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.691447][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.738545][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.811259][ T12] bridge_slave_1: left allmulticast mode [ 226.813289][ T12] bridge_slave_1: left promiscuous mode [ 226.815276][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.819171][ T12] bridge_slave_0: left allmulticast mode [ 226.821208][ T12] bridge_slave_0: left promiscuous mode [ 226.822823][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.187653][ T12] bond0 (unregistering): Released all slaves [ 227.256219][ T12] bond1 (unregistering): Released all slaves [ 227.261449][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.264819][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.267816][ T12] bond0 (unregistering): Released all slaves [ 227.336417][ T12] tipc: Disabling bearer [ 227.337929][ T12] tipc: Left network mode [ 227.347988][ T12] tipc: Left network mode [ 227.725154][ T12] hsr_slave_0: left promiscuous mode [ 227.727690][ T12] hsr_slave_1: left promiscuous mode [ 227.731126][ T12] hsr_slave_0: left promiscuous mode [ 227.733899][ T12] hsr_slave_1: left promiscuous mode [ 227.735933][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.738755][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.740913][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.742838][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.746423][ T12] veth1_macvtap: left promiscuous mode [ 227.748255][ T12] veth0_macvtap: left promiscuous mode [ 227.750262][ T12] veth1_vlan: left promiscuous mode [ 227.752199][ T12] veth0_vlan: left promiscuous mode [ 228.950512][ T12] team0 (unregistering): Port device team_slave_1 removed [ 228.987355][ T12] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 17:50:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc90004e47b60 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff84b8e8f4 RDI=ffffc90004e47b60 RBP=ffffffff84b8e8e0 RSP=ffffc90000007f60 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc90000007ff8 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000000 R15=ffffc90004e47b28 RIP=ffffffff84b8e91d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2d83c8 CR3=000000006af20000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81d51767 RDX=ffff8880255c4880 RSI=800000004a95c025 RDI=ffff8880709baf80 RBP=800000004a95c025 RSP=ffffc90003857658 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=1ffffffff1bb8549 R12=dffffc0000000000 R13=0000000000000000 R14=ffff8880709baf80 R15=ffffea00012a5700 RIP=ffffffff81f9f696 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020026000 CR3=000000006af20000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85037005 RDI=ffffffff9a63a220 RBP=ffffffff9a63a1e0 RSP=ffffc900041c7278 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e32312e36 R12=0000000000000000 R13=000000000000006e R14=ffffffff85036fa0 R15=0000000000000000 RIP=ffffffff8503702f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000040 CR3=000000001ab18000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff81c84dc9 RDX=ffff88801f5ca440 RSI=0000000000000005 RDI=0000000000000005 RBP=ffff88801acb4420 RSP=ffffc90001fc7810 R8 =0000000000000005 R9 =0000000000000005 R10=0000000000000002 R11=ffff88802b728a7c R12=000000000000000a R13=ffff88801acb4048 R14=dffffc0000000000 R15=0000000000000004 RIP=ffffffff818cb9d2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2bb05a CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000