last executing test programs: 17.547742294s ago: executing program 1 (id=390): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000dd40)=@delchain={0x38, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x4, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0xeb9}, @filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17.477570949s ago: executing program 1 (id=391): openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x21) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000ad90000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="160000000000000004000000010000", @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b143, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 16.699886077s ago: executing program 1 (id=394): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x10000000000003}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYBLOB="200025bd7000fbdbdf250700", @ANYRES32, @ANYRES64=r2], 0x88}, 0x1, 0x0, 0x0, 0x8800}, 0x0) tkill(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102388, 0xffffffffffffff43) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) r6 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r7, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{0x0, 0x0, 0xd, 0x1}, 'syz1\x00', 0x55}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="df4800000000000018000c0000002c0003802800038014000180080001000200000005000200000000001000018009090200866974030000000018000180140002007369", @ANYRES64=r6, @ANYRESDEC], 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0xc000) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 7.948310159s ago: executing program 3 (id=428): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0x7}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7", 0x76, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r6], 0x94}}, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000200000000000600000914000200fe8800000000000000000000000000010f000700756e636f6e66696e65640000140003"], 0x4c}, 0x2, 0x34005}, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x11, 0x80000001, 0xf00, 0xffffff00, 0x3, 0x0, 0x0, 0x0, 0x1}}) 7.071453765s ago: executing program 3 (id=431): syz_emit_vhci(0x0, 0x21) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000a40)={r2, 0x0, 0x30, 0x5}, &(0x7f0000000a80)=0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000003c0), 0x29, 0x200000) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000500)=0x7, 0x4) socket$alg(0x26, 0x5, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000300)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r7, &(0x7f0000000900)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @adiantum, 0x10, @desc1}) 4.335454617s ago: executing program 0 (id=444): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0x7}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7", 0x76, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r7], 0x94}}, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r11) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000200000000000600000914000200fe8800000000000000000000000000010f000700756e636f6e66696e65640000140003"], 0x4c}, 0x2, 0x34005}, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x11, 0x80000001, 0xf00, 0xffffff00, 0x3, 0x0, 0x0, 0x0, 0x1}}) 3.130213102s ago: executing program 0 (id=448): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) umount2(0x0, 0x10) lstat64(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000a00)) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) sendmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0x3a, 0x2, 0x0, 0x0, "42c7e8130a75669a56ff2ccc7914a37676a0d0498d4383478dccf7d8583d17bc55e71800"}, 0x48}, 0x1, 0x0, 0x0, 0x61972e87988bb667}, 0x8000) timer_create(0x1, &(0x7f0000000e00)={0x0, 0xb, 0x1}, &(0x7f0000000e40)=0x0) timer_gettime(r2, &(0x7f0000000e80)) sendmmsg$alg(r1, &(0x7f0000004fc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x1}], 0x1, 0x1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, 0x0, 0x4) 3.095244316s ago: executing program 2 (id=449): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x20000000, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x64010100, @in6=@dev={0xfe, 0x80, '\x00', 0x31}}}]}, 0x80}}, 0x4008) 2.930535606s ago: executing program 0 (id=450): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x141a42, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) symlinkat(&(0x7f0000000280)='./file2\x00', r1, 0x0) lsm_set_self_attr(0x65, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1], 0x20, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000180)=0x2) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000740)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}]}}}]}, 0x40}}, 0x0) 2.930289478s ago: executing program 2 (id=451): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7", 0x76, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r7], 0x94}}, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r11) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000200000000000600000914000200fe8800000000000000000000000000010f000700756e636f6e66696e65640000140003"], 0x4c}, 0x2, 0x34005}, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x11, 0x80000001, 0xf00, 0xffffff00, 0x3, 0x0, 0x0, 0x0, 0x1}}) 1.930220974s ago: executing program 2 (id=452): openat$ptmx(0xffffff9c, &(0x7f0000000140), 0x214040, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060500080000000000000000000000140007800500140080ff00000800124008001f0005000100060000000500050002000000050000000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x4008880) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'dh\x00'}, 0x2c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 1.828142475s ago: executing program 2 (id=453): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b708000000020000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKZEROOUT(r5, 0x40101286, &(0x7f0000000240)={0xffffffffffffffff, 0x747}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) 1.666669489s ago: executing program 3 (id=454): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003200), 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') openat$sndseq(0xffffffffffffff9c, 0x0, 0xe044) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1d, 0x0, 0x0, 0xb) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) 1.55011023s ago: executing program 3 (id=455): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0x7}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7", 0x76, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r7], 0x94}}, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r11) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000200000000000600000914000200fe8800000000000000000000000000010f000700756e636f6e66696e65640000140003"], 0x4c}, 0x2, 0x34005}, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x11, 0x80000001, 0xf00, 0xffffff00, 0x3, 0x0, 0x0, 0x0, 0x1}}) 1.549421437s ago: executing program 1 (id=436): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100ff05008a0004"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.276931736s ago: executing program 1 (id=456): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000700)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000740)={0x78, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8779}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe61}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0500000000000029e7cbfe7099527691aa3116200440", @ANYRES32=r3, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240), 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000020601080000000000000000000000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a69700043ae0897fdbe37b004b57d8795c94955ed0acb4a9a3f7c5459f57496cb4f14a4abad48acf1c2f2c307a88896140cf80abf8583dc145dcc500214e2aa66cfded9ce936b51ed490e0d4739c6379f972e"], 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040601030000000000200000000000000500010007"], 0x1c}}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r9, 0x58, &(0x7f0000000680)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r10}, 0xc) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) r11 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r11, 0x0, 0x0, 'syz1\x00', 0x0}) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x10000, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRESOCT=r11]) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000600)='./file0\x00', &(0x7f0000000200)='hpfs\x00', 0x10000, &(0x7f00000007c0)='\x14\xfc\xd4\xec\xdd\xc7\x1c\xbb\x8a+\x86\xaf\xa1D\xa2\xad\xc5\x92jzBGpV\n\xc1W{\xf5\xab\xb6Q\x97\x91\xf3\x10\xc2iFLT]\xb5\xb2~\x01\xdfqv\xa5\xa5\xe1\xba99F\xd4\xbc\xf5}*}\x1b1\xd1\x9d7s\x0e\xbb\x1d\xac\xad\x1d8\x02\x97\xa5\xef\x12\xf2T\x02%p\x9e?\xc9\xec\xb4\x8a8\x91\xe1W\xbcZ_d\xe3c\x19^M\x11\xc2\xd3\xd6f\xb9\xd8X\xb5c^\x7fw\x19') 618.124218ms ago: executing program 3 (id=457): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='qnx4\x00', 0x0, 0x0) 528.815464ms ago: executing program 3 (id=458): r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r3, &(0x7f00000004c0)=@rc={0x1f, @none, 0x8}, 0x80) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r2, 0x0) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000800)="4b64b6e15379a78b629e9468a209b80c75d6bbb8bb14cc80fb6f80ebda8ef4314086e3974aefb0b2928e2d540312600a444e7f779535be743d39ede3ee54c618b4cec67df4f010ef56a4007615b8baa600215a41172ecee368027f31689268fe47dd54b4eb4c77accf33506512e784c197c28f2eaa61fbfbf66e24a99a3c7fef43b865b14e7a5162d8ce6a8cddcfb51261e06ca48a22989f8e12bb9fb8e50b1341cb18749b61034d658cdd213701295fc4b4ab6471b1f1a61760a35def7a8f61a177fb969564771aa67f1b0d6b17238d80cac1d6f725e1e664b9aba6f8d2b615ec1175") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710063d2ac", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) acct(&(0x7f00000000c0)='./file0\x00') acct(&(0x7f0000000300)='./file0\x00') open$dir(&(0x7f0000000040)='./file0\x00', 0x80080, 0x17) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000a6000000a6000000040000000c0000000000000b020000000b0000000000000a010000000c00000000000002050000000b0000000100000604000000040000000000000000080000000000000000000004000000010000000e0000000b0000000300000f0200000002000000ff0f0008050000000200000000020000060000000500000000000000010000003c5c0300000000000008030000000000000000000003000000000500000003000000600b00000000005f5f00"], &(0x7f0000000680)=""/218, 0xc4, 0xda, 0x0, 0x5, 0x10000, @value}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x11, 0x4, 0x4, 0x2, 0x240c3, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x90009427, &(0x7f0000000180)) sendmsg$key(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x3, 0x8a, 0x5, 0x29, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x4d3, 0x4, 0x4, 0x57, 0x2, 0x80000001}, @sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x6e6bb5, 0x7, {0x6, 0x3c, 0x6, 0x4, 0x0, 0x6, 0x0, @in6=@remote, @in6=@remote}}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd29}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, @in6={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3de00000}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, @sadb_x_sec_ctx={0x7, 0x18, 0x5, 0x4, 0x29, "3a5ce6d8d590f72cd0fd122edb0bb574214016ffe4b01da7cdc62153652f2b168da030b5a13356724e"}, @sadb_sa={0x2, 0x1, 0x4d6, 0x7f, 0x4b, 0x93, 0x3}, @sadb_address={0x3, 0x5, 0x2b, 0x20, 0x0, @in={0x2, 0x4e20, @multicast1}}]}, 0x148}}, 0x408a041) r8 = openat$vmci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r8, 0x7b2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) fcntl$lock(r9, 0x570ad62ec0de6a4f, &(0x7f00000005c0)={0x1, 0x3, 0x2, 0x300, r10}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 456.821095ms ago: executing program 2 (id=459): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@verity_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@volatile}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x71e5b314, 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)="d336bd75243cb9a6418e", 0xa}], 0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000340)=""/151, 0x97, 0x0, &(0x7f0000000200)=""/44, 0x2c}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r1, 0xffffffffffffffff}, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'ip6gretap0\x00', 0x0}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x3, 0x12) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r7, 0x802c550a, &(0x7f0000000280)=@urb_type_control={0x2, {0xf, 0x1}, 0x4, 0xa0, &(0x7f0000000000)={0x0, 0x18, 0x7, 0x6, 0x7}, 0x8, 0x10a9, 0x80, 0x0, 0x8, 0x80, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x13, 0x10, &(0x7f00000004c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @jmp={0x5, 0x0, 0x8, 0x0, 0xb, 0x50, 0x8}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x3}], &(0x7f0000000540)='GPL\x00', 0x7ff, 0x49, &(0x7f0000000580)=""/73, 0x41100, 0x41, '\x00', r5, @fallback=0x2f, r6, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000700)=[r1, r1], &(0x7f0000000740)=[{0x0, 0x4, 0xa}, {0x2, 0x2, 0x3, 0x9}, {0x4, 0x3, 0xd, 0x9}, {0x1, 0x1, 0x9, 0xc}, {0x3, 0x5, 0x7, 0x8}, {0x3, 0x5, 0x3, 0xb}, {0x1, 0x1, 0x10, 0x9}, {0x4, 0x1, 0x7, 0x9}], 0x10, 0x10001, @void, @value}, 0x94) r8 = syz_io_uring_setup(0x756b, &(0x7f0000000000)={0x0, 0x2118, 0x2, 0x3, 0x33d}, &(0x7f0000000080), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, &(0x7f00000001c0)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_op={0x1, 0xe}, @ioring_restriction_sqe_op={0x1, 0x13}], 0x3) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70ad30, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048086}, 0x20000810) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) r10 = inotify_init1(0x0) inotify_add_watch(r10, &(0x7f0000000200)='.\x00', 0x10000a0) dup(r10) 210.531429ms ago: executing program 0 (id=460): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0xd0, 0x31, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc1}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x474}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0xd0}}, 0x166b1ab5eb710134) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030009060000000000ffffffffffffffff0300"], 0x30}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00000050000100053582c137153e370248018088a81700894f", 0x33fe0}], 0x1}, 0x0) 199.761678ms ago: executing program 2 (id=461): syz_emit_vhci(0x0, 0x21) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000a40)={r2, 0x0, 0x30, 0x5}, &(0x7f0000000a80)=0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000003c0), 0x29, 0x200000) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000500)=0x7, 0x4) socket$alg(0x26, 0x5, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000300)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r7, &(0x7f0000000900)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @adiantum, 0x10, @desc1}) 160.553167ms ago: executing program 1 (id=462): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1, 0xfd85, {0x0}, {}, 0x4, 0xfffffffffffffffd}) prlimit64(r0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x541b, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1100000000f336, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r4 = socket$caif_stream(0x25, 0x1, 0x0) ppoll(&(0x7f0000000800)=[{r4}], 0x1, &(0x7f0000000880)={0x0, 0x989680}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001811000053a3148c47c7c303e2635604fa97b15557a432e10b3d7557468242a59624d9c62dbcdcd4c03ae094c4db6c915cf80313f1c5094a0cf16c7bab3f0fd42d91c6c2d26f4bfba613d3f4f8c899b2d85fa7687172b1c689a52a4c1d9fe3852ff1ed9243e7d6b6124fe93efe81ed77dcb291000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) timer_create(0x3, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r6, &(0x7f0000000080)) 69.29522ms ago: executing program 0 (id=463): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003200), 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe044) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1d, 0x0, 0x0, 0xb) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=464): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000001540)=@file={0x1, './file0\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) set_mempolicy(0x3, &(0x7f0000000000)=0xfffffffffffffffb, 0x1000) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xa02a, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) r6 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) ioctl$NBD_DO_IT(r4, 0xab03) kernel console output (not intermixed with test programs): keep mac addresses unique to avoid problems! [ 78.710845][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.713746][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.716391][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.719867][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.722538][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.725573][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.734820][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.743923][ T5893] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.746752][ T5893] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.752625][ T5893] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.756094][ T5893] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.866067][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.883214][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.913187][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.917034][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.129998][ T5363] Bluetooth: hci4: command tx timeout [ 79.671939][ T5932] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.673831][ T5932] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.675459][ T5932] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.677077][ T5932] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.698948][ T5932] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 79.699675][ T39] audit: type=1326 audit(1728287959.732:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.3.131" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x0 [ 79.700534][ T5932] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 79.712654][ T5932] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 80.278071][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 80.503321][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.505961][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.517693][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.519773][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.522668][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.525318][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.528353][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.530995][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.534277][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.536861][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.539843][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.542236][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.544549][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.547099][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.550126][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.552780][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.555386][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.558064][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.560129][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.562692][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.565223][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.575114][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.577995][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.580721][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.583519][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.586169][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.588662][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.591182][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.593249][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.595770][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.599396][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.602036][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.609473][ T25] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 80.787664][ T2793] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 80.959083][ T2793] usb 8-1: config 0 has no interfaces? [ 80.961068][ T2793] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 80.964379][ T2793] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.993768][ T2793] usb 8-1: config 0 descriptor?? [ 81.137619][ T4781] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.671969][ T978] usb 8-1: USB disconnect, device number 3 [ 81.687757][ T4781] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.689511][ T4781] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.691113][ T4781] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.767549][ T5363] Bluetooth: hci4: command 0x041b tx timeout [ 82.014565][ T5955] netlink: 'syz.0.148': attribute type 9 has an invalid length. [ 82.016648][ T5955] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.148'. [ 82.024087][ T5955] openvswitch: netlink: Message has 8 unknown bytes. [ 82.351068][ T4781] Bluetooth: hci1: adv larger than maximum supported [ 82.355641][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 82.381825][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'. [ 82.837555][ T978] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 82.987787][ T978] usb 8-1: Using ep0 maxpacket: 16 [ 82.996945][ T978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9 [ 83.000895][ T978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.003906][ T978] usb 8-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 83.006285][ T978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.011684][ T978] usb 8-1: config 0 descriptor?? [ 83.193207][ T4781] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 83.312489][ T978] usb 8-1: string descriptor 0 read error: -71 [ 83.331184][ T978] usbhid 8-1:0.0: can't add hid device: -71 [ 83.332805][ T978] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 83.336973][ T978] usb 8-1: USB disconnect, device number 4 [ 83.573259][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 83.847963][ T4781] Bluetooth: hci4: command 0x041b tx timeout [ 84.167612][ T5363] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 84.282428][ T5984] netlink: 'syz.2.158': attribute type 9 has an invalid length. [ 84.286125][ T5984] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.158'. [ 84.298781][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.301539][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.304214][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.321735][ T5984] openvswitch: netlink: Message has 8 unknown bytes. [ 84.324690][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.337452][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.340168][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.342861][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.345550][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.355085][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.366833][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.373144][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.375687][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.378628][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.381224][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.383805][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.386330][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.400561][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.403175][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.407692][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.410510][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.413130][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.415689][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.439661][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.443915][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.446536][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.453178][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.456114][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.464008][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.466650][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.472230][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.474869][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.478281][ T1284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 84.484550][ T1284] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 84.577496][ T64] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 84.749007][ T64] usb 5-1: config 0 has no interfaces? [ 84.751381][ T64] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 84.767524][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.781906][ T64] usb 5-1: config 0 descriptor?? [ 85.396524][ T978] usb 5-1: USB disconnect, device number 6 [ 85.931502][ T4781] Bluetooth: hci4: command 0x041b tx timeout [ 86.632745][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 87.359655][ T6030] netlink: 'syz.3.168': attribute type 9 has an invalid length. [ 87.362324][ T6030] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.168'. [ 87.365517][ T6030] openvswitch: netlink: Message has 8 unknown bytes. [ 87.710590][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 88.010395][ T4781] Bluetooth: hci4: command 0x041b tx timeout [ 88.732729][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.735425][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.738243][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.740810][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.744499][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.747685][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.765441][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.777629][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.780146][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.787639][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.790186][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.792718][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.807466][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.810157][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.814973][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.818755][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.822505][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.824964][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.837940][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.840596][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.843149][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.845678][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.877450][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.880137][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.882700][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.885282][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.891977][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.894163][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.896522][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.899375][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.901990][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.904521][ T5408] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.909516][ T5408] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 89.007516][ T64] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 89.022117][ T5363] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.025717][ T5363] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.028858][ T5363] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.031130][ T5363] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.033814][ T5363] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.035745][ T5363] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.168620][ T64] usb 8-1: config 0 has no interfaces? [ 89.170272][ T64] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 89.174995][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.181671][ T64] usb 8-1: config 0 descriptor?? [ 89.491241][ T6048] chnl_net:caif_netlink_parms(): no params data found [ 89.582607][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.585463][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.588574][ T6048] bridge_slave_0: entered allmulticast mode [ 89.591597][ T6048] bridge_slave_0: entered promiscuous mode [ 89.595827][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.599040][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.601235][ T6048] bridge_slave_1: entered allmulticast mode [ 89.603279][ T6048] bridge_slave_1: entered promiscuous mode [ 89.631915][ T6048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.636964][ T6048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.673191][ T6048] team0: Port device team_slave_0 added [ 89.677187][ T6048] team0: Port device team_slave_1 added [ 89.750134][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.754170][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.768752][ T6048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.779454][ T6062] FAULT_INJECTION: forcing a failure. [ 89.779454][ T6062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.781440][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.789020][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.797423][ T6062] CPU: 2 UID: 0 PID: 6062 Comm: syz.2.175 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 89.800309][ T6062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.800472][ T6048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.803331][ T6062] Call Trace: [ 89.803338][ T6062] [ 89.803344][ T6062] dump_stack_lvl+0x16c/0x1f0 [ 89.810078][ T6062] should_fail_ex+0x497/0x5b0 [ 89.811329][ T6062] _copy_from_iter+0x29b/0x13e0 [ 89.812617][ T6062] ? __pfx__copy_from_iter+0x10/0x10 [ 89.814023][ T6062] ? __virt_addr_valid+0x1a4/0x590 [ 89.815374][ T6062] ? __virt_addr_valid+0x5e/0x590 [ 89.816698][ T6062] ? __phys_addr_symbol+0x30/0x80 [ 89.818033][ T6062] ? __check_object_size+0x488/0x710 [ 89.819431][ T6062] netlink_sendmsg+0x813/0xd70 [ 89.820705][ T6062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.822107][ T6062] ? lock_acquire+0x2f/0xb0 [ 89.823319][ T6062] ____sys_sendmsg+0x9ae/0xb40 [ 89.824593][ T6062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.825999][ T6062] ? get_compat_msghdr+0x11b/0x170 [ 89.827579][ T6062] ? __pfx___lock_acquire+0x10/0x10 [ 89.828958][ T6062] ___sys_sendmsg+0x135/0x1e0 [ 89.830224][ T6062] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.831616][ T6062] ? lock_acquire+0x2f/0xb0 [ 89.832825][ T6062] ? __fget_files+0x40/0x3f0 [ 89.834082][ T6062] ? fdget+0x176/0x210 [ 89.835171][ T6062] __sys_sendmsg+0x117/0x1f0 [ 89.836403][ T6062] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.837760][ T6062] ? __fget_files+0x244/0x3f0 [ 89.839005][ T6062] __do_fast_syscall_32+0x73/0x120 [ 89.840354][ T6062] do_fast_syscall_32+0x32/0x80 [ 89.841647][ T6062] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.843308][ T6062] RIP: 0023:0xf7f57579 [ 89.844389][ T6062] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 89.849406][ T6062] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 89.851579][ T6062] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000440 [ 89.853919][ T6062] RDX: 0000000000044844 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.856094][ T6062] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.858179][ T6062] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 89.860275][ T6062] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.862373][ T6062] [ 89.909362][ T6048] hsr_slave_0: entered promiscuous mode [ 89.911306][ T6048] hsr_slave_1: entered promiscuous mode [ 89.913235][ T6048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.916018][ T6048] Cannot create hsr debugfs directory [ 89.925316][ T64] usb 8-1: USB disconnect, device number 5 [ 90.088434][ T6048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.091349][ T5363] Bluetooth: hci4: command 0x041b tx timeout [ 90.139954][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 90.284017][ T6048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.375402][ T6048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.450301][ T6048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.526063][ T6048] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.529367][ T6048] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.532501][ T6048] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.535845][ T6048] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.585954][ T6048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.596660][ T6068] netlink: 'syz.3.177': attribute type 9 has an invalid length. [ 90.601685][ T6048] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.605703][ T6068] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.177'. [ 90.606698][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.610047][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.610202][ T6068] openvswitch: netlink: Message has 8 unknown bytes. [ 90.618507][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.620397][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.647195][ T6048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.657093][ T6048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.752773][ T6048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.774696][ T6048] veth0_vlan: entered promiscuous mode [ 90.779831][ T6048] veth1_vlan: entered promiscuous mode [ 90.792361][ T6048] veth0_macvtap: entered promiscuous mode [ 90.796524][ T6048] veth1_macvtap: entered promiscuous mode [ 90.806332][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.810604][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.813382][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.816299][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.819682][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.822373][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.824914][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.828520][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.831088][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.833807][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.837162][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.843190][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.848418][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.851073][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.853778][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.856285][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.859817][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.864424][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.867239][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.871235][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.874116][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.878459][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.885469][ T6048] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.889066][ T6048] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.891385][ T6048] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.893704][ T6048] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.932990][ T6083] FAULT_INJECTION: forcing a failure. [ 90.932990][ T6083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.938262][ T6083] CPU: 3 UID: 0 PID: 6083 Comm: syz.3.180 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 90.942058][ T6083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.945929][ T6083] Call Trace: [ 90.946850][ T6083] [ 90.947640][ T6083] dump_stack_lvl+0x16c/0x1f0 [ 90.948875][ T6083] should_fail_ex+0x497/0x5b0 [ 90.950321][ T6083] _copy_from_user+0x30/0xf0 [ 90.951544][ T6083] input_event_from_user+0x22d/0x3b0 [ 90.952994][ T6083] ? __pfx_input_event_from_user+0x10/0x10 [ 90.954828][ T6083] ? input_inject_event+0x193/0x370 [ 90.956213][ T6083] evdev_write+0x377/0x750 [ 90.957409][ T6083] ? __pfx_evdev_write+0x10/0x10 [ 90.958721][ T6083] ? bpf_lsm_file_permission+0x9/0x10 [ 90.960187][ T6083] ? security_file_permission+0x71/0x210 [ 90.961775][ T6083] ? __pfx_evdev_write+0x10/0x10 [ 90.963508][ T6083] vfs_write+0x28e/0x1140 [ 90.965146][ T6083] ? __fget_files+0x23a/0x3f0 [ 90.966878][ T6083] ? __pfx_lock_release+0x10/0x10 [ 90.968750][ T6083] ? trace_lock_acquire+0x14a/0x1d0 [ 90.970637][ T6083] ? __pfx_vfs_write+0x10/0x10 [ 90.972384][ T6083] ? lock_acquire+0x2f/0xb0 [ 90.974038][ T6083] ? __fget_files+0x40/0x3f0 [ 90.975745][ T6083] ? __fget_files+0x244/0x3f0 [ 90.977464][ T6083] ksys_write+0x1fa/0x260 [ 90.978586][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.979018][ T6083] ? __pfx_ksys_write+0x10/0x10 [ 90.981921][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.983743][ T6083] __do_fast_syscall_32+0x73/0x120 [ 90.987550][ T6083] do_fast_syscall_32+0x32/0x80 [ 90.989104][ T6083] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.991002][ T6083] RIP: 0023:0xf7f80579 [ 90.992067][ T6083] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 90.998608][ T6083] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 91.001705][ T6083] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000040 [ 91.004366][ T6083] RDX: 00000000000012d8 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.006998][ T6083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.009618][ T6083] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 91.012309][ T6083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.015010][ T6083] [ 91.023921][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.025980][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.127561][ T5363] Bluetooth: hci5: command tx timeout [ 91.357649][ T6100] fuse: Unknown parameter '&d' [ 91.693617][ T6103] netlink: 'syz.0.185': attribute type 9 has an invalid length. [ 91.697163][ T6103] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.185'. [ 91.700904][ T6103] openvswitch: netlink: Message has 8 unknown bytes. [ 91.838364][ T6106] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 92.013619][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 92.167537][ T5363] Bluetooth: hci4: command 0x041b tx timeout [ 92.263924][ T6112] autofs: Bad value for 'fd' [ 92.292178][ T39] audit: type=1804 audit(1728287972.322:10): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.187" name="/newroot/15/bus/bus" dev="overlay" ino=106 res=1 errno=0 [ 92.292457][ T6112] evm: overlay not supported [ 92.987533][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 93.127499][ T25] usb 5-1: device descriptor read/64, error -71 [ 93.207846][ T5363] Bluetooth: hci5: command tx timeout [ 93.367721][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 93.497600][ T25] usb 5-1: device descriptor read/64, error -71 [ 93.607640][ T25] usb usb5-port1: attempt power cycle [ 93.957490][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 93.997580][ T25] usb 5-1: device descriptor read/8, error -71 [ 94.052266][ T6131] input: syz0 as /devices/virtual/input/input7 [ 94.247855][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 94.268529][ T25] usb 5-1: device descriptor read/8, error -71 [ 94.377797][ T25] usb usb5-port1: unable to enumerate USB device [ 94.805676][ T6137] netlink: 'syz.1.194': attribute type 9 has an invalid length. [ 94.809823][ T6137] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.194'. [ 94.814387][ T6137] openvswitch: netlink: Message has 8 unknown bytes. [ 94.909901][ T6142] No such timeout policy "syz1" [ 94.917600][ T6141] misc userio: Can't change port type on an already running userio instance [ 95.287626][ T5363] Bluetooth: hci5: command tx timeout [ 95.487660][ T978] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 95.642585][ T978] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.646393][ T978] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 95.650651][ T978] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 95.653181][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.660207][ T6146] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 95.664372][ T978] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 95.904791][ T6146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.909052][ T6146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.947937][ T978] usb 6-1: USB disconnect, device number 4 [ 96.628480][ T39] audit: type=1326 audit(1728287976.662:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6147 comm="syz.0.198" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc0579 code=0x7fc00000 [ 97.368355][ T5363] Bluetooth: hci5: command tx timeout [ 97.506929][ T39] audit: type=1326 audit(1728287977.532:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.1.202" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x0 [ 97.598145][ T6168] netlink: 'syz.0.203': attribute type 9 has an invalid length. [ 97.600266][ T6168] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.203'. [ 97.602706][ T6168] openvswitch: netlink: Message has 8 unknown bytes. [ 97.695377][ T6173] FAULT_INJECTION: forcing a failure. [ 97.695377][ T6173] name failslab, interval 1, probability 0, space 0, times 0 [ 97.715201][ T6173] CPU: 2 UID: 0 PID: 6173 Comm: syz.1.205 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 97.718787][ T6173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.722382][ T6173] Call Trace: [ 97.723510][ T6173] [ 97.724522][ T6173] dump_stack_lvl+0x16c/0x1f0 [ 97.726142][ T6173] should_fail_ex+0x497/0x5b0 [ 97.727735][ T6173] ? fs_reclaim_acquire+0xae/0x160 [ 97.729480][ T6173] should_failslab+0xc2/0x120 [ 97.731083][ T6173] __kmalloc_cache_noprof+0x6b/0x310 [ 97.732888][ T6173] ? ovl_init_fs_context+0x96/0x5d0 [ 97.734654][ T6173] ? kasan_save_track+0x14/0x30 [ 97.736311][ T6173] ovl_init_fs_context+0x96/0x5d0 [ 97.738028][ T6173] ? __pfx_ovl_init_fs_context+0x10/0x10 [ 97.739921][ T6173] alloc_fs_context+0x54a/0x9c0 [ 97.741593][ T6173] path_mount+0xbfb/0x1f10 [ 97.743124][ T6173] ? kmem_cache_free+0x152/0x4b0 [ 97.744805][ T6173] ? __pfx_path_mount+0x10/0x10 [ 97.746460][ T6173] ? putname+0x12e/0x170 [ 97.747913][ T6173] __ia32_sys_mount+0x292/0x310 [ 97.749505][ T6173] ? __pfx___ia32_sys_mount+0x10/0x10 [ 97.751290][ T6173] __do_fast_syscall_32+0x73/0x120 [ 97.753020][ T6173] do_fast_syscall_32+0x32/0x80 [ 97.754661][ T6173] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.756741][ T6173] RIP: 0023:0xf7f73579 [ 97.758124][ T6173] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 97.764569][ T6173] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 97.767387][ T6173] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000240 [ 97.770034][ T6173] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000020000180 [ 97.772482][ T6173] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.774564][ T6173] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 97.776105][ T6179] hpfs: bad mount options. [ 97.776753][ T6173] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.776773][ T6173] [ 98.694878][ T6190] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.003750][ T6193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.209'. [ 99.564402][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 99.574040][ T39] audit: type=1326 audit(1728287979.602:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.0.212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc0579 code=0x7fc00000 [ 99.678572][ T6211] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.217'. [ 99.681702][ T6211] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.217'. [ 99.727340][ T5363] Bluetooth: hci4: unexpected event for opcode 0x200c [ 99.756212][ T6215] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 99.949758][ T6227] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 99.961890][ T6227] hpfs: bad mount options. [ 100.137735][ T64] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 100.190693][ T6230] input: syz0 as /devices/virtual/input/input9 [ 100.309570][ T64] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.312426][ T64] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.314969][ T64] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.317307][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.343165][ T6226] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.346342][ T64] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.371614][ T6230] netlink: 'syz.1.224': attribute type 10 has an invalid length. [ 100.388079][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.391769][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.432340][ T6230] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.435169][ T6230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.437217][ T6230] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.439110][ T6230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.453237][ T6230] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 100.456197][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 100.459793][ T6231] bridge_slave_1: left allmulticast mode [ 100.461384][ T6231] bridge_slave_1: left promiscuous mode [ 100.463231][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.474636][ T6231] bridge_slave_0: left allmulticast mode [ 100.476338][ T6231] bridge_slave_0: left promiscuous mode [ 100.478622][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.533962][ T6231] bond0: (slave bridge0): Releasing backup interface [ 100.572743][ T6226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.589060][ T6226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.774716][ T25] usb 5-1: USB disconnect, device number 11 [ 101.006318][ T6242] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.228'. [ 101.018776][ T6242] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.228'. [ 101.023366][ T5363] Bluetooth: hci4: unexpected event for opcode 0x200c [ 101.031796][ T4781] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 101.034709][ T4781] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 101.036943][ T4781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 101.039534][ T4781] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 101.041749][ T4781] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 101.043763][ T4781] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 101.099791][ T6246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.229'. [ 101.228310][ T6243] chnl_net:caif_netlink_parms(): no params data found [ 101.349335][ T6243] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.351889][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.354670][ T6243] bridge_slave_0: entered allmulticast mode [ 101.358663][ T6243] bridge_slave_0: entered promiscuous mode [ 101.362765][ T6243] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.365515][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.368904][ T6243] bridge_slave_1: entered allmulticast mode [ 101.371903][ T6243] bridge_slave_1: entered promiscuous mode [ 101.470814][ T6264] FAULT_INJECTION: forcing a failure. [ 101.470814][ T6264] name failslab, interval 1, probability 0, space 0, times 0 [ 101.474310][ T6264] CPU: 3 UID: 0 PID: 6264 Comm: syz.0.235 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 101.477161][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.481029][ T6264] Call Trace: [ 101.482255][ T6264] [ 101.483153][ T6264] dump_stack_lvl+0x16c/0x1f0 [ 101.484397][ T6264] should_fail_ex+0x497/0x5b0 [ 101.485701][ T6264] should_failslab+0xc2/0x120 [ 101.486954][ T6264] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 101.488359][ T6264] ? skb_clone+0x190/0x3f0 [ 101.489547][ T6264] skb_clone+0x190/0x3f0 [ 101.490668][ T6264] netlink_deliver_tap+0xb26/0xcf0 [ 101.492012][ T6264] netlink_unicast+0x5e1/0x7f0 [ 101.493338][ T6264] ? __pfx_netlink_unicast+0x10/0x10 [ 101.494724][ T6264] ? __phys_addr_symbol+0x30/0x80 [ 101.496044][ T6264] ? __check_object_size+0x488/0x710 [ 101.497503][ T6264] netlink_sendmsg+0x8b8/0xd70 [ 101.498745][ T6264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.500109][ T6264] ? lock_acquire+0x2f/0xb0 [ 101.501301][ T6264] ____sys_sendmsg+0x9ae/0xb40 [ 101.502581][ T6264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.503947][ T6264] ? get_compat_msghdr+0x11b/0x170 [ 101.505318][ T6264] ? __pfx___lock_acquire+0x10/0x10 [ 101.506731][ T6264] ___sys_sendmsg+0x135/0x1e0 [ 101.507982][ T6264] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.509363][ T6264] ? lock_acquire+0x2f/0xb0 [ 101.510551][ T6264] ? __fget_files+0x40/0x3f0 [ 101.511765][ T6264] ? fdget+0x176/0x210 [ 101.512890][ T6264] __sys_sendmsg+0x117/0x1f0 [ 101.514127][ T6264] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.515473][ T6264] ? __fget_files+0x244/0x3f0 [ 101.516751][ T6264] __do_fast_syscall_32+0x73/0x120 [ 101.518153][ T6264] do_fast_syscall_32+0x32/0x80 [ 101.519439][ T6264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.521497][ T6264] RIP: 0023:0xf7fc0579 [ 101.522594][ T6264] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 101.527667][ T6264] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 101.529840][ T6264] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 101.531885][ T6264] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.533995][ T6264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.536072][ T6264] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 101.538301][ T6264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.540356][ T6264] [ 101.545596][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 101.551906][ T6243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.555972][ T6243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.616634][ T6243] team0: Port device team_slave_0 added [ 101.620654][ T6243] team0: Port device team_slave_1 added [ 101.625176][ T6268] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.236'. [ 101.635816][ T6268] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.236'. [ 101.647492][ T5363] Bluetooth: hci0: unexpected event for opcode 0x200c [ 101.703563][ T6271] FAULT_INJECTION: forcing a failure. [ 101.703563][ T6271] name failslab, interval 1, probability 0, space 0, times 0 [ 101.707113][ T6271] CPU: 3 UID: 0 PID: 6271 Comm: syz.0.237 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 101.709772][ T6271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.712541][ T6271] Call Trace: [ 101.713439][ T6271] [ 101.714229][ T6271] dump_stack_lvl+0x16c/0x1f0 [ 101.715475][ T6271] should_fail_ex+0x497/0x5b0 [ 101.716759][ T6271] ? fs_reclaim_acquire+0xae/0x160 [ 101.718104][ T6271] should_failslab+0xc2/0x120 [ 101.719378][ T6271] __kmalloc_cache_noprof+0x6b/0x310 [ 101.721197][ T6271] ? tcp_sendmsg_fastopen+0x23a/0x700 [ 101.722688][ T6271] tcp_sendmsg_fastopen+0x23a/0x700 [ 101.724165][ T6271] tcp_sendmsg_locked+0x2016/0x3750 [ 101.725776][ T6271] ? hlock_class+0x4e/0x130 [ 101.727049][ T6271] ? lock_acquire.part.0+0x11b/0x380 [ 101.728435][ T6271] ? find_held_lock+0x2d/0x110 [ 101.729739][ T6271] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 101.731181][ T6271] ? tcp_sendmsg+0x20/0x50 [ 101.732357][ T6271] ? __local_bh_enable_ip+0xa4/0x120 [ 101.733767][ T6271] tcp_sendmsg+0x2e/0x50 [ 101.734885][ T6271] ? __pfx_tcp_sendmsg+0x10/0x10 [ 101.736223][ T6271] inet_sendmsg+0xb9/0x140 [ 101.737430][ T6271] ____sys_sendmsg+0x907/0xb40 [ 101.738691][ T6271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.740097][ T6271] ? get_compat_msghdr+0x11b/0x170 [ 101.741473][ T6271] ? __pfx___lock_acquire+0x10/0x10 [ 101.742837][ T6271] ___sys_sendmsg+0x135/0x1e0 [ 101.744079][ T6271] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.745452][ T6271] ? lock_acquire+0x2f/0xb0 [ 101.746676][ T6271] ? __fget_files+0x40/0x3f0 [ 101.747931][ T6271] ? fdget+0x176/0x210 [ 101.749021][ T6271] __sys_sendmmsg+0x2a5/0x450 [ 101.750310][ T6271] ? __pfx___sys_sendmmsg+0x10/0x10 [ 101.751666][ T6271] ? vfs_write+0x14d/0x1140 [ 101.752879][ T6271] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 101.754450][ T6271] ? fput+0x30/0x390 [ 101.755477][ T6271] ? ksys_write+0x1ad/0x260 [ 101.756702][ T6271] ? __pfx_ksys_write+0x10/0x10 [ 101.758087][ T6271] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 101.759593][ T6271] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 101.761308][ T6271] __do_fast_syscall_32+0x73/0x120 [ 101.762655][ T6271] do_fast_syscall_32+0x32/0x80 [ 101.763985][ T6271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.765720][ T6271] RIP: 0023:0xf7fc0579 [ 101.766909][ T6271] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 101.772583][ T6271] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 101.775195][ T6271] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001c80 [ 101.777621][ T6271] RDX: 0000000000000001 RSI: 00000000240080c4 RDI: 0000000000000000 [ 101.779739][ T6271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.781818][ T6271] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 101.783881][ T6271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.785969][ T6271] [ 101.796299][ T6243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.819889][ T6243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.820040][ T6243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.823911][ T6243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.823960][ T6243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.823981][ T6243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.927269][ T6243] hsr_slave_0: entered promiscuous mode [ 101.940810][ T6243] hsr_slave_1: entered promiscuous mode [ 101.943236][ T6243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.945537][ T6243] Cannot create hsr debugfs directory [ 101.957730][ T6273] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.993638][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 102.051029][ T6273] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 58368 (only 8 groups) [ 102.143710][ T6243] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.244598][ T6243] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.382780][ T6243] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.573523][ T6243] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.005741][ T6243] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.010834][ T6243] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.018101][ T6243] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.029285][ T6243] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.087623][ T6243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.102903][ T6243] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.110656][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.112640][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.120523][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.122497][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.128047][ T5363] Bluetooth: hci6: command tx timeout [ 103.423798][ T6243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.479813][ T6298] netlink: 'syz.3.244': attribute type 9 has an invalid length. [ 103.485209][ T6298] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.244'. [ 103.489970][ T6243] veth0_vlan: entered promiscuous mode [ 103.490091][ T6298] openvswitch: netlink: Message has 8 unknown bytes. [ 103.504238][ T6243] veth1_vlan: entered promiscuous mode [ 103.540381][ T6243] veth0_macvtap: entered promiscuous mode [ 103.547759][ T6243] veth1_macvtap: entered promiscuous mode [ 103.569205][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.576165][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.582594][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.585831][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.597222][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.603017][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.606400][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.612701][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.615741][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.622303][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.626948][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.634219][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.640104][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.652983][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.656653][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.660175][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.665315][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.672285][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.676760][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.681302][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.684239][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.686965][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.690148][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.693194][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.696382][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.700960][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.710335][ T6243] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.713210][ T6243] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.716268][ T6243] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.719754][ T6243] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.859431][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.862150][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.895752][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.898043][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.131841][ T6312] FAULT_INJECTION: forcing a failure. [ 104.131841][ T6312] name failslab, interval 1, probability 0, space 0, times 0 [ 104.136304][ T6312] CPU: 3 UID: 0 PID: 6312 Comm: syz.0.248 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 104.139663][ T6312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.142784][ T6312] Call Trace: [ 104.143701][ T6312] [ 104.144517][ T6312] dump_stack_lvl+0x16c/0x1f0 [ 104.145831][ T6312] should_fail_ex+0x497/0x5b0 [ 104.147151][ T6312] ? fs_reclaim_acquire+0xae/0x160 [ 104.148551][ T6312] should_failslab+0xc2/0x120 [ 104.149890][ T6312] __kmalloc_noprof+0xcb/0x410 [ 104.151197][ T6312] ? unwind_get_return_address+0x59/0xa0 [ 104.152712][ T6312] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 104.154660][ T6312] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 104.156444][ T6312] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 104.158717][ T6312] ? bpf_lsm_capable+0x9/0x10 [ 104.160180][ T6312] ? security_capable+0x7e/0x260 [ 104.162136][ T6312] ? ns_capable+0xd7/0x110 [ 104.163605][ T6312] genl_rcv_msg+0x565/0x800 [ 104.165245][ T6312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 104.167010][ T6312] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 104.168918][ T6312] ? __pfx_nl80211_tdls_oper+0x10/0x10 [ 104.170841][ T6312] ? __pfx_nl80211_post_doit+0x10/0x10 [ 104.172670][ T6312] ? __pfx___lock_acquire+0x10/0x10 [ 104.174427][ T6312] netlink_rcv_skb+0x165/0x410 [ 104.175966][ T6312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 104.177396][ T6312] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 104.178925][ T6312] ? down_read+0xc9/0x330 [ 104.180437][ T6312] ? __pfx_down_read+0x10/0x10 [ 104.182093][ T6314] FAULT_INJECTION: forcing a failure. [ 104.182093][ T6314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.186593][ T6312] ? netlink_deliver_tap+0x1ae/0xcf0 [ 104.188434][ T6312] genl_rcv+0x28/0x40 [ 104.189887][ T6312] netlink_unicast+0x53c/0x7f0 [ 104.191569][ T6312] ? __pfx_netlink_unicast+0x10/0x10 [ 104.193383][ T6312] ? __phys_addr_symbol+0x30/0x80 [ 104.194709][ T6312] ? __check_object_size+0x4a1/0x710 [ 104.196095][ T6312] netlink_sendmsg+0x8b8/0xd70 [ 104.197367][ T6312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.198750][ T6312] ? lock_acquire+0x2f/0xb0 [ 104.199957][ T6312] ____sys_sendmsg+0x9ae/0xb40 [ 104.201228][ T6312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.202622][ T6312] ? get_compat_msghdr+0x11b/0x170 [ 104.203976][ T6312] ? __pfx___lock_acquire+0x10/0x10 [ 104.205355][ T6312] ___sys_sendmsg+0x135/0x1e0 [ 104.206573][ T6312] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.208248][ T6312] ? lock_acquire+0x2f/0xb0 [ 104.209809][ T6312] ? __fget_files+0x40/0x3f0 [ 104.211397][ T6312] ? fdget+0x176/0x210 [ 104.212810][ T6312] __sys_sendmsg+0x117/0x1f0 [ 104.214413][ T6312] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.216160][ T6312] ? __fget_files+0x244/0x3f0 [ 104.217792][ T6312] __do_fast_syscall_32+0x73/0x120 [ 104.219541][ T6312] do_fast_syscall_32+0x32/0x80 [ 104.221220][ T6312] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.223368][ T6312] RIP: 0023:0xf7fc0579 [ 104.224765][ T6312] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 104.231304][ T6312] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 104.234124][ T6312] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 104.236797][ T6312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.239472][ T6312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.242205][ T6312] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 104.245183][ T6312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.248051][ T6312] [ 104.249160][ T6314] CPU: 2 UID: 0 PID: 6314 Comm: syz.2.249 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 104.251956][ T6314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.254829][ T6314] Call Trace: [ 104.256068][ T6314] [ 104.257267][ T6314] dump_stack_lvl+0x16c/0x1f0 [ 104.259385][ T6314] should_fail_ex+0x497/0x5b0 [ 104.261407][ T6314] _copy_from_iter+0x29b/0x13e0 [ 104.263252][ T6314] ? __pfx__copy_from_iter+0x10/0x10 [ 104.265222][ T6314] ? __virt_addr_valid+0x1a4/0x590 [ 104.267104][ T6314] ? __virt_addr_valid+0x5e/0x590 [ 104.268945][ T6314] ? __phys_addr_symbol+0x30/0x80 [ 104.270802][ T6314] ? __check_object_size+0x488/0x710 [ 104.272757][ T6314] netlink_sendmsg+0x813/0xd70 [ 104.274547][ T6314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.276480][ T6314] ? lock_acquire+0x2f/0xb0 [ 104.278160][ T6314] ____sys_sendmsg+0x9ae/0xb40 [ 104.279872][ T6314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.281815][ T6314] ? get_compat_msghdr+0x11b/0x170 [ 104.283695][ T6314] ? __pfx___lock_acquire+0x10/0x10 [ 104.285588][ T6314] ___sys_sendmsg+0x135/0x1e0 [ 104.287294][ T6314] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.289201][ T6314] ? lock_acquire+0x2f/0xb0 [ 104.290858][ T6314] ? __fget_files+0x40/0x3f0 [ 104.292565][ T6314] ? fdget+0x176/0x210 [ 104.294133][ T6314] __sys_sendmsg+0x117/0x1f0 [ 104.295915][ T6314] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.297898][ T6314] ? __fget_files+0x244/0x3f0 [ 104.299685][ T6314] __do_fast_syscall_32+0x73/0x120 [ 104.301584][ T6314] do_fast_syscall_32+0x32/0x80 [ 104.303383][ T6314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.305704][ T6314] RIP: 0023:0xf7fe5579 [ 104.307188][ T6314] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 104.313940][ T6314] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 104.316427][ T6314] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000400 [ 104.318485][ T6314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.320634][ T6314] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.322720][ T6314] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 104.324817][ T6314] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.326911][ T6314] [ 104.514517][ T6323] netlink: 'syz.0.252': attribute type 9 has an invalid length. [ 104.516965][ T6323] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.252'. [ 104.522570][ T6323] openvswitch: netlink: Message has 8 unknown bytes. [ 104.576817][ T6326] FAULT_INJECTION: forcing a failure. [ 104.576817][ T6326] name failslab, interval 1, probability 0, space 0, times 0 [ 104.582531][ T6326] CPU: 0 UID: 0 PID: 6326 Comm: syz.0.253 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 104.586299][ T6326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.590016][ T6326] Call Trace: [ 104.591206][ T6326] [ 104.592301][ T6326] dump_stack_lvl+0x16c/0x1f0 [ 104.594032][ T6326] should_fail_ex+0x497/0x5b0 [ 104.595754][ T6326] should_failslab+0xc2/0x120 [ 104.597490][ T6326] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 104.599428][ T6326] ? skb_clone+0x190/0x3f0 [ 104.601054][ T6326] skb_clone+0x190/0x3f0 [ 104.602629][ T6326] netlink_deliver_tap+0xb26/0xcf0 [ 104.604492][ T6326] netlink_unicast+0x5e1/0x7f0 [ 104.606219][ T6326] ? __pfx_netlink_unicast+0x10/0x10 [ 104.608143][ T6326] ? __phys_addr_symbol+0x30/0x80 [ 104.609953][ T6326] ? __check_object_size+0x488/0x710 [ 104.611875][ T6326] netlink_sendmsg+0x8b8/0xd70 [ 104.613660][ T6326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.615565][ T6326] ? lock_acquire+0x2f/0xb0 [ 104.617346][ T6326] ____sys_sendmsg+0x9ae/0xb40 [ 104.619378][ T6326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.621281][ T6326] ? get_compat_msghdr+0x11b/0x170 [ 104.623242][ T6326] ? __pfx___lock_acquire+0x10/0x10 [ 104.625148][ T6326] ___sys_sendmsg+0x135/0x1e0 [ 104.626858][ T6326] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.628760][ T6326] ? lock_acquire+0x2f/0xb0 [ 104.630390][ T6326] ? __fget_files+0x40/0x3f0 [ 104.632083][ T6326] ? fdget+0x176/0x210 [ 104.633627][ T6326] __sys_sendmsg+0x117/0x1f0 [ 104.635283][ T6326] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.637162][ T6326] ? __fget_files+0x244/0x3f0 [ 104.638899][ T6326] __do_fast_syscall_32+0x73/0x120 [ 104.640856][ T6326] do_fast_syscall_32+0x32/0x80 [ 104.642597][ T6326] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.644881][ T6326] RIP: 0023:0xf7fc0579 [ 104.646366][ T6326] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 104.653462][ T6326] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 104.656503][ T6326] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 104.659380][ T6326] RDX: 0000000000040084 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.662387][ T6326] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.665235][ T6326] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 104.668081][ T6326] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.670965][ T6326] [ 104.672431][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.207529][ T5363] Bluetooth: hci6: command tx timeout [ 106.222816][ T6341] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.256'. [ 106.226694][ T6341] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.256'. [ 106.273412][ T5363] Bluetooth: hci4: unexpected event for opcode 0x200c [ 106.279677][ T6343] FAULT_INJECTION: forcing a failure. [ 106.279677][ T6343] name failslab, interval 1, probability 0, space 0, times 0 [ 106.284241][ T6343] CPU: 2 UID: 0 PID: 6343 Comm: syz.0.257 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 106.287954][ T6343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.291638][ T6343] Call Trace: [ 106.292809][ T6343] [ 106.293826][ T6343] dump_stack_lvl+0x16c/0x1f0 [ 106.295496][ T6343] should_fail_ex+0x497/0x5b0 [ 106.297116][ T6343] should_failslab+0xc2/0x120 [ 106.298772][ T6343] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 106.300616][ T6343] ? skb_clone+0x190/0x3f0 [ 106.302332][ T6343] skb_clone+0x190/0x3f0 [ 106.303843][ T6343] netlink_deliver_tap+0xb26/0xcf0 [ 106.305675][ T6343] netlink_unicast+0x5e1/0x7f0 [ 106.307403][ T6343] ? __pfx_netlink_unicast+0x10/0x10 [ 106.309293][ T6343] ? __phys_addr_symbol+0x30/0x80 [ 106.311083][ T6343] ? __check_object_size+0x488/0x710 [ 106.312993][ T6343] netlink_sendmsg+0x8b8/0xd70 [ 106.314712][ T6343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.316590][ T6343] ? lock_acquire+0x2f/0xb0 [ 106.318231][ T6343] ____sys_sendmsg+0x9ae/0xb40 [ 106.319964][ T6343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.321912][ T6343] ? get_compat_msghdr+0x11b/0x170 [ 106.323755][ T6343] ? __pfx___lock_acquire+0x10/0x10 [ 106.325623][ T6343] ___sys_sendmsg+0x135/0x1e0 [ 106.327280][ T6343] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.329213][ T6343] ? lock_acquire+0x2f/0xb0 [ 106.330887][ T6343] ? __fget_files+0x40/0x3f0 [ 106.332525][ T6343] ? fdget+0x176/0x210 [ 106.333968][ T6343] __sys_sendmsg+0x117/0x1f0 [ 106.335581][ T6343] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.337366][ T6343] ? __fget_files+0x244/0x3f0 [ 106.339049][ T6343] __do_fast_syscall_32+0x73/0x120 [ 106.340830][ T6343] do_fast_syscall_32+0x32/0x80 [ 106.341123][ T6345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.258'. [ 106.342585][ T6343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.347106][ T6343] RIP: 0023:0xf7fc0579 [ 106.348520][ T6343] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 106.355348][ T6343] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 106.358304][ T6343] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 106.360996][ T6343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.363707][ T6343] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.366416][ T6343] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 106.369013][ T6343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.371817][ T6343] [ 106.467322][ T6347] netlink: 36 bytes leftover after parsing attributes in process `syz.3.259'. [ 106.481129][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 107.289914][ T5363] Bluetooth: hci6: command tx timeout [ 108.331115][ T6375] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.267'. [ 108.334783][ T6375] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.267'. [ 108.381742][ T5363] Bluetooth: hci0: unexpected event for opcode 0x200c [ 108.455640][ T6378] netlink: 'syz.0.268': attribute type 9 has an invalid length. [ 108.471331][ T6378] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.268'. [ 108.478055][ T6378] openvswitch: netlink: Message has 8 unknown bytes. [ 109.373608][ T5363] Bluetooth: hci6: command tx timeout [ 109.774950][ T6399] netlink: 'syz.0.275': attribute type 4 has an invalid length. [ 109.790243][ T6399] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.275'. [ 110.417767][ T6413] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.278'. [ 110.431360][ T5363] Bluetooth: hci0: unexpected event for opcode 0x200c [ 110.474621][ T6415] FAULT_INJECTION: forcing a failure. [ 110.474621][ T6415] name failslab, interval 1, probability 0, space 0, times 0 [ 110.479215][ T6415] CPU: 2 UID: 0 PID: 6415 Comm: syz.0.279 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 110.482597][ T6415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.486284][ T6415] Call Trace: [ 110.487470][ T6415] [ 110.488562][ T6415] dump_stack_lvl+0x16c/0x1f0 [ 110.490398][ T6415] should_fail_ex+0x497/0x5b0 [ 110.492301][ T6415] should_failslab+0xc2/0x120 [ 110.494116][ T6415] kmem_cache_alloc_node_noprof+0x71/0x310 [ 110.496168][ T6415] ? __alloc_skb+0x2b3/0x380 [ 110.497800][ T6415] __alloc_skb+0x2b3/0x380 [ 110.499377][ T6415] ? __pfx___alloc_skb+0x10/0x10 [ 110.501156][ T6415] ? __pfx_mark_lock+0x10/0x10 [ 110.502859][ T6415] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 110.504924][ T6415] ? lockdep_hardirqs_on+0x7c/0x110 [ 110.506774][ T6415] xfrm_send_policy_notify+0x219/0x1a10 [ 110.508732][ T6415] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 110.510842][ T6415] ? trace_lock_acquire+0x14a/0x1d0 [ 110.512669][ T6415] ? km_policy_notify+0x3e/0x240 [ 110.514417][ T6415] ? lock_acquire+0x2f/0xb0 [ 110.516022][ T6415] ? km_policy_notify+0x3e/0x240 [ 110.517767][ T6415] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 110.519858][ T6415] km_policy_notify+0xb0/0x240 [ 110.521563][ T6415] pfkey_spdadd+0x13f0/0x1990 [ 110.523231][ T6415] ? __pfx_pfkey_spdadd+0x10/0x10 [ 110.525000][ T6415] ? kfree_skbmem+0x1a4/0x1f0 [ 110.526659][ T6415] ? sk_skb_reason_drop+0x136/0x1a0 [ 110.528473][ T6415] ? pfkey_broadcast+0x2ab/0x460 [ 110.530221][ T6415] ? __pfx_pfkey_spdadd+0x10/0x10 [ 110.531998][ T6415] pfkey_process+0x6db/0x840 [ 110.533650][ T6415] ? __pfx_pfkey_process+0x10/0x10 [ 110.535433][ T6415] ? rcu_is_watching+0x12/0xc0 [ 110.537155][ T6415] ? __virt_addr_valid+0x5e/0x590 [ 110.538814][ T6415] ? __phys_addr_symbol+0x30/0x80 [ 110.540404][ T6415] pfkey_sendmsg+0x43b/0x840 [ 110.541829][ T6415] ____sys_sendmsg+0x9ae/0xb40 [ 110.543150][ T6415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.544656][ T6415] ? get_compat_msghdr+0x11b/0x170 [ 110.546415][ T6415] ? __pfx___lock_acquire+0x10/0x10 [ 110.548062][ T6415] ___sys_sendmsg+0x135/0x1e0 [ 110.549725][ T6415] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.551326][ T6415] ? lock_acquire+0x2f/0xb0 [ 110.552903][ T6415] ? __fget_files+0x40/0x3f0 [ 110.554538][ T6415] ? fdget+0x176/0x210 [ 110.555987][ T6415] __sys_sendmsg+0x117/0x1f0 [ 110.557627][ T6415] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.559431][ T6415] ? __fget_files+0x244/0x3f0 [ 110.561120][ T6415] __do_fast_syscall_32+0x73/0x120 [ 110.562923][ T6415] do_fast_syscall_32+0x32/0x80 [ 110.564643][ T6415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.566885][ T6415] RIP: 0023:0xf7fc0579 [ 110.568369][ T6415] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 110.575073][ T6415] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 110.577977][ T6415] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 110.580732][ T6415] RDX: 0000000000004008 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.583522][ T6415] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.586431][ T6415] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 110.589260][ T6415] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.592029][ T6415] [ 111.686755][ T6436] FAULT_INJECTION: forcing a failure. [ 111.686755][ T6436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.691439][ T6436] CPU: 2 UID: 0 PID: 6436 Comm: syz.0.286 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 111.694957][ T6436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.698664][ T6436] Call Trace: [ 111.699837][ T6436] [ 111.700871][ T6436] dump_stack_lvl+0x16c/0x1f0 [ 111.702536][ T6436] should_fail_ex+0x497/0x5b0 [ 111.704141][ T6436] _copy_from_user+0x30/0xf0 [ 111.705850][ T6436] bpf_prog_load+0x1bdd/0x2670 [ 111.707659][ T6436] ? __pfx_bpf_prog_load+0x10/0x10 [ 111.709507][ T6436] ? find_held_lock+0x2d/0x110 [ 111.711187][ T6436] __sys_bpf+0x4c8c/0x5780 [ 111.712708][ T6436] ? ksys_write+0x21e/0x260 [ 111.714345][ T6436] ? __pfx___sys_bpf+0x10/0x10 [ 111.715993][ T6436] ? vfs_write+0x14d/0x1140 [ 111.717626][ T6436] ? __mutex_unlock_slowpath+0x164/0x650 [ 111.719580][ T6436] ? fput+0x30/0x390 [ 111.720952][ T6436] ? ksys_write+0x1ad/0x260 [ 111.722537][ T6436] ? __pfx_ksys_write+0x10/0x10 [ 111.724220][ T6436] __ia32_sys_bpf+0x76/0xe0 [ 111.725816][ T6436] __do_fast_syscall_32+0x73/0x120 [ 111.727607][ T6436] do_fast_syscall_32+0x32/0x80 [ 111.729291][ T6436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.731481][ T6436] RIP: 0023:0xf7fc0579 [ 111.732881][ T6436] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 111.739422][ T6436] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 111.742273][ T6436] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000200 [ 111.745000][ T6436] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.747764][ T6436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.750600][ T6436] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 111.753331][ T6436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.756010][ T6436] [ 112.107551][ T2793] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 112.237535][ T2793] usb 5-1: device descriptor read/64, error -71 [ 112.283768][ T6445] netlink: 'syz.1.290': attribute type 9 has an invalid length. [ 112.286001][ T6445] __nla_validate_parse: 1 callbacks suppressed [ 112.286010][ T6445] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.290'. [ 112.290336][ T6445] openvswitch: netlink: Message has 8 unknown bytes. [ 112.477693][ T2793] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 112.488290][ T6452] netlink: 564 bytes leftover after parsing attributes in process `syz.1.291'. [ 112.607489][ T2793] usb 5-1: device descriptor read/64, error -71 [ 112.620758][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.625296][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.628057][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.630299][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.633147][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.635712][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.638055][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.640353][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.642908][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.645337][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.649122][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.652007][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.654155][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.657409][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.660205][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.662366][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.665155][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.668703][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.671448][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.674197][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.677144][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.687905][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.699120][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.702375][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.705279][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.710714][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.713004][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.715524][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.717970][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.718479][ T2793] usb usb5-port1: attempt power cycle [ 112.720082][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.724427][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.726571][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 112.741371][ T8] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz0 [ 113.057455][ T2793] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 113.067976][ T64] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 113.078697][ T2793] usb 5-1: device descriptor read/8, error -71 [ 113.238704][ T64] usb 8-1: config 0 has no interfaces? [ 113.240584][ T64] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 113.298212][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.308101][ T64] usb 8-1: config 0 descriptor?? [ 113.331408][ T2793] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 113.374886][ T2793] usb 5-1: device descriptor read/8, error -71 [ 113.487607][ T2793] usb usb5-port1: unable to enumerate USB device [ 114.784417][ T6471] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 115.881725][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.885180][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.887991][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.890464][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.893020][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.895699][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.898392][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.900852][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.903398][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.906029][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.908576][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.911756][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.914245][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.916827][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.920272][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.923254][ T25] usb 8-1: USB disconnect, device number 6 [ 115.926927][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.937883][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.950622][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.953179][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.955609][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.967540][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.970086][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.972737][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.975152][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.980411][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.982994][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.985445][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.988265][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.990779][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.993389][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 115.995834][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.000592][ T2793] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.007964][ T2793] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz0] on syz0 [ 116.240065][ T6496] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20000 [ 116.246114][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'. [ 116.723719][ T5359] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 116.882241][ T5359] usb 5-1: config 0 has no interfaces? [ 116.884094][ T5359] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 116.888588][ T5359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.892137][ T5359] usb 5-1: config 0 descriptor?? [ 117.541279][ T64] usb 5-1: USB disconnect, device number 16 [ 117.827529][ T5359] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 117.957591][ T5359] usb 7-1: device descriptor read/64, error -71 [ 118.211767][ T5359] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 118.348086][ T5359] usb 7-1: device descriptor read/64, error -71 [ 118.379233][ T6519] PKCS8: Unsupported PKCS#8 version [ 118.473092][ T5359] usb usb7-port1: attempt power cycle [ 118.808943][ T5359] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 118.828331][ T5359] usb 7-1: device descriptor read/8, error -71 [ 119.077629][ T5359] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 119.111063][ T5359] usb 7-1: device descriptor read/8, error -71 [ 119.234983][ T5359] usb usb7-port1: unable to enumerate USB device [ 119.523285][ T6541] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.317'. [ 119.526215][ T6541] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.317'. [ 119.573649][ T5363] Bluetooth: hci0: unexpected event for opcode 0x200c [ 119.933110][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 119.935840][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 119.940410][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 119.943061][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 119.945683][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 119.957337][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 119.966311][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 119.970024][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 119.972677][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 119.975391][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 119.984196][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 119.986941][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 119.990075][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 119.992770][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 119.995452][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 120.004374][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 120.007043][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 120.015649][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 120.024413][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 120.027150][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 120.030173][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 120.032934][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 120.035693][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 120.038931][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 120.041666][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 120.044347][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 120.047036][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 120.050203][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 120.052902][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 120.055580][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 120.059241][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 120.062201][ T1284] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 120.070539][ T1284] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz0] on syz0 [ 120.197488][ T64] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 120.373959][ T64] usb 5-1: config 0 has no interfaces? [ 120.375482][ T64] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 120.377912][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.385139][ T64] usb 5-1: config 0 descriptor?? [ 120.755411][ T5363] Bluetooth: hci6: hardware error 0x5c [ 120.960597][ T6371] usb 5-1: USB disconnect, device number 17 [ 121.760550][ T12] Bluetooth: hci7: Frame reassembly failed (-84) [ 122.809772][ T5363] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 122.863568][ T6580] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.330'. [ 122.970202][ T6586] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 122.979684][ T6586] hpfs: bad mount options. [ 123.511364][ T6589] EXT4-fs warning (device sda1): ext4_resize_fs:2019: can't read last block, resize aborted [ 123.645199][ T6591] 9pnet_fd: Insufficient options for proto=fd [ 123.651636][ T6591] 9pnet_fd: Insufficient options for proto=fd [ 123.715379][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.719678][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.722018][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.723981][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.726079][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.729537][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.732047][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.737087][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.740342][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.742928][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.745494][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.750527][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.753151][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.755766][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.762198][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.764912][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.767629][ T4781] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 123.784625][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.787668][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.796338][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.806800][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.809809][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.813136][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.815907][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.824957][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.827729][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.830434][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.833354][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.836057][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.842809][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.845421][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.865524][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.868667][ T64] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 123.875183][ T64] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz0] on syz0 [ 123.977592][ T1284] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 124.140534][ T1284] usb 6-1: config 0 has no interfaces? [ 124.143626][ T1284] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 124.147211][ T1284] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.152241][ T1284] usb 6-1: config 0 descriptor?? [ 124.702670][ T6607] netlink: 3 bytes leftover after parsing attributes in process `syz.0.338'. [ 124.706933][ T6607] 0X: renamed from caif0 [ 124.710321][ T6607] 0X: entered allmulticast mode [ 124.711766][ T6607] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 124.749648][ T6609] netlink: 'syz.0.339': attribute type 9 has an invalid length. [ 124.751681][ T6609] netlink: 69104 bytes leftover after parsing attributes in process `syz.0.339'. [ 124.754183][ T6609] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 124.761073][ T25] usb 6-1: USB disconnect, device number 5 [ 124.800601][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.808289][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.810275][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.812327][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.814748][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.825923][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.828786][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.831580][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.834305][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.836772][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.841718][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.843974][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.846512][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.849542][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.852097][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.855043][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.858312][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.862200][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.864118][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.866308][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.870076][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.874120][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.877204][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.880489][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.883001][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.885323][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.888471][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.891057][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.893005][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.907466][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.910226][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.912172][ T64] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 124.924420][ T64] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz0] on syz0 [ 125.057467][ T1284] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 125.212738][ T1284] usb 5-1: no configurations [ 125.222091][ T1284] usb 5-1: can't read configurations, error -22 [ 125.358472][ T1284] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 125.508733][ T1284] usb 5-1: no configurations [ 125.511685][ T1284] usb 5-1: can't read configurations, error -22 [ 125.514642][ T1284] usb usb5-port1: attempt power cycle [ 125.559219][ T6623] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 125.579090][ T6623] hpfs: bad mount options. [ 125.847679][ T1284] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 125.878581][ T1284] usb 5-1: no configurations [ 125.884861][ T1284] usb 5-1: can't read configurations, error -22 [ 126.008626][ T6629] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 126.017681][ T1284] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 126.039050][ T1284] usb 5-1: no configurations [ 126.040848][ T1284] usb 5-1: can't read configurations, error -22 [ 126.045835][ T1284] usb usb5-port1: unable to enumerate USB device [ 127.043044][ T6639] netlink: 'syz.3.348': attribute type 9 has an invalid length. [ 127.045528][ T6639] netlink: 69104 bytes leftover after parsing attributes in process `syz.3.348'. [ 127.051692][ T6639] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 127.101546][ T6641] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.349'. [ 127.104757][ T6641] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.349'. [ 127.152598][ T6643] netlink: 'syz.3.350': attribute type 9 has an invalid length. [ 127.155345][ T6643] netlink: 69104 bytes leftover after parsing attributes in process `syz.3.350'. [ 127.166518][ T6643] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 127.448497][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.451131][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.453667][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.456240][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.458890][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.461306][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.463742][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.466154][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.468873][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.842912][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.845553][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.848206][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.850636][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.853174][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.855681][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.858460][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.860962][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.863514][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.866078][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.868691][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.871395][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.873993][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.876535][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.879177][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.881721][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.884252][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.886803][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.889458][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.892009][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.894550][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.897087][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.899666][ T1284] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 127.905221][ T1284] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz0] on syz0 [ 128.907485][ T6371] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 128.926662][ T6664] netlink: 'syz.0.356': attribute type 4 has an invalid length. [ 129.018035][ T6665] fuse: Bad value for 'fd' [ 129.068900][ T6371] usb 7-1: config 0 has no interfaces? [ 129.071255][ T6371] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 129.074550][ T6371] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.084984][ T6371] usb 7-1: config 0 descriptor?? [ 129.121735][ T6668] xt_hashlimit: max too large, truncated to 1048576 [ 129.124310][ T6668] xt_hashlimit: overflow, try lower: 0/0 [ 129.262230][ T6671] netlink: 188 bytes leftover after parsing attributes in process `syz.1.357'. [ 129.525077][ T6675] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.358'. [ 129.531504][ T6675] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.358'. [ 129.776133][ T25] usb 7-1: USB disconnect, device number 8 [ 130.483576][ T6701] FAULT_INJECTION: forcing a failure. [ 130.483576][ T6701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.488386][ T6701] CPU: 2 UID: 0 PID: 6701 Comm: syz.0.365 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 130.491862][ T6701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.495423][ T6701] Call Trace: [ 130.496546][ T6701] [ 130.497528][ T6701] dump_stack_lvl+0x16c/0x1f0 [ 130.499184][ T6701] should_fail_ex+0x497/0x5b0 [ 130.500629][ T6701] _copy_from_user+0x30/0xf0 [ 130.502271][ T6701] get_compat_msghdr+0xa8/0x170 [ 130.503971][ T6701] ? __pfx_get_compat_msghdr+0x10/0x10 [ 130.505894][ T6701] ? find_held_lock+0x2d/0x110 [ 130.507555][ T6701] ___sys_recvmsg+0x193/0x1a0 [ 130.509117][ T6701] ? __pfx____sys_recvmsg+0x10/0x10 [ 130.510797][ T6701] ? lock_acquire+0x2f/0xb0 [ 130.512346][ T6701] ? __fget_files+0x40/0x3f0 [ 130.513876][ T6701] ? __pfx___might_resched+0x10/0x10 [ 130.515652][ T6701] ? fdget+0x176/0x210 [ 130.517084][ T6701] do_recvmmsg+0x51a/0x750 [ 130.518636][ T6701] ? __pfx_do_recvmmsg+0x10/0x10 [ 130.520341][ T6701] ? __pfx_lock_release+0x10/0x10 [ 130.522092][ T6701] ? vfs_write+0x14d/0x1140 [ 130.523669][ T6701] ? __fget_files+0x244/0x3f0 [ 130.525284][ T6701] __sys_recvmmsg+0x21e/0x280 [ 130.526897][ T6701] ? __pfx___sys_recvmmsg+0x10/0x10 [ 130.528665][ T6701] ? __pfx_ksys_write+0x10/0x10 [ 130.530330][ T6701] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 130.532417][ T6701] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.534224][ T6701] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 130.536456][ T6701] __do_fast_syscall_32+0x73/0x120 [ 130.538221][ T6701] do_fast_syscall_32+0x32/0x80 [ 130.539815][ T6701] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.541984][ T6701] RIP: 0023:0xf7fc0579 [ 130.543401][ T6701] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 130.549855][ T6701] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 130.552687][ T6701] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200055c0 [ 130.555386][ T6701] RDX: 000000000400023c RSI: 0000000000000300 RDI: 0000000000000000 [ 130.558075][ T6701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.560740][ T6701] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 130.563422][ T6701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.566119][ T6701] [ 130.807653][ T4781] Bluetooth: hci5: command 0x0405 tx timeout [ 130.917005][ T6713] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.368'. [ 130.930448][ T6713] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.368'. [ 132.315885][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.322154][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.896746][ T6745] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.377'. [ 132.907446][ T6745] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.377'. [ 132.920314][ T5363] Bluetooth: hci0: unexpected event for opcode 0x200c [ 133.080927][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 133.083794][ T6749] netlink: 'syz.0.378': attribute type 11 has an invalid length. [ 133.105319][ T6749] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.108413][ T6749] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.110909][ T6749] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.113419][ T6749] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.138711][ T6749] vxlan0: entered promiscuous mode [ 133.142906][ T6750] bpf: Bad value for 'uid' [ 134.546376][ T39] audit: type=1326 audit(1728288014.572:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.3.381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7fc00000 [ 134.718136][ T6778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.723108][ T6778] batadv_slave_0: entered promiscuous mode [ 134.854306][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.869411][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.875100][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.879523][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.884286][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.890070][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.896195][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.899432][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.902294][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.905034][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.908591][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.911592][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.914398][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.916802][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.919948][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.922577][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.925888][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.928366][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.930565][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.932738][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.935016][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.937246][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.939752][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.941944][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.944118][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.946291][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.948932][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.951110][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.953308][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.955401][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.958031][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.960273][ T35] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.963232][ T35] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz0] on syz0 [ 135.137533][ T64] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 135.365859][ T6792] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.369124][ T6792] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.374334][ T6792] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.376252][ T6792] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.380923][ T6792] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 135.386415][ T6792] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 135.389156][ T6792] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 135.396702][ T6792] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 135.695642][ T64] usb 8-1: config 0 has no interfaces? [ 135.697236][ T64] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 135.707488][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.710563][ T64] usb 8-1: config 0 descriptor?? [ 136.446229][ T5409] usb 8-1: USB disconnect, device number 7 [ 137.154260][ T6825] netlink: 'syz.3.400': attribute type 9 has an invalid length. [ 137.157104][ T6825] netlink: 69104 bytes leftover after parsing attributes in process `syz.3.400'. [ 137.160602][ T6825] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 137.453597][ T5363] Bluetooth: hci5: command 0x0405 tx timeout [ 137.455254][ T5363] Bluetooth: hci4: command 0x041b tx timeout [ 137.456867][ T5363] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.458589][ T5363] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.460211][ T5363] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.520789][ T6829] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 137.522995][ T6829] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 137.525371][ T6829] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.528111][ T6829] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.530169][ T6829] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 137.531848][ T6829] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 137.605171][ T6837] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.730365][ T39] audit: type=1326 audit(1728288017.762:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 137.737260][ T39] audit: type=1326 audit(1728288017.762:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 137.756108][ T39] audit: type=1326 audit(1728288017.762:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.406" exe="/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 137.774025][ T39] audit: type=1326 audit(1728288017.762:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 137.797469][ T39] audit: type=1326 audit(1728288017.762:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 137.803768][ T39] audit: type=1326 audit(1728288017.772:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.406" exe="/syz-executor" sig=0 arch=40000003 syscall=319 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 137.894349][ T6850] netlink: 20 bytes leftover after parsing attributes in process `syz.3.406'. [ 137.935775][ T6852] netlink: 'syz.0.409': attribute type 9 has an invalid length. [ 137.939376][ T6852] netlink: 69104 bytes leftover after parsing attributes in process `syz.0.409'. [ 137.942613][ T6852] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 138.388953][ T39] audit: type=1326 audit(1728288018.422:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 138.398667][ T39] audit: type=1326 audit(1728288018.422:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 138.567481][ T39] audit: type=1326 audit(1728288018.592:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7fc00000 [ 139.367581][ T4781] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.527622][ T4781] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.527656][ T5363] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.617504][ T5363] Bluetooth: hci5: command 0x0405 tx timeout [ 139.617561][ T4781] Bluetooth: hci4: command 0x041b tx timeout [ 139.619557][ T5363] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.567559][ T6804] sched: DL replenish lagged too much [ 141.687496][ T5362] Bluetooth: hci5: command 0x0405 tx timeout [ 141.937571][ T6873] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.939795][ T6873] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.942026][ T6873] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.944312][ T6873] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.946581][ T6873] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 141.950900][ T6873] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 142.188134][ T35] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 142.265749][ T6880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.416'. [ 142.337467][ T35] usb 5-1: Invalid ep0 maxpacket: 16 [ 142.467660][ T35] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 142.573615][ T5363] Bluetooth: hci4: unexpected event for opcode 0x200c [ 142.651628][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.654367][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.659059][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.661689][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.664254][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.666824][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.670730][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.673356][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.675920][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.680071][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.682919][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.685481][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.688173][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.691524][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.694209][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.696818][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.706034][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.708815][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.711380][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.713955][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.716610][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.719293][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.721891][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.724470][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.727073][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.729908][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.732540][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.735121][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.738082][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.740654][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.743206][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.745738][ T5389] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 142.753459][ T5389] hid-generic 0000:0000:0000.000E: hidraw1: HID v0.00 Device [syz0] on syz0 [ 142.787486][ T35] usb 5-1: Invalid ep0 maxpacket: 16 [ 142.789232][ T35] usb usb5-port1: attempt power cycle [ 142.907489][ T25] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 143.075845][ T25] usb 8-1: config 0 has no interfaces? [ 143.077967][ T25] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 143.081191][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.096398][ T25] usb 8-1: config 0 descriptor?? [ 143.127936][ T35] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 143.160217][ T35] usb 5-1: Invalid ep0 maxpacket: 16 [ 143.287546][ T35] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 143.318007][ T35] usb 5-1: Invalid ep0 maxpacket: 16 [ 143.319541][ T35] usb usb5-port1: unable to enumerate USB device [ 143.631922][ T6371] usb 8-1: USB disconnect, device number 8 [ 143.638594][ T6902] autofs: Bad value for 'fd' [ 143.847485][ T5363] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.007567][ T5363] Bluetooth: hci5: command 0x0405 tx timeout [ 144.009882][ T5363] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.012108][ T5363] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.014351][ T5363] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.511416][ T6910] FAULT_INJECTION: forcing a failure. [ 144.511416][ T6910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.514833][ T6910] CPU: 2 UID: 0 PID: 6910 Comm: syz.2.426 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 144.517622][ T6910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.520460][ T6910] Call Trace: [ 144.521398][ T6910] [ 144.522224][ T6910] dump_stack_lvl+0x16c/0x1f0 [ 144.523537][ T6910] should_fail_ex+0x497/0x5b0 [ 144.524815][ T6910] _copy_from_user+0x30/0xf0 [ 144.526032][ T6910] move_addr_to_kernel+0x68/0x160 [ 144.527361][ T6910] __sys_sendto+0x169/0x4d0 [ 144.528922][ T6910] ? __pfx___sys_sendto+0x10/0x10 [ 144.530222][ T6910] ? __might_fault+0x13b/0x190 [ 144.531432][ T6910] ? __pfx_lock_release+0x10/0x10 [ 144.532751][ T6910] __do_compat_sys_socketcall+0x5e2/0x700 [ 144.534275][ T6910] ? __fget_files+0x244/0x3f0 [ 144.535542][ T6910] ? __pfx___do_compat_sys_socketcall+0x10/0x10 [ 144.537277][ T6910] ? fput+0x30/0x390 [ 144.538361][ T6910] __do_fast_syscall_32+0x73/0x120 [ 144.539779][ T6910] do_fast_syscall_32+0x32/0x80 [ 144.541040][ T6910] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.542664][ T6910] RIP: 0023:0xf7fe5579 [ 144.543721][ T6910] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 144.548815][ T6910] RSP: 002b:00000000f5765440 EFLAGS: 00000293 ORIG_RAX: 0000000000000066 [ 144.551124][ T6910] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f5765454 [ 144.553331][ T6910] RDX: 0000000000000000 RSI: 00000000f5765570 RDI: 00000000f746bff4 [ 144.555442][ T6910] RBP: 00000000f5765570 R08: 0000000000000000 R09: 0000000000000000 [ 144.557574][ T6910] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 144.560155][ T6910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.562799][ T6910] [ 145.165646][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.173172][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.177328][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.183153][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.188521][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.194049][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.201473][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.207149][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.213804][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.220115][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.226053][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.233998][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.237093][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.245403][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.252354][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.256586][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.263068][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.267235][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.274937][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.281522][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.286228][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.292695][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.296910][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.307283][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.313303][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.319833][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.325827][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.332371][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.336769][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.345352][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.351616][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.371972][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 145.376883][ T25] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz0] on syz0 [ 145.387576][ T5389] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 145.542065][ T5389] usb 5-1: config 0 has no interfaces? [ 145.543535][ T5389] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 145.545877][ T5389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.559441][ T5389] usb 5-1: config 0 descriptor?? [ 145.758270][ T6935] libceph: resolve '. [ 145.758270][ T6935] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 145.758270][ T6935] ' (ret=-3): failed [ 145.815700][ T6935] No control pipe specified [ 146.110835][ T6942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.185773][ T5567] usb 5-1: USB disconnect, device number 26 [ 146.288074][ T5363] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.293582][ T5363] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.297632][ T5363] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.303324][ T5363] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.307144][ T5363] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.309578][ T5363] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 146.500276][ T6949] chnl_net:caif_netlink_parms(): no params data found [ 146.736666][ T6949] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.742004][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.744611][ T6949] bridge_slave_0: entered allmulticast mode [ 146.752615][ T6949] bridge_slave_0: entered promiscuous mode [ 146.757204][ T6949] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.765740][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.770728][ T6949] bridge_slave_1: entered allmulticast mode [ 146.774849][ T6949] bridge_slave_1: entered promiscuous mode [ 146.847335][ T6949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.857159][ T6949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.023967][ T6949] team0: Port device team_slave_0 added [ 147.041847][ T6949] team0: Port device team_slave_1 added [ 147.302628][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.305982][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.313198][ T6949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.328528][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.330437][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.347894][ T6949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.477973][ T6949] hsr_slave_0: entered promiscuous mode [ 147.484053][ T6949] hsr_slave_1: entered promiscuous mode [ 147.489494][ T6949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.495004][ T6949] Cannot create hsr debugfs directory [ 147.953031][ T6949] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.247126][ T6949] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.338497][ T5362] Bluetooth: hci7: command tx timeout [ 148.479390][ T6949] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.343151][ T6949] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.552426][ T6949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 149.584586][ T6949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 149.600893][ T6949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 149.604762][ T6949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.662777][ T6949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.683097][ T6949] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.694244][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.696553][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.711047][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.712945][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.744445][ T6949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 149.748278][ T6949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.825577][ T7008] dummy0: entered promiscuous mode [ 149.950138][ T7008] dummy0: left promiscuous mode [ 150.407494][ T5362] Bluetooth: hci7: command tx timeout [ 150.416916][ T6949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.474993][ T6949] veth0_vlan: entered promiscuous mode [ 150.486501][ T6949] veth1_vlan: entered promiscuous mode [ 150.515296][ T6949] veth0_macvtap: entered promiscuous mode [ 150.522059][ T6949] veth1_macvtap: entered promiscuous mode [ 150.553742][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.671698][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.674992][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.707427][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.710039][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.712767][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.715194][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.718478][ T7018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.452'. [ 150.724095][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.726722][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.733300][ T5359] IPVS: starting estimator thread 0... [ 150.734884][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.738170][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.740730][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.748748][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.768142][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.770943][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.773427][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.776032][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.789392][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.792057][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.794475][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.797138][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.803133][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.805883][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.809107][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.811913][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.814490][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.817188][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.820709][ T7021] IPVS: using max 35 ests per chain, 84000 per kthread [ 150.830482][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.834424][ T6949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.847872][ T6949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.850262][ T6949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.852466][ T6949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.005645][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.008650][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.023347][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.026345][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.188753][ T7044] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 152.193771][ T7044] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 152.281369][ T7046] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 152.282327][ T7044] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 152.302568][ T7044] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 152.303268][ T7046] hpfs: bad mount options. [ 152.480085][ T7051] netlink: 'syz.0.460': attribute type 9 has an invalid length. [ 152.487772][ T5363] Bluetooth: hci7: command tx timeout [ 152.490398][ T7051] netlink: 69104 bytes leftover after parsing attributes in process `syz.0.460'. [ 152.496344][ T7051] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 152.565903][ T7055] libceph: resolve '. [ 152.565903][ T7055] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 152.565903][ T7055] ' (ret=-3): failed [ 152.580775][ T7055] No control pipe specified [ 152.926218][ T7041] [ 152.927142][ T7041] ====================================================== [ 152.929580][ T7041] WARNING: possible circular locking dependency detected [ 152.932109][ T7041] 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 Not tainted [ 152.936037][ T7041] ------------------------------------------------------ [ 152.938825][ T7041] syz.3.458/7041 is trying to acquire lock: [ 152.940902][ T7041] ffff8880778bc258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x6d/0x3b0 [ 152.944915][ T7041] [ 152.944915][ T7041] but task is already holding lock: [ 152.947507][ T7041] ffff8880769efd28 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x235/0x700 [ 152.950648][ T7041] [ 152.950648][ T7041] which lock already depends on the new lock. [ 152.950648][ T7041] [ 152.954274][ T7041] [ 152.954274][ T7041] the existing dependency chain (in reverse order) is: [ 152.957635][ T7041] [ 152.957635][ T7041] -> #3 (&d->lock){+.+.}-{3:3}: [ 152.960205][ T7041] __mutex_lock+0x175/0x9c0 [ 152.962133][ T7041] __rfcomm_dlc_close+0x235/0x700 [ 152.964112][ T7041] rfcomm_dlc_close+0x1eb/0x240 [ 152.965989][ T7041] __rfcomm_sock_close+0xa7/0x230 [ 152.967946][ T7041] rfcomm_sock_shutdown+0xd5/0x230 [ 152.969941][ T7041] rfcomm_sock_release+0x5d/0x140 [ 152.971897][ T7041] __sock_release+0xb0/0x270 [ 152.973731][ T7041] sock_close+0x1c/0x30 [ 152.975407][ T7041] __fput+0x3f6/0xb60 [ 152.977035][ T7041] task_work_run+0x14e/0x250 [ 152.978853][ T7041] get_signal+0x1d3/0x26d0 [ 152.980631][ T7041] arch_do_signal_or_restart+0x90/0x7e0 [ 152.982901][ T7041] syscall_exit_to_user_mode+0x150/0x2a0 [ 152.985189][ T7041] __do_fast_syscall_32+0x80/0x120 [ 152.987237][ T7041] do_fast_syscall_32+0x32/0x80 [ 152.989198][ T7041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.991614][ T7041] [ 152.991614][ T7041] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 152.994364][ T7041] __mutex_lock+0x175/0x9c0 [ 152.996160][ T7041] rfcomm_dlc_exists+0x5f/0x1a0 [ 152.998090][ T7041] rfcomm_dev_ioctl+0xabc/0x1e70 [ 153.000168][ T7041] rfcomm_sock_compat_ioctl+0xba/0xe0 [ 153.002502][ T7041] compat_sock_ioctl+0x17b/0x7e0 [ 153.004630][ T7041] __do_compat_sys_ioctl+0x259/0x2b0 [ 153.006913][ T7041] __do_fast_syscall_32+0x73/0x120 [ 153.008952][ T7041] do_fast_syscall_32+0x32/0x80 [ 153.010864][ T7041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.013120][ T7041] [ 153.013120][ T7041] -> #1 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 153.015894][ T7041] __mutex_lock+0x175/0x9c0 [ 153.017677][ T7041] rfcomm_dev_ioctl+0x9db/0x1e70 [ 153.019599][ T7041] rfcomm_sock_compat_ioctl+0xba/0xe0 [ 153.021661][ T7041] compat_sock_ioctl+0x17b/0x7e0 [ 153.023601][ T7041] __do_compat_sys_ioctl+0x259/0x2b0 [ 153.025789][ T7041] __do_fast_syscall_32+0x73/0x120 [ 153.027776][ T7041] do_fast_syscall_32+0x32/0x80 [ 153.029682][ T7041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.032067][ T7041] [ 153.032067][ T7041] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 153.035339][ T7041] __lock_acquire+0x250b/0x3ce0 [ 153.037165][ T7041] lock_acquire.part.0+0x11b/0x380 [ 153.039073][ T7041] lock_sock_nested+0x3a/0xf0 [ 153.040870][ T7041] rfcomm_sk_state_change+0x6d/0x3b0 [ 153.042873][ T7041] __rfcomm_dlc_close+0x28c/0x700 [ 153.044820][ T7041] rfcomm_dlc_close+0x1eb/0x240 [ 153.046720][ T7041] __rfcomm_sock_close+0xa7/0x230 [ 153.048680][ T7041] rfcomm_sock_shutdown+0xd5/0x230 [ 153.050687][ T7041] rfcomm_sock_release+0x5d/0x140 [ 153.052676][ T7041] __sock_release+0xb0/0x270 [ 153.054506][ T7041] sock_close+0x1c/0x30 [ 153.056133][ T7041] __fput+0x3f6/0xb60 [ 153.057755][ T7041] task_work_run+0x14e/0x250 [ 153.059557][ T7041] get_signal+0x1d3/0x26d0 [ 153.061313][ T7041] arch_do_signal_or_restart+0x90/0x7e0 [ 153.063437][ T7041] syscall_exit_to_user_mode+0x150/0x2a0 [ 153.065596][ T7041] __do_fast_syscall_32+0x80/0x120 [ 153.067552][ T7041] do_fast_syscall_32+0x32/0x80 [ 153.069440][ T7041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.071820][ T7041] [ 153.071820][ T7041] other info that might help us debug this: [ 153.071820][ T7041] [ 153.075344][ T7041] Chain exists of: [ 153.075344][ T7041] sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_mutex --> &d->lock [ 153.075344][ T7041] [ 153.080046][ T7041] Possible unsafe locking scenario: [ 153.080046][ T7041] [ 153.082655][ T7041] CPU0 CPU1 [ 153.084516][ T7041] ---- ---- [ 153.086388][ T7041] lock(&d->lock); [ 153.087744][ T7041] lock(rfcomm_mutex); [ 153.090077][ T7041] lock(&d->lock); [ 153.092270][ T7041] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 153.094453][ T7041] [ 153.094453][ T7041] *** DEADLOCK *** [ 153.094453][ T7041] [ 153.097290][ T7041] 3 locks held by syz.3.458/7041: [ 153.099038][ T7041] #0: ffff88804a917408 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release+0x86/0x270 [ 153.102727][ T7041] #1: ffffffff8fd52128 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_close+0x33/0x240 [ 153.105988][ T7041] #2: ffff8880769efd28 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x235/0x700 [ 153.109304][ T7041] [ 153.109304][ T7041] stack backtrace: [ 153.111358][ T7041] CPU: 3 UID: 0 PID: 7041 Comm: syz.3.458 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 153.114994][ T7041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.118681][ T7041] Call Trace: [ 153.119852][ T7041] [ 153.120903][ T7041] dump_stack_lvl+0x116/0x1f0 [ 153.122579][ T7041] print_circular_bug+0x419/0x5d0 [ 153.124264][ T7041] check_noncircular+0x31a/0x400 [ 153.125907][ T7041] ? __pfx_check_noncircular+0x10/0x10 [ 153.127697][ T7041] ? lockdep_lock+0xc6/0x200 [ 153.129345][ T7041] ? __pfx_lockdep_lock+0x10/0x10 [ 153.131121][ T7041] __lock_acquire+0x250b/0x3ce0 [ 153.132866][ T7041] ? __pfx___lock_acquire+0x10/0x10 [ 153.134679][ T7041] ? __mutex_trylock_common+0xea/0x250 [ 153.136581][ T7041] ? __pfx___mutex_trylock_common+0x10/0x10 [ 153.138669][ T7041] ? __rfcomm_dlc_close+0x235/0x700 [ 153.140518][ T7041] lock_acquire.part.0+0x11b/0x380 [ 153.142327][ T7041] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 153.144226][ T7041] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 153.146159][ T7041] ? rcu_is_watching+0x12/0xc0 [ 153.147850][ T7041] ? trace_lock_acquire+0x14a/0x1d0 [ 153.149678][ T7041] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 153.151586][ T7041] ? lock_acquire+0x2f/0xb0 [ 153.153205][ T7041] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 153.155111][ T7041] lock_sock_nested+0x3a/0xf0 [ 153.156783][ T7041] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 153.158710][ T7041] rfcomm_sk_state_change+0x6d/0x3b0 [ 153.160565][ T7041] __rfcomm_dlc_close+0x28c/0x700 [ 153.162332][ T7041] rfcomm_dlc_close+0x1eb/0x240 [ 153.164008][ T7041] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 153.165993][ T7041] __rfcomm_sock_close+0xa7/0x230 [ 153.167799][ T7041] rfcomm_sock_shutdown+0xd5/0x230 [ 153.169601][ T7041] rfcomm_sock_release+0x5d/0x140 [ 153.171365][ T7041] __sock_release+0xb0/0x270 [ 153.173018][ T7041] ? __pfx_sock_close+0x10/0x10 [ 153.174726][ T7041] sock_close+0x1c/0x30 [ 153.176201][ T7041] __fput+0x3f6/0xb60 [ 153.177632][ T7041] ? _raw_spin_unlock_irq+0x23/0x50 [ 153.179457][ T7041] task_work_run+0x14e/0x250 [ 153.181099][ T7041] ? __pfx_task_work_run+0x10/0x10 [ 153.182914][ T7041] get_signal+0x1d3/0x26d0 [ 153.184503][ T7041] ? kick_process+0xf6/0x1b0 [ 153.186146][ T7041] ? task_work_add+0x1d6/0x370 [ 153.187847][ T7041] ? __pfx_task_work_add+0x10/0x10 [ 153.189684][ T7041] ? __pfx_get_signal+0x10/0x10 [ 153.191426][ T7041] arch_do_signal_or_restart+0x90/0x7e0 [ 153.193411][ T7041] ? __pfx___sys_connect+0x10/0x10 [ 153.195214][ T7041] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 153.197389][ T7041] ? rcu_is_watching+0x12/0xc0 [ 153.199086][ T7041] syscall_exit_to_user_mode+0x150/0x2a0 [ 153.201089][ T7041] __do_fast_syscall_32+0x80/0x120 [ 153.202906][ T7041] do_fast_syscall_32+0x32/0x80 [ 153.204620][ T7041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.206809][ T7041] RIP: 0023:0xf7f80579 [ 153.208190][ T7041] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 153.214737][ T7041] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 153.217584][ T7041] RAX: fffffffffffffffc RBX: 0000000000000006 RCX: 00000000200004c0 [ 153.220368][ T7041] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.223159][ T7041] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.225886][ T7041] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 153.228626][ T7041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.231264][ T7041] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 154.567727][ T5363] Bluetooth: hci7: command 0x0419 tx timeout [ 155.235872][ T80] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.317604][ T80] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.388324][ T80] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.464906][ T80] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.574848][ T80] bridge_slave_1: left allmulticast mode [ 155.577012][ T80] bridge_slave_1: left promiscuous mode [ 155.586513][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.598732][ T80] bridge_slave_0: left allmulticast mode [ 155.600833][ T80] bridge_slave_0: left promiscuous mode [ 155.602948][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.855570][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.866940][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.892102][ T80] bond0 (unregistering): Released all slaves [ 156.235714][ T80] hsr_slave_0: left promiscuous mode [ 156.242182][ T80] hsr_slave_1: left promiscuous mode [ 156.249826][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.252501][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.255965][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.260018][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.264804][ T80] veth1_macvtap: left promiscuous mode [ 156.266781][ T80] veth0_macvtap: left promiscuous mode [ 156.269787][ T80] veth1_vlan: left promiscuous mode [ 156.271249][ T80] veth0_vlan: left promiscuous mode [ 156.298205][ T7058] block nbd0: shutting down sockets [ 156.575340][ T80] team0 (unregistering): Port device team_slave_1 removed [ 156.621770][ T80] team0 (unregistering): Port device team_slave_0 removed [ 157.394086][ T80] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.491954][ T80] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.549874][ T80] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.621066][ T80] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.742367][ T80] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.746249][ T80] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.840013][ T80] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.843756][ T80] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.933706][ T80] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.937163][ T80] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.020198][ T80] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.023732][ T80] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.121428][ T80] bridge_slave_1: left allmulticast mode [ 158.123425][ T80] bridge_slave_1: left promiscuous mode [ 158.125441][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.134538][ T80] bridge_slave_0: left allmulticast mode [ 158.136511][ T80] bridge_slave_0: left promiscuous mode [ 158.139715][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.144510][ T80] bridge_slave_1: left allmulticast mode [ 158.146552][ T80] bridge_slave_1: left promiscuous mode [ 158.150661][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.155313][ T80] bridge_slave_0: left allmulticast mode [ 158.157818][ T80] bridge_slave_0: left promiscuous mode [ 158.159915][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.578958][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.583828][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.588333][ T80] bond0 (unregistering): Released all slaves [ 158.665685][ T80] bond1 (unregistering): Released all slaves [ 158.676936][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.682310][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.686072][ T80] bond0 (unregistering): Released all slaves [ 159.196579][ T80] hsr_slave_0: left promiscuous mode [ 159.199152][ T80] hsr_slave_1: left promiscuous mode [ 159.201355][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.204069][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.206729][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.209129][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.215916][ T80] hsr_slave_0: left promiscuous mode [ 159.218503][ T80] hsr_slave_1: left promiscuous mode [ 159.220895][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.223355][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.226204][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.229415][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.234448][ T80] veth1_macvtap: left promiscuous mode [ 159.236270][ T80] veth0_macvtap: left promiscuous mode [ 159.239411][ T80] veth1_vlan: left promiscuous mode [ 159.241162][ T80] veth0_vlan: left promiscuous mode [ 159.244903][ T80] veth1_macvtap: left promiscuous mode [ 159.246692][ T80] veth0_macvtap: left promiscuous mode [ 159.248866][ T80] veth1_vlan: left promiscuous mode [ 159.250249][ T80] veth0_vlan: left promiscuous mode [ 159.480507][ T80] team0 (unregistering): Port device team_slave_1 removed [ 159.518338][ T80] team0 (unregistering): Port device team_slave_0 removed [ 159.886420][ T80] team0 (unregistering): Port device team_slave_1 removed [ 159.927223][ T80] team0 (unregistering): Port device team_slave_0 removed [ 160.843488][ T80] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 08:00:33 Registers: info registers vcpu 0 CPU#0 EAX=f7fe6100 EBX=00000001 ECX=00000000 EDX=00000000 ESI=f746bff4 EDI=ff95951c EBP=f746bff4 ESP=ff9594bc EIP=f7fe6104 EFL=00000292 [--S-A--] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 57af0440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000031cf7ff8 CR3=00000000737ec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000454534 RBX=0000000000000001 RCX=ffffffff8b130829 RDX=ffffed10056a7026 RSI=ffffffff8bb12320 RDI=ffffffff816417fc RBP=ffffed10036e9910 RSP=ffffc90000477e08 R8 =0000000000000000 R9 =ffffed10056a7025 R10=ffff88802b53812b R11=0000000000000001 R12=0000000000000001 R13=ffff88801b74c880 R14=ffffffff901cd188 R15=0000000000000000 RIP=ffffffff8b131c0f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020074000 CR3=0000000073bba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000cc0 RBX=0000000000000002 RCX=ffffffff81cb0156 RDX=ffff88801fa74880 RSI=0000000000000004 RDI=ffff888041add098 RBP=ffff888043241220 RSP=ffffc90001f5f7b8 R8 =0000000000000005 R9 =0000000000000001 R10=0000000000000002 R11=ffff88802b628a7c R12=ffff888043241200 R13=dffffc0000000000 R14=0000000000000002 R15=ffff8880404de000 RIP=ffffffff81cb01b7 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000031ffbff8 CR3=000000005da34000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85036a05 RDI=ffffffff9a63a220 RBP=ffffffff9a63a1e0 RSP=ffffc900039ef1a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000020 R14=ffffffff850369a0 R15=0000000000000000 RIP=ffffffff85036a2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002001c000 CR3=0000000076b58000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000