last executing test programs: 38.220012386s ago: executing program 3 (id=1008): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) io_cancel(0x0, 0xfffffffffffffffc, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001e0002000400000000000000047c0000c4c0479783dce09281405eeacfc8e152b7dbaeeb0acb83af899063c2250f9e24c8f8a141824db0b64b7e04f02af689c2571c6693b450f903fa09fb17058721969479b8a9d88384881a8316babda64478f771f207ef46286f10ad4dd4a58f1c3db4cf0624b2ce2b72cf009a7df51a5067486b626d0de5accc26e39b1fbe942d8b0ce7f0f65b6d0537"], 0x14}, 0x1, 0x0, 0x0, 0x480d0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r6, @ANYBLOB="08003500000000001400508005000200f0ffffff08000700010000000a0006009203effbb1bc00000a003400020202020202000008002600"], 0x58}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r1, 0x0, 0x10000008ebc, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000702060800000000000014008500000075000000a70000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9, 0x0, 0x1}, 0x18) getcwd(0x0, 0xffffffffffffff88) splice(r0, 0x0, r8, 0x0, 0x25a5, 0x0) 31.964934693s ago: executing program 3 (id=1008): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) io_cancel(0x0, 0xfffffffffffffffc, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001e0002000400000000000000047c0000c4c0479783dce09281405eeacfc8e152b7dbaeeb0acb83af899063c2250f9e24c8f8a141824db0b64b7e04f02af689c2571c6693b450f903fa09fb17058721969479b8a9d88384881a8316babda64478f771f207ef46286f10ad4dd4a58f1c3db4cf0624b2ce2b72cf009a7df51a5067486b626d0de5accc26e39b1fbe942d8b0ce7f0f65b6d0537"], 0x14}, 0x1, 0x0, 0x0, 0x480d0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r6, @ANYBLOB="08003500000000001400508005000200f0ffffff08000700010000000a0006009203effbb1bc00000a003400020202020202000008002600"], 0x58}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r1, 0x0, 0x10000008ebc, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000702060800000000000014008500000075000000a70000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9, 0x0, 0x1}, 0x18) getcwd(0x0, 0xffffffffffffff88) splice(r0, 0x0, r8, 0x0, 0x25a5, 0x0) 23.995981885s ago: executing program 3 (id=1008): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) io_cancel(0x0, 0xfffffffffffffffc, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001e0002000400000000000000047c0000c4c0479783dce09281405eeacfc8e152b7dbaeeb0acb83af899063c2250f9e24c8f8a141824db0b64b7e04f02af689c2571c6693b450f903fa09fb17058721969479b8a9d88384881a8316babda64478f771f207ef46286f10ad4dd4a58f1c3db4cf0624b2ce2b72cf009a7df51a5067486b626d0de5accc26e39b1fbe942d8b0ce7f0f65b6d0537"], 0x14}, 0x1, 0x0, 0x0, 0x480d0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r6, @ANYBLOB="08003500000000001400508005000200f0ffffff08000700010000000a0006009203effbb1bc00000a003400020202020202000008002600"], 0x58}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r1, 0x0, 0x10000008ebc, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000702060800000000000014008500000075000000a70000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9, 0x0, 0x1}, 0x18) getcwd(0x0, 0xffffffffffffff88) splice(r0, 0x0, r8, 0x0, 0x25a5, 0x0) 16.833275516s ago: executing program 3 (id=1008): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) io_cancel(0x0, 0xfffffffffffffffc, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001e0002000400000000000000047c0000c4c0479783dce09281405eeacfc8e152b7dbaeeb0acb83af899063c2250f9e24c8f8a141824db0b64b7e04f02af689c2571c6693b450f903fa09fb17058721969479b8a9d88384881a8316babda64478f771f207ef46286f10ad4dd4a58f1c3db4cf0624b2ce2b72cf009a7df51a5067486b626d0de5accc26e39b1fbe942d8b0ce7f0f65b6d0537"], 0x14}, 0x1, 0x0, 0x0, 0x480d0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r6, @ANYBLOB="08003500000000001400508005000200f0ffffff08000700010000000a0006009203effbb1bc00000a003400020202020202000008002600"], 0x58}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r1, 0x0, 0x10000008ebc, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000702060800000000000014008500000075000000a70000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9, 0x0, 0x1}, 0x18) getcwd(0x0, 0xffffffffffffff88) splice(r0, 0x0, r8, 0x0, 0x25a5, 0x0) 9.267212771s ago: executing program 3 (id=1008): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) io_cancel(0x0, 0xfffffffffffffffc, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001e0002000400000000000000047c0000c4c0479783dce09281405eeacfc8e152b7dbaeeb0acb83af899063c2250f9e24c8f8a141824db0b64b7e04f02af689c2571c6693b450f903fa09fb17058721969479b8a9d88384881a8316babda64478f771f207ef46286f10ad4dd4a58f1c3db4cf0624b2ce2b72cf009a7df51a5067486b626d0de5accc26e39b1fbe942d8b0ce7f0f65b6d0537"], 0x14}, 0x1, 0x0, 0x0, 0x480d0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r6, @ANYBLOB="08003500000000001400508005000200f0ffffff08000700010000000a0006009203effbb1bc00000a003400020202020202000008002600"], 0x58}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r1, 0x0, 0x10000008ebc, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000702060800000000000014008500000075000000a70000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9, 0x0, 0x1}, 0x18) getcwd(0x0, 0xffffffffffffff88) splice(r0, 0x0, r8, 0x0, 0x25a5, 0x0) 3.700393267s ago: executing program 1 (id=1360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="090000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000006640)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="f165163afcc0b8296b279d1a62c2a318c9d88469e1c45ae81563f387f3de7659e90b688f0e08422d5621406426164a47387b51b531282886bf045dd9e69e3744977f1db26363ee573c1886aa76b47c94e8e113e7863ac0ab542b76417d5bfa2142a6ccd29f591f9194079cc10a31deedb2dcb41d891be4bc35afd597dd72cf630ef45e92177270d4bea051583416b9c13895c8424dc5600c70d5b5ddb53d11fbb65cfbdd034bcf60f02cf641b833c74b51cdca937c96cf872562bca15c1fb500279c3c6ce3b988ba6e7824c168118c9905db31073a755c403edb", 0xda}, {&(0x7f0000000340)="e74f541d24c4b951ef3de2451fcec66e15e60170b42af9", 0x17}], 0x2}}], 0x1, 0x0) fgetxattr(r2, &(0x7f0000000280)=@known='user.incfs.metadata\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0xfffb}, 0xe) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) 3.420080795s ago: executing program 0 (id=1362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="f3ffff8c0654b162c1985223afc6bb6924b610fffff725041b7db825352d3bae6226a8eac885e8f02e9968f93e56d73b26dd493a25158eebc7611daafac0a550c2a454a9fffced6a4aca8e0bf103f6c386028af9c4e0395893179075c10540a89395cd6851df642d487a15ba4392e3972fbb90c786c17b16f14b9a76bc687cec4daddd9ac90d3529e21e"], 0x14}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40046f41, 0x20000502) read$msr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) getpid() capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x9}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$binfmt_script(r3, &(0x7f0000000300)={'#! ', './file0', [{0x20, '{}-'}], 0xa, "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"}, 0x109) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff010000000000000000000000000001000000000000001798bf7f1b625d7000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000500000005"], 0x104}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast1, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x0, 0x1}, {0x4, 0x2}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}}, 0xf8}}, 0x0) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x3c, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7fff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x90) 3.41198231s ago: executing program 0 (id=1363): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './bus'}, 0x9) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x3ab003) ioctl$SG_IO(r3, 0x2285, 0x0) (async) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) (async) r5 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000580)=0x0) (async) syz_io_uring_setup(0x1868, &(0x7f00000007c0), &(0x7f0000000780)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) read$rfkill(r4, 0x0, 0x0) (async) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats_percpu\x00') (async) open(0x0, 0x49002, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) setpriority(0x2, 0x0, 0x3) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000640)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYRES32=r2, @ANYRESHEX=r1], 0x48) (async) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f0000000300)=@req3={0xe011, 0x7adc, 0x9, 0x8, 0x2, 0x0, 0x200}, 0x1c) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$pppl2tp(0x18, 0x1, 0x1) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x930}) 3.189792537s ago: executing program 2 (id=1366): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b007369700006"], 0xc4}}, 0x0) io_uring_setup(0xb3, &(0x7f0000000000)={0x0, 0xbd57, 0x80, 0x0, 0x127}) r2 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0xfffffffffffffdea) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(0x0, 0x4, 0xffffffbe, 0x0, 0x0, 0x4000001) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa08, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB, @ANYRES32=r8], 0x1c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012abd7000fbdbdf253b00080008000300", @ANYRES32=r11, @ANYBLOB="0c009900090000006300000043003300d0000100080211000001080211000001241d41db70e795000f0100800105846c1b02162d1a00041a0180000000000000ee0004001e0000000800ff0000001800"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040050) 2.862416694s ago: executing program 0 (id=1367): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000009, 0x12, r0, 0x80000000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='jbd2_handle_stats\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x80, 0x9e, 0x15a, 0x0, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x40, 0x5, 0x4}}) sendmsg$can_raw(r8, &(0x7f00000003c0)={&(0x7f0000000300)={0x1d, r9}, 0x10, &(0x7f0000000380)={&(0x7f0000000340)=@can={{0x1, 0x1, 0x0, 0x1}, 0x1, 0x3, 0x0, 0x0, "b9473346bfd12d90"}, 0x10}, 0x1, 0x0, 0x0, 0x4004811}, 0x4024045) r10 = syz_open_procfs(r7, &(0x7f0000000040)='fd/4\x00') r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r11, &(0x7f0000000000)=[{&(0x7f0000001380)=""/140, 0x8c}], 0x1) ioctl$TCSETS(r11, 0x5402, &(0x7f00000014c0)={0x0, 0xffffffff, 0x0, 0x0, 0x0, "076a1400"}) ioctl$TCSETS(r11, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) syz_open_pts(r11, 0x42) accept4$inet(0xffffffffffffffff, &(0x7f00000012c0)={0x2, 0x0, @local}, &(0x7f0000000180)=0x10, 0x80800) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r10, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) 2.861868788s ago: executing program 2 (id=1368): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000003f00), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f00000001c0), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000000c0), 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x7, &(0x7f0000000100)) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe411, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r8}, @fd={0x66642a85, 0x0, r5}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000300)=[@free_buffer], 0x0, 0x1000000000000, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x10, 0xff89, 0x2, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private=0xa010100}}}}) sendmsg$802154_dgram(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000280)={&(0x7f0000000080)="9f93921669494b009020b7fd860fa9efdb04ce84b3f9660b6dcd48f7", 0x1c}, 0x1, 0x0, 0x0, 0x20000045}, 0x40040) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x78, "82145ad6ed62a404754a97c76d76d8f10cc6997c9a9eebf18a3cde41f56a4c4d"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.790990389s ago: executing program 1 (id=1369): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0) mknodat$loop(r2, &(0x7f0000002440)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x8695c3813aa3cd9d}}, 0x50) creat(&(0x7f0000000100)='./file0\x00', 0xff0f) read$FUSE(r3, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) creat(&(0x7f0000002380)='./file0\x00', 0x0) write$FUSE_INIT(r3, &(0x7f0000006500)={0x50, 0x0, r5}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(0xffffffffffffffff, &(0x7f00000005c0)={'#! ', './file0/file0', [{0x20, '#! e.\x17uj\xff'}], 0xa, "251d5c258693f808b835a06cca0aa09f8bb07fc93d0458f6c678e50f36facb2d39f74482c0bdfe386c00000000ddc3981b75d0a4a4b80a6ad9550c9d0c"}, 0x67) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r6, 0x0, 0x7fff, 0x0) 2.479693551s ago: executing program 2 (id=1370): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x19, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc4c03d12, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r4, 0x0, 0x3) pwritev(r2, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000a00)='w', 0x1}], 0x2, 0x0, 0x0) 2.410497978s ago: executing program 2 (id=1371): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000003f00), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f00000001c0), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000000c0), 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x7, &(0x7f0000000100)) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe411, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r8}, @fd={0x66642a85, 0x0, r5}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000300)=[@free_buffer={0x40086303, r9}], 0x0, 0x1000000000000, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r10 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r10, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x10, 0xff89, 0x2, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private=0xa010100}}}}) sendmsg$802154_dgram(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000280)={&(0x7f0000000080)="9f93921669494b009020b7fd860fa9efdb04ce84b3f9660b6dcd48f7", 0x1c}, 0x1, 0x0, 0x0, 0x20000045}, 0x40040) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x78, "82145ad6ed62a404754a97c76d76d8f10cc6997c9a9eebf18a3cde41f56a4c4d"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.030801249s ago: executing program 2 (id=1372): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000004980)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000d40)='Z', 0x1}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffff0300, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000010001fff0100"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5, @ANYBLOB="9831a72ac85c590d19d3d68e4db811bb588695981b2f2757a919280fefd19bc201c92273790f973ef80638d3f20ca41f55898e4c6db13bf7ac78bd651e2f268715979e0098799a75e20ff0b0f7f2f0c9f072fd359ae69a703740bd41efb5c6b469514936c21d38e6a8a6c7e775031a814d7582cc92f179f12cf597b7e1243d32f04640fae7c2330246471afa95debe1fb15ba63def95cc5339a768b5585895ad5b532b943566b2c08116bae1e1c955e4ae573c245d2d9ba38c36157c9586a623340dff42"], 0x40}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x10}, &(0x7f0000000280)=0x8) 1.984577474s ago: executing program 0 (id=1373): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = syz_clone(0x90000000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000280)="872ec0c02f7a4373700431bdab56bbf2e0c376ab26750d1fec2aefb1f3de80fcd3c6ab450b643f0488bde173cde8b9f640b4653e32c443ba889c5073b82c8a7adf26d3577160ba7ebbed05") prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x3, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000300)={0x16, 0x2, 0x1, "4dc009179f4e5989070600ca0a010dee6e678a92ddf91f0000000000002000cd", 0x3247504d}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001100000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @private1, 0x10000}, 0x1c) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r9, 0x80284504, &(0x7f0000000040)=""/95) r10 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x30, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000e0ffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff", @ANYRESHEX, @ANYRES8=r10], 0x0, 0x91bb, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x0, 0x7, 0x8, 0xfffffffe}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) 1.930644891s ago: executing program 1 (id=1374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)={0x30, r7, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}]}, 0x30}}, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1ff}, 0x10, 0x28dff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x90) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$sock_SIOCBRDELBR(r10, 0x89a1, &(0x7f0000000080)='bridge0\x00') r11 = dup2(r10, r9) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r13, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r14}, @void}}}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0x6c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfa, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x890) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000016c0)={0x73c, r13, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0xd0b, 0x47}}}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x348, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x31c, 0xe, 0x0, 0x1, [{0xdf, 0x0, "df6b67b87498205068bc1072c3dcbe6eedf5bd1ab9da36e1deda73f35068cbe9d045678737e32e8d866975aa1a404aa34949f1a0efa9d39abefd15d824f8f7be7c65eaca0a32f3b171df735128428caebad7dc848cd5efd0cac64924e818344fd152a3705c31797db4817cc974c7554bbd67bde58d96770a2bd9488fa6699b4c2848ca5375b47a146b4d79e21544b3d6cf08c8f7025e467e574c59ebdd4d31192764076ffd70fad288920f407133dfb874f9f9878ccd44b34c8caa7b38b8e6b1bf66a87644d194e7910655cd678c0f2c55e2d9e1fee0d7326cb5c2"}, {0xa8, 0x0, "0093f8946211dcc7655e44f5feb031161957fd94b077c2a162106b7d949820865cd34c07eb81a2114778636e3f9b2ed259397d6368f0e10dc2705091de413b579857bd2dfbc0ef60f5f2864c26afdb8db93582857b6c5c63143971fd5b6bf3da66dfe38662aed4b9aa6d2ad82b2b9bd8cbc800b5588c89abf47617a312ce87618fc689f7728da36e5a069596bb4f9d79e5c9533045a1099e82081691acfa2fd244e02791"}, {0xa1, 0x0, "52e1cd6ee8d524ff47aacf88d8f92984e4d5f2cd82e3ef138161321c07629e177588158ea984d6ea8ca2ba8e0175f0df7a7fbb64b98a73503fda9c11b1341c3a64e1788716cd0adefe34c2e683b673c64e23152381f862f6b9b81555863c00036b08ead256543807c3d10b8fd6570710f80a13cc2133062136e3672981d650d220e22f885fc0cc39c0d2e0f2d520ab64f48b3371eb30acb2216ac1ecfe"}, {0xce, 0x0, "43c70bbe6d7e29395f8af51bbac31a13e84185d66c259c3af9148daccbd049e4c1372a61c75c9cfd3f3de5b59784e11d2993f685a8113088ed3bba16315decc2be52192aaad8b72ae71c613d2c571b6dbbb3465bf54ab31d3a7895bb0f627c67baee87dd8c1cbdab1df76c8450649b05b5871d25f651eb1a2bb95277dd06619e6795d72eac7b3e46c0b27e6cc9f0be18bcf845d1ff3357f530427b8a5b2df462d0a96c60425807d29f6ff7b27487bdcd55d547e6314206a3c0567e89fb585e63865661b0d6efb340a123"}, {0x19, 0x0, "83228b3c05f76e6b484f606a3e99174ed77a583160"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1002}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x40}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x9}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x1d4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "64f14dc3a077"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x19c, 0xd, 0x0, 0x1, [{0x47, 0x0, "1844a77a3d65210efd0f904a596ee25d40a7479bd398665b27d608fa1e7ff37f61cb96a3dab768c68619a13fab605acd35a14d308fcc422caeb566754f709e152bf4f0"}, {0x93, 0x0, "e4dd08cefd160820bbd746faa15b09b3d351f09818f53d47ce305d0acf70b2c1bd98f2f1707ee282c6718bd323ee629c7279625ae98f593dc54fad77ad7ba35bfe650edba80940906e4d9a1b2a6b573f7d570b2403903fe2fb172898f5af3b626ecf9b45df02c3844e67f2ee9e6f0f79ea17c6e13b6bbf02cde1dc7aa25c8cdd6c597d7ee5d636eb2891c910f3bf0a"}, {0xb7, 0x0, "eb02cb0fd7e8b653094655c76b5b0e257d252205f38facc3a6470ac8fe19097c4238eda08f3c6d35d2648ba6dc419a15de7b6586f90801dec81ce202cc8444a5aee2edc5ac6cd6438ff352bfc177952d6fb8f7c2c8de531892a6ba6270399c09455e4b304a8cd100d4d2e9d86dae46df457efb35f1d4e972c0e5ad2658d39978711d71fad0d2c9c138688c5b12bc3ee79f5c9cf2ac141f52b443dda1b8258d2864215345a39fe5eb5a9c55bb0d9d15b5be8626"}, {0x4}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x58, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7f2439543277"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x3d, 0xb, "d63406a12e0d149a97f01fd4ad0f08ba69f9d0e40eb7aa19052a645b58863ca29e949ff1c1a78f553e802319935e84289150b0182cbbebc5a8"}]}, @NL80211_ATTR_NAN_FUNC={0x170, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x8}, @NL80211_NAN_FUNC_SERVICE_INFO={0x1a, 0xb, "abe6c04aee938119a1459e5a1eb0c4cb4d9904408e52"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "c4dae8be15d1"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xbb}, @NL80211_NAN_FUNC_SRF={0x124, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}]}]}]}, 0x73c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000011) sendmsg$NL80211_CMD_START_AP(r11, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r13, @ANYBLOB="00082dbd7000fcdbdf250f00000008000300", @ANYRES32=r14, @ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x8010}, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x48, r7, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x10000}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00082bbd7000ffdbdf254200000008000300", @ANYRES32=r14, @ANYBLOB="0a00060050505050505000000a0006000ba48bbed51f000104000000000000ffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x4000041}, 0x4044040) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)=ANY=[@ANYBLOB='@ \x00\x00', @ANYRES16=r2, @ANYBLOB="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"/8250], 0x2040}}, 0x0) 1.905383207s ago: executing program 3 (id=1008): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) io_cancel(0x0, 0xfffffffffffffffc, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001e0002000400000000000000047c0000c4c0479783dce09281405eeacfc8e152b7dbaeeb0acb83af899063c2250f9e24c8f8a141824db0b64b7e04f02af689c2571c6693b450f903fa09fb17058721969479b8a9d88384881a8316babda64478f771f207ef46286f10ad4dd4a58f1c3db4cf0624b2ce2b72cf009a7df51a5067486b626d0de5accc26e39b1fbe942d8b0ce7f0f65b6d0537"], 0x14}, 0x1, 0x0, 0x0, 0x480d0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r6, @ANYBLOB="08003500000000001400508005000200f0ffffff08000700010000000a0006009203effbb1bc00000a003400020202020202000008002600"], 0x58}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r1, 0x0, 0x10000008ebc, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000702060800000000000014008500000075000000a70000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9, 0x0, 0x1}, 0x18) getcwd(0x0, 0xffffffffffffff88) splice(r0, 0x0, r8, 0x0, 0x25a5, 0x0) 305.944719ms ago: executing program 0 (id=1375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)={0x30, r7, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}]}, 0x30}}, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1ff}, 0x10, 0x28dff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x90) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$sock_SIOCBRDELBR(r10, 0x89a1, &(0x7f0000000080)='bridge0\x00') r11 = dup2(r10, r9) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r13, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r14}, @void}}}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0x6c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfa, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x890) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000016c0)={0x73c, r13, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0xd0b, 0x47}}}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x348, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x31c, 0xe, 0x0, 0x1, [{0xdf, 0x0, "df6b67b87498205068bc1072c3dcbe6eedf5bd1ab9da36e1deda73f35068cbe9d045678737e32e8d866975aa1a404aa34949f1a0efa9d39abefd15d824f8f7be7c65eaca0a32f3b171df735128428caebad7dc848cd5efd0cac64924e818344fd152a3705c31797db4817cc974c7554bbd67bde58d96770a2bd9488fa6699b4c2848ca5375b47a146b4d79e21544b3d6cf08c8f7025e467e574c59ebdd4d31192764076ffd70fad288920f407133dfb874f9f9878ccd44b34c8caa7b38b8e6b1bf66a87644d194e7910655cd678c0f2c55e2d9e1fee0d7326cb5c2"}, {0xa8, 0x0, "0093f8946211dcc7655e44f5feb031161957fd94b077c2a162106b7d949820865cd34c07eb81a2114778636e3f9b2ed259397d6368f0e10dc2705091de413b579857bd2dfbc0ef60f5f2864c26afdb8db93582857b6c5c63143971fd5b6bf3da66dfe38662aed4b9aa6d2ad82b2b9bd8cbc800b5588c89abf47617a312ce87618fc689f7728da36e5a069596bb4f9d79e5c9533045a1099e82081691acfa2fd244e02791"}, {0xa1, 0x0, "52e1cd6ee8d524ff47aacf88d8f92984e4d5f2cd82e3ef138161321c07629e177588158ea984d6ea8ca2ba8e0175f0df7a7fbb64b98a73503fda9c11b1341c3a64e1788716cd0adefe34c2e683b673c64e23152381f862f6b9b81555863c00036b08ead256543807c3d10b8fd6570710f80a13cc2133062136e3672981d650d220e22f885fc0cc39c0d2e0f2d520ab64f48b3371eb30acb2216ac1ecfe"}, {0xce, 0x0, "43c70bbe6d7e29395f8af51bbac31a13e84185d66c259c3af9148daccbd049e4c1372a61c75c9cfd3f3de5b59784e11d2993f685a8113088ed3bba16315decc2be52192aaad8b72ae71c613d2c571b6dbbb3465bf54ab31d3a7895bb0f627c67baee87dd8c1cbdab1df76c8450649b05b5871d25f651eb1a2bb95277dd06619e6795d72eac7b3e46c0b27e6cc9f0be18bcf845d1ff3357f530427b8a5b2df462d0a96c60425807d29f6ff7b27487bdcd55d547e6314206a3c0567e89fb585e63865661b0d6efb340a123"}, {0x19, 0x0, "83228b3c05f76e6b484f606a3e99174ed77a583160"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1002}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x40}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x9}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x1d4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "64f14dc3a077"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x19c, 0xd, 0x0, 0x1, [{0x47, 0x0, "1844a77a3d65210efd0f904a596ee25d40a7479bd398665b27d608fa1e7ff37f61cb96a3dab768c68619a13fab605acd35a14d308fcc422caeb566754f709e152bf4f0"}, {0x93, 0x0, "e4dd08cefd160820bbd746faa15b09b3d351f09818f53d47ce305d0acf70b2c1bd98f2f1707ee282c6718bd323ee629c7279625ae98f593dc54fad77ad7ba35bfe650edba80940906e4d9a1b2a6b573f7d570b2403903fe2fb172898f5af3b626ecf9b45df02c3844e67f2ee9e6f0f79ea17c6e13b6bbf02cde1dc7aa25c8cdd6c597d7ee5d636eb2891c910f3bf0a"}, {0xb7, 0x0, "eb02cb0fd7e8b653094655c76b5b0e257d252205f38facc3a6470ac8fe19097c4238eda08f3c6d35d2648ba6dc419a15de7b6586f90801dec81ce202cc8444a5aee2edc5ac6cd6438ff352bfc177952d6fb8f7c2c8de531892a6ba6270399c09455e4b304a8cd100d4d2e9d86dae46df457efb35f1d4e972c0e5ad2658d39978711d71fad0d2c9c138688c5b12bc3ee79f5c9cf2ac141f52b443dda1b8258d2864215345a39fe5eb5a9c55bb0d9d15b5be8626"}, {0x4}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x58, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7f2439543277"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x3d, 0xb, "d63406a12e0d149a97f01fd4ad0f08ba69f9d0e40eb7aa19052a645b58863ca29e949ff1c1a78f553e802319935e84289150b0182cbbebc5a8"}]}, @NL80211_ATTR_NAN_FUNC={0x170, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x8}, @NL80211_NAN_FUNC_SERVICE_INFO={0x1a, 0xb, "abe6c04aee938119a1459e5a1eb0c4cb4d9904408e52"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "c4dae8be15d1"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xbb}, @NL80211_NAN_FUNC_SRF={0x124, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}]}]}]}, 0x73c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000011) sendmsg$NL80211_CMD_START_AP(r11, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x8010}, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x48, r7, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x10000}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00082bbd7000ffdbdf254200000008000300", @ANYRES32=r14, @ANYBLOB="0a00060050505050505000000a0006000ba48bbed51f000104000000000000ffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x4000041}, 0x4044040) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)=ANY=[@ANYBLOB='@ \x00\x00', @ANYRES16=r2, @ANYBLOB="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"/8250], 0x2040}}, 0x0) 305.217023ms ago: executing program 1 (id=1376): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044103, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000a9f850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='netlink_extack\x00', r4}, 0xb3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a00)=ANY=[@ANYBLOB="1800000076000d0b00000000000000000300000200000000f1b70fdd0c9be2299c8d240e5dd4598137f6cbac93a12493812ab7a4b494bceb90e61313edfcd1fa8e6abc9d2431e29c78c31d1354121786fdf2237bcd7d02b9f72cdd77ee"], 0x18}}, 0x0) r6 = eventfd(0x0) r7 = eventfd(0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000240)={r6, 0x0, 0x2, r7}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x81, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3aac1373788c1231, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="1818000006000020000000000002000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000002000000fe12ff0f080000008f600400f0ffffff4306f0fff0ffffff18180000", @ANYRES32, @ANYBLOB="00000000000000008500000051000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x5, 0x0, 0x8, 0x4}, 0x10, r8, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000002c0)=[{0x1, 0x1, 0xb, 0x7}, {0x2, 0x4, 0x2, 0x2}], 0x10, 0x1, @void, @value}, 0x90) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r9, &(0x7f0000009700)=[{{&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=[{0x10, 0x1}], 0x10}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000c4000000c4000000030000000e00000000000009000000000b00000009000004010100000300000005000000010000800c00000001000000020000000500000000000000000000000200000002000000090002000d00000004000000000000000800000002000000000000000600000005000000008000000300000000000000030000000600000004000000ff0f000002000000000000010000000015002501010000000000000203000000000000000000000300000000020000000400000001000000000000000000000200000000009300"], &(0x7f0000000700)=""/4096, 0xdf, 0x1000, 0x0, 0xa73, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x20000000000000a9, &(0x7f00000019c0)=ANY=[@ANYRES64=0x0], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x16, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={r6, 0x100000, 0x2, r7}) statfs(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)=""/235) pselect6(0x40, &(0x7f0000001700)={0x9, 0xffffffffffff2231, 0x10001, 0x8, 0x200, 0xffffffffffffffff, 0x7fffffffffffffff, 0xffffffff00000000}, &(0x7f0000001740)={0x8, 0x6, 0x7fffffff, 0x0, 0xffffffffffffffff, 0xb8, 0x1000, 0x3f}, &(0x7f0000001780)={0x4d, 0x9a2, 0xffffffff, 0x80000000, 0x1, 0x208, 0x8, 0x8}, &(0x7f00000017c0), &(0x7f0000001840)={&(0x7f0000001800)={[0x323]}, 0x8}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 296.932403ms ago: executing program 2 (id=1377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="090000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000006640)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="f165163afcc0b8296b279d1a62c2a318c9d88469e1c45ae81563f387f3de7659e90b688f0e08422d5621406426164a47387b51b531282886bf045dd9e69e3744977f1db26363ee573c1886aa76b47c94e8e113e7863ac0ab542b76417d5bfa2142a6ccd29f591f9194079cc10a31deedb2dcb41d891be4bc35afd597dd72cf630ef45e92177270d4bea051583416b9c13895c8424dc5600c70d5b5ddb53d11fbb65cfbdd034bcf60f02cf641b833c74b51cdca937c96cf872562bca15c1fb500279c3c6ce3b988ba6e7824c168118c9905db31073a755c403edb", 0xda}, {&(0x7f0000000340)="e74f541d24c4b951ef3de2451fcec66e15e60170b42af9", 0x17}], 0x2}}], 0x1, 0x0) fgetxattr(r2, &(0x7f0000000280)=@known='user.incfs.metadata\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0xfffb}, 0xe) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) 166.617829ms ago: executing program 0 (id=1378): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000280), &(0x7f0000000480)='./file0\x00', &(0x7f0000000180), 0xa08000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}]}], {0x14}}, 0x9c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x12a) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x1df67, 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) chdir(&(0x7f0000002340)='./bus\x00') r3 = open(&(0x7f0000007f80)='./bus\x00', 0x141142, 0x0) ftruncate(r3, 0x2007ffb) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x0, 0x400}}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0245720, &(0x7f0000000080)={0x1}) open(0x0, 0x500, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) 104.507432ms ago: executing program 1 (id=1379): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x19, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc4c03d12, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r4, 0x0, 0x3) pwritev(r2, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000a00)='w', 0x1}], 0x2, 0x0, 0x0) 0s ago: executing program 1 (id=1380): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000003f00), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f00000001c0), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000000c0), 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x7, &(0x7f0000000100)) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe411, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r6 = dup3(0xffffffffffffffff, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r5}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000300)=[@free_buffer={0x40086303, r8}], 0x0, 0x1000000000000, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x10, 0xff89, 0x2, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private=0xa010100}}}}) sendmsg$802154_dgram(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000280)={&(0x7f0000000080)="9f93921669494b009020b7fd860fa9efdb04ce84b3f9660b6dcd48f7", 0x1c}, 0x1, 0x0, 0x0, 0x20000045}, 0x40040) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x78, "82145ad6ed62a404754a97c76d76d8f10cc6997c9a9eebf18a3cde41f56a4c4d"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): /01/2014 [ 328.064974][T10580] Call Trace: [ 328.065849][T10580] [ 328.066639][T10580] dump_stack_lvl+0x16c/0x1f0 [ 328.067891][T10580] should_fail_ex+0x497/0x5b0 [ 328.069133][T10580] should_failslab+0xc2/0x120 [ 328.070364][T10580] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 328.072188][T10580] ? skb_clone+0x190/0x3f0 [ 328.072448][ T5339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.073787][T10580] skb_clone+0x190/0x3f0 [ 328.073832][T10580] netlink_deliver_tap+0xab3/0xd90 [ 328.078345][ T5339] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.079505][T10580] netlink_unicast+0x5e1/0x7f0 [ 328.082386][ T5339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.082904][T10580] ? __pfx_netlink_unicast+0x10/0x10 [ 328.086227][ T5339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.086677][T10580] ? const_folio_flags.constprop.0+0x56/0x150 [ 328.089499][ T5339] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 328.090770][T10580] netlink_sendmsg+0x8b8/0xd70 [ 328.090802][T10580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.090836][T10580] sock_sendmsg+0x3cb/0x470 [ 328.093025][ T5339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 328.094311][T10580] ? pipe_lock+0x64/0x80 [ 328.101410][T10580] ? __pfx_sock_sendmsg+0x10/0x10 [ 328.103288][T10580] ? avc_has_perm_noaudit+0x119/0x3a0 [ 328.103625][ T4773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.105176][T10580] splice_to_socket+0xaac/0x1040 [ 328.108351][ T4773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.108790][T10580] ? __pfx_splice_to_socket+0x10/0x10 [ 328.111144][ T4773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.112555][T10580] ? inode_has_perm+0x16f/0x1d0 [ 328.112606][T10580] ? bpf_lsm_file_permission+0x9/0x10 [ 328.116171][ T4773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.118144][T10580] ? security_file_permission+0x71/0x210 [ 328.120357][ T4773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 328.121962][T10580] ? rw_verify_area+0xd0/0x700 [ 328.121990][T10580] ? __pfx_splice_to_socket+0x10/0x10 [ 328.122020][T10580] do_splice+0x145c/0x1f60 [ 328.122050][T10580] ? find_held_lock+0x2d/0x110 [ 328.122077][T10580] ? __pfx_do_splice+0x10/0x10 [ 328.126653][ T4773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 328.127568][T10580] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 328.127594][T10580] ? trace_lock_acquire+0x14a/0x1d0 [ 328.138701][T10580] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 328.140904][T10580] __do_splice+0x327/0x360 [ 328.142568][T10580] ? __pfx___do_splice+0x10/0x10 [ 328.144421][T10580] __x64_sys_splice+0x1cd/0x270 [ 328.146226][T10580] do_syscall_64+0xcd/0x250 [ 328.147918][T10580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.150092][T10580] RIP: 0033:0x7f1a63b7dff9 [ 328.151721][T10580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.158463][T10580] RSP: 002b:00007f1a64897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 328.161346][T10580] RAX: ffffffffffffffda RBX: 00007f1a63d36058 RCX: 00007f1a63b7dff9 [ 328.164101][T10580] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 328.166883][T10580] RBP: 00007f1a64897090 R08: 000000000004ffe6 R09: 0000000000000000 [ 328.169730][T10580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.172611][T10580] R13: 0000000000000001 R14: 00007f1a63d36058 R15: 00007fff59dcd7f8 [ 328.175502][T10580] [ 328.182534][T10580] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1179'. [ 328.222695][T10581] chnl_net:caif_netlink_parms(): no params data found [ 328.292452][T10581] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.295140][T10581] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.297808][T10581] bridge_slave_0: entered allmulticast mode [ 328.300936][T10581] bridge_slave_0: entered promiscuous mode [ 328.305637][T10581] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.308170][T10581] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.310591][T10581] bridge_slave_1: entered allmulticast mode [ 328.316149][T10581] bridge_slave_1: entered promiscuous mode [ 328.336969][T10581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.349871][T10581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.380248][T10581] team0: Port device team_slave_0 added [ 328.384609][T10581] team0: Port device team_slave_1 added [ 328.404329][T10581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.406706][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.415595][T10581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.420206][T10581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.423288][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.430405][T10581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.459444][T10581] hsr_slave_0: entered promiscuous mode [ 328.461523][T10581] hsr_slave_1: entered promiscuous mode [ 328.463428][T10581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.465429][T10581] Cannot create hsr debugfs directory [ 328.621210][ T55] usb 6-1: USB disconnect, device number 28 [ 328.816151][ T1103] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.874918][ T1103] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.887261][T10603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1185'. [ 328.890013][T10603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10603 comm=syz.2.1185 [ 328.895508][T10603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1185'. [ 328.946976][ T1103] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.050977][ T1452] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 329.063455][ T1103] bridge_slave_1: left allmulticast mode [ 329.066189][ T1103] bridge_slave_1: left promiscuous mode [ 329.068179][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.072128][ T1103] bridge_slave_0: left allmulticast mode [ 329.073647][ T1103] bridge_slave_0: left promiscuous mode [ 329.075202][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.220748][ T5405] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 329.228303][ T1452] usb 6-1: config index 0 descriptor too short (expected 64575, got 68) [ 329.231362][ T1452] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.234912][ T1452] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 329.238245][ T1452] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 329.245593][ T1452] usb 6-1: config index 1 descriptor too short (expected 64575, got 68) [ 329.247815][ T1452] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.250412][ T1452] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 329.253979][ T1452] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 329.259747][ T1452] usb 6-1: string descriptor 0 read error: -71 [ 329.262566][ T1452] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 329.266772][ T1452] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.274839][ T1452] usb 6-1: can't set config #1, error -71 [ 329.277298][ T1452] usb 6-1: USB disconnect, device number 29 [ 329.371895][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.372129][ T5405] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 329.376474][ T5405] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.380437][ T5405] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 329.383817][ T5405] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 329.385967][ T5405] usb 7-1: Manufacturer: syz [ 329.387692][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.392613][ T5405] usb 7-1: config 0 descriptor?? [ 329.394923][ T1103] bond0 (unregistering): Released all slaves [ 329.440688][ T5405] rc_core: IR keymap rc-hauppauge not found [ 329.442362][ T5405] Registered IR keymap rc-empty [ 329.444015][ T5405] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 329.447065][ T5405] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input68 [ 329.737379][T10625] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 329.774208][ T1103] hsr_slave_0: left promiscuous mode [ 329.777045][ T1103] hsr_slave_1: left promiscuous mode [ 329.780313][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.783078][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.786380][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.788441][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.823373][ T1103] veth1_macvtap: left promiscuous mode [ 329.825015][ T1103] veth0_macvtap: left promiscuous mode [ 329.826746][ T1103] veth1_vlan: left promiscuous mode [ 329.828389][ T1103] veth0_vlan: left promiscuous mode [ 330.202444][ T4773] Bluetooth: hci0: command tx timeout [ 330.409711][ T1452] usb 7-1: USB disconnect, device number 43 [ 330.750861][ T1294] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 330.839339][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 330.910889][ T1294] usb 6-1: Using ep0 maxpacket: 8 [ 330.914329][ T1294] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.917934][ T1294] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 330.920794][ T1294] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 330.923677][ T1294] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 330.926565][ T1294] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 330.928929][ T1294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.938953][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 330.940965][ T1294] hub 6-1:1.0: bad descriptor, ignoring hub [ 330.943753][ T1294] hub 6-1:1.0: probe with driver hub failed with error -5 [ 330.946776][ T1294] cdc_wdm 6-1:1.0: skipping garbage [ 330.948400][ T1294] cdc_wdm 6-1:1.0: skipping garbage [ 330.950232][ T1294] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 330.954069][ T1294] cdc_wdm 6-1:1.0: Unknown control protocol [ 330.972928][ T39] kauditd_printk_skb: 60 callbacks suppressed [ 330.972941][ T39] audit: type=1400 audit(1727841435.780:815): avc: denied { setopt } for pid=10635 comm="syz.2.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 331.026888][ T39] audit: type=1400 audit(1727841435.840:816): avc: denied { write } for pid=10635 comm="syz.2.1190" path="socket:[36259]" dev="sockfs" ino=36259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 331.093584][ T39] audit: type=1400 audit(1727841435.910:817): avc: denied { write } for pid=10635 comm="syz.2.1190" name="raw" dev="proc" ino=4026532927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 331.147752][T10632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.165339][T10632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.719493][T10581] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 331.733371][T10581] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 331.746390][T10581] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 331.763612][T10581] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 331.810427][ T39] audit: type=1400 audit(1727841436.620:818): avc: denied { connect } for pid=10643 comm="syz.2.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 331.813054][T10581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.818052][ T39] audit: type=1400 audit(1727841436.630:819): avc: denied { listen } for pid=10643 comm="syz.2.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 331.823658][ T39] audit: type=1400 audit(1727841436.640:820): avc: denied { accept } for pid=10643 comm="syz.2.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 331.826186][T10581] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.844282][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.846218][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.857165][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.859100][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.986023][T10581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.005429][T10581] veth0_vlan: entered promiscuous mode [ 332.014143][T10581] veth1_vlan: entered promiscuous mode [ 332.070528][T10581] veth0_macvtap: entered promiscuous mode [ 332.081178][T10581] veth1_macvtap: entered promiscuous mode [ 332.092388][ T39] audit: type=1400 audit(1727841436.900:821): avc: denied { mount } for pid=10653 comm="syz.2.1193" name="/" dev="gadgetfs" ino=38046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 332.095434][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.103247][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.105894][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.109350][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.113345][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.116757][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.120230][T10581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.128230][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.137114][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.141901][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.147288][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.151634][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.155680][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.160761][T10581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.169747][T10581] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.174313][T10581] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.177813][T10581] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.182363][T10581] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.239007][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.242454][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.251198][ T4773] Bluetooth: hci0: command tx timeout [ 332.282537][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.285842][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.631066][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1194'. [ 332.635385][T10675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10675 comm=syz.0.1194 [ 332.640843][T10675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1194'. [ 333.220960][ T35] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 333.376274][ T35] usb 7-1: config index 0 descriptor too short (expected 64575, got 68) [ 333.378576][ T35] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.381085][ T55] usb 6-1: USB disconnect, device number 30 [ 333.387181][ T35] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 333.391515][ T35] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 333.395768][ T35] usb 7-1: config index 1 descriptor too short (expected 64575, got 68) [ 333.398035][ T35] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.401775][ T35] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 333.404697][ T35] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 333.413824][ T35] usb 7-1: string descriptor 0 read error: -71 [ 333.420875][ T35] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 333.423324][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.426894][ T35] usb 7-1: can't set config #1, error -71 [ 333.429090][ T35] usb 7-1: USB disconnect, device number 44 [ 333.568760][T10688] @: renamed from vlan0 (while UP) [ 333.618924][T10706] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 333.943418][T10708] FAULT_INJECTION: forcing a failure. [ 333.943418][T10708] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 333.948184][T10708] CPU: 2 UID: 0 PID: 10708 Comm: syz.2.1200 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 333.952036][T10708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 333.955883][T10708] Call Trace: [ 333.957111][T10708] [ 333.958188][T10708] dump_stack_lvl+0x16c/0x1f0 [ 333.959917][T10708] should_fail_ex+0x497/0x5b0 [ 333.961651][T10708] ? fs_reclaim_acquire+0xae/0x160 [ 333.963530][T10708] should_fail_alloc_page+0xe7/0x130 [ 333.965450][T10708] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 333.967784][T10708] ? io_alloc_hash_table+0x2d/0xc0 [ 333.969680][T10708] __alloc_pages_noprof+0x190/0x25c0 [ 333.971624][T10708] ? stack_trace_save+0x95/0xd0 [ 333.973406][T10708] ? __pfx_stack_trace_save+0x10/0x10 [ 333.975365][T10708] ? stack_depot_save_flags+0x28/0x8f0 [ 333.977358][T10708] ? __lock_acquire+0x163e/0x3ce0 [ 333.979205][T10708] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 333.981270][T10708] ? kasan_save_stack+0x33/0x60 [ 333.983042][T10708] ? __kasan_kmalloc+0xaa/0xb0 [ 333.984808][T10708] ? __x64_sys_io_uring_setup+0x98/0x140 [ 333.986852][T10708] ? do_syscall_64+0xcd/0x250 [ 333.988589][T10708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.990814][T10708] ? io_alloc_hash_table+0x2d/0xc0 [ 333.992696][T10708] ___kmalloc_large_node+0x84/0x1b0 [ 333.994606][T10708] __kmalloc_large_node_noprof+0x1c/0x70 [ 333.996662][T10708] __kmalloc_noprof.cold+0xc/0x61 [ 333.998515][T10708] ? lockdep_init_map_type+0x16d/0x7d0 [ 334.000516][T10708] io_alloc_hash_table+0x2d/0xc0 [ 334.002336][T10708] io_uring_setup+0x2f0/0x3730 [ 334.004108][T10708] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 334.006289][T10708] ? __pfx_io_uring_setup+0x10/0x10 [ 334.008195][T10708] ? __fget_files+0x244/0x3f0 [ 334.009920][T10708] ? ksys_write+0x1ad/0x260 [ 334.011607][T10708] ? __pfx_ksys_write+0x10/0x10 [ 334.013394][T10708] __x64_sys_io_uring_setup+0x98/0x140 [ 334.015386][T10708] do_syscall_64+0xcd/0x250 [ 334.017089][T10708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.019242][T10708] RIP: 0033:0x7f1a63b7dff9 [ 334.020860][T10708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.028046][T10708] RSP: 002b:00007f1a648b7fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 334.031037][T10708] RAX: ffffffffffffffda RBX: 00007f1a63d35f80 RCX: 00007f1a63b7dff9 [ 334.033936][T10708] RDX: 0000000020ffc000 RSI: 0000000020000040 RDI: 0000000000002406 [ 334.036814][T10708] RBP: 0000000020000040 R08: 0000000000000000 R09: 0000000020ffc000 [ 334.039679][T10708] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 334.042526][T10708] R13: 00000000200000c0 R14: 0000000000002406 R15: 0000000020ffc000 [ 334.045360][T10708] [ 334.231961][T10712] qrtr: Invalid version 48 [ 334.265816][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1203'. [ 334.268947][T10715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10715 comm=syz.1.1203 [ 334.272911][T10715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1203'. [ 334.452753][T10731] FAULT_INJECTION: forcing a failure. [ 334.452753][T10731] name failslab, interval 1, probability 0, space 0, times 0 [ 334.458549][T10731] CPU: 3 UID: 0 PID: 10731 Comm: syz.1.1206 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 334.462098][T10731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 334.466020][T10731] Call Trace: [ 334.467184][T10731] [ 334.468204][T10731] dump_stack_lvl+0x16c/0x1f0 [ 334.469911][T10731] should_fail_ex+0x497/0x5b0 [ 334.471640][T10731] should_failslab+0xc2/0x120 [ 334.473318][T10731] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 334.475213][T10731] ? skb_clone+0x190/0x3f0 [ 334.476795][T10731] skb_clone+0x190/0x3f0 [ 334.478304][T10731] netlink_deliver_tap+0xab3/0xd90 [ 334.480121][T10731] netlink_unicast+0x5e1/0x7f0 [ 334.481839][T10731] ? __pfx_netlink_unicast+0x10/0x10 [ 334.483712][T10731] ? const_folio_flags.constprop.0+0x56/0x150 [ 334.485867][T10731] netlink_sendmsg+0x8b8/0xd70 [ 334.487710][T10731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.489588][T10731] sock_sendmsg+0x3cb/0x470 [ 334.491283][T10731] ? pipe_lock+0x64/0x80 [ 334.492752][T10731] ? __pfx_sock_sendmsg+0x10/0x10 [ 334.494470][T10731] ? avc_has_perm_noaudit+0x119/0x3a0 [ 334.496456][T10731] splice_to_socket+0xaac/0x1040 [ 334.498182][T10731] ? __pfx_splice_to_socket+0x10/0x10 [ 334.500003][T10731] ? inode_has_perm+0x16f/0x1d0 [ 334.501672][T10731] ? bpf_lsm_file_permission+0x9/0x10 [ 334.503491][T10731] ? security_file_permission+0x71/0x210 [ 334.505397][T10731] ? rw_verify_area+0xd0/0x700 [ 334.507028][T10731] ? __pfx_splice_to_socket+0x10/0x10 [ 334.508858][T10731] do_splice+0x145c/0x1f60 [ 334.510492][T10731] ? find_held_lock+0x2d/0x110 [ 334.512454][T10731] ? __pfx_do_splice+0x10/0x10 [ 334.514085][T10731] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 334.515930][T10731] ? trace_lock_acquire+0x14a/0x1d0 [ 334.517672][T10731] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 334.519742][T10731] __do_splice+0x327/0x360 [ 334.521261][T10731] ? __pfx___do_splice+0x10/0x10 [ 334.522967][T10731] __x64_sys_splice+0x1cd/0x270 [ 334.524622][T10731] do_syscall_64+0xcd/0x250 [ 334.526254][T10731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.528263][T10731] RIP: 0033:0x7f338417dff9 [ 334.529781][T10731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.536344][T10731] RSP: 002b:00007f3383bde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 334.539182][T10731] RAX: ffffffffffffffda RBX: 00007f3384336058 RCX: 00007f338417dff9 [ 334.541827][T10731] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 334.544487][T10731] RBP: 00007f3383bde090 R08: 0000000000007fff R09: 0000000000000000 [ 334.547147][T10731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.549780][T10731] R13: 0000000000000001 R14: 00007f3384336058 R15: 00007ffed0ffa098 [ 334.552484][T10731] [ 334.615680][ T1099] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.629016][T10732] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1207'. [ 335.542443][T10739] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1209'. [ 335.609974][ T5339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.615953][ T5339] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.618542][ T5339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.623642][ T5339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.625979][ T5339] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.628158][ T5339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.732073][T10741] chnl_net:caif_netlink_parms(): no params data found [ 335.771023][ T55] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 335.776834][T10741] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.778828][T10741] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.780941][T10741] bridge_slave_0: entered allmulticast mode [ 335.782935][T10741] bridge_slave_0: entered promiscuous mode [ 335.786902][T10741] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.788799][T10741] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.791259][T10741] bridge_slave_1: entered allmulticast mode [ 335.793256][T10741] bridge_slave_1: entered promiscuous mode [ 335.812492][T10741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.815989][T10741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.858205][T10741] team0: Port device team_slave_0 added [ 335.865833][T10741] team0: Port device team_slave_1 added [ 335.880875][ T5342] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 335.887434][T10741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.889286][T10741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.896451][T10741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.900028][T10741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.902108][T10741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.908667][T10741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.932414][ T55] usb 5-1: config index 0 descriptor too short (expected 64575, got 68) [ 335.935403][ T55] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.939020][ T55] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 335.940832][ T827] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 335.946093][ T55] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 335.950218][ T55] usb 5-1: config index 1 descriptor too short (expected 64575, got 68) [ 335.952888][ T55] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.953270][T10741] hsr_slave_0: entered promiscuous mode [ 335.955511][ T55] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 335.959732][ T55] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 335.960218][T10741] hsr_slave_1: entered promiscuous mode [ 335.966613][T10741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.968070][ T55] usb 5-1: string descriptor 0 read error: -71 [ 335.968713][T10741] Cannot create hsr debugfs directory [ 335.972372][ T55] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 335.972387][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.980362][ T55] usb 5-1: can't set config #1, error -71 [ 335.989208][ T55] usb 5-1: USB disconnect, device number 30 [ 336.032921][ T5342] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 336.035311][ T5342] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.039809][ T5342] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 336.043836][ T5342] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 336.046193][ T5342] usb 7-1: Manufacturer: syz [ 336.050010][ T5342] usb 7-1: config 0 descriptor?? [ 336.096837][ T827] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 336.099111][ T827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.109136][ T827] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 336.110731][ T5342] rc_core: IR keymap rc-hauppauge not found [ 336.111886][ T827] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 336.113373][ T5342] Registered IR keymap rc-empty [ 336.115192][ T827] usb 6-1: Manufacturer: syz [ 336.117083][ T5342] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 336.122562][ T5342] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input69 [ 336.123749][ T827] usb 6-1: config 0 descriptor?? [ 336.180725][ T827] rc_core: IR keymap rc-hauppauge not found [ 336.183115][ T827] Registered IR keymap rc-empty [ 336.188587][ T827] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1 [ 336.200893][ T827] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1/input70 [ 336.655622][ T1099] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.734055][ T1099] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.817871][ T1099] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.936933][ T1099] bridge_slave_1: left allmulticast mode [ 336.939018][ T1099] bridge_slave_1: left promiscuous mode [ 336.943388][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.953043][ T1099] bridge_slave_0: left allmulticast mode [ 336.955063][ T1099] bridge_slave_0: left promiscuous mode [ 336.957494][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.039566][ T827] usb 7-1: USB disconnect, device number 45 [ 337.071273][ T55] usb 6-1: USB disconnect, device number 31 [ 337.295619][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.299548][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.303556][ T1099] bond0 (unregistering): Released all slaves [ 337.589530][ T39] audit: type=1326 audit(1727841442.400:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.2.1214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a63b7dff9 code=0x7ffc0000 [ 337.604889][ T39] audit: type=1326 audit(1727841442.400:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.2.1214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a63b7dff9 code=0x7ffc0000 [ 337.615536][ T39] audit: type=1326 audit(1727841442.420:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.2.1214" exe="/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f1a63b7dff9 code=0x7ffc0000 [ 337.627901][ T39] audit: type=1326 audit(1727841442.420:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.2.1214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a63b7dff9 code=0x7ffc0000 [ 337.643716][ T39] audit: type=1326 audit(1727841442.420:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.2.1214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a63b7dff9 code=0x7ffc0000 [ 337.651739][ T39] audit: type=1326 audit(1727841442.420:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.2.1214" exe="/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f1a63b7dff9 code=0x7ffc0000 [ 337.660186][ T39] audit: type=1326 audit(1727841442.420:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.2.1214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a63b7dff9 code=0x7ffc0000 [ 337.668326][ T1099] hsr_slave_0: left promiscuous mode [ 337.671055][ T39] audit: type=1326 audit(1727841442.420:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.2.1214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a63b7dff9 code=0x7ffc0000 [ 337.678335][ T39] audit: type=1326 audit(1727841442.420:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.2.1214" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a63b7dff9 code=0x7ffc0000 [ 337.685893][ T1099] hsr_slave_1: left promiscuous mode [ 337.686154][ T39] audit: type=1326 audit(1727841442.420:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.2.1214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a63b7dff9 code=0x7ffc0000 [ 337.698527][ T4773] Bluetooth: hci0: command tx timeout [ 337.698557][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.702801][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.705374][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.707245][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.733226][ T1099] veth1_macvtap: left promiscuous mode [ 337.735243][ T1099] veth0_macvtap: left promiscuous mode [ 337.737185][ T1099] veth1_vlan: left promiscuous mode [ 337.739101][ T1099] veth0_vlan: left promiscuous mode [ 337.777556][T10784] misc userio: Can't change port type on an already running userio instance [ 337.887618][T10790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1215'. [ 337.949142][T10791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10791 comm=syz.1.1215 [ 337.954478][T10791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1215'. [ 338.572145][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 338.672115][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 339.506201][T10741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 339.517757][T10741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 339.526551][T10813] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1219'. [ 339.526660][T10741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 339.547390][T10741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 339.593317][T10741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.606625][T10741] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.614839][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.617388][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.634113][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.636172][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.652840][ T6285] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 339.780761][ T4773] Bluetooth: hci0: command 0x041b tx timeout [ 339.785361][T10741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.808001][ T6285] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 339.808301][T10741] veth0_vlan: entered promiscuous mode [ 339.818769][T10741] veth1_vlan: entered promiscuous mode [ 339.819003][ T6285] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.827409][ T6285] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 339.830180][T10741] veth0_macvtap: entered promiscuous mode [ 339.830561][ T6285] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 339.837988][ T6285] usb 7-1: Manufacturer: syz [ 339.838674][T10741] veth1_macvtap: entered promiscuous mode [ 339.842446][ T6285] usb 7-1: config 0 descriptor?? [ 339.848062][T10741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.853905][T10741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.856439][T10741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.859108][T10741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.862012][T10741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.864807][T10741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.869449][T10741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.877495][T10741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.880512][T10741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.884852][T10741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.887496][T10741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.890000][T10741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.890731][ T6285] rc_core: IR keymap rc-hauppauge not found [ 339.893334][T10741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.894249][ T6285] Registered IR keymap rc-empty [ 339.898726][T10741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.901311][ T6285] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 339.906400][ T6285] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input72 [ 339.906649][T10741] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.911915][T10741] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.914165][T10741] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.916391][T10741] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.961129][ T1294] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 339.969276][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.977391][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.997190][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.999314][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.123407][ T1294] usb 5-1: config index 0 descriptor too short (expected 64575, got 68) [ 340.126380][ T1294] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.129013][ T1294] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 340.132058][ T1294] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 340.136144][ T1294] usb 5-1: config index 1 descriptor too short (expected 64575, got 68) [ 340.138363][ T1294] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.141339][ T1294] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 340.144223][ T1294] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 340.151934][ T1294] usb 5-1: string descriptor 0 read error: -71 [ 340.153626][ T1294] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 340.156016][ T1294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.159703][ T1294] usb 5-1: can't set config #1, error -71 [ 340.162578][ T1294] usb 5-1: USB disconnect, device number 31 [ 340.777528][ T35] usb 7-1: USB disconnect, device number 46 [ 340.924671][T10846] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 341.502442][T10854] misc userio: Can't change port type on an already running userio instance [ 341.703640][T10862] overlayfs: missing 'lowerdir' [ 341.840964][ T35] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 341.850851][ T4773] Bluetooth: hci0: command 0x041b tx timeout [ 341.992650][ T35] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 341.995016][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.998716][ T35] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 342.001783][ T35] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 342.004081][ T35] usb 6-1: Manufacturer: syz [ 342.006672][ T35] usb 6-1: config 0 descriptor?? [ 342.060803][ T35] rc_core: IR keymap rc-hauppauge not found [ 342.062429][ T35] Registered IR keymap rc-empty [ 342.064106][ T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 342.067506][ T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input74 [ 342.351051][ T6285] usb 6-1: USB disconnect, device number 32 [ 342.900801][ T1294] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 343.062736][ T1294] usb 5-1: config index 0 descriptor too short (expected 64575, got 68) [ 343.064995][ T1294] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.067763][ T1294] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 343.070489][ T1294] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 343.074713][ T1294] usb 5-1: config index 1 descriptor too short (expected 64575, got 68) [ 343.076949][ T1294] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.079517][ T1294] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 343.082370][ T1294] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 343.090020][ T1294] usb 5-1: string descriptor 0 read error: -71 [ 343.091946][ T1294] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 343.094283][ T1294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.097811][ T1294] usb 5-1: can't set config #1, error -71 [ 343.099822][ T1294] usb 5-1: USB disconnect, device number 32 [ 343.665387][T10880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1235'. [ 343.668508][T10880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10880 comm=syz.0.1235 [ 343.672884][T10880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1235'. [ 343.710870][ T39] kauditd_printk_skb: 36 callbacks suppressed [ 343.710890][ T39] audit: type=1400 audit(1727841448.520:868): avc: denied { map } for pid=10886 comm="syz.0.1237" path="/dev/nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 343.837966][T10894] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1239'. [ 343.925885][T10889] kvm: kvm [10888]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xd000000080 [ 344.058153][ T1104] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.189573][ T1104] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.278610][ T1104] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.355221][ T1104] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.446513][ T1104] bridge_slave_1: left allmulticast mode [ 344.448283][ T1104] bridge_slave_1: left promiscuous mode [ 344.449818][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.453181][ T1104] bridge_slave_0: left allmulticast mode [ 344.454686][ T1104] bridge_slave_0: left promiscuous mode [ 344.456230][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.705328][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.709243][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.713946][ T1104] bond0 (unregistering): Released all slaves [ 345.037810][ T1104] hsr_slave_0: left promiscuous mode [ 345.043216][ T1104] hsr_slave_1: left promiscuous mode [ 345.063441][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.067473][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.078983][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.081355][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.103598][ T1104] veth1_macvtap: left promiscuous mode [ 345.105147][ T1104] veth0_macvtap: left promiscuous mode [ 345.105394][ T5339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.106773][ T1104] veth1_vlan: left promiscuous mode [ 345.111315][ T5339] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.112207][ T1104] veth0_vlan: left promiscuous mode [ 345.114401][ T5339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.118562][ T5339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.124310][ T5339] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 345.126778][ T5339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.280847][ T827] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 345.522389][ T827] usb 7-1: config index 0 descriptor too short (expected 64575, got 68) [ 345.525246][ T827] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.528874][ T827] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 345.532602][ T827] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 345.544503][ T827] usb 7-1: config index 1 descriptor too short (expected 64575, got 68) [ 345.547226][ T827] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.550418][ T827] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 345.555153][ T827] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 345.570402][ T827] usb 7-1: string descriptor 0 read error: -71 [ 345.581337][ T827] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 345.585150][ T827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.610760][ T827] usb 7-1: can't set config #1, error -71 [ 345.613542][ T827] usb 7-1: USB disconnect, device number 47 [ 345.977295][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 346.072957][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 346.280078][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1245'. [ 346.337725][T10934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10934 comm=syz.2.1245 [ 346.342137][T10934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1245'. [ 346.829054][T10949] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 346.844449][T10919] chnl_net:caif_netlink_parms(): no params data found [ 346.959450][T10919] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.963512][T10919] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.965383][T10919] bridge_slave_0: entered allmulticast mode [ 346.967418][T10919] bridge_slave_0: entered promiscuous mode [ 346.970137][T10919] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.972486][T10919] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.974408][T10919] bridge_slave_1: entered allmulticast mode [ 346.976322][T10919] bridge_slave_1: entered promiscuous mode [ 346.999692][T10919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.004559][T10919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.040088][T10919] team0: Port device team_slave_0 added [ 347.043136][T10919] team0: Port device team_slave_1 added [ 347.065700][T10919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.067734][T10919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.075811][T10919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.079917][T10919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.082925][T10919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.089482][T10919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.136869][T10919] hsr_slave_0: entered promiscuous mode [ 347.139352][T10919] hsr_slave_1: entered promiscuous mode [ 347.141524][T10919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.143516][T10919] Cannot create hsr debugfs directory [ 347.220861][ T4773] Bluetooth: hci0: command tx timeout [ 347.237725][ T39] audit: type=1400 audit(1727841452.050:869): avc: denied { sys_chroot } for pid=10961 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 347.243190][ T39] audit: type=1400 audit(1727841452.050:870): avc: denied { setgid } for pid=10961 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 347.248669][ T39] audit: type=1400 audit(1727841452.050:871): avc: denied { setrlimit } for pid=10961 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 347.574962][T10919] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 347.578223][T10919] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 347.582143][T10919] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.585286][T10919] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 347.601197][T10919] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.603265][T10919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.607228][T10919] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.609101][T10919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.638173][T10919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.647103][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.651686][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.665842][T10919] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.672547][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.674339][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.678087][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.679871][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.775530][T10919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.794192][T10919] veth0_vlan: entered promiscuous mode [ 347.798230][T10919] veth1_vlan: entered promiscuous mode [ 347.808214][T10919] veth0_macvtap: entered promiscuous mode [ 347.811944][T10919] veth1_macvtap: entered promiscuous mode [ 347.817946][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.821738][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.824620][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.827743][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.830575][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.833523][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.837140][T10919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.853073][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.855743][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.858276][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.862249][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.864757][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.867347][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.870561][T10919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.875274][T10919] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.877637][T10919] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.879877][T10919] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.883929][T10919] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.917806][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.920306][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.933127][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.935425][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.473154][ C2] ata1: illegal qc_active transition (00000000->00000020) [ 348.804891][ T1068] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 348.811914][ T1068] ata1.00: configured for UDMA/100 [ 348.825961][T11006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1248'. [ 348.857271][T11008] overlayfs: missing 'lowerdir' [ 349.180979][ T5376] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 349.354535][ T5376] usb 6-1: config index 0 descriptor too short (expected 64575, got 68) [ 349.357020][ T5376] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.359578][ T5376] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 349.362808][ T5376] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 349.371650][ T5376] usb 6-1: config index 1 descriptor too short (expected 64575, got 68) [ 349.373772][ T5376] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.376392][ T5376] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 349.379132][ T5376] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 349.386268][ T5376] usb 6-1: string descriptor 0 read error: -71 [ 349.388326][ T5376] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 349.390820][ T5376] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.394354][ T5376] usb 6-1: can't set config #1, error -71 [ 349.396300][ T5376] usb 6-1: USB disconnect, device number 33 [ 349.472873][T11025] overlayfs: failed to clone lowerpath [ 350.070858][ T5376] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 350.241791][ T5376] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 350.245286][ T5376] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.262444][ T5376] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 350.265470][ T5376] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 350.266936][ T1099] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.267550][ T5376] usb 7-1: Manufacturer: syz [ 350.283261][ T5376] usb 7-1: config 0 descriptor?? [ 350.360828][ T5405] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 350.370839][ T5376] rc_core: IR keymap rc-hauppauge not found [ 350.373067][ T5376] Registered IR keymap rc-empty [ 350.376226][ T5376] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 350.382419][ T5376] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input75 [ 350.518321][ T5405] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 350.521247][ T5405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.526822][ T5405] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 350.530029][ T5405] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 350.533031][ T5405] usb 6-1: Manufacturer: syz [ 350.538137][ T5405] usb 6-1: config 0 descriptor?? [ 350.610904][ T5405] rc_core: IR keymap rc-hauppauge not found [ 350.613093][ T5405] Registered IR keymap rc-empty [ 350.617288][ T5405] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1 [ 350.623212][ T5405] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1/input76 [ 351.226118][ T8] usb 7-1: USB disconnect, device number 48 [ 351.384501][ T6306] usb 6-1: USB disconnect, device number 34 [ 351.443549][T11041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1258'. [ 351.569691][ T5339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 351.574456][ T5339] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 351.578487][ T5339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 351.584414][ T5339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 351.587568][ T5339] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 351.590410][ T5339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 351.668927][T11044] chnl_net:caif_netlink_parms(): no params data found [ 351.725477][T11044] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.728003][T11044] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.730574][T11044] bridge_slave_0: entered allmulticast mode [ 351.734075][T11044] bridge_slave_0: entered promiscuous mode [ 351.740209][T11044] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.743081][T11044] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.745606][T11044] bridge_slave_1: entered allmulticast mode [ 351.748365][T11044] bridge_slave_1: entered promiscuous mode [ 351.799409][T11044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.809987][T11044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.858693][T11044] team0: Port device team_slave_0 added [ 351.863495][T11044] team0: Port device team_slave_1 added [ 351.882181][T11044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.883976][T11044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.890536][T11044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.897143][T11044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.898976][T11044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.905308][T11044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.918590][T11056] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 351.972558][ T1099] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.001609][T11044] hsr_slave_0: entered promiscuous mode [ 352.007995][T11044] hsr_slave_1: entered promiscuous mode [ 352.010893][T11044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.013039][T11044] Cannot create hsr debugfs directory [ 352.022900][T11058] overlayfs: failed to clone lowerpath [ 352.068434][ T1099] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.149937][ T1099] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.284279][ T1099] bridge_slave_1: left allmulticast mode [ 352.285867][ T1099] bridge_slave_1: left promiscuous mode [ 352.287889][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.294979][ T1099] bridge_slave_0: left allmulticast mode [ 352.296563][ T1099] bridge_slave_0: left promiscuous mode [ 352.298248][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.672616][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.679384][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.685414][ T1099] bond0 (unregistering): Released all slaves [ 353.177456][ T1099] hsr_slave_0: left promiscuous mode [ 353.187149][ T1099] hsr_slave_1: left promiscuous mode [ 353.191929][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.194769][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.200448][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.204073][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.244218][ T1099] veth1_macvtap: left promiscuous mode [ 353.245646][ T1099] veth0_macvtap: left promiscuous mode [ 353.247111][ T1099] veth1_vlan: left promiscuous mode [ 353.248425][ T1099] veth0_vlan: left promiscuous mode [ 353.613210][ T4773] Bluetooth: hci0: command tx timeout [ 353.821564][T11088] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1267'. [ 353.932038][ T1452] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 354.080802][ T1452] usb 5-1: Using ep0 maxpacket: 8 [ 354.083239][ T1452] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.085776][ T1452] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 354.087957][ T1452] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 354.090554][ T1452] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 354.093197][ T1452] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 354.095232][ T1452] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.112738][ T1452] hub 5-1:1.0: bad descriptor, ignoring hub [ 354.114145][ T1452] hub 5-1:1.0: probe with driver hub failed with error -5 [ 354.115961][ T1452] cdc_wdm 5-1:1.0: skipping garbage [ 354.117161][ T1452] cdc_wdm 5-1:1.0: skipping garbage [ 354.120957][ T1452] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 354.122458][ T1452] cdc_wdm 5-1:1.0: Unknown control protocol [ 354.313356][T11084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.325263][T11084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.343572][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 354.432259][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 354.490865][ T5376] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 354.644552][ T5376] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 354.646801][ T5376] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.652410][ T5376] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 354.655620][ T5376] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 354.657955][ T5376] usb 6-1: Manufacturer: syz [ 354.664956][ T5376] usb 6-1: config 0 descriptor?? [ 354.720703][ T5376] rc_core: IR keymap rc-hauppauge not found [ 354.722501][ T5376] Registered IR keymap rc-empty [ 354.724233][ T5376] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 354.729342][ T5376] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input77 [ 355.256490][T11044] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 355.261561][T11044] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 355.275882][T11044] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 355.292693][T11044] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 355.342997][ T1452] usb 6-1: USB disconnect, device number 35 [ 355.373521][T11044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.408836][T11044] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.417631][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.420303][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.424457][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.427057][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.468644][T11104] mmap: syz.2.1270 (11104) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 355.615463][T11044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.677554][T11044] veth0_vlan: entered promiscuous mode [ 355.691561][ T4773] Bluetooth: hci0: command 0x041b tx timeout [ 355.694448][T11044] veth1_vlan: entered promiscuous mode [ 355.757968][T11044] veth0_macvtap: entered promiscuous mode [ 355.778422][T11044] veth1_macvtap: entered promiscuous mode [ 355.814211][T11044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.817961][T11044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.821642][T11044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.825364][T11044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.828839][T11044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.832947][T11044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.837586][T11044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.885718][T11044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.889511][T11044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.893402][T11044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.897184][T11044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.900793][T11044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.904432][T11044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.908926][T11044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.913672][T11044] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.916866][T11044] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.919975][T11044] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.923212][T11044] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.938707][ T39] audit: type=1400 audit(1727841460.750:872): avc: denied { create } for pid=11110 comm="syz.1.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 355.946286][ T39] audit: type=1400 audit(1727841460.760:873): avc: denied { ioctl } for pid=11110 comm="syz.1.1271" path="socket:[42461]" dev="sockfs" ino=42461 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 355.973318][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.976193][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.012531][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.015210][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.171669][T11114] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 356.544749][ T35] usb 5-1: USB disconnect, device number 33 [ 357.422321][T11131] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1277'. [ 357.436417][ T39] audit: type=1400 audit(1727841462.250:874): avc: denied { module_request } for pid=11128 comm="syz.2.1278" kmod="netdev-bridge0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 357.473747][T11129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1278'. [ 357.477573][T11129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11129 comm=syz.2.1278 [ 357.482398][T11129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1278'. [ 357.552813][T11139] overlayfs: missing 'lowerdir' [ 357.562786][ T39] audit: type=1400 audit(1727841462.380:875): avc: denied { accept } for pid=11136 comm="syz.2.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 357.654967][ T5396] IPVS: starting estimator thread 0... [ 357.657545][T11145] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 357.760963][T11147] IPVS: using max 18 ests per chain, 43200 per kthread [ 357.820790][ T6285] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 357.972585][ T6285] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 357.975650][ T6285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.976619][T11154] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 357.979432][ T6285] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 357.984965][ C2] ata1: illegal qc_active transition (00000000->80000000) [ 357.988520][ T6285] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 357.990716][ T6285] usb 5-1: Manufacturer: syz [ 357.993178][ T6285] usb 5-1: config 0 descriptor?? [ 358.041543][ T6285] rc_core: IR keymap rc-hauppauge not found [ 358.043159][ T6285] Registered IR keymap rc-empty [ 358.045200][ T6285] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 358.049946][ T6285] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input78 [ 358.201125][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.314221][ T1068] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 358.317493][ T1068] ata1.00: configured for UDMA/100 [ 358.603282][ T6285] usb 5-1: USB disconnect, device number 34 [ 359.547499][ T4773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.553998][ T4773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.558026][ T4773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.562182][ T4773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.565407][ T4773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 359.568234][ T4773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.663416][T11166] chnl_net:caif_netlink_parms(): no params data found [ 359.700876][ T827] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 359.731751][T11166] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.733765][T11166] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.735812][T11166] bridge_slave_0: entered allmulticast mode [ 359.737880][T11166] bridge_slave_0: entered promiscuous mode [ 359.741320][T11166] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.743854][T11166] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.746371][T11166] bridge_slave_1: entered allmulticast mode [ 359.749268][T11166] bridge_slave_1: entered promiscuous mode [ 359.781759][T11166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.785818][T11166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.814526][T11166] team0: Port device team_slave_0 added [ 359.817783][T11166] team0: Port device team_slave_1 added [ 359.835403][T11166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.837130][T11166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.844481][T11166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.848946][T11166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.851006][T11166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.852508][ T827] usb 6-1: config index 0 descriptor too short (expected 64575, got 68) [ 359.859037][T11166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.861554][ T827] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.866767][ T827] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 359.869599][ T827] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 359.874476][ T827] usb 6-1: config index 1 descriptor too short (expected 64575, got 68) [ 359.876574][ T827] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.879226][ T827] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 359.882778][ T827] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 359.890250][ T827] usb 6-1: string descriptor 0 read error: -71 [ 359.892227][ T827] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 359.894608][ T827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.897969][ T827] usb 6-1: can't set config #1, error -71 [ 359.899923][T11166] hsr_slave_0: entered promiscuous mode [ 359.900126][ T827] usb 6-1: USB disconnect, device number 36 [ 359.906211][T11166] hsr_slave_1: entered promiscuous mode [ 359.909191][T11166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.911748][T11166] Cannot create hsr debugfs directory [ 359.924336][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.001160][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.080113][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.179155][ T11] bridge_slave_1: left allmulticast mode [ 360.180886][ T11] bridge_slave_1: left promiscuous mode [ 360.182439][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.185221][ T11] bridge_slave_0: left allmulticast mode [ 360.186724][ T11] bridge_slave_0: left promiscuous mode [ 360.188266][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.346703][T11179] misc userio: Can't change port type on an already running userio instance [ 360.352000][T11181] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1289'. [ 360.450464][T11183] overlayfs: missing 'lowerdir' [ 360.456578][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.463262][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.468642][ T11] bond0 (unregistering): Released all slaves [ 360.496552][T11189] FAULT_INJECTION: forcing a failure. [ 360.496552][T11189] name failslab, interval 1, probability 0, space 0, times 0 [ 360.522228][T11189] CPU: 1 UID: 0 PID: 11189 Comm: syz.1.1291 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 360.525063][T11189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 360.527848][T11189] Call Trace: [ 360.528724][T11189] [ 360.529517][T11189] dump_stack_lvl+0x16c/0x1f0 [ 360.530787][T11189] should_fail_ex+0x497/0x5b0 [ 360.532071][T11189] ? fs_reclaim_acquire+0xae/0x160 [ 360.533405][T11189] should_failslab+0xc2/0x120 [ 360.534632][T11189] __kmalloc_cache_noprof+0x6b/0x300 [ 360.536012][T11189] ? binder_get_thread+0x223/0x8c0 [ 360.537345][T11189] binder_get_thread+0x223/0x8c0 [ 360.538656][T11189] ? __fget_files+0x244/0x3f0 [ 360.539917][T11189] binder_poll+0x41/0x400 [ 360.541062][T11189] do_select+0xc9a/0x17b0 [ 360.542394][T11189] ? __pfx_binder_poll+0x10/0x10 [ 360.543918][T11189] ? __pfx_do_select+0x10/0x10 [ 360.545401][T11189] ? hlock_class+0x4e/0x130 [ 360.546651][T11189] ? mark_lock+0xb5/0xc60 [ 360.547879][T11189] ? hlock_class+0x4e/0x130 [ 360.549258][T11189] ? mark_lock+0xb5/0xc60 [ 360.550520][T11189] ? __pfx___pollwait+0x10/0x10 [ 360.551883][T11189] ? __pfx_pollwake+0x10/0x10 [ 360.553184][T11189] ? __pfx_pollwake+0x10/0x10 [ 360.554428][T11189] ? __pfx_pollwake+0x10/0x10 [ 360.555686][T11189] ? __pfx_pollwake+0x10/0x10 [ 360.556934][T11189] ? __pfx_pollwake+0x10/0x10 [ 360.558171][T11189] ? __pfx_pollwake+0x10/0x10 [ 360.559426][T11189] ? __pfx_pollwake+0x10/0x10 [ 360.560673][T11189] ? lock_acquire+0x2f/0xb0 [ 360.561861][T11189] ? __might_fault+0xe3/0x190 [ 360.563051][T11189] ? __might_fault+0xe3/0x190 [ 360.564215][T11189] ? core_sys_select+0x459/0xb80 [ 360.565448][T11189] core_sys_select+0x459/0xb80 [ 360.566710][T11189] ? __pfx_core_sys_select+0x10/0x10 [ 360.568291][T11189] ? get_pid_task+0xfc/0x250 [ 360.569467][T11189] ? set_user_sigmask+0x217/0x2a0 [ 360.570796][T11189] ? __pfx_set_user_sigmask+0x10/0x10 [ 360.572206][T11189] do_pselect.constprop.0+0x1a0/0x1f0 [ 360.573611][T11189] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 360.575178][T11189] __x64_sys_pselect6+0x183/0x240 [ 360.576514][T11189] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 360.577999][T11189] do_syscall_64+0xcd/0x250 [ 360.579216][T11189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.580764][T11189] RIP: 0033:0x7f338417dff9 [ 360.581968][T11189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.587025][T11189] RSP: 002b:00007f3383bff038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 360.589229][T11189] RAX: ffffffffffffffda RBX: 00007f3384335f80 RCX: 00007f338417dff9 [ 360.591331][T11189] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 360.593429][T11189] RBP: 00007f3383bff090 R08: 0000000000000000 R09: 0000000000000000 [ 360.595492][T11189] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 360.597543][T11189] R13: 0000000000000000 R14: 00007f3384335f80 R15: 00007ffed0ffa098 [ 360.599687][T11189] [ 360.888470][ T11] hsr_slave_0: left promiscuous mode [ 360.893057][ T11] hsr_slave_1: left promiscuous mode [ 360.895959][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.898015][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.907037][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.908998][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.935586][ T11] veth1_macvtap: left promiscuous mode [ 360.938630][ T11] veth0_macvtap: left promiscuous mode [ 360.940181][ T11] veth1_vlan: left promiscuous mode [ 360.952754][ T11] veth0_vlan: left promiscuous mode [ 361.123975][ T1452] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 361.274492][ T1452] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 361.276730][ T1452] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.280144][ T1452] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 361.283037][ T1452] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 361.285290][ T1452] usb 7-1: Manufacturer: syz [ 361.287390][ T1452] usb 7-1: config 0 descriptor?? [ 361.340768][ T1452] rc_core: IR keymap rc-hauppauge not found [ 361.344436][ T1452] Registered IR keymap rc-empty [ 361.349481][ T1452] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 361.354594][ T1452] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input80 [ 361.613344][ T5339] Bluetooth: hci0: command tx timeout [ 361.796177][ T11] team0 (unregistering): Port device team_slave_1 removed [ 361.810700][ T1294] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 361.886443][ T11] team0 (unregistering): Port device team_slave_0 removed [ 362.066166][ T1294] usb 6-1: Using ep0 maxpacket: 8 [ 362.068945][ T1294] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.071746][ T1294] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 362.074130][ T1294] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 362.077447][ T1294] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 362.080239][ T1294] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 362.082783][ T1294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.091677][ T1294] hub 6-1:1.0: bad descriptor, ignoring hub [ 362.093318][ T1294] hub 6-1:1.0: probe with driver hub failed with error -5 [ 362.095686][ T1294] cdc_wdm 6-1:1.0: skipping garbage [ 362.097112][ T1294] cdc_wdm 6-1:1.0: skipping garbage [ 362.100717][ T1294] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 362.102409][ T1294] cdc_wdm 6-1:1.0: Unknown control protocol [ 362.295079][T11221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.299229][T11221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.519047][ T8] usb 7-1: USB disconnect, device number 49 [ 362.593622][T11166] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 362.599876][T11166] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 362.616180][T11166] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 362.626685][T11166] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 362.659361][T11166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.669299][T11166] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.679757][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.681674][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.688977][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.690915][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.773901][T11166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.788978][T11166] veth0_vlan: entered promiscuous mode [ 362.794320][T11166] veth1_vlan: entered promiscuous mode [ 362.804721][T11166] veth0_macvtap: entered promiscuous mode [ 362.807712][T11166] veth1_macvtap: entered promiscuous mode [ 362.820159][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.823078][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.825598][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.828359][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.831494][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.834227][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.837466][T11166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.841956][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.844716][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.847254][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.850500][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.853209][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.855966][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.859152][T11166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.863519][T11166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.865913][T11166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.868198][T11166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.870458][T11166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.913081][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.915162][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.929714][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.931932][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.169571][T11253] overlayfs: missing 'lowerdir' [ 363.194483][T11255] FAULT_INJECTION: forcing a failure. [ 363.194483][T11255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.199109][T11255] CPU: 3 UID: 0 PID: 11255 Comm: syz.0.1300 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 363.202727][T11255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 363.206502][T11255] Call Trace: [ 363.207727][T11255] [ 363.208812][T11255] dump_stack_lvl+0x16c/0x1f0 [ 363.210557][T11255] should_fail_ex+0x497/0x5b0 [ 363.212308][T11255] _copy_from_user+0x30/0xf0 [ 363.213986][T11255] do_tcp_getsockopt+0x1e96/0x2970 [ 363.215855][T11255] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 363.217837][T11255] ? mark_lock+0xb5/0xc60 [ 363.219424][T11255] ? __pfx_mark_lock+0x10/0x10 [ 363.221118][T11255] ? avc_has_perm_noaudit+0x119/0x3a0 [ 363.222848][T11255] ? __pfx_lock_release+0x10/0x10 [ 363.224507][T11255] ? trace_lock_acquire+0x14a/0x1d0 [ 363.226207][T11255] ? __pfx_mark_lock+0x10/0x10 [ 363.227796][T11255] ? hlock_class+0x4e/0x130 [ 363.229366][T11255] ? __lock_acquire+0x163e/0x3ce0 [ 363.231026][T11255] ? avc_has_perm+0x11b/0x1c0 [ 363.232619][T11255] ? __pfx___lock_acquire+0x10/0x10 [ 363.234477][T11255] ? find_held_lock+0x2d/0x110 [ 363.235943][T11255] ? __might_fault+0x13b/0x190 [ 363.237607][T11255] ? lock_acquire+0x2f/0xb0 [ 363.239243][T11255] ? __might_fault+0xe3/0x190 [ 363.240930][T11255] tcp_getsockopt+0xdf/0x100 [ 363.242975][T11255] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 363.245132][T11255] do_sock_getsockopt+0x3fe/0x800 [ 363.246940][T11255] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 363.248918][T11255] ? __fget_files+0x244/0x3f0 [ 363.250639][T11255] __sys_getsockopt+0x1a1/0x270 [ 363.252425][T11255] ? __pfx___sys_getsockopt+0x10/0x10 [ 363.254324][T11255] ? fput+0x30/0x390 [ 363.255768][T11255] ? ksys_write+0x1ad/0x260 [ 363.257429][T11255] ? __pfx_ksys_write+0x10/0x10 [ 363.259229][T11255] __x64_sys_getsockopt+0xbd/0x160 [ 363.261059][T11255] ? do_syscall_64+0x91/0x250 [ 363.262734][T11255] ? lockdep_hardirqs_on+0x7c/0x110 [ 363.264562][T11255] do_syscall_64+0xcd/0x250 [ 363.266191][T11255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.268289][T11255] RIP: 0033:0x7f824d97dff9 [ 363.269837][T11255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.276390][T11255] RSP: 002b:00007f824d3ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 363.279365][T11255] RAX: ffffffffffffffda RBX: 00007f824db35f80 RCX: 00007f824d97dff9 [ 363.282170][T11255] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 363.284993][T11255] RBP: 00007f824d3ff090 R08: 0000000020000000 R09: 0000000000000000 [ 363.287838][T11255] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 363.290667][T11255] R13: 0000000000000000 R14: 00007f824db35f80 R15: 00007fffbf1c4b78 [ 363.293503][T11255] [ 363.381806][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1301'. [ 363.393347][T11258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11258 comm=syz.0.1301 [ 363.397300][T11258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1301'. [ 363.700857][ T5339] Bluetooth: hci0: command 0x041b tx timeout [ 363.780792][ T5816] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 363.951791][ T5816] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 363.954057][ T5816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.964276][ T5816] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 363.966632][ T39] audit: type=1400 audit(1727841468.780:876): avc: denied { watch watch_reads } for pid=11262 comm="syz.2.1303" path="/156" dev="tmpfs" ino=882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 363.966830][ T5816] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 363.979227][ T5816] usb 5-1: Manufacturer: syz [ 363.992341][ T5816] usb 5-1: config 0 descriptor?? [ 364.015274][T11264] usb usb8: usbfs: process 11264 (syz.2.1303) did not claim interface 0 before use [ 364.083151][ T5816] rc_core: IR keymap rc-hauppauge not found [ 364.084793][ T5816] Registered IR keymap rc-empty [ 364.105122][ T5816] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 364.355545][ T5816] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input81 [ 364.460856][ T6306] usb 6-1: USB disconnect, device number 37 [ 364.469804][T11271] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 365.013790][ T6285] usb 5-1: USB disconnect, device number 35 [ 365.331881][T11281] overlayfs: missing 'workdir' [ 365.371582][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.738805][ T39] audit: type=1400 audit(1727841471.550:877): avc: denied { read write } for pid=11284 comm="syz.1.1310" name="uhid" dev="devtmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 366.753179][ T39] audit: type=1400 audit(1727841471.550:878): avc: denied { open } for pid=11284 comm="syz.1.1310" path="/dev/uhid" dev="devtmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 366.755855][T11287] misc userio: Can't change port type on an already running userio instance [ 366.774254][ T9] hid-generic 0000:4AE6:0000.0003: unknown main item tag 0x0 [ 366.777752][ T9] hid-generic 0000:4AE6:0000.0003: unknown main item tag 0x0 [ 366.792479][ T9] hid-generic 0000:4AE6:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz1 [ 366.813112][ T5339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.817803][ T5339] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.821077][ T5339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.823459][ T5339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.825637][ T5339] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 366.827653][ T5339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.914245][T11289] chnl_net:caif_netlink_parms(): no params data found [ 366.973381][T11289] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.976004][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.978643][T11289] bridge_slave_0: entered allmulticast mode [ 366.984922][T11289] bridge_slave_0: entered promiscuous mode [ 366.988857][T11289] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.991640][T11289] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.994294][T11289] bridge_slave_1: entered allmulticast mode [ 366.997322][T11289] bridge_slave_1: entered promiscuous mode [ 367.019685][T11289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.025795][T11289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.061430][T11289] team0: Port device team_slave_0 added [ 367.065060][T11289] team0: Port device team_slave_1 added [ 367.096965][T11289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.099693][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.111031][T11289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.115093][T11289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.116980][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.123703][T11289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.156959][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.207281][T11307] FAULT_INJECTION: forcing a failure. [ 367.207281][T11307] name failslab, interval 1, probability 0, space 0, times 0 [ 367.212954][T11307] CPU: 0 UID: 0 PID: 11307 Comm: syz.0.1313 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 367.216280][T11307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 367.219923][T11307] Call Trace: [ 367.220973][T11307] [ 367.221896][T11307] dump_stack_lvl+0x16c/0x1f0 [ 367.223372][T11307] should_fail_ex+0x497/0x5b0 [ 367.224847][T11307] ? fs_reclaim_acquire+0xae/0x160 [ 367.226440][T11307] should_failslab+0xc2/0x120 [ 367.227969][T11307] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 367.229682][T11307] ? alloc_empty_file+0x73/0x1e0 [ 367.231376][T11307] alloc_empty_file+0x73/0x1e0 [ 367.232886][T11307] path_openat+0xe1/0x2d60 [ 367.234281][T11307] ? hlock_class+0x4e/0x130 [ 367.235716][T11307] ? __lock_acquire+0x163e/0x3ce0 [ 367.237297][T11307] ? __pfx_path_openat+0x10/0x10 [ 367.238872][T11307] ? __pfx___lock_acquire+0x10/0x10 [ 367.240520][T11307] do_filp_open+0x1dc/0x430 [ 367.242059][T11307] ? __pfx_do_filp_open+0x10/0x10 [ 367.243718][T11307] ? find_held_lock+0x2d/0x110 [ 367.245263][T11307] ? _raw_spin_unlock+0x28/0x50 [ 367.246795][T11307] ? alloc_fd+0x2d7/0x6c0 [ 367.248155][T11307] do_sys_openat2+0x17a/0x1e0 [ 367.249635][T11307] ? __pfx_do_sys_openat2+0x10/0x10 [ 367.251287][T11307] ? __fget_files+0x244/0x3f0 [ 367.252755][T11307] __x64_sys_openat+0x175/0x210 [ 367.254272][T11307] ? __pfx___x64_sys_openat+0x10/0x10 [ 367.255937][T11307] ? ksys_write+0x1ad/0x260 [ 367.257363][T11307] do_syscall_64+0xcd/0x250 [ 367.258810][T11307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.260647][T11307] RIP: 0033:0x7f824d97c990 [ 367.262039][T11307] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 367.267937][T11307] RSP: 002b:00007f824d3ddb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 367.270501][T11307] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f824d97c990 [ 367.272906][T11307] RDX: 0000000000000002 RSI: 00007f824d3ddc10 RDI: 00000000ffffff9c [ 367.275346][T11307] RBP: 00007f824d3ddc10 R08: 0000000000000000 R09: 00236f656469762f [ 367.277767][T11307] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 367.280172][T11307] R13: 0000000000000000 R14: 00007f824db36058 R15: 00007fffbf1c4b78 [ 367.282586][T11307] [ 367.311268][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.325058][T11289] hsr_slave_0: entered promiscuous mode [ 367.328422][T11289] hsr_slave_1: entered promiscuous mode [ 367.331404][T11289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.333438][T11289] Cannot create hsr debugfs directory [ 367.404179][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.541217][T11310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1314'. [ 367.558577][T11310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11310 comm=syz.1.1314 [ 367.566650][T11310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1314'. [ 367.587041][ T11] bridge_slave_1: left allmulticast mode [ 367.589122][ T11] bridge_slave_1: left promiscuous mode [ 367.594554][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.611545][ T11] bridge_slave_0: left allmulticast mode [ 367.613513][ T11] bridge_slave_0: left promiscuous mode [ 367.615609][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.910489][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.919450][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.927202][ T11] bond0 (unregistering): Released all slaves [ 368.007861][T11324] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 368.196089][T11329] misc userio: Can't change port type on an already running userio instance [ 368.317156][ T11] hsr_slave_0: left promiscuous mode [ 368.320132][ T11] hsr_slave_1: left promiscuous mode [ 368.324025][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.326043][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.328350][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.330422][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.358445][ T11] veth1_macvtap: left promiscuous mode [ 368.360034][ T11] veth0_macvtap: left promiscuous mode [ 368.362048][ T11] veth1_vlan: left promiscuous mode [ 368.363749][ T11] veth0_vlan: left promiscuous mode [ 368.893006][ T4773] Bluetooth: hci0: command tx timeout [ 369.046053][ T11] team0 (unregistering): Port device team_slave_1 removed [ 369.135386][ T11] team0 (unregistering): Port device team_slave_0 removed [ 369.688972][T11342] overlayfs: missing 'workdir' [ 369.707275][T11289] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 369.716443][T11289] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 369.722621][T11289] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 369.736897][T11289] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 369.840372][T11289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.844281][T11348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1322'. [ 369.847689][T11348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11348 comm=syz.1.1322 [ 369.848707][T11289] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.851528][T11348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1322'. [ 369.856018][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.858612][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.874485][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.876389][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.884482][T11359] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 369.956054][T11289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.975211][T11289] veth0_vlan: entered promiscuous mode [ 369.979688][T11289] veth1_vlan: entered promiscuous mode [ 369.992792][T11289] veth0_macvtap: entered promiscuous mode [ 369.995846][T11289] veth1_macvtap: entered promiscuous mode [ 370.003217][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.006114][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.008973][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.012247][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.014830][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.017563][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.021209][T11289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.025934][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.028758][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.031955][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.034665][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.037182][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.039931][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.043171][T11289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.048125][T11289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.050500][T11289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.053271][T11289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.055544][T11289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.083398][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.086097][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.107780][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.110355][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.125864][T11367] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1326'. [ 370.219519][ T39] audit: type=1400 audit(1727841475.030:879): avc: denied { create } for pid=11370 comm="syz.1.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 370.292587][T11374] overlayfs: missing 'workdir' [ 370.640825][ T6285] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 371.142881][ T6285] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 371.145964][ T6285] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.153155][ T6285] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 371.156533][ T6285] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 371.159483][ T6285] usb 6-1: Manufacturer: syz [ 371.163871][ T6285] usb 6-1: config 0 descriptor?? [ 371.220796][ T6285] rc_core: IR keymap rc-hauppauge not found [ 371.223193][ T6285] Registered IR keymap rc-empty [ 371.226076][ T6285] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 371.234663][ T6285] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input84 [ 371.633954][T11390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1333'. [ 371.637993][T11390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11390 comm=syz.2.1333 [ 371.642150][T11390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1333'. [ 371.753562][T11399] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 371.789746][ T35] usb 6-1: USB disconnect, device number 38 [ 371.860505][T11401] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1336'. [ 372.952329][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.035925][T11420] FAULT_INJECTION: forcing a failure. [ 373.035925][T11420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.040903][T11420] CPU: 2 UID: 0 PID: 11420 Comm: syz.2.1342 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 373.044669][T11420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 373.048616][T11420] Call Trace: [ 373.049977][T11420] [ 373.051114][T11420] dump_stack_lvl+0x16c/0x1f0 [ 373.052913][T11420] should_fail_ex+0x497/0x5b0 [ 373.054696][T11420] _copy_to_user+0x30/0xc0 [ 373.056369][T11420] simple_read_from_buffer+0xd0/0x160 [ 373.058389][T11420] proc_fail_nth_read+0x198/0x270 [ 373.060273][T11420] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.062312][T11420] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.064371][T11420] vfs_read+0x1ce/0xbd0 [ 373.065936][T11420] ? __fget_files+0x23a/0x3f0 [ 373.067709][T11420] ? fdget_pos+0x24c/0x360 [ 373.069389][T11420] ? __pfx_lock_release+0x10/0x10 [ 373.071090][T11420] ? trace_lock_acquire+0x14a/0x1d0 [ 373.072445][T11420] ? __pfx_vfs_read+0x10/0x10 [ 373.073712][T11420] ? __pfx___mutex_lock+0x10/0x10 [ 373.075065][T11420] ? __fget_files+0x244/0x3f0 [ 373.076315][T11420] ksys_read+0x12f/0x260 [ 373.077452][T11420] ? __pfx_ksys_read+0x10/0x10 [ 373.078719][T11420] do_syscall_64+0xcd/0x250 [ 373.080251][T11420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.082267][T11420] RIP: 0033:0x7f1a63b7ca3c [ 373.083876][T11420] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 373.090599][T11420] RSP: 002b:00007f1a648b8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 373.093295][T11420] RAX: ffffffffffffffda RBX: 00007f1a63d35f80 RCX: 00007f1a63b7ca3c [ 373.095378][T11420] RDX: 000000000000000f RSI: 00007f1a648b80a0 RDI: 000000000000000b [ 373.097441][T11420] RBP: 00007f1a648b8090 R08: 0000000000000000 R09: 0000000000000000 [ 373.099510][T11420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.101972][T11420] R13: 0000000000000000 R14: 00007f1a63d35f80 R15: 00007fff59dcd7f8 [ 373.104576][T11420] [ 374.393508][T11427] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1345'. [ 374.431333][T11425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1343'. [ 374.436634][T11425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11425 comm=syz.0.1343 [ 374.446176][T11425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1343'. [ 374.474992][ T5339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.479699][ T5339] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.482960][ T5339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.485344][ T5339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.488406][ T5339] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 374.490452][ T5339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.536153][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.584633][T11441] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 374.587262][T11442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=11442 comm=syz.0.1347 [ 374.601163][T11442] fuse: Bad value for 'user_id' [ 374.605742][T11442] fuse: Bad value for 'user_id' [ 374.626356][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.637060][T11433] chnl_net:caif_netlink_parms(): no params data found [ 374.740791][ T1452] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 374.772089][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.804212][T11433] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.806393][T11433] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.808635][T11433] bridge_slave_0: entered allmulticast mode [ 374.811083][T11433] bridge_slave_0: entered promiscuous mode [ 374.814233][T11433] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.816185][T11433] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.818126][T11433] bridge_slave_1: entered allmulticast mode [ 374.820784][T11433] bridge_slave_1: entered promiscuous mode [ 374.853340][T11433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.857125][T11433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.885675][T11433] team0: Port device team_slave_0 added [ 374.889847][T11433] team0: Port device team_slave_1 added [ 374.904905][ T1452] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 374.907370][ T1452] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.915314][ T1452] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 374.921406][T11433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.923181][T11433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.924796][ T1452] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 374.929914][T11433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.932843][ T1452] usb 6-1: Manufacturer: syz [ 374.935745][T11433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.937527][ T1452] usb 6-1: config 0 descriptor?? [ 374.937841][T11433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.946273][T11433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.990830][ T1452] rc_core: IR keymap rc-hauppauge not found [ 374.992667][ T1452] Registered IR keymap rc-empty [ 374.994624][ T1452] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 375.000071][ T1452] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input85 [ 375.008974][T11433] hsr_slave_0: entered promiscuous mode [ 375.014681][T11433] hsr_slave_1: entered promiscuous mode [ 375.016757][T11433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.018750][T11433] Cannot create hsr debugfs directory [ 375.088734][ T11] bridge_slave_1: left allmulticast mode [ 375.090159][ T11] bridge_slave_1: left promiscuous mode [ 375.093021][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.096035][ T11] bridge_slave_0: left allmulticast mode [ 375.097563][ T11] bridge_slave_0: left promiscuous mode [ 375.099103][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.373253][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.381976][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.389358][ T11] bond0 (unregistering): Released all slaves [ 375.623310][T11469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.627439][T11469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.747592][ T11] hsr_slave_0: left promiscuous mode [ 375.749714][ T11] hsr_slave_1: left promiscuous mode [ 375.753867][ T1452] usb 6-1: USB disconnect, device number 39 [ 375.757901][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.761045][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.767395][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.770123][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.805220][ T11] veth1_macvtap: left promiscuous mode [ 375.807235][ T11] veth0_macvtap: left promiscuous mode [ 375.809239][ T11] veth1_vlan: left promiscuous mode [ 375.811285][ T11] veth0_vlan: left promiscuous mode [ 375.861059][ T8] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 376.043037][ T8] usb 5-1: Invalid ep0 maxpacket: 32 [ 376.181056][ T8] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 376.360804][ T8] usb 5-1: Invalid ep0 maxpacket: 32 [ 376.362662][ T8] usb usb5-port1: attempt power cycle [ 376.570863][ T5339] Bluetooth: hci0: command tx timeout [ 376.594784][T11488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1355'. [ 376.646816][ T11] team0 (unregistering): Port device team_slave_1 removed [ 376.650316][T11489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11489 comm=syz.1.1355 [ 376.657453][T11489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1355'. [ 376.720776][ T8] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 376.739972][ T11] team0 (unregistering): Port device team_slave_0 removed [ 376.741890][ T8] usb 5-1: Invalid ep0 maxpacket: 32 [ 376.870817][ T8] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 376.891272][ T8] usb 5-1: Invalid ep0 maxpacket: 32 [ 376.893451][ T8] usb usb5-port1: unable to enumerate USB device [ 377.569095][T11492] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1356'. [ 377.591492][ T39] audit: type=1326 audit(1727841482.410:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.1.1357" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f338417dff9 code=0x0 [ 377.687265][T11433] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 377.692283][T11433] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 377.695635][T11433] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 377.702250][T11433] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 377.707468][T11500] loop0: detected capacity change from 0 to 7 [ 377.714145][T11500] Dev loop0: unable to read RDB block 7 [ 377.726743][T11500] loop0: unable to read partition table [ 377.728555][T11500] loop0: partition table beyond EOD, truncated [ 377.730773][T11500] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 377.730773][T11500] ) failed (rc=-5) [ 377.773437][T11433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.784241][T11433] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.787992][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.789895][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.797159][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.799785][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.822939][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1358'. [ 377.865782][T11433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 377.879285][T11433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.975106][T11433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.988193][T11522] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 377.993090][T11433] veth0_vlan: entered promiscuous mode [ 378.000019][T11433] veth1_vlan: entered promiscuous mode [ 378.012822][T11433] veth0_macvtap: entered promiscuous mode [ 378.018101][T11433] veth1_macvtap: entered promiscuous mode [ 378.024135][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.026955][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.029450][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.032585][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.035113][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.037816][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.040982][T11433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.044859][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.047557][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.050125][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.053170][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.055690][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.058358][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.061970][T11433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.066390][T11433] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.068675][T11433] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.071688][T11433] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.073946][T11433] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.105296][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.107552][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.117782][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.125344][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.331464][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.650868][ T5339] Bluetooth: hci0: command 0x041b tx timeout [ 378.891082][T11544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1365'. [ 378.895289][T11544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11544 comm=syz.2.1365 [ 378.901272][T11544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1365'. [ 378.972250][T11548] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1366'. [ 379.321713][T11550] misc userio: Can't change port type on an already running userio instance [ 379.392414][T11556] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 379.729250][T11564] misc userio: Can't change port type on an already running userio instance [ 380.107628][T11569] wireguard0: entered promiscuous mode [ 380.109117][T11569] wireguard0: entered allmulticast mode [ 380.314615][ T1104] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.330259][T11575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1374'. [ 380.334217][T11575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11575 comm=syz.1.1374 [ 380.338056][T11575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1374'. [ 380.570917][ T6285] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 380.723939][ T6285] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 380.726888][ T6285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.731433][ T6285] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 380.734648][ T6285] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 380.737575][ T6285] usb 5-1: Manufacturer: syz [ 380.741657][ T6285] usb 5-1: config 0 descriptor?? [ 380.782511][ T6285] rc_core: IR keymap rc-hauppauge not found [ 380.784156][ T6285] Registered IR keymap rc-empty [ 380.786341][ T6285] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 380.791491][ T6285] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input88 [ 381.135910][ T1294] usb 5-1: USB disconnect, device number 40 [ 381.937229][T11592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1375'. [ 381.940239][T11592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11592 comm=syz.0.1375 [ 381.945213][T11592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1375'. [ 381.948666][ T5339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.954049][ T5339] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.957719][ T5339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.961205][ T5339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.964462][ T5339] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 381.967286][ T5339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.053361][ T1104] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.073658][T11600] overlay: ./file0 is not a directory [ 382.096138][T11600] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x65b pfn:0x5df28 [ 382.100896][T11600] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 382.103533][T11600] page_type: f0(buddy) [ 382.105148][T11600] raw: 00fff00000000000 ffffea00013fec08 ffffea0001780a08 0000000000000000 [ 382.108807][T11600] raw: 000000000000065b 0000000000000003 00000000f0000000 0000000000000000 [ 382.114023][T11600] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 382.119174][T11600] page_owner tracks the page as freed [ 382.122765][T11600] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 11564, tgid 11563 (syz.2.1371), ts 379786402108, free_ts 380075813472 [ 382.129870][T11600] post_alloc_hook+0x2d1/0x350 [ 382.131739][T11600] get_page_from_freelist+0x101e/0x3070 [ 382.134425][T11600] __alloc_pages_noprof+0x223/0x25c0 [ 382.136747][T11600] alloc_pages_mpol_noprof+0x2c9/0x610 [ 382.138991][T11600] folio_alloc_mpol_noprof+0x36/0xd0 [ 382.140965][T11600] shmem_alloc_folio+0x135/0x160 [ 382.143131][T11600] shmem_alloc_and_add_folio+0x48b/0xc00 [ 382.145266][T11600] shmem_get_folio_gfp+0x689/0x1530 [ 382.147121][T11600] shmem_fault+0x200/0xae0 [ 382.148447][T11600] __do_fault+0x10a/0x490 [ 382.149688][T11600] do_pte_missing+0xea8/0x3e50 [ 382.151129][T11600] __handle_mm_fault+0x100a/0x2a10 [ 382.152734][T11600] handle_mm_fault+0x3fa/0xaa0 [ 382.154618][T11600] __get_user_pages+0x90f/0x3b90 [ 382.156264][T11600] populate_vma_page_range+0x27f/0x3a0 [ 382.157876][T11600] __mm_populate+0x1d6/0x380 [ 382.159268][T11600] page last free pid 11565 tgid 11563 stack trace: [ 382.161369][T11600] free_unref_folios+0x956/0x1310 [ 382.163033][T11600] folios_put_refs+0x551/0x750 [ 382.164533][T11600] shmem_undo_range+0x586/0x1170 [ 382.165986][T11600] shmem_evict_inode+0x3a3/0xba0 [ 382.167484][T11600] evict+0x409/0x970 [ 382.168681][T11600] iput+0x530/0x890 [ 382.169852][T11600] dentry_unlink_inode+0x29c/0x480 [ 382.171791][T11600] __dentry_kill+0x1d0/0x600 [ 382.173139][T11600] dput.part.0+0x4b1/0x9b0 [ 382.174385][T11600] dput+0x1f/0x30 [ 382.175396][T11600] __fput+0x513/0xb60 [ 382.176836][T11600] task_work_run+0x14e/0x250 [ 382.178293][T11600] do_exit+0xadd/0x2d70 [ 382.179611][T11600] do_group_exit+0xd3/0x2a0 [ 382.181327][T11600] get_signal+0x25fb/0x2770 [ 382.182835][T11600] arch_do_signal_or_restart+0x90/0x7e0 [ 382.189014][T11600] ------------[ cut here ]------------ [ 382.191448][T11600] kernel BUG at include/linux/mm.h:1444! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 382.194169][T11600] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 382.197699][T11600] CPU: 3 UID: 0 PID: 11600 Comm: syz.0.1378 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 382.200907][T11600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 382.204975][T11600] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 382.207141][T11600] Code: d1 8b 48 89 df e8 40 6b 45 fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 90 aa ff fc 48 c7 c6 40 3b d1 8b 4c 89 e7 e8 21 6b 45 fd 90 <0f> 0b e8 79 aa ff fc 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 382.211917][T11607] misc userio: Can't change port type on an already running userio instance [ 382.213188][T11600] RSP: 0018:ffffc90003156000 EFLAGS: 00010283 [ 382.213205][T11600] RAX: 000000000003792c RBX: 0000000000000001 RCX: ffffc9002b742000 [ 382.213213][T11600] RDX: 0000000000040000 RSI: ffffffff848dde6f RDI: ffff88803377ccc4 [ 382.213221][T11600] RBP: ffffea000177ca34 R08: 0000000000000001 R09: fffffbfff2dc49ab [ 382.213228][T11600] R10: ffffffff96e24d5f R11: ffff88806a928a40 R12: ffffea000177ca00 [ 382.213236][T11600] R13: ffff888029391000 R14: 0000000000001000 R15: 0000000000001000 [ 382.213244][T11600] FS: 00007f824d3de6c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 382.213267][T11600] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.232771][T11600] CR2: 0000001b32ce9ff8 CR3: 000000002e362000 CR4: 0000000000352ef0 [ 382.235101][T11600] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 382.237277][T11600] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 382.239473][T11600] Call Trace: [ 382.240386][T11600] [ 382.241268][T11600] ? die+0x31/0x80 [ 382.242391][T11600] ? do_trap+0x232/0x430 [ 382.243895][T11600] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 382.245648][T11600] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 382.247377][T11600] ? do_error_trap+0xf4/0x230 [ 382.248666][T11600] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 382.250373][T11600] ? handle_invalid_op+0x34/0x40 [ 382.251801][T11600] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 382.253496][T11600] ? exc_invalid_op+0x2e/0x50 [ 382.254818][T11600] ? asm_exc_invalid_op+0x1a/0x20 [ 382.256229][T11600] ? __iov_iter_get_pages_alloc+0x1d0f/0x2230 [ 382.257907][T11600] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 382.259628][T11600] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 382.261272][T11600] ? radix_tree_node_alloc.constprop.0+0x1b8/0x350 [ 382.262972][T11600] ? delete_node+0x207/0x8e0 [ 382.264187][T11600] iov_iter_get_pages_alloc2+0x53/0xf0 [ 382.265645][T11600] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 382.267426][T11600] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 382.269334][T11600] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 382.270696][T11600] p9_virtio_zc_request+0x992/0x1390 [ 382.272091][T11600] ? p9pdu_writef+0xc4/0x100 [ 382.273310][T11600] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 382.274811][T11600] ? __pfx_p9_tag_alloc+0x10/0x10 [ 382.276136][T11600] ? bpf_ksym_find+0x127/0x1c0 [ 382.277408][T11600] ? rcu_is_watching+0x12/0xc0 [ 382.278678][T11600] ? trace_9p_protocol_dump+0x192/0x220 [ 382.280148][T11600] ? rcu_is_watching+0x12/0xc0 [ 382.281426][T11600] ? p9_client_prepare_req+0x111/0x4d0 [ 382.282870][T11600] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 382.284408][T11600] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 382.285959][T11600] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 382.287646][T11600] ? find_held_lock+0x2d/0x110 [ 382.288918][T11600] ? netfs_load_buffer_from_ra.isra.0+0x737/0x12f0 [ 382.290623][T11600] ? __pfx_lock_release+0x10/0x10 [ 382.291952][T11600] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 382.293446][T11600] p9_client_read_once+0x443/0x820 [ 382.294805][T11600] ? __pfx_p9_client_read_once+0x10/0x10 [ 382.296278][T11600] p9_client_read+0x13f/0x1b0 [ 382.297519][T11600] v9fs_issue_read+0x115/0x310 [ 382.298793][T11600] ? __pfx_v9fs_issue_read+0x10/0x10 [ 382.300185][T11600] netfs_read_to_pagecache+0x5c9/0x9a0 [ 382.301610][T11600] netfs_readahead+0x7fa/0xaa0 [ 382.302886][T11600] ? __pfx_netfs_readahead+0x10/0x10 [ 382.304272][T11600] read_pages+0x1a8/0xd80 [ 382.305408][T11600] ? __folio_batch_add_and_move+0x689/0xc60 [ 382.306969][T11600] ? __folio_batch_add_and_move+0x612/0xc60 [ 382.308515][T11600] ? __pfx_read_pages+0x10/0x10 [ 382.309798][T11600] ? find_held_lock+0x2d/0x110 [ 382.311072][T11600] page_cache_ra_unbounded+0x3c0/0x6c0 [ 382.312501][T11600] page_cache_ra_order+0x7d9/0xc90 [ 382.313850][T11600] page_cache_async_ra+0x5cb/0x820 [ 382.315194][T11600] filemap_get_pages+0x367/0x1be0 [ 382.316521][T11600] ? __pfx_filemap_get_pages+0x10/0x10 [ 382.317942][T11600] ? __pfx___might_resched+0x10/0x10 [ 382.319329][T11600] filemap_read+0x3a9/0xd00 [ 382.320521][T11600] ? __pfx___lock_acquire+0x10/0x10 [ 382.321888][T11600] ? __pfx_filemap_read+0x10/0x10 [ 382.323217][T11600] ? __pfx___up_read+0x10/0x10 [ 382.324477][T11600] netfs_buffered_read_iter+0x117/0x190 [ 382.325922][T11600] netfs_file_read_iter+0x10f/0x190 [ 382.327293][T11600] v9fs_file_read_iter+0x9b/0x100 [ 382.328607][T11600] __kernel_read+0x3f1/0xb50 [ 382.329832][T11600] ? __pfx___kernel_read+0x10/0x10 [ 382.331197][T11600] integrity_kernel_read+0x7f/0xb0 [ 382.332535][T11600] ? __pfx_integrity_kernel_read+0x10/0x10 [ 382.334055][T11600] ? kernel_fpu_end+0x45/0x70 [ 382.335294][T11600] ? _sha256_update+0xc8/0xf0 [ 382.336532][T11600] ima_calc_file_hash_tfm+0x2c9/0x3e0 [ 382.337937][T11600] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 382.339529][T11600] ? generic_fillattr+0x6b0/0x8c0 [ 382.340853][T11600] ? ima_alloc_tfm+0x21d/0x2d0 [ 382.342115][T11600] ima_calc_file_hash+0x1ba/0x490 [ 382.343442][T11600] ima_collect_measurement+0x89f/0xa40 [ 382.344841][T11600] ? process_measurement+0x70a/0x2370 [ 382.346253][T11600] ? __pfx_ima_collect_measurement+0x10/0x10 [ 382.347823][T11600] ? lock_acquire.part.0+0x11b/0x380 [ 382.349201][T11600] ? rcu_is_watching+0x12/0xc0 [ 382.350472][T11600] ? trace_contention_end+0xea/0x140 [ 382.351871][T11600] ? is_bad_inode+0xd/0x40 [ 382.353051][T11600] ? xattr_resolve_name+0x27b/0x3f0 [ 382.354422][T11600] ? vfs_getxattr_alloc+0xf1/0x340 [ 382.355779][T11600] ? ima_get_hash_algo+0x27d/0x410 [ 382.357129][T11600] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 382.358564][T11600] ? process_measurement+0x1271/0x2370 [ 382.360000][T11600] process_measurement+0x1271/0x2370 [ 382.361407][T11600] ? __pfx_process_measurement+0x10/0x10 [ 382.362906][T11600] ? find_held_lock+0x2d/0x110 [ 382.364175][T11600] ? v9fs_open_fid_add+0x102/0x190 [ 382.365530][T11600] ? __pfx_lock_release+0x10/0x10 [ 382.366863][T11600] ? do_raw_spin_lock+0x12d/0x2c0 [ 382.368197][T11600] ? __pfx_v9fs_file_open+0x10/0x10 [ 382.369561][T11600] ? bpf_lsm_file_open+0x9/0x10 [ 382.370857][T11600] ? inode_to_bdi+0x9e/0x160 [ 382.372076][T11600] ima_file_check+0xc1/0x110 [ 382.373296][T11600] ? __pfx_ima_file_check+0x10/0x10 [ 382.374673][T11600] security_file_post_open+0x8e/0x210 [ 382.376084][T11600] path_openat+0x1419/0x2d60 [ 382.377383][T11600] ? __pfx_path_openat+0x10/0x10 [ 382.378708][T11600] ? __pfx___lock_acquire+0x10/0x10 [ 382.380093][T11600] do_filp_open+0x1dc/0x430 [ 382.381203][T11600] ? __pfx_do_filp_open+0x10/0x10 [ 382.382539][T11600] ? _raw_spin_unlock+0x28/0x50 [ 382.383836][T11600] ? alloc_fd+0x2d7/0x6c0 [ 382.384985][T11600] do_sys_openat2+0x17a/0x1e0 [ 382.386227][T11600] ? __pfx_do_sys_openat2+0x10/0x10 [ 382.387616][T11600] __x64_sys_open+0x154/0x1e0 [ 382.388870][T11600] ? __pfx___x64_sys_open+0x10/0x10 [ 382.390251][T11600] do_syscall_64+0xcd/0x250 [ 382.391475][T11600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.393025][T11600] RIP: 0033:0x7f824d97dff9 [ 382.394198][T11600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.399167][T11600] RSP: 002b:00007f824d3de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 382.401343][T11600] RAX: ffffffffffffffda RBX: 00007f824db36058 RCX: 00007f824d97dff9 [ 382.403438][T11600] RDX: 0000000000000000 RSI: 0000000000141142 RDI: 0000000020007f80 [ 382.405527][T11600] RBP: 00007f824d9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 382.407597][T11600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.409660][T11600] R13: 0000000000000000 R14: 00007f824db36058 R15: 00007fffbf1c4b78 [ 382.411586][T11600] [ 382.412407][T11600] Modules linked in: [ 382.413928][T11600] ---[ end trace 0000000000000000 ]--- [ 382.416518][T11600] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 382.418300][T11600] Code: d1 8b 48 89 df e8 40 6b 45 fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 90 aa ff fc 48 c7 c6 40 3b d1 8b 4c 89 e7 e8 21 6b 45 fd 90 <0f> 0b e8 79 aa ff fc 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 382.424249][T11600] RSP: 0018:ffffc90003156000 EFLAGS: 00010283 [ 382.426502][T11600] RAX: 000000000003792c RBX: 0000000000000001 RCX: ffffc9002b742000 [ 382.428642][T11600] RDX: 0000000000040000 RSI: ffffffff848dde6f RDI: ffff88803377ccc4 [ 382.430926][T11600] RBP: ffffea000177ca34 R08: 0000000000000001 R09: fffffbfff2dc49ab [ 382.431503][ T1104] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.433017][T11600] R10: ffffffff96e24d5f R11: ffff88806a928a40 R12: ffffea000177ca00 [ 382.439004][T11600] R13: ffff888029391000 R14: 0000000000001000 R15: 0000000000001000 [ 382.448697][T11600] FS: 00007f824d3de6c0(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 [ 382.451426][T11600] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.453197][T11600] CR2: 00007f3384337a8c CR3: 000000002e362000 CR4: 0000000000352ef0 [ 382.455312][T11600] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 382.457423][T11600] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 382.459602][T11600] Kernel panic - not syncing: Fatal exception [ 382.467057][T11600] Kernel Offset: disabled [ 382.468230][T11600] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:58:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff8880304d6180 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff844f8c6f RDI=ffff8880304d6198 RBP=dffffc0000000000 RSP=ffffc900037c7968 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=00000000000a4001 R12=ffffc900037c7a90 R13=ffff88802dbf3f90 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff844f8c95 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555954d2500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020052000 CR3=00000000337a0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000001 Opmask02=000000007ffbffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed0ff8250 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33841f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33841f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33841f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33841f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33841f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33841f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000115a194 RBX=0000000000000001 RCX=ffffffff8b21cdd9 RDX=ffffed100d4e7026 RSI=ffffffff8bd19cc0 RDI=ffffffff81647efc RBP=ffffed1003b56910 RSP=ffffc90000187e08 R8 =0000000000000000 R9 =ffffed100d4e7025 R10=ffff88806a73812b R11=0000000000000001 R12=0000000000000001 R13=ffff88801dab4880 R14=ffffffff905f2b88 R15=0000000000000000 RIP=ffffffff8b21e1bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b32ce7ff8 CR3=000000004d1b8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=000000007ffbffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbf1c4f10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f824d9f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f824d9f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f824d9f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f824d9f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f824d9f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f824d9f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000a1a67c RBX=0000000000000002 RCX=ffffffff8b21cdd9 RDX=ffffed100d507026 RSI=ffffffff8bd19cc0 RDI=ffffffff81647efc RBP=ffffed1003bd9000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000001 R12=0000000000000002 R13=ffff88801dec8000 R14=ffffffff905f2b88 R15=0000000000000000 RIP=ffffffff8b21e1bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc4d823f18 CR3=000000002790e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a63bf1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a63bf1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a63bf113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a63bf114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a63bf11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a63bf12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a63d0b488 00007f1a63d0b480 00007f1a63d0b478 00007f1a63d0b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a6486d100 00007f1a63d0b440 00007f1a63d00004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a63d0b498 00007f1a63d0b490 00007f1a63d0b488 00007f1a63d0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 db3e405c753a0731 db05998c1168c124 786eba88b9e36c3c 9c2700b51f5ca1bc ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 622587cf967c93ca cd514bc733b841f6 2cf060cf4b03ddfb 5cb6fb113db5ddb5 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d5700c60c54d42c8 9538c1b916345851 a0bed4707217925e f40e63cf72dd97d5 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 af35bce41b891db4 dcb2edde310ac19c 0794911f599fd2cc a64221fa5b7d4176 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850a6d05 RDI=ffffffff9aae1b80 RBP=ffffffff9aae1b40 RSP=ffffc90003155950 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=5128204350206148 R12=0000000000000000 R13=0000000000000036 R14=ffffffff850a6ca0 R15=0000000000000000 RIP=ffffffff850a6d2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f824d3de6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b32ce9ff8 CR3=000000002e362000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813ee828 ffffffff8133449d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8133449d ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f824d9f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f824d9f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f824d9f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f824d9f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f824d9f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f824d9f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f824e66d100 00007f824db0b440 00007f8200040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f824db0b498 00007f824db0b490 00007f824db0b488 00007f824db0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000