last executing test programs: 7.648454833s ago: executing program 2 (id=889): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d53048c3) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e000000000000000000000000004000000000000000000000000000000000000000000038000100000000000000030000000000000000000000000000000000000000000000000009000000000002"], 0x78) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000001000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) (async) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) (async, rerun: 32) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) (rerun: 32) syz_usb_control_io(r3, 0x0, 0x0) (async, rerun: 64) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 64) r5 = dup(r4) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) (async) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 4.568260128s ago: executing program 2 (id=907): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioperm(0x0, 0x9, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x400, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @adiantum, 0x0, @desc1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f0000000500300000000000080039000300000008000300", @ANYRES32=r4], 0x2c}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x11, 0xa, 0x0) r5 = openat$autofs(0xffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="2e0000001000818804c52808a95c0966dfa1f8482e0000005e0c0000210000180e000a0014000000", 0x28}, {&(0x7f0000000440)="f1ed831427f6", 0x6}], 0x2}, 0x0) 4.563881547s ago: executing program 2 (id=909): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r2 = openat(r1, &(0x7f000000c380)='./file0\x00', 0x20942, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3]) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e3b0d"], 0x3e) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x129002) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 3.637485004s ago: executing program 2 (id=915): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) io_setup(0x0, &(0x7f00000003c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setfsuid(0x0) io_submit(0x0, 0xfffffffffffffdac, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000280)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xa, 0x80, 0x80, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000001c0), 0xbde, r1}, 0x38) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffdcd) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x13, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x15}}, [@printk={@p, {}, {0x5, 0x1, 0xb, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x65c}, {0x14, 0x9}}], {{0x4, 0x1, 0x4, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1) getdents(r4, 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/182, 0xb6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) io_setup(0x8000, &(0x7f0000000380)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r4, 0x15, 0x0, @void}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) chdir(0x0) 1.930215092s ago: executing program 0 (id=919): r0 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000000)=r3) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@newtclass={0x5c, 0x28, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xa, 0xfff1}, {0xffe0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x31, 0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0xb}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0xfffffff7}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008001}, 0x24000040) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000a000000034000030000000008001d0001000000", 0x24) 1.878999918s ago: executing program 0 (id=920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30ff9e00000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 1.806701954s ago: executing program 1 (id=921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x900dedca704839a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000040601010000000000000000000000000900020073797a32000000000500010007"], 0x28}}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00'}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000021000000000000000000000000000000000000000000000000ffffffff0000000000000000100000000000000000000000000000000000000000000000000000000400000000000000ffffffff0000000000000000000000000000000000000000000000000040000000000000000000000000000000000000ffffffff020000000300000000000000ffff0000000000000000000000000000000062726983676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e61740000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000edffffff0000000000"]}, 0x398) r12 = socket(0x11, 0x800000003, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000006c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000780)={0x20, r13, &(0x7f0000000740)=[{}, {0x1, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x1}], 0xdeadbeef, 0x8, 0x5}) r14 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xc, [], 0x0, [0x4]}}}}]}, 0x88}}, 0x0) 1.799559969s ago: executing program 0 (id=922): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x401, 0x4) (async) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0xe) (async) r1 = accept4(r0, &(0x7f0000000080)=@isdn, &(0x7f0000000100)=0x80, 0x800) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req={0xf, 0x4, 0x7d, 0xf0}, 0x10) (async) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x8) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) (async) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 1.797991101s ago: executing program 3 (id=923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) listen(r3, 0x0) (async) setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f0000000000)=0x2, 0x4) (async) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaa801800800b8606174251929d3a2df2df40000080045000028000000000006907882fe36ff08746b05f36fe56382824995acc420d6bb58279b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRESOCT=r2, @ANYRES16=0x0], 0x24}}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="0500080000000000090007004ff5677c1a0000000800090001ac0f"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000040000000000000000079120cde0000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_80211_join_ibss(&(0x7f00000001c0)='wlan1\x00', &(0x7f0000000280)=@default_ibss_ssid, 0x6, 0x1) 1.727989895s ago: executing program 3 (id=924): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioperm(0x0, 0x9, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x400, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @adiantum, 0x0, @desc1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f0000000500300000000000080039000300000008000300", @ANYRES32=r4], 0x2c}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x11, 0xa, 0x0) r5 = openat$autofs(0xffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="2e0000001000818804c52808a95c0966dfa1f8482e0000005e0c0000210000180e000a0014000000", 0x28}, {&(0x7f0000000440)="f1ed831427f6", 0x6}], 0x2}, 0x0) 1.718412089s ago: executing program 1 (id=925): r0 = socket(0x6, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 1.650107215s ago: executing program 0 (id=926): r0 = syz_open_dev$media(&(0x7f0000000040), 0x8, 0x169000) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x100) lseek(r1, 0x9, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./file0/file0\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', r2, &(0x7f0000000280)='./file0/file0/file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0xa, 0xfffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r6 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x80100, 0x0, 0x39}, 0x18) fcntl$setownex(r6, 0xf, &(0x7f00000000c0)={0x41c21c49b1a76e92}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r4, @ANYRES64=r5, @ANYRESDEC=r0, @ANYRES32, @ANYRES8=r6, @ANYRESHEX=0x0, @ANYRESHEX=r4], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={0xffffffffffffffff, r7}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000440)={{0x2, 0x4e24, @remote}, {0x306, @local}, 0x6, {0x2, 0x4e24, @remote}, 'vlan0\x00'}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000540)={'filter\x00', 0x0, 0x4, 0x35, [0x3, 0x8, 0x55e7, 0x5, 0xc, 0x6], 0x8, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)=""/53}, &(0x7f00000003c0)=0x50) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r10) sendfile(r8, r8, 0x0, 0x8) r11 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) 1.64968469s ago: executing program 3 (id=927): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b40000000000000079"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x20, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r1, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x4, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b2308217f05"], 0xffdd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) linkat(r5, &(0x7f0000001180)='./file1\x00', r5, &(0x7f00000002c0)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 1.647147625s ago: executing program 1 (id=928): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) r3 = syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000280)={0x0, 0x1, 0x10000}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2900, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f7, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8001, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x1b}, {[@noop]}}}}}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r7 = dup(r6) getpeername$packet(r7, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000000)) r8 = socket(0xa, 0x2, 0x0) close(r8) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x24, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x88) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) 1.549977312s ago: executing program 1 (id=929): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x0, 0x104) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019480)={0x8, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1880000016000000000000000400006614542b56", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000fcffffff070eb38e090f000018210000", @ANYRES32=r2, @ANYBLOB="000000007f000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000200), 0x10) (async) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f00000193c0)={0x0, 0x0, 0x0, &(0x7f0000019800), 0x0, 0x0, &(0x7f0000019540), 0xa, 0x0, &(0x7f0000019a00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000240)=[{}]}) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r5, &(0x7f0000002640)={0x2020}, 0x2020) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, 0x0) (async) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r7 = dup3(r4, r6, 0x0) (async) syz_io_uring_setup(0x110, &(0x7f0000000140), 0x0, 0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) madvise(&(0x7f0000d38000/0x3000)=nil, 0x3000, 0xe) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000002080108000000000000000002000001090056674d06db173bc30100"], 0x20}}, 0x48001) (async) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) (async) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000019380), 0x107000, 0x0) 1.099967052s ago: executing program 1 (id=930): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40082) write$sndseq(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_io_uring_setup(0x2ddf, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5c6, &(0x7f00000005c0), &(0x7f0000000300)=0x0, &(0x7f0000000500)) r6 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0xa3d, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x381b, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f00000000c0)={0x80, 0x8}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045505, &(0x7f00000000c0)={0x1}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e22, 0x50e8, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x9}}, 0x0, 0x0, 0x47, 0x0, "5daec8116ee99422044282dbca52a18c99431a9a669372a995a5e9cca7d05c0870dbe1aa97990a8813ed80c8f9b4f7420c8153a201cf4f97a19dad731364307c04ade16464df9b1f4be5f4991ab90686"}, 0xd8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000200)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000140)="03000300000000000000ab5d71acedd7c956946ecd0f37cf8ba788a8a24d", 0x1e, 0x0, &(0x7f0000000000)={0x11, 0x8100, r13, 0x1, 0x0, 0x6, @random="e131b6ac9c26"}, 0x14) vmsplice(r10, &(0x7f0000000680)=[{&(0x7f0000000540)="e92442b10f7d2cd1853616c17523f81c715edf748b4202e3e8187b067e769478c6d3b128e45002700d74c080f13486f2c294edcd91d68905404e3bece90e4a56006d2dc85bf35299f8d6297957fa097108bbb18ab0a7df017a59b537dcc39560cc1ecb60f578939de1e8", 0x6a}, {&(0x7f00000005c0)="6b9dc5bbac129bc8616cee5cedcd597e5f4b175371807e621744aecb9c52ae69428b84d2e4a6abaf22bf83d1ae2b108388fd0a9644b7adcf3bfb01cf4810f281f1708f33a896f2d634415df58ff016b14bed72be87355c", 0x57}, {&(0x7f0000000640)="3201a870afabfc7d8117a5c9a5e439bd736f1c49981565046ee12e6eef89c29b5e064da31fe264849e682e43958e300b2779cd2659b02e0df4f3ba864776", 0x3e}], 0x3, 0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x2e8, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x138, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe8a1b56e8fc9d582}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x68, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x10}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x130, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf3eb6ed48d6679cc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x8000}, 0x840) 1.030078994s ago: executing program 1 (id=931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect$uac1(0x0, 0xda, &(0x7f00000008c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x28, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0x1, 0xc0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x8}, [@mixer_unit={0x5, 0x24, 0x4, 0x2, 0x71}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x5, 0x4, '%@\r'}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x6, "2096"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0x5, 0x3, "135500000000000000"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0x84, 0x5, {0x7, 0x25, 0x1, 0x1, 0x3, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0x2, 0x4, "d7588fcb"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xb, 0x4, 0xf, 0x9, ']B'}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x40, 0xfffc, 0x7, "6c5cf341799a"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0xc, 0xb7}, @as_header={0x7, 0x24, 0x1, 0xf5, 0x3, 0x3}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xfeff, 0x200, 0x6, "98d9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x10, 0x2, {0x7, 0x25, 0x1, 0x3, 0x7, 0xffad}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x0, 0x4e, 0xf8, 0xff, 0x8e}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x1, [{0x1f, &(0x7f0000000240)=@string={0x1f, 0x3, "2a242afd9d0d9e272489029271b7a2a41d361de4f31305f930cf697d06"}}]}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000190001000000000000000000027311fafc9dcb47e7000000"], 0x1c}}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000400)={0xc, &(0x7f00000002c0)={0x40, 0xc, 0xd, {0xd, 0xc, "0f932cdedaa079eaad757a"}}, &(0x7f0000000300)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "d715e3ce10e46ea12debbf67f05101916152bf26835ca11c196b4b0092eccf42fe532f1e4d057c7b2011066fcef5839e0aa6bb428efc8812e8c624c5741da5ad5bae1706899610fdd144bad378790b75f97d2ba3bafb034a803b38e958d46cb65cb214c34ddc93ab748a01ab459b02522ee7bf6ff1e629cd5f4b78d939f484354ec40ad7366b13e3031e2c6355feb19c101d3012d4861518ee0f71a580ba5216a14794ac4f78db042cd23a3752458a33a18ade30332c23c7e39ffa5d2a5e7582d7bc7ce028fd400828fde3e24379424a9d4c004d5974a38d490fe5fe47c89245c2"}}}, &(0x7f0000000680)={0x24, &(0x7f0000000440)={0x40, 0x6, 0xffffffffffffffa2, "1f6df45643883569b4310bbe7328e23cf2fea2b85d49c7dc7743a57f3740fda6243086f9ff353176774a1f74afa8dad4d76d0dde1d30631d290729f1cce85eff9a8ebe06f7062271f8e64dbc9dbe6192aa9ddb199b95ba17d8c35b75f8a1cb3dd5bc80e3d6802f49f0383d100a70b165955b11e8"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x81, 0x1, "b0"}, &(0x7f0000000880)={0x20, 0x82, 0x1, 'DOv'}, &(0x7f00000005c0)={0x20, 0x83, 0x2, 'A)'}, &(0x7f0000000600)={0x20, 0x84, 0x2, "5ebe"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "e959bd"}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000440)=0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) openat$vhost_vsock(0xffffff9c, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$UHID_CREATE2(r5, &(0x7f00000006c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x30, 0x9, 0x5, 0x5, 0x7, 0x832, "dcb493c94d94af4c391f9f7275d8f00c40cba99f9042e97ee375766813c14b1d235cd56c67ed5c2ecbed7902b668b82b"}}, 0x148) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004662b, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r8, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r8, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0189436, 0x0) (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0189436, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 950.531447ms ago: executing program 3 (id=932): r0 = syz_open_dev$media(&(0x7f0000000040), 0x8, 0x169000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)}) 936.921833ms ago: executing program 3 (id=933): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) fcntl$setlease(r0, 0x400, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) syz_open_dev$dri(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xb989) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000400000000500000000190000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r3, 0x0, 0xa0028000}, 0x38) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) accept4(r2, 0x0, &(0x7f00000000c0), 0x40000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc0800054700000800"], 0x78}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r7) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x35, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000bc0)={'wpan1\x00'}) 558.882654ms ago: executing program 2 (id=934): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x40010001, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x4, 0x0) syz_open_dev$MSR(&(0x7f00000003c0), 0x10010001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x8, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r3], &(0x7f0000000000)='syzkaller\x00', 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000300)={'netpci0\x00', {0x2, 0x0, @multicast2}}) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131001140aed365839986fbbd4b57"], 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000100)=""/210, 0xd2}, {&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000280)=""/118, 0x76}], 0x4}}], 0x1, 0x0, 0x0) mmap(&(0x7f00004f2000/0x3000)=nil, 0x3000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r7, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xf, 0x0, 0x0, r6, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) r8 = socket$inet6(0xa, 0x3, 0x2) getsockname(r8, &(0x7f0000000d00)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000c80)=0x80) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010008105", @ANYRES32=r9, @ANYBLOB="0000000000000000280012800a0001006361"], 0x48}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 480.220748ms ago: executing program 2 (id=935): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000007, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x9, 0x2b3ae0e1}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x3, &(0x7f0000000280)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(r2, 0xfffffffffffffe3f, &(0x7f0000000200)=0x40000400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x20040010) mkdir(&(0x7f0000000100)='.\x00', 0x40) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="200100001900010400000000000000007f000001000000000000000000000000ac1e0001000000000000000000000000000000000000000002001020000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000001000000000009c58ebe000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00020000005400080050000800003f48000469279fdfb4d61f875a85a4281346abb932025eb6acbd59dedeaef97f5bc7dfc96de5315ade683ad0653ae56641ab2e4ef656cec35705181727e04a49ade0c320770e55f35f821b0c00150000000000ff"], 0x120}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000006180)}, 0x7}], 0x1, 0x20, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE) io_uring_enter(0xffffffffffffffff, 0x11ae, 0x4000, 0x1000000, 0x0, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r6, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r7, 0x5100) 108.375139ms ago: executing program 0 (id=936): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioperm(0x0, 0x9, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x400, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @adiantum, 0x0, @desc1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f0000000500300000000000080039000300000008000300", @ANYRES32=r4], 0x2c}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x11, 0xa, 0x0) r5 = openat$autofs(0xffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="2e0000001000818804c52808a95c0966dfa1f8482e0000005e0c0000210000180e000a0014000000", 0x28}, {&(0x7f0000000440)="f1ed831427f6", 0x6}], 0x2}, 0x0) 530.481µs ago: executing program 0 (id=937): r0 = socket$kcm(0x10, 0x400000002, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x541b, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="d0600b401f39b97bf93ecf49759e94b4519a0de2f87e5c417273a5dce55efb335b22dce602ca972f116438489fdab766171401f130eb1c9e78ec70db15755f97ca197fc3da0b85ea0d2f7bdffcc1caa5810430b5448f4ae272489f5c7ac1e4660c4f7b0446d5457181924a3d4dbfdfee93a14379adfe7c1effdacb69a945", 0x7e}], 0x1, 0xa, 0x6e6f2b53, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000240), 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x264e33, 0xff88) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)}, 0x0) 0s ago: executing program 3 (id=938): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_LK(r3, &(0x7f00000002c0)={0x28, 0x0, 0x0, {{0x0, 0x400000, 0x0, 0xffffffffffffffff}}}, 0x28) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141) r8 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x30800, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000005280)=ANY=[@ANYBLOB="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"], 0x4db0}, 0x1, 0x0, 0x0, 0x8014}, 0x4000000) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x4040800}, 0x10) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000001c0)='mqueue\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000000}, 0x800) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fbdbdf251100000008001500c0000000080001"], 0x2c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:37997' (ED25519) to the list of known hosts. [ 34.765136][ T5271] cgroup: Unknown subsys name 'net' [ 34.899407][ T5271] cgroup: Unknown subsys name 'cpuset' [ 34.903074][ T5271] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 36.078271][ T5271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.024246][ T5352] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 39.029100][ T5352] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 39.030179][ T5351] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.034713][ T5352] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 39.035382][ T5351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.041177][ T5351] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.041613][ T5352] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 39.047881][ T5352] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.049877][ T5360] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 39.051345][ T5352] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 39.054149][ T5360] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 39.057050][ T5352] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 39.058479][ T5360] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 39.058506][ T5357] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 39.059251][ T5357] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 39.060214][ T5357] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.060356][ T5352] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 39.063640][ T5352] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 39.067001][ T5357] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 39.069617][ T5360] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.072145][ T5352] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 39.082864][ T5352] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 39.086196][ T5352] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 39.089756][ T5351] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 39.358439][ T5347] chnl_net:caif_netlink_parms(): no params data found [ 39.406272][ T5348] chnl_net:caif_netlink_parms(): no params data found [ 39.472231][ T5356] chnl_net:caif_netlink_parms(): no params data found [ 39.490225][ T5361] chnl_net:caif_netlink_parms(): no params data found [ 39.610737][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.613264][ T5347] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.616131][ T5347] bridge_slave_0: entered allmulticast mode [ 39.620886][ T5347] bridge_slave_0: entered promiscuous mode [ 39.625681][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.628401][ T5347] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.631012][ T5347] bridge_slave_1: entered allmulticast mode [ 39.633961][ T5347] bridge_slave_1: entered promiscuous mode [ 39.659684][ T5348] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.662162][ T5348] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.664649][ T5348] bridge_slave_0: entered allmulticast mode [ 39.669438][ T5348] bridge_slave_0: entered promiscuous mode [ 39.672984][ T5348] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.675504][ T5348] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.678341][ T5348] bridge_slave_1: entered allmulticast mode [ 39.681212][ T5348] bridge_slave_1: entered promiscuous mode [ 39.764851][ T5347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.772377][ T5347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.791733][ T5348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.797183][ T5348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.887430][ T5347] team0: Port device team_slave_0 added [ 39.902891][ T5361] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.904901][ T5361] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.907058][ T5361] bridge_slave_0: entered allmulticast mode [ 39.909324][ T5361] bridge_slave_0: entered promiscuous mode [ 39.911523][ T5356] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.914138][ T5356] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.916993][ T5356] bridge_slave_0: entered allmulticast mode [ 39.919501][ T5356] bridge_slave_0: entered promiscuous mode [ 39.922930][ T5347] team0: Port device team_slave_1 added [ 39.925942][ T5348] team0: Port device team_slave_0 added [ 39.928156][ T5361] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.930096][ T5361] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.931936][ T5361] bridge_slave_1: entered allmulticast mode [ 39.933927][ T5361] bridge_slave_1: entered promiscuous mode [ 39.943472][ T5356] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.945341][ T5356] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.947269][ T5356] bridge_slave_1: entered allmulticast mode [ 39.949240][ T5356] bridge_slave_1: entered promiscuous mode [ 39.977428][ T5348] team0: Port device team_slave_1 added [ 39.991778][ T5361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.004221][ T5356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.007448][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.009292][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.016099][ T5347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.032878][ T5361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.037058][ T5356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.056654][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.058612][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.068810][ T5347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.118131][ T5356] team0: Port device team_slave_0 added [ 40.124117][ T5356] team0: Port device team_slave_1 added [ 40.126788][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.129187][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.138998][ T5348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.145772][ T5361] team0: Port device team_slave_0 added [ 40.152758][ T5361] team0: Port device team_slave_1 added [ 40.195528][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.198204][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.207967][ T5348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.230539][ T5356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.233081][ T5356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.244215][ T5356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.279738][ T5347] hsr_slave_0: entered promiscuous mode [ 40.282504][ T5347] hsr_slave_1: entered promiscuous mode [ 40.285459][ T5361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.288005][ T5361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.295424][ T5361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.298837][ T5356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.300924][ T5356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.308902][ T5356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.338795][ T5361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.340632][ T5361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.347332][ T5361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.356949][ T5348] hsr_slave_0: entered promiscuous mode [ 40.358914][ T5348] hsr_slave_1: entered promiscuous mode [ 40.360711][ T5348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.362783][ T5348] Cannot create hsr debugfs directory [ 40.422640][ T5361] hsr_slave_0: entered promiscuous mode [ 40.424918][ T5361] hsr_slave_1: entered promiscuous mode [ 40.427868][ T5361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.429887][ T5361] Cannot create hsr debugfs directory [ 40.478363][ T5356] hsr_slave_0: entered promiscuous mode [ 40.481179][ T5356] hsr_slave_1: entered promiscuous mode [ 40.483759][ T5356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.486342][ T5356] Cannot create hsr debugfs directory [ 40.702829][ T5348] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.709975][ T5348] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.718177][ T5348] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.723491][ T5348] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.749638][ T5347] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.754331][ T5347] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.757971][ T5347] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.761827][ T5347] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.787203][ T5356] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.791211][ T5356] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.805077][ T5356] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.809913][ T5356] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.835068][ T5361] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.849443][ T5361] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.861913][ T5361] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.867049][ T5361] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.916053][ T5348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.958746][ T5348] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.981739][ T5347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.990857][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.993599][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.003944][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.005903][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.012590][ T5356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.021488][ T5347] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.028233][ T5361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.032901][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.035357][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.039817][ T5356] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.055799][ T5348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.062267][ T5348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.070103][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.072715][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.090744][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.093347][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.101110][ T5361] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.121563][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.124228][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.132372][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.135014][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.136736][ T5351] Bluetooth: hci3: command tx timeout [ 41.138259][ T5352] Bluetooth: hci2: command tx timeout [ 41.139893][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.140242][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.140310][ T5351] Bluetooth: hci0: command tx timeout [ 41.140451][ T5351] Bluetooth: hci1: command tx timeout [ 41.216315][ T5348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.239657][ T5348] veth0_vlan: entered promiscuous mode [ 41.243625][ T5348] veth1_vlan: entered promiscuous mode [ 41.258989][ T5348] veth0_macvtap: entered promiscuous mode [ 41.263358][ T5348] veth1_macvtap: entered promiscuous mode [ 41.271022][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.279448][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.282818][ T5348] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.285174][ T5348] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.289277][ T5348] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.291853][ T5348] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.319395][ T5347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.339047][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.341771][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.354113][ T5347] veth0_vlan: entered promiscuous mode [ 41.360700][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.362754][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.364595][ T5356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.376375][ T5347] veth1_vlan: entered promiscuous mode [ 41.384796][ T5361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.393796][ T5348] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.395286][ T5356] veth0_vlan: entered promiscuous mode [ 41.408218][ T5356] veth1_vlan: entered promiscuous mode [ 41.426101][ T5356] veth0_macvtap: entered promiscuous mode [ 41.437343][ T5361] veth0_vlan: entered promiscuous mode [ 41.440435][ T5356] veth1_macvtap: entered promiscuous mode [ 41.444904][ T5347] veth0_macvtap: entered promiscuous mode [ 41.454744][ T5411] binder: 5410:5411 ioctl c018aa3f 20000240 returned -22 [ 41.460628][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.462981][ T5411] binder_alloc: 5410: binder_alloc_buf, no vma [ 41.463466][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.468988][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.472492][ T5361] veth1_vlan: entered promiscuous mode [ 41.477356][ T5347] veth1_macvtap: entered promiscuous mode [ 41.481104][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.484731][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.489514][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.493050][ T5356] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.495188][ T5356] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.498407][ T5356] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.500856][ T5356] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.533747][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.537076][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.539583][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.542257][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.545455][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.550021][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.552950][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.555951][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.559188][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.563768][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.576211][ T5361] veth0_macvtap: entered promiscuous mode [ 41.583956][ T5347] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.587577][ T5347] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.589883][ T5347] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.592241][ T5347] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.608925][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.611035][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.613953][ T5361] veth1_macvtap: entered promiscuous mode [ 41.632785][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.636445][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.639760][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.642464][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.645011][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.648189][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.651809][ T5361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.665785][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.665879][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.674572][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.678481][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.682020][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.685752][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.690533][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.693283][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.697240][ T5361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.703544][ T5361] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.705860][ T5361] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.708281][ T5361] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.710622][ T5361] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.713774][ T5418] team0: invalid flags given to default FDB implementation [ 41.730445][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.733122][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.760434][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.762966][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.779304][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.781373][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.794644][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.799355][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.855731][ T5426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 41.897395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.943143][ T5435] loop0: detected capacity change from 0 to 16384 [ 41.999549][ T5438] sch_fq: defrate 113 ignored. [ 42.019486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.025156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.028503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.031807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.034003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.037320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.039528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.042848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.061720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.188717][ T39] audit: type=1326 audit(1727726929.695:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.3.14" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x0 [ 42.254656][ T5461] openvswitch: netlink: Flow key attribute not present in set flow. [ 42.284047][ T5456] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.458118][ T5469] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17'. [ 42.506131][ T5471] netlink: 96 bytes leftover after parsing attributes in process `syz.0.18'. [ 43.207187][ T5352] Bluetooth: hci2: command tx timeout [ 43.217094][ T5352] Bluetooth: hci1: command tx timeout [ 43.217166][ T5354] Bluetooth: hci0: command tx timeout [ 43.219105][ T5352] Bluetooth: hci3: command tx timeout [ 43.720704][ T5490] 9pnet_fd: Insufficient options for proto=fd [ 44.225652][ T5497] ip6gretap0: entered promiscuous mode [ 44.230097][ T5497] batadv_slave_0: entered promiscuous mode [ 45.286681][ T5352] Bluetooth: hci3: command tx timeout [ 45.286732][ T5351] Bluetooth: hci0: command tx timeout [ 45.288650][ T5352] Bluetooth: hci2: command tx timeout [ 45.290656][ T5351] Bluetooth: hci1: command tx timeout [ 46.120151][ T5522] mmap: syz.1.31 (5522) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.234670][ T5528] netlink: 36 bytes leftover after parsing attributes in process `syz.3.32'. [ 46.416729][ T5529] nbd1: detected capacity change from 0 to 22 [ 46.433626][ T5532] block nbd1: shutting down sockets [ 46.478179][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.481524][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 46.484907][ T1124] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.489645][ T1124] Buffer I/O error on dev nbd1, logical block 0, async page read [ 46.493351][ T5359] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.498033][ T5359] Buffer I/O error on dev nbd1, logical block 0, async page read [ 46.509077][ T5359] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.512382][ T5359] Buffer I/O error on dev nbd1, logical block 0, async page read [ 46.519362][ T5359] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.526075][ T5359] Buffer I/O error on dev nbd1, logical block 0, async page read [ 46.533733][ T5359] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.539240][ T5359] Buffer I/O error on dev nbd1, logical block 0, async page read [ 46.547964][ T5359] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.554968][ T5359] Buffer I/O error on dev nbd1, logical block 0, async page read [ 46.561588][ T5359] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.569676][ T5359] Buffer I/O error on dev nbd1, logical block 0, async page read [ 46.576226][ T5359] ldm_validate_partition_table(): Disk read failed. [ 46.585980][ T5359] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.588747][ T5359] Buffer I/O error on dev nbd1, logical block 0, async page read [ 46.591671][ T5359] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.594129][ T5359] Buffer I/O error on dev nbd1, logical block 0, async page read [ 46.596534][ T5359] Dev nbd1: unable to read RDB block 0 [ 46.598460][ T5359] nbd1: unable to read partition table [ 46.600082][ T5359] nbd1: partition table beyond EOD, truncated [ 46.606925][ T5359] ldm_validate_partition_table(): Disk read failed. [ 46.609796][ T5359] Dev nbd1: unable to read RDB block 0 [ 46.611798][ T5359] nbd1: unable to read partition table [ 46.613513][ T5359] nbd1: partition table beyond EOD, truncated [ 47.366751][ T5354] Bluetooth: hci2: command tx timeout [ 47.368162][ T5354] Bluetooth: hci0: command tx timeout [ 47.369561][ T5354] Bluetooth: hci1: command tx timeout [ 47.370962][ T5354] Bluetooth: hci3: command tx timeout [ 47.555259][ T39] audit: type=1326 audit(1727726935.055:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5542 comm="syz.2.37" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x0 [ 48.072410][ T5555] tmpfs: Bad value for 'mpol' [ 48.097204][ T5555] syz.0.40 uses obsolete (PF_INET,SOCK_PACKET) [ 48.104597][ T5555] trusted_key: syz.0.40 sent an empty control message without MSG_MORE. [ 48.365196][ T5570] netlink: 'syz.0.45': attribute type 10 has an invalid length. [ 48.491457][ T5578] misc userio: Can't change port type on an already running userio instance [ 48.797776][ T5588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.50'. [ 48.801023][ T5588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.50'. [ 48.875757][ T5351] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 48.877206][ T5597] syzkaller1: entered promiscuous mode [ 48.879256][ T5597] syzkaller1: entered allmulticast mode [ 48.928061][ T5604] Zero length message leads to an empty skb [ 49.100714][ T5617] fuse: Bad value for 'fd' [ 49.100753][ T5619] fuse: Bad value for 'fd' [ 49.257456][ T5620] delete_channel: no stack [ 49.364401][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.544627][ T5639] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.625662][ T5643] netlink: 'syz.1.69': attribute type 27 has an invalid length. [ 49.724460][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.726964][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.859345][ T5643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.877386][ T5643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.989500][ T5643] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.993014][ T5643] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.996195][ T5643] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.002481][ T5643] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.064562][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.067038][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.070472][ T5647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.274914][ T5667] netlink: 'syz.2.78': attribute type 8 has an invalid length. [ 50.317924][ T5667] ufs: You didn't specify the type of your ufs filesystem [ 50.317924][ T5667] [ 50.317924][ T5667] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 50.317924][ T5667] [ 50.317924][ T5667] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 50.329814][ T5667] ufs: ufstype=old is supported read-only [ 50.332925][ T5667] ufs: ufs_fill_super(): bad magic number [ 50.764103][ T5682] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 50.765901][ T5682] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 50.772994][ T5682] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 50.774837][ T5682] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.780482][ T5682] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.785646][ T5682] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 50.787462][ T5682] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.790689][ T5682] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.794099][ T5682] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 50.795742][ T5682] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 50.804786][ T5682] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 51.306582][ T56] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.462751][ T56] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 51.466628][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.468692][ T56] usb 5-1: Product: syz [ 51.469777][ T56] usb 5-1: Manufacturer: syz [ 51.471065][ T56] usb 5-1: SerialNumber: syz [ 51.481710][ T56] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 51.511590][ T35] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 52.577016][ T35] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 52.579273][ T35] ath9k_htc: Failed to initialize the device [ 52.603451][ T35] usb 5-1: ath9k_htc: USB layer deinitialized [ 52.813553][ T35] usb 5-1: USB disconnect, device number 2 [ 52.817226][ T5354] Bluetooth: hci2: command 0x0c1a tx timeout [ 52.817275][ T5352] Bluetooth: hci1: command 0x0c1a tx timeout [ 52.819375][ T5351] Bluetooth: hci3: command 0x0c1a tx timeout [ 52.821306][ T5357] Bluetooth: hci0: command 0x0c1a tx timeout [ 54.872836][ T5780] ptrace attach of "/syz-executor exec"[5361] was attempted by "/syz-executor exec"[5780] [ 54.886743][ T5357] Bluetooth: hci0: command 0x0c1a tx timeout [ 54.886799][ T5357] Bluetooth: hci1: command 0x0c1a tx timeout [ 54.896557][ T5354] Bluetooth: hci2: command 0x0c1a tx timeout [ 54.896580][ T5354] Bluetooth: hci3: command 0x0c1a tx timeout [ 55.784845][ T5801] netlink: 'syz.0.127': attribute type 27 has an invalid length. [ 55.816869][ T62] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.860866][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.977333][ T62] usb 7-1: Using ep0 maxpacket: 16 [ 55.980282][ T62] usb 7-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 55.987460][ T62] usb 7-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 55.992734][ T62] usb 7-1: config 0 interface 0 has no altsetting 0 [ 56.003313][ T62] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 56.007494][ T62] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.012008][ T62] usb 7-1: Product: syz [ 56.014840][ T62] usb 7-1: Manufacturer: syz [ 56.022601][ T62] usb 7-1: SerialNumber: syz [ 56.029799][ T62] usb 7-1: config 0 descriptor?? [ 56.045021][ T62] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input6 [ 56.084485][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.102475][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.251339][ T39] audit: type=1326 audit(1727726943.755:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.2.123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 56.263303][ T39] audit: type=1326 audit(1727726943.755:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.2.123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 56.277598][ T39] audit: type=1326 audit(1727726943.755:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.2.123" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 56.278981][ T5806] binder: 5805:5806 ioctl c018aa3f 20000240 returned -22 [ 56.284837][ T39] audit: type=1326 audit(1727726943.755:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.2.123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 56.284871][ T39] audit: type=1326 audit(1727726943.755:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.2.123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 56.298215][ T5806] binder_alloc: 5805: binder_alloc_buf, no vma [ 56.302701][ T39] audit: type=1326 audit(1727726943.755:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.2.123" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 56.311373][ T5801] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.311509][ T39] audit: type=1326 audit(1727726943.755:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.2.123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 56.313819][ T5801] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.323748][ T39] audit: type=1326 audit(1727726943.755:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.2.123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 56.324265][ T5801] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.329551][ T39] audit: type=1326 audit(1727726943.755:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.2.123" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 56.332843][ T5801] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.341092][ T39] audit: type=1326 audit(1727726943.755:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.2.123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 56.398563][ T5811] binder: 5810:5811 ioctl c018aa3f 20000240 returned -22 [ 56.400305][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.402625][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.403170][ T5811] binder_alloc: 5810: binder_alloc_buf, no vma [ 56.406397][ T5804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.443201][ T5813] binder: 5812:5813 ioctl c018aa3f 20000240 returned -22 [ 56.448642][ T35] usb 7-1: USB disconnect, device number 2 [ 56.450073][ T5813] binder_alloc: 5812: binder_alloc_buf, no vma [ 56.976557][ T5357] Bluetooth: hci3: command 0x0c1a tx timeout [ 56.978347][ T5357] Bluetooth: hci2: command 0x0c1a tx timeout [ 56.979911][ T5357] Bluetooth: hci1: command 0x0c1a tx timeout [ 57.043521][ T5821] Bluetooth: MGMT ver 1.23 [ 57.856597][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.036893][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 58.040047][ T8] usb 6-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 58.043686][ T8] usb 6-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 58.049593][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.054452][ T8] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 58.057111][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.059141][ T8] usb 6-1: Product: syz [ 58.060240][ T8] usb 6-1: Manufacturer: syz [ 58.061425][ T8] usb 6-1: SerialNumber: syz [ 58.063841][ T8] usb 6-1: config 0 descriptor?? [ 58.068760][ T8] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input7 [ 58.347030][ T8] usb 6-1: USB disconnect, device number 2 [ 59.126642][ T5354] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 59.127163][ T5357] Bluetooth: hci0: command 0x0c1a tx timeout [ 59.666281][ T5899] binder: 5898:5899 ioctl c0306201 0 returned -14 [ 59.669321][ T5900] binder: 5898:5900 ioctl c0306201 0 returned -14 [ 60.137778][ T5917] binder: 5915:5917 ioctl c018aa3f 20000240 returned -22 [ 60.141346][ T5917] binder_alloc: 5915: binder_alloc_buf, no vma [ 60.310352][ T5933] netlink: 'syz.2.173': attribute type 27 has an invalid length. [ 60.351369][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.353469][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.452116][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.458390][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.508470][ T5933] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.510766][ T5933] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.513174][ T5933] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.515520][ T5933] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.599307][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.602973][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.609359][ T5933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.674569][ T5950] binder: 5949:5950 ioctl c018aa3f 20000240 returned -22 [ 60.681297][ T5950] binder_alloc: 5949: binder_alloc_buf, no vma [ 61.175294][ T5967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.183'. [ 61.195750][ T5971] FAULT_INJECTION: forcing a failure. [ 61.195750][ T5971] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 61.199225][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: syz.1.186 Not tainted 6.12.0-rc1-syzkaller #0 [ 61.201555][ T5971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.204408][ T5971] Call Trace: [ 61.205295][ T5971] [ 61.206116][ T5971] dump_stack_lvl+0x16c/0x1f0 [ 61.207377][ T5971] should_fail_ex+0x497/0x5b0 [ 61.208633][ T5971] _copy_from_user+0x30/0xf0 [ 61.209891][ T5971] dev_ifconf+0x28a/0x390 [ 61.211036][ T5971] ? __pfx_dev_ifconf+0x10/0x10 [ 61.212343][ T5971] ? tomoyo_path_number_perm+0x190/0x5b0 [ 61.213827][ T5971] sock_ioctl+0x38d/0x6c0 [ 61.214971][ T5971] ? __pfx_sock_ioctl+0x10/0x10 [ 61.216286][ T5971] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 61.217786][ T5971] compat_sock_ioctl+0x505/0x7e0 [ 61.219104][ T5971] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 61.220821][ T5971] ? __fget_files+0x244/0x3f0 [ 61.222310][ T5971] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 61.224109][ T5971] __do_compat_sys_ioctl+0x259/0x2b0 [ 61.225543][ T5971] __do_fast_syscall_32+0x73/0x120 [ 61.226932][ T5971] do_fast_syscall_32+0x32/0x80 [ 61.228334][ T5971] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.230010][ T5971] RIP: 0023:0xf7f90579 [ 61.231085][ T5971] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 61.236148][ T5971] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 61.238325][ T5971] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008912 [ 61.240361][ T5971] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.242325][ T5971] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.244364][ T5971] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 61.246848][ T5971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.249780][ T5971] [ 61.266450][ T5974] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 61.332363][ T5979] netlink: 'syz.1.188': attribute type 27 has an invalid length. [ 61.403068][ T5979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.405760][ T5979] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.411033][ T5979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.531791][ T39] kauditd_printk_skb: 34 callbacks suppressed [ 61.531802][ T39] audit: type=1804 audit(1727726949.035:48): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.193" name="/newroot/40/bus/cgroup.controllers" dev="overlay" ino=230 res=1 errno=0 [ 61.538402][ T5988] evm: overlay not supported [ 61.539588][ T39] audit: type=1804 audit(1727726949.045:49): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.193" name="/newroot/40/bus/cgroup.controllers" dev="overlay" ino=230 res=1 errno=0 [ 61.547391][ T39] audit: type=1804 audit(1727726949.045:50): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.193" name="/newroot/40/bus/cgroup.controllers" dev="overlay" ino=230 res=1 errno=0 [ 62.015463][ T6010] FAULT_INJECTION: forcing a failure. [ 62.015463][ T6010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.019286][ T6010] CPU: 2 UID: 0 PID: 6010 Comm: syz.0.197 Not tainted 6.12.0-rc1-syzkaller #0 [ 62.022281][ T6010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.025832][ T6010] Call Trace: [ 62.027000][ T6010] [ 62.027773][ T6010] dump_stack_lvl+0x16c/0x1f0 [ 62.029104][ T6010] should_fail_ex+0x497/0x5b0 [ 62.030752][ T6010] _copy_to_user+0x30/0xc0 [ 62.032017][ T6010] simple_read_from_buffer+0xd0/0x160 [ 62.033514][ T6010] proc_fail_nth_read+0x198/0x270 [ 62.035248][ T6010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 62.037142][ T6010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 62.038955][ T6010] vfs_read+0x1ce/0xbd0 [ 62.040359][ T6010] ? __fget_files+0x23a/0x3f0 [ 62.041968][ T6010] ? fdget_pos+0x24c/0x360 [ 62.043459][ T6010] ? __pfx_lock_release+0x10/0x10 [ 62.045172][ T6010] ? trace_lock_acquire+0x14a/0x1d0 [ 62.047031][ T6010] ? __pfx_vfs_read+0x10/0x10 [ 62.048719][ T6010] ? __pfx___mutex_lock+0x10/0x10 [ 62.050543][ T6010] ? __fget_files+0x244/0x3f0 [ 62.052240][ T6010] ksys_read+0x12f/0x260 [ 62.053745][ T6010] ? __pfx_ksys_read+0x10/0x10 [ 62.055177][ T6010] __do_fast_syscall_32+0x73/0x120 [ 62.056506][ T6010] do_fast_syscall_32+0x32/0x80 [ 62.057839][ T6010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.059652][ T6010] RIP: 0023:0xf73ae579 [ 62.060940][ T6010] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 62.065966][ T6010] RSP: 002b:00000000f56965a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 62.068718][ T6010] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5696620 [ 62.071382][ T6010] RDX: 000000000000000f RSI: 00000000f739bff4 RDI: 0000000000000000 [ 62.073772][ T6010] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 62.075943][ T6010] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 62.078229][ T6010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.080504][ T6010] [ 62.638790][ T6041] capability: warning: `syz.2.206' uses deprecated v2 capabilities in a way that may be insecure [ 63.771360][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 63.775664][ T6066] netlink: 'syz.3.216': attribute type 3 has an invalid length. [ 63.778099][ T6066] netlink: 196520 bytes leftover after parsing attributes in process `syz.3.216'. [ 63.997921][ T6068] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 64.000325][ T39] audit: type=1326 audit(1727726951.505:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.3.217" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x0 [ 64.005759][ T6068] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 64.009844][ T6068] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 64.011793][ T6068] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 64.347802][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 64.496650][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 64.510525][ T8] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 64.526042][ T8] usb 6-1: config 0 has no interface number 0 [ 64.528760][ T8] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 64.533592][ T8] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 64.538803][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.547952][ T8] usb 6-1: config 0 descriptor?? [ 64.563646][ T8] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 65.936610][ T5357] Bluetooth: hci0: command 0x0c1a tx timeout [ 66.006577][ T5357] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.086595][ T5354] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.088176][ T5357] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.927459][ T25] usb 6-1: USB disconnect, device number 3 [ 66.934951][ T25] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected [ 68.481781][ T6183] binder: 6182:6183 ioctl c018aa3f 20000240 returned -22 [ 68.488678][ T6183] binder_alloc: 6182: binder_alloc_buf, no vma [ 68.548991][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 68.619607][ T6192] ip6gretap0: entered promiscuous mode [ 68.622243][ T6192] batadv_slave_0: entered promiscuous mode [ 68.624389][ T6192] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 68.626273][ T6192] Cannot create hsr debugfs directory [ 68.696730][ T8] usb 6-1: device descriptor read/64, error -71 [ 68.786239][ T6194] Process accounting resumed [ 68.946585][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 69.086558][ T8] usb 6-1: device descriptor read/64, error -71 [ 69.088362][ T6200] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 69.196696][ T8] usb usb6-port1: attempt power cycle [ 69.466578][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 69.558238][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 69.598033][ T8] usb 6-1: device descriptor read/8, error -71 [ 69.616574][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 69.619186][ T25] usb 7-1: config 0 has no interfaces? [ 69.629437][ T25] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.631837][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.633896][ T25] usb 7-1: Product: syz [ 69.634983][ T25] usb 7-1: Manufacturer: syz [ 69.636220][ T25] usb 7-1: SerialNumber: syz [ 69.648133][ T25] usb 7-1: config 0 descriptor?? [ 70.048605][ T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 70.188923][ T8] usb 6-1: device descriptor read/8, error -71 [ 70.310481][ T8] usb usb6-port1: unable to enumerate USB device [ 70.419347][ T62] usb 7-1: USB disconnect, device number 3 [ 70.742598][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.745115][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.934282][ T6220] netlink: 40 bytes leftover after parsing attributes in process `syz.3.260'. [ 71.031423][ T6225] netlink: 'syz.2.262': attribute type 27 has an invalid length. [ 71.057172][ T6227] fuse: Bad value for 'group_id' [ 71.059055][ T6227] fuse: Bad value for 'group_id' [ 71.098108][ T6225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.104664][ T6225] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.137829][ T6225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.260697][ T6238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.267'. [ 71.311310][ T39] audit: type=1326 audit(1727726958.815:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.269" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 71.319895][ T39] audit: type=1326 audit(1727726958.825:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.269" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 71.328445][ T39] audit: type=1326 audit(1727726958.835:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.269" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 71.333956][ T39] audit: type=1326 audit(1727726958.835:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.269" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 71.341944][ T39] audit: type=1326 audit(1727726958.845:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.269" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 71.350066][ T39] audit: type=1326 audit(1727726958.845:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.269" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 71.367520][ T39] audit: type=1326 audit(1727726958.875:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.269" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 71.373812][ T39] audit: type=1326 audit(1727726958.875:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.269" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 71.381624][ T39] audit: type=1326 audit(1727726958.875:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.269" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 71.387830][ T39] audit: type=1326 audit(1727726958.875:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.0.269" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 71.427918][ T6243] netlink: 40 bytes leftover after parsing attributes in process `syz.3.268'. [ 71.670590][ T6261] xt_TPROXY: Can be used only with -p tcp or -p udp [ 71.890075][ T6271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.277'. [ 71.947229][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 71.970667][ T6273] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.278' sets config #261 [ 72.189695][ T5357] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 72.204848][ T6282] block device autoloading is deprecated and will be removed. [ 72.276660][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 72.280471][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'. [ 72.584434][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.290'. [ 72.846593][ T5393] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 73.016715][ T5393] usb 6-1: Using ep0 maxpacket: 16 [ 73.020340][ T5393] usb 6-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 73.024810][ T5393] usb 6-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 73.029670][ T5393] usb 6-1: config 0 interface 0 has no altsetting 0 [ 73.033398][ T5393] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 73.037532][ T5393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.040495][ T5393] usb 6-1: Product: syz [ 73.042036][ T5393] usb 6-1: Manufacturer: syz [ 73.043756][ T5393] usb 6-1: SerialNumber: syz [ 73.051519][ T5393] usb 6-1: config 0 descriptor?? [ 73.057150][ T5393] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input8 [ 73.323888][ T828] usb 6-1: USB disconnect, device number 8 [ 73.644427][ T6321] Cannot find set identified by id 0 to match [ 74.981895][ T6350] 9pnet_fd: Insufficient options for proto=fd [ 75.064669][ T6357] Cannot find set identified by id 0 to match [ 75.246686][ T6363] netlink: 56 bytes leftover after parsing attributes in process `syz.1.308'. [ 75.767774][ T6385] Cannot find set identified by id 0 to match [ 75.781738][ T1283] cfg80211: failed to load regulatory.db [ 75.808704][ T6389] binder: 6388:6389 ioctl c018aa3f 20000240 returned -22 [ 75.813112][ T6389] binder_alloc: 6388: binder_alloc_buf, no vma [ 76.599356][ T6399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.321'. [ 76.611817][ T6380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.797622][ T6401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.322'. [ 77.026991][ T6407] Cannot find set identified by id 0 to match [ 77.065494][ T6409] netlink: 'syz.3.327': attribute type 27 has an invalid length. [ 77.115010][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.117077][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.198873][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.208841][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.266898][ T6409] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.272820][ T6409] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.275118][ T6409] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.279039][ T6409] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.336240][ T6420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.339136][ T6420] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.347778][ T6420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.400900][ T6443] Cannot find set identified by id 0 to match [ 77.478415][ T6449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.338'. [ 77.961141][ T6473] netlink: 'syz.1.345': attribute type 27 has an invalid length. [ 77.974463][ T6468] afs: Unknown parameter 'p49>D)X'isRA &(' [ 78.021786][ T6473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.024006][ T6473] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.027846][ T6473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.157650][ T5392] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.313807][ T5392] usb 5-1: Using ep0 maxpacket: 32 [ 78.318246][ T5392] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.321814][ T5392] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 78.343056][ T5392] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 78.345874][ T5392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.350098][ T5392] usb 5-1: config 0 descriptor?? [ 78.370107][ T5392] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 78.976306][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.354'. [ 79.030537][ T6508] netlink: 'syz.2.356': attribute type 27 has an invalid length. [ 79.097007][ T6508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.099901][ T6508] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.103486][ T6508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.245232][ T6517] netlink: 'syz.0.344': attribute type 4 has an invalid length. [ 79.340732][ T2003] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 79.516758][ T2003] usb 8-1: Using ep0 maxpacket: 16 [ 79.519913][ T2003] usb 8-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 79.522769][ T2003] usb 8-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 79.526442][ T2003] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.530862][ T2003] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 79.534082][ T2003] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.537039][ T2003] usb 8-1: Product: syz [ 79.538178][ T2003] usb 8-1: Manufacturer: syz [ 79.539485][ T2003] usb 8-1: SerialNumber: syz [ 79.545035][ T2003] usb 8-1: config 0 descriptor?? [ 79.567272][ T2003] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input9 [ 79.837919][ T1283] usb 8-1: USB disconnect, device number 2 [ 80.026952][ T6534] netlink: 'syz.1.366': attribute type 27 has an invalid length. [ 80.085703][ T6534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.088880][ T6534] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.093156][ T6534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.403893][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.370'. [ 80.423567][ T6548] netlink: 'syz.3.370': attribute type 3 has an invalid length. [ 80.871824][ T1283] usb 5-1: USB disconnect, device number 3 [ 80.974324][ T6568] ======================================================= [ 80.974324][ T6568] WARNING: The mand mount option has been deprecated and [ 80.974324][ T6568] and is ignored by this kernel. Remove the mand [ 80.974324][ T6568] option from the mount to silence this warning. [ 80.974324][ T6568] ======================================================= [ 80.988042][ T6568] ntfs3: sr0: Primary boot signature is not NTFS. [ 80.990168][ T6568] ntfs3: sr0: try to read out of volume at offset 0xf800 [ 81.255372][ T6579] binder: 6578:6579 ioctl c018aa3f 20000240 returned -22 [ 81.259402][ T6579] binder_alloc: 6578: binder_alloc_buf, no vma [ 81.401548][ T6586] dccp_close: ABORT with 32 bytes unread [ 81.594623][ T5392] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 81.736936][ T6595] ip6gretap0: entered promiscuous mode [ 81.739044][ T6595] batadv_slave_0: entered promiscuous mode [ 81.741030][ T6595] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 81.747986][ T6595] Cannot create hsr debugfs directory [ 81.751850][ T5392] usb 7-1: Using ep0 maxpacket: 16 [ 81.760591][ T5392] usb 7-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 81.764058][ T5392] usb 7-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 81.767230][ T5392] usb 7-1: config 0 interface 0 has no altsetting 0 [ 81.779936][ T5392] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 81.780490][ T6599] MTD: Couldn't look up 'mountinfo': -2 [ 81.782505][ T5392] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.784640][ T6599] overlayfs: overlapping lowerdir path [ 81.785751][ T5392] usb 7-1: Product: syz [ 81.785761][ T5392] usb 7-1: Manufacturer: syz [ 81.785768][ T5392] usb 7-1: SerialNumber: syz [ 81.786609][ T5392] usb 7-1: config 0 descriptor?? [ 81.796787][ T6601] MTD: Couldn't look up 'mountinfo': -2 [ 81.801078][ T5392] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input10 [ 81.823423][ T6604] netlink: 'syz.3.388': attribute type 27 has an invalid length. [ 81.943620][ T6606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.946931][ T6606] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.952211][ T6606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.043522][ T6610] binder: 6609:6610 ioctl c018aa3f 20000240 returned -22 [ 82.060091][ T5392] usb 7-1: USB disconnect, device number 4 [ 82.642398][ T6625] netlink: 'syz.2.394': attribute type 10 has an invalid length. [ 82.644898][ T6625] batman_adv: batadv0: Adding interface: hsr_slave_0 [ 82.646833][ T6625] batman_adv: batadv0: The MTU of interface hsr_slave_0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 82.651959][ T6625] batman_adv: batadv0: Not using interface hsr_slave_0 (retrying later): interface not active [ 82.668868][ T6627] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.681723][ T6627] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.685056][ T6627] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.687547][ T6627] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.699465][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 82.703817][ T6627] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.706628][ T6627] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.709117][ T6627] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.711604][ T6627] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.887753][ T6637] netlink: 'syz.2.400': attribute type 27 has an invalid length. [ 82.998302][ T6637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.000670][ T6637] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.003768][ T6637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.239433][ T6649] netlink: 'syz.0.402': attribute type 10 has an invalid length. [ 83.257023][ T6649] team0: Port device wlan1 added [ 84.062148][ T6666] usb usb9: usbfs: interface 0 claimed by hub while 'syz.3.410' sets config #0 [ 84.285381][ T6682] netlink: 'syz.3.414': attribute type 27 has an invalid length. [ 84.372927][ T6682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.375862][ T6682] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.378986][ T6682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.604730][ T6696] mkiss: ax0: crc mode is auto. [ 84.725760][ T6698] mkiss: ax0: crc mode is auto. [ 84.904115][ T6662] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 84.906256][ T6662] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 84.907934][ T6662] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 84.913936][ T6662] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.174215][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 85.325827][ T8] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.330261][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 190, changing to 11 [ 85.338387][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 33693, setting to 1024 [ 85.343954][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.360290][ T8] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.364061][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.368021][ T8] usb 6-1: config 0 descriptor?? [ 85.558757][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 85.706718][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 85.713474][ T25] usb 8-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 85.722201][ T25] usb 8-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 85.726727][ T25] usb 8-1: config 0 interface 0 has no altsetting 0 [ 85.737479][ T25] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 85.740501][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.743180][ T25] usb 8-1: Product: syz [ 85.744619][ T25] usb 8-1: Manufacturer: syz [ 85.747163][ T25] usb 8-1: SerialNumber: syz [ 85.756382][ T25] usb 8-1: config 0 descriptor?? [ 85.760981][ T25] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input11 [ 85.789078][ T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.793047][ T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.795474][ T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.798138][ T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.800279][ T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.809153][ T8] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 85.822878][ T8] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 86.028220][ T8] usb 8-1: USB disconnect, device number 3 [ 86.087418][ T828] usb 6-1: USB disconnect, device number 9 [ 86.130619][ T5357] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.641859][ T6722] netlink: 'syz.3.426': attribute type 27 has an invalid length. [ 86.797233][ T6722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.805530][ T6722] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.826024][ T6722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.873788][ T6725] tmpfs: Unknown parameter '00000000000000000000003' [ 86.939882][ T5357] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.939904][ T5354] Bluetooth: hci2: command 0x0c1a tx timeout [ 86.941778][ T5357] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.310203][ T6736] netlink: 'syz.2.431': attribute type 10 has an invalid length. [ 87.412139][ T6737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.429'. [ 87.619819][ T6747] netlink: 'syz.2.436': attribute type 27 has an invalid length. [ 87.672185][ T6747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.674485][ T6747] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.677557][ T6747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.887337][ T2003] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.924442][ T6764] netlink: 'syz.2.440': attribute type 10 has an invalid length. [ 87.964306][ T6766] can: request_module (can-proto-0) failed. [ 88.045269][ T2003] usb 5-1: Using ep0 maxpacket: 16 [ 88.067580][ T2003] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 88.070421][ T2003] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 88.073735][ T2003] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.077374][ T2003] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 88.079765][ T2003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.082526][ T2003] usb 5-1: Product: syz [ 88.084458][ T2003] usb 5-1: Manufacturer: syz [ 88.086061][ T2003] usb 5-1: SerialNumber: syz [ 88.104159][ T2003] usb 5-1: config 0 descriptor?? [ 88.119906][ T2003] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input14 [ 88.376265][ T6774] xt_addrtype: ipv6 does not support BROADCAST matching [ 88.383098][ T6776] xt_addrtype: ipv6 does not support BROADCAST matching [ 88.385982][ T2003] usb 5-1: USB disconnect, device number 4 [ 88.520540][ T6788] netlink: 'syz.2.446': attribute type 27 has an invalid length. [ 88.630623][ T6788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.633780][ T6788] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.640559][ T6788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.740223][ T6808] netlink: 'syz.2.448': attribute type 4 has an invalid length. [ 88.760788][ T6808] netlink: 'syz.2.448': attribute type 4 has an invalid length. [ 89.039543][ T6823] Cannot find set identified by id 0 to match [ 89.699889][ T6850] syz.3.461: attempt to access beyond end of device [ 89.699889][ T6850] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 89.705922][ T6850] syz.3.461: attempt to access beyond end of device [ 89.705922][ T6850] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 89.709680][ T6850] Mount JFS Failure: -5 [ 89.710863][ T6850] jfs_mount failed w/return code = -5 [ 89.799402][ T5357] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 90.368303][ T6887] netlink: 'syz.1.471': attribute type 27 has an invalid length. [ 90.428885][ T6887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.431093][ T6887] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.447960][ T6887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.466391][ T6888] syz.2.472 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 91.335728][ T6913] netlink: 'syz.0.481': attribute type 27 has an invalid length. [ 91.450437][ T6920] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 91.454209][ T62] IPVS: starting estimator thread 0... [ 91.493490][ T6913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.498031][ T6913] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.503497][ T6913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.536978][ T6921] IPVS: using max 34 ests per chain, 81600 per kthread [ 91.666893][ T6924] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 92.038760][ T39] kauditd_printk_skb: 42 callbacks suppressed [ 92.038770][ T39] audit: type=1326 audit(1727726979.888:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.3.487" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x0 [ 92.043035][ T6934] tipc: Started in network mode [ 92.050657][ T6934] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 92.053161][ T6934] tipc: Enabling of bearer rejected, failed to enable media [ 92.168153][ T6937] netlink: 'syz.2.489': attribute type 10 has an invalid length. [ 92.777981][ T6946] netlink: 'syz.3.493': attribute type 27 has an invalid length. [ 92.839944][ T6946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.843031][ T6946] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.848099][ T6946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.274556][ T6956] macvlan0: entered allmulticast mode [ 93.385209][ T6964] netlink: 'syz.1.499': attribute type 10 has an invalid length. [ 93.387592][ T6964] batman_adv: batadv0: Adding interface: hsr_slave_0 [ 93.389509][ T6964] batman_adv: batadv0: The MTU of interface hsr_slave_0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 93.394754][ T6964] batman_adv: batadv0: Not using interface hsr_slave_0 (retrying later): interface not active [ 93.540164][ T6967] syz.0.498(6967): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 93.671117][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'. [ 93.748000][ T6972] netlink: 173 bytes leftover after parsing attributes in process `syz.1.500'. [ 94.864369][ T6993] netlink: 'syz.2.505': attribute type 27 has an invalid length. [ 95.001190][ T6993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.011245][ T6993] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.023236][ T6993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.338373][ T7001] netlink: 'syz.3.508': attribute type 10 has an invalid length. [ 95.341780][ T7001] batman_adv: batadv0: Adding interface: hsr_slave_0 [ 95.345165][ T7001] batman_adv: batadv0: The MTU of interface hsr_slave_0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 95.350499][ T7001] batman_adv: batadv0: Not using interface hsr_slave_0 (retrying later): interface not active [ 95.773807][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 95.812814][ T7024] process 'syz.0.514' launched './file0' with NULL argv: empty string added [ 95.994913][ T7035] netlink: 'syz.0.517': attribute type 10 has an invalid length. [ 95.998530][ T7035] batman_adv: batadv0: Adding interface: hsr_slave_0 [ 96.001925][ T7035] batman_adv: batadv0: The MTU of interface hsr_slave_0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 96.008974][ T7035] batman_adv: batadv0: Not using interface hsr_slave_0 (retrying later): interface not active [ 96.013785][ T7037] netlink: 'syz.2.518': attribute type 27 has an invalid length. [ 96.079760][ T7037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.082879][ T7037] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.087439][ T7037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.264987][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'. [ 96.342839][ T7061] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.528'. [ 96.345385][ T7058] netlink: 'syz.3.526': attribute type 1 has an invalid length. [ 96.348561][ T7058] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.526'. [ 96.357552][ T5357] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 96.394661][ T7065] netlink: 'syz.3.529': attribute type 27 has an invalid length. [ 96.478761][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.481096][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.486025][ T7065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.628328][ T7088] netlink: 'syz.3.537': attribute type 10 has an invalid length. [ 96.678093][ T7092] netlink: 32 bytes leftover after parsing attributes in process `syz.1.532'. [ 96.726815][ T7097] netlink: 'syz.0.540': attribute type 27 has an invalid length. [ 96.784888][ T7097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.788319][ T7097] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.796266][ T7097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.050914][ T828] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 97.247361][ T828] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.257750][ T828] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 97.267964][ T828] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.270630][ T828] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.277262][ T7098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.288997][ T828] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.207949][ T828] usb 8-1: USB disconnect, device number 4 [ 98.453349][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'. [ 98.513360][ T7115] Cannot find set identified by id 0 to match [ 98.525623][ T7117] netlink: 'syz.2.546': attribute type 10 has an invalid length. [ 98.553868][ T7119] netlink: 'syz.2.549': attribute type 27 has an invalid length. [ 98.603739][ T7119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.606882][ T7119] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.611596][ T7119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.814397][ T7129] netlink: 52 bytes leftover after parsing attributes in process `syz.1.552'. [ 99.508290][ T7148] netlink: 'syz.3.558': attribute type 10 has an invalid length. [ 99.531001][ T7150] netlink: 'syz.3.559': attribute type 27 has an invalid length. [ 99.673973][ T7150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.689617][ T7150] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.696952][ T7150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.813943][ T7166] netlink: 19 bytes leftover after parsing attributes in process `syz.3.565'. [ 99.935131][ T7169] netlink: 'syz.1.563': attribute type 10 has an invalid length. [ 99.956701][ T7169] team0: Port device wlan1 added [ 100.584351][ T7175] netlink: 'syz.0.568': attribute type 10 has an invalid length. [ 101.037484][ T7192] netlink: 'syz.2.574': attribute type 27 has an invalid length. [ 101.143314][ T7201] netlink: 'syz.3.577': attribute type 10 has an invalid length. [ 101.193058][ T7192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.199390][ T7192] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.204547][ T7192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.424788][ T5392] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 101.574966][ T5392] usb 8-1: Using ep0 maxpacket: 32 [ 101.578654][ T5392] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.582660][ T5392] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.586607][ T5392] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 101.589842][ T5392] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.604632][ T5392] usb 8-1: config 0 descriptor?? [ 101.960668][ T7222] binder: 7221:7222 ioctl 4018620d 0 returned -22 [ 101.975091][ T7222] binder: 7221:7222 ioctl c018aa3f 20000240 returned -22 [ 101.984344][ T7224] Cannot find set identified by id 0 to match [ 102.114878][ T5392] usbhid 8-1:0.0: can't add hid device: -71 [ 102.117199][ T5392] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 102.123515][ T5392] usb 8-1: USB disconnect, device number 5 [ 102.219648][ T7233] tmpfs: Bad value for 'mpol' [ 102.463162][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'. [ 103.216393][ T7244] netlink: 40 bytes leftover after parsing attributes in process `syz.3.591'. [ 103.343191][ T7267] overlayfs: missing 'lowerdir' [ 103.614195][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.773411][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 103.776737][ T8] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 103.779490][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 103.786161][ T8] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 103.789371][ T8] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 103.792227][ T8] usb 5-1: Product: syz [ 103.793946][ T8] usb 5-1: Manufacturer: syz [ 103.795586][ T8] usb 5-1: SerialNumber: syz [ 103.798775][ T8] usb 5-1: config 0 descriptor?? [ 103.801912][ T8] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 103.806868][ T8] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 104.005749][ T5208] usb 5-1: USB disconnect, device number 5 [ 104.005801][ C2] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 104.010706][ T5208] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 104.210654][ T7283] tipc: Started in network mode [ 104.213008][ T7283] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 104.216507][ T7283] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 104.217721][ T7267] ldusb: No device or device unplugged -19 [ 104.220180][ T7283] tipc: Enabled bearer , priority 10 [ 104.248326][ T7285] syzkaller1: entered promiscuous mode [ 104.250343][ T7285] syzkaller1: entered allmulticast mode [ 104.941262][ T39] audit: type=1326 audit(1727726992.872:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.0.606" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x0 [ 105.332409][ T8] tipc: Node number set to 1 [ 106.967506][ T7325] netlink: 'syz.3.614': attribute type 27 has an invalid length. [ 107.210462][ T7327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.213925][ T7327] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.218605][ T7327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.230137][ T7333] netlink: 'syz.1.616': attribute type 10 has an invalid length. [ 107.287570][ T7338] binder: 7337:7338 ioctl 4018620d 0 returned -22 [ 107.300679][ T7338] binder: 7337:7338 ioctl c018aa3f 20000240 returned -22 [ 107.314899][ T7332] Process accounting resumed [ 108.296979][ T7348] netlink: 40 bytes leftover after parsing attributes in process `syz.2.621'. [ 108.395296][ T7352] binder: 7351:7352 ioctl c018aa3f 20000240 returned -22 [ 108.400024][ T7352] binder_alloc: 7351: binder_alloc_buf, no vma [ 108.436718][ T7356] Cannot find set identified by id 0 to match [ 108.639531][ T7358] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 108.641193][ T7358] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 108.644490][ T39] audit: type=1326 audit(1727726996.585:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.2.625" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x0 [ 108.645569][ T7358] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.653546][ T7368] Cannot find set identified by id 0 to match [ 109.127240][ T7378] binder: 7377:7378 ioctl c018aa3f 20000240 returned -22 [ 109.138483][ T7378] binder_alloc: 7377: binder_alloc_buf, no vma [ 109.252460][ T7383] Cannot find set identified by id 0 to match [ 109.380445][ T7385] sp0: Synchronizing with TNC [ 109.399200][ T7385] sp0: Found TNC [ 109.489875][ T7391] tipc: MTU too low for tipc bearer [ 109.491803][ T7392] tipc: MTU too low for tipc bearer [ 110.373013][ T7410] binder: 7409:7410 ioctl c018aa3f 20000240 returned -22 [ 110.376991][ T7410] binder_alloc: 7409: binder_alloc_buf, no vma [ 110.502836][ T7417] Cannot find set identified by id 0 to match [ 110.570860][ T7425] netlink: 'syz.0.647': attribute type 10 has an invalid length. [ 110.598966][ T5357] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.678767][ T5357] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.678785][ T5351] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.211255][ T7443] program syz.2.652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.273982][ T7443] IPv6: NLM_F_CREATE should be specified when creating new route [ 111.384015][ T7456] netlink: 'syz.2.656': attribute type 10 has an invalid length. [ 111.478347][ T7459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.657'. [ 111.480664][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 111.600539][ T7465] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.666393][ T5392] kernel write not supported for file /amidi2 (pid: 5392 comm: kworker/3:3) [ 111.954387][ T7479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.959489][ T7479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.148328][ T7485] netlink: 'syz.2.665': attribute type 10 has an invalid length. [ 112.216138][ T7489] netlink: 80 bytes leftover after parsing attributes in process `syz.2.667'. [ 112.788296][ T7506] netlink: 3 bytes leftover after parsing attributes in process `syz.3.669'. [ 113.690658][ T7520] batadv_slave_1: entered allmulticast mode [ 113.693155][ T7520] batadv_slave_1: left allmulticast mode [ 114.070142][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 114.169014][ T7541] capability: warning: `syz.1.678' uses 32-bit capabilities (legacy support in use) [ 114.407084][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.680'. [ 114.734296][ T7550] netlink: 'syz.1.681': attribute type 27 has an invalid length. [ 114.809023][ T7550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.811635][ T7550] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.815420][ T7550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.973135][ T39] audit: type=1326 audit(1727727002.932:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.3.683" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 114.986941][ T39] audit: type=1326 audit(1727727002.932:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.3.683" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 114.995747][ T7555] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 115.001443][ T7555] netlink: 48 bytes leftover after parsing attributes in process `syz.3.683'. [ 115.004580][ T39] audit: type=1326 audit(1727727002.942:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.3.683" exe="/syz-executor" sig=0 arch=40000003 syscall=218 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 115.037885][ T39] audit: type=1326 audit(1727727002.942:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.3.683" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 115.043656][ T39] audit: type=1326 audit(1727727002.942:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.3.683" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 115.045645][ T7555] netlink: 48 bytes leftover after parsing attributes in process `syz.3.683'. [ 115.060000][ T39] audit: type=1326 audit(1727727002.942:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.3.683" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 115.065742][ T39] audit: type=1326 audit(1727727002.942:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.3.683" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 115.079081][ T39] audit: type=1326 audit(1727727002.942:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.3.683" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 115.084726][ T39] audit: type=1326 audit(1727727002.942:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.3.683" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 115.090750][ T39] audit: type=1326 audit(1727727002.942:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.3.683" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 115.150199][ T7560] 9pnet_fd: Insufficient options for proto=fd [ 115.484149][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 115.581331][ T7580] netlink: 'syz.3.691': attribute type 27 has an invalid length. [ 115.634400][ T7572] block nbd1: shutting down sockets [ 115.779643][ T7580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.790264][ T7580] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.803565][ T7580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.942357][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 116.345279][ T5357] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.508975][ T7601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.697'. [ 116.513295][ T7601] Cannot find add_set index 1 as target [ 116.901058][ T7619] netlink: 'syz.2.701': attribute type 27 has an invalid length. [ 117.049297][ T7619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.052783][ T7619] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.080332][ T7619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.233986][ T7628] netlink: 'syz.2.705': attribute type 1 has an invalid length. [ 117.239928][ T7628] netlink: 224 bytes leftover after parsing attributes in process `syz.2.705'. [ 117.242080][ T7627] binder_alloc: 7626: binder_alloc_buf size -624 failed, no address space [ 117.245510][ T7627] binder_alloc: allocated: 16 (num: 2 largest: 8), free: 8176 (num: 1 largest: 8176) [ 117.313324][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 117.447169][ T7636] ip6gretap0: entered promiscuous mode [ 117.449903][ T7636] batadv_slave_0: entered promiscuous mode [ 117.452432][ T7636] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 117.456105][ T7636] Cannot create hsr debugfs directory [ 117.463047][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 117.467379][ T25] usb 5-1: config 0 has no interfaces? [ 117.470390][ T25] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 117.473535][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.475577][ T25] usb 5-1: Product: syz [ 117.476597][ T25] usb 5-1: Manufacturer: syz [ 117.477752][ T25] usb 5-1: SerialNumber: syz [ 117.491205][ T25] usb 5-1: config 0 descriptor?? [ 117.550356][ T7638] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 117.681690][ T7643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.689443][ T7643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.725759][ T2003] usb 5-1: USB disconnect, device number 7 [ 118.310525][ T7656] binder: 7655:7656 ioctl c018aa3f 20000240 returned -22 [ 118.318606][ T7656] binder_alloc: 7655: binder_alloc_buf, no vma [ 118.547968][ T7660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.717'. [ 118.726038][ T7665] Cannot find set identified by id 32 to match [ 118.964395][ T7682] binder: 7680:7682 ioctl c018aa3f 20000240 returned -22 [ 118.976273][ T7682] binder_alloc: 7680: binder_alloc_buf, no vma [ 120.019127][ T5208] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 120.069216][ T7702] Cannot find set identified by id 38 to match [ 120.115822][ T7704] netlink: 'syz.1.731': attribute type 27 has an invalid length. [ 120.171273][ T5208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 120.174027][ T5208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 120.176848][ T5208] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.181507][ T5208] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.184002][ T5208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.190246][ T5208] usb 5-1: config 0 descriptor?? [ 120.192623][ T7696] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 120.215382][ T7704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.217839][ T7704] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.225741][ T7704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.605171][ T5208] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 120.611491][ T5208] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 120.626452][ T5208] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 120.729482][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 121.710072][ T11] Bluetooth: Error in BCSP hdr checksum [ 122.324396][ T7742] netlink: 'syz.3.743': attribute type 3 has an invalid length. [ 122.327383][ T7742] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.743'. [ 122.884080][ T7754] netlink: 'syz.0.746': attribute type 10 has an invalid length. [ 122.952216][ T5392] usb 5-1: USB disconnect, device number 8 [ 123.109166][ T7763] binder: 7762:7763 ioctl c018aa3f 20000240 returned -22 [ 123.121001][ T7763] binder_alloc: 7762: binder_alloc_buf, no vma [ 123.207468][ T7767] binder: 7766:7767 ioctl c018aa3f 20000240 returned -22 [ 123.213944][ T7767] binder_alloc: 7766: binder_alloc_buf, no vma [ 123.640369][ T7778] netlink: 'syz.3.755': attribute type 10 has an invalid length. [ 123.774353][ T5357] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 123.775636][ T5351] Bluetooth: hci4: command 0x1003 tx timeout [ 123.836536][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 123.839058][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 123.922424][ T7786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.016089][ T7789] autofs: Bad value for 'fd' [ 124.262038][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.760'. [ 124.267379][ T7791] netlink: 173 bytes leftover after parsing attributes in process `syz.3.760'. [ 124.375484][ T7794] binder: 7793:7794 ioctl c018aa3f 20000240 returned -22 [ 124.386542][ T7794] binder_alloc: 7793: binder_alloc_buf, no vma [ 124.486014][ T39] kauditd_printk_skb: 27 callbacks suppressed [ 124.486095][ T39] audit: type=1326 audit(1727727012.467:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.3.763" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x0 [ 124.596426][ T7800] netlink: 'syz.0.764': attribute type 10 has an invalid length. [ 124.840297][ T7812] macvtap1: entered allmulticast mode [ 124.841780][ T7812] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 124.846906][ T7812] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 125.026428][ T7817] binder: 7816:7817 ioctl c018aa3f 20000240 returned -22 [ 125.031186][ T7817] binder_alloc: 7816: binder_alloc_buf, no vma [ 125.442654][ T7831] netlink: 'syz.3.774': attribute type 10 has an invalid length. [ 125.553211][ T7824] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 125.566436][ T7824] netlink: zone id is out of range [ 125.568214][ T7824] netlink: zone id is out of range [ 125.569650][ T7824] netlink: zone id is out of range [ 125.571042][ T7824] netlink: zone id is out of range [ 125.572783][ T7824] netlink: zone id is out of range [ 125.581050][ T7824] netlink: zone id is out of range [ 125.587475][ T7824] netlink: zone id is out of range [ 125.592116][ T7824] netlink: zone id is out of range [ 125.598270][ T7824] netlink: zone id is out of range [ 126.124777][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.776'. [ 126.191952][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 127.030334][ T5208] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 127.043037][ T7879] FAULT_INJECTION: forcing a failure. [ 127.043037][ T7879] name failslab, interval 1, probability 0, space 0, times 1 [ 127.046854][ T7879] CPU: 0 UID: 0 PID: 7879 Comm: syz.3.788 Not tainted 6.12.0-rc1-syzkaller #0 [ 127.049164][ T7879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.052018][ T7879] Call Trace: [ 127.052916][ T7879] [ 127.053694][ T7879] dump_stack_lvl+0x16c/0x1f0 [ 127.055025][ T7879] should_fail_ex+0x497/0x5b0 [ 127.056287][ T7879] ? fs_reclaim_acquire+0xae/0x160 [ 127.057636][ T7879] should_failslab+0xc2/0x120 [ 127.058868][ T7879] __kmalloc_noprof+0xcb/0x410 [ 127.060160][ T7879] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 127.061637][ T7879] tomoyo_realpath_from_path+0xbf/0x710 [ 127.063096][ T7879] ? tomoyo_path_number_perm+0x232/0x5b0 [ 127.064627][ T7879] tomoyo_path_number_perm+0x245/0x5b0 [ 127.066611][ T7879] ? tomoyo_path_number_perm+0x232/0x5b0 [ 127.068606][ T7879] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 127.070810][ T7879] ? trace_lock_acquire+0x14a/0x1d0 [ 127.072760][ T7879] ? lock_acquire+0x2f/0xb0 [ 127.074441][ T7879] ? __fget_files+0x40/0x3f0 [ 127.076023][ T7879] ? __fget_files+0x244/0x3f0 [ 127.077667][ T7879] security_file_ioctl_compat+0x9b/0x240 [ 127.079699][ T7879] __do_compat_sys_ioctl+0x52/0x2b0 [ 127.081565][ T7879] __do_fast_syscall_32+0x73/0x120 [ 127.083392][ T7879] do_fast_syscall_32+0x32/0x80 [ 127.085159][ T7879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.087486][ T7879] RIP: 0023:0xf7fd7579 [ 127.088985][ T7879] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 127.095889][ T7879] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 127.098823][ T7879] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000400448e7 [ 127.100900][ T7879] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.103003][ T7879] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.105101][ T7879] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 127.107700][ T7879] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.110538][ T7879] [ 127.121250][ T7879] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.209900][ T5208] usb 5-1: Using ep0 maxpacket: 8 [ 127.213407][ T5208] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.216941][ T5208] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.220571][ T5208] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.223934][ T5208] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.228390][ T5208] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.231972][ T5208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.339521][ T2003] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 127.448148][ T5208] usb 5-1: GET_CAPABILITIES returned 0 [ 127.450447][ T5208] usbtmc 5-1:16.0: can't read capabilities [ 127.499551][ T8] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 127.509378][ T2003] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.512621][ T2003] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 127.514859][ T2003] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.539525][ T2003] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.542293][ T2003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.545064][ T2003] usb 6-1: Product: syz [ 127.546586][ T2003] usb 6-1: Manufacturer: syz [ 127.548245][ T2003] usb 6-1: SerialNumber: syz [ 127.557129][ T2003] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 127.558991][ T2003] cdc_ncm 6-1:1.0: bind() failure [ 127.650468][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 127.657208][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 127.667661][ T8] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 127.670901][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 18032, setting to 1024 [ 127.680701][ T8] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 127.684573][ T8] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 127.688502][ T8] usb 8-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.699435][ T8] usb 8-1: New USB device found, idVendor=0403, idProduct=6015, bcdDevice= 0.6d [ 127.703058][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.706126][ T8] usb 8-1: Product: syz [ 127.707872][ T8] usb 8-1: Manufacturer: syz [ 127.712379][ T8] usb 8-1: SerialNumber: syz [ 127.717211][ T8] usb 8-1: config 0 descriptor?? [ 127.721120][ T7881] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 127.726885][ T8] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 127.731749][ T8] usb 8-1: Detected SIO [ 127.735499][ T8] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 127.771004][ T39] audit: type=1326 audit(1727727015.761:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.1.785" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f90579 code=0x0 [ 127.969148][ T5392] usb 8-1: USB disconnect, device number 6 [ 127.987984][ T5392] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 127.995885][ T5392] ftdi_sio 8-1:0.0: device disconnected [ 128.225927][ T5208] usb 5-1: USB disconnect, device number 9 [ 128.239471][ T7888] bond0: entered promiscuous mode [ 128.240797][ T7888] bond_slave_0: entered promiscuous mode [ 128.242570][ T7888] bond_slave_1: entered promiscuous mode [ 128.291521][ T7890] netlink: 'syz.0.793': attribute type 10 has an invalid length. [ 128.505032][ T7906] FAULT_INJECTION: forcing a failure. [ 128.505032][ T7906] name failslab, interval 1, probability 0, space 0, times 0 [ 128.508500][ T7906] CPU: 3 UID: 0 PID: 7906 Comm: syz.0.797 Not tainted 6.12.0-rc1-syzkaller #0 [ 128.510765][ T7906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.513573][ T7906] Call Trace: [ 128.514450][ T7906] [ 128.515224][ T7906] dump_stack_lvl+0x16c/0x1f0 [ 128.516483][ T7906] should_fail_ex+0x497/0x5b0 [ 128.518079][ T7906] ? fs_reclaim_acquire+0xae/0x160 [ 128.519528][ T7906] should_failslab+0xc2/0x120 [ 128.520920][ T7906] __kmalloc_noprof+0xcb/0x410 [ 128.522180][ T7906] ? rcu_is_watching+0x12/0xc0 [ 128.523464][ T7906] tomoyo_encode2+0x100/0x3e0 [ 128.524711][ T7906] tomoyo_realpath_from_path+0x1a7/0x710 [ 128.526192][ T7906] ? tomoyo_path_number_perm+0x232/0x5b0 [ 128.527900][ T7906] tomoyo_path_number_perm+0x245/0x5b0 [ 128.529895][ T7906] ? tomoyo_path_number_perm+0x232/0x5b0 [ 128.531959][ T7906] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 128.533774][ T7906] ? trace_lock_acquire+0x14a/0x1d0 [ 128.535130][ T7906] ? lock_acquire+0x2f/0xb0 [ 128.536341][ T7906] ? __fget_files+0x40/0x3f0 [ 128.537579][ T7906] ? __fget_files+0x244/0x3f0 [ 128.538809][ T7906] security_file_ioctl_compat+0x9b/0x240 [ 128.540278][ T7906] __do_compat_sys_ioctl+0x52/0x2b0 [ 128.541634][ T7906] __do_fast_syscall_32+0x73/0x120 [ 128.542968][ T7906] do_fast_syscall_32+0x32/0x80 [ 128.544248][ T7906] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 128.545891][ T7906] RIP: 0023:0xf73ae579 [ 128.546903][ T7906] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 128.551985][ T7906] RSP: 002b:00000000f569656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 128.554569][ T7906] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000400448e7 [ 128.557103][ T7906] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.559954][ T7906] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 128.562825][ T7906] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 128.565692][ T7906] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 128.568533][ T7906] [ 128.571130][ T7906] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.615279][ T7917] sp0: Synchronizing with TNC [ 128.927737][ T7929] tmpfs: Bad value for 'mpol' [ 129.374970][ T7934] team0: Port device wlan1 removed [ 129.376916][ T7934] batman_adv: batadv0: Adding interface: wlan1 [ 129.380651][ T7934] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 129.385648][ T7934] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 129.612000][ T7962] Cannot find set identified by id 0 to match [ 129.803853][ T7974] sp0: Synchronizing with TNC [ 129.904902][ T8] usb 6-1: USB disconnect, device number 10 [ 130.031583][ T7977] netlink: 'syz.1.818': attribute type 10 has an invalid length. [ 130.146165][ T7979] FAULT_INJECTION: forcing a failure. [ 130.146165][ T7979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.151480][ T7979] CPU: 0 UID: 0 PID: 7979 Comm: syz.1.819 Not tainted 6.12.0-rc1-syzkaller #0 [ 130.153846][ T7979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.156630][ T7979] Call Trace: [ 130.157518][ T7979] [ 130.158305][ T7979] dump_stack_lvl+0x16c/0x1f0 [ 130.159566][ T7979] should_fail_ex+0x497/0x5b0 [ 130.160816][ T7979] _copy_to_user+0x30/0xc0 [ 130.161996][ T7979] simple_read_from_buffer+0xd0/0x160 [ 130.163426][ T7979] proc_fail_nth_read+0x198/0x270 [ 130.164754][ T7979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.166207][ T7979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.167663][ T7979] vfs_read+0x1ce/0xbd0 [ 130.168769][ T7979] ? __fget_files+0x23a/0x3f0 [ 130.170018][ T7979] ? fdget_pos+0x24c/0x360 [ 130.171215][ T7979] ? __pfx_lock_release+0x10/0x10 [ 130.172571][ T7979] ? trace_lock_acquire+0x14a/0x1d0 [ 130.173940][ T7979] ? __pfx_vfs_read+0x10/0x10 [ 130.175187][ T7979] ? __pfx___mutex_lock+0x10/0x10 [ 130.176541][ T7979] ? __fget_files+0x244/0x3f0 [ 130.177792][ T7979] ksys_read+0x12f/0x260 [ 130.178912][ T7979] ? __pfx_ksys_read+0x10/0x10 [ 130.180197][ T7979] __do_fast_syscall_32+0x73/0x120 [ 130.181543][ T7979] do_fast_syscall_32+0x32/0x80 [ 130.182822][ T7979] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.184485][ T7979] RIP: 0023:0xf7f90579 [ 130.185569][ T7979] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 130.190523][ T7979] RSP: 002b:00000000f57165a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 130.192708][ T7979] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5716620 [ 130.194763][ T7979] RDX: 000000000000000f RSI: 00000000f741bff4 RDI: 0000000000000000 [ 130.196830][ T7979] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 130.198918][ T7979] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 130.201415][ T7979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.203483][ T7979] [ 130.204459][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.406860][ T7983] binder: 7982:7983 ioctl c018aa3f 20000240 returned -22 [ 130.423573][ T7983] binder_alloc: 7982: binder_alloc_buf, no vma [ 130.540827][ T7992] 9pnet_fd: Insufficient options for proto=fd [ 130.547457][ T7991] devtmpfs: Unknown parameter 'hege' [ 130.605255][ T7994] Non-string source [ 130.617604][ T39] audit: type=1804 audit(1727727018.603:146): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.826" name="/newroot/215/bus/bus" dev="overlay" ino=1151 res=1 errno=0 [ 130.621601][ T7994] Invalid ELF header len 18 [ 130.941992][ T7999] netlink: 'syz.3.827': attribute type 10 has an invalid length. [ 131.017116][ T8002] netlink: 48 bytes leftover after parsing attributes in process `syz.3.828'. [ 131.356370][ T5208] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 131.525966][ T5208] usb 8-1: Using ep0 maxpacket: 32 [ 131.531508][ T5208] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 131.534510][ T5208] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 131.546201][ T5208] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 131.549102][ T5208] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 131.552606][ T5208] usb 8-1: config 0 interface 0 has no altsetting 0 [ 131.557844][ T5208] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 131.561153][ T5208] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 131.564176][ T5208] usb 8-1: Product: syz [ 131.565529][ T5208] usb 8-1: Manufacturer: syz [ 131.566869][ T5208] usb 8-1: SerialNumber: syz [ 131.569233][ T5208] usb 8-1: config 0 descriptor?? [ 131.574734][ T5208] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 131.579410][ T5208] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 131.687775][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.720229][ T8006] overlay: ./file0 is not a directory [ 131.795724][ T8004] netlink: 'syz.3.829': attribute type 1 has an invalid length. [ 131.854615][ T8004] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 131.862295][ T8004] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 131.887488][ T8004] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 131.900842][ T8004] bond1 (unregistering): Released all slaves [ 131.935079][ T8022] 9pnet_fd: Insufficient options for proto=fd [ 131.946491][ T5392] usb 8-1: USB disconnect, device number 7 [ 131.946633][ C0] ldusb 8-1:0.0: usb_submit_urb failed (-19) [ 131.950127][ T5392] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 132.048595][ T8025] Cannot find set identified by id 1280 to match [ 132.124901][ T8027] netlink: 'syz.0.836': attribute type 10 has an invalid length. [ 132.218389][ T5351] Bluetooth: hci1: unexpected event 0x09 length: 4 > 3 [ 132.679806][ T8036] devpts: called with bogus options [ 132.725198][ T5351] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.003993][ T8049] warning: `syz.3.843' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 133.205437][ T8052] Cannot find set identified by id 1536 to match [ 133.243237][ T8054] netlink: 'syz.2.845': attribute type 10 has an invalid length. [ 133.634794][ T5208] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 133.796205][ T5208] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.805950][ T5208] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.814129][ T5208] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.820894][ T5208] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.826230][ T5208] usb 7-1: config 0 descriptor?? [ 134.064644][ T8086] binder: 8085:8086 ioctl c0306201 0 returned -14 [ 134.232089][ T5208] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 134.236692][ T5208] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 134.646542][ T2003] usb 7-1: USB disconnect, device number 5 [ 134.667166][ T5351] Bluetooth: hci3: unexpected cc 0x1407 length: 100 > 9 [ 134.669788][ T5351] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 135.815096][ T8108] 9pnet_fd: Insufficient options for proto=fd [ 135.890114][ T8114] sp0: Synchronizing with TNC [ 136.032772][ T8125] binder: 8124:8125 ioctl c018aa3f 20000240 returned -22 [ 136.038399][ T8125] binder_alloc: 8124: binder_alloc_buf, no vma [ 136.124243][ T8128] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 136.126670][ T8128] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 136.132307][ T8128] vhci_hcd vhci_hcd.0: Device attached [ 136.352961][ T2003] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 136.363265][ T5208] usb 19-1: new low-speed USB device number 2 using vhci_hcd [ 136.503029][ T2003] usb 5-1: Using ep0 maxpacket: 8 [ 136.512638][ T2003] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.515500][ T2003] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.518185][ T2003] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.521075][ T2003] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.525387][ T2003] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 136.527807][ T2003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.733541][ T2003] usb 5-1: usb_control_msg returned -32 [ 136.735157][ T2003] usbtmc 5-1:16.0: can't read capabilities [ 136.906622][ T8135] vhci_hcd: connection reset by peer [ 136.912086][ T70] vhci_hcd: stop threads [ 136.914514][ T70] vhci_hcd: release socket [ 136.916537][ T70] vhci_hcd: disconnect device [ 136.948029][ T8147] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 137.452035][ T8157] Cannot find set identified by id 4864 to match [ 137.534871][ T8159] binder: 8158:8159 ioctl c018aa3f 20000240 returned -22 [ 137.543411][ T8159] binder_alloc: 8158: binder_alloc_buf, no vma [ 138.602747][ T39] audit: type=1326 audit(1727727026.598:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.3.885" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd7579 code=0x0 [ 138.722896][ T5351] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 138.727207][ T5351] Bluetooth: hci3: Injecting HCI hardware error event [ 138.731868][ T5357] Bluetooth: hci3: hardware error 0x00 [ 138.846639][ T8184] Cannot find set identified by id 8192 to match [ 138.909553][ T8186] overlay: Unknown parameter 'subj_role' [ 139.051883][ T25] usb 5-1: USB disconnect, device number 10 [ 139.581345][ T2003] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 139.751237][ T2003] usb 7-1: Using ep0 maxpacket: 32 [ 139.753856][ T2003] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 139.756228][ T2003] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 139.759239][ T2003] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 139.763193][ T2003] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.766450][ T2003] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 139.768895][ T2003] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 139.772464][ T2003] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 139.774829][ T2003] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.779417][ T2003] usb 7-1: config 0 descriptor?? [ 139.971216][ T62] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 139.987648][ T2003] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 139.995056][ T2003] usb 7-1: USB disconnect, device number 6 [ 140.004433][ T2003] usblp0: removed [ 140.121179][ T62] usb 6-1: Using ep0 maxpacket: 8 [ 140.124898][ T62] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.127505][ T62] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.129998][ T62] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 140.132770][ T62] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.136223][ T62] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.138566][ T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.289666][ T8220] xt_CT: No such helper "netbios-ns" [ 140.291046][ T2003] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 140.469733][ T62] usb 6-1: GET_CAPABILITIES returned 0 [ 140.471500][ T62] usbtmc 6-1:16.0: can't read capabilities [ 140.640948][ T2003] usb 7-1: device descriptor read/64, error -71 [ 140.664210][ T8227] netlink: 'syz.3.900': attribute type 4 has an invalid length. [ 140.695073][ T8] usb 6-1: USB disconnect, device number 11 [ 140.800886][ T5357] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 141.042218][ T2003] usb usb7-port1: Cannot enable. Maybe the USB cable is bad? [ 141.049109][ T2003] usb usb7-port1: attempt power cycle [ 141.400616][ T2003] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 141.513870][ T5208] vhci_hcd: vhci_device speed not set [ 141.522826][ T8238] /dev/sr0: Can't open blockdev [ 141.620583][ T2003] usb 7-1: device not accepting address 9, error -71 [ 142.426245][ T8249] netlink: 'syz.2.907': attribute type 10 has an invalid length. [ 142.623393][ T8256] binder: 8255:8256 ioctl c018aa3f 20000240 returned -22 [ 142.630457][ T8256] binder_alloc: 8255: binder_alloc_buf, no vma [ 143.280035][ T5357] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 143.280547][ T5351] Bluetooth: hci4: command 0x1003 tx timeout [ 143.401097][ T8267] loop7: detected capacity change from 0 to 16384 [ 143.511551][ T8272] Invalid logical block size (1) [ 143.615869][ T8275] overlayfs: missing 'lowerdir' [ 144.444703][ T8284] wireguard0: entered promiscuous mode [ 144.447548][ T8284] wireguard0: entered allmulticast mode [ 145.090619][ T8292] netlink: 'syz.0.919': attribute type 29 has an invalid length. [ 145.196831][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.923'. [ 145.204932][ T8305] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 145.297237][ T8308] netlink: 'syz.3.924': attribute type 10 has an invalid length. [ 145.360043][ T8314] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 145.903130][ T8325] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.930' sets config #1 [ 146.217958][ T8332] netlink: 76 bytes leftover after parsing attributes in process `syz.3.933'. [ 146.218997][ T35] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 146.349090][ T35] usb 6-1: device descriptor read/64, error -71 [ 146.500106][ T8340] netlink: 'syz.2.934': attribute type 15 has an invalid length. [ 146.503433][ T8340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.934'. [ 146.589043][ T35] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 146.613686][ T8343] netlink: 108 bytes leftover after parsing attributes in process `syz.2.935'. [ 146.718850][ T35] usb 6-1: device descriptor read/64, error -71 [ 146.829284][ T35] usb usb6-port1: attempt power cycle [ 146.947863][ T8345] netlink: 'syz.0.936': attribute type 10 has an invalid length. [ 147.137252][ T8347] netfs: Couldn't get user pages (rc=-14) [ 147.175374][ T8346] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xa pfn:0x12f09 [ 147.178013][ T8346] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 147.179248][ T35] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 147.181357][ T8346] raw: 00fff00000000000 ffffea00006aa308 ffffea0000367748 0000000000000000 [ 147.184695][ T8346] raw: 000000000000000a 0000000000000000 00000000ffffffff 0000000000000000 [ 147.188265][ T8346] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 147.194146][ T8346] page_owner tracks the page as freed [ 147.199954][ T35] usb 6-1: device descriptor read/8, error -71 [ 147.202012][ T8346] page last allocated via order 0, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 8347, tgid 8346 (syz.3.938), ts 147150495840, free_ts 147170644752 [ 147.206535][ T8354] sctp: [Deprecated]: syz.0.937 (pid 8354) Use of int in max_burst socket option deprecated. [ 147.206535][ T8354] Use struct sctp_assoc_value instead [ 147.215298][ T8346] post_alloc_hook+0x2d1/0x350 [ 147.216957][ T8346] get_page_from_freelist+0x101e/0x3070 [ 147.218510][ T8346] __alloc_pages_noprof+0x223/0x25c0 [ 147.220174][ T8346] alloc_pages_mpol_noprof+0x2c9/0x610 [ 147.221738][ T8346] folio_alloc_noprof+0x1e/0xc0 [ 147.223194][ T8346] filemap_alloc_folio_noprof+0x3b4/0x480 [ 147.230720][ T8346] page_cache_ra_unbounded+0x2b6/0x6c0 [ 147.232358][ T8346] page_cache_ra_order+0x7d9/0xc90 [ 147.233786][ T8346] filemap_fault+0x148d/0x2820 [ 147.235241][ T8346] __do_fault+0x10a/0x490 [ 147.236535][ T8346] do_pte_missing+0xea8/0x3e50 [ 147.237906][ T8346] __handle_mm_fault+0x100a/0x2a10 [ 147.239433][ T8346] handle_mm_fault+0x3fa/0xaa0 [ 147.240827][ T8346] do_user_addr_fault+0x7a3/0x13f0 [ 147.242419][ T8346] exc_page_fault+0x5c/0xc0 [ 147.243926][ T8346] asm_exc_page_fault+0x26/0x30 [ 147.245453][ T8346] page last free pid 112 tgid 112 stack trace: [ 147.247212][ T8346] free_unref_folios+0x956/0x1310 [ 147.249368][ T8346] shrink_folio_list+0x2bb5/0x42d0 [ 147.251185][ T8346] evict_folios+0x6d6/0x1970 [ 147.252845][ T8346] try_to_shrink_lruvec+0x612/0x9b0 [ 147.254877][ T8346] shrink_one+0x3e3/0x7b0 [ 147.256536][ T8346] shrink_node+0x2452/0x39d0 [ 147.258322][ T8346] balance_pgdat+0xc19/0x18f0 [ 147.260101][ T8346] kswapd+0x5ea/0xbf0 [ 147.261662][ T8346] kthread+0x2c1/0x3a0 [ 147.263332][ T8346] ret_from_fork+0x45/0x80 [ 147.264896][ T8346] ret_from_fork_asm+0x1a/0x30 [ 147.267365][ T8346] ------------[ cut here ]------------ [ 147.269282][ T8346] kernel BUG at include/linux/mm.h:1444! [ 147.271448][ T8346] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 147.273913][ T8346] CPU: 1 UID: 0 PID: 8346 Comm: syz.3.938 Not tainted 6.12.0-rc1-syzkaller #0 [ 147.278114][ T8346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.281530][ T8346] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 147.283792][ T8346] Code: b0 8b 48 89 df e8 90 25 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 e0 76 05 fd 48 c7 c6 60 c6 b0 8b 4c 89 e7 e8 71 25 4b fd 90 <0f> 0b e8 c9 76 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 147.289943][ T8346] RSP: 0018:ffffc9002664efa8 EFLAGS: 00010293 [ 147.291934][ T8346] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 147.294521][ T8346] RDX: ffff88802450c880 RSI: ffffffff8487389f RDI: ffff88802450ccc4 [ 147.297016][ T8346] RBP: ffffea00004bc274 R08: 0000000000000001 R09: fffffbfff2d315c7 [ 147.299528][ T8346] R10: ffffffff9698ae3f R11: ffffffff815f4a4e R12: ffffea00004bc240 [ 147.302014][ T8346] R13: ffff88806979b800 R14: 0000000000001000 R15: 0000000000001000 [ 147.304477][ T8346] FS: 0000000000000000(0000) GS:ffff88802b500000(0063) knlGS:0000000057499440 [ 147.307385][ T8346] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 147.309572][ T8346] CR2: 0000000020023000 CR3: 0000000026342000 CR4: 0000000000352ef0 [ 147.312239][ T8346] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.314852][ T8346] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.317512][ T8346] Call Trace: [ 147.318634][ T8346] [ 147.319646][ T8346] ? die+0x31/0x80 [ 147.320929][ T8346] ? do_trap+0x232/0x430 [ 147.322357][ T8346] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 147.324417][ T8346] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 147.326415][ T8346] ? do_error_trap+0xf4/0x230 [ 147.327919][ T8346] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 147.329940][ T8346] ? handle_invalid_op+0x34/0x40 [ 147.331610][ T8346] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 147.333784][ T8346] ? exc_invalid_op+0x2e/0x50 [ 147.335431][ T8346] ? asm_exc_invalid_op+0x1a/0x20 [ 147.337159][ T8346] ? select_task_rq_fair+0x36e/0x44e0 [ 147.338969][ T8346] ? __iov_iter_get_pages_alloc+0x1d0f/0x2230 [ 147.341047][ T8346] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 147.343142][ T8346] ? __iov_iter_get_pages_alloc+0x1d0f/0x2230 [ 147.345183][ T8346] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 147.347261][ T8346] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.348950][ T8346] ? __schedule+0x3b3f/0x5750 [ 147.350603][ T8346] ? __pfx_mark_lock+0x10/0x10 [ 147.352279][ T8346] iov_iter_get_pages_alloc2+0x53/0xf0 [ 147.354086][ T8346] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 147.356273][ T8346] ? p9pdu_vwritef+0x368/0x21d0 [ 147.357849][ T8346] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 147.360234][ T8346] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 147.361981][ T8346] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 147.363730][ T8346] p9_virtio_zc_request+0x991/0x1460 [ 147.365406][ T8346] ? p9pdu_writef+0xc4/0x100 [ 147.366827][ T8346] ? __pfx_p9pdu_writef+0x10/0x10 [ 147.368466][ T8346] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 147.370161][ T8346] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 147.372106][ T8346] ? rcu_is_watching+0x12/0xc0 [ 147.373668][ T8346] ? trace_9p_protocol_dump+0x192/0x220 [ 147.375497][ T8346] ? rcu_is_watching+0x12/0xc0 [ 147.377140][ T8346] ? p9_client_prepare_req+0x111/0x4d0 [ 147.378939][ T8346] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 147.380903][ T8346] ? mark_lock+0xb5/0xc60 [ 147.382386][ T8346] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 147.384346][ T8346] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 147.386374][ T8346] ? hlock_class+0x4e/0x130 [ 147.387826][ T8346] ? __lock_acquire+0x163e/0x3ce0 [ 147.389507][ T8346] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 147.391364][ T8346] p9_client_read_once+0x443/0x820 [ 147.393078][ T8346] ? __pfx_p9_client_read_once+0x10/0x10 [ 147.394970][ T8346] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 147.396896][ T8346] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.398659][ T8346] p9_client_read+0x13f/0x1b0 [ 147.400075][ T8346] v9fs_issue_read+0x115/0x310 [ 147.401702][ T8346] ? __pfx_v9fs_issue_read+0x10/0x10 [ 147.403504][ T8346] ? __local_bh_enable_ip+0xa4/0x120 [ 147.405299][ T8346] netfs_read_to_pagecache+0x5c9/0x9a0 [ 147.407174][ T8346] netfs_readahead+0x7fa/0xaa0 [ 147.408814][ T8346] ? __pfx_netfs_readahead+0x10/0x10 [ 147.410593][ T8346] read_pages+0x1a8/0xd80 [ 147.412086][ T8346] ? __folio_batch_add_and_move+0x689/0xc60 [ 147.414087][ T8346] ? __folio_batch_add_and_move+0x612/0xc60 [ 147.416105][ T8346] ? __pfx_read_pages+0x10/0x10 [ 147.417759][ T8346] ? maybe_unlock_mmap_for_io.part.0+0x111/0x390 [ 147.419912][ T8346] ? reacquire_held_locks+0x20b/0x4c0 [ 147.421656][ T8346] page_cache_ra_unbounded+0x3c0/0x6c0 [ 147.423462][ T8346] page_cache_ra_order+0x7d9/0xc90 [ 147.425110][ T8346] filemap_fault+0x148d/0x2820 [ 147.426744][ T8346] ? __pfx_filemap_fault+0x10/0x10 [ 147.428483][ T8346] ? lock_acquire+0x2f/0xb0 [ 147.430037][ T8346] ? __pte_offset_map+0x42/0x540 [ 147.431726][ T8346] ? __pfx_filemap_map_pages+0x10/0x10 [ 147.433575][ T8346] __do_fault+0x10a/0x490 [ 147.435039][ T8346] ? __pfx_filemap_map_pages+0x10/0x10 [ 147.436880][ T8346] do_pte_missing+0x1a8/0x3e50 [ 147.438466][ T8346] ? lock_vma_under_rcu+0x13e/0x980 [ 147.440128][ T8346] __handle_mm_fault+0x100a/0x2a10 [ 147.441809][ T8346] ? __pfx_lock_release+0x10/0x10 [ 147.443511][ T8346] ? lock_vma_under_rcu+0x13e/0x980 [ 147.445260][ T8346] ? __pfx___handle_mm_fault+0x10/0x10 [ 147.447114][ T8346] handle_mm_fault+0x3fa/0xaa0 [ 147.448742][ T8346] do_user_addr_fault+0x60d/0x13f0 [ 147.450525][ T8346] exc_page_fault+0x5c/0xc0 [ 147.452083][ T8346] asm_exc_page_fault+0x26/0x30 [ 147.453732][ T8346] RIP: 0023:0xf72a2426 [ 147.455142][ T8346] Code: 03 76 37 f7 c6 03 00 00 00 74 16 a4 49 f7 c6 03 00 00 00 74 0c a4 49 f7 c6 03 00 00 00 74 02 a4 49 50 89 c8 c1 e9 02 83 e0 03 a5 89 c1 f3 a4 58 89 c7 89 d6 8b 44 24 04 c3 d1 e9 73 01 a4 d1 [ 147.458628][ T35] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 147.461541][ T8346] RSP: 002b:00000000ffae1ad8 EFLAGS: 00010246 [ 147.461559][ T8346] RAX: 0000000000000000 RBX: 00000000f745bff4 RCX: 000000000000136c [ 147.461565][ T8346] RDX: 0000000000004db0 RSI: 00000000f6d60340 RDI: 0000000020005280 [ 147.470786][ T8346] RBP: 00000000ffae1d58 R08: 0000000000000000 R09: 0000000000000000 [ 147.473409][ T8346] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 147.476058][ T8346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.478708][ T8346] [ 147.479767][ T8346] Modules linked in: [ 147.479878][ T35] usb 6-1: device descriptor read/8, error -71 [ 147.481291][ T8346] ---[ end trace 0000000000000000 ]--- [ 147.484797][ T8346] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 147.487166][ T8346] Code: b0 8b 48 89 df e8 90 25 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 e0 76 05 fd 48 c7 c6 60 c6 b0 8b 4c 89 e7 e8 71 25 4b fd 90 <0f> 0b e8 c9 76 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 147.493788][ T8346] RSP: 0018:ffffc9002664efa8 EFLAGS: 00010293 [ 147.495438][ T8346] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 147.497963][ T8346] RDX: ffff88802450c880 RSI: ffffffff8487389f RDI: ffff88802450ccc4 [ 147.501049][ T8346] RBP: ffffea00004bc274 R08: 0000000000000001 R09: fffffbfff2d315c7 [ 147.503766][ T8346] R10: ffffffff9698ae3f R11: ffffffff815f4a4e R12: ffffea00004bc240 [ 147.506492][ T8346] R13: ffff88806979b800 R14: 0000000000001000 R15: 0000000000001000 [ 147.509207][ T8346] FS: 0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:0000000057499440 [ 147.512329][ T8346] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 147.514680][ T8346] CR2: 0000000057499448 CR3: 0000000026342000 CR4: 0000000000352ef0 [ 147.517577][ T8346] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.520600][ T8346] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.522850][ T8346] Kernel panic - not syncing: Fatal exception [ 147.525146][ T8346] Kernel Offset: disabled [ 147.526366][ T8346] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:10:34 Registers: info registers vcpu 0 CPU#0 RAX=000000000065cdbc RBX=0000000000000000 RCX=ffffffff8b12f739 RDX=ffffed1005687026 RSI=ffffffff8bb11fa0 RDI=ffffffff8164098c RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005687025 R10=ffff88802b43812b R11=0000000000000002 R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff901cc608 R15=0000000000000000 RIP=ffffffff8b130b1f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7366f40 CR3=000000002ab04000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85035855 RDI=ffffffff9a63a260 RBP=ffffffff9a63a220 RSP=ffffc9002664e8c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552031203a555043 R12=0000000000000000 R13=000000000000005d R14=ffffffff850357f0 R15=0000000000000000 RIP=ffffffff8503587f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020023000 CR3=0000000026342000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000001d8 RBX=0000000000000020 RCX=ffffffff848ee179 RDX=00000000000001d8 RSI=0000000000000007 RDI=0000000000000007 RBP=ffffc90003327538 RSP=ffffc90003327398 R8 =0000000000000001 R9 =0000000000000040 R10=0000000000000020 R11=00000000000a2012 R12=0000000000000020 R13=ffffc90003327518 R14=ffff8880264d6e10 R15=ffffc90003327540 RIP=ffffffff818caff0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa873192d00 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055f9b9f89000 CR3=000000004a308000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=a000e7b8a000e7b8 a000e7b8a000e7b8 a000e7b8a000e7b8 a000e7b8a000e7b8 a000e7b8a000e7b8 a000e7b8a000e7b8 a000e7b8a000e7b8 a000e7b8a000e7b8 ZMM22=86d73abb86d73abb 86d73abb86d73abb 86d73abb86d73abb 86d73abb86d73abb 86d73abb86d73abb 86d73abb86d73abb 86d73abb86d73abb 86d73abb86d73abb ZMM23=62be8b4862be8b48 62be8b4862be8b48 62be8b4862be8b48 62be8b4862be8b48 62be8b4862be8b48 62be8b4862be8b48 62be8b4862be8b48 62be8b4862be8b48 ZMM24=49c50e2649c50e26 49c50e2649c50e26 49c50e2649c50e26 49c50e2649c50e26 49c50e2649c50e26 49c50e2649c50e26 49c50e2649c50e26 49c50e2649c50e26 ZMM25=a15abbada15abbad a15abbada15abbad a15abbada15abbad a15abbada15abbad a15abbada15abbad a15abbada15abbad a15abbada15abbad a15abbada15abbad ZMM26=e32ce8b1e32ce8b1 e32ce8b1e32ce8b1 e32ce8b1e32ce8b1 e32ce8b1e32ce8b1 e32ce8b1e32ce8b1 e32ce8b1e32ce8b1 e32ce8b1e32ce8b1 e32ce8b1e32ce8b1 ZMM27=b13bae35b13bae35 b13bae35b13bae35 b13bae35b13bae35 b13bae35b13bae35 b13bae35b13bae35 b13bae35b13bae35 b13bae35b13bae35 b13bae35b13bae35 ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9806000098060000 9806000098060000 9806000098060000 9806000098060000 9806000098060000 9806000098060000 9806000098060000 9806000098060000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=00000000000000bc RCX=ffffffff81dcd6db RDX=ffff888020722440 RSI=0000000000000100 RDI=0000000000000005 RBP=ffff88801ac69068 RSP=ffffc90001fa76c8 R8 =0000000000000005 R9 =0000000000000100 R10=00000000000000bc R11=ffff88802b728a40 R12=0000000000000000 R13=ffff88801ac67eb8 R14=dffffc0000000000 R15=0000000000000005 RIP=ffffffff818caf70 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f51ad77b CR3=000000006c362000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000