last executing test programs: 4m19.859257899s ago: executing program 2 (id=537): syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000afaaaaaaaa3688a800000806000186dd061000030180c2000002fe8800000000000000000000000000010180c200000000000000000000000000000000000001"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0xd16, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r1, 0x1, 0x20, 0x6, @local}, 0x14) recvmmsg(r0, &(0x7f0000003800), 0x0, 0x12022, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000ac0)=0x1fc245da, 0x4) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r2, &(0x7f0000000800), 0x0, 0x40002002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040001}, 0x20000804) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000ff03000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000a6b719d086a95a380000000000f22767f7df138673d0217c"], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="64000000010401010000000000000000070000000a000200000000070200000008000440000007ff0800044000000fff06000640000400000500010001"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x8004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r6, 0x8b32, &(0x7f0000000040)) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x9, 0x10}, 0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x65c, 0xcc, 0x0, 0x1ac, 0x0, 0x1ac, 0x594, 0x594, 0x594, 0x594, 0x594, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x44}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x138, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00', @ipv4=@private}}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0x134, 0x170, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6b8) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) mq_open(&(0x7f0000000180)='..\x00', 0x40, 0x80, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x9, 0xf0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c044}, 0x24044094) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1d, 0xfffffffd, 0xc, 0xd6a, 0x12026, 0x1, 0x9, '\x00', r1, r3, 0x1, 0x3, 0x4, 0x0, @void, @value, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xee}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0xb, 0x9, 0xe, 0x0, 0x1000}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x7, 0x1, 0x8, 0xb, 0x6, 0xfffffffffffffffc, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x5, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x3, 0x3, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000007c0)=[r12], &(0x7f00000008c0)=[{0x3, 0x2, 0x0, 0x8}, {0x3, 0x1, 0x9, 0x5}, {0x0, 0x2, 0xc, 0xc}, {0x2, 0x4, 0x3, 0x3}, {0x3, 0x4, 0x8, 0xc}, {0x0, 0x2, 0xe, 0x9}], 0x10, 0x7ff, @void, @value}, 0x94) 4m17.245218667s ago: executing program 2 (id=541): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0xaf, &(0x7f0000000980)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2042}], 0x1, 0x0, 0x0, 0x0) getpid() creat(0x0, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0xfffffffe, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './control\x00'}, 0x6e) ptrace(0x4207, r2) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e21, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @encap={0x1c, 0x4, {0x2}}]}, 0x170}}, 0x0) shutdown(r0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="897f72c7e329d83c69f50cdaf0b4797c25a457b1d1a52f0dec9f1cdbabdf82e23b71cb9251bea8852f3a3597b777c71c03a15785159b4b1ddf2389201f528546c6267a8d4e7f4a9fbf3290cc5d67a2b4076faa6a22836bd71dff497aa8610bb1a75fe11e5bd532169c8c1fbfb78205708bbb72842e0406735abd18b6043dd42831d8bc33196479a5d16d7c4118a5c7ae998ea955632988ad162833d1efce19688db36cea6a57f82e7e725fcdff0b13d45c6512faa87bd979dd3a796f11581c4ff1097f", @ANYRES64=0x0], 0x14) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)=0xd0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') 4m15.877760699s ago: executing program 2 (id=546): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000d93400"/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x8440, 0x0) io_setup(0x4, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000001580)=[&(0x7f0000001540)={0x0, 0x0, 0x21, 0x0, 0x0, r2, 0x0}]) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\xccEi\xfb\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee<\x8bw\xdd^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) 4m9.018778197s ago: executing program 2 (id=552): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r0, 0x891b, &(0x7f0000000040)="70e89cdae43a") ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0xfffffffd, 0x0, 0x30383653, 0x8, 0x4, [{}, {0x10}, {0x0, 0x807fff}, {}, {0x0, 0x5}, {}, {0x0, 0xfffffffe}, {0x0, 0xc}], 0x6, 0x0, 0x3, 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffff) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x20c02, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="00012a0100"/18], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0x10, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x95, &(0x7f0000000300)=""/149, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000640)=0x4) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) 4m6.278705547s ago: executing program 3 (id=554): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000001900), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000001940)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x100, 0x3a, 'dummy0\x00', 0x3a, '*^*:Y:', 0x3a, './file0'}, 0x34) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) (async) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000380)=0x19) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, 0x1c}) (async) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x6, 0x5, 0x2, 0xd, 0x5c, 0xfffffffe}]}) 4m5.062521332s ago: executing program 2 (id=555): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000407000/0x1000)=nil, 0x1000, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r0, 0x891b, &(0x7f0000000040)="70e89cdae43a") ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xfffffffd, 0x0, 0x30383653, 0x8, 0x4, [{}, {0x10}, {0x0, 0x807fff}, {}, {0x0, 0x2}, {}, {}, {0x0, 0xc}], 0x6, 0x0, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x22, 0x1, 0xfffffffc, 0xfffffffc, {0x2}}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffff) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r2, 0x0, 0x578410eb) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x20c02, &(0x7f0000000100)='/dev/snd/controlC#\x00') syz_open_dev$sndmidi(0x0, 0x2, 0x141101) 4m3.369734725s ago: executing program 3 (id=558): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x145040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@getchain={0x54, 0x66, 0x10, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0xfff3, 0x5}, {0xf}}, [{0x8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xa}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xfffff0fc}, {0x8, 0xb, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) sendto(r3, 0x0, 0x0, 0x10, 0x0, 0x0) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0xf000, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) 3m59.110239119s ago: executing program 0 (id=560): syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000afaaaaaaaa3688a800000806000186dd061000030180c2000002fe8800000000000000000000000000010180c200000000000000000000000000000000000001"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0xd16, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r1, 0x1, 0x20, 0x6, @local}, 0x14) recvmmsg(r0, &(0x7f0000003800), 0x0, 0x12022, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000ac0)=0x1fc245da, 0x4) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r2, &(0x7f0000000800), 0x0, 0x40002002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000804) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000ff03000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000a6b719d086a95a380000000000f22767f7df138673d0217c"], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="64000000010401010000000000000000070000000a000200000000070200000008000440000007ff0800044000000fff06000640000400000500010001"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x8004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r6, 0x8b32, &(0x7f0000000040)) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x9, 0x10}, 0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x65c, 0xcc, 0x0, 0x1ac, 0x0, 0x1ac, 0x594, 0x594, 0x594, 0x594, 0x594, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x44}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x138, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00', @ipv4=@private}}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0x134, 0x170, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6b8) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) mq_open(&(0x7f0000000180)='..\x00', 0x40, 0x80, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x9, 0xf0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c044}, 0x24044094) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1d, 0xfffffffd, 0xc, 0xd6a, 0x12026, 0x1, 0x9, '\x00', r1, r3, 0x1, 0x3, 0x4, 0x0, @void, @value, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xee}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0xb, 0x9, 0xe, 0x0, 0x1000}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x7, 0x1, 0x8, 0xb, 0x6, 0xfffffffffffffffc, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x5, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x3, 0x3, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000007c0)=[r12], &(0x7f00000008c0)=[{0x3, 0x2, 0x0, 0x8}, {0x3, 0x1, 0x9, 0x5}, {0x0, 0x2, 0xc, 0xc}, {0x2, 0x4, 0x3, 0x3}, {0x3, 0x4, 0x8, 0xc}, {0x0, 0x2, 0xe, 0x9}], 0x10, 0x7ff, @void, @value}, 0x94) 3m55.356176911s ago: executing program 0 (id=561): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfffffff9, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) chmod(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xf2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000001040)={0x0, @bt={0xf, 0x5, 0x0, 0x1, 0x4, 0xb95c, 0x6, 0x886c, 0x0, 0x7ff, 0x8, 0x2, 0x2, 0x0, 0x1, 0x30, {0x1, 0x9}, 0xfa, 0x1}}) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r5 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='`', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)="e3", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r5, 0xc00464be, &(0x7f0000000080)={r6}) setgroups(0x0, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020}, 0x2020) 3m50.108515529s ago: executing program 3 (id=562): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000013004500000000000000030007000000", @ANYRES32=r2], 0x2c}}, 0x0) 3m49.187824432s ago: executing program 32 (id=555): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000407000/0x1000)=nil, 0x1000, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r0, 0x891b, &(0x7f0000000040)="70e89cdae43a") ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xfffffffd, 0x0, 0x30383653, 0x8, 0x4, [{}, {0x10}, {0x0, 0x807fff}, {}, {0x0, 0x2}, {}, {}, {0x0, 0xc}], 0x6, 0x0, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x22, 0x1, 0xfffffffc, 0xfffffffc, {0x2}}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffff) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r2, 0x0, 0x578410eb) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x20c02, &(0x7f0000000100)='/dev/snd/controlC#\x00') syz_open_dev$sndmidi(0x0, 0x2, 0x141101) 3m48.100959329s ago: executing program 3 (id=564): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0xfce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x3, 0xbaa, 0x0, 0xffffffffffffffff, 0x7ffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x7, 0x10047, 0x401, 0x80000001, {{0x1b, 0x4, 0x3, 0x0, 0x6c, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @private=0xa010102, {[@generic={0x7, 0x12, "2c4d76f50e44bfb66d47edeadbba368e"}, @cipso={0x86, 0x26, 0x0, [{0x0, 0x3, "e3"}, {0x2, 0xb, "b200730b11b3fa974e"}, {0x1, 0x12, "e60c59276caa7ec728296fe476c2ac1e"}]}, @timestamp_addr={0x44, 0xc, 0xf, 0x1, 0x9, [{@empty}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x14, [@multicast2, @dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0x1a}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x20}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x5a, &(0x7f00000003c0)=""/90, 0x40f00, 0x4, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, r2, r2], &(0x7f00000005c0), 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000540)=0xfff) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f00000000c0)=0x9) r6 = dup(r4) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) socket$rxrpc(0x21, 0x2, 0x2) r7 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) io_uring_enter(r7, 0x2def, 0x4000, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmmsg(r10, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}], 0x1, &(0x7f0000000a00)=""/6, 0x6}, 0x1}], 0x1, 0x10000, &(0x7f0000001f00)={0x77359400}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0x3}}}, 0x24}}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3m45.515789584s ago: executing program 0 (id=565): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 3m43.044199427s ago: executing program 0 (id=566): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x42903) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d40)=ANY=[@ANYBLOB="ec26000041000701fcfffffffddbdf25017c000004003680d42601"], 0x26ec}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r5 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x14b200, 0x0) ioctl$SW_SYNC_IOC_INC(r5, 0xc0105702, &(0x7f0000000040)=0x8001) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x3e, {0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x16, 0xd, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200", [0x2]}}) mkdir(0x0, 0x0) mkdir(0x0, 0x0) open(0x0, 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, 0x0, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m41.087810502s ago: executing program 0 (id=567): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x4b52, &(0x7f0000001900)={0x2, {0x2, 0x0, 0xfdfd, 0x101}}) 3m40.072224603s ago: executing program 3 (id=568): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0xfce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x3, 0xbaa, 0x0, 0xffffffffffffffff, 0x7ffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x7, 0x10047, 0x401, 0x80000001, {{0x1b, 0x4, 0x3, 0x0, 0x6c, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @private=0xa010102, {[@generic={0x7, 0x12, "2c4d76f50e44bfb66d47edeadbba368e"}, @cipso={0x86, 0x26, 0x0, [{0x0, 0x3, "e3"}, {0x2, 0xb, "b200730b11b3fa974e"}, {0x1, 0x12, "e60c59276caa7ec728296fe476c2ac1e"}]}, @timestamp_addr={0x44, 0xc, 0xf, 0x1, 0x9, [{@empty}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x14, [@multicast2, @dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0x1a}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x20}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x5a, &(0x7f00000003c0)=""/90, 0x40f00, 0x4, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, r2, r2], &(0x7f00000005c0), 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000540)=0xfff) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f00000000c0)=0x9) r6 = dup(r4) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) socket$rxrpc(0x21, 0x2, 0x2) r7 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) io_uring_enter(r7, 0x2def, 0x4000, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmmsg(r10, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}], 0x1, &(0x7f0000000a00)=""/6, 0x6}, 0x1}], 0x1, 0x10000, &(0x7f0000001f00)={0x77359400}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0x3}}}, 0x24}}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3m38.038280052s ago: executing program 0 (id=569): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'veth0_vlan\x00', 0x200}) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r8, @ANYRES64=r3, @ANYRES16=r1, @ANYRESHEX=r4, @ANYRESDEC=r5, @ANYRES8=r8, @ANYRESOCT=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) 3m33.615291221s ago: executing program 3 (id=570): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000b703000008000000b7040000020000008500000082200000950000000000000042f06e73bbd03602b6fcf63c3ebf736409b7e7d07ca67f3210fc05667b60f3f564b8feb19baeafcfb53801c1fd6f04d9f04bd70a211a70642847237ec3c6aabef24f4ecea07045ee7db3fe0e488e2d05dd19a18b65e7f63fcf79ef59161a1071cb62c5ab9b4f78f5f22271da3ffcc29a3f0e7d27f625b7dce7bd4624b07f9235a4d74f4c842138aa849ce2265c13f3456b00"/217], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7fffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mknod(&(0x7f0000000040)='./file0\x00', 0xc000, 0x7) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r4, r5, 0x8000000000003, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r6, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 3m22.914786714s ago: executing program 33 (id=569): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'veth0_vlan\x00', 0x200}) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r8, @ANYRES64=r3, @ANYRES16=r1, @ANYRESHEX=r4, @ANYRESDEC=r5, @ANYRES8=r8, @ANYRESOCT=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) 3m17.970994128s ago: executing program 34 (id=570): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000b703000008000000b7040000020000008500000082200000950000000000000042f06e73bbd03602b6fcf63c3ebf736409b7e7d07ca67f3210fc05667b60f3f564b8feb19baeafcfb53801c1fd6f04d9f04bd70a211a70642847237ec3c6aabef24f4ecea07045ee7db3fe0e488e2d05dd19a18b65e7f63fcf79ef59161a1071cb62c5ab9b4f78f5f22271da3ffcc29a3f0e7d27f625b7dce7bd4624b07f9235a4d74f4c842138aa849ce2265c13f3456b00"/217], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7fffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mknod(&(0x7f0000000040)='./file0\x00', 0xc000, 0x7) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r4, r5, 0x8000000000003, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r6, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 1m32.709751422s ago: executing program 1 (id=549): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r1, 0xffffffffffffffff, 0x1a, 0x7, @void}, 0x10) syz_open_dev$admmidi(&(0x7f0000000000), 0x800, 0x1699c0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) kcmp(0x0, 0x0, 0x0, r3, r4) open$dir(&(0x7f00000003c0)='./control/file0\x00', 0x84840, 0x0) r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r5, &(0x7f0000fc4fbe)=""/80, 0x50) unlink(&(0x7f00000001c0)='./control/file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './control\x00'}) unlinkat(r6, 0x0, 0x200) rmdir(&(0x7f0000000040)='./control\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000200)}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10000002}}, 0x2e) r11 = dup(r0) ioctl$TIOCL_SETSEL(r11, 0x4b52, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) 1m14.40154506s ago: executing program 1 (id=549): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r1, 0xffffffffffffffff, 0x1a, 0x7, @void}, 0x10) syz_open_dev$admmidi(&(0x7f0000000000), 0x800, 0x1699c0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) kcmp(0x0, 0x0, 0x0, r3, r4) open$dir(&(0x7f00000003c0)='./control/file0\x00', 0x84840, 0x0) r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r5, &(0x7f0000fc4fbe)=""/80, 0x50) unlink(&(0x7f00000001c0)='./control/file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './control\x00'}) unlinkat(r6, 0x0, 0x200) rmdir(&(0x7f0000000040)='./control\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000200)}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10000002}}, 0x2e) r11 = dup(r0) ioctl$TIOCL_SETSEL(r11, 0x4b52, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) 59.271281747s ago: executing program 1 (id=549): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r1, 0xffffffffffffffff, 0x1a, 0x7, @void}, 0x10) syz_open_dev$admmidi(&(0x7f0000000000), 0x800, 0x1699c0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) kcmp(0x0, 0x0, 0x0, r3, r4) open$dir(&(0x7f00000003c0)='./control/file0\x00', 0x84840, 0x0) r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r5, &(0x7f0000fc4fbe)=""/80, 0x50) unlink(&(0x7f00000001c0)='./control/file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './control\x00'}) unlinkat(r6, 0x0, 0x200) rmdir(&(0x7f0000000040)='./control\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000200)}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10000002}}, 0x2e) r11 = dup(r0) ioctl$TIOCL_SETSEL(r11, 0x4b52, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) 52.759243741s ago: executing program 1 (id=549): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r1, 0xffffffffffffffff, 0x1a, 0x7, @void}, 0x10) syz_open_dev$admmidi(&(0x7f0000000000), 0x800, 0x1699c0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) kcmp(0x0, 0x0, 0x0, r3, r4) open$dir(&(0x7f00000003c0)='./control/file0\x00', 0x84840, 0x0) r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r5, &(0x7f0000fc4fbe)=""/80, 0x50) unlink(&(0x7f00000001c0)='./control/file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './control\x00'}) unlinkat(r6, 0x0, 0x200) rmdir(&(0x7f0000000040)='./control\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000200)}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10000002}}, 0x2e) r11 = dup(r0) ioctl$TIOCL_SETSEL(r11, 0x4b52, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) 48.088285457s ago: executing program 1 (id=549): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r1, 0xffffffffffffffff, 0x1a, 0x7, @void}, 0x10) syz_open_dev$admmidi(&(0x7f0000000000), 0x800, 0x1699c0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) kcmp(0x0, 0x0, 0x0, r3, r4) open$dir(&(0x7f00000003c0)='./control/file0\x00', 0x84840, 0x0) r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r5, &(0x7f0000fc4fbe)=""/80, 0x50) unlink(&(0x7f00000001c0)='./control/file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './control\x00'}) unlinkat(r6, 0x0, 0x200) rmdir(&(0x7f0000000040)='./control\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000200)}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10000002}}, 0x2e) r11 = dup(r0) ioctl$TIOCL_SETSEL(r11, 0x4b52, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) 43.343716319s ago: executing program 1 (id=549): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r1, 0xffffffffffffffff, 0x1a, 0x7, @void}, 0x10) syz_open_dev$admmidi(&(0x7f0000000000), 0x800, 0x1699c0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) kcmp(0x0, 0x0, 0x0, r3, r4) open$dir(&(0x7f00000003c0)='./control/file0\x00', 0x84840, 0x0) r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r5, &(0x7f0000fc4fbe)=""/80, 0x50) unlink(&(0x7f00000001c0)='./control/file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './control\x00'}) unlinkat(r6, 0x0, 0x200) rmdir(&(0x7f0000000040)='./control\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000200)}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10000002}}, 0x2e) r11 = dup(r0) ioctl$TIOCL_SETSEL(r11, 0x4b52, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) 5.004641213s ago: executing program 6 (id=941): listen(0xffffffffffffffff, 0x20000005) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2084) writev(r5, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(r5, 0x0, 0x2f) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x109482) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000314010000100000fddbdf2509000200737978310000000008004100736977001400330073797a5f74756e000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004010}, 0x40440c4) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000f1401002bbd70e2060000000800010000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4048480) 4.110468479s ago: executing program 4 (id=945): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 4.050841086s ago: executing program 6 (id=946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x23b) 3.660061262s ago: executing program 4 (id=947): socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 3.581300905s ago: executing program 4 (id=948): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, 0x0, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}}, 0x0) 3.529874488s ago: executing program 4 (id=949): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00') fchdir(r0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 3.529546004s ago: executing program 4 (id=950): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0x40000000}) r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000001a40)=""/203, 0xcb) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f0000001300)=[{&(0x7f00000003c0)=""/111, 0x6f}], 0x1, 0x7, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000000000000800000018000180140300f4ff787a5f"], 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x3) mq_unlink(&(0x7f0000000080)='eth0\x00') close(r1) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) keyctl$join(0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x30, 0x2, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x8}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) 2.302501182s ago: executing program 4 (id=954): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "77d0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="200616"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 1.67019636s ago: executing program 6 (id=956): gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.221018866s ago: executing program 5 (id=957): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e234e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0xfffffffc, [0x0, 0x10000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffc0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x2, 0x3, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x8, 0x0, 0x0, 0x2000, 0x0, 0xe0a4, 0x6, 0x400, 0x20009], [0xb4e0, 0x0, 0x10, 0x8, 0x3, 0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x3, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000005, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7e0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400], [0x0, 0x7, 0x20000000, 0x1, 0x2, 0x6e3a, 0x2, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x8000000, 0x3, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1225, 0x0, 0x0, 0x0, 0x200, 0x5, 0xfffffffe, 0x4, 0xffffffd, 0x200, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x8000]}, 0x45c) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r5, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r4}, 0x10) r6 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) move_pages(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000000), 0x0) syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) 1.111232905s ago: executing program 5 (id=958): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000480)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 1.110951113s ago: executing program 5 (id=959): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = dup(r1) bind$unix(r2, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7c, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0xff, @remote, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x200}}}}}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x2, &(0x7f0000130000/0x800000)=nil) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000440)=""/251, 0xfb, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xeb) 781.060725ms ago: executing program 6 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) unshare(0x1e81488c03a8ba1) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = gettid() io_setup(0x2, &(0x7f0000001700)=0x0) r7 = eventfd2(0x0, 0x0) io_getevents(r6, 0x4, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0) io_submit(r6, 0x1, &(0x7f00000028c0)=[&(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}]) io_destroy(r6) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x5, 0xffff, 0xffffbfff, 'syz0\x00'}, 0x2, 0x4, 0x3, r5, 0x0, 0xff, 'syz1\x00', 0x0}) close(r4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x7c, r8, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2e6c}, {0x6, 0x11, 0x6}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x5dc12b32630b79c3}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd2a, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0xd0) 588.112879ms ago: executing program 6 (id=961): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x4004090) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0xf3a, 0x0) write(r8, &(0x7f0000000240)="94", 0x1) tee(r7, r11, 0x8f5, 0x0) write(r9, 0x0, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r12}, 0x18) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bcb0000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000000000900020073797a31000000000900010073"], 0xa4}}, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000380)=@deltaction={0xa4, 0x31, 0x10, 0x3c8, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbe9d}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10e}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff10fb}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 87.106313ms ago: executing program 5 (id=962): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2, 0x0, @a}, 0x48, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000008100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="a980b2a0cb0809541841ee4e1262808a24fc8f1c27d5e4506f13af5c6d63172360b6baad9d0c3df046f4f5", 0x2b}, {0x0}], 0x2}, 0x40000) 46.029833ms ago: executing program 5 (id=963): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) statx(r1, 0x0, 0x1000, 0x10, &(0x7f0000000500)) 0s ago: executing program 5 (id=964): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000d) getrandom(0x0, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) keyctl$join(0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x30, 0x2, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x8}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) kernel console output (not intermixed with test programs): mance. Setting the MTU to 1560 would solve the problem. [ 437.762865][ T7615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.793971][ T8576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.913910][ T5971] Bluetooth: hci1: command tx timeout [ 438.259726][ T8641] team0: Port device team_slave_1 removed [ 438.287904][ T8529] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 438.321240][ T8529] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 438.690831][ T8576] hsr_slave_0: entered promiscuous mode [ 438.694732][ T8576] hsr_slave_1: entered promiscuous mode [ 438.697831][ T8576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.701182][ T8576] Cannot create hsr debugfs directory [ 438.711960][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.718434][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.446562][ T8529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.448718][ T6033] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 439.536556][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.542562][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.561823][ T8529] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.607327][ T5971] Bluetooth: hci0: command tx timeout [ 439.666727][ T6033] usb 10-1: Using ep0 maxpacket: 8 [ 439.695680][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 439.695696][ T40] audit: type=1326 audit(1745227441.621:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.6.572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7fc00000 [ 439.702307][ T6033] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 439.718027][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.718116][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.787322][ T6033] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 439.793542][ T6033] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 439.798231][ T6033] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 439.803379][ T6033] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 439.810044][ T6033] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 439.814967][ T6033] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.850711][ T8576] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.872464][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.874921][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.995289][ T5971] Bluetooth: hci1: command tx timeout [ 440.013501][ T8576] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.051409][ T6033] usb 10-1: usb_control_msg returned -32 [ 440.061493][ T6033] usbtmc 10-1:16.0: can't read capabilities [ 440.089315][ T8529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 440.194373][ T40] audit: type=1326 audit(1745227442.131:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.6.572" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ae579 code=0x7fc00000 [ 440.476226][ T8683] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 440.480024][ T8576] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.519020][ T5384] usb 10-1: USB disconnect, device number 3 [ 440.907337][ T8576] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.104379][ T8529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.934317][ T8576] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 442.047597][ T8576] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 442.086717][ T5971] Bluetooth: hci1: command tx timeout [ 442.138288][ T8576] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 442.203246][ T8576] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 442.435087][ T8529] veth0_vlan: entered promiscuous mode [ 442.481234][ T8529] veth1_vlan: entered promiscuous mode [ 442.684965][ T8529] veth0_macvtap: entered promiscuous mode [ 442.695018][ T8529] veth1_macvtap: entered promiscuous mode [ 442.772331][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.780196][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.801226][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.814243][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.821866][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.833069][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.837354][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.842074][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.874668][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.881706][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.915988][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.127615][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.262092][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.265745][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.269446][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.274753][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.280428][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.299620][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.306801][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.310696][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.318736][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.329174][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.350436][ T8576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.493690][ T8529] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.518750][ T8529] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.587049][ T8529] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.591349][ T8529] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.732370][ T8576] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.803397][ T481] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.807482][ T481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.844702][ T481] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.864927][ T481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.028094][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.048827][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.120552][ T481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.128151][ T8576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.141973][ T481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.194623][ T6024] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 444.393843][ T6024] usb 11-1: Using ep0 maxpacket: 32 [ 444.397707][ T6024] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 444.420976][ T6024] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 444.466324][ T6024] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 444.510865][ T6024] usb 11-1: Product: syz [ 444.513795][ T6024] usb 11-1: Manufacturer: syz [ 444.560186][ T8576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.590596][ T6024] usb 11-1: SerialNumber: syz [ 444.595428][ T6024] usb 11-1: config 0 descriptor?? [ 444.611899][ T8725] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 444.618332][ T6024] hub 11-1:0.0: bad descriptor, ignoring hub [ 444.620874][ T6024] hub 11-1:0.0: probe with driver hub failed with error -5 [ 444.886912][ T8576] veth0_vlan: entered promiscuous mode [ 444.902115][ T8576] veth1_vlan: entered promiscuous mode [ 444.961272][ T8576] veth0_macvtap: entered promiscuous mode [ 444.980503][ T8576] veth1_macvtap: entered promiscuous mode [ 445.118700][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.132972][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.143407][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.180685][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.232871][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.253207][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.256882][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.260709][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.281943][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.286293][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.289370][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.294190][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.315423][ T8576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.341152][ T8723] usb 11-1: reset high-speed USB device number 2 using dummy_hcd [ 445.348131][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.357409][ T8723] usb 11-1: device reset changed ep0 maxpacket size! [ 445.361946][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.361981][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.361995][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.362004][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.362015][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.362031][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.362042][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.362056][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.362068][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.362083][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.362093][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.365067][ T8576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.396033][ T8576] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.432872][ T6043] usb 11-1: USB disconnect, device number 2 [ 445.567043][ T8576] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.582966][ T8576] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.585650][ T8576] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.632077][ T6043] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 446.082880][ T6043] usb 11-1: Using ep0 maxpacket: 16 [ 446.099832][ T8723] 9pnet_fd: Insufficient options for proto=fd [ 446.103212][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.107123][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.189179][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.205482][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.251293][ T6043] usb 11-1: unable to get BOS descriptor or descriptor too short [ 447.255786][ T6043] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 447.259513][ T6043] usb 11-1: can't read configurations, error -71 [ 447.308887][ T8769] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 448.333707][ T5973] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 448.358543][ T5973] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 448.371623][ T5973] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 448.413679][ T5973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 448.445108][ T5973] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 449.140555][ T8793] chnl_net:caif_netlink_parms(): no params data found [ 450.033088][ T8816] netlink: 32 bytes leftover after parsing attributes in process `syz.6.592'. [ 450.038859][ T8793] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.115810][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.121716][ T8793] bridge_slave_0: entered allmulticast mode [ 450.131758][ T8793] bridge_slave_0: entered promiscuous mode [ 450.154345][ T8793] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.159534][ T8793] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.167997][ T8793] bridge_slave_1: entered allmulticast mode [ 450.185099][ T8793] bridge_slave_1: entered promiscuous mode [ 450.276076][ T40] audit: type=1804 audit(1745227452.231:21): pid=8823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.593" name="/newroot/7/file0/file0" dev="9p" ino=36831365 res=1 errno=0 [ 450.401443][ T8793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.443355][ T8793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.506039][ T5973] Bluetooth: hci1: command tx timeout [ 451.027819][ T8793] team0: Port device team_slave_0 added [ 451.045282][ T8793] team0: Port device team_slave_1 added [ 451.249404][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.251714][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.266782][ T8793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.274619][ T8838] bridge0: port 3(geneve0) entered blocking state [ 451.280029][ T8838] bridge0: port 3(geneve0) entered disabled state [ 451.285872][ T8838] geneve0: entered allmulticast mode [ 451.290827][ T8838] geneve0: entered promiscuous mode [ 451.296556][ T8838] bridge0: port 3(geneve0) entered blocking state [ 451.301080][ T8838] bridge0: port 3(geneve0) entered forwarding state [ 451.339674][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.356973][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.383961][ T8793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.421817][ T8839] geneve0: left allmulticast mode [ 451.431358][ T8839] geneve0: left promiscuous mode [ 451.436743][ T8839] bridge0: port 3(geneve0) entered disabled state [ 451.691067][ T8793] hsr_slave_0: entered promiscuous mode [ 451.724580][ T8793] hsr_slave_1: entered promiscuous mode [ 451.727571][ T8793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.755993][ T8793] Cannot create hsr debugfs directory [ 451.904060][ T8849] 9pnet_fd: Insufficient options for proto=fd [ 452.563638][ T5973] Bluetooth: hci1: command tx timeout [ 453.301873][ T8793] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.398474][ T8793] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.892121][ T8793] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.245885][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'. [ 454.319968][ T8793] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.290085][ T5973] Bluetooth: hci1: command tx timeout [ 455.610765][ T8875] team0: Port device team_slave_1 removed [ 456.192972][ T8793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 456.251443][ T8793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 456.269005][ T8793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 456.491240][ T8793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 456.647816][ T8793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.913972][ T8793] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.921850][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.941955][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.135735][ T481] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.140056][ T481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.472929][ T5973] Bluetooth: hci1: command tx timeout [ 457.748374][ T8793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.840649][ T8793] veth0_vlan: entered promiscuous mode [ 457.867875][ T8793] veth1_vlan: entered promiscuous mode [ 457.946917][ T8793] veth0_macvtap: entered promiscuous mode [ 457.969166][ T8793] veth1_macvtap: entered promiscuous mode [ 458.042842][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.047875][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.067479][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.072045][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.085112][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.091025][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.096281][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.101101][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.106704][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.113111][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.117795][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.122455][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.127579][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.137054][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.186296][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.215741][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.249622][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.255828][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.262207][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.268377][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.284249][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.290405][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.305736][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.311572][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.320439][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.335363][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.341477][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.350372][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.358390][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.367465][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.494193][ T8793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.538957][ T8793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.586422][ T8793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.595501][ T8793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.903339][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.612'. [ 459.643413][ T8940] team0: Port device team_slave_1 removed [ 460.001602][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.021177][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.110862][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.120711][ T8949] SET target dimension over the limit! [ 460.128752][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.356649][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.613'. [ 462.249207][ T8998] netlink: 344 bytes leftover after parsing attributes in process `syz.6.619'. [ 462.341520][ T8987] block device autoloading is deprecated and will be removed. [ 463.527523][ T6024] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 463.621386][ T6024] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 463.630887][ T6024] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 463.650059][ T6024] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 463.664202][ T6024] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 463.680177][ T6024] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 463.699794][ T6024] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 463.720686][ T6024] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 463.803051][ T6024] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 463.806351][ T6024] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 463.810196][ T6024] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 463.828182][ T6024] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 463.863447][ T6024] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 463.882005][ T6024] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 463.886375][ T6024] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 463.891726][ T6024] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 463.946831][ T6024] hid-generic FFF9:0000:0203.0002: hidraw1: HID v0.00 Device [syz0] on syz1 [ 464.348652][ T481] bond0: (slave bond_slave_0): interface is now down [ 464.353108][ T481] bond0: (slave bond_slave_1): interface is now down [ 464.726300][ T481] bond0: now running without any active interface! [ 466.575118][ T5971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 466.661746][ T5971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 466.683132][ T5971] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 466.687963][ T9079] netlink: 28 bytes leftover after parsing attributes in process `syz.6.630'. [ 466.710247][ T9079] netlink: 'syz.6.630': attribute type 7 has an invalid length. [ 466.713542][ T9079] netlink: 'syz.6.630': attribute type 8 has an invalid length. [ 466.718503][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.630'. [ 466.723002][ T5971] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 466.748060][ T5971] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 466.755943][ T9086] misc userio: Begin command sent, but we're already running [ 467.038747][ T9080] chnl_net:caif_netlink_parms(): no params data found [ 467.118674][ T9095] netlink: 'syz.4.631': attribute type 1 has an invalid length. [ 467.142983][ T9095] netlink: 'syz.4.631': attribute type 4 has an invalid length. [ 467.143001][ T9095] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.631'. [ 467.262326][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.628'. [ 467.865971][ T9080] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.886687][ T9080] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.916882][ T9080] bridge_slave_0: entered allmulticast mode [ 467.922354][ T9080] bridge_slave_0: entered promiscuous mode [ 467.937634][ T9080] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.963015][ T9080] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.965958][ T9080] bridge_slave_1: entered allmulticast mode [ 467.969587][ T9080] bridge_slave_1: entered promiscuous mode [ 468.452362][ T9080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.515043][ T9080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.862734][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.6.634'. [ 468.913709][ T5971] Bluetooth: hci1: command tx timeout [ 468.999383][ T9080] team0: Port device team_slave_0 added [ 469.019353][ T9119] dccp_xmit_packet: Payload too large (65475) for featneg. [ 469.092426][ T9080] team0: Port device team_slave_1 added [ 469.387451][ T9125] bridge_slave_0: left allmulticast mode [ 469.389963][ T9125] bridge_slave_0: left promiscuous mode [ 469.392549][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.760754][ T9132] FAULT_INJECTION: forcing a failure. [ 469.760754][ T9132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.786133][ T9132] CPU: 2 UID: 0 PID: 9132 Comm: syz.5.636 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 469.786354][ T9132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 469.786364][ T9132] Call Trace: [ 469.786371][ T9132] [ 469.786378][ T9132] dump_stack_lvl+0x16c/0x1f0 [ 469.786403][ T9132] should_fail_ex+0x512/0x640 [ 469.786423][ T9132] _copy_to_user+0x32/0xd0 [ 469.786442][ T9132] simple_read_from_buffer+0xcb/0x170 [ 469.786662][ T9132] proc_fail_nth_read+0x197/0x270 [ 469.787311][ T9132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.787332][ T9132] ? rw_verify_area+0xcf/0x680 [ 469.787351][ T9132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.787370][ T9132] vfs_read+0x1de/0xc70 [ 469.787386][ T9132] ? __pfx___mutex_lock+0x10/0x10 [ 469.787405][ T9132] ? __pfx_vfs_read+0x10/0x10 [ 469.787424][ T9132] ? __fget_files+0x20e/0x3c0 [ 469.787441][ T9132] ksys_read+0x12a/0x240 [ 469.787454][ T9132] ? __pfx_ksys_read+0x10/0x10 [ 469.787484][ T9132] ? rcu_is_watching+0x12/0xc0 [ 469.787504][ T9132] __do_fast_syscall_32+0x73/0x120 [ 469.787530][ T9132] do_fast_syscall_32+0x32/0x80 [ 469.787549][ T9132] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.787565][ T9132] RIP: 0023:0xf7f62579 [ 469.787576][ T9132] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 469.787589][ T9132] RSP: 002b:00000000f5086590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 469.787602][ T9132] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5086620 [ 469.787611][ T9132] RDX: 000000000000000f RSI: 00000000f73f2ff4 RDI: 0000000000000000 [ 469.787619][ T9132] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 469.787626][ T9132] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 469.787634][ T9132] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.787651][ T9132] [ 470.007089][ T6005] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 470.084465][ T9125] bridge_slave_1: left allmulticast mode [ 470.087938][ T9125] bridge_slave_1: left promiscuous mode [ 470.092698][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.106992][ T6005] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 470.113701][ T6005] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 470.207663][ T6005] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 470.211666][ T6005] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 470.233096][ T6005] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 470.237969][ T6005] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 470.241966][ T6005] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 470.262870][ T6005] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 470.266190][ T6005] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 470.269276][ T6005] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 470.310576][ T9125] bond0: (slave bond_slave_0): Releasing backup interface [ 470.604484][ T6005] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 470.610969][ T6005] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 470.617053][ T6005] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 470.621829][ T6005] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 470.635198][ T9125] bond0: (slave bond_slave_1): Releasing backup interface [ 470.665410][ T6005] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 470.811188][ T6005] hid-generic FFF9:0000:0203.0003: hidraw1: HID v0.00 Device [syz0] on syz1 [ 470.955803][ T5971] Bluetooth: hci1: command tx timeout [ 471.003813][ T9125] team0: Port device team_slave_0 removed [ 471.030455][ T9125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.041904][ T9125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.244456][ T9125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.247408][ T9125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.457011][ T9144] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 471.462092][ T9144] netlink: 'syz.4.640': attribute type 4 has an invalid length. [ 471.473096][ T9144] netlink: 212 bytes leftover after parsing attributes in process `syz.4.640'. [ 471.722377][ T9154] input: syz0 as /devices/virtual/input/input12 [ 471.878666][ T9080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.882905][ T9080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.964444][ T9080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.989084][ T9080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.994875][ T9080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.038406][ T9080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.295131][ T9080] hsr_slave_0: entered promiscuous mode [ 472.298225][ T9080] hsr_slave_1: entered promiscuous mode [ 472.304998][ T9080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.308699][ T9080] Cannot create hsr debugfs directory [ 472.648611][ T9172] FAULT_INJECTION: forcing a failure. [ 472.648611][ T9172] name failslab, interval 1, probability 0, space 0, times 0 [ 472.702586][ T9172] CPU: 1 UID: 0 PID: 9172 Comm: syz.5.646 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 472.702613][ T9172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 472.702625][ T9172] Call Trace: [ 472.702631][ T9172] [ 472.702638][ T9172] dump_stack_lvl+0x16c/0x1f0 [ 472.702668][ T9172] should_fail_ex+0x512/0x640 [ 472.702687][ T9172] ? __kmalloc_noprof+0xbf/0x510 [ 472.702710][ T9172] ? ovl_alloc_entry+0x21/0x70 [ 472.702725][ T9172] should_failslab+0xc2/0x120 [ 472.702766][ T9172] __kmalloc_noprof+0xd2/0x510 [ 472.702786][ T9172] ? trace_kmalloc+0x2b/0xd0 [ 472.702815][ T9172] ovl_alloc_entry+0x21/0x70 [ 472.702833][ T9172] ovl_lookup+0x842/0x2270 [ 472.702856][ T9172] ? __pfx_ovl_lookup+0x10/0x10 [ 472.702870][ T9172] ? __lock_acquire+0xaa4/0x1ba0 [ 472.702909][ T9172] ? do_raw_spin_lock+0x12c/0x2b0 [ 472.702923][ T9172] ? find_held_lock+0x2b/0x80 [ 472.702944][ T9172] ? do_raw_spin_unlock+0x172/0x230 [ 472.702960][ T9172] ? _raw_spin_unlock+0x28/0x50 [ 472.702984][ T9172] lookup_one_qstr_excl_raw.part.0+0xec/0x160 [ 472.703006][ T9172] ? lookup_dcache+0x66/0x170 [ 472.703031][ T9172] lookup_one_qstr_excl+0x3e/0x120 [ 472.703056][ T9172] do_renameat2+0x5aa/0xc90 [ 472.703083][ T9172] ? __pfx_do_renameat2+0x10/0x10 [ 472.703102][ T9172] ? find_held_lock+0x2b/0x80 [ 472.703116][ T9172] ? __might_fault+0xe3/0x190 [ 472.703134][ T9172] ? __might_fault+0x13b/0x190 [ 472.703166][ T9172] ? getname_flags.part.0+0x1c5/0x550 [ 472.703193][ T9172] __ia32_sys_renameat2+0xe7/0x130 [ 472.703267][ T9172] __do_fast_syscall_32+0x73/0x120 [ 472.703296][ T9172] do_fast_syscall_32+0x32/0x80 [ 472.703320][ T9172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 472.703341][ T9172] RIP: 0023:0xf7f62579 [ 472.703354][ T9172] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 472.703370][ T9172] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000161 [ 472.703387][ T9172] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000a00 [ 472.703399][ T9172] RDX: 00000000ffffff9c RSI: 0000000080000600 RDI: 0000000000000002 [ 472.703408][ T9172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 472.703415][ T9172] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 472.703426][ T9172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 472.703448][ T9172] [ 473.034087][ T5971] Bluetooth: hci1: command tx timeout [ 473.058897][ T9182] FAULT_INJECTION: forcing a failure. [ 473.058897][ T9182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.067735][ T9182] CPU: 3 UID: 0 PID: 9182 Comm: syz.6.649 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 473.067759][ T9182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 473.067769][ T9182] Call Trace: [ 473.067775][ T9182] [ 473.067782][ T9182] dump_stack_lvl+0x16c/0x1f0 [ 473.067812][ T9182] should_fail_ex+0x512/0x640 [ 473.067836][ T9182] _copy_to_user+0x32/0xd0 [ 473.067860][ T9182] simple_read_from_buffer+0xcb/0x170 [ 473.067888][ T9182] proc_fail_nth_read+0x197/0x270 [ 473.067919][ T9182] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 473.067945][ T9182] ? rw_verify_area+0xcf/0x680 [ 473.067970][ T9182] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 473.067995][ T9182] vfs_read+0x1de/0xc70 [ 473.068016][ T9182] ? __pfx___mutex_lock+0x10/0x10 [ 473.068041][ T9182] ? __pfx_vfs_read+0x10/0x10 [ 473.068063][ T9182] ? __fget_files+0x20e/0x3c0 [ 473.068088][ T9182] ksys_read+0x12a/0x240 [ 473.068119][ T9182] ? __pfx_ksys_read+0x10/0x10 [ 473.068140][ T9182] ? rcu_is_watching+0x12/0xc0 [ 473.068160][ T9182] __do_fast_syscall_32+0x73/0x120 [ 473.068187][ T9182] do_fast_syscall_32+0x32/0x80 [ 473.068212][ T9182] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 473.068232][ T9182] RIP: 0023:0xf70ae579 [ 473.068246][ T9182] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 473.068262][ T9182] RSP: 002b:00000000f509e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 473.068279][ T9182] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f509e620 [ 473.068289][ T9182] RDX: 000000000000000f RSI: 00000000f7412ff4 RDI: 0000000000000000 [ 473.068299][ T9182] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 473.068308][ T9182] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 473.068318][ T9182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 473.068340][ T9182] [ 473.174468][ T9173] netlink: 32 bytes leftover after parsing attributes in process `syz.4.645'. [ 473.249430][ T9192] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 473.324247][ T9190] usb 2-1: USB disconnect, device number 2 [ 473.436419][ T9080] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.739683][ T9080] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.837052][ T9214] 9p: Unknown Cache mode or invalid value fscacher0 [ 474.468862][ T9080] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.536202][ T9231] netlink: 12 bytes leftover after parsing attributes in process `syz.5.661'. [ 474.810025][ T9080] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.061722][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.666'. [ 475.073878][ T9252] netlink: 24 bytes leftover after parsing attributes in process `syz.5.666'. [ 475.121495][ T5971] Bluetooth: hci1: command tx timeout [ 475.583819][ T9080] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 475.696241][ T9080] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 475.733380][ T9080] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 475.745603][ T9080] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 476.017353][ C2] vkms_vblank_simulate: vblank timer overrun [ 476.101130][ C2] vkms_vblank_simulate: vblank timer overrun [ 476.123409][ T9080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.237709][ T9080] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.356285][ T9288] fuse: Bad value for 'fd' [ 476.427562][ T7621] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.451394][ T7621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.559796][ T7625] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.562874][ T7625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.738666][ T9080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 477.185676][ C2] vkms_vblank_simulate: vblank timer overrun [ 477.250037][ C2] vkms_vblank_simulate: vblank timer overrun [ 477.453418][ C2] vkms_vblank_simulate: vblank timer overrun [ 477.576089][ T9080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.693963][ T9080] veth0_vlan: entered promiscuous mode [ 477.715242][ T9080] veth1_vlan: entered promiscuous mode [ 477.793449][ T9321] netlink: 'syz.5.676': attribute type 8 has an invalid length. [ 477.917873][ T9080] veth0_macvtap: entered promiscuous mode [ 477.931939][ T9080] veth1_macvtap: entered promiscuous mode [ 477.986623][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.026152][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.031284][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.041464][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.047048][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.051247][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.055660][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.060179][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.067737][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.078067][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.084834][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.091601][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.098188][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.106689][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.116460][ T9080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.135397][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.141212][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.152681][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.162085][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.174049][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.180467][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.198045][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.202296][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.207173][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.211608][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.216410][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.220665][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.224972][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.229418][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.244006][ T9080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.253189][ T9080] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.257951][ T9080] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.262297][ T9080] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.267319][ T9080] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.511250][ T9342] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 478.669291][ C2] vkms_vblank_simulate: vblank timer overrun [ 479.074660][ T9342] /dev/sr0: Can't open blockdev [ 479.121560][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.125517][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.164816][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.168175][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.395032][ T9344] /dev/sr0: Can't open blockdev [ 479.880371][ T9372] No control pipe specified [ 480.217417][ C2] vkms_vblank_simulate: vblank timer overrun [ 480.329426][ C2] vkms_vblank_simulate: vblank timer overrun [ 480.512219][ C2] vkms_vblank_simulate: vblank timer overrun [ 481.515087][ T9402] FAULT_INJECTION: forcing a failure. [ 481.515087][ T9402] name failslab, interval 1, probability 0, space 0, times 0 [ 481.566415][ T9402] CPU: 1 UID: 0 PID: 9402 Comm: syz.6.684 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 481.566443][ T9402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 481.566453][ T9402] Call Trace: [ 481.566460][ T9402] [ 481.566652][ T9402] dump_stack_lvl+0x16c/0x1f0 [ 481.566720][ T9402] should_fail_ex+0x512/0x640 [ 481.566739][ T9402] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 481.573386][ T9402] should_failslab+0xc2/0x120 [ 481.573413][ T9402] __kmalloc_cache_noprof+0x6a/0x3e0 [ 481.573431][ T9402] ? netdevice_event+0x365/0x9d0 [ 481.573450][ T9402] netdevice_event+0x365/0x9d0 [ 481.573468][ T9402] ? __pfx_netdevice_event+0x10/0x10 [ 481.573483][ T9402] ? __pfx_del_netdev_default_ips_join+0x10/0x10 [ 481.573500][ T9402] ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10 [ 481.573518][ T9402] ? __pfx_add_default_gids+0x10/0x10 [ 481.573533][ T9402] ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10 [ 481.573549][ T9402] ? __pfx_add_netdev_ips+0x10/0x10 [ 481.573574][ T9402] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 481.573592][ T9402] ? wext_netdev_notifier_call+0xe/0x20 [ 481.573614][ T9402] ? cfg802154_netdev_notifier_call+0x391/0xa00 [ 481.573637][ T9402] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 481.573662][ T9402] notifier_call_chain+0xb9/0x410 [ 481.573682][ T9402] ? __pfx_netdevice_event+0x10/0x10 [ 481.573702][ T9402] call_netdevice_notifiers_info+0xbe/0x140 [ 481.573721][ T9402] __dev_notify_flags+0x12c/0x2e0 [ 481.573742][ T9402] ? __pfx___dev_notify_flags+0x10/0x10 [ 481.573760][ T9402] ? __dev_change_flags+0x3d5/0x720 [ 481.573783][ T9402] ? __pfx___dev_change_flags+0x10/0x10 [ 481.573802][ T9402] ? rcu_is_watching+0x12/0xc0 [ 481.573824][ T9402] netif_change_flags+0x108/0x160 [ 481.573848][ T9402] dev_change_flags+0xba/0x250 [ 481.573872][ T9402] devinet_ioctl+0x11d5/0x1f50 [ 481.573898][ T9402] ? __pfx_devinet_ioctl+0x10/0x10 [ 481.573919][ T9402] ? _copy_from_user+0x59/0xd0 [ 481.573942][ T9402] inet_ioctl+0x3a7/0x3f0 [ 481.573967][ T9402] ? __pfx_inet_ioctl+0x10/0x10 [ 481.573994][ T9402] ? kasan_quarantine_put+0x10a/0x240 [ 481.574024][ T9402] ? tomoyo_path_number_perm+0x18d/0x580 [ 481.574047][ T9402] packet_ioctl+0xb3/0x280 [ 481.574070][ T9402] sock_do_ioctl+0x115/0x280 [ 481.574094][ T9402] ? __pfx_sock_do_ioctl+0x10/0x10 [ 481.574129][ T9402] compat_sock_ioctl+0x301/0x730 [ 481.574147][ T9402] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 481.574167][ T9402] ? __fget_files+0x20e/0x3c0 [ 481.574179][ T9402] ? __fput_deferred+0x300/0x370 [ 481.574206][ T9402] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 481.574220][ T9402] __ia32_compat_sys_ioctl+0x24c/0x360 [ 481.574246][ T9402] __do_fast_syscall_32+0x73/0x120 [ 481.574270][ T9402] do_fast_syscall_32+0x32/0x80 [ 481.574292][ T9402] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 481.574312][ T9402] RIP: 0023:0xf70ae579 [ 481.574326][ T9402] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 481.574342][ T9402] RSP: 002b:00000000f509e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 481.574358][ T9402] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008914 [ 481.574369][ T9402] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 481.574378][ T9402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 481.574387][ T9402] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 481.574396][ T9402] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 481.574416][ T9402] [ 481.987662][ T8359] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 482.074360][ T5973] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 482.095363][ T5973] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 482.104440][ T5973] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 482.153432][ T5973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 482.157154][ T5973] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 482.175047][ T8359] usb 10-1: Using ep0 maxpacket: 8 [ 482.180626][ T8359] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 482.197354][ T8359] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 482.219064][ T8359] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 482.225920][ T8359] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 482.267801][ T8359] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.291008][ T8359] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 482.306010][ T8359] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.521657][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 482.537540][ T8359] usb 10-1: usb_control_msg returned -32 [ 482.540117][ T8359] usbtmc 10-1:16.0: can't read capabilities [ 482.542210][ T9419] chnl_net:caif_netlink_parms(): no params data found [ 482.754655][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 482.761572][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.776703][ T10] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 482.792458][ T10] usb 9-1: config 1 has no interface number 1 [ 482.804920][ T10] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 482.823663][ T10] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 7 [ 482.847767][ T10] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 482.851291][ T10] usb 9-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 482.854628][ T10] usb 9-1: Product: syz [ 482.856265][ T10] usb 9-1: Manufacturer: syz [ 482.861747][ T10] usb 9-1: SerialNumber: syz [ 482.894303][ T9443] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 482.902962][ T9419] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.907294][ T9419] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.911527][ T9419] bridge_slave_0: entered allmulticast mode [ 482.929645][ T9419] bridge_slave_0: entered promiscuous mode [ 482.936427][ T9419] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.939913][ T9419] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.943905][ T9419] bridge_slave_1: entered allmulticast mode [ 482.947132][ T9419] bridge_slave_1: entered promiscuous mode [ 483.049638][ T9419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.107776][ T10] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 483.116448][ T9419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.134029][ T10] usb 9-1: 2:1 : format type 23 is not supported yet [ 483.152193][ T10] usb 9-1: USB disconnect, device number 2 [ 483.223579][ T8458] udevd[8458]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.347361][ T9419] team0: Port device team_slave_0 added [ 483.377456][ T9419] team0: Port device team_slave_1 added [ 483.397940][ T143] usb 10-1: USB disconnect, device number 4 [ 483.570758][ T9419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.579004][ T9419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.609148][ T9419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.616130][ T9419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.636801][ T9419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.660776][ T9419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.802343][ T9419] hsr_slave_0: entered promiscuous mode [ 483.807092][ T9419] hsr_slave_1: entered promiscuous mode [ 483.810293][ T9419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.814029][ T9419] Cannot create hsr debugfs directory [ 483.903118][ T1332] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 483.994314][ T9419] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.073016][ T1332] usb 9-1: Using ep0 maxpacket: 16 [ 484.082563][ T1332] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.088301][ T9419] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.092265][ T1332] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.096279][ T1332] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 484.100897][ T1332] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 484.104320][ T1332] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.108844][ T1332] usb 9-1: config 0 descriptor?? [ 484.187799][ T9419] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.243628][ T5971] Bluetooth: hci1: command tx timeout [ 484.262485][ T9419] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.402099][ T9419] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 484.409489][ T9419] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 484.415626][ T9419] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 484.421893][ T9419] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 484.500179][ T9419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.516892][ T9419] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.524954][ T1332] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 484.525783][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.527881][ T1332] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 484.530733][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.534891][ T1332] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 484.539594][ T1332] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 484.542645][ T1332] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 484.546484][ T1332] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 484.548318][ T481] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.549646][ T1332] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 484.552544][ T481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.555771][ T1332] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 484.561844][ T1332] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 484.564868][ T1332] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 484.585758][ T1332] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:045E:07DA.0004/input/input13 [ 484.601248][ T1332] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 484.633616][ T5973] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 484.709303][ T9419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.733222][ T1332] usb 9-1: USB disconnect, device number 3 [ 484.737747][ T9419] veth0_vlan: entered promiscuous mode [ 484.745974][ T9419] veth1_vlan: entered promiscuous mode [ 484.765587][ T9419] veth0_macvtap: entered promiscuous mode [ 484.782582][ T9419] veth1_macvtap: entered promiscuous mode [ 484.792468][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.797281][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.800831][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.804901][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.808044][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.811346][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.814689][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.817979][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.820969][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.824914][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.828804][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.833402][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.836810][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.840747][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.844762][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.848363][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.852366][ T9419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.859098][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.862438][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.866217][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.869944][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.873525][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.877014][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.880017][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.883354][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.886500][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.889864][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.893904][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.898050][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.902025][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.906637][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.910174][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.914273][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.919305][ T9419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.935426][ T9419] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.938226][ T9419] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.940953][ T9419] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.944043][ T9419] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.003570][ T481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.006066][ T481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.010864][ T481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.014213][ T481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.799325][ T40] audit: type=1326 audit(1745227487.741:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.701" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 485.811090][ T40] audit: type=1326 audit(1745227487.751:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.701" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 485.828222][ T40] audit: type=1326 audit(1745227487.751:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.701" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 485.842892][ T40] audit: type=1326 audit(1745227487.751:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.701" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 485.851357][ T40] audit: type=1326 audit(1745227487.751:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.701" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 485.866242][ T40] audit: type=1326 audit(1745227487.751:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.701" exe="/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 485.875483][ T40] audit: type=1326 audit(1745227487.751:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.701" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 485.893061][ T40] audit: type=1326 audit(1745227487.751:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.701" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 485.901899][ T40] audit: type=1326 audit(1745227487.751:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.701" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 485.909991][ T40] audit: type=1326 audit(1745227487.751:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.701" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 486.162984][ T1332] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 486.315866][ T1332] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.320064][ T1332] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 486.324845][ T1332] usb 11-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 486.328051][ T1332] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 486.330583][ T1332] usb 11-1: SerialNumber: syz [ 486.543853][ T1332] usb 11-1: 0:2 : does not exist [ 486.581670][ T1332] usb 11-1: USB disconnect, device number 5 [ 486.585533][ T9510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 486.774446][ T8458] udevd[8458]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.902933][ T1323] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 487.032869][ T9] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 487.052869][ T1323] usb 10-1: Using ep0 maxpacket: 8 [ 487.056470][ T1323] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 487.060381][ T1323] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.067695][ T1323] usb 10-1: config 0 descriptor?? [ 487.184319][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.188478][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 487.193270][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 487.197217][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 487.203816][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 487.206682][ T9] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 487.209372][ T9] usb 9-1: Manufacturer: syz [ 487.212118][ T9] usb 9-1: config 0 descriptor?? [ 487.274799][ T1323] asix 10-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 487.462891][ T9] rc_core: IR keymap rc-hauppauge not found [ 487.464759][ T9] Registered IR keymap rc-empty [ 487.466514][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 487.482935][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 487.504539][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 487.511128][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input14 [ 487.520888][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 487.543199][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 487.562963][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 487.582909][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 487.602895][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 487.622920][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 487.642987][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 487.662866][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 487.682940][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 487.702890][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 487.724144][ T9] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 487.727059][ T9] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 487.857875][ T9] usb 9-1: USB disconnect, device number 4 [ 487.968180][ T5971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 487.971629][ T5971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 487.976118][ T5971] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 487.979931][ T5971] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 487.987913][ T5971] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 488.135441][ T9526] chnl_net:caif_netlink_parms(): no params data found [ 488.250453][ T9526] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.255101][ T9526] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.258167][ T9526] bridge_slave_0: entered allmulticast mode [ 488.262168][ T9526] bridge_slave_0: entered promiscuous mode [ 488.266877][ T9526] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.269703][ T9526] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.272028][ T9526] bridge_slave_1: entered allmulticast mode [ 488.275647][ T9526] bridge_slave_1: entered promiscuous mode [ 488.317295][ T9526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.325890][ T9526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.402398][ T9526] team0: Port device team_slave_0 added [ 488.408107][ T9526] team0: Port device team_slave_1 added [ 488.466349][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.468862][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.478345][ T9526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.480583][ T9537] netlink: 192 bytes leftover after parsing attributes in process `syz.4.712'. [ 488.483976][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.488295][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.498160][ T9526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.551068][ T9526] hsr_slave_0: entered promiscuous mode [ 488.553554][ T1323] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 488.558191][ T9526] hsr_slave_1: entered promiscuous mode [ 488.560748][ T9526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.563803][ T1323] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 488.568121][ T1323] asix 10-1:0.0: probe with driver asix failed with error -71 [ 488.572012][ T9526] Cannot create hsr debugfs directory [ 488.580858][ T1323] usb 10-1: USB disconnect, device number 5 [ 488.696178][ T9526] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.789952][ T9526] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.870828][ T9526] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.950223][ T9526] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.113476][ T9526] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 489.154131][ T9526] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 489.161258][ T9526] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 489.168846][ T9526] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 489.232221][ T9526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.256010][ T9526] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.270405][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.273584][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.296281][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.298648][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.610627][ T9526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.657709][ T9526] veth0_vlan: entered promiscuous mode [ 489.664414][ T9526] veth1_vlan: entered promiscuous mode [ 489.693457][ T9526] veth0_macvtap: entered promiscuous mode [ 489.699891][ T9526] veth1_macvtap: entered promiscuous mode [ 489.711678][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.715287][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.718266][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.721479][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.725243][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.728415][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.731444][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.740674][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.744121][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.747342][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.750347][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.753898][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.756894][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.760107][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.763223][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.766573][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.769648][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.773080][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.777025][ T9526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.786023][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.789258][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.792251][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.796889][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.799848][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.803847][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.806873][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.810070][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.814007][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.817221][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.820283][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.823775][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.826881][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.830155][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.833725][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.836872][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.839886][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.844075][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.847890][ T9526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.855710][ T9526] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.858386][ T9526] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.861044][ T9526] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.864016][ T9526] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.908352][ T481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.910918][ T481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.935932][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.938735][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.030693][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 490.036488][ T9] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 490.091357][ T9558] tipc: Started in network mode [ 490.093691][ T9558] tipc: Node identity a64515d08bea, cluster identity 4711 [ 490.096376][ T9558] tipc: Enabled bearer , priority 0 [ 490.133539][ T9558] syzkaller0: entered promiscuous mode [ 490.135907][ T9558] syzkaller0: entered allmulticast mode [ 490.138850][ T9558] tipc: Resetting bearer [ 490.147697][ T9557] tipc: Resetting bearer [ 491.154259][ T6016] tipc: Node number set to 766449104 [ 491.205566][ T9557] tipc: Disabling bearer [ 491.307497][ T9575] sctp: [Deprecated]: syz.4.722 (pid 9575) Use of int in max_burst socket option deprecated. [ 491.307497][ T9575] Use struct sctp_assoc_value instead [ 491.742985][ T1323] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 491.893243][ T1323] usb 11-1: Using ep0 maxpacket: 16 [ 491.903551][ T1323] usb 11-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 491.906909][ T1323] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 491.912337][ T1323] usb 11-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 491.919614][ T1323] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.922285][ T1323] usb 11-1: Product: syz [ 491.924080][ T1323] usb 11-1: Manufacturer: syz [ 491.925611][ T1323] usb 11-1: SerialNumber: syz [ 492.141583][ T1323] usb 11-1: 0:2 : does not exist [ 492.149243][ T1323] usb 11-1: 5:0: failed to get current value for ch 0 (-22) [ 492.183146][ T1323] usb 11-1: USB disconnect, device number 6 [ 492.374190][ T8458] udevd[8458]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.764415][ T5973] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 492.768418][ T5973] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 492.768997][ T9604] loop2: detected capacity change from 0 to 7 [ 492.772003][ T5973] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 492.776619][ T5973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 492.779634][ T5973] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.787527][ T9604] Dev loop2: unable to read RDB block 7 [ 492.792408][ T9604] loop2: unable to read partition table [ 492.796965][ T9604] loop2: partition table beyond EOD, truncated [ 492.802258][ T9604] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 492.895603][ T24] kernel write not supported for file /input/event2 (pid: 24 comm: kworker/2:0) [ 492.992493][ T9600] chnl_net:caif_netlink_parms(): no params data found [ 493.148104][ T9600] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.150478][ T9600] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.152693][ T9600] bridge_slave_0: entered allmulticast mode [ 493.155456][ T9600] bridge_slave_0: entered promiscuous mode [ 493.160670][ T9600] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.163732][ T9600] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.166586][ T9600] bridge_slave_1: entered allmulticast mode [ 493.169073][ T9600] bridge_slave_1: entered promiscuous mode [ 493.202327][ T9600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.207753][ T9600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.258079][ T9600] team0: Port device team_slave_0 added [ 493.261834][ T9600] team0: Port device team_slave_1 added [ 493.292386][ T9600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.294752][ T9600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.302424][ T9600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.306652][ T9600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.308858][ T9600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.316574][ T9600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.354765][ T9600] hsr_slave_0: entered promiscuous mode [ 493.356964][ T9600] hsr_slave_1: entered promiscuous mode [ 493.358985][ T9600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.361274][ T9600] Cannot create hsr debugfs directory [ 493.456976][ T9600] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.587119][ T9600] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.677820][ T9600] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.745979][ T9600] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.808588][ T1323] IPVS: starting estimator thread 0... [ 493.850282][ T9600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 493.856469][ T9600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 493.860305][ T9600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 493.864358][ T9600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 493.895904][ T9632] IPVS: using max 46 ests per chain, 110400 per kthread [ 493.909498][ T9600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.923500][ T9600] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.929659][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.932575][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.940979][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.943277][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.977449][ T9634] netlink: 28 bytes leftover after parsing attributes in process `syz.5.737'. [ 494.074145][ T9600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.096017][ T9600] veth0_vlan: entered promiscuous mode [ 494.107976][ T9600] veth1_vlan: entered promiscuous mode [ 494.122633][ T9600] veth0_macvtap: entered promiscuous mode [ 494.127634][ T9600] veth1_macvtap: entered promiscuous mode [ 494.136905][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.140092][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.144024][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.144770][ T9644] netlink: 176 bytes leftover after parsing attributes in process `syz.5.738'. [ 494.147421][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.155386][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.158660][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.161847][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.168445][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.171406][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.174896][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.178046][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.181201][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.186112][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.189347][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.192274][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.195479][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.198437][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.201520][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.205035][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.208154][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.212263][ T9600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.224091][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.227561][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.230921][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.235975][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.239040][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.242251][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.246735][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.250771][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.254900][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.258993][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.262870][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.267006][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.270759][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.275332][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.279110][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.283295][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.288199][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.292292][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.297227][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.300634][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.306527][ T9600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.312890][ T9600] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.315759][ T9600] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.318562][ T9600] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.321450][ T9600] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.371947][ T1193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.378920][ T1193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.393948][ T7625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.397034][ T7625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.412951][ T1323] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 494.573105][ T1323] usb 11-1: Using ep0 maxpacket: 16 [ 494.578760][ T1323] usb 11-1: config 252 has an invalid interface number: 15 but max is 0 [ 494.581256][ T1323] usb 11-1: config 252 has no interface number 0 [ 494.583866][ T1323] usb 11-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 494.591158][ T1323] usb 11-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 494.594774][ T1323] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.597365][ T1323] usb 11-1: Product: syz [ 494.599138][ T1323] usb 11-1: Manufacturer: syz [ 494.601055][ T1323] usb 11-1: SerialNumber: syz [ 494.616337][ T1323] usb 11-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 494.811468][ T7615] usb 11-1: Failed to submit usb control message: -71 [ 494.811718][ T1323] usb 11-1: USB disconnect, device number 7 [ 494.814481][ T7615] usb 11-1: unable to send the bmi data to the device: -71 [ 494.818132][ T7615] usb 11-1: unable to get target info from device [ 494.820868][ T7615] usb 11-1: could not get target info (-71) [ 494.823317][ T7615] usb 11-1: could not probe fw (-71) [ 495.685340][ T9662] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 495.687505][ T9662] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 495.692059][ T9662] vhci_hcd vhci_hcd.0: Device attached [ 495.697839][ T9663] vhci_hcd: cannot find the pending unlink 5 [ 495.701552][ T9663] vhci_hcd: connection closed [ 495.703413][ T7625] vhci_hcd: stop threads [ 495.707971][ T7625] vhci_hcd: release socket [ 495.709827][ T7625] vhci_hcd: disconnect device [ 496.532933][ T143] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 496.694922][ T143] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 496.697977][ T143] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.701955][ T143] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 496.705133][ T143] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.913755][ T143] usb 9-1: usb_control_msg returned -32 [ 496.915527][ T143] usbtmc 9-1:16.0: can't read capabilities [ 497.472727][ T5384] usb 9-1: USB disconnect, device number 5 [ 497.494807][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 497.494821][ T40] audit: type=1326 audit(1745227499.441:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.5.749" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62579 code=0x0 [ 497.625953][ T5973] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 497.631233][ T5973] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 497.636564][ T5973] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 497.640915][ T5973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 497.647760][ T5973] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 497.656912][ T9682] ubi31: attaching mtd0 [ 497.660502][ T9682] ubi31: scanning is finished [ 497.724360][ T9682] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 497.727454][ T9682] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 497.730220][ T9682] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 497.732500][ T9682] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 497.737244][ T9682] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 497.739764][ T9682] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 497.742902][ T9682] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 750730038 [ 497.748218][ T9682] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 497.754273][ T9685] ubi31: background thread "ubi_bgt31d" started, PID 9685 [ 497.778071][ T9680] chnl_net:caif_netlink_parms(): no params data found [ 497.911050][ T9680] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.913729][ T9680] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.916439][ T9680] bridge_slave_0: entered allmulticast mode [ 497.920070][ T9680] bridge_slave_0: entered promiscuous mode [ 497.924668][ T9680] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.927086][ T9680] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.929311][ T9680] bridge_slave_1: entered allmulticast mode [ 497.931833][ T9680] bridge_slave_1: entered promiscuous mode [ 497.972008][ T9680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.976957][ T9680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.034193][ T9680] team0: Port device team_slave_0 added [ 498.038721][ T9680] team0: Port device team_slave_1 added [ 498.077284][ T9680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.079369][ T9680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.087121][ T9680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.091233][ T9680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.093344][ T9680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.100820][ T9680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.188343][ T9680] hsr_slave_0: entered promiscuous mode [ 498.191413][ T9680] hsr_slave_1: entered promiscuous mode [ 498.195229][ T9680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.198371][ T9680] Cannot create hsr debugfs directory [ 498.475168][ T9680] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.551540][ T9680] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.627950][ T9680] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.708749][ T9680] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.742857][ T1323] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 498.871791][ T9680] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 498.876362][ T9680] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 498.881141][ T9680] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 498.886159][ T9680] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 498.902871][ T1323] usb 10-1: Using ep0 maxpacket: 16 [ 498.906974][ T1323] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.911177][ T1323] usb 10-1: config 0 has no interfaces? [ 498.914894][ T1323] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 498.917840][ T1323] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.920649][ T1323] usb 10-1: Product: syz [ 498.922303][ T1323] usb 10-1: Manufacturer: syz [ 498.924520][ T1323] usb 10-1: SerialNumber: syz [ 498.928883][ T1323] usb 10-1: config 0 descriptor?? [ 498.943469][ T9680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.955333][ T9680] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.960855][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.963813][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.978683][ T481] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.980706][ T481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.205376][ T9680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.229101][ T9712] netlink: 252 bytes leftover after parsing attributes in process `syz.4.756'. [ 499.232434][ T9712] netlink: 248 bytes leftover after parsing attributes in process `syz.4.756'. [ 499.247625][ T9712] unsupported nlmsg_type 40 [ 499.247721][ T9680] veth0_vlan: entered promiscuous mode [ 499.259340][ T9680] veth1_vlan: entered promiscuous mode [ 499.281362][ T9680] veth0_macvtap: entered promiscuous mode [ 499.286355][ T9680] veth1_macvtap: entered promiscuous mode [ 499.298513][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.303477][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.307430][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.311322][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.316473][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.320732][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.325726][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.329946][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.334107][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.338526][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.342646][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.355140][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.359268][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.369312][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.375879][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.380312][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.389837][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.394422][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.398360][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.402348][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.412921][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.417117][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.422117][ T9680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.429728][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.433932][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.436936][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.440040][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.443564][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.447007][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.449862][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.453593][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.456814][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.460131][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.463155][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.467032][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.470196][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.474203][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.478124][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.481938][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.485111][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.488200][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.491272][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.494777][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.497920][ T9680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.501204][ T9680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.507315][ T9680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.523078][ T9680] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.526314][ T9680] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.529219][ T9680] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.531921][ T9680] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.576244][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.588734][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.617199][ T7625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.619685][ T7625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.673848][ T5973] Bluetooth: hci1: command tx timeout [ 499.692918][ T10] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 499.843734][ T10] usb 11-1: Using ep0 maxpacket: 16 [ 499.857482][ T10] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 499.861740][ T10] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 499.871072][ T10] usb 11-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 499.874614][ T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.877731][ T10] usb 11-1: Product: syz [ 499.879016][ T10] usb 11-1: Manufacturer: syz [ 499.880438][ T10] usb 11-1: SerialNumber: syz [ 499.885169][ T10] usb 11-1: config 0 descriptor?? [ 499.989148][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 499.995225][ T9724] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.998160][ T9724] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.144214][ T10] appledisplay 11-1:0.0: Error while getting initial brightness: -110 [ 500.154011][ T10] appledisplay 11-1:0.0: probe with driver appledisplay failed with error -110 [ 500.623895][ T9737] veth0_to_team: entered promiscuous mode [ 500.625895][ T9737] veth0_to_team: entered allmulticast mode [ 500.956826][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.958961][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.501346][ T24] usb 10-1: USB disconnect, device number 6 [ 501.604134][ T5384] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 501.763046][ T5384] usb 9-1: Using ep0 maxpacket: 8 [ 501.779510][ T5384] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 501.783765][ T5384] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.787586][ T5384] usb 9-1: Product: syz [ 501.789747][ T5384] usb 9-1: Manufacturer: syz [ 501.791982][ T5384] usb 9-1: SerialNumber: syz [ 501.806227][ T5384] usb 9-1: config 0 descriptor?? [ 501.817449][ T5384] gspca_main: se401-2.14.0 probing 047d:5003 [ 502.265913][ T10] usb 11-1: USB disconnect, device number 8 [ 502.428599][ T5384] input: se401 as /devices/platform/dummy_hcd.4/usb9/9-1/input/input16 [ 502.460256][ T5384] usb 9-1: USB disconnect, device number 6 [ 503.561339][ T9759] netlink: 164 bytes leftover after parsing attributes in process `syz.6.769'. [ 504.602463][ T9764] syz.6.771 (9764): drop_caches: 2 [ 504.650457][ T9764] syz.6.771 (9764): drop_caches: 2 [ 505.331199][ T9777] netlink: 'syz.4.775': attribute type 10 has an invalid length. [ 505.341741][ T9777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.775'. [ 505.353512][ T9777] bridge0: port 3(macvlan1) entered blocking state [ 505.357114][ T9777] bridge0: port 3(macvlan1) entered disabled state [ 505.360436][ T9777] macvlan1: entered allmulticast mode [ 505.362525][ T9777] veth1_vlan: entered allmulticast mode [ 505.367327][ T9777] macvlan1: entered promiscuous mode [ 505.961080][ T9785] ptrace attach of "/syz-executor exec"[8414] was attempted by "/syz-executor exec"[9785] [ 506.452846][ T8359] usb 11-1: new full-speed USB device number 9 using dummy_hcd [ 506.609882][ T8359] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.613620][ T8359] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 506.617343][ T8359] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65296, setting to 64 [ 506.620880][ T8359] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 506.629560][ T8359] usb 11-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 506.632931][ T8359] usb 11-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 506.635853][ T8359] usb 11-1: Manufacturer: syz [ 506.640142][ T8359] usb 11-1: config 0 descriptor?? [ 506.906675][ T8359] rc_core: IR keymap rc-hauppauge not found [ 506.913328][ T8359] Registered IR keymap rc-empty [ 506.923143][ T8359] mceusb 11-1:0.0: Error: mce write urb status = -71 [ 506.944436][ T8359] mceusb 11-1:0.0: Error: mce write urb status = -71 [ 506.965311][ T8359] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 506.969735][ T8359] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input17 [ 506.998208][ T8359] mceusb 11-1:0.0: Error: mce write urb status = -71 [ 507.014222][ T8359] mceusb 11-1:0.0: Error: mce write urb status = -71 [ 507.033480][ T8359] mceusb 11-1:0.0: Error: mce write urb status = -71 [ 507.053514][ T8359] mceusb 11-1:0.0: Error: mce write urb status = -71 [ 507.075384][ T8359] mceusb 11-1:0.0: Error: mce write urb status = -71 [ 507.093142][ T8359] mceusb 11-1:0.0: Error: mce write urb status = -71 [ 507.114427][ T8359] mceusb 11-1:0.0: Error: mce write urb status = -71 [ 507.133923][ T8359] mceusb 11-1:0.0: Error: mce write urb status = -71 [ 507.153635][ T8359] mceusb 11-1:0.0: Error: mce write urb status = -71 [ 507.173295][ T8359] mceusb 11-1:0.0: Error: mce write urb status = -71 [ 507.204054][ T8359] mceusb 11-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 507.207294][ T8359] mceusb 11-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 507.308911][ T9787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.318681][ T9787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.326166][ T9787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.332720][ T9787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.337636][ T8359] usb 11-1: USB disconnect, device number 9 [ 507.953666][ T9811] »»»»»»: renamed from lo (while UP) [ 508.873796][ T9820] trusted_key: encrypted_key: insufficient parameters specified [ 509.351735][ T9832] input: syz1 as /devices/virtual/input/input18 [ 509.604666][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.797'. [ 510.952956][ T9862] netlink: 72 bytes leftover after parsing attributes in process `syz.6.807'. [ 510.961533][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.6.807'. [ 510.987845][ T9862] syz.6.807 (9862) used greatest stack depth: 20392 bytes left [ 511.243268][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.812'. [ 512.971651][ T9904] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 516.112861][ T6043] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 516.272853][ T6043] usb 11-1: Using ep0 maxpacket: 16 [ 516.282694][ T6043] usb 11-1: config 0 has an invalid interface number: 214 but max is 0 [ 516.286361][ T6043] usb 11-1: config 0 has no interface number 0 [ 516.288980][ T6043] usb 11-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 516.295657][ T6043] usb 11-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 516.299459][ T6043] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.322891][ T6043] usb 11-1: Product: syz [ 516.324822][ T6043] usb 11-1: Manufacturer: syz [ 516.326497][ T6043] usb 11-1: SerialNumber: syz [ 516.344041][ T6043] usb 11-1: config 0 descriptor?? [ 516.494772][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.845'. [ 516.758385][ T6043] usbtouchscreen 11-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 516.765075][ T6043] usb 11-1: USB disconnect, device number 10 [ 516.767418][ T9972] IPv6: NLM_F_REPLACE set, but no existing node found! [ 517.474256][ T6043] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.480320][ T6043] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 517.559506][ T40] audit: type=1326 audit(1745227519.501:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.4.851" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 517.566704][ T40] audit: type=1326 audit(1745227519.501:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.4.851" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 517.572826][ T65] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 517.573874][ T40] audit: type=1326 audit(1745227519.501:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.4.851" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 517.582139][ T40] audit: type=1326 audit(1745227519.501:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.4.851" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 517.592272][ T40] audit: type=1326 audit(1745227519.501:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.4.851" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 517.599484][ T40] audit: type=1326 audit(1745227519.501:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.4.851" exe="/syz-executor" sig=0 arch=40000003 syscall=325 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 517.606278][ T40] audit: type=1326 audit(1745227519.501:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.4.851" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 517.612838][ T40] audit: type=1326 audit(1745227519.511:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.4.851" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 517.732899][ T65] usb 11-1: Using ep0 maxpacket: 32 [ 517.735798][ T65] usb 11-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 517.735815][ T65] usb 11-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.735827][ T65] usb 11-1: config 0 interface 0 has no altsetting 0 [ 517.735842][ T65] usb 11-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 517.735853][ T65] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.737880][ T65] usb 11-1: config 0 descriptor?? [ 517.802970][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 517.953188][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 517.958782][ T10] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 517.965823][ T10] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 517.969074][ T10] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 517.971824][ T10] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 517.974848][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 517.977792][ T10] usb 10-1: config 0 has no interface number 0 [ 517.979902][ T10] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 517.983538][ T10] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 517.986877][ T10] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 517.990095][ T10] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 517.994553][ T10] usb 10-1: config 0 interface 125 has no altsetting 0 [ 517.996772][ T10] usb 10-1: config 0 interface 125 has no altsetting 2 [ 518.002907][ T10] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 518.005952][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.008609][ T10] usb 10-1: Product: syz [ 518.010106][ T10] usb 10-1: Manufacturer: syz [ 518.011783][ T10] usb 10-1: SerialNumber: syz [ 518.017431][ T10] usb 10-1: config 0 descriptor?? [ 518.023544][ T10] usb 10-1: selecting invalid altsetting 2 [ 518.175792][ T65] pantherlord 0003:0810:0001.0007: item fetching failed at offset 0/5 [ 518.180144][ T65] pantherlord 0003:0810:0001.0007: parse failed [ 518.182279][ T65] pantherlord 0003:0810:0001.0007: probe with driver pantherlord failed with error -22 [ 518.225665][ C0] usb 10-1: async_complete: urb error -71 [ 518.227557][ C0] usb 10-1: async_complete: urb error -71 [ 518.229371][ C0] usb 10-1: async_complete: urb error -71 [ 518.231188][ C0] usb 10-1: async_complete: urb error -71 [ 518.240923][ T10] get_1284_register: usb error -71 [ 518.242659][ T10] uss720 10-1:0.125: probe with driver uss720 failed with error -71 [ 518.251511][ T10] usb 10-1: USB disconnect, device number 7 [ 518.374665][ T6478] usb 11-1: USB disconnect, device number 11 [ 518.762893][ T6016] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 518.912875][ T6016] usb 9-1: Using ep0 maxpacket: 16 [ 518.915807][ T6016] usb 9-1: config 0 has no interfaces? [ 518.919205][ T6016] usb 9-1: New USB device found, idVendor=05ac, idProduct=1226, bcdDevice=b2.89 [ 518.922139][ T6016] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.932814][ T6016] usb 9-1: Product: syz [ 518.934441][ T6016] usb 9-1: Manufacturer: syz [ 518.935965][ T6016] usb 9-1: SerialNumber: syz [ 518.938719][ T6016] apple-mfi-fastcharge 9-1: config 0 descriptor?? [ 519.292902][ T1332] apple-mfi-fastcharge 9-1: USB disconnect, device number 7 [ 519.768468][T10006] loop2: detected capacity change from 0 to 7 [ 519.777821][ T8458] Dev loop2: unable to read RDB block 7 [ 519.779770][ T8458] loop2: unable to read partition table [ 519.781727][ T8458] loop2: partition table beyond EOD, truncated [ 519.786897][T10006] Dev loop2: unable to read RDB block 7 [ 519.788758][T10006] loop2: unable to read partition table [ 519.790761][T10006] loop2: partition table beyond EOD, truncated [ 519.792739][T10006] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 519.841356][ T1332] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 519.847863][ T1332] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 520.002602][T10016] 9pnet_fd: Insufficient options for proto=fd [ 520.081760][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.861'. [ 520.838367][T10025] netlink: 332 bytes leftover after parsing attributes in process `syz.4.864'. [ 520.842218][T10025] netlink: 'syz.4.864': attribute type 9 has an invalid length. [ 520.845778][T10025] netlink: 108 bytes leftover after parsing attributes in process `syz.4.864'. [ 520.849411][T10025] netlink: 32 bytes leftover after parsing attributes in process `syz.4.864'. [ 521.202905][ T5973] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 521.335912][ T9999] sp0: Synchronizing with TNC [ 522.994245][ T40] audit: type=1326 audit(1745227524.941:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.6.875" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ae579 code=0x0 [ 523.186853][T10062] affs: No valid root block on device nullb0 [ 523.522964][T10000] Bluetooth: hci2: command 0x0406 tx timeout [ 523.887769][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.6.883'. [ 524.775568][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.885'. [ 524.778469][T10089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.848692][T10093] netlink: 'syz.5.887': attribute type 3 has an invalid length. [ 524.983345][T10105] syzkaller1: entered promiscuous mode [ 524.985273][T10105] syzkaller1: entered allmulticast mode [ 525.390203][ T40] audit: type=1804 audit(1745227527.331:52): pid=10119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.896" name="/newroot/98/file0" dev="tmpfs" ino=536 res=1 errno=0 [ 526.090280][T10131] netlink: 24 bytes leftover after parsing attributes in process `syz.5.898'. [ 526.093370][T10131] netlink: 56 bytes leftover after parsing attributes in process `syz.5.898'. [ 526.096310][T10131] netlink: 'syz.5.898': attribute type 10 has an invalid length. [ 526.886141][ T1323] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 526.889837][ T1323] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 527.124893][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.906'. [ 527.612899][ T6478] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 527.764560][ T6478] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 527.767868][ T6478] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 527.771842][ T6478] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 527.775101][ T6478] usb 10-1: config 220 has no interface number 2 [ 527.777134][ T6478] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 527.781251][ T6478] usb 10-1: config 220 interface 0 has no altsetting 0 [ 527.783566][ T6478] usb 10-1: config 220 interface 76 has no altsetting 0 [ 527.785735][ T6478] usb 10-1: config 220 interface 1 has no altsetting 0 [ 527.789522][ T6478] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 527.792413][ T6478] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.795320][ T6478] usb 10-1: Product: syz [ 527.796684][ T6478] usb 10-1: Manufacturer: syz [ 527.798182][ T6478] usb 10-1: SerialNumber: syz [ 528.007341][ T6478] usb 10-1: selecting invalid altsetting 0 [ 528.010029][ T6478] usb 10-1: Found UVC 7.01 device syz (8086:0b07) [ 528.016708][ T6478] usb 10-1: No valid video chain found. [ 528.022733][ T6478] usb 10-1: selecting invalid altsetting 0 [ 528.024664][ T6478] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 528.028725][ T6478] usb 10-1: USB disconnect, device number 8 [ 528.538749][ T1323] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 528.547999][ T1323] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 528.633175][ T5967] Bluetooth: hci3: command 0x0406 tx timeout [ 528.953296][ T6005] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 529.102839][ T6005] usb 10-1: Using ep0 maxpacket: 16 [ 529.106300][ T6005] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 529.111433][ T6005] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 529.114812][ T6005] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.117560][ T6005] usb 10-1: Product: syz [ 529.119009][ T6005] usb 10-1: Manufacturer: syz [ 529.120744][ T6005] usb 10-1: SerialNumber: syz [ 529.123999][ T6005] usb 10-1: config 0 descriptor?? [ 529.128029][ T6005] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 529.130931][ T6005] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 529.433090][ T5973] Bluetooth: hci4: command 0xfc11 tx timeout [ 529.442485][T10000] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 529.461067][T10171] sp0: Synchronizing with TNC [ 529.734463][ T6005] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 530.146899][ T6005] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 530.150354][ T6005] em28xx 10-1:0.0: board has no eeprom [ 530.412859][ T6005] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 530.416266][ T6005] em28xx 10-1:0.0: dvb set to bulk mode. [ 530.420469][ T65] em28xx 10-1:0.0: Binding DVB extension [ 530.430509][ T6005] usb 10-1: USB disconnect, device number 9 [ 530.435170][ T6005] em28xx 10-1:0.0: Disconnecting em28xx [ 530.469219][ T65] em28xx 10-1:0.0: Registering input extension [ 530.475791][ T6005] em28xx 10-1:0.0: Closing input extension [ 530.498214][ T6005] em28xx 10-1:0.0: Freeing device [ 530.541083][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.6.918'. [ 530.670532][ T5365] udevd[5365]: worker [8458] terminated by signal 33 (Unknown signal 33) [ 530.939708][T10200] netlink: 788 bytes leftover after parsing attributes in process `syz.6.920'. [ 531.336715][ T6005] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 531.341128][ T6005] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 531.576610][T10210] veth0_vlan: entered allmulticast mode [ 532.628827][T10221] netlink: 72 bytes leftover after parsing attributes in process `syz.5.930'. [ 532.796694][T10225] veth0_vlan: entered allmulticast mode [ 532.950345][T10232] ubi: mtd0 is already attached to ubi31 [ 534.874423][T10000] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 534.877728][T10000] Bluetooth: hci0: Injecting HCI hardware error event [ 534.880804][T10000] Bluetooth: hci0: hardware error 0x00 [ 534.997265][T10255] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 535.003285][T10255] infiniband syx1: RDMA CMA: cma_listen_on_dev, error -98 [ 535.038587][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.6.941'. [ 535.727739][T10268] syz.6.946 (10268): drop_caches: 2 [ 535.737795][T10268] syz.6.946 (10268): drop_caches: 2 [ 536.023300][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.947'. [ 536.031494][T10272] syz_tun: entered promiscuous mode [ 536.038733][T10272] macvtap1: entered promiscuous mode [ 536.040936][T10272] macvtap1: entered allmulticast mode [ 536.043208][T10272] syz_tun: entered allmulticast mode [ 536.047967][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.947'. [ 536.052070][T10272] syz_tun: left allmulticast mode [ 536.054478][T10272] syz_tun: left promiscuous mode [ 536.600651][T10284] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 536.603543][T10284] IPv6: NLM_F_CREATE should be set when creating new route [ 536.953327][T10000] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 537.642898][ T8359] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 537.822846][ T8359] usb 9-1: Using ep0 maxpacket: 8 [ 537.825710][ T8359] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 537.828953][ T8359] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.832947][ T8359] usb 9-1: config 0 descriptor?? [ 538.037952][ T8359] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 539.250063][T10313] netlink: 40 bytes leftover after parsing attributes in process `syz.6.961'. [ 539.453493][ T8359] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 539.462147][ T8359] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 539.466692][ T8359] asix 9-1:0.0: probe with driver asix failed with error -71 [ 539.474094][ T8359] usb 9-1: USB disconnect, device number 8 [ 539.995520][ T8359] ------------[ cut here ]------------ [ 539.997700][ T8359] workqueue: cannot queue hci_conn_timeout on wq hci1 [ 540.000576][ T8359] WARNING: CPU: 0 PID: 8359 at kernel/workqueue.c:2257 __queue_work+0xc9c/0x10f0 [ 540.004251][ T8359] Modules linked in: [ 540.005912][ T8359] CPU: 0 UID: 0 PID: 8359 Comm: kworker/0:5 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 540.011509][ T8359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 540.014819][ T8359] Workqueue: events l2cap_chan_timeout [ 540.016522][ T8359] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 540.018570][ T8359] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 e0 e1 8b 8b e8 55 4f f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 56 6b 37 00 90 0f 0b 90 e9 1b f6 ff [ 540.024855][ T8359] RSP: 0018:ffffc9000ec8fa50 EFLAGS: 00010086 [ 540.026792][ T8359] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a8f78 [ 540.029863][ T8359] RDX: ffff888023f68000 RSI: ffffffff817a8f85 RDI: 0000000000000001 [ 540.032343][ T8359] RBP: ffff88805a36c948 R08: 0000000000000001 R09: 0000000000000000 [ 540.034867][ T8359] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 540.037410][ T8359] R13: ffff8880669f0000 R14: ffff8880669f0178 R15: ffff88805a36c950 [ 540.040462][ T8359] FS: 0000000000000000(0000) GS:ffff8880977bf000(0000) knlGS:0000000000000000 [ 540.043775][ T8359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 540.046360][ T8359] CR2: 000000000c24f60f CR3: 000000005501a000 CR4: 0000000000352ef0 [ 540.049178][ T8359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 540.051665][ T8359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 540.054093][ T8359] Call Trace: [ 540.055136][ T8359] [ 540.056071][ T8359] ? __cancel_work+0x2c8/0x370 [ 540.057647][ T8359] ? clear_pending_if_disabled+0xa8/0x210 [ 540.059920][ T8359] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 540.061879][ T8359] __queue_delayed_work+0x35b/0x460 [ 540.063523][ T8359] queue_delayed_work_on+0x1b5/0x200 [ 540.065207][ T8359] l2cap_chan_del+0x5a0/0x8f0 [ 540.066711][ T8359] l2cap_chan_close+0xfe/0xa30 [ 540.068373][ T8359] ? debug_object_deactivate+0x1ec/0x3a0 [ 540.070153][ T8359] ? __pfx_l2cap_chan_close+0x10/0x10 [ 540.071853][ T8359] l2cap_chan_timeout+0x196/0x310 [ 540.073452][ T8359] process_one_work+0x9cc/0x1b70 [ 540.075020][ T8359] ? __pfx_wg_packet_tx_worker+0x10/0x10 [ 540.076804][ T8359] ? __pfx_process_one_work+0x10/0x10 [ 540.078583][ T8359] ? assign_work+0x1a0/0x250 [ 540.080060][ T8359] worker_thread+0x6c8/0xf10 [ 540.081539][ T8359] ? __kthread_parkme+0x19e/0x250 [ 540.083139][ T8359] ? __pfx_worker_thread+0x10/0x10 [ 540.084764][ T8359] kthread+0x3c2/0x780 [ 540.086070][ T8359] ? __pfx_kthread+0x10/0x10 [ 540.087585][ T8359] ? __pfx_kthread+0x10/0x10 [ 540.089069][ T8359] ? __pfx_kthread+0x10/0x10 [ 540.090560][ T8359] ? __pfx_kthread+0x10/0x10 [ 540.092073][ T8359] ? rcu_is_watching+0x12/0xc0 [ 540.093616][ T8359] ? __pfx_kthread+0x10/0x10 [ 540.095097][ T8359] ret_from_fork+0x45/0x80 [ 540.096523][ T8359] ? __pfx_kthread+0x10/0x10 [ 540.098159][ T8359] ret_from_fork_asm+0x1a/0x30 [ 540.099743][ T8359] [ 540.100798][ T8359] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 540.103133][ T8359] CPU: 0 UID: 0 PID: 8359 Comm: kworker/0:5 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 540.107084][ T8359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 540.110541][ T8359] Workqueue: events l2cap_chan_timeout [ 540.112230][ T8359] Call Trace: [ 540.113309][ T8359] [ 540.114257][ T8359] dump_stack_lvl+0x3d/0x1f0 [ 540.115702][ T8359] panic+0x71c/0x800 [ 540.117011][ T8359] ? __pfx_panic+0x10/0x10 [ 540.118493][ T8359] ? show_trace_log_lvl+0x29b/0x3e0 [ 540.120199][ T8359] ? check_panic_on_warn+0x1f/0xb0 [ 540.121863][ T8359] ? __queue_work+0xc9c/0x10f0 [ 540.123403][ T8359] check_panic_on_warn+0xab/0xb0 [ 540.125035][ T8359] __warn+0xf6/0x3c0 [ 540.126293][ T8359] ? __pfx_vprintk_emit+0x10/0x10 [ 540.127991][ T8359] ? __queue_work+0xc9c/0x10f0 [ 540.129555][ T8359] report_bug+0x3c3/0x580 [ 540.131006][ T8359] ? __queue_work+0xc9c/0x10f0 [ 540.132580][ T8359] handle_bug+0x184/0x210 [ 540.134002][ T8359] exc_invalid_op+0x17/0x50 [ 540.135473][ T8359] asm_exc_invalid_op+0x1a/0x20 [ 540.137102][ T8359] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 540.138843][ T8359] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 e0 e1 8b 8b e8 55 4f f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 56 6b 37 00 90 0f 0b 90 e9 1b f6 ff [ 540.144971][ T8359] RSP: 0018:ffffc9000ec8fa50 EFLAGS: 00010086 [ 540.146936][ T8359] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a8f78 [ 540.149927][ T8359] RDX: ffff888023f68000 RSI: ffffffff817a8f85 RDI: 0000000000000001 [ 540.152486][ T8359] RBP: ffff88805a36c948 R08: 0000000000000001 R09: 0000000000000000 [ 540.155072][ T8359] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 540.157752][ T8359] R13: ffff8880669f0000 R14: ffff8880669f0178 R15: ffff88805a36c950 [ 540.160732][ T8359] ? __warn_printk+0x198/0x350 [ 540.162286][ T8359] ? __warn_printk+0x1a5/0x350 [ 540.163836][ T8359] ? __cancel_work+0x2c8/0x370 [ 540.165424][ T8359] ? clear_pending_if_disabled+0xa8/0x210 [ 540.167302][ T8359] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 540.169263][ T8359] __queue_delayed_work+0x35b/0x460 [ 540.171052][ T8359] queue_delayed_work_on+0x1b5/0x200 [ 540.172768][ T8359] l2cap_chan_del+0x5a0/0x8f0 [ 540.174333][ T8359] l2cap_chan_close+0xfe/0xa30 [ 540.175890][ T8359] ? debug_object_deactivate+0x1ec/0x3a0 [ 540.177793][ T8359] ? __pfx_l2cap_chan_close+0x10/0x10 [ 540.179510][ T8359] l2cap_chan_timeout+0x196/0x310 [ 540.181201][ T8359] process_one_work+0x9cc/0x1b70 [ 540.182802][ T8359] ? __pfx_wg_packet_tx_worker+0x10/0x10 [ 540.184623][ T8359] ? __pfx_process_one_work+0x10/0x10 [ 540.186396][ T8359] ? assign_work+0x1a0/0x250 [ 540.188099][ T8359] worker_thread+0x6c8/0xf10 [ 540.189998][ T8359] ? __kthread_parkme+0x19e/0x250 [ 540.191609][ T8359] ? __pfx_worker_thread+0x10/0x10 [ 540.193232][ T8359] kthread+0x3c2/0x780 [ 540.194536][ T8359] ? __pfx_kthread+0x10/0x10 [ 540.196002][ T8359] ? __pfx_kthread+0x10/0x10 [ 540.197415][ T8359] ? __pfx_kthread+0x10/0x10 [ 540.199306][ T8359] ? __pfx_kthread+0x10/0x10 [ 540.200808][ T8359] ? rcu_is_watching+0x12/0xc0 [ 540.202296][ T8359] ? __pfx_kthread+0x10/0x10 [ 540.203763][ T8359] ret_from_fork+0x45/0x80 [ 540.205180][ T8359] ? __pfx_kthread+0x10/0x10 [ 540.206650][ T8359] ret_from_fork_asm+0x1a/0x30 [ 540.208496][ T8359] [ 540.210427][ T8359] Kernel Offset: disabled [ 540.211796][ T8359] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:25:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854aebb5 RDI=ffffffff9ae0cb80 RBP=ffffffff9ae0cb40 RSP=ffffc9000ec8f3c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9ae0cb40 R15=ffffffff854aeb50 RIP=ffffffff854aebdf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977bf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c24f60f CR3=000000005501a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=1ffff92001d31f66 RCX=0000000000000000 RDX=ffffc9000e98fb90 RSI=0000000080000002 RDI=ffffc9000e98fc10 RBP=ffffc9000e98fc80 RSP=ffffc9000e98fb20 R8 =000000000000ae47 R9 =0000000000000000 R10=0000000080000002 R11=0000000000000000 R12=000000000000ae47 R13=0000000080000002 R14=ffffc9000e98fd60 R15=000000008015c9a0 RIP=ffffffff893c56b1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978bf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7415994 CR3=000000005501a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffed1008313a19 RBX=ffffed1008313a1a RCX=ffffffff822ab122 RDX=ffffed1008313a1a RSI=0000000000000004 RDI=ffff88804189d0cc RBP=ffffed1008313a19 RSP=ffffc900032cf648 R8 =0000000000000001 R9 =ffffed1008313a19 R10=ffff88804189d0cf R11=0000000000000000 R12=ffff88804189d080 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff821f261e RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979bf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3a8b6f CR3=0000000054688000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=cf0b70fc215cd9ce a858ac7bcb618324 cf0b70fc215cd9ce a858ac7bcb618324 cf0b70fc215cd9ce a858ac7bcb618324 cf0b70fc215cd9ce a858ac7bcb618324 ZMM18=22d60295d6c1a329 5ec69ecd87f280cd 22d60295d6c1a329 5ec69ecd87f280cd 22d60295d6c1a329 5ec69ecd87f280cd 22d60295d6c1a329 5ec69ecd87f280cd ZMM19=e10c000000000000 000000000000000f e10c000000000000 000000000000000e e10c000000000000 000000000000000d e10c000000000000 000000000000000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=a858ac7ba858ac7b a858ac7ba858ac7b a858ac7ba858ac7b a858ac7ba858ac7b a858ac7ba858ac7b a858ac7ba858ac7b a858ac7ba858ac7b a858ac7ba858ac7b ZMM22=215cd9ce215cd9ce 215cd9ce215cd9ce 215cd9ce215cd9ce 215cd9ce215cd9ce 215cd9ce215cd9ce 215cd9ce215cd9ce 215cd9ce215cd9ce 215cd9ce215cd9ce ZMM23=cf0b70fccf0b70fc cf0b70fccf0b70fc cf0b70fccf0b70fc cf0b70fccf0b70fc cf0b70fccf0b70fc cf0b70fccf0b70fc cf0b70fccf0b70fc cf0b70fccf0b70fc ZMM24=87f280cd87f280cd 87f280cd87f280cd 87f280cd87f280cd 87f280cd87f280cd 87f280cd87f280cd 87f280cd87f280cd 87f280cd87f280cd 87f280cd87f280cd ZMM25=5ec69ecd5ec69ecd 5ec69ecd5ec69ecd 5ec69ecd5ec69ecd 5ec69ecd5ec69ecd 5ec69ecd5ec69ecd 5ec69ecd5ec69ecd 5ec69ecd5ec69ecd 5ec69ecd5ec69ecd ZMM26=d6c1a329d6c1a329 d6c1a329d6c1a329 d6c1a329d6c1a329 d6c1a329d6c1a329 d6c1a329d6c1a329 d6c1a329d6c1a329 d6c1a329d6c1a329 d6c1a329d6c1a329 ZMM27=22d6029522d60295 22d6029522d60295 22d6029522d60295 22d6029522d60295 22d6029522d60295 22d6029522d60295 22d6029522d60295 22d6029522d60295 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e10c0000e10c0000 e10c0000e10c0000 e10c0000e10c0000 e10c0000e10c0000 e10c0000e10c0000 e10c0000e10c0000 e10c0000e10c0000 e10c0000e10c0000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b53b100 RCX=ffffffff81aec0ee RDX=ffff88801daa4880 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffc9000044fd10 RSP=ffffc9000044fc38 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c7944e R12=1ffff92000089f8c R13=0000000000000002 R14=0000000000000001 R15=ffffed10056a7621 RIP=ffffffff81baa9f0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097abf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fa55c0 CR3=000000005501a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000