last executing test programs: 4.840128239s ago: executing program 0 (id=107): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x2, {0x1, 0x0, 0x1}, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0x7]}, &(0x7f0000000100), 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev, 0x7807}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x1100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @struct]}}, &(0x7f0000002a80)=""/4104, 0x32, 0x1008, 0x1, 0x0, 0x0, @void, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000001000000420000004000000000000000", @ANYRES32, @ANYBLOB="00000000000000000000dca7d40526c8c4b90000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r4}, 0x38) 3.709444989s ago: executing program 3 (id=113): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x1100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @struct]}}, &(0x7f0000002a80)=""/4104, 0x32, 0x1008, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r2, 0x200000000000000}, 0x38) 3.380378268s ago: executing program 0 (id=114): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000d00)={&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000c00)=[@ip_ttl={{0x10, 0x0, 0x2, 0x1}}], 0x10}, 0x800) (fail_nth: 8) 3.286211517s ago: executing program 0 (id=115): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r0, 0x0) read$watch_queue(r0, &(0x7f0000002e00)=""/4088, 0xff8) 3.23026846s ago: executing program 0 (id=116): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000100100000b"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) 3.229643958s ago: executing program 0 (id=118): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_create(0x5, &(0x7f0000000040)={0x0, 0x30, 0x2, @thr={&(0x7f0000000300)="c6f670f200c25293c9f397627a68f362e6e00ef17e2b2628627c463f14bd0a0c064e8e649ea7947216642fe4bad5048da6e05baf814c462095a3ebed081f72c906479b399f3b49e45eaa05bbfc07dba4916d1897733dd35dc254a37b3d1146d5fd7eb8b019e9676979", &(0x7f00000013c0)="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"}}, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x80001) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xa) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_open_procfs(0x0, &(0x7f0000000080)='sched\x00') r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x0) listen(r2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) sched_getattr(0x0, &(0x7f0000000100)={0x38}, 0x38, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000040), 0x4) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x5}, 0x8) 2.168688943s ago: executing program 1 (id=126): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/consoles\x00', 0x0, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x18}}], 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') (async) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_aout(r6, &(0x7f00000002c0)=ANY=[], 0xc1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000140)) 2.080104106s ago: executing program 1 (id=127): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmmsg(r0, &(0x7f0000002800)=[{{&(0x7f0000000080)=@can={0x1d, r1, 0x0, 0x4000000}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)="5472e330ed75561b0cbbe2ad823a", 0xe}], 0x1}}], 0x1, 0x80) 2.01998446s ago: executing program 1 (id=128): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) creat(0x0, 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a000000000000000000000000000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1ff}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x16, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) socketpair(0x0, 0x0, 0xffff, &(0x7f0000000240)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_TMR_METRONOME(r4, 0x40045407) fcntl$lock(r1, 0x26, &(0x7f00000031c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0x980901}) r7 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r7, 0xc0a45352, &(0x7f0000000340)={{0x0, 0x8}, 'port0\x00'}) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r9, 0xb702, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 1.939068908s ago: executing program 3 (id=129): r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0000000009000000040000000100000009110400", @ANYRES32=0x1, @ANYBLOB="00a5000000005625fbc745256e7587581d00000000b9868c5a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000", @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x0) r6 = dup(r5) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setsockopt$packet_int(r7, 0x107, 0xb, &(0x7f0000000080)=0x2, 0x4) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYRESHEX=r7]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000040)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x19, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x53d8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, r7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)={0x10c, 0x2b, 0x1, 0x0, 0x0, "", [@generic="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"]}, 0x10c}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES32=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.69514908s ago: executing program 2 (id=132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) (async) syz_io_uring_setup(0x6291, &(0x7f0000000500)={0x0, 0x722f, 0x80, 0x2, 0xcb}, 0x0, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, 0x0, 0x0, 0x4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000000340)=[{&(0x7f0000000380)=""/63, 0x3f}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000300)=[{&(0x7f0000008480)=""/88, 0x58}], 0x1, 0x0) (async, rerun: 64) r2 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000000), &(0x7f00000002c0)=0x30) (async) syz_emit_ethernet(0x11c, &(0x7f00000003c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0xe6, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, [{}, {}, {0x0, 0xe, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e2718"}, {0x21, 0x5, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9"}, {0x0, 0x4, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1e"}, {0x0, 0x1, "d5170000dce9674a36da018dff"}]}}}}}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0xb9ad) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x74, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1c}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5fe062d981670fa298f17e55c2"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async, rerun: 64) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f00000000c0), 0x4) (async) socket(0x10, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) creat(&(0x7f0000000080)='./file0\x00', 0x1de) (rerun: 32) r7 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000008076", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000000800e200000000000018118400", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9af0ff0000000025090800ffffff807b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000001500000085ffffffbf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.517834493s ago: executing program 2 (id=133): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r0, 0x0) read$watch_queue(r0, &(0x7f0000002e00)=""/4088, 0xff8) 1.46855055s ago: executing program 2 (id=134): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x3, 0x0, 0x2000000, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x3c}, 0x1, 0x2}, 0x4000) 1.400008694s ago: executing program 2 (id=135): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x49e6, 0x10100, 0x0, 0x3de}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 1.320372829s ago: executing program 2 (id=136): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$unix(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getnetconf={0x14, 0x52, 0x4, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x40001) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000009a00)={0x0, 0x0, &(0x7f00000099c0)={&(0x7f0000009940)={0x34, r10, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r7) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f00000005c0)={&(0x7f0000000200), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 1.149820218s ago: executing program 3 (id=137): bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000002000000000c001a800800048004000480"], 0x2c}}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000440)={r6, @in6={{0xa, 0x4e21, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x5}, 0x2}}, 0xf000, 0x5}, 0x88) ioctl(r3, 0x1, &(0x7f0000000300)="0561e7ff5a98fb1b3f8f7d9ffe1bc0fab7994592e4da6f8d859035f3b0a2806d3d1a26604d6fc6a9f6990a600cac8cc2090075b17d9a10c5f670dafccaa9c09f735c715d5335f5910f45b7cc7b4587882ea681db2ac88d58066e74a41b16e939a72063e214ae") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="030200000200000004000017a5e378d32281912c3200000000000000000000000000000000009b18ea129455e4"], 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x10, 0x6, 0x5f0, 0x0, 0x0, 0x0, 0xd0, 0x450, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @common=@dst={{0x48}}]}, @HL={0x28}}, {{@ipv6={@private2, @private0, [], [], 'nicvf0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) accept4(r10, &(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000000)=0x80, 0x80800) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381", 0xb}, {&(0x7f00000005c0)="c2c10b", 0x3}], 0x2) 1.097565758s ago: executing program 1 (id=138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="170000005400e501000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00091d00ff"], 0x38}}, 0x0) 1.018453594s ago: executing program 1 (id=139): socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200), 0x1, 0x0) (async) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000100)={&(0x7f0000270000/0x2000)=nil, 0x6, 0x3, 0x80}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000170000/0x3000)=nil, 0x3000}, 0x5}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x80000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x5c}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) 910.319277ms ago: executing program 3 (id=140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4, 0x0, 0x3f}) 799.157664ms ago: executing program 2 (id=141): creat(0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) (fail_nth: 11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') pread64(r3, &(0x7f0000001480)=""/90, 0x5a, 0x0) 509.883922ms ago: executing program 3 (id=142): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) dup3(0xffffffffffffffff, r0, 0x0) read$watch_queue(r0, &(0x7f0000002e00)=""/4088, 0xff8) 509.091593ms ago: executing program 1 (id=143): ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f000001f680)='net/mcfilter6\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40046629, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="158d7abba0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000240)={@desc={0x1, 0x0, @desc2}}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x20000090) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x400) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0xaea3, 0x0) gettid() socket$rds(0x15, 0x5, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x224, 0xd8, 0x11, 0x148, 0x0, 0x10, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x70, 0xd8, 0x1c, {0x6}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x280) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r2 = open(&(0x7f0000000280)='.\x00', 0x1d7503, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001c) readv(0xffffffffffffffff, &(0x7f0000004880)=[{&(0x7f0000000080)=""/157, 0x9d}], 0x1) read$FUSE(r2, &(0x7f0000004440)={0x2020}, 0x2020) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'macsec0\x00'}) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000500)='+\xb7\x06\x8b/\\', 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 450.308604ms ago: executing program 3 (id=144): r0 = socket$rxrpc(0x21, 0x2, 0x2) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="ea814033cc09c718cbc358235c54f9c01db85bf8732b", @ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="9731f7b11ec7167af2f91f04fd01f37a92f57c0aacb1bba5914166fa29a743401ef142f95c327807934718d66790d932e5946cf3de5e35cd41cf14401a5ed3b7ead50ab3f5ff691c5d1d74d2566ce0b8edb11f621260a69b6713fd7349290e8b219f29eb8accf8a92d81868018f4bd83be8bd022cad898d843e484ef3980fb82e5e57e4c7e4380c9a4218d82fa1cbfd501519e748600cad35409da8861644677fe982eef09a7bf2c160e99f5d2e72bc120a120a420f580f70c856896161914", @ANYRES32=r0], 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001340)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r3}, 0x10) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6(0xa, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f0000001f80)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/102, 0x66}], 0x1, 0x0, 0x0, 0x66}, 0x81}, {{0x0, 0x0, 0x0}}], 0x2, 0x102, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000003c0)={0xd, 0xa, 0x0, "4a6535dffaa9779c16cc07d49d49cd3402fac865fbe70156e4788c2ece00"}) sendfile(r5, r4, 0x0, 0xffefffff) 0s ago: executing program 0 (id=145): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x8, @rand_addr=' \x01\x00', 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1000000010010000010000"], 0x10}, 0x0) (fail_nth: 13) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:56861' (ED25519) to the list of known hosts. [ 51.899274][ T5346] cgroup: Unknown subsys name 'net' [ 52.035511][ T5346] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.260172][ T5346] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.666486][ T5365] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.669646][ T5363] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.672071][ T5365] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.677653][ T5368] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.682313][ T5368] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.684093][ T5363] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.684601][ T5365] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.687660][ T5368] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.689311][ T5363] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.693242][ T5368] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.695574][ T5365] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.696570][ T5363] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.697326][ T5363] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.697602][ T5363] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.698276][ T5368] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.717198][ T5372] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.722389][ T4781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.729091][ T5372] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.733121][ T5372] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.733653][ T5365] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.740080][ T5365] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.753951][ T5362] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.759082][ T5362] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.765725][ T5372] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.105406][ T5355] chnl_net:caif_netlink_parms(): no params data found [ 59.292208][ T5355] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.295506][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.298143][ T5355] bridge_slave_0: entered allmulticast mode [ 59.300989][ T5355] bridge_slave_0: entered promiscuous mode [ 59.308555][ T5357] chnl_net:caif_netlink_parms(): no params data found [ 59.359472][ T5355] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.362208][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.365333][ T5355] bridge_slave_1: entered allmulticast mode [ 59.368128][ T5355] bridge_slave_1: entered promiscuous mode [ 59.433616][ T5355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.442792][ T5355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.497573][ T5366] chnl_net:caif_netlink_parms(): no params data found [ 59.510367][ T5356] chnl_net:caif_netlink_parms(): no params data found [ 59.546425][ T5355] team0: Port device team_slave_0 added [ 59.566685][ T5355] team0: Port device team_slave_1 added [ 59.706764][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.710089][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.720355][ T5355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.725610][ T5357] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.728581][ T5357] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.731423][ T5357] bridge_slave_0: entered allmulticast mode [ 59.735249][ T5357] bridge_slave_0: entered promiscuous mode [ 59.782774][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.785871][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.796751][ T5355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.807145][ T5357] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.810248][ T5357] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.813509][ T5357] bridge_slave_1: entered allmulticast mode [ 59.816795][ T5357] bridge_slave_1: entered promiscuous mode [ 59.978638][ T5356] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.981671][ T5356] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.986683][ T5356] bridge_slave_0: entered allmulticast mode [ 59.990865][ T5356] bridge_slave_0: entered promiscuous mode [ 60.049223][ T5357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.052439][ T5366] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.055540][ T5366] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.058576][ T5366] bridge_slave_0: entered allmulticast mode [ 60.062796][ T5366] bridge_slave_0: entered promiscuous mode [ 60.067499][ T5356] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.070280][ T5356] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.073181][ T5356] bridge_slave_1: entered allmulticast mode [ 60.076561][ T5356] bridge_slave_1: entered promiscuous mode [ 60.084288][ T5355] hsr_slave_0: entered promiscuous mode [ 60.087701][ T5355] hsr_slave_1: entered promiscuous mode [ 60.093565][ T5357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.125535][ T5366] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.129017][ T5366] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.132175][ T5366] bridge_slave_1: entered allmulticast mode [ 60.136613][ T5366] bridge_slave_1: entered promiscuous mode [ 60.270687][ T5356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.327554][ T5366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.333002][ T5356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.341549][ T5357] team0: Port device team_slave_0 added [ 60.347563][ T5357] team0: Port device team_slave_1 added [ 60.357220][ T5366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.500649][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.503989][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.515437][ T5357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.555372][ T5356] team0: Port device team_slave_0 added [ 60.559138][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.562469][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.572243][ T5357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.593520][ T5366] team0: Port device team_slave_0 added [ 60.598730][ T5356] team0: Port device team_slave_1 added [ 60.632362][ T5366] team0: Port device team_slave_1 added [ 60.764377][ T5362] Bluetooth: hci1: command tx timeout [ 60.765246][ T5366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.770414][ T5366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.774762][ T5362] Bluetooth: hci0: command tx timeout [ 60.782084][ T5366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.790802][ T5356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.796605][ T5356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.808183][ T5356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.822040][ T5356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.825390][ T5356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.837416][ T5356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.847544][ T5357] hsr_slave_0: entered promiscuous mode [ 60.851386][ T5357] hsr_slave_1: entered promiscuous mode [ 60.853499][ T5362] Bluetooth: hci3: command tx timeout [ 60.853553][ T5369] Bluetooth: hci2: command tx timeout [ 60.859642][ T5357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.863489][ T5357] Cannot create hsr debugfs directory [ 60.866747][ T5366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.869911][ T5366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.881495][ T5366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.122931][ T5366] hsr_slave_0: entered promiscuous mode [ 61.129954][ T5366] hsr_slave_1: entered promiscuous mode [ 61.134567][ T5366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.138025][ T5366] Cannot create hsr debugfs directory [ 61.144466][ T5356] hsr_slave_0: entered promiscuous mode [ 61.147405][ T5356] hsr_slave_1: entered promiscuous mode [ 61.149765][ T5356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.153001][ T5356] Cannot create hsr debugfs directory [ 61.418525][ T5355] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.441170][ T5355] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.452584][ T5355] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.502070][ T5355] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.627459][ T5357] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.635965][ T5357] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.644571][ T5357] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.651510][ T5357] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.712582][ T5356] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.721529][ T5356] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.728227][ T5356] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.733036][ T5356] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.800624][ T5366] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.824778][ T5366] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.834712][ T5366] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.842773][ T5366] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.857061][ T5355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.891999][ T5355] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.920513][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.924702][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.948967][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.952597][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.066078][ T5357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.089015][ T5356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.122342][ T5356] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.130204][ T5357] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.149104][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.152315][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.163061][ T5366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.174546][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.178015][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.196319][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.200011][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.224142][ T5366] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.239544][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.243552][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.249027][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.252309][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.270022][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.273571][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.342344][ T5355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.477087][ T5355] veth0_vlan: entered promiscuous mode [ 62.491063][ T5355] veth1_vlan: entered promiscuous mode [ 62.532660][ T5355] veth0_macvtap: entered promiscuous mode [ 62.542945][ T5355] veth1_macvtap: entered promiscuous mode [ 62.572465][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.581219][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.599999][ T5355] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.605900][ T5355] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.609875][ T5355] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.613687][ T5355] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.649515][ T5356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.663167][ T5357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.711909][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.721853][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.746298][ T5366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.766901][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.770862][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.797816][ T5356] veth0_vlan: entered promiscuous mode [ 62.816717][ T5356] veth1_vlan: entered promiscuous mode [ 62.820421][ T5357] veth0_vlan: entered promiscuous mode [ 62.843604][ T5362] Bluetooth: hci0: command tx timeout [ 62.851791][ T5357] veth1_vlan: entered promiscuous mode [ 62.854858][ T5362] Bluetooth: hci1: command tx timeout [ 62.879254][ T5366] veth0_vlan: entered promiscuous mode [ 62.898790][ T5356] veth0_macvtap: entered promiscuous mode [ 62.912050][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 62.916877][ T5366] veth1_vlan: entered promiscuous mode [ 62.917305][ T5399] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max [ 62.923265][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.923980][ T5362] Bluetooth: hci2: command tx timeout [ 62.927432][ T5356] veth1_macvtap: entered promiscuous mode [ 62.928725][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.933460][ T5362] Bluetooth: hci3: command tx timeout [ 62.933521][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.937961][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.940667][ T5357] veth0_macvtap: entered promiscuous mode [ 62.940711][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.945556][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.947610][ T5357] veth1_macvtap: entered promiscuous mode [ 62.948393][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.956293][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.959496][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.962660][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.963145][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.967363][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.970248][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.973124][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.979690][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.979992][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.987058][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.989790][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.990455][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.993027][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.998008][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.999770][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.006599][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.007333][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.012840][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.017037][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.020011][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.028160][ T5399] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 63.032220][ T5356] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.036062][ T5356] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.039739][ T5356] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.042705][ T5356] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.052118][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.057508][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.062117][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.070567][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.077456][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.082424][ T5366] veth0_macvtap: entered promiscuous mode [ 63.092552][ T5366] veth1_macvtap: entered promiscuous mode [ 63.129336][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.135175][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.139423][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.145375][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.151126][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.162301][ T5357] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.167206][ T5357] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.170944][ T5357] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.175692][ T5357] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.214950][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.219280][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.222640][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.227518][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.231421][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.235976][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.237171][ T5423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5'. [ 63.241104][ T5366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.255003][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.255136][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.259385][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.259400][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.262439][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.267276][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.278423][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.281970][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.286448][ T5366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.291785][ T5366] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.296124][ T5366] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.299348][ T5366] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.302647][ T5366] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.329140][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.333980][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.385597][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.388955][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.442458][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.443800][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.446836][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.448862][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.505452][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.508917][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.555539][ T5404] libceph: connect (1)[c::]:6789 error -101 [ 63.558171][ T5404] libceph: mon0 (1)[c::]:6789 connect error [ 63.562665][ T5404] libceph: connect (1)[c::]:6789 error -101 [ 63.567773][ T5404] libceph: mon0 (1)[c::]:6789 connect error [ 63.578634][ T5431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 63.581930][ T5431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.585480][ T5431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.589109][ T5431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.592368][ T5431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.662205][ T39] audit: type=1326 audit(1726051307.013:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 63.672191][ T39] audit: type=1326 audit(1726051307.013:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 63.682666][ T39] audit: type=1326 audit(1726051307.023:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 63.693055][ T39] audit: type=1326 audit(1726051307.023:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 63.702078][ T39] audit: type=1326 audit(1726051307.023:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 63.711694][ T39] audit: type=1326 audit(1726051307.023:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=85 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 63.721234][ T39] audit: type=1326 audit(1726051307.023:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 63.730794][ T39] audit: type=1326 audit(1726051307.023:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 63.739831][ T39] audit: type=1326 audit(1726051307.023:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 63.749494][ T39] audit: type=1326 audit(1726051307.023:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 63.824744][ T5404] libceph: connect (1)[c::]:6789 error -101 [ 63.827381][ T5404] libceph: mon0 (1)[c::]:6789 connect error [ 64.333764][ T5404] libceph: connect (1)[c::]:6789 error -101 [ 64.336799][ T5404] libceph: mon0 (1)[c::]:6789 connect error [ 64.342145][ T5427] ceph: No mds server is up or the cluster is laggy [ 64.533390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 64.688452][ T5443] overlayfs: failed to resolve 'dont_measure': -2 [ 64.743398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 64.748266][ T5445] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9'. [ 64.814004][ T5443] netlink: 'syz.0.8': attribute type 3 has an invalid length. [ 64.816959][ T5443] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8'. [ 64.881974][ T5447] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET) [ 64.913266][ T5447] binder: 5446:5447 ioctl c0306201 20000680 returned -14 [ 64.924313][ T5362] Bluetooth: hci1: command tx timeout [ 64.924336][ T5369] Bluetooth: hci0: command tx timeout [ 64.974984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.003807][ T5369] Bluetooth: hci3: command tx timeout [ 65.006290][ T5369] Bluetooth: hci2: command tx timeout [ 65.034240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.038307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.042133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.046003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.049631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.104925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 65.134884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 65.549095][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 65.801236][ T5462] warning: `syz.0.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.245272][ T5473] mmap: syz.1.15 (5473) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.363004][ T5471] capability: warning: `syz.1.15' uses deprecated v2 capabilities in a way that may be insecure [ 66.372831][ T5472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 66.385867][ T5472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 67.003733][ T5362] Bluetooth: hci1: command tx timeout [ 67.003753][ T5369] Bluetooth: hci0: command tx timeout [ 67.083514][ T5362] Bluetooth: hci2: command tx timeout [ 67.083726][ T5369] Bluetooth: hci3: command tx timeout [ 68.358921][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 68.363007][ T5481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.368059][ T5481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.379165][ T5481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.382346][ T5481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.002894][ T5501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 69.369911][ T5501] cdrom: dropping to single frame dma [ 69.662677][ T5513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 70.435428][ T5399] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 70.626695][ T5399] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 70.631214][ T5399] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 70.636553][ T5399] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.642422][ T5399] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.647286][ T5399] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.655491][ T5399] usb 8-1: config 0 descriptor?? [ 70.660155][ T5522] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 71.148051][ T5531] tmpfs: Bad value for 'mpol' [ 71.400015][ T5399] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.404042][ T5399] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.407073][ T5399] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.409646][ T5399] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.412316][ T5399] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.415924][ T5399] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.419241][ T5399] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.422557][ T5399] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 71.440907][ T5399] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 71.601202][ T5535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 72.350978][ T5553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 72.614428][ T5422] usb 8-1: USB disconnect, device number 2 [ 73.447831][ T5565] fuse: Unknown parameter 'user_i00000000000000000000' [ 74.713475][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 74.893859][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 74.898220][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 74.902085][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 74.915806][ T25] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 74.920104][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.924285][ T25] usb 8-1: Product: syz [ 74.925813][ T25] usb 8-1: Manufacturer: syz [ 74.927515][ T25] usb 8-1: SerialNumber: syz [ 75.074778][ T5591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 75.087024][ C0] vcan0: j1939_session_tx_dat: 0xffff888023605800: queue data error: -100 [ 75.175447][ T25] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 75.233429][ T5399] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.410426][ T832] usb 8-1: USB disconnect, device number 3 [ 75.423399][ T5399] usb 5-1: Using ep0 maxpacket: 32 [ 75.429817][ T5582] usblp0: removed [ 75.436682][ T5399] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 75.440825][ T5399] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 75.448319][ T5399] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 75.452179][ T5399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.456510][ T5399] usb 5-1: Product: syz [ 75.458351][ T5399] usb 5-1: Manufacturer: syz [ 75.460357][ T5399] usb 5-1: SerialNumber: syz [ 75.689142][ T5595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 75.704886][ T5399] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 75.941457][ T5400] usb 5-1: USB disconnect, device number 2 [ 75.953958][ T5400] usblp0: removed [ 76.074969][ T5600] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 76.087958][ T5600] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 76.133473][ T5602] siw: device registration error -23 [ 76.566526][ T5611] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 76.614407][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.618610][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.073473][ T832] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.274780][ T832] usb 5-1: Using ep0 maxpacket: 32 [ 77.282732][ T832] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 77.287071][ T832] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 77.296745][ T832] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 77.300991][ T832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.304883][ T832] usb 5-1: Product: syz [ 77.306782][ T832] usb 5-1: Manufacturer: syz [ 77.308863][ T832] usb 5-1: SerialNumber: syz [ 77.493496][ T25] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 77.551010][ T832] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 77.693555][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 77.697941][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 77.701204][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 77.707256][ T25] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 77.710251][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.713887][ T25] usb 8-1: Product: syz [ 77.715967][ T25] usb 8-1: Manufacturer: syz [ 77.718578][ T25] usb 8-1: SerialNumber: syz [ 77.795091][ T832] usb 5-1: USB disconnect, device number 3 [ 77.801879][ T832] usblp0: removed [ 77.945977][ T25] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 78.063395][ T5400] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 78.171492][ T59] usb 8-1: USB disconnect, device number 4 [ 78.177642][ T59] usblp0: removed [ 78.263356][ T5400] usb 6-1: Using ep0 maxpacket: 32 [ 78.274456][ T5400] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 78.278538][ T5400] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 78.290463][ T5400] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 78.293970][ T5400] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.296763][ T5400] usb 6-1: Product: syz [ 78.298358][ T5400] usb 6-1: Manufacturer: syz [ 78.300330][ T5400] usb 6-1: SerialNumber: syz [ 78.525294][ T5400] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 78.745460][ T25] usb 6-1: USB disconnect, device number 2 [ 78.754817][ T25] usblp0: removed [ 79.260770][ T5638] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 79.465182][ T5642] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 79.850251][ T5650] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 79.880086][ T5652] siw: device registration error -23 [ 79.959799][ T5654] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 80.071601][ T5658] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 80.603463][ T30] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 80.793394][ T30] usb 8-1: Using ep0 maxpacket: 32 [ 80.798072][ T30] usb 8-1: config 0 has no interfaces? [ 80.803875][ T30] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 80.807830][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.810990][ T30] usb 8-1: Product: syz [ 80.812857][ T30] usb 8-1: Manufacturer: syz [ 80.815582][ T30] usb 8-1: SerialNumber: syz [ 80.820538][ T30] usb 8-1: config 0 descriptor?? [ 81.233704][ T5679] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 81.727936][ T833] cfg80211: failed to load regulatory.db [ 82.972515][ T5719] FAULT_INJECTION: forcing a failure. [ 82.972515][ T5719] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.979733][ T5719] CPU: 3 UID: 0 PID: 5719 Comm: syz.1.92 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 82.985209][ T5719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.990293][ T5719] Call Trace: [ 82.991779][ T5719] [ 82.993075][ T5719] dump_stack_lvl+0x16c/0x1f0 [ 82.995153][ T5719] should_fail_ex+0x497/0x5b0 [ 82.997162][ T5719] _copy_from_user+0x30/0xf0 [ 82.999182][ T5719] kstrtouint_from_user+0xd7/0x1c0 [ 83.001370][ T5719] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 83.003874][ T5719] ? __pfx_lock_acquire+0x10/0x10 [ 83.006101][ T5719] proc_fail_nth_write+0x84/0x260 [ 83.008417][ T5719] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 83.011409][ T5719] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 83.014481][ T5719] vfs_write+0x29a/0x1140 [ 83.016727][ T5719] ? __fdget_pos+0xeb/0x180 [ 83.018696][ T5719] ? __pfx_vfs_write+0x10/0x10 [ 83.020745][ T5719] ? __pfx___mutex_lock+0x10/0x10 [ 83.022917][ T5719] ? __fget_files+0x256/0x400 [ 83.024941][ T5719] ksys_write+0x12f/0x260 [ 83.026816][ T5719] ? __pfx_ksys_write+0x10/0x10 [ 83.028953][ T5719] __do_fast_syscall_32+0x73/0x120 [ 83.031130][ T5719] do_fast_syscall_32+0x32/0x80 [ 83.033148][ T5719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.035934][ T5719] RIP: 0023:0xf73ae579 [ 83.037799][ T5719] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 83.046963][ T5719] RSP: 002b:00000000f56965a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 83.050565][ T5719] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5696620 [ 83.053999][ T5719] RDX: 0000000000000001 RSI: 00000000f739bff4 RDI: 0000000000000000 [ 83.057415][ T5719] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 83.061413][ T5719] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 83.065227][ T5719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.068695][ T5719] [ 83.311025][ T5732] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.330915][ T25] usb 8-1: USB disconnect, device number 5 [ 83.583470][ T833] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.768232][ T833] usb 5-1: Using ep0 maxpacket: 32 [ 83.771136][ T833] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 83.771158][ T833] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 83.771195][ T833] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.775065][ T833] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.790562][ T833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.790583][ T833] usb 5-1: Product: 禓蠑۳ [ 83.790594][ T833] usb 5-1: Manufacturer: ж [ 83.790606][ T833] usb 5-1: SerialNumber: ࠇ [ 83.797967][ T833] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 83.800677][ T5742] netlink: 'syz.2.97': attribute type 3 has an invalid length. [ 83.801071][ T833] cdc_ncm 5-1:1.0: bind() failure [ 84.032989][ T5729] binder: 5728:5729 ioctl 40046205 0 returned -22 [ 84.069118][ T1414] usb 5-1: USB disconnect, device number 4 [ 84.398280][ T5758] binder: 5756:5758 ioctl 40046205 0 returned -22 [ 84.404815][ T5758] FAULT_INJECTION: forcing a failure. [ 84.404815][ T5758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.413446][ T5758] CPU: 3 UID: 0 PID: 5758 Comm: syz.1.103 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 84.417503][ T5758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.421865][ T5758] Call Trace: [ 84.423492][ T5758] [ 84.424774][ T5758] dump_stack_lvl+0x16c/0x1f0 [ 84.426826][ T5758] should_fail_ex+0x497/0x5b0 [ 84.428961][ T5758] _copy_to_user+0x30/0xc0 [ 84.430976][ T5758] sg_ioctl+0x1e67/0x26c0 [ 84.432983][ T5758] ? __pfx_sg_ioctl+0x10/0x10 [ 84.434922][ T5758] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.437110][ T5758] ? __fget_files+0x256/0x400 [ 84.439290][ T5758] ? __pfx_sg_ioctl+0x10/0x10 [ 84.441084][ T5758] compat_ptr_ioctl+0x71/0xb0 [ 84.442786][ T5758] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 84.444726][ T5758] __do_compat_sys_ioctl+0x2c3/0x330 [ 84.446673][ T5758] __do_fast_syscall_32+0x73/0x120 [ 84.448560][ T5758] do_fast_syscall_32+0x32/0x80 [ 84.450540][ T5758] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.453182][ T5758] RIP: 0023:0xf73ae579 [ 84.455008][ T5758] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 84.461970][ T5758] RSP: 002b:00000000f567556c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 84.465035][ T5758] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000002286 [ 84.468321][ T5758] RDX: 00000000200018c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.471299][ T5758] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.473991][ T5758] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 84.476732][ T5758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.479950][ T5758] [ 85.218025][ T5771] netlink: 'syz.2.108': attribute type 30 has an invalid length. [ 85.220979][ T5771] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 85.243583][ T5771] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 85.265335][ T5771] dlm: non-version read from control device 1 [ 85.717685][ T5782] netlink: 40 bytes leftover after parsing attributes in process `syz.2.111'. [ 85.833425][ T5636] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 86.055866][ T5636] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 86.059651][ T5636] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.067785][ T5636] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.071844][ T5636] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 86.082203][ T5636] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 86.093747][ T5636] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 86.097931][ T5636] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 86.101492][ T5636] usb 6-1: Product: syz [ 86.103970][ T5636] usb 6-1: Manufacturer: syz [ 86.119720][ T5636] cdc_wdm 6-1:1.0: skipping garbage [ 86.122258][ T5636] cdc_wdm 6-1:1.0: skipping garbage [ 86.126760][ T5636] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 86.129444][ T5636] cdc_wdm 6-1:1.0: Unknown control protocol [ 86.404076][ T25] usb 6-1: USB disconnect, device number 3 [ 86.635965][ T5803] netlink: 'syz.2.119': attribute type 1 has an invalid length. [ 86.639469][ T5803] netlink: 224 bytes leftover after parsing attributes in process `syz.2.119'. [ 86.737882][ T5807] raw_sendmsg: syz.2.120 forgot to set AF_INET. Fix it! [ 86.818353][ T5809] netlink: 'syz.2.121': attribute type 15 has an invalid length. [ 86.821254][ T5809] netlink: 'syz.2.121': attribute type 3 has an invalid length. [ 86.825749][ T5809] netlink: 654 bytes leftover after parsing attributes in process `syz.2.121'. [ 86.831557][ T5369] Bluetooth: to_multiplier 42238 > 3200 [ 87.749966][ T5828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'. [ 87.858313][ T5832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.128'. [ 87.937133][ T5838] FAULT_INJECTION: forcing a failure. [ 87.937133][ T5838] name failslab, interval 1, probability 0, space 0, times 0 [ 87.941919][ T5838] CPU: 3 UID: 0 PID: 5838 Comm: syz.2.131 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 87.946424][ T5838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.950341][ T5838] Call Trace: [ 87.951619][ T5838] [ 87.952798][ T5838] dump_stack_lvl+0x16c/0x1f0 [ 87.954673][ T5838] should_fail_ex+0x497/0x5b0 [ 87.956385][ T5838] should_failslab+0xc2/0x120 [ 87.958044][ T5838] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 87.960030][ T5838] ? skb_clone+0x190/0x3f0 [ 87.961556][ T5838] skb_clone+0x190/0x3f0 [ 87.963037][ T5838] dev_queue_xmit_nit+0x38f/0xba0 [ 87.964735][ T5838] dev_hard_start_xmit+0x56/0x790 [ 87.966449][ T5838] ? kasan_save_track+0x14/0x30 [ 87.967944][ T5838] __dev_queue_xmit+0x7c7/0x4300 [ 87.969506][ T5838] ? __pfx___dev_queue_xmit+0x10/0x10 [ 87.971398][ T5838] ? rcu_is_watching+0x12/0xc0 [ 87.973303][ T5838] ? __copy_skb_header+0x2e8/0x5b0 [ 87.975620][ T5838] ? __skb_clone+0x570/0x760 [ 87.977408][ T5838] netlink_deliver_tap+0xa8a/0xcf0 [ 87.979344][ T5838] netlink_unicast+0x5e1/0x7f0 [ 87.981244][ T5838] ? __pfx_netlink_unicast+0x10/0x10 [ 87.983419][ T5838] ? __phys_addr_symbol+0x30/0x80 [ 87.985323][ T5838] ? __check_object_size+0x497/0x720 [ 87.987163][ T5838] netlink_sendmsg+0x8b8/0xd70 [ 87.988754][ T5838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.990545][ T5838] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 87.992419][ T5838] ____sys_sendmsg+0x9b4/0xb50 [ 87.994442][ T5838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.996383][ T5838] ? get_compat_msghdr+0x11b/0x170 [ 87.998300][ T5838] ? __pfx___lock_acquire+0x10/0x10 [ 88.000539][ T5838] ___sys_sendmsg+0x135/0x1e0 [ 88.002567][ T5838] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.004836][ T5838] ? ksys_write+0x21c/0x260 [ 88.006815][ T5838] ? __fget_light+0x173/0x210 [ 88.009083][ T5838] __sys_sendmsg+0x117/0x1f0 [ 88.011115][ T5838] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.013332][ T5838] __do_fast_syscall_32+0x73/0x120 [ 88.015511][ T5838] do_fast_syscall_32+0x32/0x80 [ 88.017586][ T5838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.020270][ T5838] RIP: 0023:0xf747e579 [ 88.022104][ T5838] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 88.023132][ T5835] 9pnet_fd: Insufficient options for proto=fd [ 88.030931][ T5838] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 88.030970][ T5838] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 88.030981][ T5838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.030991][ T5838] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.031001][ T5838] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 88.031011][ T5838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.031025][ T5838] [ 88.377044][ T5850] cgroup: fork rejected by pids controller in /syz2 [ 89.144110][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.297029][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.360042][ T5874] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.414231][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.527176][ T5362] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.531811][ T5362] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.542057][ T5362] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.543179][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.549909][ T5362] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.556226][ T5362] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.559721][ T5362] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.875712][ T11] bridge_slave_1: left allmulticast mode [ 89.878284][ T11] bridge_slave_1: left promiscuous mode [ 89.882629][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.912339][ T11] bridge_slave_0: left allmulticast mode [ 89.914870][ T11] bridge_slave_0: left promiscuous mode [ 89.917425][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.996618][ T5886] FAULT_INJECTION: forcing a failure. [ 89.996618][ T5886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.996697][ T5886] [ 89.996701][ T5886] ====================================================== [ 89.996705][ T5886] WARNING: possible circular locking dependency detected [ 89.996711][ T5886] 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 Not tainted [ 89.996719][ T5886] ------------------------------------------------------ [ 89.996723][ T5886] syz.0.145/5886 is trying to acquire lock: [ 89.996730][ T5886] ffffffff8dda75d8 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x12/0x70 [ 89.996771][ T5886] [ 89.996771][ T5886] but task is already holding lock: [ 89.996775][ T5886] ffff88802b83edd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 89.996808][ T5886] [ 89.996808][ T5886] which lock already depends on the new lock. [ 89.996808][ T5886] [ 89.996812][ T5886] [ 89.996812][ T5886] the existing dependency chain (in reverse order) is: [ 89.996816][ T5886] [ 89.996816][ T5886] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 89.996832][ T5886] _raw_spin_lock_nested+0x31/0x40 [ 89.996848][ T5886] raw_spin_rq_lock_nested+0x29/0x130 [ 89.996866][ T5886] task_fork_fair+0x73/0x250 [ 89.996881][ T5886] sched_cgroup_fork+0x3cf/0x510 [ 89.996893][ T5886] copy_process+0x4710/0x6f50 [ 89.996907][ T5886] kernel_clone+0xfd/0x960 [ 89.996921][ T5886] user_mode_thread+0xb4/0xf0 [ 89.996936][ T5886] rest_init+0x23/0x2b0 [ 89.996947][ T5886] start_kernel+0x3df/0x4c0 [ 89.996963][ T5886] x86_64_start_reservations+0x18/0x30 [ 89.996980][ T5886] x86_64_start_kernel+0xb2/0xc0 [ 89.996997][ T5886] common_startup_64+0x13e/0x148 [ 89.997011][ T5886] [ 89.997011][ T5886] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 89.997027][ T5886] _raw_spin_lock_irqsave+0x3a/0x60 [ 89.997042][ T5886] try_to_wake_up+0x9a/0x13e0 [ 89.997058][ T5886] up+0x79/0xb0 [ 89.997074][ T5886] console_unlock+0x23e/0x290 [ 89.997095][ T5886] vga_remove_vgacon+0x90/0xd0 [ 89.997111][ T5886] aperture_remove_conflicting_pci_devices+0x16a/0x1e0 [ 89.997148][ T5886] bochs_pci_probe+0x101/0x1150 [ 89.997170][ T5886] local_pci_probe+0xde/0x1b0 [ 89.997189][ T5886] pci_device_probe+0x29d/0x7b0 [ 89.997209][ T5886] really_probe+0x23e/0xa90 [ 89.997229][ T5886] __driver_probe_device+0x1de/0x440 [ 89.997241][ T5886] driver_probe_device+0x4c/0x1b0 [ 89.997252][ T5886] __driver_attach+0x283/0x580 [ 89.997263][ T5886] bus_for_each_dev+0x13c/0x1d0 [ 89.997279][ T5886] bus_add_driver+0x2e9/0x690 [ 89.997297][ T5886] driver_register+0x15c/0x4b0 [ 89.997311][ T5886] bochs_pci_driver_init+0x67/0x80 [ 89.997329][ T5886] do_one_initcall+0x128/0x630 [ 89.997346][ T5886] kernel_init_freeable+0x660/0xc50 [ 89.997363][ T5886] kernel_init+0x1c/0x2b0 [ 89.997380][ T5886] ret_from_fork+0x45/0x80 [ 89.997400][ T5886] ret_from_fork_asm+0x1a/0x30 [ 89.997418][ T5886] [ 89.997418][ T5886] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 89.997434][ T5886] __lock_acquire+0x24ed/0x3cb0 [ 89.997451][ T5886] lock_acquire+0x1b1/0x560 [ 89.997467][ T5886] _raw_spin_lock_irqsave+0x3a/0x60 [ 89.997483][ T5886] down_trylock+0x12/0x70 [ 89.997501][ T5886] __down_trylock_console_sem+0x40/0x140 [ 89.997519][ T5886] vprintk_emit+0x3d3/0x600 [ 89.997529][ T5886] vprintk+0x7f/0xa0 [ 89.997541][ T5886] _printk+0xc8/0x100 [ 89.997557][ T5886] should_fail_ex+0x46c/0x5b0 [ 89.997572][ T5886] strncpy_from_user+0x38/0x320 [ 89.997585][ T5886] strncpy_from_user_nofault+0x7f/0x180 [ 89.997602][ T5886] bpf_probe_read_user_str+0x26/0x70 [ 89.997623][ T5886] bpf_prog_6fb7ada547f278f2+0x3d/0x3f [ 89.997634][ T5886] bpf_trace_run4+0x245/0x5a0 [ 89.997648][ T5886] __traceiter_sched_switch+0x6c/0xc0 [ 89.997666][ T5886] __schedule+0x17cf/0x5490 [ 89.997682][ T5886] schedule+0xe7/0x350 [ 89.997697][ T5886] schedule_timeout+0x258/0x2a0 [ 89.997710][ T5886] __wait_for_common+0x3de/0x5f0 [ 89.997726][ T5886] wait_for_completion_killable+0x1f/0x40 [ 89.997744][ T5886] __kthread_create_on_node+0x285/0x400 [ 89.997759][ T5886] kthread_create_on_node+0xc8/0x110 [ 89.997774][ T5886] rxrpc_open_socket+0x3ea/0x6c0 [ 89.997790][ T5886] rxrpc_lookup_local+0xc12/0x1240 [ 89.997805][ T5886] rxrpc_sendmsg+0x375/0x5f0 [ 89.997817][ T5886] ____sys_sendmsg+0x9b4/0xb50 [ 89.997831][ T5886] ___sys_sendmsg+0x135/0x1e0 [ 89.997848][ T5886] __sys_sendmsg+0x117/0x1f0 [ 89.997865][ T5886] __do_fast_syscall_32+0x73/0x120 [ 89.997884][ T5886] do_fast_syscall_32+0x32/0x80 [ 89.997902][ T5886] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.997918][ T5886] [ 89.997918][ T5886] other info that might help us debug this: [ 89.997918][ T5886] [ 89.997921][ T5886] Chain exists of: [ 89.997921][ T5886] (console_sem).lock --> &p->pi_lock --> &rq->__lock [ 89.997921][ T5886] [ 89.997939][ T5886] Possible unsafe locking scenario: [ 89.997939][ T5886] [ 89.997942][ T5886] CPU0 CPU1 [ 89.997945][ T5886] ---- ---- [ 89.997948][ T5886] lock(&rq->__lock); [ 89.997956][ T5886] lock(&p->pi_lock); [ 89.997964][ T5886] lock(&rq->__lock); [ 89.997972][ T5886] lock((console_sem).lock); [ 89.997979][ T5886] [ 89.997979][ T5886] *** DEADLOCK *** [ 89.997979][ T5886] [ 89.997982][ T5886] 4 locks held by syz.0.145/5886: [ 89.998011][ T5886] #0: ffff888024ed0998 (sk_lock-AF_RXRPC){+.+.}-{0:0}, at: rxrpc_sendmsg+0x113/0x5f0 [ 89.998041][ T5886] #1: ffff888021afc1e8 (&rxnet->local_mutex){+.+.}-{3:3}, at: rxrpc_lookup_local+0xc6/0x1240 [ 89.998075][ T5886] #2: ffff88802b83edd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 89.998109][ T5886] #3: ffffffff8ddb94a0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x1d6/0x5a0 [ 89.998141][ T5886] [ 89.998141][ T5886] stack backtrace: [ 89.998145][ T5886] CPU: 3 UID: 0 PID: 5886 Comm: syz.0.145 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 89.998161][ T5886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.998169][ T5886] Call Trace: [ 89.998175][ T5886] [ 89.998182][ T5886] dump_stack_lvl+0x116/0x1f0 [ 89.998200][ T5886] check_noncircular+0x31a/0x400 [ 89.998219][ T5886] ? __pfx_check_noncircular+0x10/0x10 [ 89.998236][ T5886] ? __pfx__prb_read_valid+0x10/0x10 [ 89.998252][ T5886] ? __pfx_format_decode+0x10/0x10 [ 89.998273][ T5886] ? lockdep_lock+0xc6/0x200 [ 89.998287][ T5886] ? __pfx_lockdep_lock+0x10/0x10 [ 89.998302][ T5886] ? vsnprintf+0x40f/0x1870 [ 89.998324][ T5886] __lock_acquire+0x24ed/0x3cb0 [ 89.998346][ T5886] ? __pfx___lock_acquire+0x10/0x10 [ 89.998366][ T5886] ? vprintk_store+0x222/0xbb0 [ 89.998393][ T5886] lock_acquire+0x1b1/0x560 [ 89.998411][ T5886] ? down_trylock+0x12/0x70 [ 89.998431][ T5886] ? __pfx_lock_acquire+0x10/0x10 [ 89.998450][ T5886] ? __pfx_mark_lock+0x10/0x10 [ 89.998470][ T5886] ? hlock_class+0x4e/0x130 [ 89.998485][ T5886] ? vprintk+0x7f/0xa0 [ 89.998498][ T5886] _raw_spin_lock_irqsave+0x3a/0x60 [ 89.998515][ T5886] ? down_trylock+0x12/0x70 [ 89.998534][ T5886] down_trylock+0x12/0x70 [ 89.998554][ T5886] __down_trylock_console_sem+0x40/0x140 [ 89.998575][ T5886] vprintk_emit+0x3d3/0x600 [ 89.998590][ T5886] vprintk+0x7f/0xa0 [ 89.998604][ T5886] _printk+0xc8/0x100 [ 89.998621][ T5886] ? __pfx__printk+0x10/0x10 [ 89.998638][ T5886] ? __pfx___lock_acquire+0x10/0x10 [ 89.998658][ T5886] ? ___ratelimit+0x24c/0x580 [ 89.998680][ T5886] ? __pfx____ratelimit+0x10/0x10 [ 89.998702][ T5886] should_fail_ex+0x46c/0x5b0 [ 89.998719][ T5886] strncpy_from_user+0x38/0x320 [ 89.998735][ T5886] strncpy_from_user_nofault+0x7f/0x180 [ 89.998755][ T5886] bpf_probe_read_user_str+0x26/0x70 [ 89.998778][ T5886] bpf_prog_6fb7ada547f278f2+0x3d/0x3f [ 89.998789][ T5886] bpf_trace_run4+0x245/0x5a0 [ 89.998806][ T5886] ? __pfx_bpf_trace_run4+0x10/0x10 [ 89.998825][ T5886] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 89.998848][ T5886] __traceiter_sched_switch+0x6c/0xc0 [ 89.998869][ T5886] __schedule+0x17cf/0x5490 [ 89.998885][ T5886] ? __pfx___lock_acquire+0x10/0x10 [ 89.998902][ T5886] ? hlock_class+0x4e/0x130 [ 89.998915][ T5886] ? mark_lock+0xb5/0xc60 [ 89.998937][ T5886] ? __pfx___schedule+0x10/0x10 [ 89.998955][ T5886] ? schedule+0x298/0x350 [ 89.998971][ T5886] ? __pfx_lock_release+0x10/0x10 [ 89.998990][ T5886] ? __pfx_mark_lock+0x10/0x10 [ 89.999009][ T5886] schedule+0xe7/0x350 [ 89.999026][ T5886] schedule_timeout+0x258/0x2a0 [ 89.999042][ T5886] ? __pfx_schedule_timeout+0x10/0x10 [ 89.999061][ T5886] ? mark_held_locks+0x9f/0xe0 [ 89.999079][ T5886] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.999097][ T5886] __wait_for_common+0x3de/0x5f0 [ 89.999115][ T5886] ? __pfx_schedule_timeout+0x10/0x10 [ 89.999131][ T5886] ? __pfx___wait_for_common+0x10/0x10 [ 89.999149][ T5886] ? __pfx_try_to_wake_up+0x10/0x10 [ 89.999166][ T5886] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 89.999189][ T5886] wait_for_completion_killable+0x1f/0x40 [ 89.999209][ T5886] __kthread_create_on_node+0x285/0x400 [ 89.999226][ T5886] ? __pfx___kthread_create_on_node+0x10/0x10 [ 89.999247][ T5886] ? find_held_lock+0x59/0x110 [ 89.999261][ T5886] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 89.999277][ T5886] kthread_create_on_node+0xc8/0x110 [ 89.999293][ T5886] ? __pfx_kthread_create_on_node+0x10/0x10 [ 89.999308][ T5886] ? rxrpc_open_socket+0x3bd/0x6c0 [ 89.999327][ T5886] ? mark_held_locks+0x9f/0xe0 [ 89.999349][ T5886] rxrpc_open_socket+0x3ea/0x6c0 [ 89.999366][ T5886] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 89.999388][ T5886] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 89.999403][ T5886] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 89.999420][ T5886] ? __pfx_lock_release+0x10/0x10 [ 89.999442][ T5886] ? lockdep_init_map_type+0x16d/0x7d0 [ 89.999461][ T5886] ? rcu_is_watching+0x12/0xc0 [ 89.999482][ T5886] rxrpc_lookup_local+0xc12/0x1240 [ 89.999501][ T5886] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 89.999518][ T5886] ? rxrpc_sendmsg+0x113/0x5f0 [ 89.999531][ T5886] ? __local_bh_enable_ip+0xa4/0x120 [ 89.999548][ T5886] rxrpc_sendmsg+0x375/0x5f0 [ 89.999562][ T5886] ____sys_sendmsg+0x9b4/0xb50 [ 89.999577][ T5886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.999591][ T5886] ? get_compat_msghdr+0x11b/0x170 [ 89.999613][ T5886] ? __pfx___lock_acquire+0x10/0x10 [ 89.999633][ T5886] ___sys_sendmsg+0x135/0x1e0 [ 89.999653][ T5886] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.999677][ T5886] ? ksys_write+0x21c/0x260 [ 89.999702][ T5886] ? __fget_light+0x173/0x210 [ 89.999720][ T5886] __sys_sendmsg+0x117/0x1f0 [ 89.999738][ T5886] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.999765][ T5886] __do_fast_syscall_32+0x73/0x120 [ 89.999785][ T5886] do_fast_syscall_32+0x32/0x80 [ 89.999806][ T5886] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.999822][ T5886] RIP: 0023:0xf7f27579 [ 89.999833][ T5886] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 89.999846][ T5886] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 89.999859][ T5886] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000080 [ 89.999868][ T5886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.999876][ T5886] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.999884][ T5886] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 89.999893][ T5886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.999907][ T5886] [ 90.480376][ T5886] CPU: 3 UID: 0 PID: 5886 Comm: syz.0.145 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 90.485425][ T5886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.489971][ T5886] Call Trace: [ 90.491344][ T5886] [ 90.492562][ T5886] dump_stack_lvl+0x116/0x1f0 [ 90.494674][ T5886] should_fail_ex+0x497/0x5b0 [ 90.496672][ T5886] strncpy_from_user+0x38/0x320 [ 90.498825][ T5886] strncpy_from_user_nofault+0x7f/0x180 [ 90.501194][ T5886] bpf_probe_read_user_str+0x26/0x70 [ 90.503478][ T5886] bpf_prog_6fb7ada547f278f2+0x3d/0x3f [ 90.505741][ T5886] bpf_trace_run4+0x245/0x5a0 [ 90.508119][ T5886] ? __pfx_bpf_trace_run4+0x10/0x10 [ 90.510532][ T5886] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 90.513348][ T5886] __traceiter_sched_switch+0x6c/0xc0 [ 90.515719][ T5886] __schedule+0x17cf/0x5490 [ 90.517744][ T5886] ? __pfx___lock_acquire+0x10/0x10 [ 90.520245][ T5886] ? hlock_class+0x4e/0x130 [ 90.522501][ T5886] ? mark_lock+0xb5/0xc60 [ 90.524585][ T5886] ? __pfx___schedule+0x10/0x10 [ 90.526420][ T5886] ? schedule+0x298/0x350 [ 90.527988][ T5886] ? __pfx_lock_release+0x10/0x10 [ 90.529904][ T5886] ? __pfx_mark_lock+0x10/0x10 [ 90.531981][ T5886] schedule+0xe7/0x350 [ 90.533737][ T5886] schedule_timeout+0x258/0x2a0 [ 90.535725][ T5886] ? __pfx_schedule_timeout+0x10/0x10 [ 90.537889][ T5886] ? mark_held_locks+0x9f/0xe0 [ 90.540236][ T5886] ? _raw_spin_unlock_irq+0x23/0x50 [ 90.542727][ T5886] __wait_for_common+0x3de/0x5f0 [ 90.544929][ T5886] ? __pfx_schedule_timeout+0x10/0x10 [ 90.547499][ T5886] ? __pfx___wait_for_common+0x10/0x10 [ 90.550087][ T5886] ? __pfx_try_to_wake_up+0x10/0x10 [ 90.552552][ T5886] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 90.555144][ T5886] wait_for_completion_killable+0x1f/0x40 [ 90.557794][ T5886] __kthread_create_on_node+0x285/0x400 [ 90.560411][ T5886] ? __pfx___kthread_create_on_node+0x10/0x10 [ 90.563222][ T5886] ? find_held_lock+0x59/0x110 [ 90.565362][ T5886] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 90.567873][ T5886] kthread_create_on_node+0xc8/0x110 [ 90.570214][ T5886] ? __pfx_kthread_create_on_node+0x10/0x10 [ 90.572841][ T5886] ? rxrpc_open_socket+0x3bd/0x6c0 [ 90.575171][ T5886] ? mark_held_locks+0x9f/0xe0 [ 90.577300][ T5886] rxrpc_open_socket+0x3ea/0x6c0 [ 90.579546][ T5886] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 90.582155][ T5886] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 90.584559][ T5886] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 90.587190][ T5886] ? __pfx_lock_release+0x10/0x10 [ 90.589383][ T5886] ? lockdep_init_map_type+0x16d/0x7d0 [ 90.591852][ T5886] ? rcu_is_watching+0x12/0xc0 [ 90.593786][ T5886] rxrpc_lookup_local+0xc12/0x1240 [ 90.596012][ T5886] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 90.598509][ T5886] ? rxrpc_sendmsg+0x113/0x5f0 [ 90.600824][ T5886] ? __local_bh_enable_ip+0xa4/0x120 [ 90.603354][ T5886] rxrpc_sendmsg+0x375/0x5f0 [ 90.605579][ T5886] ____sys_sendmsg+0x9b4/0xb50 [ 90.607873][ T5886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.610282][ T5886] ? get_compat_msghdr+0x11b/0x170 [ 90.612548][ T5886] ? __pfx___lock_acquire+0x10/0x10 [ 90.614937][ T5886] ___sys_sendmsg+0x135/0x1e0 [ 90.616935][ T5886] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.619342][ T5886] ? ksys_write+0x21c/0x260 [ 90.621651][ T5886] ? __fget_light+0x173/0x210 [ 90.623949][ T5886] __sys_sendmsg+0x117/0x1f0 [ 90.626174][ T5886] ? __pfx___sys_sendmsg+0x10/0x10 [ 90.628615][ T5886] __do_fast_syscall_32+0x73/0x120 [ 90.630854][ T5886] do_fast_syscall_32+0x32/0x80 [ 90.633216][ T5886] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.636233][ T5886] RIP: 0023:0xf7f27579 [ 90.638808][ T5886] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 90.648514][ T5886] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 90.652118][ T5886] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000080 [ 90.655729][ T5886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.659172][ T5886] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.662635][ T5886] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 90.666277][ T5886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.670408][ T5886] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 91.092927][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.097297][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.102148][ T11] bond0 (unregistering): Released all slaves [ 91.556174][ T11] hsr_slave_0: left promiscuous mode [ 91.559820][ T11] hsr_slave_1: left promiscuous mode [ 91.570386][ T11] veth1_macvtap: left promiscuous mode [ 91.572754][ T11] veth0_macvtap: left promiscuous mode [ 91.575812][ T11] veth1_vlan: left promiscuous mode [ 91.578071][ T11] veth0_vlan: left promiscuous mode [ 92.002917][ T11] team0 (unregistering): Port device team_slave_1 removed [ 92.120371][ T11] team0 (unregistering): Port device team_slave_0 removed [ 93.168651][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.300207][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.370884][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.449441][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.548147][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.619478][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.738934][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.788547][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.905396][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.971929][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.051139][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.191774][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.416661][ T11] bridge_slave_1: left allmulticast mode [ 94.419218][ T11] bridge_slave_1: left promiscuous mode [ 94.421831][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.428066][ T11] bridge_slave_0: left allmulticast mode [ 94.430718][ T11] bridge_slave_0: left promiscuous mode [ 94.432967][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.439168][ T11] bridge_slave_1: left allmulticast mode [ 94.442126][ T11] bridge_slave_1: left promiscuous mode [ 94.446517][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.451257][ T11] bridge_slave_0: left allmulticast mode [ 94.454581][ T11] bridge_slave_0: left promiscuous mode [ 94.456941][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.462334][ T11] bridge_slave_1: left allmulticast mode [ 94.465806][ T11] bridge_slave_1: left promiscuous mode [ 94.468758][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.473214][ T11] bridge_slave_0: left allmulticast mode [ 94.475462][ T11] bridge_slave_0: left promiscuous mode [ 94.478009][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.888009][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.893142][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.898799][ T11] bond0 (unregistering): Released all slaves [ 94.907840][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.914254][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.918759][ T11] bond0 (unregistering): Released all slaves [ 94.924237][ T11] bond0 (unregistering): Released all slaves [ 94.934332][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.938992][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.943220][ T11] bond0 (unregistering): Released all slaves [ 95.997852][ T11] hsr_slave_0: left promiscuous mode [ 96.001387][ T11] hsr_slave_1: left promiscuous mode [ 96.008888][ T11] hsr_slave_0: left promiscuous mode [ 96.012195][ T11] hsr_slave_1: left promiscuous mode [ 96.024267][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.027758][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.034049][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.037272][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.046786][ T11] hsr_slave_0: left promiscuous mode [ 96.050829][ T11] hsr_slave_1: left promiscuous mode [ 96.054730][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.057880][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.061814][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.067578][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.077035][ T11] veth1_macvtap: left promiscuous mode [ 96.079280][ T11] veth0_macvtap: left promiscuous mode [ 96.081284][ T11] veth1_vlan: left promiscuous mode [ 96.083651][ T11] veth0_vlan: left promiscuous mode [ 96.087692][ T11] veth1_macvtap: left promiscuous mode [ 96.090115][ T11] veth0_macvtap: left promiscuous mode [ 96.092653][ T11] veth1_vlan: left promiscuous mode [ 96.096301][ T11] veth0_vlan: left promiscuous mode [ 96.101060][ T11] veth1_macvtap: left promiscuous mode [ 96.103775][ T11] veth0_macvtap: left promiscuous mode [ 96.106532][ T11] veth1_vlan: left promiscuous mode [ 96.109190][ T11] veth0_vlan: left promiscuous mode [ 96.574828][ T11] team0 (unregistering): Port device team_slave_1 removed [ 96.621663][ T11] team0 (unregistering): Port device team_slave_0 removed [ 97.115616][ T11] team0 (unregistering): Port device team_slave_1 removed [ 97.174918][ T11] team0 (unregistering): Port device team_slave_0 removed [ 97.708451][ T11] team0 (unregistering): Port device team_slave_1 removed [ 97.763696][ T11] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 10:42:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff813be4ae RDX=ffffffff8da957c0 RSI=ffffffff813be4cb RDI=0000000000000000 RBP=ffff88802b83edc0 RSP=ffffffff8da07998 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b63fc80 R15=ffffed1005707db8 RIP=ffffffff813be4cc RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000005b060000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000040000 RBX=0000000000000003 RCX=ffffc90006001000 RDX=0000000000040000 RSI=ffffffff813be4cb RDI=0000000000000000 RBP=ffff88802b63edc0 RSP=ffffc9000290f558 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b73fc80 R15=ffffed10056c7db8 RIP=ffffffff813be4cc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=0000000066a2c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000810880 Opmask02=000000007ffeffff Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3f2be680 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464646464646464 6464646464646464 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 000000000000ff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 26ab3492ed90e1fd 737326f528f6d1a0 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737142 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54003d534b4e494c 564544003d4d4554 535953425553003d 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00003100302d7874 2f7365756575712f 356874652f74656e 2f326d6973766564 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00544355444f5250 0000000000000021 000000000000302e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4400444955564554 003d444955564544 0045444f4d564575 317c647b6772643d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f7f766f7f7f7f7e 7f7f746f7f7f777f 7f7f7d6f7d7f577d 7f7c7f7f6f7f7f7d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263b383a3a263a 383a3a26493b3a3a 26483b3a3a264b3b 3a0a00307f617930 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f302f30003235 3434003637003932 3130343131383d44 4549494341495400 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b83edc0 RCX=ffffffff8b0af704 RDX=ffffed1005707db9 RSI=0000000000000004 RDI=ffff88802b83edc0 RBP=0000000000000003 RSP=ffffc90000540b88 R8 =0000000000000000 R9 =ffffed1005707db8 R10=ffff88802b83edc3 R11=ffffffff815efa60 R12=ffffed1005707db8 R13=0000000000000000 R14=ffff88802b83fc80 R15=0000000000000002 RIP=ffffffff8b0af740 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=0000000045e96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff84fc2880 RDI=ffffffff9a516680 RBP=ffffffff9a516640 RSP=ffffc90023976cb0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=ffffffff9a516640 R14=ffffffff9a516690 R15=000000000000004e RIP=ffffffff84fc28a7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b900000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f56a5fbc CR3=00000000669ea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001c000000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000