last executing test programs: 3m3.105618823s ago: executing program 3 (id=1156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x44, 0x0, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010100}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x0) (fail_nth: 3) 3m3.104978294s ago: executing program 3 (id=1158): openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa, 0x2}]}, @var={0x2, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x2e, 0x61]}}, 0x0, 0x40, 0x0, 0x1, 0x5, 0x0, @void, @value}, 0x28) 3m3.046189493s ago: executing program 3 (id=1159): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, 0x0) 3m2.966768475s ago: executing program 3 (id=1161): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000980), &(0x7f00000009c0)=0xc) 3m2.962572481s ago: executing program 3 (id=1162): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='svcrdma_dma_map_rw_err\x00', r0, 0x0, 0x81}, 0x18) 3m2.895356944s ago: executing program 3 (id=1163): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000080)={0xffffffffffffffff, 0xf0, 0x4, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x4) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x4, 0x30313953, 0x0, 0xa, [{}, {0x10}, {}, {0xfffffffe}, {}, {}, {0x0, 0xfffffffd}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0xfffffffffffffda5) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44881) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m47.421469596s ago: executing program 32 (id=1163): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000080)={0xffffffffffffffff, 0xf0, 0x4, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x4) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x4, 0x30313953, 0x0, 0xa, [{}, {0x10}, {}, {0xfffffffe}, {}, {}, {0x0, 0xfffffffd}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0xfffffffffffffda5) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44881) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 29.214689984s ago: executing program 0 (id=1582): bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) io_submit(r3, 0x3, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)) 28.0150735s ago: executing program 0 (id=1586): bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) io_submit(r3, 0x3, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x14) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)) 24.983469767s ago: executing program 0 (id=1595): syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b, 0x0, r1}, &(0x7f0000000140), &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='!\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103fcffffff000000002b0000000c0006000100000001000000"], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618000000008553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 23.414598453s ago: executing program 0 (id=1599): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_unix(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10000, &(0x7f0000000440)={'trans=unix,', {[{@debug}, {@access_user}, {@access_uid={'access', 0x3d, 0xee01}}, {@access_user}, {@posixacl}, {@dfltgid}, {@loose}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'bridge0\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x17, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x24}}, 0x40) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) pipe2$9p(&(0x7f0000000100), 0x80000) r5 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd}) readv(r5, &(0x7f0000000700)=[{&(0x7f0000000080)=""/63, 0x3f}], 0x1) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 22.642154071s ago: executing program 0 (id=1600): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x9b5b, 0x4, {{0x26, 0x4, 0x0, 0x4, 0x98, 0x68, 0x0, 0x1, 0x4, 0x0, @loopback, @private=0xa010102, {[@cipso={0x86, 0x6f, 0x2, [{0x1, 0x7, "1a0b93f000"}, {0x5, 0x9, "f34691972d10c4"}, {0x2, 0x12, "bc959d02ee9bfdbe7c7ca5b7b8bcd156"}, {0x0, 0x3, "e9"}, {0x7, 0x12, "1d8676d2b150fc75375c734dbc05b806"}, {0x1, 0x9, "03a4d56e95183d"}, {0x6, 0xf, "62d6323c66ccc3985f84ceeccf"}, {0x1, 0x10, "c6dd14213edd78795d856981742d"}, {0x0, 0xa, "3c546603e285e717"}]}, @timestamp_addr={0x44, 0xc, 0x24, 0x1, 0x3, [{@remote, 0x40000000}]}, @generic={0x7, 0x6, "e0b5d14c"}]}}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=@newqdisc={0xbc, 0x24, 0x200, 0x3, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x74, 0xc, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x33}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x166}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x80}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xfe}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xfc}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xfa}]}]}]}}]}, 0xbc}}, 0x4040000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) io_uring_enter(r7, 0x1a6e, 0xef5e, 0x0, &(0x7f00000001c0)={[0x7e, 0xfffebbfe]}, 0x8) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_AUDIO(r10, 0x40345622, &(0x7f0000000040)={0x2, "984c323de8fed63723b821c9a59a4006f7fe408ee3314cad6c8ad393b58ba111", 0x2}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x3c) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r12, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r12, 0x8914, &(0x7f0000000000)) 22.151488469s ago: executing program 0 (id=1605): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)={@broadcast, @broadcast, 0x1, 0x3, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x38011, r5, 0x10002000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000140), 0x0, 0x4) ioctl$UFFDIO_CONTINUE(r6, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3000000}) 21.834877062s ago: executing program 4 (id=1607): syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b, 0x0, r1}, &(0x7f0000000140), &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618000000008553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 21.083869495s ago: executing program 4 (id=1608): bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) io_submit(r3, 0x3, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13.347443209s ago: executing program 4 (id=1613): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x9b5b, 0x4, {{0x26, 0x4, 0x0, 0x4, 0x98, 0x68, 0x0, 0x1, 0x4, 0x0, @loopback, @private=0xa010102, {[@cipso={0x86, 0x6f, 0x2, [{0x1, 0x7, "1a0b93f000"}, {0x5, 0x9, "f34691972d10c4"}, {0x2, 0x12, "bc959d02ee9bfdbe7c7ca5b7b8bcd156"}, {0x0, 0x3, "e9"}, {0x7, 0x12, "1d8676d2b150fc75375c734dbc05b806"}, {0x1, 0x9, "03a4d56e95183d"}, {0x6, 0xf, "62d6323c66ccc3985f84ceeccf"}, {0x1, 0x10, "c6dd14213edd78795d856981742d"}, {0x0, 0xa, "3c546603e285e717"}]}, @timestamp_addr={0x44, 0xc, 0x24, 0x1, 0x3, [{@remote, 0x40000000}]}, @generic={0x7, 0x6, "e0b5d14c"}]}}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=@newqdisc={0xbc, 0x24, 0x200, 0x3, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x74, 0xc, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x33}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x166}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x80}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xfe}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xfc}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xfa}]}]}]}}]}, 0xbc}}, 0x4040000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) io_uring_enter(r7, 0x1a6e, 0xef5e, 0x0, &(0x7f00000001c0)={[0x7e, 0xfffebbfe]}, 0x8) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_AUDIO(r10, 0x40345622, &(0x7f0000000040)={0x2, "984c323de8fed63723b821c9a59a4006f7fe408ee3314cad6c8ad393b58ba111", 0x2}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x3c) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r12, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r12, 0x8914, &(0x7f0000000000)) 12.964769408s ago: executing program 4 (id=1614): bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) io_submit(r3, 0x3, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x14) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) pipe(&(0x7f0000000140)) 10.272622055s ago: executing program 2 (id=1620): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000440)="1441c05465f0006fc8afa8e4080031b96e863f8554961f1c13c70e147df1575f1602", 0x22, 0x4008000, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 10.272267s ago: executing program 2 (id=1621): bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) io_submit(r3, 0x3, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x14) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) pipe(&(0x7f0000000140)) 6.875760948s ago: executing program 33 (id=1605): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)={@broadcast, @broadcast, 0x1, 0x3, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x38011, r5, 0x10002000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000140), 0x0, 0x4) ioctl$UFFDIO_CONTINUE(r6, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3000000}) 6.418847913s ago: executing program 1 (id=1627): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000040) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={0x0, 0x2650}, 0x1, 0x0, 0x0, 0x4}, 0x4810) 5.497849972s ago: executing program 1 (id=1628): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x0, 0x4}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)={0x1d}) socket$inet_sctp(0x2, 0x5, 0x84) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) mkdir(&(0x7f0000000000)='./file0\x00', 0x26) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000002000000008d080000711209000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) lseek(r8, 0x2, 0x0) 4.340264556s ago: executing program 1 (id=1629): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x0, 0x4}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)={0x1d}) 3.070246577s ago: executing program 1 (id=1630): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x10243, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x8, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_names='batadv0\x00'}) r7 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_DQEVENT(r7, 0x80785659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) fstat(r1, &(0x7f0000006f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000007140)={&(0x7f0000000180)={0x50, 0xfffffffffffffffe, 0xffffffffffffffff, {0x7, 0x29, 0x8, 0x2c020c24, 0x1000, 0x0, 0xa0, 0x6, 0x0, 0x0, 0x4, 0xb}}, &(0x7f0000000300)={0x18, 0x0, 0x2, {0x7fffffff}}, &(0x7f0000000340)={0x18, 0x0, 0x400, {0xb}}, &(0x7f0000002680)={0x18, 0x0, 0x0, {0x3}}, 0x0, &(0x7f0000002440)={0x28, 0x0, 0xfffffffffffffffe, {{0x2, 0x40, 0x2}}}, &(0x7f0000002480)={0x60, 0x0, 0x8000000000000000, {{0xf72, 0x2, 0xf, 0x4, 0x8f5b, 0x297e1689, 0x5}}}, &(0x7f0000002500)={0x18, 0x0, 0x3, {0x2}}, &(0x7f00000025c0)=ANY=[@ANYBLOB="11a87813ee48a3193e74acceb29a12aed17213ab34742176df89b73e0e3d13fb78cacc90fadefcbcdb393a4963397f46c96a8e661d906afd08b830b09d2e2cb81053bf2146014c18463fdfdc6827d56e3da084c1a5fb37f321f0bb4c7b6ed6586817d794cc847dd9442b544fae1cb6270062c7e4aef5312c4f47693f97d4d4123d6c3997d9529b701c5cbd7e772d2e31c67bdf05ddccef99ba14666f924e2b284a0b2e1fe9255b3acf4ee4f62bf47d8010"], &(0x7f0000002580)={0x20, 0x0, 0x8, {0x0, 0x3}}, &(0x7f0000004600)={0x78, 0x0, 0x6e, {0x535, 0x7fff, 0x0, {0x3, 0x9, 0xf2c, 0x7, 0x7, 0x1000, 0x7, 0xfff, 0xd, 0x2000, 0xb, 0x0, 0x0, 0x1, 0x9}}}, &(0x7f0000004680)={0x90, 0x0, 0xdc, {0x3, 0x0, 0x5, 0x3bef, 0x9, 0xb, {0x5, 0x8, 0x9, 0x1, 0x80, 0x8, 0x6, 0x7, 0x2d8f, 0x8000, 0x9, 0x0, 0x0, 0xfff, 0x7}}}, &(0x7f0000004740)={0xa8, 0xfffffffffffffff5, 0xfffffffffffffffa, [{0x2, 0x6, 0xa, 0xe, '*[/^:.!$:-'}, {0x5, 0xb, 0xb, 0x1, 'veth0_vlan\x00'}, {0x5, 0x0, 0x1, 0x5, '\x00'}, {0x3, 0x9, 0xb, 0x2, 'veth0_vlan\x00'}]}, &(0x7f0000006ac0)={0x338, 0x0, 0x10001, [{{0x2, 0x3, 0x20000014, 0x1, 0x4, 0x3, {0x2, 0x37b4, 0x7fffffffffffffff, 0x7, 0x6, 0x6, 0x0, 0x6e71, 0x0, 0xc000, 0x6, 0x0, 0x0, 0xfffffff8, 0x3}}, {0xfffffffffffffffe, 0x4, 0x2, 0x2, '@['}}, {{0x0, 0x3, 0x1000, 0x80000001, 0x9b43, 0x9, {0x0, 0x80000000, 0x1e51, 0x12b6aae5, 0x27, 0xfffffffffffffff9, 0x1, 0x792, 0x4, 0x4000, 0x0, 0x0, 0x0, 0x3, 0xf}}, {0x1, 0x7, 0x2, 0x4, '--'}}, {{0x2, 0x1, 0x2, 0x5, 0x4, 0xcbe6089, {0x1, 0x7, 0x9, 0x2, 0x6, 0x10000, 0x2, 0x80000000, 0xeb8, 0xc000, 0x1, 0x0, 0x0, 0x9, 0x9}}, {0x2, 0x6, 0xb, 0xe1, 'veth0_vlan\x00'}}, {{0x1, 0x3, 0x40000000001, 0x7, 0x1, 0x7, {0x6, 0x5, 0x3, 0x6, 0x2, 0xfffffffffffffff9, 0x0, 0x4, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x200}}, {0x3, 0x8d, 0x4, 0x3, 'GPL\x00'}}, {{0x2, 0x3, 0x8000000000000001, 0x6, 0x100, 0xfffffe01, {0x6, 0x8, 0x0, 0x9, 0x7eec, 0xcf7, 0xfffffff8, 0x0, 0x0, 0xc000, 0x1, 0x0, 0x0, 0x3, 0xc}}, {0x2, 0x2, 0x1, 0x101, '\x00'}}]}, &(0x7f0000006e40)={0xa0, 0x0, 0x8, {{0x5, 0x2, 0xffffffffffffff7f, 0xffffffffffffff9b, 0x0, 0x7, {0x5, 0x8370, 0xfffffffffffffffb, 0xffffffff, 0x80000000, 0x1, 0x4, 0x5, 0x6165, 0xa000, 0x2, 0x0, 0xee00, 0x7fff}}, {0x0, 0x2}}}, &(0x7f0000002540)={0x20, 0x0, 0x5, {0x9, 0x6ac4571839b653dd, 0xe33, 0x8}}, &(0x7f0000007000)={0x130, 0x0, 0x6, {0x712, 0x6, 0x0, '\x00', {0x8000, 0x8001, 0xe, 0x8, 0x0, r8, 0x6000, '\x00', 0x8000000000000001, 0x76, 0x7, 0x92d5, {0x73f, 0xfffffffd}, {0x0, 0x6}, {0xfffffffffffff1ae, 0x3}, {0x40, 0x6}, 0x8, 0x4a1, 0x2, 0x2}}}}) recvmmsg(r6, &(0x7f00000081c0)=[{{&(0x7f00000026c0)=@x25, 0x80, &(0x7f0000002b00)=[{&(0x7f00000023c0)=""/42, 0x2a}, {&(0x7f0000002740)=""/93, 0x5d}, {&(0x7f00000027c0)=""/242, 0xf2}, {&(0x7f00000028c0)=""/29, 0x1d}, {&(0x7f0000002900)=""/129, 0x81}, {&(0x7f00000029c0)=""/114, 0x72}, {&(0x7f0000002a40)=""/184, 0xb8}], 0x7}, 0x80000001}, {{&(0x7f0000002c00)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000003140)=[{&(0x7f0000002c80)=""/149, 0x95}, {&(0x7f0000002d40)=""/135, 0x87}, {&(0x7f0000002e00)=""/112, 0x70}, {0x0}, {&(0x7f0000002ec0)=""/200, 0xc8}, {&(0x7f0000002fc0)=""/170, 0xaa}, {&(0x7f0000003080)=""/168, 0xa8}], 0x7}, 0x78d}, {{&(0x7f0000003180)=@alg, 0x80, &(0x7f0000004540)=[{&(0x7f0000003200)=""/182, 0xb6}, {&(0x7f00000032c0)=""/206, 0xce}, {&(0x7f00000033c0)=""/110, 0x6e}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/212, 0xd4}], 0x5, &(0x7f0000004580)=""/86, 0x56}, 0x2}, {{&(0x7f0000004840)=@qipcrtr, 0x80, &(0x7f00000049c0)=[{&(0x7f00000048c0)=""/107, 0x6b}, {&(0x7f0000004940)=""/47, 0x2f}, {&(0x7f0000004980)=""/58, 0x3a}], 0x3, &(0x7f0000004a00)=""/111, 0x6f}}, {{&(0x7f0000004a80)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004b00)=""/78, 0x4e}, {&(0x7f0000004b80)=""/87, 0x57}, {&(0x7f0000004c00)=""/86, 0x56}, {&(0x7f0000004cc0)=""/166, 0xa6}, {&(0x7f0000004d80)=""/10, 0xa}], 0x5, &(0x7f0000004e00)=""/13, 0xd}, 0x4c06}, {{0x0, 0x0, &(0x7f0000004e80), 0x0, &(0x7f0000004ec0)=""/139, 0x8b}, 0x80000000}, {{&(0x7f0000004f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000005100)}, 0x9}, {{&(0x7f0000006380)=@ethernet, 0x80, &(0x7f0000006f00)=[{&(0x7f0000006400)=""/177, 0xb1}, {&(0x7f00000064c0)=""/62, 0x3e}, {&(0x7f0000006500)=""/121, 0x79}, {&(0x7f0000006580)=""/233, 0xe9}, {&(0x7f0000006680)=""/131, 0x83}, {&(0x7f0000006740)=""/155, 0x9b}, {&(0x7f0000006800)=""/187, 0xbb}, {&(0x7f00000068c0)=""/106, 0x6a}, {&(0x7f0000006940)=""/27, 0x1b}, {&(0x7f0000006980)=""/204, 0xcc}], 0xa}, 0x4}], 0x8, 0x2, &(0x7f0000006a80)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400090400000000fddbdf25020800cb", @ANYRES32=r9, @ANYBLOB="080004007f000001080008001000000008000900b5fdffff08000200ac1e010108000900310000"], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d, @void, @value}, 0x94) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 2.86033786s ago: executing program 2 (id=1631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x10243, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x8, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_names='batadv0\x00'}) r7 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_DQEVENT(r7, 0x80785659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) fstat(r1, &(0x7f0000006f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000003c0)="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", 0x2000, &(0x7f0000007140)={&(0x7f0000000180)={0x50, 0xfffffffffffffffe, 0xffffffffffffffff, {0x7, 0x29, 0x8, 0x2c020c24, 0x1000, 0x0, 0xa0, 0x6, 0x0, 0x0, 0x4, 0xb}}, &(0x7f0000000300)={0x18, 0x0, 0x2, {0x7fffffff}}, &(0x7f0000000340)={0x18, 0x0, 0x400, {0xb}}, &(0x7f0000002680)={0x18, 0x0, 0x0, {0x3}}, 0x0, &(0x7f0000002440)={0x28, 0x0, 0xfffffffffffffffe, {{0x2, 0x40, 0x2}}}, &(0x7f0000002480)={0x60, 0x0, 0x8000000000000000, {{0xf72, 0x2, 0xf, 0x4, 0x8f5b, 0x297e1689, 0x5}}}, &(0x7f0000002500)={0x18, 0x0, 0x3, {0x2}}, &(0x7f00000025c0)=ANY=[@ANYBLOB="11a87813ee48a3193e74acceb29a12aed17213ab34742176df89b73e0e3d13fb78cacc90fadefcbcdb393a4963397f46c96a8e661d906afd08b830b09d2e2cb81053bf2146014c18463fdfdc6827d56e3da084c1a5fb37f321f0bb4c7b6ed6586817d794cc847dd9442b544fae1cb6270062c7e4aef5312c4f47693f97d4d4123d6c3997d9529b701c5cbd7e772d2e31c67bdf05ddccef99ba14666f924e2b284a0b2e1fe9255b3acf4ee4f62bf47d8010189b"], &(0x7f0000002580)={0x20, 0x0, 0x8, {0x0, 0x3}}, &(0x7f0000004600)={0x78, 0x0, 0x6e, {0x535, 0x7fff, 0x0, {0x3, 0x9, 0xf2c, 0x7, 0x7, 0x1000, 0x7, 0xfff, 0xd, 0x2000, 0xb, 0x0, 0x0, 0x1, 0x9}}}, &(0x7f0000004680)={0x90, 0x0, 0xdc, {0x3, 0x0, 0x5, 0x3bef, 0x9, 0xb, {0x5, 0x8, 0x9, 0x1, 0x80, 0x8, 0x6, 0x7, 0x2d8f, 0x8000, 0x9, 0x0, 0x0, 0xfff, 0x7}}}, &(0x7f0000004740)={0xc8, 0xfffffffffffffff5, 0xfffffffffffffffa, [{0x2, 0x6, 0xa, 0xe, '*[/^:.!$:-'}, {0x5, 0xb, 0xb, 0x1, 'veth0_vlan\x00'}, {0x5, 0x0, 0x1, 0x5, '\x00'}, {0x3, 0x9, 0xb, 0x2, 'veth0_vlan\x00'}, {0x1, 0x6, 0x1, 0x7f, '-'}]}, &(0x7f0000006ac0)={0x298, 0x0, 0x10001, [{{0x2, 0x3, 0x20000014, 0x1, 0x4, 0x3, {0x2, 0x37b4, 0x7fffffffffffffff, 0x7, 0x6, 0x6, 0x0, 0x6e71, 0x0, 0xc000, 0x6, 0x0, 0x0, 0xfffffff8, 0x3}}, {0xfffffffffffffffe, 0x4, 0x2, 0x2, '@['}}, {{0x0, 0x3, 0x1000, 0x80000001, 0x9b43, 0x9, {0x0, 0x80000000, 0x1e51, 0x12b6aae5, 0x27, 0xfffffffffffffff9, 0x1, 0x792, 0x4, 0x4000, 0x0, 0x0, 0x0, 0x3, 0xf}}, {0x1, 0x7, 0x2, 0x4, '--'}}, {{0x2, 0x1, 0x2, 0x5, 0x4, 0xcbe6089, {0x1, 0x7, 0x9, 0x2, 0x6, 0x10000, 0x2, 0x80000000, 0xeb8, 0xc000, 0x1, 0x0, 0x0, 0x9, 0x9}}, {0x2, 0x6, 0xb, 0xe1, 'veth0_vlan\x00'}}, {{0x1, 0x3, 0x40000000001, 0x7, 0x1, 0x7, {0x6, 0x5, 0x3, 0x6, 0x2, 0xfffffffffffffff9, 0x0, 0x4, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x200}}, {0x3, 0x8d, 0x4, 0x3, 'GPL\x00'}}]}, &(0x7f0000006e40)={0xa0, 0x0, 0x8, {{0x5, 0x2, 0xffffffffffffff7f, 0xffffffffffffff9b, 0x0, 0x7, {0x5, 0x8370, 0xfffffffffffffffb, 0xffffffff, 0x80000000, 0x1, 0x4, 0x5, 0x6165, 0xa000, 0x2, 0x0, 0xee00, 0x7fff}}, {0x0, 0x2}}}, &(0x7f0000002540)={0x20, 0x0, 0x5, {0x9, 0x6ac4571839b653dd, 0xe33, 0x8}}, &(0x7f0000007000)={0x130, 0x0, 0x6, {0x712, 0x6, 0x0, '\x00', {0x8000, 0x8001, 0xe, 0x8, 0x0, r8, 0x6000, '\x00', 0x8000000000000001, 0x76, 0x7, 0x92d5, {0x73f, 0xfffffffd}, {0x0, 0x6}, {0xfffffffffffff1ae, 0x3}, {0x40, 0x6}, 0x8, 0x4a1, 0x2, 0x2}}}}) recvmmsg(r6, &(0x7f00000081c0)=[{{&(0x7f00000026c0)=@x25, 0x80, &(0x7f0000002b00)=[{&(0x7f00000023c0)=""/42, 0x2a}, {&(0x7f0000002740)=""/93, 0x5d}, {&(0x7f00000027c0)=""/242, 0xf2}, {&(0x7f00000028c0)=""/29, 0x1d}, {&(0x7f0000002900)=""/129, 0x81}, {&(0x7f00000029c0)=""/114, 0x72}, {&(0x7f0000002a40)=""/184, 0xb8}], 0x7}, 0x80000001}, {{&(0x7f0000002c00)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000003140)=[{&(0x7f0000002c80)=""/149, 0x95}, {&(0x7f0000002d40)=""/135, 0x87}, {&(0x7f0000002e00)=""/112, 0x70}, {0x0}, {&(0x7f0000002ec0)=""/200, 0xc8}, {&(0x7f0000002fc0)=""/170, 0xaa}, {&(0x7f0000003080)=""/168, 0xa8}], 0x7}, 0x78d}, {{&(0x7f0000003180)=@alg, 0x80, &(0x7f0000004540)=[{&(0x7f0000003200)=""/182, 0xb6}, {&(0x7f00000032c0)=""/206, 0xce}, {&(0x7f00000033c0)=""/110, 0x6e}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/212, 0xd4}], 0x5, &(0x7f0000004580)=""/86, 0x56}, 0x2}, {{&(0x7f0000004840)=@qipcrtr, 0x80, &(0x7f00000049c0)=[{&(0x7f00000048c0)=""/107, 0x6b}, {&(0x7f0000004940)=""/47, 0x2f}, {&(0x7f0000004980)=""/58, 0x3a}], 0x3, &(0x7f0000004a00)=""/111, 0x6f}}, {{&(0x7f0000004a80)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004b00)=""/78, 0x4e}, {&(0x7f0000004b80)=""/87, 0x57}, {&(0x7f0000004c00)=""/86, 0x56}, {&(0x7f0000004cc0)=""/166, 0xa6}, {&(0x7f0000004d80)=""/10, 0xa}], 0x5, &(0x7f0000004e00)=""/13, 0xd}, 0x4c06}, {{0x0, 0x0, &(0x7f0000004e80), 0x0, &(0x7f0000004ec0)=""/139, 0x8b}, 0x80000000}, {{&(0x7f0000004f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000005100)}, 0x9}, {{&(0x7f0000005140)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000006340)=[{&(0x7f00000051c0)=""/11, 0xb}, {&(0x7f0000005200)=""/251, 0xfb}, {&(0x7f0000005300)=""/4096, 0x1000}, {&(0x7f0000006300)=""/43, 0x2b}], 0x4, &(0x7f00000071c0)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000006380)=@ethernet, 0x80, &(0x7f0000006f00)=[{&(0x7f0000006400)=""/177, 0xb1}, {&(0x7f00000064c0)=""/62, 0x3e}, {&(0x7f0000006500)=""/121, 0x79}, {&(0x7f0000006580)=""/233, 0xe9}, {&(0x7f0000006680)=""/131, 0x83}, {&(0x7f0000006740)=""/155, 0x9b}, {&(0x7f0000006800)=""/187, 0xbb}, {&(0x7f00000068c0)=""/106, 0x6a}, {&(0x7f0000006940)=""/27, 0x1b}, {&(0x7f0000006980)=""/204, 0xcc}], 0xa}, 0x4}], 0x9, 0x2, &(0x7f0000006a80)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400090400000000fddbdf25020800cb", @ANYRES32=r9, @ANYBLOB="080004007f000001080008001000000008000900b5fdffff08000200ac1e010108000900310000"], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d, @void, @value}, 0x94) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 2.233683854s ago: executing program 4 (id=1632): bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r3, 0x3, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0}]) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x14) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)) 2.004211191s ago: executing program 1 (id=1633): bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) io_submit(r3, 0x3, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x14) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)) 1.954584084s ago: executing program 2 (id=1634): bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) io_submit(0x0, 0x3, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r3}]) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x14) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)) 1.206810735s ago: executing program 4 (id=1635): bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) io_setup(0x6, &(0x7f0000001380)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) io_submit(r3, 0x3, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x14) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)) 986.44281ms ago: executing program 2 (id=1636): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x0, 0x4}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)={0x1d}) socket$inet_sctp(0x2, 0x5, 0x84) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) mkdir(&(0x7f0000000000)='./file0\x00', 0x26) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000002000000008d080000711209000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) lseek(r8, 0x2, 0x0) 974.587884ms ago: executing program 1 (id=1637): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0x1, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20004, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r1}, 0x38) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x3bda, 0x71, 0xfffffff8, 0x7, 0x3, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x4, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x2, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x3ff, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x8, 0x7ffe, 0x8, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r1}, 0x38) unshare(0x62040200) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='loginuid\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x18, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x6a}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9000}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 2 (id=1638): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)={0x1d}) socket$inet_sctp(0x2, 0x5, 0x84) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdir(&(0x7f0000000000)='./file0\x00', 0x26) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000002000000008d080000711209000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) lseek(r7, 0x2, 0x0) kernel console output (not intermixed with test programs): x0 [ 206.691698][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.694297][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.698640][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.701510][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.704244][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.707800][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.710412][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.713037][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.715639][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.719141][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.721826][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.724520][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.728171][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.730943][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.734027][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.737847][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.740690][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.744562][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.748248][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.752253][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.757417][ T5997] hid-generic 0000:007D:FF2350E.000F: unknown main item tag 0x0 [ 206.762327][ T5997] hid-generic 0000:007D:FF2350E.000F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 208.745150][ T9895] 9pnet_fd: p9_fd_create_unix (9895): problem connecting socket: ./file0/file0: -2 [ 208.982322][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 209.235141][ T9904] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 210.703833][ T9963] 9pnet_fd: p9_fd_create_unix (9963): problem connecting socket: ./file0/file0: -2 [ 210.933566][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.710'. [ 211.201473][ T9974] 9pnet_fd: p9_fd_create_unix (9974): problem connecting socket: ./file0/file0: -2 [ 212.369674][T10011] 9pnet_fd: p9_fd_create_unix (10011): problem connecting socket: ./file0/file0: -2 [ 212.566039][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'. [ 212.736251][T10032] 9pnet_fd: p9_fd_create_unix (10032): problem connecting socket: ./file0/file0: -2 [ 212.851361][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 212.947534][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'. [ 213.153633][T10035] bridge15: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 213.496071][ T59] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 213.656088][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 213.663354][ T59] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 213.667421][ T59] usb 6-1: config 0 has no interface number 0 [ 213.669462][ T59] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 213.672592][ T59] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 213.675436][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.683555][ T59] usb 6-1: config 0 descriptor?? [ 213.689996][ T59] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 213.888510][ T59] usb 6-1: USB disconnect, device number 4 [ 214.037670][T10051] 9pnet_fd: p9_fd_create_unix (10051): problem connecting socket: ./file0/file0: -2 [ 214.442744][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 214.459399][T10067] 9pnet_fd: p9_fd_create_unix (10067): problem connecting socket: ./file0/file0: -2 [ 214.610995][T10065] bridge15: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 214.689322][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 215.408196][T10093] 9pnet_fd: p9_fd_create_unix (10093): problem connecting socket: ./file0/file0: -2 [ 215.443389][T10095] 9pnet_fd: p9_fd_create_unix (10095): problem connecting socket: ./file0/file0: -2 [ 215.501774][T10098] 9pnet_fd: p9_fd_create_unix (10098): problem connecting socket: ./file0/file0: -2 [ 216.022832][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.726'. [ 216.023660][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 216.023834][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'. [ 216.315409][T10111] 9pnet_fd: p9_fd_create_unix (10111): problem connecting socket: ./file0/file0: -2 [ 216.620310][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 216.705957][T10120] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 218.189906][T10188] 9pnet_fd: p9_fd_create_unix (10188): problem connecting socket: ./file0/file0: -2 [ 218.388893][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 218.419149][T10192] bridge13: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 218.943207][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.739'. [ 219.177318][T10207] 9pnet_fd: p9_fd_create_unix (10207): problem connecting socket: ./file0/file0: -2 [ 221.215497][T10265] netlink: 'syz.3.747': attribute type 10 has an invalid length. [ 221.250009][T10269] 9pnet_fd: p9_fd_create_unix (10269): problem connecting socket: ./file0/file0: -2 [ 221.486548][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 221.541160][T10286] bridge15: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 221.684223][T10289] 9pnet_fd: p9_fd_create_unix (10289): problem connecting socket: ./file0/file0: -2 [ 221.911321][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 222.062969][T10293] bridge16: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 222.693914][T10305] 9pnet_fd: p9_fd_create_unix (10305): problem connecting socket: ./file0/file0: -2 [ 222.761136][T10307] 9pnet_fd: p9_fd_create_unix (10307): problem connecting socket: ./file0/file0: -2 [ 223.005060][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 223.028538][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 223.713299][T10328] 9pnet_fd: p9_fd_create_unix (10328): problem connecting socket: ./file0/file0: -2 [ 223.952087][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'. [ 224.068014][T10333] 9pnet_fd: p9_fd_create_unix (10333): problem connecting socket: ./file0/file0: -2 [ 224.340425][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 224.503936][T10335] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 225.132662][T10348] 9pnet_fd: p9_fd_create_unix (10348): problem connecting socket: ./file0/file0: -2 [ 225.295340][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'. [ 225.612970][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.615448][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.617950][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.620398][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.622809][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.625272][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.627752][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.630269][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.632690][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.635104][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.637695][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.640148][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.642579][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.645020][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.647571][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.650082][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.652553][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.654971][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.657525][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.660035][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.662596][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.665149][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.667799][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.670361][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.672892][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.675504][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.678071][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.680617][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.683181][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.685727][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.688370][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.690944][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.693484][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.696198][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.698676][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.701215][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.703783][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.706438][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.778132][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.780873][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.783612][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.786945][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.789946][ T2298] hid-generic 0000:007D:FF2350E.0010: unknown main item tag 0x0 [ 225.811091][ T2298] hid-generic 0000:007D:FF2350E.0010: hidraw1: HID v0.00 Device [syz1] on syz0 [ 225.882728][T10375] 9pnet_fd: p9_fd_create_unix (10375): problem connecting socket: ./file0/file0: -2 [ 226.121044][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 226.215499][T10389] bridge16: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 226.363357][T10395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.772'. [ 228.118426][T10478] 9pnet_fd: p9_fd_create_unix (10478): problem connecting socket: ./file0/file0: -2 [ 228.600264][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.779'. [ 229.214399][T10531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.784'. [ 230.096031][T10558] 9pnet_fd: p9_fd_create_unix (10558): problem connecting socket: ./file0/file0: -2 [ 230.316071][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'. [ 230.757868][T10583] 9pnet_fd: p9_fd_create_unix (10583): problem connecting socket: ./file0/file0: -2 [ 231.161721][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 231.206015][T10595] bridge18: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 232.118648][T10651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.796'. [ 232.607001][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.610892][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.613805][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.620362][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.622920][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.625411][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.627971][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.630529][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.633011][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.635778][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.638484][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.641234][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.643677][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.646154][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.648970][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.652260][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.655511][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.658949][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.663750][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.667150][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.670465][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.673739][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.677230][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.679713][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.682169][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.684637][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.687226][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.689847][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.692294][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.694712][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.697330][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.700727][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.704031][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.707528][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.711079][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.714422][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.718215][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.721489][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.724076][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.726910][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.729866][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.733009][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.735532][ T1452] hid-generic 0000:007D:FF2350E.0011: unknown main item tag 0x0 [ 232.740674][ T1452] hid-generic 0000:007D:FF2350E.0011: hidraw1: HID v0.00 Device [syz1] on syz0 [ 233.185952][ T1330] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 233.253310][T10697] 9pnet_fd: p9_fd_create_unix (10697): problem connecting socket: ./file0/file0: -2 [ 233.355969][ T1330] usb 5-1: Using ep0 maxpacket: 8 [ 233.359736][ T1330] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 233.362963][ T1330] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.367455][ T1330] usb 5-1: config 0 has no interface number 0 [ 233.370020][ T1330] usb 5-1: config 0 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 233.375136][ T1330] usb 5-1: config 0 interface 1 has no altsetting 0 [ 233.377334][ T1330] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 233.380349][ T1330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.383890][ T1330] usb 5-1: config 0 descriptor?? [ 233.388546][ T1330] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 233.590216][ T1330] usb 5-1: USB disconnect, device number 5 [ 234.247018][T10738] 9pnet_fd: p9_fd_create_unix (10738): problem connecting socket: ./file0/file0: -2 [ 234.606366][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 235.507142][T10789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.810'. [ 235.583500][T10794] 9pnet_fd: p9_fd_create_unix (10794): problem connecting socket: ./file0/file0: -2 [ 235.848731][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'. [ 236.295423][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'. [ 236.300950][T10819] 9pnet_fd: p9_fd_create_unix (10819): problem connecting socket: ./file0/file0: -2 [ 236.368355][T10815] bridge14: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 236.479387][T10821] 9pnet_fd: p9_fd_create_unix (10821): problem connecting socket: ./file0/file0: -2 [ 236.679887][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 236.807085][T10822] bridge19: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 238.515741][T10885] 9pnet_fd: p9_fd_create_unix (10885): problem connecting socket: ./file0/file0: -2 [ 239.210112][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 240.505082][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'. [ 240.739197][T10990] bridge15: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 241.309693][T11013] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 241.740532][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 242.447144][ T2298] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 242.615988][ T2298] usb 7-1: Using ep0 maxpacket: 8 [ 242.620938][ T2298] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.623798][ T2298] usb 7-1: config 0 has no interface number 0 [ 242.626552][ T2298] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 242.630777][ T2298] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 242.634749][ T2298] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.641218][ T2298] usb 7-1: config 0 descriptor?? [ 242.647918][ T2298] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 242.849473][ T2298] usb 7-1: USB disconnect, device number 6 [ 243.881445][T11090] 9pnet_fd: p9_fd_create_unix (11090): problem connecting socket: ./file0/file0: -2 [ 244.204732][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'. [ 244.993152][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.847'. [ 245.746022][ T5995] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 245.776007][ T2298] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 245.896015][ T5995] usb 5-1: Using ep0 maxpacket: 8 [ 245.900125][ T5995] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 245.903611][ T5995] usb 5-1: config 0 has no interface number 0 [ 245.906352][ T5995] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 245.910404][ T5995] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 245.914279][ T5995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.924808][ T5995] usb 5-1: config 0 descriptor?? [ 245.930801][ T5995] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 245.936079][ T2298] usb 7-1: Using ep0 maxpacket: 8 [ 245.940264][ T2298] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 245.943116][ T2298] usb 7-1: config 0 has no interface number 0 [ 245.945143][ T2298] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 245.948597][ T2298] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 245.951414][ T2298] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.955410][ T2298] usb 7-1: config 0 descriptor?? [ 245.960102][ T2298] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 246.133886][ T1452] usb 5-1: USB disconnect, device number 6 [ 246.169110][ T2298] usb 7-1: USB disconnect, device number 7 [ 246.419042][T11172] 9pnet_virtio: no channels available for device ./file0/file0 [ 246.841456][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 246.844628][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 246.855937][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 246.859101][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 246.862157][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 246.865782][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 246.884222][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 246.901325][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 246.905012][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 246.917493][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 246.930744][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.854'. [ 246.930759][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.166605][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.250279][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.254873][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.259371][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.261845][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.264302][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.266759][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.269186][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.271513][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.273958][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.276527][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.278960][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.281391][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.283826][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.286399][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.289027][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.291982][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.294599][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.297519][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.300084][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.302632][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.305061][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.307554][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.309911][T11178] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 247.317600][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.320073][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.322509][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.324957][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.327438][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.329882][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.332337][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.334766][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.337132][ T29] hid-generic 0000:007D:FF2350E.0012: unknown main item tag 0x0 [ 247.340604][ T29] hid-generic 0000:007D:FF2350E.0012: hidraw1: HID v0.00 Device [syz1] on syz0 [ 248.331022][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.858'. [ 248.516885][T11218] 9pnet_fd: p9_fd_create_unix (11218): problem connecting socket: ./file0/file0: -2 [ 248.602745][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.860'. [ 248.633910][T11211] bridge16: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 248.744406][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'. [ 249.316095][ T1452] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 249.486036][ T1452] usb 5-1: Using ep0 maxpacket: 8 [ 249.491055][ T1452] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 249.493590][ T1452] usb 5-1: config 0 has no interface number 0 [ 249.495713][ T1452] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 249.499322][ T1452] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 249.502323][ T1452] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.506990][ T1452] usb 5-1: config 0 descriptor?? [ 249.510965][ T1452] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 249.711589][ T1452] usb 5-1: USB disconnect, device number 7 [ 250.912711][T11253] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 252.386072][ T5995] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 252.555964][ T5995] usb 7-1: Using ep0 maxpacket: 8 [ 252.559198][ T5995] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 252.561684][ T5995] usb 7-1: config 0 has no interface number 0 [ 252.563615][ T5995] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 252.566721][ T5995] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 252.569498][ T5995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.573595][ T5995] usb 7-1: config 0 descriptor?? [ 252.586469][ T5995] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 252.780592][ T58] usb 7-1: USB disconnect, device number 8 [ 253.385320][T11378] 9pnet_fd: p9_fd_create_unix (11378): problem connecting socket: ./file0/file0: -2 [ 254.023053][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 255.055957][ T59] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 255.205971][ T59] usb 5-1: Using ep0 maxpacket: 8 [ 255.209364][ T59] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 255.212042][ T59] usb 5-1: config 0 has no interface number 0 [ 255.213995][ T59] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 255.217316][ T59] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 255.220359][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.225700][ T59] usb 5-1: config 0 descriptor?? [ 255.230799][ T59] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 255.237573][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.239669][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.315234][T11436] 9pnet_fd: p9_fd_create_unix (11436): problem connecting socket: ./file0/file0: -2 [ 255.434479][ T6014] usb 5-1: USB disconnect, device number 8 [ 255.624913][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.892'. [ 256.054082][T11459] 9pnet_fd: p9_fd_create_unix (11459): problem connecting socket: ./file0/file0: -2 [ 256.274765][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'. [ 256.621398][T11485] 9pnet_fd: p9_fd_create_unix (11485): problem connecting socket: ./file0/file0: -2 [ 257.154727][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.897'. [ 257.190404][T11494] bridge18: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 258.455932][ T58] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 258.606023][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 258.609937][ T58] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 258.613060][ T58] usb 5-1: config 0 has no interface number 0 [ 258.614880][ T58] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 258.618461][ T58] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 258.621270][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.625319][ T58] usb 5-1: config 0 descriptor?? [ 258.628735][ T58] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 258.829679][ T58] usb 5-1: USB disconnect, device number 9 [ 259.407474][T11547] 9pnet_fd: p9_fd_create_unix (11547): problem connecting socket: ./file0/file0: -2 [ 259.692718][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 260.028610][T11553] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 260.154506][T11593] 9pnet_fd: p9_fd_create_unix (11593): problem connecting socket: ./file0/file0: -2 [ 260.738034][T11620] 9pnet_fd: p9_fd_create_unix (11620): problem connecting socket: ./file0/file0: -2 [ 261.195938][ T58] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 261.199430][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'. [ 261.355945][ T58] usb 8-1: Using ep0 maxpacket: 8 [ 261.358961][ T58] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 261.361461][ T58] usb 8-1: config 0 has no interface number 0 [ 261.363389][ T58] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 261.366920][ T58] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 261.369749][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.374916][ T58] usb 8-1: config 0 descriptor?? [ 261.378214][ T58] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 261.579996][ T58] usb 8-1: USB disconnect, device number 6 [ 265.628689][T11778] 9pnet_fd: p9_fd_create_unix (11778): problem connecting socket: ./file0/file0: -2 [ 266.102492][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 266.876030][ T58] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 267.035924][ T58] usb 8-1: Using ep0 maxpacket: 8 [ 267.039313][ T58] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.041971][ T58] usb 8-1: config 0 has no interface number 0 [ 267.044075][ T58] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 267.292830][ T58] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 267.295693][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.299579][ T58] usb 8-1: config 0 descriptor?? [ 267.303050][ T58] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 267.504703][ T58] usb 8-1: USB disconnect, device number 7 [ 269.304425][T11901] 9pnet_fd: p9_fd_create_unix (11901): problem connecting socket: ./file0/file0: -2 [ 269.696135][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 270.389941][ T2298] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 270.905965][ T2298] usb 8-1: Using ep0 maxpacket: 8 [ 270.909236][ T2298] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.912285][ T2298] usb 8-1: config 0 has no interface number 0 [ 270.914303][ T2298] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 270.918539][ T2298] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 270.921906][ T2298] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.926188][ T2298] usb 8-1: config 0 descriptor?? [ 270.930245][ T2298] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 271.135720][ T1452] usb 8-1: USB disconnect, device number 8 [ 272.728118][T11981] 9pnet_fd: p9_fd_create_unix (11981): problem connecting socket: ./file0/file0: -2 [ 272.953250][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 272.976307][T11981] bridge20: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 275.241671][T12058] 9pnet_fd: p9_fd_create_unix (12058): problem connecting socket: ./file0/file0: -2 [ 275.566086][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 275.625235][T12075] bridge16: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 276.009847][T12092] 9pnet_fd: p9_fd_create_unix (12092): problem connecting socket: ./file0/file0: -2 [ 276.485464][T12116] 9pnet_fd: p9_fd_create_unix (12116): problem connecting socket: ./file0/file0: -2 [ 276.740455][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 276.865915][ T1330] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 276.921414][T12128] 9pnet_fd: p9_fd_create_unix (12128): problem connecting socket: ./file0/file0: -2 [ 277.025917][ T1330] usb 8-1: Using ep0 maxpacket: 8 [ 277.028726][ T1330] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 277.031320][ T1330] usb 8-1: config 0 has no interface number 0 [ 277.043999][ T1330] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 277.047846][ T1330] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 277.050972][ T1330] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.054638][ T1330] usb 8-1: config 0 descriptor?? [ 277.059267][ T1330] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 277.171295][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'. [ 277.226692][T12134] bridge21: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 277.260514][ T1330] usb 8-1: USB disconnect, device number 9 [ 278.067989][T12156] 9pnet_fd: p9_fd_create_unix (12156): problem connecting socket: ./file0/file0: -2 [ 278.359326][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'. [ 281.946378][T12228] 9pnet_fd: p9_fd_create_unix (12228): problem connecting socket: ./file0/file0: -2 [ 282.248889][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 285.816786][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 285.966060][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 285.971758][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.974277][ T10] usb 7-1: config 0 has no interface number 0 [ 285.977611][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 285.981679][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 285.985165][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.992613][ T10] usb 7-1: config 0 descriptor?? [ 285.996356][ T10] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 286.201810][ T10] usb 7-1: USB disconnect, device number 9 [ 286.538092][T12374] 9pnet_fd: p9_fd_create_unix (12374): problem connecting socket: ./file0/file0: -2 [ 286.837955][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 287.498665][T12379] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 288.932883][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1023'. [ 289.591590][T12462] 9pnet_fd: p9_fd_create_unix (12462): problem connecting socket: ./file0/file0: -2 [ 289.595978][T11228] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 289.756101][T11228] usb 5-1: Using ep0 maxpacket: 8 [ 289.760291][T11228] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 289.763670][T11228] usb 5-1: config 0 has no interface number 0 [ 289.766746][T11228] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 289.771022][T11228] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 289.774898][T11228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.780641][T11228] usb 5-1: config 0 descriptor?? [ 289.785261][T11228] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 289.785295][T12465] 9pnet_fd: p9_fd_create_unix (12465): problem connecting socket: ./file0/file0: -2 [ 289.990189][T11228] usb 5-1: USB disconnect, device number 10 [ 290.261462][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 290.417362][T12475] bridge18: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 290.533460][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1028'. [ 290.555636][T12463] bridge19: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 292.510240][T12558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1037'. [ 293.416136][ T1330] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 293.592305][ T1330] usb 7-1: Using ep0 maxpacket: 8 [ 293.596392][ T1330] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 293.599746][ T1330] usb 7-1: config 0 has no interface number 0 [ 293.602453][ T1330] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 293.606227][ T1330] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 293.609418][ T1330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.614531][ T1330] usb 7-1: config 0 descriptor?? [ 293.620864][ T1330] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 293.792534][T12578] 9pnet_fd: p9_fd_create_unix (12578): problem connecting socket: ./file0/file0: -2 [ 293.821020][ T1330] usb 7-1: USB disconnect, device number 10 [ 294.495903][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'. [ 294.546784][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 294.753168][T12607] 9pnet_fd: p9_fd_create_unix (12607): problem connecting socket: ./file0/file0: -2 [ 295.056536][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 295.975977][ T1452] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 296.125980][ T1452] usb 6-1: Using ep0 maxpacket: 8 [ 296.129279][ T1452] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.132400][ T1452] usb 6-1: config 0 has no interface number 0 [ 296.134836][ T1452] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 296.139964][ T1452] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 296.143474][ T1452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.147976][ T1452] usb 6-1: config 0 descriptor?? [ 296.151331][ T1452] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 296.196938][ T59] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 296.345974][ T59] usb 5-1: Using ep0 maxpacket: 8 [ 296.350197][ T59] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.356114][ T59] usb 5-1: config 0 has no interface number 0 [ 296.358822][ T59] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.363276][ T59] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 296.367684][T11228] usb 6-1: USB disconnect, device number 5 [ 296.372267][ T59] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 296.377718][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.383650][ T59] usb 5-1: config 0 descriptor?? [ 296.389755][ T59] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 296.589138][T12647] iowarrior 5-1:0.1: Error -90 while submitting URB [ 296.593850][ T10] usb 5-1: USB disconnect, device number 11 [ 297.167335][T12665] 9pnet_fd: p9_fd_create_unix (12665): problem connecting socket: ./file0/file0: -2 [ 297.452970][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'. [ 297.528735][T12668] bridge19: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 298.340785][T12691] 9pnet_fd: p9_fd_create_unix (12691): problem connecting socket: ./file0/file0: -2 [ 298.692082][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1064'. [ 299.072925][T12720] 9pnet_fd: p9_fd_create_unix (12720): problem connecting socket: ./file0/file0: -2 [ 299.228697][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 299.310896][T12723] bridge22: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 300.059579][T12735] 9pnet_fd: p9_fd_create_unix (12735): problem connecting socket: ./file0/file0: -2 [ 300.551700][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'. [ 301.326150][ T58] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 301.475967][ T58] usb 6-1: Using ep0 maxpacket: 8 [ 301.480265][ T58] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 301.483830][ T58] usb 6-1: config 0 has no interface number 0 [ 301.488661][ T58] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.493195][ T58] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 301.498404][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.505167][ T58] usb 6-1: config 0 descriptor?? [ 301.513309][ T58] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 301.716452][ T58] usb 6-1: USB disconnect, device number 6 [ 302.628140][T12785] 9pnet_fd: p9_fd_create_unix (12785): problem connecting socket: ./file0/file0: -2 [ 302.853985][T12794] 9pnet_fd: p9_fd_create_unix (12794): problem connecting socket: ./file0/file0: -2 [ 302.948279][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1081'. [ 302.978825][T12798] bridge20: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 303.062189][T12801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'. [ 304.040171][T12816] 9pnet_virtio: no channels available for device ./file0/file0 [ 304.312395][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 304.333945][T12824] 9pnet_fd: p9_fd_create_unix (12824): problem connecting socket: ./file0/file0: -2 [ 304.869975][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1088'. [ 306.225105][T12873] 9pnet_fd: p9_fd_create_unix (12873): problem connecting socket: ./file0/file0: -2 [ 306.471982][T12891] 9pnet_fd: p9_fd_create_unix (12891): problem connecting socket: ./file0/file0: -2 [ 306.723113][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 306.836093][T12894] bridge21: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 307.068770][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1097'. [ 309.726656][T13002] qrtr: Invalid version 0 [ 312.048256][T13061] FAULT_INJECTION: forcing a failure. [ 312.048256][T13061] name failslab, interval 1, probability 0, space 0, times 1 [ 312.052233][T13061] CPU: 3 UID: 0 PID: 13061 Comm: syz.2.1120 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 312.052248][T13061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 312.052255][T13061] Call Trace: [ 312.052260][T13061] [ 312.052264][T13061] dump_stack_lvl+0x16c/0x1f0 [ 312.052284][T13061] should_fail_ex+0x512/0x640 [ 312.052296][T13061] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 312.052314][T13061] should_failslab+0xc2/0x120 [ 312.052325][T13061] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 312.052341][T13061] ? io_submit_one+0x122/0x1da0 [ 312.052358][T13061] io_submit_one+0x122/0x1da0 [ 312.052374][T13061] ? __lock_acquire+0xaa4/0x1ba0 [ 312.052394][T13061] ? __pfx_io_submit_one+0x10/0x10 [ 312.052413][T13061] ? __might_fault+0xe3/0x190 [ 312.052432][T13061] ? __might_fault+0x13b/0x190 [ 312.052450][T13061] ? __ia32_compat_sys_io_submit+0x1ad/0x3a0 [ 312.052466][T13061] __ia32_compat_sys_io_submit+0x1ad/0x3a0 [ 312.052484][T13061] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 312.052500][T13061] ? fput+0x70/0xf0 [ 312.052512][T13061] ? rcu_is_watching+0x12/0xc0 [ 312.052527][T13061] __do_fast_syscall_32+0x73/0x120 [ 312.052545][T13061] do_fast_syscall_32+0x32/0x80 [ 312.052561][T13061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.052574][T13061] RIP: 0023:0xf7f35579 [ 312.052582][T13061] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 312.052593][T13061] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 00000000000000f8 [ 312.052603][T13061] RAX: ffffffffffffffda RBX: 00000000f7f2e000 RCX: 0000000000000001 [ 312.052610][T13061] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.052616][T13061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.052622][T13061] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 312.052627][T13061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.052639][T13061] [ 312.361447][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1119'. [ 312.594704][ T40] audit: type=1326 audit(1744724293.107:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13071 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 312.603676][ T40] audit: type=1326 audit(1744724293.107:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13071 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 312.612988][ T40] audit: type=1326 audit(1744724293.107:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13071 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 312.621351][ T40] audit: type=1326 audit(1744724293.107:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13071 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 312.629637][ T40] audit: type=1326 audit(1744724293.107:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13071 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 312.638072][ T40] audit: type=1326 audit(1744724293.107:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13071 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 312.666972][ T40] audit: type=1326 audit(1744724293.117:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13071 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 312.676744][ T40] audit: type=1326 audit(1744724293.117:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13071 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 312.685075][ T40] audit: type=1326 audit(1744724293.117:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13071 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 312.695710][ T40] audit: type=1326 audit(1744724293.117:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13071 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 312.757344][T13083] 9pnet_fd: p9_fd_create_unix (13083): problem connecting socket: ./file0/file0: -2 [ 313.017870][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 313.700640][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 313.858038][T13120] syz.3.1132 uses obsolete (PF_INET,SOCK_PACKET) [ 314.590961][T13139] 9pnet_fd: p9_fd_create_unix (13139): problem connecting socket: ./file0/file0: -2 [ 314.934910][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 315.739178][T13183] 9pnet_fd: p9_fd_create_unix (13183): problem connecting socket: ./file0/file0: -2 [ 315.951342][T13194] FAULT_INJECTION: forcing a failure. [ 315.951342][T13194] name failslab, interval 1, probability 0, space 0, times 0 [ 315.955748][T13194] CPU: 0 UID: 0 PID: 13194 Comm: syz.3.1140 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 315.955766][T13194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 315.955773][T13194] Call Trace: [ 315.955777][T13194] [ 315.955781][T13194] dump_stack_lvl+0x16c/0x1f0 [ 315.955801][T13194] should_fail_ex+0x512/0x640 [ 315.955813][T13194] ? __kmalloc_node_noprof+0xc5/0x500 [ 315.955832][T13194] should_failslab+0xc2/0x120 [ 315.955854][T13194] __kmalloc_node_noprof+0xd8/0x500 [ 315.955873][T13194] ? __vmalloc_node_range_noprof+0x3eb/0x1540 [ 315.955890][T13194] __vmalloc_node_range_noprof+0x3eb/0x1540 [ 315.955903][T13194] ? find_held_lock+0x2b/0x80 [ 315.955921][T13194] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 315.955942][T13194] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 315.955956][T13194] ? __pfx_aa_get_newest_label+0x10/0x10 [ 315.955969][T13194] ? rcu_is_watching+0x12/0xc0 [ 315.955983][T13194] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 315.956000][T13194] __vmalloc_noprof+0x6d/0x90 [ 315.956013][T13194] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 315.956029][T13194] bpf_prog_alloc_no_stats+0x54/0x630 [ 315.956045][T13194] ? security_capable+0x7e/0x260 [ 315.956057][T13194] bpf_prog_alloc+0x3b/0x230 [ 315.956072][T13194] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 315.956084][T13194] bpf_prog_load+0x160e/0x2490 [ 315.956098][T13194] ? __pfx_bpf_prog_load+0x10/0x10 [ 315.956120][T13194] ? bpf_lsm_bpf+0x9/0x10 [ 315.956135][T13194] __sys_bpf+0x433c/0x4d80 [ 315.956148][T13194] ? __pfx___sys_bpf+0x10/0x10 [ 315.956160][T13194] ? ksys_write+0x190/0x240 [ 315.956177][T13194] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 315.956201][T13194] ? fput+0x70/0xf0 [ 315.956211][T13194] ? ksys_write+0x1b9/0x240 [ 315.956224][T13194] ? __pfx_ksys_write+0x10/0x10 [ 315.956241][T13194] __ia32_sys_bpf+0x76/0xe0 [ 315.956254][T13194] __do_fast_syscall_32+0x73/0x120 [ 315.956272][T13194] do_fast_syscall_32+0x32/0x80 [ 315.956288][T13194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.956301][T13194] RIP: 0023:0xf746e579 [ 315.956310][T13194] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 315.956320][T13194] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 315.956331][T13194] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008000e000 [ 315.956338][T13194] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.956347][T13194] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.956356][T13194] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 315.956365][T13194] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.956386][T13194] [ 315.966881][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1139'. [ 315.969247][T13194] syz.3.1140: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 316.061322][T13194] CPU: 0 UID: 0 PID: 13194 Comm: syz.3.1140 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 316.061347][T13194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 316.061358][T13194] Call Trace: [ 316.061365][T13194] [ 316.061372][T13194] dump_stack_lvl+0x16c/0x1f0 [ 316.061418][T13194] warn_alloc+0x248/0x3a0 [ 316.061446][T13194] ? __pfx_warn_alloc+0x10/0x10 [ 316.061467][T13194] ? dump_stack_lvl+0x1a1/0x1f0 [ 316.061487][T13194] ? rcu_is_watching+0x12/0xc0 [ 316.061502][T13194] ? __kmalloc_node_noprof+0x23b/0x500 [ 316.061523][T13194] __vmalloc_node_range_noprof+0x1110/0x1540 [ 316.061538][T13194] ? find_held_lock+0x2b/0x80 [ 316.061556][T13194] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 316.061577][T13194] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 316.061592][T13194] ? __pfx_aa_get_newest_label+0x10/0x10 [ 316.061606][T13194] ? rcu_is_watching+0x12/0xc0 [ 316.061620][T13194] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 316.061638][T13194] __vmalloc_noprof+0x6d/0x90 [ 316.061652][T13194] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 316.061674][T13194] bpf_prog_alloc_no_stats+0x54/0x630 [ 316.061691][T13194] ? security_capable+0x7e/0x260 [ 316.061702][T13194] bpf_prog_alloc+0x3b/0x230 [ 316.061718][T13194] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 316.061731][T13194] bpf_prog_load+0x160e/0x2490 [ 316.061747][T13194] ? __pfx_bpf_prog_load+0x10/0x10 [ 316.061769][T13194] ? bpf_lsm_bpf+0x9/0x10 [ 316.061784][T13194] __sys_bpf+0x433c/0x4d80 [ 316.061798][T13194] ? __pfx___sys_bpf+0x10/0x10 [ 316.061809][T13194] ? ksys_write+0x190/0x240 [ 316.061827][T13194] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 316.061851][T13194] ? fput+0x70/0xf0 [ 316.061861][T13194] ? ksys_write+0x1b9/0x240 [ 316.061875][T13194] ? __pfx_ksys_write+0x10/0x10 [ 316.061891][T13194] __ia32_sys_bpf+0x76/0xe0 [ 316.061916][T13194] __do_fast_syscall_32+0x73/0x120 [ 316.061934][T13194] do_fast_syscall_32+0x32/0x80 [ 316.061950][T13194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.061963][T13194] RIP: 0023:0xf746e579 [ 316.061972][T13194] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 316.061982][T13194] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 316.061992][T13194] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008000e000 [ 316.061999][T13194] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.062005][T13194] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.062011][T13194] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 316.062017][T13194] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.062029][T13194] [ 316.062120][T13194] Mem-Info: [ 316.166407][T13194] active_anon:9040 inactive_anon:0 isolated_anon:0 [ 316.166407][T13194] active_file:1557 inactive_file:38265 isolated_file:0 [ 316.166407][T13194] unevictable:1772 dirty:336 writeback:0 [ 316.166407][T13194] slab_reclaimable:10202 slab_unreclaimable:60492 [ 316.166407][T13194] mapped:26971 shmem:5331 pagetables:837 [ 316.166407][T13194] sec_pagetables:303 bounce:0 [ 316.166407][T13194] kernel_misc_reclaimable:0 [ 316.166407][T13194] free:53683 free_pcp:1448 free_cma:0 [ 316.185360][T13194] Node 0 active_anon:1884kB inactive_anon:0kB active_file:200kB inactive_file:13708kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5732kB dirty:0kB writeback:0kB shmem:4032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9104kB pagetables:540kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB [ 316.199007][T13194] Node 1 active_anon:34376kB inactive_anon:0kB active_file:6028kB inactive_file:139352kB unevictable:3552kB isolated(anon):0kB isolated(file):0kB mapped:102304kB dirty:1344kB writeback:0kB shmem:17292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3132kB pagetables:2808kB sec_pagetables:100kB all_unreclaimable? no Balloon:0kB [ 316.212892][T13194] Node 0 DMA free:2720kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:104kB free_cma:0kB [ 316.222312][T13194] lowmem_reserve[]: 0 290 290 290 290 [ 316.224343][T13194] Node 0 DMA32 free:26364kB boost:8192kB min:21528kB low:24860kB high:28192kB reserved_highatomic:4096KB active_anon:1884kB inactive_anon:0kB active_file:200kB inactive_file:13704kB unevictable:3536kB writepending:0kB present:1032196kB managed:297476kB mlocked:0kB bounce:0kB free_pcp:1124kB local_pcp:156kB free_cma:0kB [ 316.234680][T13194] lowmem_reserve[]: 0 0 0 0 0 [ 316.236428][T13194] Node 1 DMA32 free:185756kB boost:0kB min:47148kB low:58932kB high:70716kB reserved_highatomic:0KB active_anon:34476kB inactive_anon:0kB active_file:6028kB inactive_file:139352kB unevictable:3552kB writepending:1344kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:2992kB local_pcp:88kB free_cma:0kB [ 316.246285][T13194] lowmem_reserve[]: 0 0 0 0 0 [ 316.248341][T13194] Node 0 DMA: 26*4kB (U) 7*8kB (U) 6*16kB (U) 13*32kB (U) 2*64kB (U) 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2720kB [ 316.254863][T13194] Node 0 DMA32: 688*4kB (UMH) 133*8kB (UMEH) 67*16kB (UMEH) 207*32kB (UMEH) 90*64kB (UMEH) 22*128kB (UEH) 12*256kB (UM) 4*512kB (UME) 1*1024kB (M) 0*2048kB 0*4096kB = 26232kB [ 316.262852][T13194] Node 1 DMA32: 513*4kB (UM) 280*8kB (ME) 389*16kB (UME) 308*32kB (UME) 192*64kB (UME) 75*128kB (UME) 22*256kB (UME) 17*512kB (UME) 4*1024kB (ME) 1*2048kB (M) 30*4096kB (M) = 185620kB [ 316.271150][T13194] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.275230][T13194] Node 0 hugepages_total=7 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 316.280305][T13194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.284676][T13194] Node 1 hugepages_total=1 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 316.288809][T13194] 45154 total pagecache pages [ 316.290848][T13194] 0 pages in swap cache [ 316.292734][T13194] Free swap = 124996kB [ 316.294635][T13194] Total swap = 124996kB [ 316.296587][T13194] 524155 pages RAM [ 316.298262][T13194] 0 pages HighMem/MovableOnly [ 316.300385][T13194] 208875 pages reserved [ 316.302248][T13194] 0 pages cma reserved [ 316.454513][T13215] FAULT_INJECTION: forcing a failure. [ 316.454513][T13215] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 316.460846][T13215] CPU: 1 UID: 0 PID: 13215 Comm: syz.1.1144 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 316.460871][T13215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 316.460881][T13215] Call Trace: [ 316.460887][T13215] [ 316.460893][T13215] dump_stack_lvl+0x16c/0x1f0 [ 316.460922][T13215] should_fail_ex+0x512/0x640 [ 316.460944][T13215] _copy_to_user+0x32/0xd0 [ 316.460966][T13215] simple_read_from_buffer+0xcb/0x170 [ 316.460990][T13215] proc_fail_nth_read+0x197/0x270 [ 316.461012][T13215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.461035][T13215] ? rw_verify_area+0xcf/0x680 [ 316.461053][T13215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.461075][T13215] vfs_read+0x1de/0xc70 [ 316.461099][T13215] ? __pfx___mutex_lock+0x10/0x10 [ 316.461123][T13215] ? __pfx_vfs_read+0x10/0x10 [ 316.461150][T13215] ? __fget_files+0x20e/0x3c0 [ 316.461180][T13215] ksys_read+0x12a/0x240 [ 316.461201][T13215] ? __pfx_ksys_read+0x10/0x10 [ 316.461224][T13215] ? rcu_is_watching+0x12/0xc0 [ 316.461248][T13215] __do_fast_syscall_32+0x73/0x120 [ 316.461274][T13215] do_fast_syscall_32+0x32/0x80 [ 316.461297][T13215] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.461317][T13215] RIP: 0023:0xf745e579 [ 316.461330][T13215] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 316.461345][T13215] RSP: 002b:00000000f50e6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 316.461360][T13215] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50e6620 [ 316.461370][T13215] RDX: 000000000000000f RSI: 00000000f744dff4 RDI: 0000000000000000 [ 316.461380][T13215] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 316.461388][T13215] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 316.461398][T13215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.461420][T13215] [ 316.543954][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.678874][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.680851][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.938604][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1146'. [ 317.511824][T13238] FAULT_INJECTION: forcing a failure. [ 317.511824][T13238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.516997][T13238] CPU: 2 UID: 0 PID: 13238 Comm: syz.2.1148 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 317.517019][T13238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 317.517030][T13238] Call Trace: [ 317.517036][T13238] [ 317.517042][T13238] dump_stack_lvl+0x16c/0x1f0 [ 317.517069][T13238] should_fail_ex+0x512/0x640 [ 317.517091][T13238] _copy_to_user+0x32/0xd0 [ 317.517113][T13238] do_ip_vs_get_ctl+0x548/0x1330 [ 317.517142][T13238] ? __pfx_do_ip_vs_get_ctl+0x10/0x10 [ 317.517171][T13238] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 317.517200][T13238] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 317.517228][T13238] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 317.517270][T13238] ? nf_getsockopt+0x79/0xe0 [ 317.517290][T13238] nf_getsockopt+0x79/0xe0 [ 317.517314][T13238] ip_getsockopt+0x18c/0x1e0 [ 317.517333][T13238] ? __pfx_ip_getsockopt+0x10/0x10 [ 317.517353][T13238] ? aa_sk_perm+0x2f4/0xb10 [ 317.517375][T13238] dccp_getsockopt+0xe3/0x9a0 [ 317.517399][T13238] ? __pfx_dccp_getsockopt+0x10/0x10 [ 317.517418][T13238] ? find_held_lock+0x2b/0x80 [ 317.517443][T13238] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 317.517471][T13238] do_sock_getsockopt+0x3fc/0x800 [ 317.517499][T13238] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 317.517523][T13238] ? __fget_files+0x204/0x3c0 [ 317.517559][T13238] __sys_getsockopt+0x12f/0x260 [ 317.517586][T13238] __ia32_sys_getsockopt+0xbc/0x160 [ 317.517606][T13238] ? lockdep_hardirqs_on+0x7c/0x110 [ 317.517628][T13238] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 317.517652][T13238] __do_fast_syscall_32+0x73/0x120 [ 317.517683][T13238] do_fast_syscall_32+0x32/0x80 [ 317.517707][T13238] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 317.517728][T13238] RIP: 0023:0xf7f35579 [ 317.517741][T13238] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 317.517757][T13238] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 317.517774][T13238] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 317.517785][T13238] RDX: 0000000000000486 RSI: 0000000080000980 RDI: 00000000800009c0 [ 317.517795][T13238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.517805][T13238] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 317.517815][T13238] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.517838][T13238] [ 317.553218][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'. [ 317.612037][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'. [ 317.612154][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'. [ 317.678179][T13257] 9pnet_fd: p9_fd_create_unix (13257): problem connecting socket: ./file0/file0: -2 [ 317.747702][T13264] netlink: 'syz.2.1157': attribute type 3 has an invalid length. [ 317.754530][T13264] input: syz0 as /devices/virtual/input/input5 [ 317.821505][T13271] netlink: 'syz.2.1160': attribute type 1 has an invalid length. [ 317.825042][T13271] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.1160'. [ 317.878130][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1155'. [ 321.184077][T13328] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 321.201968][T13328] warning: `syz.1.1169' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 321.228673][T13328] bridge_slave_0: left allmulticast mode [ 321.231127][T13328] bridge_slave_0: left promiscuous mode [ 321.234717][T13328] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.262650][T13329] netlink: 'syz.1.1169': attribute type 10 has an invalid length. [ 321.849224][T13328] bridge_slave_1: left allmulticast mode [ 321.851804][T13328] bridge_slave_1: left promiscuous mode [ 321.854288][T13328] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.872333][T13328] bond0: (slave bond_slave_0): Releasing backup interface [ 321.881120][T13328] bond0: (slave bond_slave_1): Releasing backup interface [ 322.046606][T13328] team0: Port device team_slave_0 removed [ 322.065205][T13328] team0: Port device team_slave_1 removed [ 322.068703][T13328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.071780][T13328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.078826][T13328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.081964][T13328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.101717][T13328] bond0: (slave wlan1): Releasing backup interface [ 322.106364][T13329] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 322.114832][T13329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.122792][T13329] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 322.317718][T13344] 9pnet_fd: p9_fd_create_unix (13344): problem connecting socket: ./file0/file0: -2 [ 322.921892][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1175'. [ 323.090185][T13347] bridge22: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 325.566715][T13384] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1182'. [ 326.932284][T13384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1182'. [ 330.373143][T13466] syz.2.1192: attempt to access beyond end of device [ 330.373143][T13466] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 330.432963][T13466] loop8: detected capacity change from 0 to 8 [ 330.441291][T13466] Dev loop8: unable to read RDB block 8 [ 330.443261][T13466] loop8: unable to read partition table [ 330.445107][T13466] loop8: partition table beyond EOD, truncated [ 330.451266][T13466] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 331.790179][T13505] 9pnet_fd: p9_fd_create_unix (13505): problem connecting socket: ./file0/file0: -2 [ 332.116508][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 333.737466][ T68] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.789476][ T68] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.798632][ T68] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.822555][ T68] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.926856][ T68] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.150847][T13523] chnl_net:caif_netlink_parms(): no params data found [ 334.313141][T13523] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.316312][T13523] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.321542][T13523] bridge_slave_0: entered allmulticast mode [ 334.325466][T13523] bridge_slave_0: entered promiscuous mode [ 334.332551][T13523] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.335653][T13523] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.340231][T13523] bridge_slave_1: entered allmulticast mode [ 334.344254][T13523] bridge_slave_1: entered promiscuous mode [ 334.441997][T13523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.450336][T13523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.510770][T13523] team0: Port device team_slave_0 added [ 334.517030][T13523] team0: Port device team_slave_1 added [ 336.036792][ T5958] Bluetooth: hci4: command tx timeout [ 337.369801][T13523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.372668][T13523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.384339][T13523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.693747][T13523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.697915][T13523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.707393][T13523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.116120][ T5958] Bluetooth: hci4: command tx timeout [ 338.383188][T13523] hsr_slave_0: entered promiscuous mode [ 338.386415][T13523] hsr_slave_1: entered promiscuous mode [ 338.389323][T13523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.391848][T13523] Cannot create hsr debugfs directory [ 338.834761][T13523] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 338.847649][T13523] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 338.854276][T13523] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 338.864611][T13523] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 338.981045][T13523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.020046][T13523] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.046518][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.049761][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.068066][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.070423][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.112096][T13523] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 339.120459][T13523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.239790][T13523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.429261][T13523] veth0_vlan: entered promiscuous mode [ 339.434708][T13523] veth1_vlan: entered promiscuous mode [ 339.490996][T13523] veth0_macvtap: entered promiscuous mode [ 339.495522][T13523] veth1_macvtap: entered promiscuous mode [ 339.505352][T13523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.509007][T13523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.512097][T13523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.515441][T13523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.520336][T13523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.523629][T13523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.528100][T13523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.533678][T13523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.539271][T13523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.542839][T13523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.546787][T13523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.550867][T13523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.554113][T13523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.560141][T13523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.565487][T13523] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.569472][T13523] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.573018][T13523] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.576700][T13523] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.948475][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.951269][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.010434][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.015093][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.191326][T13594] 9pnet_fd: p9_fd_create_unix (13594): problem connecting socket: ./file0/file0: -2 [ 340.197811][ T5958] Bluetooth: hci4: command tx timeout [ 340.406889][T13604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1202'. [ 341.151983][T13625] 9pnet_fd: p9_fd_create_unix (13625): problem connecting socket: ./file0/file0: -2 [ 341.977503][T13631] 9pnet_fd: p9_fd_create_unix (13631): problem connecting socket: ./file0/file0: -2 [ 342.210719][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1210'. [ 342.288562][ T5958] Bluetooth: hci4: command tx timeout [ 343.790361][T13640] 9pnet_fd: p9_fd_create_unix (13640): problem connecting socket: ./file0/file0: -2 [ 344.068403][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1212'. [ 344.598463][T13647] 9pnet_fd: p9_fd_create_unix (13647): problem connecting socket: ./file0/file0: -2 [ 344.846749][T13650] 9pnet_fd: p9_fd_create_unix (13650): problem connecting socket: ./file0/file0: -2 [ 344.848058][T13651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'. [ 345.648521][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 345.729127][T13663] bridge23: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 347.137951][ T59] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 347.276062][ T59] usb 7-1: device descriptor read/64, error -71 [ 347.536127][ T59] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 347.677163][ T59] usb 7-1: device descriptor read/64, error -71 [ 347.686045][T13720] FAULT_INJECTION: forcing a failure. [ 347.686045][T13720] name failslab, interval 1, probability 0, space 0, times 0 [ 347.691920][T13720] CPU: 1 UID: 0 PID: 13720 Comm: syz.4.1224 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 347.691956][T13720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 347.691965][T13720] Call Trace: [ 347.691972][T13720] [ 347.691979][T13720] dump_stack_lvl+0x16c/0x1f0 [ 347.692008][T13720] should_fail_ex+0x512/0x640 [ 347.692027][T13720] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 347.692053][T13720] should_failslab+0xc2/0x120 [ 347.692068][T13720] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 347.692094][T13720] ? sk_prot_alloc+0x60/0x2a0 [ 347.692121][T13720] sk_prot_alloc+0x60/0x2a0 [ 347.692146][T13720] sk_alloc+0x36/0xc20 [ 347.692168][T13720] unix_create1+0xa6/0x6c0 [ 347.692195][T13720] unix_create+0x10e/0x1d0 [ 347.692222][T13720] __sock_create+0x335/0x8d0 [ 347.692243][T13720] __sys_socketpair+0x1d8/0x5a0 [ 347.692261][T13720] ? __pfx___sys_socketpair+0x10/0x10 [ 347.692280][T13720] ? __pfx_ksys_write+0x10/0x10 [ 347.692303][T13720] ? rcu_is_watching+0x12/0xc0 [ 347.692327][T13720] __ia32_sys_socketpair+0x95/0x100 [ 347.692345][T13720] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 347.692374][T13720] __do_fast_syscall_32+0x73/0x120 [ 347.692402][T13720] do_fast_syscall_32+0x32/0x80 [ 347.692427][T13720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 347.692446][T13720] RIP: 0023:0xf747e579 [ 347.692459][T13720] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 347.692474][T13720] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000168 [ 347.692492][T13720] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000002 [ 347.692503][T13720] RDX: 0000000000000000 RSI: 0000000080000200 RDI: 0000000000000000 [ 347.692513][T13720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.692523][T13720] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 347.692533][T13720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.692556][T13720] [ 347.792936][ T59] usb usb7-port1: attempt power cycle [ 348.093503][T13726] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 348.133231][T13726] bridge_slave_0: left allmulticast mode [ 348.135505][T13726] bridge_slave_0: left promiscuous mode [ 348.139802][T13726] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.145979][ T59] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 348.150654][T13726] bridge_slave_1: left allmulticast mode [ 348.152882][T13726] bridge_slave_1: left promiscuous mode [ 348.155464][T13726] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.166476][ T59] usb 7-1: device descriptor read/8, error -71 [ 348.217605][T13726] bond0: (slave bond_slave_0): Releasing backup interface [ 348.223773][T13726] bond0: (slave bond_slave_1): Releasing backup interface [ 348.245462][T13726] team0: Port device team_slave_0 removed [ 348.250520][T13726] team0: Port device team_slave_1 removed [ 348.252834][T13726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.255368][T13726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.259199][T13726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.261672][T13726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.270694][T13726] bond0: (slave wlan1): Releasing backup interface [ 348.415918][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 348.415929][ T40] audit: type=1326 audit(1744724328.927:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.4.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 348.424524][ T40] audit: type=1326 audit(1744724328.937:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.4.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 348.596136][ T40] audit: type=1326 audit(1744724328.937:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.4.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 348.604718][ T40] audit: type=1326 audit(1744724328.937:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.4.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 348.614147][ T40] audit: type=1326 audit(1744724328.937:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.4.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 348.621008][ T40] audit: type=1326 audit(1744724328.937:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.4.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 348.629606][ T40] audit: type=1326 audit(1744724328.947:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.4.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 348.636505][ T40] audit: type=1326 audit(1744724328.947:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.4.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 348.644835][ T40] audit: type=1326 audit(1744724328.947:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.4.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 348.657052][ T40] audit: type=1326 audit(1744724328.947:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13727 comm="syz.4.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 348.776051][ T59] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 348.796343][ T59] usb 7-1: device descriptor read/8, error -71 [ 348.926106][ T59] usb usb7-port1: unable to enumerate USB device [ 349.399969][T13735] 9pnet_fd: p9_fd_create_unix (13735): problem connecting socket: ./file0/file0: -2 [ 349.838799][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1228'. [ 349.926420][T13751] 9pnet_fd: p9_fd_create_unix (13751): problem connecting socket: ./file0/file0: -2 [ 350.640477][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1232'. [ 350.901999][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'. [ 350.956897][T13775] bridge23: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 352.249120][T13803] 9pnet_fd: p9_fd_create_unix (13803): problem connecting socket: ./file0/file0: -2 [ 352.366024][ T5995] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 352.508574][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1236'. [ 352.518674][ T5995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.522440][ T5995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.525497][ T5995] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 352.798821][ T5995] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.801784][ T5995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.805357][ T5995] usb 6-1: config 0 descriptor?? [ 352.994861][T13811] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 353.025307][T13811] bridge_slave_0: left allmulticast mode [ 353.028038][T13811] bridge_slave_0: left promiscuous mode [ 353.031204][T13811] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.044629][T13811] bridge_slave_1: left allmulticast mode [ 353.048760][T13811] bridge_slave_1: left promiscuous mode [ 353.051212][T13811] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.065591][T13811] bond0: (slave bond_slave_0): Releasing backup interface [ 353.226555][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.232470][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.234814][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.237436][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.240732][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.243244][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.245547][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.255982][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.258215][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.260492][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.262841][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.265139][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.268863][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.271182][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.273598][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.275991][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.278280][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.280569][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.282905][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.285206][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.288875][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.291186][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.293486][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.295782][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.298176][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.300471][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.302795][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.305094][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.307624][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.309908][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.312198][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.314496][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.316936][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.319216][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.321542][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.323877][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.326279][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.328573][ T5995] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 353.331566][ T5995] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 353.348032][ T5995] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 353.451398][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1239'. [ 353.502243][T13811] bond0: (slave bond_slave_1): Releasing backup interface [ 353.514759][T13811] team0: Port device team_slave_0 removed [ 353.521378][T13811] team0: Port device team_slave_1 removed [ 353.524274][T13811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.527555][T13811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.532356][T13811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.534873][T13811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.549131][T13811] bond0: (slave wlan1): Releasing backup interface [ 353.558967][T13801] FAULT_INJECTION: forcing a failure. [ 353.558967][T13801] name failslab, interval 1, probability 0, space 0, times 0 [ 353.564622][T13801] CPU: 1 UID: 0 PID: 13801 Comm: syz.1.1234 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 353.564658][T13801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 353.564669][T13801] Call Trace: [ 353.564676][T13801] [ 353.564682][T13801] dump_stack_lvl+0x16c/0x1f0 [ 353.564710][T13801] should_fail_ex+0x512/0x640 [ 353.564729][T13801] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 353.564755][T13801] should_failslab+0xc2/0x120 [ 353.564771][T13801] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 353.564796][T13801] ? alloc_empty_file+0x55/0x1e0 [ 353.564817][T13801] alloc_empty_file+0x55/0x1e0 [ 353.564835][T13801] path_openat+0xe0/0x2d40 [ 353.564857][T13801] ? __ia32_compat_sys_openat+0x16d/0x210 [ 353.564876][T13801] ? __do_fast_syscall_32+0x73/0x120 [ 353.564899][T13801] ? do_fast_syscall_32+0x32/0x80 [ 353.564923][T13801] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 353.564951][T13801] ? __pfx_path_openat+0x10/0x10 [ 353.564980][T13801] do_filp_open+0x20b/0x470 [ 353.565003][T13801] ? __pfx_do_filp_open+0x10/0x10 [ 353.565042][T13801] ? alloc_fd+0x471/0x7d0 [ 353.565072][T13801] do_sys_openat2+0x11b/0x1d0 [ 353.565090][T13801] ? __pfx_do_sys_openat2+0x10/0x10 [ 353.565110][T13801] ? __pfx___schedule+0x10/0x10 [ 353.565131][T13801] ? __fget_files+0x20e/0x3c0 [ 353.565152][T13801] ? rcu_watching_snap_stopped_since+0xe0/0x110 [ 353.565179][T13801] __ia32_compat_sys_openat+0x16d/0x210 [ 353.565200][T13801] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 353.565219][T13801] ? ksys_write+0x1b9/0x240 [ 353.565244][T13801] ? rcu_is_watching+0x12/0xc0 [ 353.565267][T13801] __do_fast_syscall_32+0x73/0x120 [ 353.565297][T13801] do_fast_syscall_32+0x32/0x80 [ 353.565321][T13801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 353.565341][T13801] RIP: 0023:0xf745e579 [ 353.565356][T13801] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 353.565372][T13801] RSP: 002b:00000000f50e6100 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 353.565389][T13801] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f50e6150 [ 353.565399][T13801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f744dff4 [ 353.565409][T13801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 353.565419][T13801] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 353.565429][T13801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 353.565448][T13801] [ 353.670180][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.676080][ T59] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 353.677466][ T5997] usb 6-1: USB disconnect, device number 7 [ 353.683475][T13818] 9pnet_fd: p9_fd_create_unix (13818): problem connecting socket: ./file0/file0: -2 [ 353.826009][ T59] usb 9-1: Using ep0 maxpacket: 8 [ 353.829986][ T59] usb 9-1: config index 0 descriptor too short (expected 260, got 27) [ 353.833622][ T59] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 353.837989][ T59] usb 9-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 353.844250][ T59] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 353.848219][ T59] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.056946][ T59] usb 9-1: string descriptor 0 read error: -71 [ 354.067119][ T59] usb 9-1: USB disconnect, device number 2 [ 354.278277][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'. [ 354.326026][T13820] bridge24: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 354.809101][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 354.809113][ T40] audit: type=1326 audit(1744724335.327:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13821 comm="syz.0.1243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 354.819859][ T40] audit: type=1326 audit(1744724335.327:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13821 comm="syz.0.1243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 354.828080][ T40] audit: type=1326 audit(1744724335.327:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13821 comm="syz.0.1243" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 354.835349][ T40] audit: type=1326 audit(1744724335.327:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13821 comm="syz.0.1243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 354.842967][ T40] audit: type=1326 audit(1744724335.327:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13821 comm="syz.0.1243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 354.849883][ T40] audit: type=1326 audit(1744724335.327:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13821 comm="syz.0.1243" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 354.857729][ T40] audit: type=1326 audit(1744724335.327:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13821 comm="syz.0.1243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 354.865955][ T40] audit: type=1326 audit(1744724335.327:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13821 comm="syz.0.1243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 354.872847][ T40] audit: type=1326 audit(1744724335.327:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13821 comm="syz.0.1243" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 354.885935][ T40] audit: type=1326 audit(1744724335.327:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13821 comm="syz.0.1243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 357.616773][T13908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1249'. [ 358.344782][T13935] 9pnet_fd: p9_fd_create_unix (13935): problem connecting socket: ./file0/file0: -2 [ 358.420088][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 358.842323][T13958] program syz.1.1254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.972574][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'. [ 362.486901][T13988] 9pnet_fd: p9_fd_create_unix (13988): problem connecting socket: ./file0/file0: -2 [ 365.254247][T14010] 9pnet_fd: p9_fd_create_unix (14010): problem connecting socket: ./file0/file0: -2 [ 365.259659][T14011] 9pnet_fd: p9_fd_create_unix (14011): problem connecting socket: ./file0/file0: -2 [ 365.422388][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 365.477821][T14016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1264'. [ 365.583057][T14016] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 365.657678][T14015] bridge24: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 366.420948][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'. [ 366.460324][T14020] netlink: 'syz.1.1267': attribute type 10 has an invalid length. [ 366.644049][T14026] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 366.758492][T14026] bond0: (slave wlan1): Releasing backup interface [ 366.865557][T14017] bridge25: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 367.506883][T14039] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 368.339878][T14040] bridge_slave_0: left allmulticast mode [ 368.341871][T14040] bridge_slave_0: left promiscuous mode [ 368.343956][T14040] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.652812][T14074] 9pnet_fd: p9_fd_create_unix (14074): problem connecting socket: ./file0/file0: -2 [ 368.967587][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'. [ 372.131211][T14040] bridge_slave_1: left allmulticast mode [ 372.133607][T14040] bridge_slave_1: left promiscuous mode [ 372.136779][T14040] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.145053][T14040] bond0: (slave bond_slave_0): Releasing backup interface [ 372.153584][T14040] bond0: (slave bond_slave_1): Releasing backup interface [ 372.172327][T14040] team0: Port device team_slave_0 removed [ 372.178827][T14040] team0: Port device team_slave_1 removed [ 372.181471][T14040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.184364][T14040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.193019][T14040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.195531][T14040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.449625][T14106] 9pnet_fd: p9_fd_create_unix (14106): problem connecting socket: ./file0/file0: -2 [ 372.956873][T14125] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 373.006038][T14126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 373.299797][T14133] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 373.363728][T14136] ======================================================= [ 373.363728][T14136] WARNING: The mand mount option has been deprecated and [ 373.363728][T14136] and is ignored by this kernel. Remove the mand [ 373.363728][T14136] option from the mount to silence this warning. [ 373.363728][T14136] ======================================================= [ 373.379352][T14136] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 373.538315][T14126] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 375.217217][T14162] 9pnet_fd: p9_fd_create_unix (14162): problem connecting socket: ./file0/file0: -2 [ 375.514171][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'. [ 376.383847][T14172] 9pnet_fd: p9_fd_create_unix (14172): problem connecting socket: ./file0/file0: -2 [ 376.782777][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 378.151797][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.153762][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.376219][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 380.476478][T14251] 9pnet_fd: p9_fd_create_unix (14251): problem connecting socket: ./file0/file0: -2 [ 380.546137][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 380.557876][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 380.601261][ T10] usb 6-1: config 0 has no interface number 0 [ 380.613819][ T10] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.621417][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 380.624840][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.665050][ T10] usb 6-1: config 0 descriptor?? [ 380.682250][ T10] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 380.710524][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'. [ 380.902341][ T10] usb 6-1: USB disconnect, device number 8 [ 383.113451][T14313] 9pnet_fd: p9_fd_create_unix (14313): problem connecting socket: ./file0/file0: -2 [ 383.861442][T14334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1304'. [ 384.620863][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 385.998269][ T34] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 386.165941][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 386.173060][ T34] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 386.178730][ T34] usb 7-1: config 0 has no interface number 0 [ 386.181610][ T34] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.188757][ T34] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 386.192757][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.201006][ T34] usb 7-1: config 0 descriptor?? [ 386.206964][ T34] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 386.413239][ T34] usb 7-1: USB disconnect, device number 15 [ 387.214909][T14420] ubi31: attaching mtd0 [ 387.267714][T14420] ubi31: scanning is finished [ 387.278235][T14420] ubi31: empty MTD device detected [ 387.797030][T14428] capability: warning: `syz.1.1317' uses 32-bit capabilities (legacy support in use) [ 387.944754][T14420] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 387.948228][T14420] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 387.951419][T14420] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 387.953736][T14420] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 387.956182][T14420] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 387.958432][T14420] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 387.961943][T14420] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1153842043 [ 387.965941][T14420] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 387.970663][T14432] ubi31: background thread "ubi_bgt31d" started, PID 14432 [ 388.001384][T14435] 9pnet_fd: p9_fd_create_unix (14435): problem connecting socket: ./file0/file0: -2 [ 388.466389][T14437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1318'. [ 388.737872][T14441] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1319'. [ 391.474156][T14458] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 391.477917][T14458] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 391.527545][T14458] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 391.533377][T14458] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 391.704184][T14458] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 391.707257][T14458] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 391.714672][T14458] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 391.717832][T14458] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 391.726464][T14458] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 391.729096][T14458] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 391.736575][T14458] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 392.800905][T14508] 9pnet_fd: p9_fd_create_unix (14508): problem connecting socket: ./file0/file0: -2 [ 392.808693][T14504] lo speed is unknown, defaulting to 1000 [ 392.813473][T14504] lo speed is unknown, defaulting to 1000 [ 392.821383][T14504] lo speed is unknown, defaulting to 1000 [ 392.831153][T14504] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 392.893115][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 392.893130][ T40] audit: type=1400 audit(1744724373.407:51): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14503 comm="syz.0.1327" [ 392.897180][T14504] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 392.957198][T14504] lo speed is unknown, defaulting to 1000 [ 392.961503][T14504] lo speed is unknown, defaulting to 1000 [ 392.964383][T14504] lo speed is unknown, defaulting to 1000 [ 392.967328][T14504] lo speed is unknown, defaulting to 1000 [ 392.969871][T14504] lo speed is unknown, defaulting to 1000 [ 393.465488][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'. [ 393.516911][ T5958] Bluetooth: hci0: command 0x0406 tx timeout [ 393.555962][ T5958] Bluetooth: hci2: command 0x0406 tx timeout [ 393.720764][ T5958] Bluetooth: hci3: command 0x0406 tx timeout [ 393.726269][ T5958] Bluetooth: hci1: command 0x0406 tx timeout [ 393.796127][ T5958] Bluetooth: hci4: command 0x0c1a tx timeout [ 393.910019][ T1452] lo speed is unknown, defaulting to 1000 [ 394.347522][T14540] 9pnet_fd: p9_fd_create_unix (14540): problem connecting socket: ./file0/file0: -2 [ 394.568814][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1332'. [ 394.777339][T14544] 9pnet_fd: p9_fd_create_unix (14544): problem connecting socket: ./file0/file0: -2 [ 395.555998][ T5958] Bluetooth: hci0: command 0x0406 tx timeout [ 395.635996][ T5958] Bluetooth: hci2: command 0x0406 tx timeout [ 395.805994][ T5958] Bluetooth: hci1: command 0x0406 tx timeout [ 395.806108][ T68] Bluetooth: hci3: command 0x0406 tx timeout [ 395.885979][ T68] Bluetooth: hci4: command 0x0c1a tx timeout [ 397.206000][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1333'. [ 397.957474][ T68] Bluetooth: hci4: command 0x0c1a tx timeout [ 398.494268][T14610] overlayfs: conflicting lowerdir path [ 399.503298][T14620] x_tables: duplicate underflow at hook 2 [ 399.669261][T14620] sd 0:0:0:0: PR command failed: 1026 [ 399.671089][T14620] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 399.673178][T14620] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 400.876008][T14638] 9pnet_fd: p9_fd_create_unix (14638): problem connecting socket: ./file0/file0: -2 [ 402.215950][T14662] 9pnet_fd: p9_fd_create_unix (14662): problem connecting socket: ./file0/file0: -2 [ 402.468754][T14674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1356'. [ 404.532713][T14688] syz.0.1358 (14688) used greatest stack depth: 20712 bytes left [ 407.648728][T14733] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 407.663765][T14733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 407.669084][T14733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 407.672647][T14733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 407.676222][T14733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 407.679809][T14733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 407.684323][T14733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 407.688003][T14733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 407.694793][T14733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 407.698768][T14733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 408.721307][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1369'. [ 408.993959][T14800] 9pnet_fd: p9_fd_create_unix (14800): problem connecting socket: ./file0/file0: -2 [ 409.086129][ T34] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 409.206343][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1370'. [ 409.286285][ T34] usb 9-1: Using ep0 maxpacket: 32 [ 409.302675][ T34] usb 9-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 409.311121][ T34] usb 9-1: config 1 interface 0 has no altsetting 0 [ 409.316054][ T34] usb 9-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.40 [ 409.318950][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.321466][ T34] usb 9-1: Product: Ц [ 409.322831][ T34] usb 9-1: SerialNumber: 傺ꩵ懲꺏熩ၯ냮難䖬ꟶ쪹ᦀ嚺၁縴န䏌ள얪墩啝뻋磐뤋旅賆ꔳ쪬肋⎥ޅ埐庲鈰Ꞽ鞭讍ꬠ﷔헲∊ᖅ롲ᳮ둧⫎⺁೧晜玮ꗁ縍㙷꾰䥙Ꮎ瞁鹥㧾⴦潰주䟏醘ꅑ鼊쨠身通뉻⑛籀糸냰ﴥ菄峃㛧ǩཌྷ๗鸻॒㡳鯞ꊎూ㠓쵴廯拍훽뿆飮犬죕̿駌 [ 411.547145][T14847] mmap: syz.1.1374 (14847) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 411.857158][ T34] usbhid 9-1:1.0: can't add hid device: -71 [ 411.859155][ T34] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 411.868283][ T34] usb 9-1: USB disconnect, device number 3 [ 412.417248][ T34] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 412.577323][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.581062][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.584122][ T34] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 412.588303][ T34] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 412.591327][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.602997][ T34] usb 9-1: config 0 descriptor?? [ 413.022286][ T34] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd [ 413.025579][ T34] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 413.033536][ T34] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 414.696257][ T34] usb 9-1: reset high-speed USB device number 4 using dummy_hcd [ 416.457528][T14949] 9pnet_fd: p9_fd_create_unix (14949): problem connecting socket: ./file0/file0: -2 [ 416.813734][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'. [ 418.348129][ T5964] usb 9-1: USB disconnect, device number 4 [ 418.382721][T14994] 9pnet_fd: p9_fd_create_unix (14994): problem connecting socket: ./file0/file0: -2 [ 418.604866][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1391'. [ 418.942759][T15013] create_pit_timer: 2 callbacks suppressed [ 418.942769][T15013] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 419.238130][T15017] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 419.252968][T15017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 419.257956][T15017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 419.262810][T15017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 419.267929][T15017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 419.273221][T15017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 419.278167][T15017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 419.281947][T15017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 419.285426][T15017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 420.530192][T15034] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1399'. [ 420.599382][T15037] 9pnet_fd: p9_fd_create_unix (15037): problem connecting socket: ./file0/file0: -2 [ 420.801028][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'. [ 422.551744][T15099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1407'. [ 425.055956][T15147] afs: Unknown parameter 'd|' [ 425.410182][ T40] audit: type=1326 audit(1744724405.897:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15145 comm="syz.2.1417" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35579 code=0x0 [ 426.898354][T15199] 9pnet_fd: p9_fd_create_unix (15199): problem connecting socket: ./file0/file0: -2 [ 427.114671][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1423'. [ 428.014207][T15218] 9pnet_fd: p9_fd_create_unix (15218): problem connecting socket: ./file0/file0: -2 [ 428.505251][T15242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1430'. [ 429.065566][T15264] 9pnet_fd: p9_fd_create_unix (15264): problem connecting socket: ./file0/file0: -2 [ 430.899171][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 433.164355][T15345] 9pnet_fd: p9_fd_create_unix (15345): problem connecting socket: ./file0/file0: -2 [ 433.395604][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'. [ 434.339663][T15396] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1445'. [ 435.388702][T15422] 9pnet_fd: p9_fd_create_unix (15422): problem connecting socket: ./file0/file0: -2 [ 436.444253][T15454] 9pnet_fd: p9_fd_create_unix (15454): problem connecting socket: ./file0/file0: -2 [ 436.640941][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 437.175969][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1449'. [ 438.183816][T15482] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1456'. [ 438.981071][T15514] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 439.560812][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.563945][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.838621][T15545] 9pnet_fd: p9_fd_create_unix (15545): problem connecting socket: ./file0/file0: -2 [ 440.059547][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1463'. [ 440.792147][T15562] 9pnet_fd: p9_fd_create_unix (15562): problem connecting socket: ./file0/file0: -2 [ 441.076863][T15580] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1467'. [ 441.675387][T15595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1466'. [ 445.092426][ T10] IPVS: starting estimator thread 0... [ 445.195997][T15703] IPVS: using max 43 ests per chain, 103200 per kthread [ 445.494020][T15710] 9pnet_fd: p9_fd_create_unix (15710): problem connecting socket: ./file0/file0: -2 [ 446.151706][T15718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1485'. [ 447.108725][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1483'. [ 449.143920][T15792] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1496'. [ 449.183243][T15796] 9pnet_fd: p9_fd_create_unix (15796): problem connecting socket: ./file0/file0: -2 [ 449.420030][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 451.676941][T15838] 9pnet_fd: p9_fd_create_unix (15838): problem connecting socket: ./file0/file0: -2 [ 451.704827][T15839] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1508'. [ 452.113103][T15841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1509'. [ 455.090647][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'. [ 456.369275][T15897] 9pnet_fd: p9_fd_create_unix (15897): problem connecting socket: ./file0/file0: -2 [ 457.670724][T15918] 9pnet: Unknown protocol version 9 [ 457.683468][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 458.531584][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 459.471185][T15943] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1536'. [ 460.381603][T15969] 9pnet: Unknown protocol version 9 [ 461.329159][T15987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'. [ 461.592277][T15992] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1545'. [ 461.774951][T15997] 9pnet_fd: p9_fd_create_unix (15997): problem connecting socket: ./file0/file0: -2 [ 462.101963][T15999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'. [ 463.603585][T16048] 9pnet: Unknown protocol version 9 [ 464.944325][T16066] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.1557'. [ 466.532101][T16118] 9pnet_fd: p9_fd_create_unix (16118): problem connecting socket: ./file0/file0: -2 [ 467.012071][T16129] 9pnet: Unknown protocol version 9p200 [ 467.738033][T16130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1563'. [ 468.179145][T16137] netlink: 'syz.4.1566': attribute type 72 has an invalid length. [ 470.242562][T16197] netlink: 'syz.4.1575': attribute type 72 has an invalid length. [ 471.120297][T16212] create_pit_timer: 16 callbacks suppressed [ 471.120307][T16212] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 471.133893][T16212] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 471.139779][T16212] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 471.143372][T16212] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 471.147598][T16212] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 471.151938][T16212] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 471.163703][T16212] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 471.176205][T16212] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 471.192577][T16224] 9pnet_fd: p9_fd_create_unix (16224): problem connecting socket: ./file0/file0: -2 [ 471.204115][T16212] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 471.214414][T16212] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 472.580799][T16260] netlink: 'syz.1.1584': attribute type 72 has an invalid length. [ 473.203061][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'. [ 474.879604][T16302] 9pnet: Unknown protocol version 9p200 [ 475.502481][T16316] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1593'. [ 477.373285][T16385] 9pnet_fd: p9_fd_create_unix (16385): problem connecting socket: ./file0/file0: -2 [ 477.402115][T16389] 9pnet_fd: p9_fd_create_unix (16389): problem connecting socket: ./file0/file0: -2 [ 477.941281][T16385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1597'. [ 477.981115][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1599'. [ 478.302971][T16401] 9pnet: Unknown protocol version 9p2000. [ 478.334327][T16400] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1602'. [ 478.429328][T16404] create_pit_timer: 14 callbacks suppressed [ 478.429339][T16404] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 478.448829][T16404] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 478.453980][T16404] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 478.462822][T16404] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 478.467942][T16404] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 478.473394][T16404] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 478.479423][T16404] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 478.484550][T16404] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 478.490545][T16404] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 478.495162][T16404] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 478.876037][T11228] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 479.348280][T11228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.351626][T11228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.354469][T11228] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 479.359678][T11228] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 479.362505][T11228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.367110][T11228] usb 5-1: config 0 descriptor?? [ 479.791605][T11228] plantronics 0003:047F:FFFF.0015: reserved main item tag 0xd [ 479.804473][T11228] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 479.816662][T11228] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 488.157541][T16483] create_pit_timer: 15 callbacks suppressed [ 488.157552][T16483] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 492.258120][T16601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1623'. [ 492.950195][T16603] virtio-fs: tag not found [ 494.375818][ T5958] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 494.379130][ T5958] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 494.381772][ T5958] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 494.384439][ T5958] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 494.387881][ T5958] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 494.407130][T16610] lo speed is unknown, defaulting to 1000 [ 494.503688][T16610] chnl_net:caif_netlink_parms(): no params data found [ 494.959884][T16610] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.963040][T16610] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.965345][T16610] bridge_slave_0: entered allmulticast mode [ 494.969022][T16610] bridge_slave_0: entered promiscuous mode [ 494.972395][T16610] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.974742][T16610] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.977190][T16610] bridge_slave_1: entered allmulticast mode [ 494.979775][T16610] bridge_slave_1: entered promiscuous mode [ 495.249522][T16610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.254066][T16610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.921172][T16610] team0: Port device team_slave_0 added [ 495.927347][T16610] team0: Port device team_slave_1 added [ 496.280636][T16610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.282853][T16610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.292958][T16610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.297965][T16610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.300189][T16610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.308345][T16610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.436038][ T5958] Bluetooth: hci5: command tx timeout [ 496.809167][T16610] hsr_slave_0: entered promiscuous mode [ 496.811387][T16610] hsr_slave_1: entered promiscuous mode [ 496.818766][T16610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.823245][T16610] Cannot create hsr debugfs directory [ 498.351811][T16610] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 498.422194][T16610] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 498.438660][T16610] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 498.445594][T16610] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 498.526094][ T5958] Bluetooth: hci5: command tx timeout [ 498.533752][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.606774][T16610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.623172][T16610] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.653767][T16610] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 498.660865][T16610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 498.727025][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.730107][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.741859][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.744931][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.774325][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.803068][T16610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.085551][ T5995] usb 5-1: USB disconnect, device number 12 [ 499.111769][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.156400][T16610] veth0_vlan: entered promiscuous mode [ 499.167066][T16610] veth1_vlan: entered promiscuous mode [ 499.196385][T16610] veth0_macvtap: entered promiscuous mode [ 499.202991][T16610] veth1_macvtap: entered promiscuous mode [ 499.220265][T16610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.234606][T16610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.239767][T16610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.255210][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.279886][T16610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.289729][T16610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.294330][T16610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.314374][T16610] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.319752][T16610] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.323219][T16610] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.328957][T16610] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.406409][ T12] bridge_slave_1: left allmulticast mode [ 499.408305][ T12] bridge_slave_1: left promiscuous mode [ 499.410916][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.415532][ T12] bridge_slave_0: left allmulticast mode [ 499.418111][ T12] bridge_slave_0: left promiscuous mode [ 499.420172][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.595997][ T5958] Bluetooth: hci5: command tx timeout [ 500.999513][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.002268][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.007121][ T1415] ================================================================== [ 501.010589][ T1415] BUG: KASAN: slab-use-after-free in tty_write_room+0x7d/0x90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 501.013803][ T1415] Read of size 8 at addr ffff88806b7b5020 by task aoe_tx0/1415 [ 501.018386][ T1415] [ 501.019448][ T1415] CPU: 3 UID: 0 PID: 1415 Comm: aoe_tx0 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 501.019470][ T1415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 501.019481][ T1415] Call Trace: [ 501.019487][ T1415] [ 501.019493][ T1415] dump_stack_lvl+0x116/0x1f0 [ 501.019529][ T1415] print_report+0xc3/0x670 [ 501.019556][ T1415] ? __virt_addr_valid+0x5e/0x590 [ 501.019579][ T1415] ? __phys_addr+0xc6/0x150 [ 501.019602][ T1415] ? tty_write_room+0x7d/0x90 [ 501.019622][ T1415] kasan_report+0xe0/0x110 [ 501.019638][ T1415] ? tty_write_room+0x7d/0x90 [ 501.019660][ T1415] tty_write_room+0x7d/0x90 [ 501.019681][ T1415] handle_tx+0x14f/0x630 [ 501.019705][ T1415] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 501.019730][ T1415] dev_hard_start_xmit+0x93/0x740 [ 501.019751][ T1415] __dev_queue_xmit+0x7eb/0x43e0 [ 501.019771][ T1415] ? lockdep_hardirqs_on+0x7c/0x110 [ 501.019794][ T1415] ? finish_task_switch.isra.0+0x221/0xc10 [ 501.019816][ T1415] ? rcu_is_watching+0x12/0xc0 [ 501.019838][ T1415] ? __pfx___dev_queue_xmit+0x10/0x10 [ 501.019854][ T1415] ? rcu_is_watching+0x12/0xc0 [ 501.019875][ T1415] ? __lock_acquire+0xaa4/0x1ba0 [ 501.019902][ T1415] ? __lock_acquire+0xaa4/0x1ba0 [ 501.019928][ T1415] ? do_raw_spin_lock+0x12c/0x2b0 [ 501.019946][ T1415] ? find_held_lock+0x2b/0x80 [ 501.019967][ T1415] ? skb_dequeue+0x126/0x180 [ 501.019983][ T1415] ? find_held_lock+0x2b/0x80 [ 501.020008][ T1415] ? rcu_is_watching+0x12/0xc0 [ 501.020028][ T1415] tx+0xcc/0x190 [ 501.020053][ T1415] ? __pfx_tx+0x10/0x10 [ 501.020073][ T1415] kthread+0x1e1/0x3e0 [ 501.020094][ T1415] ? find_held_lock+0x2b/0x80 [ 501.020114][ T1415] ? __pfx_kthread+0x10/0x10 [ 501.020136][ T1415] ? __pfx_default_wake_function+0x10/0x10 [ 501.020159][ T1415] ? lockdep_hardirqs_on+0x7c/0x110 [ 501.020180][ T1415] ? __kthread_parkme+0x19e/0x250 [ 501.020205][ T1415] ? __pfx_kthread+0x10/0x10 [ 501.020225][ T1415] kthread+0x3c2/0x780 [ 501.020242][ T1415] ? __pfx_kthread+0x10/0x10 [ 501.020257][ T1415] ? __pfx_kthread+0x10/0x10 [ 501.020272][ T1415] ? __pfx_kthread+0x10/0x10 [ 501.020288][ T1415] ? __pfx_kthread+0x10/0x10 [ 501.020304][ T1415] ? rcu_is_watching+0x12/0xc0 [ 501.020324][ T1415] ? __pfx_kthread+0x10/0x10 [ 501.020340][ T1415] ret_from_fork+0x45/0x80 [ 501.020357][ T1415] ? __pfx_kthread+0x10/0x10 [ 501.020374][ T1415] ret_from_fork_asm+0x1a/0x30 [ 501.020404][ T1415] [ 501.020410][ T1415] [ 501.120631][ T1415] Allocated by task 16653: [ 501.122501][ T1415] kasan_save_stack+0x33/0x60 [ 501.124418][ T1415] kasan_save_track+0x14/0x30 [ 501.126352][ T1415] __kasan_kmalloc+0xaa/0xb0 [ 501.128264][ T1415] alloc_tty_struct+0x96/0x8c0 [ 501.130245][ T1415] tty_init_dev.part.0+0x1e/0x500 [ 501.132299][ T1415] tty_init_dev+0x60/0x80 [ 501.134076][ T1415] ptmx_open+0x10d/0x360 [ 501.135834][ T1415] chrdev_open+0x231/0x6a0 [ 501.137729][ T1415] do_dentry_open+0x741/0x1c10 [ 501.139754][ T1415] vfs_open+0x82/0x3f0 [ 501.141515][ T1415] path_openat+0x1e5e/0x2d40 [ 501.143482][ T1415] do_filp_open+0x20b/0x470 [ 501.145423][ T1415] do_sys_openat2+0x11b/0x1d0 [ 501.147404][ T1415] __ia32_compat_sys_openat+0x16d/0x210 [ 501.149742][ T1415] __do_fast_syscall_32+0x73/0x120 [ 501.151896][ T1415] do_fast_syscall_32+0x32/0x80 [ 501.153961][ T1415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.156608][ T1415] [ 501.157680][ T1415] Freed by task 5997: [ 501.159384][ T1415] kasan_save_stack+0x33/0x60 [ 501.161403][ T1415] kasan_save_track+0x14/0x30 [ 501.163421][ T1415] kasan_save_free_info+0x3b/0x60 [ 501.165564][ T1415] __kasan_slab_free+0x51/0x70 [ 501.167607][ T1415] kfree+0x2b6/0x4d0 [ 501.169293][ T1415] process_one_work+0x9cc/0x1b70 [ 501.171406][ T1415] worker_thread+0x6c8/0xf10 [ 501.173389][ T1415] kthread+0x3c2/0x780 [ 501.175115][ T1415] ret_from_fork+0x45/0x80 [ 501.177007][ T1415] ret_from_fork_asm+0x1a/0x30 [ 501.179050][ T1415] [ 501.180091][ T1415] Last potentially related work creation: [ 501.182475][ T1415] kasan_save_stack+0x33/0x60 [ 501.184421][ T1415] kasan_record_aux_stack+0xb8/0xd0 [ 501.186543][ T1415] insert_work+0x36/0x230 [ 501.188091][ T1415] __queue_work+0x97e/0x10f0 [ 501.189685][ T1415] queue_work_on+0x1a4/0x1f0 [ 501.191230][ T1415] release_tty+0x4de/0x5d0 [ 501.192749][ T1415] tty_release_struct+0xb7/0xe0 [ 501.194359][ T1415] tty_release+0xe2d/0x1430 [ 501.195782][ T1415] __fput+0x3ff/0xb70 [ 501.197241][ T1415] task_work_run+0x14d/0x240 [ 501.198934][ T1415] syscall_exit_to_user_mode+0x27b/0x2a0 [ 501.200887][ T1415] __do_fast_syscall_32+0x80/0x120 [ 501.202630][ T1415] do_fast_syscall_32+0x32/0x80 [ 501.204268][ T1415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.206356][ T1415] [ 501.207248][ T1415] The buggy address belongs to the object at ffff88806b7b5000 [ 501.207248][ T1415] which belongs to the cache kmalloc-cg-2k of size 2048 [ 501.211877][ T1415] The buggy address is located 32 bytes inside of [ 501.211877][ T1415] freed 2048-byte region [ffff88806b7b5000, ffff88806b7b5800) [ 501.216401][ T1415] [ 501.217396][ T1415] The buggy address belongs to the physical page: [ 501.219820][ T1415] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806b7b0000 pfn:0x6b7b0 [ 501.223060][ T1415] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 501.225893][ T1415] memcg:ffff88806a42db01 [ 501.227365][ T1415] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 501.230369][ T1415] page_type: f5(slab) [ 501.232066][ T1415] raw: 04fff00000000240 ffff88801b44c140 ffffea000131f010 ffffea00019a7010 [ 501.235631][ T1415] raw: ffff88806b7b0000 0000000000080007 00000000f5000000 ffff88806a42db01 [ 501.239209][ T1415] head: 04fff00000000240 ffff88801b44c140 ffffea000131f010 ffffea00019a7010 [ 501.242833][ T1415] head: ffff88806b7b0000 0000000000080007 00000000f5000000 ffff88806a42db01 [ 501.246424][ T1415] head: 04fff00000000003 ffffea0001adec01 00000000ffffffff 00000000ffffffff [ 501.250049][ T1415] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 501.253668][ T1415] page dumped because: kasan: bad access detected [ 501.256329][ T1415] page_owner tracks the page as allocated [ 501.258720][ T1415] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13712, tgid 13711 (syz.0.1223), ts 347614204083, free_ts 347572031003 [ 501.267513][ T1415] post_alloc_hook+0x181/0x1b0 [ 501.269565][ T1415] get_page_from_freelist+0x1193/0x39b0 [ 501.271906][ T1415] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 501.274427][ T1415] alloc_pages_mpol+0x1fb/0x550 [ 501.276484][ T1415] new_slab+0x23c/0x330 [ 501.278269][ T1415] ___slab_alloc+0xd9c/0x1940 [ 501.280279][ T1415] __slab_alloc.constprop.0+0x56/0xb0 [ 501.282613][ T1415] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 501.285291][ T1415] kmemdup_noprof+0x29/0x60 [ 501.287235][ T1415] neigh_sysctl_register+0xb2/0x670 [ 501.289543][ T1415] addrconf_sysctl_register+0xb9/0x1f0 [ 501.291513][ T1415] ipv6_add_dev+0xb39/0x15f0 [ 501.293321][ T1415] addrconf_notify+0x53e/0x19e0 [ 501.295330][ T1415] notifier_call_chain+0xb9/0x410 [ 501.297364][ T1415] call_netdevice_notifiers_info+0xbe/0x140 [ 501.299754][ T1415] register_netdevice+0x182e/0x2270 [ 501.301861][ T1415] page last free pid 13523 tgid 13523 stack trace: [ 501.304423][ T1415] __free_frozen_pages+0x69d/0xff0 [ 501.306467][ T1415] __put_partials+0x16d/0x1c0 [ 501.308341][ T1415] qlist_free_all+0x4e/0x120 [ 501.310215][ T1415] kasan_quarantine_reduce+0x195/0x1e0 [ 501.312418][ T1415] __kasan_slab_alloc+0x69/0x90 [ 501.314220][ T1415] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 501.315979][ T1415] getname_flags.part.0+0x4c/0x550 [ 501.317622][ T1415] __ia32_sys_unlink+0xaf/0x110 [ 501.319189][ T1415] __do_fast_syscall_32+0x73/0x120 [ 501.320846][ T1415] do_fast_syscall_32+0x32/0x80 [ 501.322429][ T1415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.324560][ T1415] [ 501.325363][ T1415] Memory state around the buggy address: [ 501.327211][ T1415] ffff88806b7b4f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 501.329786][ T1415] ffff88806b7b4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 501.332222][ T1415] >ffff88806b7b5000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 501.335097][ T1415] ^ [ 501.336750][ T1415] ffff88806b7b5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 501.339310][ T1415] ffff88806b7b5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 501.341845][ T1415] ================================================================== [ 501.344503][ T1415] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 501.346848][ T1415] CPU: 3 UID: 0 PID: 1415 Comm: aoe_tx0 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 501.351121][ T1415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 501.354649][ T1415] Call Trace: [ 501.355682][ T1415] [ 501.356623][ T1415] dump_stack_lvl+0x3d/0x1f0 [ 501.358235][ T1415] panic+0x71c/0x800 [ 501.359570][ T1415] ? __pfx_panic+0x10/0x10 [ 501.360983][ T1415] ? mark_held_locks+0x49/0x80 [ 501.362529][ T1415] ? tty_write_room+0x7d/0x90 [ 501.364016][ T1415] ? check_panic_on_warn+0x1f/0xb0 [ 501.365630][ T1415] ? tty_write_room+0x7d/0x90 [ 501.367253][ T1415] check_panic_on_warn+0xab/0xb0 [ 501.369214][ T1415] end_report+0x107/0x170 [ 501.370662][ T1415] kasan_report+0xee/0x110 [ 501.372492][ T1415] ? tty_write_room+0x7d/0x90 [ 501.374571][ T1415] tty_write_room+0x7d/0x90 [ 501.376420][ T1415] handle_tx+0x14f/0x630 [ 501.377906][ T1415] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 501.379851][ T1415] dev_hard_start_xmit+0x93/0x740 [ 501.381468][ T1415] __dev_queue_xmit+0x7eb/0x43e0 [ 501.383076][ T1415] ? lockdep_hardirqs_on+0x7c/0x110 [ 501.384754][ T1415] ? finish_task_switch.isra.0+0x221/0xc10 [ 501.386641][ T1415] ? rcu_is_watching+0x12/0xc0 [ 501.388273][ T1415] ? __pfx___dev_queue_xmit+0x10/0x10 [ 501.390286][ T1415] ? rcu_is_watching+0x12/0xc0 [ 501.392232][ T1415] ? __lock_acquire+0xaa4/0x1ba0 [ 501.394078][ T1415] ? __lock_acquire+0xaa4/0x1ba0 [ 501.396197][ T1415] ? do_raw_spin_lock+0x12c/0x2b0 [ 501.398000][ T1415] ? find_held_lock+0x2b/0x80 [ 501.399537][ T1415] ? skb_dequeue+0x126/0x180 [ 501.401020][ T1415] ? find_held_lock+0x2b/0x80 [ 501.402577][ T1415] ? rcu_is_watching+0x12/0xc0 [ 501.404091][ T1415] tx+0xcc/0x190 [ 501.405255][ T1415] ? __pfx_tx+0x10/0x10 [ 501.407010][ T1415] kthread+0x1e1/0x3e0 [ 501.408749][ T1415] ? find_held_lock+0x2b/0x80 [ 501.410702][ T1415] ? __pfx_kthread+0x10/0x10 [ 501.412272][ T1415] ? __pfx_default_wake_function+0x10/0x10 [ 501.414196][ T1415] ? lockdep_hardirqs_on+0x7c/0x110 [ 501.415937][ T1415] ? __kthread_parkme+0x19e/0x250 [ 501.417870][ T1415] ? __pfx_kthread+0x10/0x10 [ 501.419883][ T1415] kthread+0x3c2/0x780 [ 501.421592][ T1415] ? __pfx_kthread+0x10/0x10 [ 501.423356][ T1415] ? __pfx_kthread+0x10/0x10 [ 501.424855][ T1415] ? __pfx_kthread+0x10/0x10 [ 501.426662][ T1415] ? __pfx_kthread+0x10/0x10 [ 501.428546][ T1415] ? rcu_is_watching+0x12/0xc0 [ 501.430634][ T1415] ? __pfx_kthread+0x10/0x10 [ 501.432627][ T1415] ret_from_fork+0x45/0x80 [ 501.434555][ T1415] ? __pfx_kthread+0x10/0x10 [ 501.436320][ T1415] ret_from_fork_asm+0x1a/0x30 [ 501.438263][ T1415] [ 501.440416][ T1415] Kernel Offset: disabled [ 501.442296][ T1415] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:41:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=1ffff920009daec3 RCX=0000000000000001 RDX=0000000000000000 RSI=00000000ffffffff RDI=ffffffff8dcdc50d RBP=ffffffff8e3c1560 RSP=ffffc90004ed75c0 R8 =ffffffff8a131333 R9 =0000000000000000 R10=ffffc90004ed77f0 R11=0000000000000000 R12=ffff888021c30000 R13=ffff888021c30af0 R14=00000000ffffffff R15=0000000000000000 RIP=ffffffff8b703ce0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977b7000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2a283e CR3=0000000023b14000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000046 RBX=ffffffff8e3c15c0 RCX=00000000bbf43897 RDX=0000000000000000 RSI=ffffffff8dbc5f7f RDI=ffffffff8bf45100 RBP=0000000000000002 RSP=ffffc900001f7a88 R8 =4a12e2b8382c1d58 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff810014f0 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978b7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2c1f70 CR3=0000000023b14000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=000000000000007c RCX=ffffffff89d896a3 RDX=ffff888022134880 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc900035979a8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88802ae04f00 R13=0000000000000000 R14=dffffc0000000000 R15=ffff88804cdeb300 RIP=ffffffff81bb3cc0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f318a14ad00 ffffffff 00c00000 GS =0000 ffff8880979b7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc5e4cbff8 CR3=0000000045db6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=80ee54cc80ee54cc 80ee54cc80ee54cc 80ee54cc80ee54cc 80ee54cc80ee54cc 80ee54cc80ee54cc 80ee54cc80ee54cc 80ee54cc80ee54cc 80ee54cc80ee54cc ZMM22=79f80a4579f80a45 79f80a4579f80a45 79f80a4579f80a45 79f80a4579f80a45 79f80a4579f80a45 79f80a4579f80a45 79f80a4579f80a45 79f80a4579f80a45 ZMM23=077dfddd077dfddd 077dfddd077dfddd 077dfddd077dfddd 077dfddd077dfddd 077dfddd077dfddd 077dfddd077dfddd 077dfddd077dfddd 077dfddd077dfddd ZMM24=49b4a64249b4a642 49b4a64249b4a642 49b4a64249b4a642 49b4a64249b4a642 49b4a64249b4a642 49b4a64249b4a642 49b4a64249b4a642 49b4a64249b4a642 ZMM25=985b969b985b969b 985b969b985b969b 985b969b985b969b 985b969b985b969b 985b969b985b969b 985b969b985b969b 985b969b985b969b 985b969b985b969b ZMM26=25343fae25343fae 25343fae25343fae 25343fae25343fae 25343fae25343fae 25343fae25343fae 25343fae25343fae 25343fae25343fae 25343fae25343fae ZMM27=28f1a2a028f1a2a0 28f1a2a028f1a2a0 28f1a2a028f1a2a0 28f1a2a028f1a2a0 28f1a2a028f1a2a0 28f1a2a028f1a2a0 28f1a2a028f1a2a0 28f1a2a028f1a2a0 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c10f0000c10f0000 c10f0000c10f0000 c10f0000c10f0000 c10f0000c10f0000 c10f0000c10f0000 c10f0000c10f0000 c10f0000c10f0000 c10f0000c10f0000 info registers vcpu 3 CPU#3 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bd225 RDI=ffffffff9ae14b40 RBP=ffffffff9ae14b00 RSP=ffffc90007e1f440 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000035 R14=ffffffff9ae14b00 R15=ffffffff854bd1c0 RIP=ffffffff854bd24f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ab7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5101efa CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f740dff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000