last executing test programs: 29.699953721s ago: executing program 3 (id=661): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000000c0)=0xffffffffffff3e23, 0x8) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x6, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000240)={0x9, 0x9444, {0x0}, {0xee00}, 0x4, 0x2}) rt_tgsigqueueinfo(r1, r2, 0x32, &(0x7f00000002c0)={0xc, 0x7fff, 0x10}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = open$dir(&(0x7f0000000180)='./file1\x00', 0x30040, 0x7) r6 = openat(r5, &(0x7f0000000040)='./file1\x00', 0x501040, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010050447d430003b1529bd7000080000", @ANYRES32=0x0, @ANYBLOB="053c01000000000005002100110000000800030000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x240080c1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dcbcd53", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) splice(r3, 0x0, r6, 0x0, 0x1fffffffffff, 0x0) 24.21512155s ago: executing program 3 (id=661): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000000c0)=0xffffffffffff3e23, 0x8) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x6, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000240)={0x9, 0x9444, {0x0}, {0xee00}, 0x4, 0x2}) rt_tgsigqueueinfo(r1, r2, 0x32, &(0x7f00000002c0)={0xc, 0x7fff, 0x10}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = open$dir(&(0x7f0000000180)='./file1\x00', 0x30040, 0x7) r6 = openat(r5, &(0x7f0000000040)='./file1\x00', 0x501040, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010050447d430003b1529bd7000080000", @ANYRES32=0x0, @ANYBLOB="053c01000000000005002100110000000800030000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x240080c1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dcbcd53", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) splice(r3, 0x0, r6, 0x0, 0x1fffffffffff, 0x0) 18.781422293s ago: executing program 3 (id=661): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000000c0)=0xffffffffffff3e23, 0x8) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x6, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000240)={0x9, 0x9444, {0x0}, {0xee00}, 0x4, 0x2}) rt_tgsigqueueinfo(r1, r2, 0x32, &(0x7f00000002c0)={0xc, 0x7fff, 0x10}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = open$dir(&(0x7f0000000180)='./file1\x00', 0x30040, 0x7) r6 = openat(r5, &(0x7f0000000040)='./file1\x00', 0x501040, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010050447d430003b1529bd7000080000", @ANYRES32=0x0, @ANYBLOB="053c01000000000005002100110000000800030000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x240080c1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dcbcd53", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) splice(r3, 0x0, r6, 0x0, 0x1fffffffffff, 0x0) 11.129186797s ago: executing program 3 (id=661): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000000c0)=0xffffffffffff3e23, 0x8) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x6, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000240)={0x9, 0x9444, {0x0}, {0xee00}, 0x4, 0x2}) rt_tgsigqueueinfo(r1, r2, 0x32, &(0x7f00000002c0)={0xc, 0x7fff, 0x10}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = open$dir(&(0x7f0000000180)='./file1\x00', 0x30040, 0x7) r6 = openat(r5, &(0x7f0000000040)='./file1\x00', 0x501040, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010050447d430003b1529bd7000080000", @ANYRES32=0x0, @ANYBLOB="053c01000000000005002100110000000800030000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x240080c1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dcbcd53", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) splice(r3, 0x0, r6, 0x0, 0x1fffffffffff, 0x0) 6.795381485s ago: executing program 3 (id=661): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000000c0)=0xffffffffffff3e23, 0x8) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x6, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000240)={0x9, 0x9444, {0x0}, {0xee00}, 0x4, 0x2}) rt_tgsigqueueinfo(r1, r2, 0x32, &(0x7f00000002c0)={0xc, 0x7fff, 0x10}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = open$dir(&(0x7f0000000180)='./file1\x00', 0x30040, 0x7) r6 = openat(r5, &(0x7f0000000040)='./file1\x00', 0x501040, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010050447d430003b1529bd7000080000", @ANYRES32=0x0, @ANYBLOB="053c01000000000005002100110000000800030000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x240080c1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dcbcd53", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) splice(r3, 0x0, r6, 0x0, 0x1fffffffffff, 0x0) 5.34643997s ago: executing program 0 (id=1090): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x6a}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.240808696s ago: executing program 0 (id=1091): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000040)="00f2e4a7a4f9eb26892602b5703f3166922f9fb030976a8b7cf417c6fee517de2b041705a4e35ec2c5f07a6be6003f3db14d25bc89fce4abca0acbcaa82b166a1d815f02480c4e1b7734cf7cc0af0a8a0dec67b2f3dab97b03c06f03b0c7d8e2c5ea5f163e480d80670801621d6e73745d8c8d3c9fc8acdb57f2e82245bd25a48d107dbc3cb91307d6701ea8", 0x8c) bpf$PROG_LOAD(0x5, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x9, 0x20000800}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x380000, @local, 0x9}, 0x1c) accept4(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(0xffffffffffffffff) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010ac05418200000000000109022400010000000009040000010300000009210000000122050009058103009667f1f483faf300000000"], 0x0) io_uring_setup(0xa10, &(0x7f0000000040)={0x0, 0x2c1, 0x800, 0x1, 0x307}) openat$null(0xffffffffffffff9c, &(0x7f0000002500), 0x1, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x80200) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@gcm_128={{0x304}, "fe25d89e6b465d95", "f8e5be8d19a577509835c9fcf7ebe145", "3db44775", "623e7ade8f80638b"}, 0x28) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1a002) openat$kvm(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.130521479s ago: executing program 1 (id=1110): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x4e21, 0x2000, 'lblc\x00', 0x10}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x45, &(0x7f0000000000)={0x0, 0x0}, 0x10) request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)='\\\\@}\x01\x00\x00@\xf5\xe2\xdbE\xc0P\x02\xe0\xf2\xaa\xe6\x00\x00\x00\x00\x00\x00\x00\xd0\xa1B\x80\xd3\xcc\x06D\a\x00\x00\x00\x00\x00\x00\x04)\'\x03t\xcd\xe8\xd0u\x01\xff\x01\xd1', 0xfffffffffffffffe) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x80044d76, &(0x7f0000000000)) read$FUSE(r2, &(0x7f0000000940)={0x2020}, 0x2020) 3.071038858s ago: executing program 1 (id=1111): r0 = socket$kcm(0x21, 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x5, 0x1, 0xa, 0x9}, {0x6, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x4000005, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000002140)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000300)="273e4906d732867650f6b9d7d0badd3f627a165664956bb989e8a31c9e0071c7d5195ad5632383783d286156b420e07e576ebe4c6aee0dbd5e3bf2d3f95015", 0x3f}, {&(0x7f0000000700)="406a8792b3270dde3e3732b86e5d91846c3a593e0b81610d27d815b513d923ea9506f29cbb57541af3dd6b8d26f875105ac759c939ad56679c04f8acdd8c856ad3a7bb35d0c82aa939d566597dc145929964c2e3160b95df1a5000f65d0b2fb91cf584681ddb25cf6a362eeecba2cd50150679dab1723c6c", 0x78}, {&(0x7f0000000380)="036b6e960621474249", 0x9}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001c80)="35d7888147857e6bb72b9d9de293b2d8e48c5a70cdfe02c217667b0fd947abf61c085fbf534b7dc627bd0ef9373ef59c41ad6d09423ae639a20d17b05b798c80bbdc452b918dad53d35ac0bdd838f6fd83a4f9cec4aeda75ba99212ca4337b2242f433b54239", 0x66}, {&(0x7f0000001fc0)="f732851d36da826df5ce594f1f220ec561fbcd21448f05eb642d1665946e253e7c3819b0103699c6e749a7d2d3fd60f95b0e8490475dc54bdccaf7accef8c8eddc9b7a541e378d4de5b4d22c9cafe86c80e4ad9ffc300b90b87f65fdf67c6b0618b5c57659fa951ff088fe4d5b08660bdbfebb65835852fefb42c7c8ecef63c46f6b0552f502b18a19f584153763888450962e2b353150e028c1fbfa6cc98d5280d2395e9451615e13e87cb1b1eda581ed127e5ac20764940b5723704051365335d3730db739b6", 0xc7}, {&(0x7f0000001880)="b18999faf477c2fb4bc91795461a6efcac90ffde50559e3be6b67e67c1f6ec7297bb740e150b51ff2a0ba372e01d8cd325b41b8da928a61170fc794d51e741bd923071b19bfbac34a986a2c966fcf799ca878cbacb520f28dc0b459c8b9faf446fa7a8b32f3bd034a10ee19afca86325a1b72986c50532d872b3880bbb4462ec3e8670879a1b64840c7da67025aebb3e8da85b4588d0cc1010e1e778a7cb631a80b895f697c136d82e263217f00ca01fd17203e113e3615d2c4f5713e0bd811facde2ccf0c54c40f919a528689e827e5404c9ef3f3c95408a8d0a693d4e797ff86", 0xe1}], 0x7, 0x0, 0x0, 0x20004050}}, {{&(0x7f0000001980)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a00)="6f74996f67fff4c854e85cc3da2d5467218d137ea6c7226cd649fb3855433068d1080406b7a6b9c8c22137f3820d24149429eff336535c57132f38da0bf943afe8d004b3e69cc438727b89fb7ca427d4a6a7d1369d519529560652794b742355d13ba988189aa04fa47a48982a63dcb7ff7f5a06248528c12c3a0961f3fa0d8a26fc8d8adc6903397300f1de7c4ba473e7c621ba9c82a2f07fedd470d03433f56ef320297af0d4eb3303e34637696dfe29afad3782ce7c6d949e3da357e1e5c034", 0xc1}, {&(0x7f0000001b00)="6ab765c60ad868095f5f0160fea2c1066df1d16e150c483b5e13e0660c548f320bb5382cfb42cb96c3e4d281628316bf13f1c4d761ebecfb3357ee193dde1158d666f42e27abd1bfa614a98a2269cfa8f3f846518da0c426ba86fb4d2f0e6aaff9fae559f9232fb00a82e0df503d88e8b356a2ead353dab7598004a07f9b42a4b9acad57ed331fc1d85955b86cca828d4de1903bfa6dc7531211ea4142a25361357ba2eac792ec08f8b235194244d365fc27b0aba0a4a5533b9d43f943d3a40e22b22f50673daa06db414cf4cce48ebefb8d04ffe6a7aa778146b2a16b8191a9", 0xe0}, {&(0x7f0000001c00)="f500a7c9e0b66cc0d2a5b262c8d12d1f0fbc68a5f128d26615614e516561089382a06d11f12b639c2a2321cf6250f251802a8ee4e5afd084b01b3d306a62b27aa23b261d2a23d6baabc927d547", 0x4d}, {&(0x7f0000001780)="fa63d371f1c8dbd4df21825489c2f405a838bf173b534637ab9a5d8bf085a57249f2363c6c122c9d92b207aa1c47e6eb10a6964994cc4e5ae3e42f9502b04b72ba2fc18dc36369d69d941483", 0x4c}, {&(0x7f0000001d00)="b3a272a170cc110399a4369f58f888b03a914063326196651bc52c0539ea8c42a9e5235630a18167780ccf5520f92958e77934c3ca424c281a0721464a8a0cb6ef72cdd898276160b1d82332c7db617f0a4380a018b6001ef135c5d098755ac0c6777a70a3261ca81a58483cb72efadb80a3fb52211454d9c2920e4f3a7b62717dc48a0401d054048a6595bc5575ea89c9c0bcaace04ec38edc326b1abaccc532cc4811b6d613154436c773df7ccec04a3f9900f97ed5f56cc299fe9504f379bed80fe4619a85b36d9fd8ecebbd7573f629a4775626f1d38066c3c773ef5a7ea6b7c215b409ccb148d9c35730e170d1955011cefd1a7a7adb46737", 0xfb}], 0x5, &(0x7f00000024c0)=ANY=[@ANYRES8=r3, @ANYRES32=r0, @ANYBLOB="01d9b489ae2d75e048b1391446a56df04d2e9ad7410be71e2c7197aaacd2b9b3496e6177f45b4930d3ec1aebfc154843d6691e3e5497af0d99ef62cfd66047aa06d871d5f19a4fea1095bca39c9e2804498039a386af938dbccca2c63dd559a950a9c8c65af1d4af6f151634a25f778bb171db05f8d2fac7de6e96c94d6ddb264c30d33217295abf01e77b19cc866b959b6e2ad0c257709fad54b6e42da7e3293e8162ef8e87b12b538aa219b57286186d7c74258c2f45fd3692c8373e39dae27041acec226f0634ef8b859baf45a07fc814be21136d1d9f206b7ea014d25e60f7cad84e436f08769c172cf217", @ANYBLOB="180000000100000002000000", @ANYRESHEX=r2, @ANYBLOB="2fe563dc7a2678ce21c4b519fbfc3bf27f71fcfaa4d7c17282ebf250ebf85e3e8ec3836be9916d9394b5d7259a21dca1c62ed4d44ed66b4e667cbd7282db43fbc5299cd08eaadfa2b0d4949829ee8fe33c04c0001499f6", @ANYRES32=r2, @ANYBLOB="180000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="100000000100000001000000", @ANYRESHEX=r1, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="340000000100000001000000", @ANYRES64=r1, @ANYRES32=r4, @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1], 0xb4, 0x4}}], 0x2, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000080"], 0x119) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r6 = syz_open_dev$vbi(&(0x7f0000001840), 0x3, 0x2) write(r6, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f046}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000240)=[{0x7, 0x8, 0x7, 0x101}]}) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000001800)="70696d1a50c6184b3bfa9a711c67965ae68984a1bdb3d1e42b6ee91878a9d26a8882be8d053c797b", 0x28, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r7, r7, r7}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="100000006d4007100100000a4ec416fdd166759e209cd0c73f7310535ffd6a39f1764995838dffd838e1575e1916f00b003bcd468c75eaebf1678b05000000000000000a32e8a32e8ec1c995e7cc9e137d7e6a0c01"], 0x10}, 0x20004000) 2.899756258s ago: executing program 0 (id=1112): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[], 0x10}], 0x2000000000000312}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="50010000100013070000000000000000ff0200000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac1414170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c"], 0x150}}, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000000d08000440000000040900010073797a"], 0x80}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_open_dev$loop(0x0, 0x2, 0x40000) syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r4) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x84) fchown(r6, 0x0, 0x0) mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, r2, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x3, 0x4) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) 2.345010318s ago: executing program 0 (id=1117): syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff"], 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) 2.275633091s ago: executing program 0 (id=1118): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x76, 0x8, 0x5}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000060000000000000000000850000001700000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x100300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000000000000a41700004000000042000000", @ANYRES32, @ANYBLOB="080000005fbf6fbb0000514d66e92800"/25, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000100", @ANYRES16=r4, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) syz_usbip_server_init(0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x20020680) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40440, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x30, r8, 0x1, 0xfffffffd, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x96c}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x20000010) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 2.178971121s ago: executing program 1 (id=1119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f738e50, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89b1, &(0x7f0000000000)={'vlan1\x00', @local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') 2.175833807s ago: executing program 1 (id=1120): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000340)=@v1={0x1000000, [{0xfffffff5, 0x9}]}, 0xc, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000380)={'geneve1\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0) 1.990897421s ago: executing program 1 (id=1121): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1.760154128s ago: executing program 2 (id=1122): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x0, &(0x7f00000019c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmget$private(0x0, 0x2000, 0x0, &(0x7f00005f0000/0x2000)=nil) 1.429629657s ago: executing program 3 (id=661): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000000c0)=0xffffffffffff3e23, 0x8) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x6, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000240)={0x9, 0x9444, {0x0}, {0xee00}, 0x4, 0x2}) rt_tgsigqueueinfo(r1, r2, 0x32, &(0x7f00000002c0)={0xc, 0x7fff, 0x10}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = open$dir(&(0x7f0000000180)='./file1\x00', 0x30040, 0x7) r6 = openat(r5, &(0x7f0000000040)='./file1\x00', 0x501040, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010050447d430003b1529bd7000080000", @ANYRES32=0x0, @ANYBLOB="053c01000000000005002100110000000800030000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x240080c1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dcbcd53", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) splice(r3, 0x0, r6, 0x0, 0x1fffffffffff, 0x0) 182.715588ms ago: executing program 0 (id=1123): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000040)="00f2e4a7a4f9eb26892602b5703f3166922f9fb030976a8b7cf417c6fee517de2b041705a4e35ec2c5f07a6be6003f3db14d25bc89fce4abca0acbcaa82b166a1d815f02480c4e1b7734cf7cc0af0a8a0dec67b2f3dab97b03c06f03b0c7d8e2c5ea5f163e480d80670801621d6e73745d8c8d3c9fc8acdb57f2e82245bd25a48d107dbc3cb91307d6701ea8", 0x8c) bpf$PROG_LOAD(0x5, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x9, 0x20000800}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x380000, @local, 0x9}, 0x1c) accept4(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(0xffffffffffffffff) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010ac05418200000000000109022400010000000009040000010300000009210000000122050009058103009667f1f483faf300000000"], 0x0) io_uring_setup(0xa10, &(0x7f0000000040)={0x0, 0x2c1, 0x800, 0x1, 0x307}) openat$null(0xffffffffffffff9c, &(0x7f0000002500), 0x1, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x80200) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@gcm_128={{0x304}, "fe25d89e6b465d95", "f8e5be8d19a577509835c9fcf7ebe145", "3db44775", "623e7ade8f80638b"}, 0x28) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1a002) openat$kvm(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 182.392971ms ago: executing program 1 (id=1124): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xffffff80}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000d80)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "8ebb3711dc263b"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000002c0)={{r5, 0x5, 0x1, 0x7, 0x4, 0x8, 0x2, 0x0, 0x0, 0x7fffffff, 0xd, 0x80000000, 0x0, 0x8000, 0x401}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(r7, 0x6b, 0x2, &(0x7f0000000140), 0x4) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r11, 0x1, 0x2b, &(0x7f0000000080)=0x7, 0x4) sendmsg$nl_xfrm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="20010000160001000000000000000000ffffffff000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000032000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000003c8ed03c7ba2135f00000000000000000000000000000000000000000000000000000000000000000000000000d100000028001a0064010102000000000000000000000000ac14041600000000000000000000000002000607"], 0x120}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24044011) 178.902296ms ago: executing program 2 (id=1125): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000440)=0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000082038851000000600000018000000", @ANYRES32, @ANYBLOB="00000000010300006608000000000000180000000000002000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x1000, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x657, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}}) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x24}}, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x2, 0x1, 0x604, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x14) 51.073911ms ago: executing program 2 (id=1126): r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000500)=@profile={'stack ', '@\x00'}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0xc02, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xa, 0xfffffffc, 0x800081}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x820061, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inodes=A']) write$binfmt_script(r3, &(0x7f0000000200)={'#! ', './file0', [{0x20, './cgroup/syz0\x00'}, {0x20, ','}], 0xa, "16696da23dfd0639797fd694a7a7840cc16a683c80218e9ab19edc99eedb0ef1d44fa69aa4ed3a4cc6cf7753d85961da9568d11c35ea0a00da9f417837d23ade572631517f451e6927ceaa146fe5574302af392bd095f588b205e708c57aa32560a9c04c1618664f278f5a804d6bf707b06404968ab34e10185ae650c2ce7e2d84652fba4a26f10993d84aa9f71936badc6ac8c6ec7713b76085b6ac784b9ae18d248d0c9ca4e83065c727e9a0cc690598d33e09aee7db9cb12b905794f80afab3e0c7fff7e01889bd84b1ccc520e12e6ae5d3529f"}, 0xf1) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r2, 0x40047451, 0x2000000c) close(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = socket(0x9, 0x2, 0xffffffff) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 50.805271ms ago: executing program 2 (id=1127): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}, [{}, {0x0, 0x8000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) 50.546298ms ago: executing program 2 (id=1128): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36504001ac008000c0005000200060000000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000140)=""/108, 0x6c, 0x12123, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @bcast}, 0x1c) request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)='\\\\@}\x01\x00\x00@\xf5\xe2\xdbE\xc0P\x02\xe0\xf2\xaa\xe6\x00\x00\x00\x00\x00\x00\x00\xd0\xa1B\x80\xd3\xcc\x06D\a\x00\x00\x00\x00\x00\x00\x04)\'\x03t\xcd\xe8\xd0u\x01\xff\x01\xd1', 0xfffffffffffffffe) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000940)={0x2020}, 0x2020) 0s ago: executing program 2 (id=1129): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='skb_copy_datagram_iovec\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)="3ba3", 0x2}], 0x1}, 0x20000001) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x2000000, 0x0}, 0x10002) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.052060][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.054697][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.056998][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.061182][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.063951][ T5957] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 132.066610][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.112954][ T8859] chnl_net:caif_netlink_parms(): no params data found [ 132.175592][ T8859] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.177648][ T8859] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.179941][ T8859] bridge_slave_0: entered allmulticast mode [ 132.181932][ T8859] bridge_slave_0: entered promiscuous mode [ 132.184331][ T8859] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.186366][ T8859] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.188458][ T8859] bridge_slave_1: entered allmulticast mode [ 132.190936][ T8859] bridge_slave_1: entered promiscuous mode [ 132.214876][ T8859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.218378][ T8859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.222097][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.223233][ T8871] netlink: 'syz.2.742': attribute type 7 has an invalid length. [ 132.238704][ T8859] team0: Port device team_slave_0 added [ 132.241222][ T8859] team0: Port device team_slave_1 added [ 132.242013][ T8876] overlayfs: failed to clone upperpath [ 132.255268][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.257267][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.265141][ T8859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.268622][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.270743][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.278381][ T8859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.301963][ T8859] hsr_slave_0: entered promiscuous mode [ 132.309301][ T8859] hsr_slave_1: entered promiscuous mode [ 132.311239][ T8859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.313458][ T8859] Cannot create hsr debugfs directory [ 133.247598][ T8907] siw: device registration error -23 [ 134.071412][ T1175] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.121456][ T1175] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.139311][ T5951] Bluetooth: hci3: command tx timeout [ 134.201190][ T1175] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.250304][ T1175] bridge_slave_1: left allmulticast mode [ 134.251959][ T1175] bridge_slave_1: left promiscuous mode [ 134.253896][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.259346][ T1175] bridge_slave_0: left allmulticast mode [ 134.261615][ T1175] bridge_slave_0: left promiscuous mode [ 134.263771][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.368802][ T1175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.383246][ T1175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.394188][ T1175] bond0 (unregistering): Released all slaves [ 134.431277][ T8935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.831759][ T1175] hsr_slave_0: left promiscuous mode [ 134.834997][ T1175] hsr_slave_1: left promiscuous mode [ 134.837313][ T1175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.840258][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.844983][ T1175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.847145][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.850744][ T1175] veth1_macvtap: left promiscuous mode [ 134.852376][ T1175] veth0_macvtap: left promiscuous mode [ 134.853958][ T1175] veth1_vlan: left promiscuous mode [ 134.855476][ T1175] veth0_vlan: left promiscuous mode [ 135.062396][ T1175] team0 (unregistering): Port device team_slave_1 removed [ 135.072923][ T1175] team0 (unregistering): Port device team_slave_0 removed [ 135.120807][ T8859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 135.123840][ T8859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 135.126799][ T8859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 135.129695][ T8859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 135.150383][ T8859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.155347][ T8859] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.159192][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.161297][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.165473][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.167531][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.218695][ T8859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.231029][ T8859] veth0_vlan: entered promiscuous mode [ 135.234500][ T8859] veth1_vlan: entered promiscuous mode [ 135.239183][ T57] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.243007][ T8859] veth0_macvtap: entered promiscuous mode [ 135.245832][ T8859] veth1_macvtap: entered promiscuous mode [ 135.250663][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.253628][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.256472][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.259816][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.262751][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.265757][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.268558][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.271705][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.274934][ T8859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.278554][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.281619][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.284463][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.287444][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.290438][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.293438][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.296253][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.299251][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.302458][ T8859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.306324][ T8859] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.308971][ T8859] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.311830][ T8859] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.314457][ T8859] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.327962][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.332248][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.338346][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.340639][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.392057][ T57] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.395291][ T57] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 135.398105][ T57] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.401320][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.404434][ T8968] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 135.407400][ T57] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.627168][ T5992] usb 5-1: USB disconnect, device number 6 [ 135.640330][ T39] kauditd_printk_skb: 80 callbacks suppressed [ 135.640339][ T39] audit: type=1326 audit(1736674017.848:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.2.767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 135.648054][ T39] audit: type=1326 audit(1736674017.848:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.2.767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 135.654240][ T39] audit: type=1326 audit(1736674017.848:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.2.767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 135.661425][ T39] audit: type=1326 audit(1736674017.848:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.2.767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 135.670983][ T39] audit: type=1326 audit(1736674017.848:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.2.767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 135.678633][ T39] audit: type=1326 audit(1736674017.848:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.2.767" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f57598 code=0x7ffc0000 [ 135.686980][ T39] audit: type=1326 audit(1736674017.848:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.2.767" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f57598 code=0x7ffc0000 [ 135.697373][ T39] audit: type=1326 audit(1736674017.848:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.2.767" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f57598 code=0x7ffc0000 [ 135.706403][ T39] audit: type=1326 audit(1736674017.848:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.2.767" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f57598 code=0x7ffc0000 [ 135.713137][ T39] audit: type=1326 audit(1736674017.848:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.2.767" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f57598 code=0x7ffc0000 [ 135.727233][ T8997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.767'. [ 135.793143][ T9011] netlink: 48 bytes leftover after parsing attributes in process `syz.2.772'. [ 136.435719][ T9037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.780'. [ 136.440349][ T9037] ipvlan2: entered allmulticast mode [ 136.441906][ T9037] veth0_vlan: entered allmulticast mode [ 136.579505][ T9043] netdevsim netdevsim0: Direct firmware load for printk failed with error -2 [ 136.582526][ T9043] netdevsim netdevsim0: Falling back to sysfs fallback for: printk [ 137.293834][ T9039] [U] vÔ3 [ 137.413183][ T9059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.785'. [ 137.418255][ T9061] batman_adv: batadv0: Adding interface: ip6gretap1 [ 137.420614][ T9061] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.427885][ T9061] batman_adv: batadv0: Interface activated: ip6gretap1 [ 137.970406][ T1138] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.441108][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.443585][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.446059][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.449916][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.453004][ T5957] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 138.455709][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.505815][ T9075] chnl_net:caif_netlink_parms(): no params data found [ 138.524224][ T9080] o2cb: This node has not been configured. [ 138.525984][ T9080] o2cb: Cluster check failed. Fix errors before retrying. [ 138.528030][ T9080] (syz.0.790,9080,2):user_dlm_register:674 ERROR: status = -22 [ 138.530411][ T9080] (syz.0.790,9080,2):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 138.648357][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.651068][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.653191][ T9075] bridge_slave_0: entered allmulticast mode [ 138.655272][ T9075] bridge_slave_0: entered promiscuous mode [ 138.657683][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.660215][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.662314][ T9075] bridge_slave_1: entered allmulticast mode [ 138.664371][ T9075] bridge_slave_1: entered promiscuous mode [ 138.692434][ T9075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.696099][ T9075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.952001][ T9075] team0: Port device team_slave_0 added [ 138.955670][ T9075] team0: Port device team_slave_1 added [ 138.991470][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.993548][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.002745][ T9075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.007738][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.010282][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.018570][ T9075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.132865][ T9091] overlayfs: failed to clone upperpath [ 139.150949][ T9075] hsr_slave_0: entered promiscuous mode [ 139.153829][ T9075] hsr_slave_1: entered promiscuous mode [ 139.297998][ T9075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.301109][ T9075] Cannot create hsr debugfs directory [ 139.422657][ T9092] xt_connbytes: Forcing CT accounting to be enabled [ 139.424628][ T9092] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.824308][ T1138] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.886238][ T9109] nfs4: Unknown parameter 'p' [ 139.911241][ T1138] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.991412][ T1138] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.073256][ T1138] bridge_slave_1: left allmulticast mode [ 140.075447][ T1138] bridge_slave_1: left promiscuous mode [ 140.077382][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.080450][ T1138] bridge_slave_0: left allmulticast mode [ 140.082874][ T1138] bridge_slave_0: left promiscuous mode [ 140.085115][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.146583][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.150200][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.153232][ T1138] bond0 (unregistering): Released all slaves [ 140.488003][ T1138] hsr_slave_0: left promiscuous mode [ 140.490427][ T1138] hsr_slave_1: left promiscuous mode [ 140.492711][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.494963][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.497469][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.500670][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.504446][ T1138] veth1_macvtap: left promiscuous mode [ 140.506186][ T1138] veth0_macvtap: left promiscuous mode [ 140.507866][ T1138] veth1_vlan: left promiscuous mode [ 140.510247][ T1138] veth0_vlan: left promiscuous mode [ 140.539496][ T5957] Bluetooth: hci3: command tx timeout [ 140.579761][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 140.585544][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 140.776543][ T9075] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 140.782355][ T9075] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 140.787182][ T9075] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 140.792575][ T9075] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 140.821474][ T9075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.828735][ T9075] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.833800][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.835880][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.840479][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.842681][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.936340][ T9075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.954049][ T9075] veth0_vlan: entered promiscuous mode [ 140.957344][ T9075] veth1_vlan: entered promiscuous mode [ 140.977889][ T9075] veth0_macvtap: entered promiscuous mode [ 140.981337][ T9075] veth1_macvtap: entered promiscuous mode [ 140.986047][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.989156][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.992206][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.995080][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.998103][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.001489][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.004358][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.007554][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.012303][ T9075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.019525][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.022572][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.025391][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.028377][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.031982][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.034991][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.037869][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.041690][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.044907][ T9075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.048354][ T9075] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.051033][ T9075] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.053575][ T9075] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.056047][ T9075] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.076171][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.089317][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.110531][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.113063][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.127787][ T9194] siw: device registration error -23 [ 141.909590][ T9204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.815'. [ 141.912647][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 141.915896][ T9201] openvswitch: netlink: Flow actions attr not present in new flow. [ 142.315308][ T9239] siw: device registration error -23 [ 142.329449][ T9237] x_tables: duplicate underflow at hook 3 [ 142.788094][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'. [ 143.178123][ T9283] netlink: 'syz.2.839': attribute type 8 has an invalid length. [ 143.436313][ T9293] overlayfs: failed to clone upperpath [ 143.517004][ T9295] 9pnet_virtio: no channels available for device syz [ 143.741163][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.748792][ T9307] siw: device registration error -23 [ 144.049358][ T9308] loop7: detected capacity change from 16384 to 16383 [ 144.113486][ T7524] Buffer I/O error on dev loop7, logical block 2047, async page read [ 144.340954][ T5951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.343351][ T5951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.346534][ T5951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.349358][ T5951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 144.351677][ T5951] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 144.353915][ T5951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.413199][ T7524] Buffer I/O error on dev loop7, logical block 4095, async page read [ 144.424082][ T9313] chnl_net:caif_netlink_parms(): no params data found [ 144.462594][ T9324] devtmpfs: Unknown parameter 'inode3›Öm' [ 144.474749][ T9327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.849'. [ 144.485854][ T9313] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.488808][ T9313] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.492177][ T9313] bridge_slave_0: entered allmulticast mode [ 144.495139][ T9313] bridge_slave_0: entered promiscuous mode [ 144.498850][ T9313] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.501851][ T9313] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.504867][ T9313] bridge_slave_1: entered allmulticast mode [ 144.507928][ T9313] bridge_slave_1: entered promiscuous mode [ 144.524921][ T9313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.528570][ T9313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.543217][ T9313] team0: Port device team_slave_0 added [ 144.545535][ T9313] team0: Port device team_slave_1 added [ 144.558550][ T9313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.560620][ T9313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.567908][ T9313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.571646][ T9313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.573618][ T9313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.580923][ T9313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.598746][ T9313] hsr_slave_0: entered promiscuous mode [ 144.601486][ T9313] hsr_slave_1: entered promiscuous mode [ 144.603451][ T9313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.605603][ T9313] Cannot create hsr debugfs directory [ 144.881286][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.851'. [ 145.301920][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.388346][ T9340] netlink: 36 bytes leftover after parsing attributes in process `syz.0.853'. [ 145.401919][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.472405][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.539491][ T11] bridge_slave_1: left allmulticast mode [ 145.541141][ T11] bridge_slave_1: left promiscuous mode [ 145.542798][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.546153][ T11] bridge_slave_0: left allmulticast mode [ 145.547898][ T11] bridge_slave_0: left promiscuous mode [ 145.549706][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.647179][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.652609][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.660197][ T11] bond0 (unregistering): Released all slaves [ 145.983460][ T11] hsr_slave_0: left promiscuous mode [ 145.985873][ T11] hsr_slave_1: left promiscuous mode [ 145.988580][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.990792][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.993439][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.995656][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.003601][ T11] veth1_macvtap: left promiscuous mode [ 146.005226][ T11] veth0_macvtap: left promiscuous mode [ 146.006894][ T11] veth1_vlan: left promiscuous mode [ 146.008420][ T11] veth0_vlan: left promiscuous mode [ 146.142217][ T11] team0 (unregistering): Port device team_slave_1 removed [ 146.148782][ T11] team0 (unregistering): Port device team_slave_0 removed [ 146.231359][ T9313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.234581][ T9313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.238680][ T9313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.242659][ T9313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 146.270772][ T9313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.277815][ T9313] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.291327][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.293712][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.296267][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.298317][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.313359][ T9378] IPv6: Can't replace route, no match found [ 146.320738][ T9378] futex_wake_op: syz.0.858 tries to shift op by -1; fix this program [ 146.359848][ T9313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.371681][ T9313] veth0_vlan: entered promiscuous mode [ 146.375501][ T9313] veth1_vlan: entered promiscuous mode [ 146.379202][ T5951] Bluetooth: hci3: command tx timeout [ 146.387146][ T9313] veth0_macvtap: entered promiscuous mode [ 146.390362][ T9313] veth1_macvtap: entered promiscuous mode [ 146.395495][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.398976][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.401872][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.404942][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.408493][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.412083][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.415690][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.418684][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.422938][ T9313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.428408][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.432054][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.434997][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.437887][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.441017][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.444112][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.446959][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.451024][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.454538][ T9313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.459294][ T9313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.462600][ T9313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.465846][ T9313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.470666][ T9313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.495101][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.497185][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.505524][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.507928][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.582034][ T9390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.861'. [ 146.596297][ T9390] syzkaller0: entered promiscuous mode [ 146.597923][ T9390] syzkaller0: entered allmulticast mode [ 147.240746][ T39] kauditd_printk_skb: 97 callbacks suppressed [ 147.240762][ T39] audit: type=1326 audit(1736674029.448:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.863" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 147.252370][ T39] audit: type=1326 audit(1736674029.448:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.863" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f745a7 code=0x7ffc0000 [ 147.261874][ T39] audit: type=1326 audit(1736674029.448:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.863" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 147.268365][ T39] audit: type=1326 audit(1736674029.448:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.863" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 147.277436][ T39] audit: type=1326 audit(1736674029.448:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.863" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 147.284880][ T39] audit: type=1326 audit(1736674029.448:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.863" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 147.291272][ T39] audit: type=1326 audit(1736674029.448:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.863" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f745a7 code=0x7ffc0000 [ 147.298503][ T39] audit: type=1326 audit(1736674029.448:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.863" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 147.305229][ T39] audit: type=1326 audit(1736674029.448:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.863" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 147.311587][ T39] audit: type=1326 audit(1736674029.448:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.863" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f745a7 code=0x7ffc0000 [ 147.499449][ T30] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 147.565252][ T9425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.871'. [ 147.649211][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 147.653603][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 147.656759][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34304, setting to 1024 [ 147.660096][ T30] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 147.662830][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.670723][ T30] usb 6-1: config 0 descriptor?? [ 147.680150][ T9400] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 147.690968][ T9426] o2cb: This node has not been configured. [ 147.693263][ T9426] o2cb: Cluster check failed. Fix errors before retrying. [ 147.696177][ T9426] (syz.0.870,9426,0):user_dlm_register:674 ERROR: status = -22 [ 147.698582][ T9426] (syz.0.870,9426,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 148.099561][ T30] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:05AC:8241.0003/input/input16 [ 148.175466][ T30] appleir 0003:05AC:8241.0003: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 148.189500][ T9435] netlink: 180 bytes leftover after parsing attributes in process `syz.2.874'. [ 148.951627][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'. [ 148.976089][ T66] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.650000][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.881'. [ 149.678540][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.680936][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.685248][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.687819][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.691276][ T5957] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.694271][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.740223][ T9457] chnl_net:caif_netlink_parms(): no params data found [ 149.825684][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.882'. [ 149.828665][ T9469] netlink: 60 bytes leftover after parsing attributes in process `syz.0.882'. [ 149.831433][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.882'. [ 149.834941][ T9469] netlink: 60 bytes leftover after parsing attributes in process `syz.0.882'. [ 149.837496][ T9469] netlink: 104 bytes leftover after parsing attributes in process `syz.0.882'. [ 149.840857][ T9457] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.842906][ T9457] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.844941][ T9457] bridge_slave_0: entered allmulticast mode [ 149.846964][ T9457] bridge_slave_0: entered promiscuous mode [ 149.850633][ T9457] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.852708][ T9457] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.854751][ T9457] bridge_slave_1: entered allmulticast mode [ 149.856792][ T9457] bridge_slave_1: entered promiscuous mode [ 149.871247][ T9457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.874747][ T9457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.879873][ T57] usb 6-1: USB disconnect, device number 14 [ 149.910902][ T9457] team0: Port device team_slave_0 added [ 149.914451][ T9457] team0: Port device team_slave_1 added [ 149.947444][ T9457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.949626][ T9457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.957727][ T9457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.963600][ T9457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.966387][ T9457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.975548][ T9457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.997225][ T9457] hsr_slave_0: entered promiscuous mode [ 149.999393][ T9457] hsr_slave_1: entered promiscuous mode [ 150.001416][ T9457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.003608][ T9457] Cannot create hsr debugfs directory [ 150.478246][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.889'. [ 150.736247][ T9518] x_tables: duplicate underflow at hook 3 [ 150.851760][ T66] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.911181][ T66] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.963395][ T66] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.010361][ T66] bridge_slave_1: left allmulticast mode [ 151.012541][ T66] bridge_slave_1: left promiscuous mode [ 151.014747][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.018379][ T66] bridge_slave_0: left allmulticast mode [ 151.020253][ T66] bridge_slave_0: left promiscuous mode [ 151.021904][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.085356][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.088705][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.091974][ T66] bond0 (unregistering): Released all slaves [ 151.216726][ T9527] syzkaller0: entered promiscuous mode [ 151.218373][ T9527] syzkaller0: entered allmulticast mode [ 151.344113][ T66] hsr_slave_0: left promiscuous mode [ 151.346645][ T66] hsr_slave_1: left promiscuous mode [ 151.348690][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.351534][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.353867][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.356408][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.359974][ T66] veth1_macvtap: left promiscuous mode [ 151.361600][ T66] veth0_macvtap: left promiscuous mode [ 151.363306][ T66] veth1_vlan: left promiscuous mode [ 151.364973][ T66] veth0_vlan: left promiscuous mode [ 151.423864][ T66] team0 (unregistering): Port device team_slave_1 removed [ 151.431886][ T66] team0 (unregistering): Port device team_slave_0 removed [ 151.682985][ T9572] FAULT_INJECTION: forcing a failure. [ 151.682985][ T9572] name failslab, interval 1, probability 0, space 0, times 0 [ 151.686617][ T9572] CPU: 2 UID: 0 PID: 9572 Comm: syz.1.898 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 151.689669][ T9572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.692820][ T9572] Call Trace: [ 151.693790][ T9572] [ 151.694662][ T9572] dump_stack_lvl+0x16c/0x1f0 [ 151.696023][ T9572] should_fail_ex+0x497/0x5b0 [ 151.697392][ T9572] ? fs_reclaim_acquire+0xae/0x150 [ 151.698875][ T9572] should_failslab+0xc2/0x120 [ 151.700239][ T9572] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 151.701880][ T9572] ? shmem_alloc_inode+0x25/0x50 [ 151.703329][ T9572] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 151.704897][ T9572] shmem_alloc_inode+0x25/0x50 [ 151.706307][ T9572] alloc_inode+0x5d/0x230 [ 151.707562][ T9572] new_inode+0x22/0x210 [ 151.708786][ T9572] shmem_get_inode+0x194/0xf00 [ 151.710180][ T9572] ? __vm_enough_memory+0x184/0x3f0 [ 151.711685][ T9572] __shmem_file_setup+0x16f/0x300 [ 151.713139][ T9572] newseg+0x3b3/0xe60 [ 151.714295][ T9572] ? __pfx_newseg+0x10/0x10 [ 151.715605][ T9572] ipcget+0xe5/0xd80 [ 151.716746][ T9572] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.718480][ T9572] ? __pfx_ipcget+0x10/0x10 [ 151.719803][ T9572] __ia32_sys_shmget+0x13f/0x1b0 [ 151.721230][ T9572] ? __pfx___ia32_sys_shmget+0x10/0x10 [ 151.722808][ T9572] ? rcu_is_watching+0x12/0xc0 [ 151.724188][ T9572] ? trace_irq_enable.constprop.0+0xea/0x140 [ 151.725889][ T9572] __do_fast_syscall_32+0x73/0x120 [ 151.727365][ T9572] do_fast_syscall_32+0x32/0x80 [ 151.728747][ T9572] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.730548][ T9572] RIP: 0023:0xf7fe8579 [ 151.731723][ T9572] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 151.737239][ T9572] RSP: 002b:00000000f50f455c EFLAGS: 00000296 ORIG_RAX: 000000000000018b [ 151.739227][ T5951] Bluetooth: hci3: command tx timeout [ 151.739626][ T9572] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002000 [ 151.739638][ T9572] RDX: 0000000000000000 RSI: 00000000205f0000 RDI: 0000000000000000 [ 151.739644][ T9572] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.739650][ T9572] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 151.739656][ T9572] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.752373][ T9572] [ 151.868595][ T9457] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 151.871841][ T9457] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 151.874942][ T9457] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 151.877812][ T9457] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 151.898993][ T9457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.904541][ T9457] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.910159][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.912688][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.916804][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.918874][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.974124][ T9457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.985469][ T9457] veth0_vlan: entered promiscuous mode [ 151.989061][ T9457] veth1_vlan: entered promiscuous mode [ 151.997453][ T9457] veth0_macvtap: entered promiscuous mode [ 152.000277][ T9457] veth1_macvtap: entered promiscuous mode [ 152.005390][ T9457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.008504][ T9457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.011934][ T9457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.014892][ T9457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.017661][ T9457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.020684][ T9457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.023469][ T9457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.026433][ T9457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.029664][ T9457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.033297][ T9457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.036241][ T9457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.039010][ T9457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.042280][ T9457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.045001][ T9457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.047944][ T9457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.050815][ T9457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.053751][ T9457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.056938][ T9457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.060340][ T9457] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.062837][ T9457] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.065293][ T9457] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.067768][ T9457] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.082427][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.084710][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.090433][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.093420][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.179765][ T8990] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 152.347559][ T8990] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.350912][ T8990] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 152.353708][ T8990] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 152.356409][ T8990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.359488][ T8990] usb 5-1: config 0 descriptor?? [ 152.362072][ T8990] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 152.363962][ T8990] dvb-usb: bulk message failed: -22 (3/0) [ 152.366274][ T8990] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 152.368943][ T8990] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 152.371242][ T8990] usb 5-1: media controller created [ 152.373046][ T8990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.376444][ T8990] dvb-usb: bulk message failed: -22 (6/0) [ 152.378125][ T8990] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 152.381107][ T8990] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input17 [ 152.384748][ T8990] dvb-usb: schedule remote query interval to 150 msecs. [ 152.387010][ T8990] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 152.549199][ T8990] dvb-usb: bulk message failed: -22 (1/0) [ 152.550917][ T8990] dvb-usb: error while querying for an remote control event. [ 152.659219][ T5660] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 152.709178][ T8990] dvb-usb: bulk message failed: -22 (1/0) [ 152.710886][ T8990] dvb-usb: error while querying for an remote control event. [ 152.750991][ T9592] dvb-usb: bulk message failed: -22 (2/0) [ 152.829189][ T5660] usb 6-1: Using ep0 maxpacket: 8 [ 152.840252][ T5660] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 152.842696][ T5660] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.845456][ T5660] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 152.848073][ T5660] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.850898][ T5660] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.854478][ T5660] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 152.857107][ T5660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.869229][ T8990] dvb-usb: bulk message failed: -22 (1/0) [ 152.871024][ T8990] dvb-usb: error while querying for an remote control event. [ 153.029179][ T8990] dvb-usb: bulk message failed: -22 (1/0) [ 153.030871][ T8990] dvb-usb: error while querying for an remote control event. [ 153.071083][ T5660] usb 6-1: usb_control_msg returned -32 [ 153.072842][ T5660] usbtmc 6-1:16.0: can't read capabilities [ 153.189210][ T8990] dvb-usb: bulk message failed: -22 (1/0) [ 153.190918][ T8990] dvb-usb: error while querying for an remote control event. [ 153.334270][ T9603] netlink: 'syz.2.908': attribute type 1 has an invalid length. [ 153.349629][ T8990] dvb-usb: bulk message failed: -22 (1/0) [ 153.351306][ T8990] dvb-usb: error while querying for an remote control event. [ 153.426282][ T30] usb 6-1: USB disconnect, device number 15 [ 153.437861][ T9606] overlayfs: missing 'lowerdir' [ 153.509685][ T8990] dvb-usb: bulk message failed: -22 (1/0) [ 153.511532][ T8990] dvb-usb: error while querying for an remote control event. [ 153.669217][ T8990] dvb-usb: bulk message failed: -22 (1/0) [ 153.670980][ T8990] dvb-usb: error while querying for an remote control event. [ 153.829230][ T8990] dvb-usb: bulk message failed: -22 (1/0) [ 153.831523][ T8990] dvb-usb: error while querying for an remote control event. [ 153.989198][ T8990] dvb-usb: bulk message failed: -22 (1/0) [ 153.991030][ T8990] dvb-usb: error while querying for an remote control event. [ 154.159485][ T8990] dvb-usb: bulk message failed: -22 (1/0) [ 154.161160][ T8990] dvb-usb: error while querying for an remote control event. [ 154.198020][ T9621] __nla_validate_parse: 3 callbacks suppressed [ 154.198032][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'. [ 154.319174][ T8990] dvb-usb: bulk message failed: -22 (1/0) [ 154.320870][ T8990] dvb-usb: error while querying for an remote control event. [ 154.479203][ T8990] dvb-usb: bulk message failed: -22 (1/0) [ 154.481508][ T8990] dvb-usb: error while querying for an remote control event. [ 154.515093][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.649235][ T8990] dvb-usb: bulk message failed: -22 (1/0) [ 154.650930][ T8990] dvb-usb: error while querying for an remote control event. [ 154.809165][ T8990] dvb-usb: bulk message failed: -22 (1/0) [ 154.810887][ T8990] dvb-usb: error while querying for an remote control event. [ 154.926360][ T30] usb 5-1: USB disconnect, device number 7 [ 154.941526][ T30] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 155.308356][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'. [ 155.330333][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.332453][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.334541][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.337066][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.341235][ T5957] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.344213][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.412026][ T9660] chnl_net:caif_netlink_parms(): no params data found [ 155.480832][ T9660] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.482955][ T9660] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.485007][ T9660] bridge_slave_0: entered allmulticast mode [ 155.490025][ T9660] bridge_slave_0: entered promiscuous mode [ 155.497862][ T9660] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.500083][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.502163][ T9660] bridge_slave_1: entered allmulticast mode [ 155.504156][ T9660] bridge_slave_1: entered promiscuous mode [ 155.521260][ T9660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.524717][ T9660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.548207][ T9660] team0: Port device team_slave_0 added [ 155.551103][ T9660] team0: Port device team_slave_1 added [ 155.564146][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.566180][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.574910][ T9660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.578453][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.580656][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.587968][ T9660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.604893][ T9660] hsr_slave_0: entered promiscuous mode [ 155.606841][ T9660] hsr_slave_1: entered promiscuous mode [ 155.608691][ T9660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.611682][ T9660] Cannot create hsr debugfs directory [ 155.819784][ T57] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 155.969171][ T57] usb 5-1: Using ep0 maxpacket: 16 [ 155.972736][ T57] usb 5-1: config 13 has an invalid interface number: 127 but max is 0 [ 155.975149][ T57] usb 5-1: config 13 contains an unexpected descriptor of type 0x2, skipping [ 155.977641][ T57] usb 5-1: config 13 has an invalid descriptor of length 175, skipping remainder of the config [ 155.980649][ T57] usb 5-1: config 13 has no interface number 0 [ 155.982450][ T57] usb 5-1: config 13 interface 127 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 155.985593][ T57] usb 5-1: config 13 interface 127 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 155.988728][ T57] usb 5-1: config 13 interface 127 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 155.991886][ T57] usb 5-1: config 13 interface 127 altsetting 2 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 155.994982][ T57] usb 5-1: config 13 interface 127 altsetting 2 endpoint 0x8 has invalid maxpacket 1927, setting to 64 [ 155.998161][ T57] usb 5-1: config 13 interface 127 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 156.001323][ T57] usb 5-1: config 13 interface 127 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 156.004387][ T57] usb 5-1: config 13 interface 127 altsetting 2 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 156.007498][ T57] usb 5-1: config 13 interface 127 altsetting 2 has 10 endpoint descriptors, different from the interface descriptor's value: 11 [ 156.011338][ T57] usb 5-1: config 13 interface 127 has no altsetting 0 [ 156.014761][ T57] usb 5-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=fa.f6 [ 156.017314][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.019680][ T57] usb 5-1: Product: С [ 156.020852][ T57] usb 5-1: Manufacturer: à Œ [ 156.022238][ T57] usb 5-1: SerialNumber: 슭葒〈锯㋧㼆ག僩鈛翑á¤åŠ•æ…±ç¡·êœ€ãº¹åŸ§ç˜£æŽèµŒæªˆç‡è€£æ´„歖䷕㜓쒊凼è–Ⴆ羰댮áºé‡ä²®ìž•ã¾ºè¢·ä¡à©œã±±î¯­è½ƒä«¢í–ºó¶«­ã‡‡éªžì§£é˜±å’–䠷无榆⨸鋂çšáž¹é“ߓ쑺劜᫕푖罘혡۶ﮮ勑跙蹽ê›å¯¯é¨ç¼™ì˜¼îš¦ç¢é‹ä»¨á®‡éƒ·æžç©«íž³â‘š [ 156.310135][ T57] rtl8150 5-1:13.127: couldn't reset the device [ 156.312050][ T57] rtl8150 5-1:13.127: probe with driver rtl8150 failed with error -5 [ 156.315692][ T57] usb 5-1: USB disconnect, device number 8 [ 156.424148][ T9694] siw: device registration error -23 [ 156.531199][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.611351][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.651469][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.654436][ T9696] netlink: 56 bytes leftover after parsing attributes in process `syz.0.931'. [ 156.658385][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.931'. [ 156.736005][ T12] bridge_slave_1: left allmulticast mode [ 156.737646][ T12] bridge_slave_1: left promiscuous mode [ 156.739399][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.742026][ T12] bridge_slave_0: left allmulticast mode [ 156.743677][ T12] bridge_slave_0: left promiscuous mode [ 156.745290][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.832944][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.836761][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.840058][ T12] bond0 (unregistering): Released all slaves [ 157.073271][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'. [ 157.135988][ T9735] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 157.137952][ T9735] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 157.140323][ T9735] vhci_hcd vhci_hcd.0: Device attached [ 157.155389][ T9735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.934'. [ 157.174775][ T12] hsr_slave_0: left promiscuous mode [ 157.176722][ T12] hsr_slave_1: left promiscuous mode [ 157.178658][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.182656][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.185031][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.187163][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.192046][ T12] veth1_macvtap: left promiscuous mode [ 157.193698][ T12] veth0_macvtap: left promiscuous mode [ 157.195307][ T12] veth1_vlan: left promiscuous mode [ 157.196751][ T12] veth0_vlan: left promiscuous mode [ 157.284644][ T12] team0 (unregistering): Port device team_slave_1 removed [ 157.290220][ T12] team0 (unregistering): Port device team_slave_0 removed [ 157.349478][ T5992] vhci_hcd: vhci_device speed not set [ 157.419337][ T5992] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 157.419343][ T5951] Bluetooth: hci3: command tx timeout [ 157.548121][ T9660] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 157.551290][ T9660] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 157.554139][ T9660] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 157.556870][ T9660] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 157.577289][ T9660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.584836][ T9660] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.588142][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.590364][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.595576][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.597779][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.615584][ T9660] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 157.618566][ T9660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.666442][ T9660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.678326][ T9660] veth0_vlan: entered promiscuous mode [ 157.682022][ T9660] veth1_vlan: entered promiscuous mode [ 157.690721][ T9660] veth0_macvtap: entered promiscuous mode [ 157.693367][ T9660] veth1_macvtap: entered promiscuous mode [ 157.697987][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.701065][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.703815][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.706735][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.709674][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.712614][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.715328][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.718246][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.721431][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.725400][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.728362][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.731664][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.734662][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.737392][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.740549][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.743319][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.746388][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.749622][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.754572][ T9660] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.757086][ T9660] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.759646][ T9660] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.762245][ T9660] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.777422][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.780433][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.787362][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.789889][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.984877][ T9759] netlink: zone id is out of range [ 157.986476][ T9759] netlink: zone id is out of range [ 157.988645][ T9759] netlink: zone id is out of range [ 158.360041][ T9737] vhci_hcd: connection reset by peer [ 158.362341][ T1175] vhci_hcd: stop threads [ 158.363668][ T1175] vhci_hcd: release socket [ 158.365010][ T1175] vhci_hcd: disconnect device [ 158.464749][ T9763] veth0_to_bridge: entered promiscuous mode [ 158.467609][ T9762] veth0_to_bridge: left promiscuous mode [ 158.482191][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.940'. [ 158.834557][ T9774] siw: device registration error -23 [ 159.007867][ T9778] netlink: 830 bytes leftover after parsing attributes in process `syz.2.944'. [ 159.010609][ T9778] bond_slave_0: entered promiscuous mode [ 159.012237][ T9778] bond_slave_1: entered promiscuous mode [ 159.079040][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.943'. [ 159.757280][ T9791] process 'syz.1.947' launched '/dev/fd/11' with NULL argv: empty string added [ 160.022519][ T75] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.847023][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 160.850716][ T9806] bridge0: port 3(team0) entered disabled state [ 160.857490][ T9806] bridge_slave_1: left allmulticast mode [ 160.859568][ T9806] bridge_slave_1: left promiscuous mode [ 160.861251][ T9806] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.865244][ T9806] bridge_slave_0: left allmulticast mode [ 160.867275][ T9806] bridge_slave_0: left promiscuous mode [ 160.869365][ T9806] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.886962][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.889320][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.891545][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.898234][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.900875][ T5957] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 160.903655][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.128459][ T39] kauditd_printk_skb: 1040 callbacks suppressed [ 161.128471][ T39] audit: type=1326 audit(1736674043.328:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.2.955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 161.136404][ T39] audit: type=1326 audit(1736674043.328:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.2.955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 161.142766][ T39] audit: type=1326 audit(1736674043.328:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.2.955" exe="/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 161.148550][ T9809] chnl_net:caif_netlink_parms(): no params data found [ 161.148736][ T39] audit: type=1326 audit(1736674043.328:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.2.955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 161.157031][ T39] audit: type=1326 audit(1736674043.328:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.2.955" exe="/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 161.163325][ T39] audit: type=1326 audit(1736674043.328:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.2.955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 161.169531][ T39] audit: type=1326 audit(1736674043.328:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.2.955" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 161.175795][ T39] audit: type=1326 audit(1736674043.328:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.2.955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 161.182080][ T39] audit: type=1326 audit(1736674043.328:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.2.955" exe="/syz-executor" sig=0 arch=40000003 syscall=438 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 161.188240][ T39] audit: type=1326 audit(1736674043.328:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.2.955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 161.202264][ T9809] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.204410][ T9809] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.206592][ T9809] bridge_slave_0: entered allmulticast mode [ 161.208682][ T9809] bridge_slave_0: entered promiscuous mode [ 161.211411][ T9809] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.213558][ T9809] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.215830][ T9809] bridge_slave_1: entered allmulticast mode [ 161.217935][ T9809] bridge_slave_1: entered promiscuous mode [ 161.232396][ T9809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.235924][ T9809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.250704][ T9809] team0: Port device team_slave_0 added [ 161.253184][ T9809] team0: Port device team_slave_1 added [ 161.266400][ T9809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.268500][ T9809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.276372][ T9809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.280073][ T9809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.282135][ T9809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.289700][ T9809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.309979][ T9809] hsr_slave_0: entered promiscuous mode [ 161.312054][ T9809] hsr_slave_1: entered promiscuous mode [ 161.314064][ T9809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.316256][ T9809] Cannot create hsr debugfs directory [ 161.437294][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'. [ 161.790673][ T9842] usb 2-1: USB disconnect, device number 2 [ 161.808214][ T9842] hub 2-0:1.0: USB hub found [ 161.810273][ T9842] hub 2-0:1.0: 6 ports detected [ 161.818701][ T9842] af_packet: tpacket_rcv: packet too big, clamped from 100 to 4294967272. macoff=96 [ 161.822302][ T9842] netlink: 88 bytes leftover after parsing attributes in process `syz.1.958'. [ 161.824833][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'. [ 161.923891][ T75] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.979251][ T5660] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 161.983267][ T75] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.042212][ T75] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.104506][ T75] bridge_slave_1: left allmulticast mode [ 162.106312][ T75] bridge_slave_1: left promiscuous mode [ 162.108016][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.111364][ T75] bridge_slave_0: left allmulticast mode [ 162.113021][ T75] bridge_slave_0: left promiscuous mode [ 162.114691][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.175236][ T5660] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 162.177953][ T5660] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 162.180470][ T5660] usb 2-1: Product: QEMU USB Tablet [ 162.182346][ T5660] usb 2-1: Manufacturer: QEMU [ 162.184651][ T5660] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 162.202887][ T5660] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0004/input/input18 [ 162.216923][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.221018][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.225026][ T75] bond0 (unregistering): Released all slaves [ 162.270905][ T5660] hid-generic 0003:0627:0001.0004: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 162.416756][ T9882] FAULT_INJECTION: forcing a failure. [ 162.416756][ T9882] name failslab, interval 1, probability 0, space 0, times 0 [ 162.421334][ T9882] CPU: 0 UID: 0 PID: 9882 Comm: syz.0.965 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 162.424394][ T9882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.427465][ T9882] Call Trace: [ 162.428442][ T9882] [ 162.429309][ T9882] dump_stack_lvl+0x16c/0x1f0 [ 162.430678][ T9882] should_fail_ex+0x497/0x5b0 [ 162.432057][ T9882] ? fs_reclaim_acquire+0xae/0x150 [ 162.433531][ T9882] should_failslab+0xc2/0x120 [ 162.434900][ T9882] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 162.436456][ T9882] ? security_file_alloc+0x34/0x2b0 [ 162.437966][ T9882] security_file_alloc+0x34/0x2b0 [ 162.439441][ T9882] init_file+0x93/0x480 [ 162.440652][ T9882] alloc_empty_file+0x91/0x1e0 [ 162.442225][ T9882] alloc_file_pseudo+0x13d/0x200 [ 162.443659][ T9882] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 162.445231][ T9882] ? shmem_get_inode+0x737/0xf00 [ 162.446692][ T9882] __shmem_file_setup+0x210/0x300 [ 162.448145][ T9882] newseg+0x3b3/0xe60 [ 162.449314][ T9882] ? __pfx_newseg+0x10/0x10 [ 162.450644][ T9882] ipcget+0xe5/0xd80 [ 162.451805][ T9882] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 162.453532][ T9882] ? __pfx_ipcget+0x10/0x10 [ 162.454861][ T9882] __ia32_sys_shmget+0x13f/0x1b0 [ 162.456298][ T9882] ? __pfx___ia32_sys_shmget+0x10/0x10 [ 162.457873][ T9882] ? rcu_is_watching+0x12/0xc0 [ 162.459258][ T9882] ? trace_irq_enable.constprop.0+0xea/0x140 [ 162.460981][ T9882] __do_fast_syscall_32+0x73/0x120 [ 162.462632][ T9882] do_fast_syscall_32+0x32/0x80 [ 162.464035][ T9882] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.465874][ T9882] RIP: 0023:0xf7f74579 [ 162.467051][ T9882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 162.472558][ T9882] RSP: 002b:00000000f508455c EFLAGS: 00000296 ORIG_RAX: 000000000000018b [ 162.474966][ T9882] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002000 [ 162.477238][ T9882] RDX: 0000000000000000 RSI: 00000000205f0000 RDI: 0000000000000000 [ 162.479440][ T9882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.481702][ T9882] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 162.483954][ T9882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.486477][ T9882] [ 162.537306][ T9892] sctp: [Deprecated]: syz.2.967 (pid 9892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.537306][ T9892] Use struct sctp_sack_info instead [ 162.549178][ T5992] vhci_hcd: vhci_device speed not set [ 162.561423][ T9899] netlink: 88 bytes leftover after parsing attributes in process `syz.2.968'. [ 162.564269][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'. [ 162.583579][ T75] hsr_slave_0: left promiscuous mode [ 162.586570][ T75] hsr_slave_1: left promiscuous mode [ 162.588830][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.592942][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.596543][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.598805][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.602342][ T75] veth1_macvtap: left promiscuous mode [ 162.604066][ T75] veth0_macvtap: left promiscuous mode [ 162.605767][ T75] veth1_vlan: left promiscuous mode [ 162.607415][ T75] veth0_vlan: left promiscuous mode [ 162.655956][ T75] team0 (unregistering): Port device team_slave_1 removed [ 162.660708][ T75] team0 (unregistering): Port device team_slave_0 removed [ 162.674704][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 162.850756][ T9809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.853761][ T9809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 162.857918][ T9809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 162.861221][ T9809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 162.882589][ T9809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.888833][ T9809] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.893141][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.895193][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.899753][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.901906][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.916592][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'. [ 162.940393][ T5951] Bluetooth: hci3: command tx timeout [ 162.960875][ T9809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.973816][ T9809] veth0_vlan: entered promiscuous mode [ 162.977619][ T9809] veth1_vlan: entered promiscuous mode [ 162.987748][ T9809] veth0_macvtap: entered promiscuous mode [ 162.991123][ T9809] veth1_macvtap: entered promiscuous mode [ 162.996114][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.000962][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.004588][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.008542][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.012343][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.016199][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.020003][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.023904][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.028036][ T9809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.032847][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.036745][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.040426][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.043739][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.047329][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.051310][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.054907][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.058743][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.063632][ T9809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.070744][ T9809] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.074217][ T9809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.077612][ T9809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.081436][ T9809] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.101156][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.103442][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.110680][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.113299][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.179395][ T9939] siw: device registration error -23 [ 163.649830][ T9944] netlink: 'syz.2.979': attribute type 1 has an invalid length. [ 163.652109][ T9944] netlink: 'syz.2.979': attribute type 4 has an invalid length. [ 163.654285][ T9944] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.979'. [ 164.339270][ T5660] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 164.490251][ T5660] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.493305][ T5660] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.496024][ T5660] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.499926][ T5660] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.502503][ T5660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.505225][ T5660] usb 6-1: config 0 descriptor?? [ 164.925511][ T5660] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 164.930112][ T5660] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 164.941275][ T5660] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 164.975736][ T9970] syz.1.983 (9970) used greatest stack depth: 18656 bytes left [ 165.174294][ T9975] netlink: 'syz.2.988': attribute type 1 has an invalid length. [ 165.179813][ T9975] bond1: entered promiscuous mode [ 165.181291][ T9975] bond1: entered allmulticast mode [ 165.187717][ T9975] netlink: 'syz.2.988': attribute type 3 has an invalid length. [ 165.190822][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 165.329553][ T9954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.333445][ T9954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.432447][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.478859][ T9989] siw: device registration error -23 [ 166.435793][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.440677][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.443938][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.446493][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.450080][ T5957] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 166.453326][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.541037][T10001] chnl_net:caif_netlink_parms(): no params data found [ 166.591718][T10001] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.593708][T10001] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.595715][T10001] bridge_slave_0: entered allmulticast mode [ 166.597649][T10001] bridge_slave_0: entered promiscuous mode [ 166.600373][T10001] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.602506][T10001] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.604636][T10001] bridge_slave_1: entered allmulticast mode [ 166.606663][T10001] bridge_slave_1: entered promiscuous mode [ 166.630155][T10001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.633874][T10001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.657462][T10001] team0: Port device team_slave_0 added [ 166.660150][T10001] team0: Port device team_slave_1 added [ 166.676743][T10001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.678899][T10001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.686982][T10001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.690476][T10001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.692465][T10001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.699212][ T35] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 166.700435][T10001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.718044][T10001] hsr_slave_0: entered promiscuous mode [ 166.720526][T10001] hsr_slave_1: entered promiscuous mode [ 166.722366][T10001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.724473][T10001] Cannot create hsr debugfs directory [ 166.859292][ T35] usb 5-1: Using ep0 maxpacket: 16 [ 166.861966][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 166.865110][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34304, setting to 1024 [ 166.868194][ T35] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 166.870784][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.873625][ T35] usb 5-1: config 0 descriptor?? [ 166.875683][T10008] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 166.915835][T10016] overlay: Unknown parameter 'smackfsroot' [ 167.088751][ T5990] usb 6-1: USB disconnect, device number 16 [ 167.299588][ T35] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:05AC:8241.0006/input/input19 [ 167.363045][ T35] appleir 0003:05AC:8241.0006: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 167.371681][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.421907][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.483057][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.502753][ T5992] usb 5-1: USB disconnect, device number 9 [ 167.533603][ T12] bridge_slave_1: left allmulticast mode [ 167.535451][ T12] bridge_slave_1: left promiscuous mode [ 167.537456][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.541277][ T12] bridge_slave_0: left allmulticast mode [ 167.543540][ T12] bridge_slave_0: left promiscuous mode [ 167.545820][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.624013][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.628344][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.631488][ T12] bond0 (unregistering): Released all slaves [ 167.923010][ T12] hsr_slave_0: left promiscuous mode [ 167.924853][ T12] hsr_slave_1: left promiscuous mode [ 167.926625][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.928752][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.931162][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.933324][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.936556][ T12] veth1_macvtap: left promiscuous mode [ 167.938168][ T12] veth0_macvtap: left promiscuous mode [ 167.940110][ T12] veth1_vlan: left promiscuous mode [ 167.941683][ T12] veth0_vlan: left promiscuous mode [ 167.985445][ T12] team0 (unregistering): Port device team_slave_1 removed [ 167.990712][ T12] team0 (unregistering): Port device team_slave_0 removed [ 168.271697][T10084] siw: device registration error -23 [ 168.293418][T10001] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 168.309507][T10001] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 168.312488][T10001] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 168.321609][T10001] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 168.341616][T10100] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 168.344251][T10100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 168.358644][T10001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.370671][T10001] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.374104][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.376192][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.380587][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.382689][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.422062][T10102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1007'. [ 168.465159][T10001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.478210][T10001] veth0_vlan: entered promiscuous mode [ 168.483120][T10001] veth1_vlan: entered promiscuous mode [ 168.491601][T10001] veth0_macvtap: entered promiscuous mode [ 168.494344][T10001] veth1_macvtap: entered promiscuous mode [ 168.498962][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.503135][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.505966][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.508986][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.512313][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.515338][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.518111][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.522383][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.525638][T10001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.530555][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.533624][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.536451][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.540254][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.543890][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.547706][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.549284][ T5957] Bluetooth: hci3: command tx timeout [ 168.551663][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.556898][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.560171][T10001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.563656][T10001] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.566185][T10001] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.568670][T10001] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.571913][T10001] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.596281][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.598629][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.610254][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.612885][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.924773][T10137] netlink: 'syz.0.1018': attribute type 10 has an invalid length. [ 168.929657][T10137] geneve1: entered promiscuous mode [ 168.931245][T10137] geneve1: entered allmulticast mode [ 168.933027][T10137] team0: Port device geneve1 added [ 168.933074][T10141] x_tables: duplicate underflow at hook 1 [ 168.970522][T10156] FAULT_INJECTION: forcing a failure. [ 168.970522][T10156] name failslab, interval 1, probability 0, space 0, times 0 [ 168.974191][T10156] CPU: 0 UID: 0 PID: 10156 Comm: syz.1.1024 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 168.977314][T10156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 168.980442][T10156] Call Trace: [ 168.981384][T10156] [ 168.982220][T10156] dump_stack_lvl+0x16c/0x1f0 [ 168.983599][T10156] should_fail_ex+0x497/0x5b0 [ 168.985060][T10156] ? fs_reclaim_acquire+0xae/0x150 [ 168.986603][T10156] should_failslab+0xc2/0x120 [ 168.987991][T10156] __kmalloc_node_noprof+0xd1/0x520 [ 168.989555][T10156] ? __pfx_lock_release+0x10/0x10 [ 168.991020][T10156] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 168.992597][T10156] __kvmalloc_node_noprof+0xad/0x1a0 [ 168.994143][T10156] seq_read_iter+0x82a/0x12b0 [ 168.995517][T10156] ? __mutex_trylock_common+0xea/0x250 [ 168.997091][T10156] ? apparmor_file_permission+0x251/0x400 [ 168.998743][T10156] proc_reg_read_iter+0x21d/0x310 [ 169.000185][T10156] vfs_read+0x87f/0xbe0 [ 169.001347][T10156] ? __pfx_vfs_read+0x10/0x10 [ 169.002657][T10156] ksys_read+0x12b/0x250 [ 169.003822][T10156] ? __pfx_ksys_read+0x10/0x10 [ 169.005165][T10156] ? rcu_is_watching+0x12/0xc0 [ 169.006577][T10156] __do_fast_syscall_32+0x73/0x120 [ 169.008095][T10156] do_fast_syscall_32+0x32/0x80 [ 169.009543][T10156] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.011391][T10156] RIP: 0023:0xf7fe8579 [ 169.012591][T10156] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 169.018158][T10156] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 169.020548][T10156] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000940 [ 169.022822][T10156] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.025087][T10156] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.027381][T10156] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 169.029858][T10156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.032241][T10156] [ 169.067380][T10176] 9pnet_fd: Insufficient options for proto=fd [ 169.134286][T10190] netlink: 'syz.0.1035': attribute type 41 has an invalid length. [ 169.174709][T10199] netlink: 'syz.2.1034': attribute type 1 has an invalid length. [ 169.247733][T10212] netlink: 'syz.0.1037': attribute type 10 has an invalid length. [ 169.251617][T10212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.253919][T10212] bond0: entered promiscuous mode [ 169.255491][T10212] bond_slave_0: entered promiscuous mode [ 169.257151][T10212] bond_slave_1: entered promiscuous mode [ 169.258902][T10212] bond0: entered allmulticast mode [ 169.260933][T10212] bond_slave_0: entered allmulticast mode [ 169.262751][T10212] bond_slave_1: entered allmulticast mode [ 169.264667][T10212] team0: Port device bond0 added [ 170.032408][T10218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.034894][T10218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.040426][T10218] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1043'. [ 170.161995][T10235] binder: 10230:10235 ioctl 4018620d 0 returned -22 [ 170.162021][T10238] binder: 10230:10238 ioctl 4018620d 0 returned -22 [ 170.299227][ T73] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 170.429176][ T73] usb 6-1: device descriptor read/64, error -71 [ 170.629185][ T5957] Bluetooth: hci3: command 0x041b tx timeout [ 170.669185][ T73] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 170.799147][ T73] usb 6-1: device descriptor read/64, error -71 [ 170.909201][ T73] usb usb6-port1: attempt power cycle [ 171.249152][ T73] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 171.269510][ T73] usb 6-1: device descriptor read/8, error -71 [ 171.509150][ T73] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 171.529508][ T73] usb 6-1: device descriptor read/8, error -71 [ 171.639257][ T73] usb usb6-port1: unable to enumerate USB device [ 171.834953][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1052'. [ 172.456110][T10261] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 173.010139][T10271] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1062'. [ 173.083302][ T1175] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.131200][ T1175] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.171434][ T1175] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.211338][ T1175] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.314671][ T1175] bridge_slave_1: left allmulticast mode [ 173.316623][ T1175] bridge_slave_1: left promiscuous mode [ 173.318564][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.321639][ T1175] bridge_slave_0: left allmulticast mode [ 173.323283][ T1175] bridge_slave_0: left promiscuous mode [ 173.324944][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.432263][ T1175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.435836][ T1175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.439604][ T1175] bond0 (unregistering): Released all slaves [ 173.662871][ T1175] hsr_slave_0: left promiscuous mode [ 173.664691][ T1175] hsr_slave_1: left promiscuous mode [ 173.666493][ T1175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.668620][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.671095][ T1175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.673214][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.676846][ T1175] veth1_macvtap: left promiscuous mode [ 173.678517][ T1175] veth0_macvtap: left promiscuous mode [ 173.680668][ T1175] veth1_vlan: left promiscuous mode [ 173.682249][ T1175] veth0_vlan: left promiscuous mode [ 173.728801][ T1175] team0 (unregistering): Port device team_slave_1 removed [ 173.733521][ T1175] team0 (unregistering): Port device team_slave_0 removed [ 174.127900][T10330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1063'. [ 174.177715][ T5951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.179987][ T5951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.182213][ T5951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.184541][ T5951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.186689][ T5951] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 174.188741][ T5951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.228771][T10332] chnl_net:caif_netlink_parms(): no params data found [ 174.263301][T10332] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.265375][T10332] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.267391][T10332] bridge_slave_0: entered allmulticast mode [ 174.269422][T10332] bridge_slave_0: entered promiscuous mode [ 174.271758][T10332] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.273811][T10332] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.275790][T10332] bridge_slave_1: entered allmulticast mode [ 174.277769][T10332] bridge_slave_1: entered promiscuous mode [ 174.290243][T10332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.293603][T10332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.306333][T10332] team0: Port device team_slave_0 added [ 174.308614][T10332] team0: Port device team_slave_1 added [ 174.322246][T10332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.324335][T10332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.332125][T10332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.336225][T10332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.338177][T10332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.345525][T10332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.361655][T10332] hsr_slave_0: entered promiscuous mode [ 174.363555][T10332] hsr_slave_1: entered promiscuous mode [ 174.365434][T10332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.367569][T10332] Cannot create hsr debugfs directory [ 174.629639][T10332] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.633972][T10332] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.640427][T10332] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.646586][T10332] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.653517][T10332] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.655843][T10332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.656510][T10369] netlink: 'syz.2.1064': attribute type 1 has an invalid length. [ 174.657911][T10332] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.660858][T10369] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1064'. [ 174.662186][T10332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.687453][T10332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.694106][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.697189][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.705403][T10332] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.712213][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.714835][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.720431][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.723094][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.784442][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1066'. [ 174.788648][T10332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.810582][T10332] veth0_vlan: entered promiscuous mode [ 174.821861][T10332] veth1_vlan: entered promiscuous mode [ 174.822631][T10396] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 174.825767][T10396] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 174.827891][T10396] vhci_hcd vhci_hcd.0: Device attached [ 174.830344][T10332] veth0_macvtap: entered promiscuous mode [ 174.832221][T10398] vhci_hcd: connection closed [ 174.834008][T10332] veth1_macvtap: entered promiscuous mode [ 174.840058][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.840217][ T75] vhci_hcd: stop threads [ 174.842925][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.842933][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.842940][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.842944][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.842950][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.845895][ T75] vhci_hcd: release socket [ 174.846854][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.846862][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.847441][T10332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.850008][ T75] vhci_hcd: disconnect device [ 174.854303][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.872005][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.874673][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.877478][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.880326][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.883230][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.885874][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.888761][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.892210][T10332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.895691][T10332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.898103][T10332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.900554][T10332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.902979][T10332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.918579][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.921959][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.928219][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.930598][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.589168][ T30] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 175.739342][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 175.741976][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 175.745020][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34304, setting to 1024 [ 175.748057][ T30] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 175.750600][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.753237][ T30] usb 5-1: config 0 descriptor?? [ 175.755025][T10430] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.755607][T10442] sctp: failed to load transform for md5: -4 [ 175.989219][T10457] netlink: 'syz.2.1075': attribute type 10 has an invalid length. [ 175.994374][T10457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.997817][T10457] batadv0: entered promiscuous mode [ 176.001852][T10457] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 176.032627][T10458] netlink: 'syz.1.1076': attribute type 1 has an invalid length. [ 176.034915][T10458] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1076'. [ 176.161135][ T30] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:05AC:8241.0007/input/input20 [ 176.220137][ T30] appleir 0003:05AC:8241.0007: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 176.919603][T10474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1082'. [ 176.938703][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 177.420606][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.959509][ T8568] usb 5-1: USB disconnect, device number 10 [ 178.629354][ T5951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.633911][ T5951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.634402][T10488] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 178.635977][ T5951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.641563][ T5951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.649355][ T5951] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 178.651380][ T5951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.662508][T10485] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 178.665319][T10485] UDF-fs: Scanning with blocksize 2048 failed [ 178.668205][T10485] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 178.670370][T10485] UDF-fs: Scanning with blocksize 4096 failed [ 178.713662][T10486] chnl_net:caif_netlink_parms(): no params data found [ 178.767940][T10486] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.770690][T10486] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.773406][T10486] bridge_slave_0: entered allmulticast mode [ 178.776152][T10486] bridge_slave_0: entered promiscuous mode [ 178.779234][T10486] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.782253][T10486] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.784968][T10486] bridge_slave_1: entered allmulticast mode [ 178.788143][T10486] bridge_slave_1: entered promiscuous mode [ 178.805662][T10486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.809058][T10486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.823369][T10486] team0: Port device team_slave_0 added [ 178.825674][T10486] team0: Port device team_slave_1 added [ 178.839705][T10486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.841661][T10486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.848697][T10486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.852720][T10486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.854608][T10486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.861806][T10486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.867761][T10507] netlink: 'syz.0.1090': attribute type 10 has an invalid length. [ 178.874821][T10507] veth0_vlan: left promiscuous mode [ 178.876770][T10507] veth0_vlan: entered promiscuous mode [ 178.879338][T10507] team0: Device veth0_vlan failed to register rx_handler [ 178.894206][T10486] hsr_slave_0: entered promiscuous mode [ 178.896270][T10486] hsr_slave_1: entered promiscuous mode [ 178.898208][T10486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.900467][T10486] Cannot create hsr debugfs directory [ 179.111776][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.159355][ T35] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 179.163003][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.201751][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.276046][ T12] bridge_slave_1: left allmulticast mode [ 179.277802][ T12] bridge_slave_1: left promiscuous mode [ 179.279665][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.282363][ T12] bridge_slave_0: left allmulticast mode [ 179.283965][ T12] bridge_slave_0: left promiscuous mode [ 179.285601][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.322740][ T35] usb 5-1: Using ep0 maxpacket: 16 [ 179.325754][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 179.328957][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34304, setting to 1024 [ 179.332964][ T35] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 179.335950][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.338776][ T35] usb 5-1: config 0 descriptor?? [ 179.341066][T10509] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 179.371695][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.374914][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.377868][ T12] bond0 (unregistering): Released all slaves [ 179.451401][T10519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.520715][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 179.544556][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1095'. [ 179.664682][ T12] hsr_slave_0: left promiscuous mode [ 179.668573][ T12] hsr_slave_1: left promiscuous mode [ 179.673909][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.676849][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.680323][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.682579][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.686134][ T12] veth1_macvtap: left promiscuous mode [ 179.687766][ T12] veth0_macvtap: left promiscuous mode [ 179.689509][ T12] veth1_vlan: left promiscuous mode [ 179.691042][ T12] veth0_vlan: left promiscuous mode [ 179.741055][ T12] team0 (unregistering): Port device team_slave_1 removed [ 179.746870][ T12] team0 (unregistering): Port device team_slave_0 removed [ 179.752356][ T35] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:05AC:8241.0008/input/input21 [ 179.813032][ T35] appleir 0003:05AC:8241.0008: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 179.970494][T10486] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 179.973605][T10486] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 179.976661][T10486] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 179.979917][T10486] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 179.990830][T10568] netlink: 'syz.1.1100': attribute type 1 has an invalid length. [ 180.001782][T10486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.007336][T10486] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.010815][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.012845][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.021346][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.023380][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.071766][T10486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.084253][T10486] veth0_vlan: entered promiscuous mode [ 180.087673][T10486] veth1_vlan: entered promiscuous mode [ 180.095216][T10486] veth0_macvtap: entered promiscuous mode [ 180.097886][T10486] veth1_macvtap: entered promiscuous mode [ 180.102608][T10486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.105822][T10486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.108582][T10486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.111972][T10486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.114841][T10486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.117795][T10486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.120585][T10486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.123551][T10486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.126793][T10486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.131966][T10486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.135026][T10486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.137766][T10486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.141041][T10486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.143791][T10486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.146800][T10486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.149614][T10486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.152595][T10486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.155977][T10486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.159575][T10486] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.162109][T10486] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.164675][T10486] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.167208][T10486] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.183583][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.187637][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.193839][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.196119][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.203268][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1104'. [ 180.336437][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 181.039494][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'. [ 181.283387][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1112'. [ 181.290885][T10607] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 181.293718][T10607] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 181.302487][T10609] syz.2.1113[10609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.302529][T10609] syz.2.1113[10609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.306865][T10609] syz.2.1113[10609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.549552][ T57] usb 5-1: USB disconnect, device number 11 [ 181.655529][T10619] siw: device registration error -23 [ 181.966416][T10624] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 181.968598][T10624] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 181.971498][T10624] vhci_hcd vhci_hcd.0: Device attached [ 182.149311][ T35] vhci_hcd: vhci_device speed not set [ 182.209336][ T35] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 182.784935][ T1138] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.015745][T10635] ceph: No mds server is up or the cluster is laggy [ 183.111326][T10625] vhci_hcd: connection reset by peer [ 183.113277][ T1175] vhci_hcd: stop threads [ 183.114554][ T1175] vhci_hcd: release socket [ 183.115858][ T1175] vhci_hcd: disconnect device [ 184.144724][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.147110][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.149773][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.152749][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.155078][ T5957] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 184.157106][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.201180][T10654] chnl_net:caif_netlink_parms(): no params data found [ 184.203062][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1124'. [ 184.264063][T10654] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.266037][T10654] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.267977][T10654] bridge_slave_0: entered allmulticast mode [ 184.270170][T10654] bridge_slave_0: entered promiscuous mode [ 184.272922][T10654] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.274903][T10654] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.276842][T10654] bridge_slave_1: entered allmulticast mode [ 184.278778][T10654] bridge_slave_1: entered promiscuous mode [ 184.289175][ T57] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 184.309859][T10654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.318771][T10654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.346149][T10654] team0: Port device team_slave_0 added [ 184.349073][T10654] team0: Port device team_slave_1 added [ 184.373063][T10654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.374925][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.381876][T10654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.385392][T10654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.387343][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.395163][T10654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.423843][T10654] hsr_slave_0: entered promiscuous mode [ 184.425794][T10654] hsr_slave_1: entered promiscuous mode [ 184.427594][T10654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.429809][T10654] Cannot create hsr debugfs directory [ 184.791165][ T1138] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Connection to localhost closed by remote host. [ 184.860514][ T1138] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.961785][ T1138] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.148034][ T1138] bridge_slave_1: left allmulticast mode [ 185.149797][ T1138] bridge_slave_1: left promiscuous mode [ 185.151475][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.153994][ T1138] bridge_slave_0: left allmulticast mode [ 185.155563][ T1138] bridge_slave_0: left promiscuous mode [ 185.157245][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.220941][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.224207][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.227105][ T1138] bond0 (unregistering): Released all slaves [ 185.641964][ T1138] hsr_slave_0: left promiscuous mode [ 185.643649][ T1138] hsr_slave_1: left promiscuous mode [ 185.645293][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.647382][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.649769][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.651812][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.654961][ T1138] veth1_macvtap: left promiscuous mode [ 185.656524][ T1138] veth0_macvtap: left promiscuous mode [ 185.658075][ T1138] veth1_vlan: left promiscuous mode [ 185.659697][ T1138] veth0_vlan: left promiscuous mode [ 185.706080][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 185.710736][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 186.162697][ T1138] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.261063][ T1138] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.302843][ T1138] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.341172][ T1138] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.388616][ T1138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.461847][ T1138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.511747][ T1138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.571250][ T1138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.627031][ T1138] bridge_slave_1: left allmulticast mode [ 186.628642][ T1138] bridge_slave_1: left promiscuous mode [ 186.630380][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.633163][ T1138] bridge_slave_0: left allmulticast mode [ 186.634771][ T1138] bridge_slave_0: left promiscuous mode [ 186.636433][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.639134][ T1138] bridge_slave_1: left allmulticast mode [ 186.640715][ T1138] bridge_slave_1: left promiscuous mode [ 186.642320][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.644793][ T1138] bridge_slave_0: left allmulticast mode [ 186.646388][ T1138] bridge_slave_0: left promiscuous mode [ 186.647976][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.654581][ T1138] bridge_slave_1: left allmulticast mode [ 186.656211][ T1138] bridge_slave_1: left promiscuous mode [ 186.657828][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.660450][ T1138] bridge_slave_0: left allmulticast mode [ 186.662059][ T1138] bridge_slave_0: left promiscuous mode [ 186.663640][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.666946][ T1138] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 186.669231][ T12] BUG: sleeping function called from invalid context at net/core/dev.c:11422 [ 186.669474][ T1138] list_add corruption. prev is NULL. [ 186.671657][ T12] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 12, name: kworker/u32:1 [ 186.673292][ T1138] ------------[ cut here ]------------ [ 186.677037][ T12] preempt_count: 0, expected: 0 [ 186.678584][ T1138] kernel BUG at lib/list_debug.c:25! [ 186.679972][ T12] RCU nest depth: 1, expected: 0 [ 186.681384][ T1138] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 186.682769][ T12] INFO: lockdep is turned off. [ 186.682776][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:1 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 186.684809][ T1138] CPU: 2 UID: 0 PID: 1138 Comm: kworker/u32:8 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 186.686129][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 186.689097][ T1138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 186.692160][ T12] Workqueue: bond0 bond_mii_monitor [ 186.695088][ T1138] Workqueue: netns cleanup_net [ 186.698033][ T12] [ 186.699617][ T1138] [ 186.700925][ T12] Call Trace: [ 186.701600][ T1138] RIP: 0010:__list_add_valid_or_report+0x88/0x100 [ 186.702275][ T12] [ 186.703212][ T1138] Code: da 75 4a 48 39 f5 74 5a 48 39 dd 74 55 48 83 c4 08 b8 01 00 00 00 5b 5d c3 cc cc cc cc 48 c7 c7 c0 71 b1 8b e8 b9 ec da fc 90 <0f> 0b 48 c7 c7 60 72 b1 8b e8 aa ec da fc 90 0f 0b 48 89 d9 48 c7 [ 186.704986][ T12] dump_stack_lvl+0x16c/0x1f0 [ 186.705841][ T1138] RSP: 0018:ffffc90006a177c0 EFLAGS: 00010086 [ 186.711149][ T12] __might_resched+0x3c0/0x5e0 [ 186.712498][ T1138] [ 186.714218][ T12] ? __pfx___might_resched+0x10/0x10 [ 186.715582][ T1138] RAX: 0000000000000022 RBX: 7fffffffffffffff RCX: ffffffff8178e409 [ 186.716274][ T12] ? rcu_is_watching+0x12/0xc0 [ 186.717777][ T1138] RDX: 0000000000000000 RSI: ffffffff81798b96 RDI: 0000000000000005 [ 186.720020][ T12] synchronize_net+0x1b/0x60 [ 186.721390][ T1138] RBP: ffffc90006a178b8 R08: 0000000000000005 R09: 0000000000000000 [ 186.723645][ T12] dev_deactivate_many+0x2a1/0xb20 [ 186.724964][ T1138] R10: 0000000080000001 R11: 2e4c4c554e20696c R12: ffff88802ada8020 [ 186.727208][ T12] dev_deactivate+0xf9/0x1c0 [ 186.728684][ T1138] R13: 0000000000000000 R14: 0000000000000002 R15: ffff88802ada8070 [ 186.730927][ T12] ? __pfx_dev_deactivate+0x10/0x10 [ 186.732254][ T1138] FS: 0000000000000000(0000) GS:ffff88802b600000(0000) knlGS:0000000000000000 [ 186.734511][ T12] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 186.735989][ T1138] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.738413][ T12] linkwatch_do_dev+0x11e/0x160 [ 186.740141][ T1138] CR2: 00007f8ba659c4a0 CR3: 00000000298e4000 CR4: 0000000000352ef0 [ 186.741925][ T12] linkwatch_sync_dev+0x181/0x210 [ 186.743301][ T1138] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 186.745461][ T12] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 186.746864][ T1138] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 186.749052][ T12] ethtool_op_get_link+0x1d/0x70 [ 186.750649][ T1138] Call Trace: [ 186.750654][ T1138] [ 186.752833][ T12] bond_check_dev_link+0x197/0x430 [ 186.754214][ T1138] ? die+0x31/0x80 [ 186.755157][ T12] ? __pfx_bond_check_dev_link+0x10/0x10 [ 186.755973][ T1138] ? do_trap+0x232/0x430 [ 186.757364][ T12] ? __pfx_lock_release+0x10/0x10 [ 186.758400][ T1138] ? __list_add_valid_or_report+0x88/0x100 [ 186.759942][ T12] ? rcu_is_watching+0x12/0xc0 [ 186.761124][ T1138] ? __list_add_valid_or_report+0x88/0x100 [ 186.762506][ T12] ? bond_mii_monitor+0x140/0x2d90 [ 186.764130][ T1138] ? do_error_trap+0xf4/0x230 [ 186.765447][ T12] ? lock_acquire+0x2f/0xb0 [ 186.767062][ T1138] ? __list_add_valid_or_report+0x88/0x100 [ 186.768455][ T12] ? bond_mii_monitor+0x140/0x2d90 [ 186.769789][ T1138] ? handle_invalid_op+0x34/0x40 [ 186.771048][ T12] bond_mii_monitor+0x3c1/0x2d90 [ 186.772651][ T1138] ? __list_add_valid_or_report+0x88/0x100 [ 186.774110][ T12] ? _raw_spin_unlock_bh+0x20/0x30 [ 186.775521][ T1138] ? exc_invalid_op+0x2e/0x50 [ 186.776881][ T12] ? lock_release+0x4e2/0x6f0 [ 186.778502][ T1138] ? asm_exc_invalid_op+0x1a/0x20 [ 186.779910][ T12] ? __pfx_bond_mii_monitor+0x10/0x10 [ 186.781237][ T1138] ? __wake_up_klogd.part.0+0x99/0xf0 [ 186.782585][ T12] ? rcu_is_watching+0x12/0xc0 [ 186.784004][ T1138] ? vprintk+0x86/0xa0 [ 186.785475][ T12] ? lock_acquire+0x2f/0xb0 [ 186.786970][ T1138] ? __list_add_valid_or_report+0x88/0x100 [ 186.788313][ T12] ? process_one_work+0x8bb/0x1b30 [ 186.789496][ T1138] ___down_common+0xd4/0x460 [ 186.790750][ T12] process_one_work+0x958/0x1b30 [ 186.792391][ T1138] ? spin_bug+0x15/0x1d0 [ 186.793789][ T12] ? __pfx_process_one_work+0x10/0x10 [ 186.795063][ T1138] ? __pfx____down_common+0x10/0x10 [ 186.796423][ T12] ? rcu_is_watching+0x12/0xc0 [ 186.797593][ T1138] ? lock_acquire+0x2f/0xb0 [ 186.799061][ T12] ? assign_work+0x1a0/0x250 [ 186.800513][ T1138] __down+0x20/0x30 [ 186.801835][ T12] worker_thread+0x6c8/0xf00 [ 186.803089][ T1138] down+0x74/0xa0 [ 186.804361][ T12] ? __pfx_worker_thread+0x10/0x10 [ 186.805419][ T1138] netpoll_poll_disable+0x79/0x110 [ 186.806690][ T12] kthread+0x2c1/0x3a0 [ 186.807724][ T1138] __dev_close_many+0xd9/0x310 [ 186.809135][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.810627][ T1138] ? __pfx___dev_close_many+0x10/0x10 [ 186.811752][ T12] ? __pfx_kthread+0x10/0x10 [ 186.813081][ T1138] ? kasan_save_stack+0x42/0x60 [ 186.814521][ T12] ret_from_fork+0x45/0x80 [ 186.816048][ T1138] ? __call_rcu_common.constprop.0+0x99/0x7a0 [ 186.817317][ T12] ? __pfx_kthread+0x10/0x10 [ 186.818685][ T1138] ? nexthop_net_exit_batch_rtnl+0xc8/0x290 [ 186.819916][ T12] ret_from_fork_asm+0x1a/0x30 [ 186.821600][ T1138] ? cleanup_net+0x548/0xbd0 [ 186.822923][ T12] [ 186.824606][ T1138] ? process_one_work+0x958/0x1b30 [ 186.826215][ T12] ------------[ cut here ]------------ [ 186.827424][ T1138] ? worker_thread+0x6c8/0xf00 [ 186.828293][ T12] Voluntary context switch within RCU read-side critical section! [ 186.828346][ T12] WARNING: CPU: 3 PID: 12 at kernel/rcu/tree_plugin.h:331 rcu_note_context_switch+0xc5c/0x1ae0 [ 186.830014][ T1138] dev_close_many+0x24c/0x6a0 [ 186.831501][ T12] Modules linked in: [ 186.833105][ T1138] ? __pfx_dev_close_many+0x10/0x10 [ 186.835219][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:1 Tainted: G W 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 186.838641][ T1138] unregister_netdevice_many_notify+0x489/0x1e60 [ 186.839931][ T12] Tainted: [W]=WARN [ 186.841236][ T1138] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 186.842643][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 186.846660][ T1138] ? trace_irq_enable.constprop.0+0xea/0x140 [ 186.848375][ T12] Workqueue: bond0 bond_mii_monitor [ 186.849680][ T1138] ? __pfx___might_resched+0x10/0x10 [ 186.851501][ T12] [ 186.851505][ T12] RIP: 0010:rcu_note_context_switch+0xc5c/0x1ae0 [ 186.855081][ T1138] ? bond_net_exit_batch_rtnl+0x8a/0x430 [ 186.856716][ T12] Code: 7a 00 4c 8b 54 24 30 48 8b 44 24 28 8b 4c 24 10 e9 c6 03 00 00 c6 05 70 ab 84 0e 01 90 48 c7 c7 40 a6 4e 8b e8 05 2d d9 ff 90 <0f> 0b 90 90 e9 a8 f4 ff ff 38 d0 7f 08 84 c0 0f 85 2b 08 00 00 80 [ 186.858468][ T1138] ? nexthop_net_exit_batch_rtnl+0x1c6/0x290 [ 186.859957][ T12] RSP: 0018:ffffc900001e75c8 EFLAGS: 00010086 [ 186.860773][ T1138] cleanup_net+0x58c/0xbd0 [ 186.862481][ T12] [ 186.862485][ T12] RAX: 0000000000000000 RBX: ffff88802b73fcc0 RCX: ffffffff815a1789 [ 186.864358][ T1138] ? __pfx_cleanup_net+0x10/0x10 [ 186.869596][ T12] RDX: ffff88801cebc880 RSI: ffffffff815a1796 RDI: 0000000000000001 [ 186.871608][ T1138] ? _raw_spin_unlock+0x28/0x50 [ 186.873273][ T12] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 186.874773][ T1138] ? lock_acquire+0x2f/0xb0 [ 186.875436][ T12] R10: 0000000000000000 R11: ffffffff816b5e0e R12: ffff88801cebc880 [ 186.878082][ T1138] ? process_one_work+0x8bb/0x1b30 [ 186.879434][ T12] R13: ffff88801cebc880 R14: ffff88801cebc880 R15: ffff88802b73ed00 [ 186.882079][ T1138] process_one_work+0x958/0x1b30 [ 186.883400][ T12] FS: 0000000000000000(0000) GS:ffff88802b700000(0000) knlGS:0000000000000000 [ 186.886067][ T1138] ? __pfx_cleanup_net+0x10/0x10 [ 186.887323][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.889966][ T1138] ? __pfx_process_one_work+0x10/0x10 [ 186.891377][ T12] CR2: 00007f8529ec2723 CR3: 000000002344a000 CR4: 0000000000352ef0 [ 186.894031][ T1138] ? rcu_is_watching+0x12/0xc0 [ 186.895409][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 186.898369][ T1138] ? assign_work+0x1a0/0x250 [ 186.899760][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 186.901987][ T1138] worker_thread+0x6c8/0xf00 [ 186.903493][ T12] Call Trace: [ 186.906137][ T1138] ? __kthread_parkme+0x148/0x220 [ 186.907454][ T12] [ 186.910121][ T1138] ? __pfx_worker_thread+0x10/0x10 [ 186.911378][ T12] ? __warn+0xea/0x3c0 [ 186.914028][ T1138] kthread+0x2c1/0x3a0 [ 186.915281][ T12] ? __pfx___resched_curr+0x10/0x10 [ 186.916403][ T1138] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.917791][ T12] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 186.918794][ T1138] ? __pfx_kthread+0x10/0x10 [ 186.920184][ T12] ? report_bug+0x3c0/0x580 [ 186.921544][ T1138] ret_from_fork+0x45/0x80 [ 186.922660][ T12] ? handle_bug+0x54/0xa0 [ 186.924383][ T1138] ? __pfx_kthread+0x10/0x10 [ 186.925804][ T12] ? exc_invalid_op+0x17/0x50 [ 186.927700][ T1138] ret_from_fork_asm+0x1a/0x30 [ 186.929016][ T12] ? asm_exc_invalid_op+0x1a/0x20 [ 186.930553][ T1138] [ 186.931788][ T12] ? select_task_rq_fair+0x36e/0x44e0 [ 186.933236][ T1138] Modules linked in: [ 186.934560][ T12] ? __warn_printk+0x199/0x350 [ 186.936151][ T1138] [ 186.937413][ T12] ? __warn_printk+0x1a6/0x350 [ 186.939074][ T1138] ---[ end trace 0000000000000000 ]--- [ 186.939934][ T12] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 186.941724][ T1138] RIP: 0010:__list_add_valid_or_report+0x88/0x100 [ 186.942786][ T12] ? rcu_note_context_switch+0xc5b/0x1ae0 [ 186.944387][ T1138] Code: da 75 4a 48 39 f5 74 5a 48 39 dd 74 55 48 83 c4 08 b8 01 00 00 00 5b 5d c3 cc cc cc cc 48 c7 c7 c0 71 b1 8b e8 b9 ec da fc 90 <0f> 0b 48 c7 c7 60 72 b1 8b e8 aa ec da fc 90 0f 0b 48 89 d9 48 c7 [ 186.945048][ T12] ? llist_add_batch+0x100/0x160 [ 186.946663][ T1138] RSP: 0018:ffffc90006a177c0 EFLAGS: 00010086 [ 186.948156][ T12] ? schedule+0xe7/0x350 [ 186.950072][ T1138] [ 186.950076][ T1138] RAX: 0000000000000022 RBX: 7fffffffffffffff RCX: ffffffff8178e409 [ 186.951841][ T12] ? rcu_is_watching+0x12/0xc0 [ 186.953743][ T1138] RDX: 0000000000000000 RSI: ffffffff81798b96 RDI: 0000000000000005 [ 186.958924][ T12] ? schedule+0xe7/0x350 [ 186.960567][ T1138] RBP: ffffc90006a178b8 R08: 0000000000000005 R09: 0000000000000000 [ 186.962229][ T12] __schedule+0x297/0x5ad0 [ 186.963656][ T1138] R10: 0000000080000001 R11: 2e4c4c554e20696c R12: ffff88802ada8020 [ 186.964323][ T12] ? __smp_call_single_queue+0x74/0x1e0 [ 186.966816][ T1138] R13: 0000000000000000 R14: 0000000000000002 R15: ffff88802ada8070 [ 186.968177][ T12] ? rcu_is_watching+0x12/0xc0 [ 186.970342][ T1138] FS: 0000000000000000(0000) GS:ffff88802b600000(0000) knlGS:0000000000000000 [ 186.971498][ T12] ? lock_release+0x4e2/0x6f0 [ 186.973671][ T1138] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.974927][ T12] ? __pfx___schedule+0x10/0x10 [ 186.977172][ T1138] CR2: 00007f8ba659c4a0 CR3: 00000000298e4000 CR4: 0000000000352ef0 [ 186.978683][ T12] ? lock_release+0x4e2/0x6f0 [ 186.980876][ T1138] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 186.982200][ T12] ? schedule+0x298/0x350 [ 186.984605][ T1138] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 186.985915][ T12] ? __pfx_lock_release+0x10/0x10 [ 186.987709][ T1138] Kernel panic - not syncing: Fatal exception [ 187.002282][ T1138] Kernel Offset: disabled [ 187.003477][ T1138] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:27:49 Registers: info registers vcpu 0 CPU#0 RAX=00000000009ba604 RBX=0000000000000000 RCX=ffffffff8b1a6899 RDX=ffffed1005686fee RSI=ffffffff8bb170c0 RDI=ffffffff81703039 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901cf290 R15=0000000000000000 RIP=ffffffff8b1a7c7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9ddd9f0e08 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000006000800 Opmask01=00000000011000d0 Opmask02=000000000fffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d6a35e66158582bd 0df58801e83c33e2 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a3c1666776e58075 2579e4fba28400c5 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4df54c657224beb5 d0d7e7f7f6993775 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ede47c0be86c07bf 1d616d6a5238413c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000da80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2dab94ff6f36f569 2311e26678ae7936 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c54ff2500000072 236eb59abd660000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 007222e146b60000 2e725a89cd486a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00722340467df312 7bfc342f204296cd ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c5a84f135003f76 e0bf9b89f73866ba ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e63c4ecda9b4182 4b7d317b541ce10f ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7564203a00000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5041051f56000051 404e464a53055140 4e46445000424b4c 41574452574a430a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000181 0000000000000000 326874652f74656e 2f336d6973766564 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000071 0000000000000000 00306e6170772f74 656e2f307968702f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 000056451f358233 73656d5f70636864 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f0f43be63b661 72610f7dfa6df37f 656777777f75ffff 7f7f7d7f75777965 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 0000726565666965 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 00006d5f65636864 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=0000000000cc7834 RBX=0000000000000001 RCX=ffffffff8b1a6899 RDX=ffffed10056a6fee RSI=ffffffff8bb170c0 RDI=ffffffff81703039 RBP=ffffed10036e9910 RSP=ffffc9000047fe08 R8 =0000000000000000 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801b74c880 R14=ffffffff901cf290 R15=0000000000000000 RIP=ffffffff8b1a7c7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020f41000 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fef4c1e0 Opmask01=000000000000001f Opmask02=000000003101001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000002d59aa21 0000000000000016 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffafaa7b40 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6970726100656c 69666f7270000920 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000c0fe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1600000000000000 00000000000002ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1600000000000000 00000000000002ff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000010e00000080 000000000000003b 0000000000000000 0000003365736f72 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 0000000004001eac 00007fffafab3b00 0000003365736f72 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 0000000004001e96 000045c595910100 000000095f495548 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000747369 6c5f747365757165 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000065676173 73656d5f70636864 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000065676173 73656d5f70636864 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f0d43be63b021 72610f7dfa6df77f 6567617377777f7f 7f7f7d7f75777965 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 0000726565666965 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 00006d5f65636864 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000024 RCX=ffffffff81794761 RDX=ffff8880254a2440 RSI=ffffffff8179474d RDI=0000000000000001 RBP=1ffff92000d42ea2 RSP=ffffc90006a17500 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=ffff88801cebc880 R15=0000000000000001 RIP=ffffffff8179474f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8ba659c4a0 CR3=00000000298e4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080000010 Opmask01=0000000000001d1f Opmask02=00000000ff001fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000007000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ffff00ff0000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737373 7373737373737373 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ffff00ff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6e6e6e6e6e6e6e 6e6e645f0f0a1d41 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 180b0a41531a0101 1c4e5e3d171a1a53 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f766e6f63675f5f 0000000000000000 000000706d74752f 6e75722f7261762f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 706d742f73666d61 7220746f6e207369 206d657473797365 6c696620746f6f72 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00656c6966207261 6c75676572206120 746f6e2073692027 7325270074696e69 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 24bf242d282b232c 22ee222e312feebf 222e312feebf2435 283232282c31242f ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2bdf3228df3822 282b2e2fdf37342d 280b0412bfc92435 283232282c31242f ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=0000000000000028 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85145065 RDI=ffffffff9a667200 RBP=ffffffff9a6671c0 RSP=ffffc900001e73f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=696d6f74615f6e69 R12=0000000000000000 R13=0000000000000028 R14=ffffffff85145000 R15=0000000000000000 RIP=ffffffff8514508f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8529ec2723 CR3=000000002344a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000006000800 Opmask01=00000000011000d0 Opmask02=000000000fffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffafab79b0 0000003000000010 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffafa97990 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff00ffffffff ff00000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00ff00ff00ff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff00ffffffff ff00000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7564203a00000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5041051f56000051 404e464a53055140 4e46445000424b4c 41574452574a430a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000181 0000000000000000 326874652f74656e 2f336d6973766564 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000071 0000000000000000 00306e6170772f74 656e2f307968702f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 000056451f358233 73656d5f70636864 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f0f43be63b661 72610f7dfa6df37f 656777777f75ffff 7f7f7d7f75777965 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 0000726565666965 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 00006d5f65636864 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020