last executing test programs: 4.967986878s ago: executing program 2 (id=2613): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r2, 0x1, &(0x7f0000000880)=[0x0]) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = open(0x0, 0x0, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read$char_usb(r4, 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) mkdirat(0xffffffffffffff9c, 0x0, 0x88) socket$caif_seqpacket(0x25, 0x5, 0x4) inotify_init() mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') close(r3) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a81300810048000800450000380060000000019078ac1414bb0a01010103009078030000004500000000000000002f0001040022eb0002000043b8863906c61b4b7ed54b44f3127080407d26292ecd4e4f9cc543e2fd1d0b268aaf20df43d3b1f03c28a021bb6e85e1d822f735560c7ec4f29c37cb3e599a307b7ad53d9b6e281e6591d9b2373ddf953e63cf8b72cf9ba65ee8122e8bbf7f21df1fef1c461716e71973b53794aebe5a1ab04e01cdd7b9cd2947ccfb9a5acc4ea210"], 0x0) link(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./file0\x00') socket$inet_tcp(0x2, 0x1, 0x0) r6 = creat(&(0x7f0000000880)='./file0\x00', 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x9, &(0x7f00000001c0)=[{0x9b, 0x1, 0xb0, 0x2000004d}, {0x4001, 0x2, 0x5, 0x5}, {0xb3, 0x58, 0x28, 0x5}, {0x3, 0x7f, 0x4b, 0x4}, {0xfffa, 0x0, 0x80}, {0x5, 0x1, 0x2, 0x4}, {0x3, 0x1, 0xfd, 0x7f}, {0x3, 0xc, 0xf2, 0xec}, {0xe5c, 0x25, 0xd1, 0x47d1}]}, 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x53, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, 0x5, 0xff, 0x8, 0xa, 0x82, 0x1, 0x63}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000180)={r8, 0x9cae}, 0x8) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="91b882b09a0ebbbbbbbbbbbb0800450000380000000000019005655b2b4ca195ead835a1ac1e0001ac1414aa030490781200183f25000fec2e000000000100000a0101016401"], 0x0) 4.838214335s ago: executing program 3 (id=2614): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) 4.837681285s ago: executing program 3 (id=2615): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000000c0), 0x31}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003140)={{{@in=@remote, @in=@dev}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000900)=0xe4) lstat(&(0x7f0000003240)='./file0\x00', &(0x7f0000003280)) getresuid(&(0x7f0000003300), &(0x7f0000003340), &(0x7f0000003380)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x4000, 0x25daa903, 0xffffffffffffffff, r4, 0xffffffff, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = getuid() mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200840c, &(0x7f0000000580)=ANY=[@ANYBLOB="000000e6151452e8a40664217f000bb3a40644d629f82d7157107d206422839776cf4fc9373404b9e6b31c1449fa54ca8aa54193094aa1d828b679a306abdc656e4e55bfda9876912a00d00a7d0c0b48a42a93ab4e89b58bfbb9880ab1e0167990b26215bd987b805bec19352836cecc2e529b61abb9f0e37996ffefe8f67fcd92b3a31f0b4a2d114d62cdc19538", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r6, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000000e1,default_permissions,max_read=0x0000000000000008,allow_other,blksize=0x0000000000000000,blksize=0x0000000000001000,\x00']) getresgid(&(0x7f00000033c0), &(0x7f0000003400), &(0x7f0000003440)) getuid() fstat(r0, &(0x7f0000003480)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x0, 0x44}, 0x28) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioperm(0x4, 0x3, 0x3) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r7}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 4.717732133s ago: executing program 2 (id=2616): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=@newqdisc={0x448, 0x24, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x9}, {0x4, 0xd}, {0xe, 0xfff1}}, [@TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0x6, 0x1, 0x6, 0x1, 0x38e, 0x8000, 0x6}}, {0x10, 0x2, [0x0, 0x4, 0x401, 0x7, 0x7, 0x8]}}, {{0x1c, 0x1, {0x83, 0xdb, 0xf001, 0xfffffff9, 0x1, 0xfffff3de, 0x4772, 0x5}}, {0xe, 0x2, [0x1, 0x6, 0x3, 0xfff8, 0x0]}}, {{0x1c, 0x1, {0x91, 0x2, 0x3ff, 0xd3, 0x2, 0xfffffff7, 0x22d7, 0x1}}, {0x6, 0x2, [0xfff]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x80}}, @qdisc_kind_options=@q_taprio={{0xb}, {0x20c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x2}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xb1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x400000}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x800}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7fff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xef}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xd, [0x0, 0x6, 0x1, 0xd, 0x3, 0xd, 0x3, 0x5, 0xf, 0xa, 0xf, 0x8, 0x7, 0xd, 0x10, 0xc], 0x0, [0xfff, 0x2, 0x9, 0xc34, 0xa0ac, 0x8, 0x6, 0x1000, 0x8, 0x7, 0xa0df, 0x8fad, 0x400, 0x2a7, 0xfc00, 0xfff], [0x2, 0x3, 0x2, 0x0, 0xf, 0x634, 0x100, 0x3, 0xd8, 0x7, 0x1, 0x8000, 0x0, 0x3, 0x7f, 0x1000]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x3ff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x14c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}, {0x4c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8a}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfcd}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xae}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xde}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7fff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xc}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xc}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x68fd}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xc}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x15}]}]}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000}, @qdisc_kind_options=@q_choke={{0xa}, {0x15c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x9, 0x2, 0xc, 0xb8, 0x5, 0x8}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x7, 0x0, 0x5, 0x13, 0x6, 0x15, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x4}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xddbb}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x9, 0x6622, 0xb, 0x1a, 0x2}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}]}, 0x448}}, 0x40080) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x32) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_setup(0x2caf, &(0x7f0000000000)={0x0, 0x580a, 0x1, 0x3}) 3.92742175s ago: executing program 1 (id=2622): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_async', 0x20000, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="1c00000076001f03000000000000000008024b65a7ffffff04000d80"], 0x1c}], 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000004) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x1b, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b703000000000000dfd40ee671038500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYRES16=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setfsuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r7, &(0x7f0000003100)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x28}}], 0x1, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="c8baf3c1bc54f34bf4ab97b3517af57c0e2ab8ef7c061a0a6b5e1decf56fc482b6586ddaa4d464ee0a57b65796c07bebc28795b9081d7a53c0871b758c8f856646012836a15b785fa83039b6aeb31b9a10486d04a31464b77b374ba98b402cfa04f5630d99fa79bf", 0x68}, {&(0x7f0000000340)="eec75c878b67280b22cc680c40a3abe1e6791c8a3d6c22ae27308f647e43c57fd0a172a254145b06", 0x28}], 0x2}}], 0x1, 0x9200000000000000) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.927133922s ago: executing program 0 (id=2623): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x14}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000640)='!'}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 3.888023341s ago: executing program 0 (id=2624): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x1000800, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7003000, 0x4, 0x1, 0x0, r4, &(0x7f0000000180)='\x00', 0xfdfe}]) dup3(r0, r1, 0x6700000000000000) 3.876995743s ago: executing program 3 (id=2625): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x80, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 12) 3.597834397s ago: executing program 3 (id=2626): socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_usbip_server_init(0x3) write$usbip_server(r0, &(0x7f0000000380)=ANY=[], 0xfffffffffffffd8e) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1d, 0x2, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000f80), 0x3, 0x0) 3.486641021s ago: executing program 0 (id=2627): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002840)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0xfffffffc, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, "eb21"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) (rerun: 64) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x3a, 0x23b) (async) write(r3, 0x0, 0x700) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000300)={0x0, 0x0}) 2.926753603s ago: executing program 0 (id=2628): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) close(r4) tee(r0, r5, 0x8f5, 0x0) write$binfmt_script(r5, 0x0, 0xd9) write(r2, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="c1b0ac02e72eed7935", 0x9}], 0x1}}], 0x1, 0x20000041) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}}, 0x0) sendmmsg$inet6(r6, &(0x7f0000004900), 0x0, 0x0) 2.656903149s ago: executing program 0 (id=2629): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gre0\x00'}) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0xaad, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x33b}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r1, 0x26c5, 0x265c, 0x21, 0x0, 0x0) 2.601721134s ago: executing program 1 (id=2630): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x2711, @local}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x10, &(0x7f0000000240)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x10, 0xac, &(0x7f0000000380)=""/172, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x101c, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x200, 0x1}) io_uring_register$IORING_REGISTER_FILES2(r5, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000000)=0x7fffffff) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r8 = gettid() r9 = syz_open_procfs(r8, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f0000000100)={0x30}, 0x30) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) 2.509147199s ago: executing program 0 (id=2631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000700), 0x4) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = signalfd(r2, &(0x7f0000000380)={[0x5, 0x9]}, 0x8) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f00000003c0)={0x1, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @private=0xa010101}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000400)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd000000000000000000100000002e00"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0xa0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x490420, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r7, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x20c01, 0x99) ioctl$SNAPSHOT_SET_SWAP_AREA(r9, 0x40806685, &(0x7f0000000180)={0x81, 0x3}) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r10, 0x8917, &(0x7f0000000400)={'veth0\x00', {0x2, 0x0, @dev}}) 2.142090683s ago: executing program 2 (id=2632): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x7, 0x7, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48801}, 0x20004000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@gettaction={0xdc, 0x32, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x58}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x800}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001880)={'wg0\x00', 0x0}) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r6, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x3f00, &(0x7f00000001c0)={&(0x7f0000000300)={0x40, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x40}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000000)={0x0, 0xb, "b7be5c", 0x6, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e0, 0x8, 0x0, 0x0}}, 0x10) 1.567831631s ago: executing program 1 (id=2633): r0 = epoll_create1(0x80000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) r2 = syz_open_pts(r1, 0x0) io_setup(0x200, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000040)={'wlan1\x00', @random="ff8dff8d8d00"}) r7 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000240)) 1.385316283s ago: executing program 2 (id=2634): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe8d, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4a}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0xdb1846e8c973b355, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000640)) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r6, r6, 0x0, 0x40008) syz_open_dev$usbfs(&(0x7f0000000380), 0x1ff, 0x2) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) 1.335954553s ago: executing program 3 (id=2635): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000440)) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x1) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = gettid() syz_open_procfs(r3, &(0x7f0000000040)='maps\x00') exit(0x1f919) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 577.674041ms ago: executing program 1 (id=2636): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x9, 0x2, 0x9, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000fcffffff00000000eb3800008500800093000000950000000000000013a5ca2a7ea6302774f04eb65cec98e8ce821a1eda2907e269e68313e450adfc6070390f77922e7df00bb14b49bbdb7033dacb5b36ff5b285c7457a3b0aa99d6929386cac83377b8ff"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) ioctl$TCFLSH(r0, 0x400455c8, 0x20000000008) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) r1 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000100)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r3}) syz_emit_vhci(0x0, 0x0) r4 = io_uring_setup(0x41e2b, &(0x7f0000000380)={0x0, 0xb07b, 0x4, 0x2, 0xc8}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000004c40)=[@ioring_restriction_sqe_op={0x1, 0x54}], 0x1) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0436070f00000000000021861b25fd32387416f188405d6fd33559fbc3642969fb1fa6ebba94eaee8bf78fbaedd945e1e8a22956b0def32ccf5274b997207907f8f69debb35e49549db8362dc5c4d9"], 0xa) 576.421718ms ago: executing program 1 (id=2637): syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040ea055e00400001020309000000000000004009090400030d03010209092109000c01227f173080cf03000405ea070905b69e4a9c010f02"], &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xa, 0x6a, 0x7, 0x40, 0x5}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x5, [{0xba, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, {0x0, 0x0}, {0xc1, &(0x7f0000000540)=ANY=[]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40c}}, {0x1a, &(0x7f0000000340)=@string={0x1a, 0x3, "7823327b9096efe812b211e81fe70de31f8de195455eb6ce"}}]}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x1c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x4}}}}}}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f00000001c0)={@any, 0xdc}) close_range(r0, r0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) 475.963824ms ago: executing program 3 (id=2638): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) iopl(0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@bridge_dellink={0x20, 0x11, 0x5}, 0x20}}, 0x0) syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0xeffe, @multicast2}}, 0x4, 0x7ffe}, 0x88) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 459.215859ms ago: executing program 2 (id=2639): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gre0\x00'}) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0xaad, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x33b}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r1, 0x26c5, 0x265c, 0x21, 0x0, 0x0) 298.133074ms ago: executing program 2 (id=2640): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) unshare(0x28060400) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x2000, 0x2000, &(0x7f0000315000/0x2000)=nil}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x95}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x9, 0x2, [0x2, 0x8]}, 0xc) 0s ago: executing program 1 (id=2641): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x3c, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240080c4}, 0x0) kernel console output (not intermixed with test programs): ter, leaking uprobe [ 277.749532][T11803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1768'. [ 277.795789][T11809] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1770'. [ 277.897474][T11815] wireguard0: entered promiscuous mode [ 277.900626][T11815] wireguard0: entered allmulticast mode [ 278.884508][T11846] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1780'. [ 279.025126][T11856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1784'. [ 279.158424][ T40] kauditd_printk_skb: 293 callbacks suppressed [ 279.158434][ T40] audit: type=1800 audit(1752677843.287:340): pid=11869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1788" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 280.246255][ T5317] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 280.388814][T11930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.467473][T11942] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1817'. [ 280.695551][T11953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1820'. [ 280.702871][ T1138] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 280.812608][T11967] Set syz0 is full, maxelem 0 reached [ 280.887265][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 281.171069][ T40] audit: type=1804 audit(1752677845.297:341): pid=11993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1832" name="file0" dev="tmpfs" ino=2686 res=1 errno=0 [ 281.375703][T12001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.177947][T12036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.213860][T12038] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1846'. [ 282.217924][T12038] Set syz0 is full, maxelem 0 reached [ 283.760755][T12066] lo speed is unknown, defaulting to 1000 [ 283.762891][T12066] lo speed is unknown, defaulting to 1000 [ 283.768142][T12066] lo speed is unknown, defaulting to 1000 [ 283.779147][T12066] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 283.797604][T12066] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 283.861020][T12066] lo speed is unknown, defaulting to 1000 [ 283.866705][T12066] lo speed is unknown, defaulting to 1000 [ 283.872682][T12066] lo speed is unknown, defaulting to 1000 [ 283.878072][T12066] lo speed is unknown, defaulting to 1000 [ 284.709166][T12083] wireguard0: entered promiscuous mode [ 284.711009][T12083] wireguard0: entered allmulticast mode [ 284.813671][T12087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1859'. [ 284.916285][T12094] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1862'. [ 284.972622][T12095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1862'. [ 285.125563][T12110] 9pnet_fd: Insufficient options for proto=fd [ 285.233204][T12111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1863'. [ 285.416952][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1873'. [ 285.642389][ T29] IPVS: starting estimator thread 0... [ 285.700328][T12136] netlink: 'syz.0.1874': attribute type 11 has an invalid length. [ 285.702938][T12136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1874'. [ 285.742226][T12134] IPVS: using max 43 ests per chain, 103200 per kthread [ 286.193644][T12150] overlayfs: failed to clone upperpath [ 286.393830][T12155] netlink: 'syz.3.1880': attribute type 1 has an invalid length. [ 286.406355][T12155] 8021q: adding VLAN 0 to HW filter on device bond14 [ 286.413465][T12155] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1880'. [ 286.419657][T12155] vlan2: entered allmulticast mode [ 286.421337][T12155] veth1: entered allmulticast mode [ 286.683869][ T5317] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 287.075893][ C3] vcan0: j1939_tp_rxtimer: 0xffff888025df5400: rx timeout, send abort [ 287.079455][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888025df6000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 287.579163][ C3] vcan0: j1939_tp_rxtimer: 0xffff888025df5400: abort rx timeout. Force session deactivation [ 288.337018][T12204] siw: device registration error -23 [ 288.531355][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1893'. [ 289.035904][T12211] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1896'. [ 289.315693][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1900'. [ 289.593238][T12234] 9pnet_fd: Insufficient options for proto=fd [ 290.086197][T12245] siw: device registration error -23 [ 290.825994][T12258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.025947][T12269] 9pnet_fd: Insufficient options for proto=fd [ 291.468126][T12277] __nla_validate_parse: 1 callbacks suppressed [ 291.468137][T12277] netlink: 9896 bytes leftover after parsing attributes in process `syz.0.1916'. [ 291.551138][T12279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.174626][T12295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1920'. [ 292.228498][T12297] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1921'. [ 292.232423][T12297] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1921'. [ 292.241298][T12298] siw: device registration error -23 [ 292.435732][T12311] lo speed is unknown, defaulting to 1000 [ 292.702388][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.705115][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.012437][T12317] wireguard0: entered promiscuous mode [ 293.014825][T12317] wireguard0: entered allmulticast mode [ 293.256242][T12350] bond0: (slave bridge_slave_1): Releasing backup interface [ 293.260494][T12350] bridge_slave_1: left promiscuous mode [ 293.262776][T12350] bridge_slave_1: left allmulticast mode [ 293.356584][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1937'. [ 293.364169][ T5317] Bluetooth: hci2: unexpected event for opcode 0x0405 [ 293.945847][ T40] audit: type=1326 audit(2000000008.730:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12376 comm="syz.2.1945" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 294.142623][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.782241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.992160][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.995003][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.998055][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.072572][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.497240][T12417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1957'. [ 296.605891][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1966'. [ 296.615891][T12424] erspan0: entered promiscuous mode [ 296.619597][T12424] macvtap7: entered promiscuous mode [ 296.622243][T12424] macvtap7: entered allmulticast mode [ 296.623820][T12424] erspan0: entered allmulticast mode [ 296.638803][T12424] netlink: 'syz.3.1966': attribute type 13 has an invalid length. [ 296.644117][T12424] macvtap7: refused to change device tx_queue_len [ 296.702162][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.706870][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.756133][ T5317] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 297.424572][ T5317] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 297.427691][ T5317] Bluetooth: hci2: Injecting HCI hardware error event [ 297.431001][ T5317] Bluetooth: hci2: hardware error 0x00 [ 297.524225][T12456] : (slave bridge_slave_1): Releasing backup interface [ 297.540883][ T61] lo speed is unknown, defaulting to 1000 [ 297.580771][T12456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1965'. [ 298.110442][T12475] IPVS: Unknown mcast interface: hsr0 [ 298.113495][T12474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.869810][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1977'. [ 299.272282][ C3] net_ratelimit: 5 callbacks suppressed [ 299.272294][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.322893][T12497] lo speed is unknown, defaulting to 1000 [ 299.502161][ T5317] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 299.822318][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.825265][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.828740][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.902178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.938632][ T40] audit: type=1326 audit(2000000014.720:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12504 comm="syz.2.1981" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf710e579 code=0x0 [ 300.247135][ T5317] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 300.433995][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1986'. [ 300.542298][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.816198][T12536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1991'. [ 300.954953][T12544] team_slave_1: entered promiscuous mode [ 301.534136][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1996'. [ 301.710721][T12560] netlink: 'syz.2.1997': attribute type 1 has an invalid length. [ 301.742600][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.745376][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.747992][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.750581][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.032914][T12568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2000'. [ 303.310022][ T5317] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 303.738646][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2012'. [ 303.805696][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2012'. [ 304.782148][ C2] net_ratelimit: 4 callbacks suppressed [ 304.782160][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.712666][T12649] trusted_key: encrypted_key: insufficient parameters specified [ 306.942195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.006014][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2026'. [ 307.010414][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2026'. [ 307.014587][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2026'. [ 307.071268][T12659] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2026'. [ 307.582602][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.587990][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.590737][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.595101][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.455978][T12683] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2034'. [ 308.461992][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'. [ 308.862153][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.262208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.264915][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.553653][T12703] bridge0: entered allmulticast mode [ 309.559702][T12703] pim6reg: entered allmulticast mode [ 309.952208][ T5317] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 310.807156][T12734] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2050'. [ 310.811756][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2050'. [ 311.352304][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.355806][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.358383][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.361340][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.432334][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.786116][T12765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2058'. [ 311.860631][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2058'. [ 312.405590][ T5317] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 312.712192][ T102] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 313.352408][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.355064][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.357685][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.361071][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.364441][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.889781][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2071'. [ 314.120266][T12821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.854896][T12825] IPVS: Unknown mcast interface: hsr0 [ 314.859625][T12824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.169885][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2081'. [ 315.504292][T12852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2084'. [ 315.562986][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2084'. [ 315.761948][T12858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2085'. [ 315.803875][T12858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2085'. [ 315.891646][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2086'. [ 315.896498][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2086'. [ 315.900251][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2086'. [ 315.960043][T12863] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2086'. [ 316.376590][ T5317] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 316.568808][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.570886][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.573178][ T61] net_ratelimit: 4 callbacks suppressed [ 316.573186][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.577477][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.755387][T12871] netlink: zone id is out of range [ 316.757134][T12871] netlink: zone id is out of range [ 317.080440][T12877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.680093][T12883] tmpfs: Unknown parameter 'grpquota_bit' [ 317.752322][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.756042][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.759642][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.102338][ T1137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.105068][ T1137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.107580][ T1137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.798093][T12920] wireguard0: entered promiscuous mode [ 319.799916][T12920] wireguard0: entered allmulticast mode [ 319.905961][T12931] __nla_validate_parse: 1 callbacks suppressed [ 319.905975][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2108'. [ 319.949806][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2108'. [ 320.025711][ T40] audit: type=1326 audit(2000000034.810:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.1.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 320.032331][ T40] audit: type=1326 audit(2000000034.810:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.1.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=256 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 320.038965][ T40] audit: type=1326 audit(2000000034.810:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.1.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 320.047238][ T40] audit: type=1326 audit(2000000034.810:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.1.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 320.053908][ T40] audit: type=1326 audit(2000000034.810:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.1.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 320.060438][ T40] audit: type=1326 audit(2000000034.810:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.1.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 320.068323][ T40] audit: type=1326 audit(2000000034.810:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.1.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 320.075450][ T40] audit: type=1326 audit(2000000034.810:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.1.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 320.087768][ T40] audit: type=1326 audit(2000000034.810:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.1.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 320.094449][ T40] audit: type=1326 audit(2000000034.810:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.1.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 320.725578][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2114'. [ 320.802496][T12950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2114'. [ 320.817741][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 320.820497][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 320.842231][ T837] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 320.971492][T12957] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20000 [ 321.390960][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.396651][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.582230][ C0] net_ratelimit: 1 callbacks suppressed [ 321.582241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.586636][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.663893][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.673096][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.675710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.152897][ T6008] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.344858][ T6008] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.864249][T12992] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20000 [ 323.072297][T12996] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2126'. [ 323.076292][T12996] unsupported nla_type 256 [ 323.582123][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.584832][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.911782][T13012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2134'. [ 324.573881][T13020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2138'. [ 324.745040][ T5317] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 324.782193][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.784887][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.787421][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.862265][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.097420][T13033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.202335][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.558369][T13049] overlayfs: failed to clone upperpath [ 325.588565][T13051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2147'. [ 325.902298][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 326.782182][ C2] net_ratelimit: 10 callbacks suppressed [ 326.782195][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.786444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.078812][ T5317] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 327.599364][T13089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.735132][T13094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2158'. [ 328.284360][T13103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.379816][T13103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.533205][T13103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.724015][T13119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2168'. [ 328.858172][T13113] siw: device registration error -23 [ 328.927934][ T837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.929478][T13103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.931464][ T837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.936990][ T837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.019623][T13103] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.027374][T13103] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.034819][T13103] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.044848][T13103] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.162367][T13129] bond0 (unregistering): Released all slaves [ 329.262353][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.265838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.269263][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.982675][ T1138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.986205][ T1138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.115327][T13153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2177'. [ 331.356712][T13178] netlink: 'syz.0.2186': attribute type 29 has an invalid length. [ 331.359824][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2186'. [ 331.378166][T13178] lo speed is unknown, defaulting to 1000 [ 331.545031][T13187] tipc: Started in network mode [ 331.546679][T13187] tipc: Node identity 4, cluster identity 4711 [ 331.549095][T13187] tipc: Node number set to 4 [ 331.879190][T13196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2192'. [ 331.903154][ T1138] net_ratelimit: 7 callbacks suppressed [ 331.903179][ T1138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.908939][ T1138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.912166][ T1138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.915263][ T1138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.715938][T13205] tmpfs: Unknown parameter 'usrquota_block_h¤æÆš/-Þg' [ 332.794170][T13211] 9pnet_fd: Insufficient options for proto=fd [ 333.112807][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.116440][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.124246][T13233] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.182266][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.186028][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.190126][ T1138] wlan1: Trigger new scan to find an IBSS to join [ 333.199291][T13236] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.200118][T13236] 9pnet_fd: Insufficient options for proto=fd [ 333.380449][T13233] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.502253][T13233] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.575730][T13233] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.669543][T13233] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.679452][T13233] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.691188][T13233] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.701266][T13233] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.375983][T13262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2216'. [ 334.464387][T13267] lo speed is unknown, defaulting to 1000 [ 334.991937][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2221'. [ 335.955716][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.959245][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.962624][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.224216][ T46] wlan1: Trigger new scan to find an IBSS to join [ 336.469275][T13281] kexec: Could not allocate control_code_buffer [ 336.596808][T13281] Process accounting resumed [ 336.751858][T13320] macsec0: entered promiscuous mode [ 336.754904][T13320] macsec0: entered allmulticast mode [ 336.757270][T13320] veth1_macvtap: entered allmulticast mode [ 337.040324][T13325] wireguard0: entered promiscuous mode [ 337.044989][T13325] wireguard0: entered allmulticast mode [ 337.193338][T13328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2235'. [ 337.662590][ T102] net_ratelimit: 4 callbacks suppressed [ 337.662608][ T102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.668428][ T102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.671814][ T102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.675299][ T102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.581139][T13360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2246'. [ 338.829651][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'. [ 338.848203][T13374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2249'. [ 338.904368][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2249'. [ 339.021402][T13382] @: renamed from vlan0 (while UP) [ 339.027909][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2252'. [ 339.138098][T13384] 9pnet_fd: Insufficient options for proto=fd [ 339.270990][ T1137] wlan1: Trigger new scan to find an IBSS to join [ 339.512184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.515057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.518100][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.521020][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.524253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.527754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.917698][T13407] delete_channel: no stack [ 340.283146][ T1137] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 340.882169][T13424] siw: device registration error -23 [ 341.676631][T13436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2267'. [ 342.702245][ C3] net_ratelimit: 11 callbacks suppressed [ 342.702257][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.706982][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.709622][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.782558][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.785089][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.787549][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.790136][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.188945][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2277'. [ 343.238922][T13482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2277'. [ 343.545793][T13506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2285'. [ 343.564891][T13507] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2286'. [ 343.587400][T13506] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 343.831703][ T5959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.839525][ T5959] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.843721][ T5959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.848150][ T5959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.851764][ T5959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.979730][T13524] lo speed is unknown, defaulting to 1000 [ 344.104626][T13524] chnl_net:caif_netlink_parms(): no params data found [ 344.150169][ T1170] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.203407][ T1170] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.211738][T13524] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.214379][T13524] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.216627][T13524] bridge_slave_0: entered allmulticast mode [ 344.219372][T13524] bridge_slave_0: entered promiscuous mode [ 344.224846][T13524] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.227744][T13524] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.228847][T13546] binder: Unknown parameter 'sÊAú'UɼLbal' [ 344.232918][T13524] bridge_slave_1: entered allmulticast mode [ 344.237358][T13524] bridge_slave_1: entered promiscuous mode [ 344.292513][ T1170] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.298930][T13524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.304671][T13524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.350655][T13524] team0: Port device team_slave_0 added [ 344.354760][T13524] team0: Port device team_slave_1 added [ 344.406239][ T1170] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.413230][T13524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.415383][T13524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.423424][T13524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.427630][T13524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.429809][T13524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.438183][T13524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.500209][T13524] hsr_slave_0: entered promiscuous mode [ 344.502577][T13524] hsr_slave_1: entered promiscuous mode [ 344.889955][ T1170] dvmrp1 (unregistering): left allmulticast mode [ 344.909232][ T1170] bridge0 (unregistering): left allmulticast mode [ 345.155252][ T1170] bond1 (unregistering): Released all slaves [ 345.167638][ T1170] bond2 (unregistering): Released all slaves [ 345.177301][ T1170] bond3 (unregistering): Released all slaves [ 345.190864][ T1170] bond4 (unregistering): Released all slaves [ 345.205139][ T1170] bond5 (unregistering): Released all slaves [ 345.216467][ T1170] bond6 (unregistering): Released all slaves [ 345.229832][ T1170] bond7 (unregistering): Released all slaves [ 345.245814][ T1170] bond8 (unregistering): Released all slaves [ 345.254033][ T1170] bond9 (unregistering): Released all slaves [ 345.260943][ T1170] bond10 (unregistering): Released all slaves [ 345.270385][ T1170] bond11 (unregistering): Released all slaves [ 345.280380][ T1170] bond12 (unregistering): Released all slaves [ 345.289072][ T1170] bond13 (unregistering): Released all slaves [ 345.297494][ T1170] bond14 (unregistering): Released all slaves [ 345.309422][ T1170] bond15 (unregistering): Released all slaves [ 345.316174][ T1170] bond16 (unregistering): Released all slaves [ 345.328570][ T1170] bond17 (unregistering): Released all slaves [ 345.423045][ T1170] bond18 (unregistering): Released all slaves [ 345.434889][ T1170] bond19 (unregistering): Released all slaves [ 345.441021][ T1170] bond20 (unregistering): Released all slaves [ 345.449203][ T1170] bond21 (unregistering): Released all slaves [ 345.455547][ T1170] bond22 (unregistering): Released all slaves [ 345.462290][ T1170] bond23 (unregistering): Released all slaves [ 345.514426][T13574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2302'. [ 345.530926][ T1170] bond24 (unregistering): Released all slaves [ 345.537106][ T1170] bond25 (unregistering): Released all slaves [ 345.545216][ T1170] bond26 (unregistering): Released all slaves [ 345.556552][ T1170] bond27 (unregistering): Released all slaves [ 345.568975][ T1170] bond28 (unregistering): Released all slaves [ 345.579175][ T1170] bond29 (unregistering): Released all slaves [ 345.794100][ T1170] IPVS: stopping backup sync thread 7045 ... [ 345.913393][ T5959] Bluetooth: hci4: command tx timeout [ 346.364326][T13606] netlink: 'syz.3.2307': attribute type 10 has an invalid length. [ 346.366815][T13606] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2307'. [ 346.375663][ T1170] hsr_slave_0: left promiscuous mode [ 346.377847][ T1170] hsr_slave_1: left promiscuous mode [ 346.395036][ T1170] veth1_macvtap: left promiscuous mode [ 346.396985][ T1170] veth1_vlan: left promiscuous mode [ 346.398686][ T1170] veth0_vlan: left promiscuous mode [ 346.482170][ T1170] pim6reg (unregistering): left allmulticast mode [ 346.623475][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.626143][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.628650][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.576002][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2309'. [ 347.611292][T13524] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 347.618285][T13524] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 347.630470][T13524] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 347.641275][T13524] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 347.740742][T13524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.750326][T13524] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.757107][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2313'. [ 347.778658][T13524] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.784835][T13524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.827997][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2313'. [ 347.835725][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.837997][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.843141][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.845421][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.902333][ C2] net_ratelimit: 7 callbacks suppressed [ 347.902350][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.911389][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.914080][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.916613][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.919118][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.992123][ T5959] Bluetooth: hci4: command tx timeout [ 348.057494][T13664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2316'. [ 348.067704][T13524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.099080][T13664] lo speed is unknown, defaulting to 1000 [ 348.101494][T13524] veth0_vlan: entered promiscuous mode [ 348.133391][T13524] veth1_vlan: entered promiscuous mode [ 348.148575][T13524] veth0_macvtap: entered promiscuous mode [ 348.160322][T13524] veth1_macvtap: entered promiscuous mode [ 348.169632][T13524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.183773][T13524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.191056][T13524] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.196132][T13524] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.198910][T13524] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.201777][T13524] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.310547][T13678] netlink: 'syz.3.2318': attribute type 1 has an invalid length. [ 348.341290][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.348334][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.389932][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.393132][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.197590][T13696] __nla_validate_parse: 1 callbacks suppressed [ 349.197607][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2322'. [ 350.062278][ T5959] Bluetooth: hci4: command tx timeout [ 350.472210][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 350.673402][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 350.673413][ T40] audit: type=1326 audit(2000000065.460:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13724 comm="syz.1.2331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 350.683147][ T40] audit: type=1326 audit(2000000065.460:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13724 comm="syz.1.2331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 350.690262][ T40] audit: type=1326 audit(2000000065.460:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13724 comm="syz.1.2331" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 350.697837][ T40] audit: type=1326 audit(2000000065.460:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13724 comm="syz.1.2331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 350.705040][ T40] audit: type=1326 audit(2000000065.460:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13724 comm="syz.1.2331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 350.712256][ T40] audit: type=1326 audit(2000000065.460:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13724 comm="syz.1.2331" exe="/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 350.719243][ T40] audit: type=1326 audit(2000000065.460:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13724 comm="syz.1.2331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 350.725813][ T40] audit: type=1326 audit(2000000065.460:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13724 comm="syz.1.2331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 350.736304][T13727] input: syz0 as /devices/virtual/input/input8 [ 351.022263][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.025837][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.148450][T13745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2339'. [ 351.467950][ T5317] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 351.471242][ T5317] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 351.477399][ T5317] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 351.482540][ T5317] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 351.485521][ T5317] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 351.512373][ T9012] syz_tun (unregistering): left allmulticast mode [ 351.628668][T13755] wireguard0: entered promiscuous mode [ 351.630968][T13755] wireguard0: entered allmulticast mode [ 351.671702][T13751] lo speed is unknown, defaulting to 1000 [ 351.691544][T13765] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 351.746018][ T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.775085][T13751] chnl_net:caif_netlink_parms(): no params data found [ 351.835550][ T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.911576][ T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.924770][T13751] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.927132][T13751] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.929565][T13751] bridge_slave_0: entered allmulticast mode [ 351.932943][T13751] bridge_slave_0: entered promiscuous mode [ 351.936191][T13751] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.938601][T13751] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.941177][T13751] bridge_slave_1: entered allmulticast mode [ 351.945335][T13751] bridge_slave_1: entered promiscuous mode [ 351.986562][ T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.998761][T13751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.005441][T13751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.057198][T13751] team0: Port device team_slave_0 added [ 352.061921][T13751] team0: Port device team_slave_1 added [ 352.082271][ T5959] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 352.105730][T13751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.108994][T13751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.118478][T13751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.123939][T13751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.126326][T13751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.135458][T13751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.240794][T13751] hsr_slave_0: entered promiscuous mode [ 352.243127][T13751] hsr_slave_1: entered promiscuous mode [ 352.245267][T13751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.248375][T13751] Cannot create hsr debugfs directory [ 352.355161][ T13] erspan0 (unregistering): left allmulticast mode [ 352.382289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.387324][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.592416][ T13] bond0 (unregistering): left promiscuous mode [ 352.594950][ T13] bond0 (unregistering): Released all slaves [ 352.601315][ T13] bond1 (unregistering): Released all slaves [ 352.608177][ T13] bond2 (unregistering): Released all slaves [ 352.614735][ T13] bond3 (unregistering): Released all slaves [ 352.621075][ T13] bond4 (unregistering): Released all slaves [ 352.627857][ T13] bond5 (unregistering): Released all slaves [ 352.634401][ T13] bond6 (unregistering): Released all slaves [ 352.640867][ T13] bond7 (unregistering): Released all slaves [ 352.661741][ T13] bond8 (unregistering): Released all slaves [ 352.681268][ T13] bond9 (unregistering): Released all slaves [ 352.689153][ T13] bond10 (unregistering): Released all slaves [ 352.700617][ T13] bond11 (unregistering): Released all slaves [ 352.707401][ T13] bond12 (unregistering): Released all slaves [ 352.714027][ T13] bond13 (unregistering): Released all slaves [ 352.804479][ T13] bond14 (unregistering): Released all slaves [ 352.810832][ T13] bond15 (unregistering): Released all slaves [ 352.817137][ T13] bond16 (unregistering): Released all slaves [ 352.823684][ T13] bond17 (unregistering): Released all slaves [ 352.848986][T13782] wireguard0: entered promiscuous mode [ 352.882993][T13782] wireguard0: entered allmulticast mode [ 352.970824][T13791] wireguard0: entered promiscuous mode [ 352.978689][T13791] wireguard0: entered allmulticast mode [ 353.019759][ T13] tipc: Disabling bearer [ 353.023243][ T13] tipc: Left network mode [ 353.055513][ T13] IPVS: stopping backup sync thread 7083 ... [ 353.502281][ T5959] Bluetooth: hci3: command tx timeout [ 353.553742][ T13] dummy0: left promiscuous mode [ 353.612139][ T13] hsr_slave_0: left promiscuous mode [ 353.615571][ T13] hsr_slave_1: left promiscuous mode [ 353.637305][ T13] veth1_macvtap: left allmulticast mode [ 353.639771][ T13] veth1_macvtap: left promiscuous mode [ 353.642637][ T13] veth0_macvtap: left promiscuous mode [ 353.644572][ T13] veth1_vlan: left promiscuous mode [ 353.646336][ T13] veth0_vlan: left promiscuous mode [ 353.663873][ T1170] net_ratelimit: 3 callbacks suppressed [ 353.663884][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.668668][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.672003][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.675468][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.862367][T13832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2356'. [ 354.142104][ T5959] Bluetooth: hci4: command tx timeout [ 354.232308][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.235404][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.238740][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.241364][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.244139][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.802446][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 354.962210][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.012001][T13751] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 355.024529][T13751] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 355.038037][T13751] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 355.043760][T13751] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 355.060786][T13857] block device autoloading is deprecated and will be removed. [ 355.073427][T13857] syz.1.2367: attempt to access beyond end of device [ 355.073427][T13857] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 355.103975][T13751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.115777][T13751] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.120652][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.121033][T13868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.123507][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.133238][T13870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2369'. [ 355.139416][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.140360][T13870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2369'. [ 355.141739][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.174437][T13870] lo speed is unknown, defaulting to 1000 [ 355.296975][T13751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.322824][T13751] veth0_vlan: entered promiscuous mode [ 355.328598][T13751] veth1_vlan: entered promiscuous mode [ 355.343786][T13751] veth0_macvtap: entered promiscuous mode [ 355.347873][T13751] veth1_macvtap: entered promiscuous mode [ 355.358939][T13751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.375702][T13751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.383961][T13751] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.386853][T13751] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.390028][T13751] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.393485][T13751] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.463778][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.466817][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.484495][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.487891][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.593157][ T5959] Bluetooth: hci3: command tx timeout [ 355.713944][T13902] FAULT_INJECTION: forcing a failure. [ 355.713944][T13902] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 355.719491][T13902] CPU: 2 UID: 0 PID: 13902 Comm: syz.3.2340 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 355.719527][T13902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 355.719538][T13902] Call Trace: [ 355.719544][T13902] [ 355.719552][T13902] dump_stack_lvl+0x16c/0x1f0 [ 355.719580][T13902] should_fail_ex+0x512/0x640 [ 355.719607][T13902] _copy_to_user+0x32/0xd0 [ 355.719633][T13902] simple_read_from_buffer+0xcb/0x170 [ 355.719658][T13902] proc_fail_nth_read+0x197/0x270 [ 355.719679][T13902] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.719701][T13902] ? rw_verify_area+0xcf/0x680 [ 355.719721][T13902] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.719738][T13902] vfs_read+0x1e4/0xc60 [ 355.719762][T13902] ? fdget_pos+0x2a2/0x370 [ 355.719790][T13902] ? __pfx_vfs_read+0x10/0x10 [ 355.719810][T13902] ? find_held_lock+0x2b/0x80 [ 355.719831][T13902] ? __fget_files+0x20e/0x3c0 [ 355.719847][T13902] ? handle_mm_fault+0x1e0/0xd10 [ 355.719871][T13902] ksys_read+0x12a/0x250 [ 355.719890][T13902] ? __pfx_ksys_read+0x10/0x10 [ 355.719911][T13902] ? rcu_is_watching+0x12/0xc0 [ 355.719929][T13902] __do_fast_syscall_32+0x7c/0x3a0 [ 355.719953][T13902] do_fast_syscall_32+0x32/0x80 [ 355.719975][T13902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 355.719994][T13902] RIP: 0023:0xf7f82579 [ 355.720006][T13902] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 355.720022][T13902] RSP: 002b:00000000f5085590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 355.720038][T13902] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f5085620 [ 355.720048][T13902] RDX: 000000000000000f RSI: 00000000f7413ff4 RDI: 0000000000000000 [ 355.720058][T13902] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 355.720067][T13902] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 355.720076][T13902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.720098][T13902] [ 356.068557][T13912] block nbd3: shutting down sockets [ 357.001220][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2385'. [ 357.048416][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2385'. [ 357.208324][T13954] netlink: 'syz.2.2386': attribute type 1 has an invalid length. [ 357.232308][T13954] gretap1: entered promiscuous mode [ 357.236549][T13954] bond29: (slave gretap1): making interface the new active one [ 357.240187][T13954] bond29: (slave gretap1): Enslaving as an active interface with an up link [ 357.245450][T13954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2386'. [ 357.288815][T13957] overlayfs: failed to resolve './file0': -2 [ 357.383489][T13960] fuse: Bad value for 'group_id' [ 357.385626][T13960] fuse: Bad value for 'group_id' [ 357.662236][ T5959] Bluetooth: hci3: command tx timeout [ 357.712181][ T34] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 357.741643][T13972] kAFS: No cell specified [ 357.872103][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 357.875175][ T34] usb 6-1: config 0 has no interfaces? [ 357.877191][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 357.880240][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.888457][ T34] usb 6-1: config 0 descriptor?? [ 358.217934][ T838] usb 6-1: USB disconnect, device number 5 [ 358.792502][ T1170] net_ratelimit: 7 callbacks suppressed [ 358.792512][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.796908][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.800191][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.802537][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.078008][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2404'. [ 359.742197][ T5959] Bluetooth: hci3: command tx timeout [ 359.786752][T14017] netlink: 'syz.3.2406': attribute type 5 has an invalid length. [ 360.021887][T14024] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 360.038997][ T837] libceph: connect (1)[c::]:6789 error -101 [ 360.041064][ T837] libceph: mon0 (1)[c::]:6789 connect error [ 360.305527][ T837] libceph: connect (1)[c::]:6789 error -101 [ 360.316730][ T837] libceph: mon0 (1)[c::]:6789 connect error [ 360.565826][T14044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.601637][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2412'. [ 360.833110][ T837] libceph: connect (1)[c::]:6789 error -101 [ 360.835367][ T837] libceph: mon0 (1)[c::]:6789 connect error [ 360.854944][T14024] ceph: No mds server is up or the cluster is laggy [ 360.958604][T14050] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2414'. [ 360.962251][T14050] tmpfs: Unknown parameter 'grpquota…' [ 361.010822][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2417'. [ 361.056185][T14059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2417'. [ 361.137042][ T40] audit: type=1804 audit(2000000075.920:422): pid=14067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2420" name="/file0" dev="rootfs" ino=33405 res=1 errno=0 [ 361.143893][ T40] audit: type=1804 audit(2000000075.930:423): pid=14067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2420" name="/file0" dev="rootfs" ino=33405 res=1 errno=0 [ 361.154296][T14067] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1 [ 361.157069][T14067] ref_ctr increment failed for inode: 0x827d offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88804dbe9e00 [ 361.202806][T14071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.205637][T14071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.208412][T14071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.211050][T14071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.214378][T14071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.921342][T14105] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 363.252124][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2431'. [ 363.912371][ T1170] net_ratelimit: 2390 callbacks suppressed [ 363.912385][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.916837][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.919381][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.921974][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.261958][ T40] audit: type=1326 audit(2000000079.040:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14127 comm="syz.3.2439" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 364.269367][ T40] audit: type=1326 audit(2000000079.040:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14127 comm="syz.3.2439" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f82598 code=0x7ffc0000 [ 364.286062][ T40] audit: type=1326 audit(2000000079.040:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14127 comm="syz.3.2439" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f82598 code=0x7ffc0000 [ 364.293841][ T40] audit: type=1326 audit(2000000079.040:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14127 comm="syz.3.2439" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f82598 code=0x7ffc0000 [ 364.300368][ T40] audit: type=1326 audit(2000000079.040:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14127 comm="syz.3.2439" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 364.307825][ T40] audit: type=1326 audit(2000000079.040:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14127 comm="syz.3.2439" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 364.314566][ T40] audit: type=1326 audit(2000000079.040:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14127 comm="syz.3.2439" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f82598 code=0x7ffc0000 [ 364.321758][ T40] audit: type=1326 audit(2000000079.040:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14127 comm="syz.3.2439" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 364.561731][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.564423][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.567023][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.569371][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.942206][ T5959] Bluetooth: hci0: command tx timeout [ 365.019301][T14142] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 365.510926][T14146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2444'. [ 365.516291][T14146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2444'. [ 365.570480][T14146] lo speed is unknown, defaulting to 1000 [ 365.950418][ T61] hid-generic 0005:16C0:5505.0006: hidraw1: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 366.048406][T14170] siw: device registration error -23 [ 366.955671][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.970280][T14155] wireguard0: entered promiscuous mode [ 366.973505][T14155] wireguard0: entered allmulticast mode [ 367.032195][ T5959] Bluetooth: hci0: command tx timeout [ 367.206849][T14186] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2455'. [ 367.210768][T14186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2455'. [ 367.222429][T14186] lo speed is unknown, defaulting to 1000 [ 367.742200][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.105042][T14220] dlm: no locking on control device [ 368.109947][T14215] 9pnet_fd: Insufficient options for proto=fd [ 368.114409][T14215] overlayfs: failed to clone upperpath [ 368.320343][ T6330] IPVS: starting estimator thread 0... [ 368.422257][T14225] IPVS: using max 25 ests per chain, 60000 per kthread [ 369.284527][ T5317] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.293803][ T5317] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.297290][ T5317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.300702][ T5317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.304488][ T5317] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.416951][T14259] lo speed is unknown, defaulting to 1000 [ 369.456554][T14266] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 369.551809][T14273] PKCS8: Unsupported PKCS#8 version [ 369.573794][T14259] chnl_net:caif_netlink_parms(): no params data found [ 369.582176][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.584828][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.587414][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.590070][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.592661][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.595225][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.648060][T14259] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.650883][T14259] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.653608][T14259] bridge_slave_0: entered allmulticast mode [ 369.656526][T14259] bridge_slave_0: entered promiscuous mode [ 369.660094][T14259] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.663176][ T1137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.663298][T14259] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.665727][ T1137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.668103][T14259] bridge_slave_1: entered allmulticast mode [ 369.670511][ T1137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.670534][ T1137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.673201][T14259] bridge_slave_1: entered promiscuous mode [ 369.719131][T14259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.724527][T14259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.768074][T14259] team0: Port device team_slave_0 added [ 369.771813][T14259] team0: Port device team_slave_1 added [ 369.809542][T14259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.811801][T14259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.821726][T14259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.826221][T14259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.828486][T14259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.838175][T14259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.877486][T14259] hsr_slave_0: entered promiscuous mode [ 369.879701][T14259] hsr_slave_1: entered promiscuous mode [ 369.881721][T14259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.884331][T14259] Cannot create hsr debugfs directory [ 370.094284][T14259] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.106286][T14299] wg1 speed is unknown, defaulting to 1000 [ 370.109823][T14299] wg1 speed is unknown, defaulting to 1000 [ 370.112637][T14299] wg1 speed is unknown, defaulting to 1000 [ 370.154322][T14259] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.192824][ T6330] wg1 speed is unknown, defaulting to 1000 [ 370.194878][T14299] infiniband syz2: set active [ 370.196662][T14299] infiniband syz2: added wg1 [ 370.216220][T14299] RDS/IB: syz2: added [ 370.218234][T14299] smc: adding ib device syz2 with port count 1 [ 370.220308][T14299] smc: ib device syz2 port 1 has pnetid [ 370.233746][T14259] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.240063][ T6330] wg1 speed is unknown, defaulting to 1000 [ 370.243604][T14299] wg1 speed is unknown, defaulting to 1000 [ 370.275893][T14259] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.331499][T14299] wg1 speed is unknown, defaulting to 1000 [ 370.456448][T14299] wg1 speed is unknown, defaulting to 1000 [ 370.507399][T14259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 370.519028][T14259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 370.535650][T14259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 370.541906][T14259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 370.554515][T14299] wg1 speed is unknown, defaulting to 1000 [ 370.602338][T14259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.613195][T14259] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.618423][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.620658][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.637304][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.639549][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.659896][T14259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.663880][T14259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.763898][T14299] wg1 speed is unknown, defaulting to 1000 [ 370.816271][T14259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.843910][T14259] veth0_vlan: entered promiscuous mode [ 370.849187][T14259] veth1_vlan: entered promiscuous mode [ 370.869580][T14259] veth0_macvtap: entered promiscuous mode [ 370.878226][T14259] veth1_macvtap: entered promiscuous mode [ 370.888347][T14259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.897083][T14259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.901791][T14259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.904984][T14259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.907724][T14259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.910401][T14259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.947266][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.949736][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.961901][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.965996][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.993292][T14323] /dev/sr0: Can't open blockdev [ 371.065438][T14334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2492'. [ 371.219318][T11291] syz_tun (unregistering): left allmulticast mode [ 371.344882][ T5959] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 371.348801][ T5959] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 371.353910][ T5959] Bluetooth: hci0: command tx timeout [ 371.356649][ T5959] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 371.360530][ T5959] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 371.365088][ T5959] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 371.396921][T14346] lo speed is unknown, defaulting to 1000 [ 371.401106][T14346] wg1 speed is unknown, defaulting to 1000 [ 371.684756][T14346] chnl_net:caif_netlink_parms(): no params data found [ 372.091387][T14346] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.093705][T14346] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.095971][T14346] bridge_slave_0: entered allmulticast mode [ 372.100039][T14346] bridge_slave_0: entered promiscuous mode [ 372.109490][T14346] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.113423][T14346] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.116377][T14346] bridge_slave_1: entered allmulticast mode [ 372.120444][T14346] bridge_slave_1: entered promiscuous mode [ 372.165479][T14346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.172429][T14346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.214866][T14346] team0: Port device team_slave_0 added [ 372.219812][T14346] team0: Port device team_slave_1 added [ 372.272931][T14346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.275115][T14346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.323524][T14346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.328956][T14346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.331182][T14346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.339211][T14346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.345960][T14362] nbd: couldn't find device at index 59904 [ 372.350479][ T6021] IPVS: starting estimator thread 0... [ 372.420501][T14346] hsr_slave_0: entered promiscuous mode [ 372.424923][T14346] hsr_slave_1: entered promiscuous mode [ 372.427168][T14346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.429590][T14346] Cannot create hsr debugfs directory [ 372.452598][T14363] IPVS: using max 43 ests per chain, 103200 per kthread [ 372.585867][T14346] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.589215][T14346] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 372.692295][T14346] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.695507][T14346] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 372.781245][T14370] Cannot find del_set index 3 as target [ 372.784923][T14370] netlink: 'syz.0.2499': attribute type 11 has an invalid length. [ 372.787542][T14370] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2499'. [ 372.828751][T14346] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.833591][T14346] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 372.911915][T14346] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.916800][T14346] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 373.074542][T14346] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 373.079622][T14378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2500'. [ 373.080010][T14346] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.097094][T14346] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.115616][T14346] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 373.167544][T14391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2501'. [ 373.167618][T14346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.176628][T14391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2501'. [ 373.187310][T14346] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.197588][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.199914][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.208553][T14391] lo speed is unknown, defaulting to 1000 [ 373.210748][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.210845][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.225105][T14391] wg1 speed is unknown, defaulting to 1000 [ 373.392930][T14346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.422189][ T5317] Bluetooth: hci1: command tx timeout [ 373.425160][ T5317] Bluetooth: hci0: command tx timeout [ 373.454046][T14346] veth0_vlan: entered promiscuous mode [ 373.455724][T14408] 9pnet_fd: Insufficient options for proto=fd [ 373.458626][T14346] veth1_vlan: entered promiscuous mode [ 373.481503][T14346] veth0_macvtap: entered promiscuous mode [ 373.490435][T14346] veth1_macvtap: entered promiscuous mode [ 373.523180][T14346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.530478][T14346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.548795][T14346] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.558878][T14346] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.561590][T14346] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.564832][T14346] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.647371][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.649812][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.670224][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.673056][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.973644][T14432] Cannot find del_set index 3 as target [ 373.992410][T14432] netlink: 'syz.0.2507': attribute type 11 has an invalid length. [ 373.994909][T14432] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2507'. [ 374.164962][T14413] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 374.227240][T14439] FAULT_INJECTION: forcing a failure. [ 374.227240][T14439] name failslab, interval 1, probability 0, space 0, times 0 [ 374.231152][T14439] CPU: 3 UID: 0 PID: 14439 Comm: syz.3.2509 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 374.231168][T14439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 374.231174][T14439] Call Trace: [ 374.231178][T14439] [ 374.231182][T14439] dump_stack_lvl+0x16c/0x1f0 [ 374.231201][T14439] should_fail_ex+0x512/0x640 [ 374.231217][T14439] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 374.231234][T14439] should_failslab+0xc2/0x120 [ 374.231245][T14439] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 374.231260][T14439] ? __kernfs_new_node+0xd2/0x8e0 [ 374.231277][T14439] __kernfs_new_node+0xd2/0x8e0 [ 374.231293][T14439] ? __pfx___kernfs_new_node+0x10/0x10 [ 374.231310][T14439] ? find_held_lock+0x2b/0x80 [ 374.231322][T14439] ? kernfs_root+0xee/0x2a0 [ 374.231339][T14439] kernfs_new_node+0x13c/0x1e0 [ 374.231357][T14439] __kernfs_create_file+0x53/0x350 [ 374.231371][T14439] sysfs_add_file_mode_ns+0x207/0x3c0 [ 374.231389][T14439] sysfs_merge_group+0x1aa/0x340 [ 374.231404][T14439] ? __pfx_sysfs_merge_group+0x10/0x10 [ 374.231421][T14439] ? __pfx_dev_add_physical_location+0x10/0x10 [ 374.231433][T14439] ? bus_to_subsys+0x131/0x160 [ 374.231447][T14439] dpm_sysfs_add+0x237/0x280 [ 374.231458][T14439] device_add+0x9a6/0x1a70 [ 374.231470][T14439] ? __pfx_device_add+0x10/0x10 [ 374.231481][T14439] ? lockdep_init_map_type+0x5c/0x280 [ 374.231496][T14439] ? __init_waitqueue_head+0xca/0x150 [ 374.231509][T14439] tty_register_device_attr+0x38e/0x7c0 [ 374.231527][T14439] ? __pfx_tty_register_device_attr+0x10/0x10 [ 374.231548][T14439] rfcomm_dev_ioctl+0x16be/0x1ca0 [ 374.231563][T14439] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 374.231573][T14439] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 374.231592][T14439] rfcomm_sock_compat_ioctl+0xb0/0xd0 [ 374.231601][T14439] ? __pfx_rfcomm_sock_compat_ioctl+0x10/0x10 [ 374.231612][T14439] compat_sock_ioctl+0x176/0x730 [ 374.231626][T14439] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 374.231637][T14439] ? hook_file_ioctl_common+0x145/0x410 [ 374.231652][T14439] ? __fget_files+0x20e/0x3c0 [ 374.231665][T14439] ? __fput_deferred+0x450/0x480 [ 374.231679][T14439] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 374.231690][T14439] __ia32_compat_sys_ioctl+0x23f/0x370 [ 374.231704][T14439] __do_fast_syscall_32+0x7c/0x3a0 [ 374.231721][T14439] do_fast_syscall_32+0x32/0x80 [ 374.231737][T14439] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 374.231751][T14439] RIP: 0023:0xf7f82579 [ 374.231759][T14439] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 374.231769][T14439] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 374.231782][T14439] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400452c8 [ 374.231789][T14439] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.231795][T14439] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 374.231800][T14439] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 374.231806][T14439] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.231819][T14439] [ 374.325804][ C3] vkms_vblank_simulate: vblank timer overrun [ 374.368371][T14447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2510'. [ 374.371927][T14447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2510'. [ 374.405507][T14447] lo speed is unknown, defaulting to 1000 [ 374.408295][T14447] wg1 speed is unknown, defaulting to 1000 [ 374.555074][T14456] Scaler: ================= START STATUS ================= [ 374.557663][T14456] Scaler: ================== END STATUS ================== [ 374.632238][ C0] net_ratelimit: 8 callbacks suppressed [ 374.632261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.636995][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.640277][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.114824][T14441] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 375.259515][T14476] wireguard0: entered promiscuous mode [ 375.262530][T14476] wireguard0: entered allmulticast mode [ 375.432511][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.435024][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.437445][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.439895][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.449784][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.452363][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.454902][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.505107][ T5317] Bluetooth: hci1: command tx timeout [ 375.507931][ T5317] Bluetooth: hci0: command tx timeout [ 375.799411][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2519'. [ 375.804188][T14486] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 375.987546][T14494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2522'. [ 376.182665][T14504] Bluetooth: MGMT ver 1.23 [ 376.184347][T14482] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 376.651046][T14513] bad cache= option: nonwd [ 376.651046][T14513] internal : no [ 376.651046][T14513] type : aead [ 376.651046][T14513] async : no [ 376.651046][T14513] blocksize : 16 [ 376.651046][T14513] ivsize : 16 [ 376.651046][T14513] maxauthsize : 16 [ 376.651046][T14513] geniv : [ 376.651046][T14513] [ 376.651046][T14513] name : authencesn(cmac(aes) [ 376.651046][T14513] [ 376.663861][T14513] CIFS: VFS: bad cache= option: nonwd [ 376.663861][T14513] internal : no [ 376.663861][T14513] type : aead [ 376.663861][T14513] async : no [ 376.663861][T14513] blocksize : 16 [ 376.663861][T14513] ivsize : 16 [ 376.663861][T14513] maxauthsize : 16 [ 376.663861][T14513] geniv : [ 376.663861][T14513] [ 376.663861][T14513] name : authencesn(cmac(aes) [ 377.582125][ T5317] Bluetooth: hci0: command 0x0419 tx timeout [ 377.585355][ T5317] Bluetooth: hci1: command tx timeout [ 377.883050][ T5959] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 377.918740][T14500] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 377.986213][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.988862][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.750810][T14530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2531'. [ 378.764394][T14530] Cannot find del_set index 3 as target [ 378.848081][T14530] netlink: 'syz.1.2531': attribute type 11 has an invalid length. [ 378.850588][T14530] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2531'. [ 378.920729][T14531] wireguard0: entered promiscuous mode [ 378.922694][T14531] wireguard0: entered allmulticast mode [ 378.952138][ T1326] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 379.113386][ T1326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 379.121560][ T1326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.124526][ T1326] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 379.127069][ T1326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.130594][ T1326] usb 5-1: config 0 descriptor?? [ 379.216970][T14546] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 379.552260][ T1326] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 379.646127][T14567] netlink: 'syz.3.2537': attribute type 29 has an invalid length. [ 379.649158][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2537'. [ 379.674383][ T5959] Bluetooth: hci1: command tx timeout [ 379.763673][T14570] netlink: 'syz.3.2538': attribute type 1 has an invalid length. [ 379.799444][ T1326] usb 5-1: USB disconnect, device number 4 [ 379.803578][T14570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.090718][T14577] netlink: 'syz.2.2540': attribute type 1 has an invalid length. [ 380.095389][T14577] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2540'. [ 380.098310][T14577] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2540'. [ 380.151314][T14562] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 380.338247][T14582] dlm: no local IP address has been set [ 380.340935][T14582] dlm: cannot start dlm midcomms -107 [ 380.347022][T14582] net_ratelimit: 5 callbacks suppressed [ 380.347034][T14582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.356295][T14582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2542'. [ 380.362284][ T837] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 380.367012][T14582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2542'. [ 380.370099][T14582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2542'. [ 380.374675][T14582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2542'. [ 380.378214][T14582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2542'. [ 380.421732][T14586] netlink: 'syz.0.2544': attribute type 29 has an invalid length. [ 380.425165][T14586] FAULT_INJECTION: forcing a failure. [ 380.425165][T14586] name failslab, interval 1, probability 0, space 0, times 0 [ 380.430241][T14586] CPU: 0 UID: 0 PID: 14586 Comm: syz.0.2544 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 380.430275][T14586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 380.430285][T14586] Call Trace: [ 380.430291][T14586] [ 380.430297][T14586] dump_stack_lvl+0x16c/0x1f0 [ 380.430324][T14586] should_fail_ex+0x512/0x640 [ 380.430350][T14586] should_failslab+0xc2/0x120 [ 380.430363][T14586] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 380.430386][T14586] ? skb_clone+0x190/0x3f0 [ 380.430413][T14586] skb_clone+0x190/0x3f0 [ 380.430437][T14586] netlink_deliver_tap+0xabd/0xd30 [ 380.430462][T14586] ? __pfx_rtnl_bridge_getlink+0x10/0x10 [ 380.430486][T14586] netlink_dump+0xa3b/0xd00 [ 380.430504][T14586] ? __pfx_netlink_dump+0x10/0x10 [ 380.430535][T14586] __netlink_dump_start+0x6d6/0x990 [ 380.430553][T14586] ? __pfx_rtnl_bridge_getlink+0x10/0x10 [ 380.430576][T14586] rtnetlink_rcv_msg+0xb3e/0xe90 [ 380.430595][T14586] ? __pfx_rtnl_bridge_getlink+0x10/0x10 [ 380.430620][T14586] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 380.430643][T14586] ? __pfx_rtnl_dumpit+0x10/0x10 [ 380.430660][T14586] ? __pfx_rtnl_bridge_getlink+0x10/0x10 [ 380.430687][T14586] ? ref_tracker_free+0x37c/0x830 [ 380.430708][T14586] netlink_rcv_skb+0x155/0x420 [ 380.430724][T14586] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 380.430749][T14586] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.430774][T14586] ? netlink_deliver_tap+0x1ae/0xd30 [ 380.430803][T14586] netlink_unicast+0x58d/0x850 [ 380.430818][T14586] ? __pfx_netlink_unicast+0x10/0x10 [ 380.430842][T14586] netlink_sendmsg+0x8d1/0xdd0 [ 380.430862][T14586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.430880][T14586] ? __import_iovec+0x1dd/0x650 [ 380.430900][T14586] ____sys_sendmsg+0xa95/0xc70 [ 380.430916][T14586] ? can_free_glock+0xd0/0x190 [ 380.430941][T14586] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.430955][T14586] ? get_compat_msghdr+0x11a/0x170 [ 380.430990][T14586] ___sys_sendmsg+0x134/0x1d0 [ 380.431014][T14586] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.431037][T14586] ? find_held_lock+0x2b/0x80 [ 380.431058][T14586] __sys_sendmsg+0x16d/0x220 [ 380.431073][T14586] ? __pfx___sys_sendmsg+0x10/0x10 [ 380.431095][T14586] ? rcu_is_watching+0x12/0xc0 [ 380.431108][T14586] __do_fast_syscall_32+0x7c/0x3a0 [ 380.431125][T14586] do_fast_syscall_32+0x32/0x80 [ 380.431141][T14586] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 380.431154][T14586] RIP: 0023:0xf7f23579 [ 380.431162][T14586] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 380.431173][T14586] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 380.431184][T14586] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 380.431190][T14586] RDX: 0000000004008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 380.431196][T14586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 380.431202][T14586] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 380.431208][T14586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.431221][T14586] [ 380.512107][ T837] usb 8-1: Invalid ep0 maxpacket: 32 [ 380.693354][ T837] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 380.842726][ T837] usb 8-1: Invalid ep0 maxpacket: 32 [ 380.846794][ T837] usb usb8-port1: attempt power cycle [ 381.181171][T14600] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 381.183052][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.183161][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.183203][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.183242][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.184144][ T837] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 381.192250][ T1138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.202120][ T1138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.205500][ T1138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.208813][ T1138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.223883][ T837] usb 8-1: Invalid ep0 maxpacket: 32 [ 381.262267][ T5959] Bluetooth: hci0: command tx timeout [ 381.362175][ T837] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 381.383024][ T837] usb 8-1: Invalid ep0 maxpacket: 32 [ 381.385623][ T837] usb usb8-port1: unable to enumerate USB device [ 381.742231][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.152293][ T1326] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 382.292120][ T1326] usb 6-1: device descriptor read/64, error -71 [ 382.552315][ T1326] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 382.693095][ T1326] usb 6-1: device descriptor read/64, error -71 [ 382.814319][ T1326] usb usb6-port1: attempt power cycle [ 383.062877][T14577] ALSA: mixer_oss: invalid OSS volume '' [ 383.064953][T14577] ALSA: mixer_oss: invalid OSS volume 'ÊÒ±BËÂì;T`¿@$™¿¾E÷ócXÆMYdŸè,' [ 383.067700][T14577] ALSA: mixer_oss: invalid OSS volume 'b«Ž@hé#' [ 383.069811][T14577] ALSA: mixer_oss: invalid OSS volume '•‘h4¿–ÐX¬„S4v=0_>¤&äÏ' [ 383.073389][T14577] ALSA: mixer_oss: invalid OSS volume '|œ/"tj' [ 383.075810][T14577] ALSA: mixer_oss: invalid OSS volume '-z5²Šc^÷Jƒå6$̹' [ 383.078281][T14577] ALSA: mixer_oss: invalid OSS volume '0ÉóT„®°yòÝäî¬ó‰´ª‡—‚j–P&†³aït' [ 383.080966][T14577] ALSA: mixer_oss: invalid OSS volume '÷|á¥ó~‚\' [ 383.083168][T14577] ALSA: mixer_oss: invalid OSS volume '­É@ô^3bÉœ‘}˜ÔG$º#\Ä("/øoúLÛ' [ 383.085746][T14577] ALSA: mixer_oss: invalid OSS volume 'I ‹È:•þàâ' [ 383.087782][T14577] ALSA: mixer_oss: invalid OSS volume '%^Óvƒªhc¾GJPÿÃÐöø¬rª('â¯Q=' [ 383.090352][T14577] ALSA: mixer_oss: invalid OSS volume ' ‰Gjä;4÷ÊÃŒðÙÆzÜ3¸W´Ò¼0ÙF=%¾' [ 383.093108][T14577] ALSA: mixer_oss: invalid OSS volume ';4— å‚«4òfhÊ߇G¥ŽIב°Q÷5o“J' [ 383.105300][T14577] ALSA: mixer_oss: invalid OSS volume 'WöŒ’ló]Y1Õ-¬ž¾ÙJ<´¶³ªAÆ>ƒïo' [ 383.163057][ T1326] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 383.192834][ T1326] usb 6-1: device descriptor read/8, error -71 [ 383.210738][T14643] netlink: 'syz.2.2555': attribute type 29 has an invalid length. [ 383.453071][ T1326] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 383.482511][ T1326] usb 6-1: device descriptor read/8, error -71 [ 383.592291][ T1326] usb usb6-port1: unable to enumerate USB device [ 384.282195][ T1326] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 384.412194][ T1326] usb 6-1: device descriptor read/64, error -71 [ 384.672138][ T1326] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 385.022020][T14688] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 385.030325][ T1142] Bluetooth: hci2: Frame reassembly failed (-84) [ 385.103688][T14692] FAULT_INJECTION: forcing a failure. [ 385.103688][T14692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.109569][T14692] CPU: 1 UID: 0 PID: 14692 Comm: syz.2.2564 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 385.109605][T14692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 385.109616][T14692] Call Trace: [ 385.109639][T14692] [ 385.109647][T14692] dump_stack_lvl+0x16c/0x1f0 [ 385.109757][T14692] should_fail_ex+0x512/0x640 [ 385.109809][T14692] _copy_from_user+0x2e/0xd0 [ 385.109842][T14692] get_compat_msghdr+0xa7/0x170 [ 385.109869][T14692] ? __pfx_get_compat_msghdr+0x10/0x10 [ 385.109898][T14692] ? __lock_acquire+0x622/0x1c90 [ 385.109927][T14692] ___sys_recvmsg+0x191/0x1a0 [ 385.109953][T14692] ? __pfx____sys_recvmsg+0x10/0x10 [ 385.109981][T14692] ? find_held_lock+0x2b/0x80 [ 385.110007][T14692] ? __pfx___might_resched+0x10/0x10 [ 385.110033][T14692] do_recvmmsg+0x55d/0x750 [ 385.110062][T14692] ? __pfx_do_recvmmsg+0x10/0x10 [ 385.110083][T14692] ? trace_sched_exit_tp+0xde/0x130 [ 385.110121][T14692] ? __pfx___schedule+0x10/0x10 [ 385.110143][T14692] ? __fget_files+0x20e/0x3c0 [ 385.110170][T14692] __sys_recvmmsg+0x21c/0x280 [ 385.110195][T14692] ? __pfx___sys_recvmmsg+0x10/0x10 [ 385.110228][T14692] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 385.110245][T14692] ? lockdep_hardirqs_on+0x7c/0x110 [ 385.110269][T14692] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 385.110294][T14692] __do_fast_syscall_32+0x7c/0x3a0 [ 385.110323][T14692] do_fast_syscall_32+0x32/0x80 [ 385.110349][T14692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 385.110371][T14692] RIP: 0023:0xf7ff6579 [ 385.110386][T14692] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 385.110402][T14692] RSP: 002b:00000000f50d455c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 385.110418][T14692] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800005c0 [ 385.110430][T14692] RDX: 000000000000026c RSI: 0000000000000000 RDI: 0000000000000000 [ 385.110440][T14692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 385.110449][T14692] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 385.110458][T14692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 385.110482][T14692] [ 385.483296][T14695] input: syz1 as /devices/virtual/input/input9 [ 385.675507][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 386.222260][ C2] net_ratelimit: 3 callbacks suppressed [ 386.222277][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.227284][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.230019][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.749353][T14722] FAULT_INJECTION: forcing a failure. [ 386.749353][T14722] name failslab, interval 1, probability 0, space 0, times 0 [ 386.754254][T14722] CPU: 3 UID: 0 PID: 14722 Comm: syz.3.2572 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 386.754270][T14722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 386.754276][T14722] Call Trace: [ 386.754280][T14722] [ 386.754284][T14722] dump_stack_lvl+0x16c/0x1f0 [ 386.754303][T14722] should_fail_ex+0x512/0x640 [ 386.754319][T14722] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 386.754336][T14722] should_failslab+0xc2/0x120 [ 386.754347][T14722] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 386.754362][T14722] ? security_file_alloc+0x34/0x2b0 [ 386.754379][T14722] security_file_alloc+0x34/0x2b0 [ 386.754392][T14722] init_file+0x93/0x4c0 [ 386.754403][T14722] alloc_empty_file+0x73/0x1e0 [ 386.754414][T14722] path_openat+0xda/0x2cb0 [ 386.754428][T14722] ? do_fast_syscall_32+0x32/0x80 [ 386.754443][T14722] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 386.754461][T14722] ? __pfx_path_openat+0x10/0x10 [ 386.754479][T14722] do_filp_open+0x20b/0x470 [ 386.754494][T14722] ? __pfx_do_filp_open+0x10/0x10 [ 386.754517][T14722] ? _raw_spin_unlock+0x28/0x50 [ 386.754530][T14722] ? alloc_fd+0x471/0x7d0 [ 386.754548][T14722] do_sys_openat2+0x11b/0x1d0 [ 386.754560][T14722] ? __pfx_do_sys_openat2+0x10/0x10 [ 386.754572][T14722] ? __fget_files+0x20e/0x3c0 [ 386.754589][T14722] __ia32_compat_sys_openat+0x16d/0x210 [ 386.754601][T14722] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 386.754614][T14722] ? ksys_write+0x1ac/0x250 [ 386.754630][T14722] ? rcu_is_watching+0x12/0xc0 [ 386.754643][T14722] __do_fast_syscall_32+0x7c/0x3a0 [ 386.754660][T14722] do_fast_syscall_32+0x32/0x80 [ 386.754676][T14722] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 386.754688][T14722] RIP: 0023:0xf7f82579 [ 386.754697][T14722] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 386.754707][T14722] RSP: 002b:00000000f50a6490 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 386.754717][T14722] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f50a64e0 [ 386.754723][T14722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7413ff4 [ 386.754729][T14722] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 386.754735][T14722] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 386.754744][T14722] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 386.754763][T14722] [ 386.915409][T14724] block nbd0: shutting down sockets [ 386.926842][T14727] __nla_validate_parse: 17 callbacks suppressed [ 386.926856][T14727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2573'. [ 386.944239][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.947628][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.950937][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.954492][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.958024][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.961446][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.965006][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.075349][ T40] kauditd_printk_skb: 153 callbacks suppressed [ 387.075366][ T40] audit: type=1800 audit(2000000101.860:585): pid=14731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2575" name="file0" dev="9p" ino=36047789 res=0 errno=0 [ 387.102672][ T5959] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 387.103260][T14348] Bluetooth: hci2: command 0x1003 tx timeout [ 387.458954][T14744] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2581'. [ 387.463945][T14744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2581'. [ 387.468155][T14744] FAULT_INJECTION: forcing a failure. [ 387.468155][T14744] name failslab, interval 1, probability 0, space 0, times 0 [ 387.472200][T14744] CPU: 0 UID: 0 PID: 14744 Comm: syz.3.2581 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 387.472215][T14744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 387.472221][T14744] Call Trace: [ 387.472225][T14744] [ 387.472229][T14744] dump_stack_lvl+0x16c/0x1f0 [ 387.472248][T14744] should_fail_ex+0x512/0x640 [ 387.472263][T14744] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 387.472281][T14744] should_failslab+0xc2/0x120 [ 387.472291][T14744] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 387.472307][T14744] ? __alloc_skb+0x2b2/0x380 [ 387.472324][T14744] __alloc_skb+0x2b2/0x380 [ 387.472338][T14744] ? __pfx___alloc_skb+0x10/0x10 [ 387.472354][T14744] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 387.472367][T14744] netlink_alloc_large_skb+0x69/0x130 [ 387.472379][T14744] netlink_sendmsg+0x6a1/0xdd0 [ 387.472391][T14744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.472403][T14744] ? __import_iovec+0x1dd/0x650 [ 387.472415][T14744] ____sys_sendmsg+0xa95/0xc70 [ 387.472429][T14744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.472440][T14744] ? get_compat_msghdr+0x11a/0x170 [ 387.472462][T14744] ___sys_sendmsg+0x134/0x1d0 [ 387.472478][T14744] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.472499][T14744] ? find_held_lock+0x2b/0x80 [ 387.472519][T14744] __sys_sendmsg+0x16d/0x220 [ 387.472534][T14744] ? __pfx___sys_sendmsg+0x10/0x10 [ 387.472555][T14744] ? rcu_is_watching+0x12/0xc0 [ 387.472568][T14744] __do_fast_syscall_32+0x7c/0x3a0 [ 387.472585][T14744] do_fast_syscall_32+0x32/0x80 [ 387.472600][T14744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 387.472613][T14744] RIP: 0023:0xf7f82579 [ 387.472622][T14744] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 387.472632][T14744] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 387.472642][T14744] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 387.472648][T14744] RDX: 0000000000048800 RSI: 0000000000000000 RDI: 0000000000000000 [ 387.472654][T14744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 387.472659][T14744] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 387.472665][T14744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 387.472677][T14744] [ 387.510715][T14746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2582'. [ 387.563170][T14749] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2583'. [ 387.563397][T14749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2583'. [ 387.618163][T14755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2585'. [ 387.696604][T14764] vlan2: entered promiscuous mode [ 387.751704][T14764] vlan2: entered allmulticast mode [ 387.754294][T14764] hsr_slave_1: entered allmulticast mode [ 387.768880][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2589'. [ 388.707283][T14778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2593'. [ 388.781210][T14780] Bluetooth: MGMT ver 1.23 [ 388.909501][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2597'. [ 389.868010][T14815] FAULT_INJECTION: forcing a failure. [ 389.868010][T14815] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 389.872630][T14815] CPU: 2 UID: 0 PID: 14815 Comm: syz.3.2602 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 389.872645][T14815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 389.872652][T14815] Call Trace: [ 389.872656][T14815] [ 389.872660][T14815] dump_stack_lvl+0x16c/0x1f0 [ 389.872679][T14815] should_fail_ex+0x512/0x640 [ 389.872696][T14815] should_fail_alloc_page+0xe7/0x130 [ 389.872708][T14815] prepare_alloc_pages+0x3c2/0x610 [ 389.872724][T14815] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 389.872742][T14815] ? __lock_acquire+0x622/0x1c90 [ 389.872760][T14815] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 389.872784][T14815] ? __lock_acquire+0x622/0x1c90 [ 389.872797][T14815] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 389.872818][T14815] ? policy_nodemask+0xea/0x4e0 [ 389.872829][T14815] alloc_pages_mpol+0x1fb/0x550 [ 389.872840][T14815] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 389.872851][T14815] ? is_bpf_text_address+0x8a/0x1a0 [ 389.872867][T14815] folio_alloc_mpol_noprof+0x36/0x2f0 [ 389.872880][T14815] vma_alloc_folio_noprof+0xed/0x1e0 [ 389.872892][T14815] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 389.872904][T14815] ? rcu_read_unlock+0x2d/0xb0 [ 389.872922][T14815] do_wp_page+0x1136/0x4f20 [ 389.872937][T14815] ? __pfx_do_wp_page+0x10/0x10 [ 389.872950][T14815] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 389.872970][T14815] __handle_mm_fault+0x2223/0x5490 [ 389.872987][T14815] ? __pfx___handle_mm_fault+0x10/0x10 [ 389.873000][T14815] ? __pfx_mt_find+0x10/0x10 [ 389.873017][T14815] ? find_vma+0xbf/0x140 [ 389.873026][T14815] ? __pfx_find_vma+0x10/0x10 [ 389.873038][T14815] handle_mm_fault+0x589/0xd10 [ 389.873052][T14815] ? __pkru_allows_pkey+0x51/0xb0 [ 389.873069][T14815] do_user_addr_fault+0x7a6/0x1370 [ 389.873085][T14815] ? rcu_is_watching+0x12/0xc0 [ 389.873098][T14815] exc_page_fault+0x5c/0xb0 [ 389.873114][T14815] asm_exc_page_fault+0x26/0x30 [ 389.873124][T14815] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 389.873140][T14815] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 11 5b 03 00 90 90 90 90 90 90 90 90 90 90 [ 389.873150][T14815] RSP: 0018:ffffc9000c83f9b8 EFLAGS: 00050293 [ 389.873159][T14815] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000800055d8 [ 389.873165][T14815] RDX: ffff888024430000 RSI: ffffffff89528a00 RDI: 0000000000000005 [ 389.873172][T14815] RBP: ffffc9000c83fd58 R08: 0000000000000005 R09: 0000000000000000 [ 389.873178][T14815] R10: 0000000080000300 R11: 0000000000000001 R12: 0000000000000000 [ 389.873183][T14815] R13: 00000000800055c0 R14: ffffc9000c83fd9c R15: 0000000080000300 [ 389.873194][T14815] ? ____sys_recvmsg+0x3b0/0x6b0 [ 389.873208][T14815] ____sys_recvmsg+0x3bb/0x6b0 [ 389.873221][T14815] ? __pfx_____sys_recvmsg+0x10/0x10 [ 389.873231][T14815] ? import_iovec+0x86/0xb0 [ 389.873246][T14815] ? __lock_acquire+0x622/0x1c90 [ 389.873262][T14815] ___sys_recvmsg+0x114/0x1a0 [ 389.873278][T14815] ? __pfx____sys_recvmsg+0x10/0x10 [ 389.873295][T14815] ? find_held_lock+0x2b/0x80 [ 389.873313][T14815] do_recvmmsg+0x55d/0x750 [ 389.873330][T14815] ? __pfx_do_recvmmsg+0x10/0x10 [ 389.873355][T14815] ? __fget_files+0x20e/0x3c0 [ 389.873368][T14815] ? handle_mm_fault+0x1e0/0xd10 [ 389.873382][T14815] __sys_recvmmsg+0x21c/0x280 [ 389.873398][T14815] ? __pfx___sys_recvmmsg+0x10/0x10 [ 389.873415][T14815] ? __pfx_ksys_write+0x10/0x10 [ 389.873432][T14815] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 389.873442][T14815] ? lockdep_hardirqs_on+0x7c/0x110 [ 389.873457][T14815] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 389.873473][T14815] __do_fast_syscall_32+0x7c/0x3a0 [ 389.873490][T14815] do_fast_syscall_32+0x32/0x80 [ 389.873506][T14815] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 389.873518][T14815] RIP: 0023:0xf7f82579 [ 389.873526][T14815] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 389.873536][T14815] RSP: 002b:00000000f506455c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 389.873545][T14815] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800055c0 [ 389.873551][T14815] RDX: 000000000400023c RSI: 0000000000000300 RDI: 0000000000000000 [ 389.873557][T14815] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 389.873563][T14815] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 389.873568][T14815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 389.873597][T14815] [ 390.762746][T14837] JFS: discard option not supported on device [ 390.766574][T14837] Mount JFS Failure: -22 [ 390.768033][T14837] jfs_mount failed w/return code = -22 [ 391.182274][T14841] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 391.185134][T14841] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 391.189608][T14845] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 391.191385][T14841] vhci_hcd vhci_hcd.0: Device attached [ 391.191668][T14845] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 391.196268][T14843] usbip_core: unknown command [ 391.197595][T14845] vhci_hcd vhci_hcd.0: Device attached [ 391.198538][T14843] vhci_hcd: unknown pdu 774857321 [ 391.198551][T14843] usbip_core: unknown command [ 391.199522][ T46] vhci_hcd: stop threads [ 391.207334][ T46] vhci_hcd: release socket [ 391.209002][ T46] vhci_hcd: disconnect device [ 391.215072][T14846] usbip_core: unknown command [ 391.216956][T14846] vhci_hcd: unknown pdu 774857321 [ 391.218730][T14846] usbip_core: unknown command [ 391.221415][ T46] vhci_hcd: stop threads [ 391.223275][ T46] vhci_hcd: release socket [ 391.227509][ T46] vhci_hcd: disconnect device [ 391.283801][T14848] team0: No ports can be present during mode change [ 391.462429][T14848] team0 (unregistering): Port device team_slave_0 removed [ 391.467820][T14848] team0 (unregistering): Port device team_slave_1 removed [ 391.496243][T14849] team0: No ports can be present during mode change [ 391.626269][T14851] team0 (unregistering): Port device team_slave_0 removed [ 391.639561][T14851] team0 (unregistering): Port device team_slave_1 removed [ 392.622311][ C3] net_ratelimit: 5 callbacks suppressed [ 392.622323][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.626329][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.707369][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.709762][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.712205][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.714831][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.721613][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.724749][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.727824][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.730967][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.301663][T14854] FAULT_INJECTION: forcing a failure. [ 393.301663][T14854] name failslab, interval 1, probability 0, space 0, times 0 [ 393.313720][T14854] CPU: 3 UID: 0 PID: 14854 Comm: syz.2.2612 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 393.313747][T14854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 393.313753][T14854] Call Trace: [ 393.313758][T14854] [ 393.313762][T14854] dump_stack_lvl+0x16c/0x1f0 [ 393.313781][T14854] should_fail_ex+0x512/0x640 [ 393.313797][T14854] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 393.313817][T14854] should_failslab+0xc2/0x120 [ 393.313828][T14854] __kmalloc_cache_noprof+0x6a/0x3e0 [ 393.313841][T14854] ? binder_get_thread+0x1eb/0x8c0 [ 393.313858][T14854] ? binder_get_thread+0x225/0x8c0 [ 393.313875][T14854] ? __pfx_binder_ioctl+0x10/0x10 [ 393.313886][T14854] binder_get_thread+0x225/0x8c0 [ 393.313903][T14854] ? rcu_is_watching+0x12/0xc0 [ 393.313915][T14854] ? __pfx_binder_ioctl+0x10/0x10 [ 393.313926][T14854] binder_ioctl+0x20f/0x72c0 [ 393.313939][T14854] ? find_held_lock+0x2b/0x80 [ 393.313950][T14854] ? tomoyo_path_number_perm+0x295/0x580 [ 393.313965][T14854] ? tomoyo_path_number_perm+0x18d/0x580 [ 393.313977][T14854] ? lockdep_hardirqs_on+0x14/0x110 [ 393.313992][T14854] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 393.314005][T14854] ? __pfx_binder_ioctl+0x10/0x10 [ 393.314016][T14854] ? do_vfs_ioctl+0x523/0x1a60 [ 393.314029][T14854] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 393.314049][T14854] ? find_held_lock+0x2b/0x80 [ 393.314060][T14854] ? hook_file_ioctl_common+0x145/0x410 [ 393.314074][T14854] ? __fget_files+0x20e/0x3c0 [ 393.314087][T14854] ? __fput_deferred+0x450/0x480 [ 393.314099][T14854] ? __pfx_binder_ioctl+0x10/0x10 [ 393.314109][T14854] compat_ptr_ioctl+0x6e/0xa0 [ 393.314120][T14854] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 393.314132][T14854] __ia32_compat_sys_ioctl+0x23f/0x370 [ 393.314146][T14854] __do_fast_syscall_32+0x7c/0x3a0 [ 393.314163][T14854] do_fast_syscall_32+0x32/0x80 [ 393.314179][T14854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 393.314192][T14854] RIP: 0023:0xf7ff6579 [ 393.314212][T14854] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 393.314223][T14854] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 393.314233][T14854] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 393.314240][T14854] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 393.314246][T14854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 393.314251][T14854] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 393.314257][T14854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 393.314270][T14854] [ 393.317241][T14854] binder: 14853:14854 ioctl c0306201 80000280 returned -12 [ 393.531424][T14859] overlayfs: failed to resolve './file1': -2 [ 394.010479][T14932] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 394.021368][T14915] Bluetooth: hci2: Frame reassembly failed (-84) [ 394.138616][ T40] audit: type=1326 audit(2000000108.920:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.1.2618" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 394.151126][ T40] audit: type=1326 audit(2000000108.920:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.1.2618" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f525a7 code=0x7ffc0000 [ 394.160175][ T40] audit: type=1326 audit(2000000108.920:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.1.2618" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 394.167011][ T40] audit: type=1326 audit(2000000108.920:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.1.2618" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f525a7 code=0x7ffc0000 [ 394.174247][ T40] audit: type=1326 audit(2000000108.920:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.1.2618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 394.181125][ T40] audit: type=1326 audit(2000000108.920:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.1.2618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 394.189101][ T40] audit: type=1326 audit(2000000108.930:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.1.2618" exe="/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 394.219361][ T40] audit: type=1326 audit(2000000108.980:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.1.2618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 394.543918][T14950] binder: 14949:14950 ioctl c0306201 80000380 returned -14 [ 394.617245][T14954] syz.3.2625: vmalloc error: size 16384, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 394.625398][T14954] CPU: 2 UID: 0 PID: 14954 Comm: syz.3.2625 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 394.625414][T14954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 394.625420][T14954] Call Trace: [ 394.625424][T14954] [ 394.625428][T14954] dump_stack_lvl+0x16c/0x1f0 [ 394.625448][T14954] warn_alloc+0x248/0x3a0 [ 394.625465][T14954] ? __pfx_warn_alloc+0x10/0x10 [ 394.625481][T14954] ? alloc_pages_mpol+0x25a/0x550 [ 394.625492][T14954] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 394.625502][T14954] ? trace_kmalloc+0x2b/0xd0 [ 394.625516][T14954] __vmalloc_node_range_noprof+0x11d4/0x14b0 [ 394.625556][T14954] ? kernel_clone+0xfc/0x960 [ 394.625583][T14954] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 394.625601][T14954] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 394.625623][T14954] ? kernel_clone+0xfc/0x960 [ 394.625635][T14954] __vmalloc_node_noprof+0xad/0xf0 [ 394.625648][T14954] ? kernel_clone+0xfc/0x960 [ 394.625662][T14954] copy_process+0x2c70/0x7650 [ 394.625681][T14954] ? __pfx_copy_process+0x10/0x10 [ 394.625697][T14954] ? _copy_from_user+0x59/0xd0 [ 394.625715][T14954] kernel_clone+0xfc/0x960 [ 394.625727][T14954] ? get_pid_task+0xfc/0x250 [ 394.625748][T14954] ? __pfx_kernel_clone+0x10/0x10 [ 394.625768][T14954] __do_sys_clone3+0x212/0x290 [ 394.625781][T14954] ? __pfx___do_sys_clone3+0x10/0x10 [ 394.625801][T14954] ? __fget_files+0x20e/0x3c0 [ 394.625814][T14954] ? handle_mm_fault+0x1e0/0xd10 [ 394.625834][T14954] ? rcu_is_watching+0x12/0xc0 [ 394.625848][T14954] __do_fast_syscall_32+0x7c/0x3a0 [ 394.625865][T14954] do_fast_syscall_32+0x32/0x80 [ 394.625881][T14954] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 394.625894][T14954] RIP: 0023:0xf7f82579 [ 394.625903][T14954] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 394.625913][T14954] RSP: 002b:00000000f50a642c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 394.625923][T14954] RAX: ffffffffffffffda RBX: 00000000f50a6460 RCX: 0000000000000058 [ 394.625930][T14954] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 394.625935][T14954] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 394.625941][T14954] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 394.625947][T14954] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 394.625959][T14954] [ 394.625963][T14954] Mem-Info: [ 394.703917][T14954] active_anon:7417 inactive_anon:63 isolated_anon:100 [ 394.703917][T14954] active_file:9621 inactive_file:14858 isolated_file:50 [ 394.703917][T14954] unevictable:1769 dirty:510 writeback:0 [ 394.703917][T14954] slab_reclaimable:6306 slab_unreclaimable:67975 [ 394.703917][T14954] mapped:26793 shmem:5206 pagetables:974 [ 394.703917][T14954] sec_pagetables:320 bounce:0 [ 394.703917][T14954] kernel_misc_reclaimable:0 [ 394.703917][T14954] free:55137 free_pcp:12846 free_cma:0 [ 394.717800][T14954] Node 0 active_anon:480kB inactive_anon:252kB active_file:324kB inactive_file:16kB unevictable:3540kB isolated(anon):0kB isolated(file):0kB mapped:14516kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8696kB pagetables:1492kB sec_pagetables:1144kB all_unreclaimable? yes Balloon:0kB [ 394.727863][T14954] Node 1 active_anon:29088kB inactive_anon:0kB active_file:38260kB inactive_file:59316kB unevictable:3536kB isolated(anon):500kB isolated(file):100kB mapped:92556kB dirty:2036kB writeback:0kB shmem:17288kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8292kB pagetables:2404kB sec_pagetables:136kB all_unreclaimable? no Balloon:0kB [ 394.738572][T14954] Node 0 DMA free:1972kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:292kB local_pcp:0kB free_cma:0kB [ 394.747764][T14954] lowmem_reserve[]: 0 288 288 288 288 [ 394.749490][T14954] Node 0 DMA32 free:21292kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:4096KB free_highatomic:1776KB active_anon:480kB inactive_anon:252kB active_file:324kB inactive_file:16kB unevictable:3540kB writepending:4kB present:1032196kB managed:295892kB mlocked:0kB bounce:0kB free_pcp:11108kB local_pcp:2580kB free_cma:0kB [ 394.759411][T14954] lowmem_reserve[]: 0 0 0 0 0 [ 394.760939][T14954] Node 1 DMA32 free:203072kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28288kB inactive_anon:0kB active_file:38060kB inactive_file:59316kB unevictable:3536kB writepending:2036kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:33560kB local_pcp:572kB free_cma:0kB [ 394.771169][T14954] lowmem_reserve[]: 0 0 0 0 0 [ 394.773168][T14954] Node 0 DMA: 1*4kB (U) 0*8kB 7*16kB (UM) 2*32kB (UM) 0*64kB 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 1972kB [ 394.777506][T14954] Node 0 DMA32: 451*4kB (UMH) 164*8kB (UMEH) 78*16kB (UMEH) 156*32kB (UMEH) 81*64kB (UMEH) 27*128kB (UMEH) 9*256kB (UMH) 2*512kB (MH) 0*1024kB 0*2048kB 0*4096kB = 21324kB [ 394.783095][T14954] Node 1 DMA32: 2404*4kB (UME) 857*8kB (UME) 817*16kB (UME) 1171*32kB (UME) 661*64kB (UME) 158*128kB (UME) 58*256kB (UME) 36*512kB (UME) 16*1024kB (UM) 8*2048kB (UME) 2*4096kB (M) = 203784kB [ 394.788874][T14954] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 394.791798][T14954] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 394.794881][T14954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 394.797817][T14954] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 394.800654][T14954] 29977 total pagecache pages [ 394.802326][T14954] 269 pages in swap cache [ 394.803694][T14954] Free swap = 122052kB [ 394.804989][T14954] Total swap = 124996kB [ 394.806297][T14954] 524155 pages RAM [ 394.807500][T14954] 0 pages HighMem/MovableOnly [ 394.808955][T14954] 209271 pages reserved [ 394.810261][T14954] 0 pages cma reserved [ 394.839913][T14958] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 394.842077][T14958] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 394.844976][T14958] vhci_hcd vhci_hcd.0: Device attached [ 394.845051][T14959] vhci_hcd: connection closed [ 394.849353][T14912] vhci_hcd: stop threads [ 394.864074][T14912] vhci_hcd: release socket [ 394.865583][T14912] vhci_hcd: disconnect device [ 394.872348][T14963] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 394.874462][T14963] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 394.877580][T14963] vhci_hcd vhci_hcd.0: Device attached [ 394.880139][T14964] usbip_core: unknown command [ 394.881712][T14964] vhci_hcd: unknown pdu 774857321 [ 394.883615][T14964] usbip_core: unknown command [ 394.885466][T14912] vhci_hcd: stop threads [ 394.886910][T14912] vhci_hcd: release socket [ 394.889583][T14912] vhci_hcd: disconnect device [ 394.948476][T14966] team0: No ports can be present during mode change [ 394.952238][T14966] __nla_validate_parse: 4 callbacks suppressed [ 394.952247][T14966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2626'. [ 395.034323][T14969] netlink: 'syz.0.2627': attribute type 9 has an invalid length. [ 395.042774][T14969] netlink: 'syz.0.2627': attribute type 7 has an invalid length. [ 395.045121][T14969] netlink: 'syz.0.2627': attribute type 8 has an invalid length. [ 395.048015][T14969] netlink: 'syz.0.2627': attribute type 9 has an invalid length. [ 395.050501][T14969] netlink: 'syz.0.2627': attribute type 7 has an invalid length. [ 395.058766][T14969] netlink: 'syz.0.2627': attribute type 8 has an invalid length. [ 395.061667][T14969] netlink: 'syz.0.2627': attribute type 9 has an invalid length. [ 395.081512][T14969] netlink: 'syz.0.2627': attribute type 7 has an invalid length. [ 395.093595][T14969] netlink: 'syz.0.2627': attribute type 8 has an invalid length. [ 395.108988][T14969] netlink: 'syz.0.2627': attribute type 9 has an invalid length. [ 395.269212][T14966] team0 (unregistering): Port device team_slave_0 removed [ 395.300236][T14966] team0 (unregistering): Port device team_slave_1 removed [ 395.453937][T14970] syz.0.2627 (14970): drop_caches: 1 [ 395.496221][T14970] syz.0.2627 (14970): drop_caches: 1 [ 396.062397][T14348] Bluetooth: hci2: command 0x1003 tx timeout [ 396.067400][ T5959] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 396.801545][T14990] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 397.010264][T14994] binder: 14992:14994 ioctl 8b26 80000040 returned -22 [ 397.822568][T14928] net_ratelimit: 3 callbacks suppressed [ 397.822581][T14928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.827381][T14928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.830027][T14928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.832710][T14928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.462125][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.465475][T14910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.468178][T14910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.470799][T14910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.473463][T14910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.599355][T15019] ------------[ cut here ]------------ [ 398.601435][T15019] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7) [ 398.607273][T15019] WARNING: CPU: 3 PID: 15019 at drivers/net/wireless/virtual/mac80211_hwsim.c:2650 mac80211_hwsim_sta_rc_update+0x60b/0x850 [ 398.612162][T15019] Modules linked in: [ 398.613759][T15019] CPU: 3 UID: 0 PID: 15019 Comm: syz.1.2641 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 398.619159][T15019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 398.622783][T15019] RIP: 0010:mac80211_hwsim_sta_rc_update+0x60b/0x850 [ 398.624971][T15019] Code: 8b 44 24 20 89 da 48 c7 c7 e0 5b 6b 8c 44 8b 89 a8 01 00 00 41 54 48 8d b0 72 04 00 00 41 55 44 8b 44 24 14 e8 16 50 74 fa 90 <0f> 0b 90 90 58 5a e9 36 fc ff ff e8 75 ff b4 fa e8 30 12 7e 04 31 [ 398.631018][T15019] RSP: 0018:ffffc9000707f198 EFLAGS: 00010286 [ 398.633158][T15019] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9003112b000 [ 398.636128][T15019] RDX: 0000000000080000 RSI: ffffffff817ab115 RDI: 0000000000000001 [ 398.639414][T15019] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 398.642579][T15019] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000007 [ 398.645202][T15019] R13: 000000000000000a R14: ffff88806cfa5020 R15: ffff8880243430a0 [ 398.647704][T15019] FS: 0000000000000000(0000) GS:ffff888097820000(0063) knlGS:00000000f5076b40 [ 398.650449][T15019] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 398.652556][T15019] CR2: 00000000f73ab24c CR3: 0000000064d77000 CR4: 0000000000352ef0 [ 398.655253][T15019] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 398.657859][T15019] DR3: 0000000000000625 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 398.660287][T15019] Call Trace: [ 398.661336][T15019] [ 398.662417][T15019] mac80211_hwsim_sta_add+0xc9/0x2c0 [ 398.664405][T15019] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 398.666524][T15019] drv_sta_state+0xa08/0x1940 [ 398.668037][T15019] sta_info_insert_rcu+0xc8d/0x1b70 [ 398.670060][T15019] sta_info_insert+0x16/0xd0 [ 398.671589][T15019] ieee80211_add_station+0x46d/0x6c0 [ 398.673378][T15019] nl80211_new_station+0x14c9/0x1c50 [ 398.675230][T15019] ? __pfx_nl80211_new_station+0x10/0x10 [ 398.677070][T15019] ? nl80211_pre_doit+0x1b0/0xb10 [ 398.678713][T15019] genl_family_rcv_msg_doit+0x206/0x2f0 [ 398.680535][T15019] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 398.682609][T15019] ? trace_cap_capable+0x18d/0x200 [ 398.684287][T15019] ? bpf_lsm_capable+0x9/0x10 [ 398.685993][T15019] ? security_capable+0x7e/0x260 [ 398.687575][T15019] ? ns_capable+0xd7/0x110 [ 398.689080][T15019] genl_rcv_msg+0x55c/0x800 [ 398.690932][T15019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.692748][T15019] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 398.694838][T15019] ? __pfx_nl80211_new_station+0x10/0x10 [ 398.697126][T15019] ? __pfx_nl80211_post_doit+0x10/0x10 [ 398.699367][T15019] netlink_rcv_skb+0x155/0x420 [ 398.701283][T15019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.703405][T15019] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 398.705569][T15019] ? netlink_deliver_tap+0x1ae/0xd30 [ 398.707703][T15019] genl_rcv+0x28/0x40 [ 398.709348][T15019] netlink_unicast+0x58d/0x850 [ 398.711267][T15019] ? __pfx_netlink_unicast+0x10/0x10 [ 398.713745][T15019] netlink_sendmsg+0x8d1/0xdd0 [ 398.715590][T15019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.717695][T15019] ? __import_iovec+0x1dd/0x650 [ 398.719637][T15019] ____sys_sendmsg+0xa95/0xc70 [ 398.721538][T15019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.723921][T15019] ? get_compat_msghdr+0x11a/0x170 [ 398.726026][T15019] ? __pfx_futex_wake_mark+0x10/0x10 [ 398.728144][T15019] ___sys_sendmsg+0x134/0x1d0 [ 398.730072][T15019] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.732341][T15019] ? find_held_lock+0x2b/0x80 [ 398.734373][T15019] __sys_sendmsg+0x16d/0x220 [ 398.736118][T15019] ? __pfx___sys_sendmsg+0x10/0x10 [ 398.737812][T15019] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 398.740201][T15019] ? rcu_is_watching+0x12/0xc0 [ 398.742395][T15019] __do_fast_syscall_32+0x7c/0x3a0 [ 398.744588][T15019] do_fast_syscall_32+0x32/0x80 [ 398.746621][T15019] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 398.749321][T15019] RIP: 0023:0xf7f52579 [ 398.751135][T15019] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 398.758944][T15019] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 398.762327][T15019] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001080 [ 398.766016][T15019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 398.769256][T15019] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 398.773082][T15019] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 398.776272][T15019] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 398.779501][T15019] [ 398.780822][T15019] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 398.784055][T15019] CPU: 3 UID: 0 PID: 15019 Comm: syz.1.2641 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 398.789001][T15019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 398.793366][T15019] Call Trace: [ 398.794792][T15019] [ 398.796026][T15019] dump_stack_lvl+0x3d/0x1f0 [ 398.797855][T15019] panic+0x71c/0x800 [ 398.799039][T15019] ? __pfx_panic+0x10/0x10 [ 398.800488][T15019] ? show_trace_log_lvl+0x29b/0x3e0 [ 398.802125][T15019] ? mac80211_hwsim_sta_rc_update+0x60b/0x850 [ 398.804279][T15019] check_panic_on_warn+0xab/0xb0 [ 398.805979][T15019] __warn+0xf6/0x3c0 [ 398.807220][T15019] ? mac80211_hwsim_sta_rc_update+0x60b/0x850 [ 398.809116][T15019] report_bug+0x3c3/0x580 [ 398.810505][T15019] ? mac80211_hwsim_sta_rc_update+0x60b/0x850 [ 398.812374][T15019] handle_bug+0x184/0x210 [ 398.813710][T15019] exc_invalid_op+0x17/0x50 [ 398.815233][T15019] asm_exc_invalid_op+0x1a/0x20 [ 398.817180][T15019] RIP: 0010:mac80211_hwsim_sta_rc_update+0x60b/0x850 [ 398.819700][T15019] Code: 8b 44 24 20 89 da 48 c7 c7 e0 5b 6b 8c 44 8b 89 a8 01 00 00 41 54 48 8d b0 72 04 00 00 41 55 44 8b 44 24 14 e8 16 50 74 fa 90 <0f> 0b 90 90 58 5a e9 36 fc ff ff e8 75 ff b4 fa e8 30 12 7e 04 31 [ 398.825614][T15019] RSP: 0018:ffffc9000707f198 EFLAGS: 00010286 [ 398.827478][T15019] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9003112b000 [ 398.830028][T15019] RDX: 0000000000080000 RSI: ffffffff817ab115 RDI: 0000000000000001 [ 398.832455][T15019] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 398.834992][T15019] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000007 [ 398.838134][T15019] R13: 000000000000000a R14: ffff88806cfa5020 R15: ffff8880243430a0 [ 398.840815][T15019] ? __warn_printk+0x1a5/0x350 [ 398.842293][T15019] ? mac80211_hwsim_sta_rc_update+0x60a/0x850 [ 398.844172][T15019] mac80211_hwsim_sta_add+0xc9/0x2c0 [ 398.846197][T15019] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 398.848587][T15019] drv_sta_state+0xa08/0x1940 [ 398.850520][T15019] sta_info_insert_rcu+0xc8d/0x1b70 [ 398.852663][T15019] sta_info_insert+0x16/0xd0 [ 398.854550][T15019] ieee80211_add_station+0x46d/0x6c0 [ 398.856270][T15019] nl80211_new_station+0x14c9/0x1c50 [ 398.858170][T15019] ? __pfx_nl80211_new_station+0x10/0x10 [ 398.860478][T15019] ? nl80211_pre_doit+0x1b0/0xb10 [ 398.862526][T15019] genl_family_rcv_msg_doit+0x206/0x2f0 [ 398.864769][T15019] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 398.867217][T15019] ? trace_cap_capable+0x18d/0x200 [ 398.869376][T15019] ? bpf_lsm_capable+0x9/0x10 [ 398.871340][T15019] ? security_capable+0x7e/0x260 [ 398.873424][T15019] ? ns_capable+0xd7/0x110 [ 398.875213][T15019] genl_rcv_msg+0x55c/0x800 [ 398.876608][T15019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.878236][T15019] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 398.880425][T15019] ? __pfx_nl80211_new_station+0x10/0x10 [ 398.882733][T15019] ? __pfx_nl80211_post_doit+0x10/0x10 [ 398.884549][T15019] netlink_rcv_skb+0x155/0x420 [ 398.886366][T15019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.888362][T15019] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 398.890555][T15019] ? netlink_deliver_tap+0x1ae/0xd30 [ 398.892723][T15019] genl_rcv+0x28/0x40 [ 398.894372][T15019] netlink_unicast+0x58d/0x850 [ 398.895996][T15019] ? __pfx_netlink_unicast+0x10/0x10 [ 398.898052][T15019] netlink_sendmsg+0x8d1/0xdd0 [ 398.899990][T15019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.902090][T15019] ? __import_iovec+0x1dd/0x650 [ 398.904104][T15019] ____sys_sendmsg+0xa95/0xc70 [ 398.906091][T15019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.908252][T15019] ? get_compat_msghdr+0x11a/0x170 [ 398.910357][T15019] ? __pfx_futex_wake_mark+0x10/0x10 [ 398.912470][T15019] ___sys_sendmsg+0x134/0x1d0 [ 398.914296][T15019] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.915807][T15019] ? find_held_lock+0x2b/0x80 [ 398.917551][T15019] __sys_sendmsg+0x16d/0x220 [ 398.919403][T15019] ? __pfx___sys_sendmsg+0x10/0x10 [ 398.921477][T15019] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 398.923799][T15019] ? rcu_is_watching+0x12/0xc0 [ 398.925745][T15019] __do_fast_syscall_32+0x7c/0x3a0 [ 398.927810][T15019] do_fast_syscall_32+0x32/0x80 [ 398.929802][T15019] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 398.932179][T15019] RIP: 0023:0xf7f52579 [ 398.933461][T15019] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 398.940107][T15019] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 398.943499][T15019] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001080 [ 398.946589][T15019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 398.949656][T15019] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 398.952105][T15019] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 398.955207][T15019] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 398.958399][T15019] [ 398.960322][T15019] Kernel Offset: disabled [ 398.961680][T15019] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:59:22 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff88802b23a400 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff88802b23a402 RBP=dffffc0000000000 RSP=ffffffff8e207928 R8 =0000000000000001 R9 =ffff88802b23b394 R10=ffff88802b23a403 R11=0000000000000001 R12=0000000000007de3 R13=0000000000000000 R14=ffff88802b23b380 R15=ffffed1005647480 RIP=ffffffff8b872de8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097520000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033be7ffc CR3=00000000507ea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000006 RBX=ffff8880250bfb38 RCX=0000000000000006 RDX=0000000000000000 RSI=ffffffff8de2c794 RDI=ffffffff8c157960 RBP=0000000000000293 RSP=ffffc90006a8fb50 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff90a9a157 R11=0000000000000001 R12=ffff8880250bfb38 R13=0000000000000293 R14=0000000000000001 R15=ffff88804a6e8400 RIP=ffffffff8b871681 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097620000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080003000 CR3=00000000507ea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000054ea6b RBX=0000000000000002 RCX=ffffffff8b847c69 RDX=0000000000000000 RSI=ffffffff8de2c794 RDI=ffffffff8c157960 RBP=ffffed1003bde910 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =ffffed1005686645 R10=ffff88802b43322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801def4880 R14=ffffffff90a9a150 R15=0000000000000000 RIP=ffffffff8b8467cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000008087f000 CR3=000000004c533000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85584895 RDI=ffffffff9b0ac980 RBP=ffffffff9b0ac940 RSP=ffffc9000707eb00 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b0ac940 R15=ffffffff85584830 RIP=ffffffff855848bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097820000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73ab24c CR3=0000000064d77000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000625 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008c00000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000