last executing test programs: 14.439171758s ago: executing program 0 (id=401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021500000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000024000380f2fe008008000340000000000b801000018000000100667764000000028000000340000000000000024000000000000003400000000000000340000000000000024000000000000002400000000000000140000000000000014000000000140000001000010000000000000000000084000a"], 0xd4}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000040)="1002d7d957c9fc8dda937c7b61567297207adb3029e20544ec044c2fbb6bf865c9331165cb94d9fcb78cb57f9b40b11393c073c1f3c400000000009ddf7accf1295f9abfb2b534ba", 0x0, 0x48) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0xfffffffffffffffe, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='veno\x00', 0x5) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @dev, 0x0, 0x0, 0x20000000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @mcast1}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 12.661206212s ago: executing program 0 (id=405): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r1, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRESHEX, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYBLOB="2c73726f88705f69643d", @ANYRES32=r0]) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x314000, 0x800, 0x0, 0x3}, 0x1c) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close_range(r4, r6, 0x0) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r3, {0x7, 0x27}}, 0x50) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004340)="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", 0x2000, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0xc9f6c038d12544db, 0x80d) socket$nl_generic(0x10, 0x3, 0x10) 12.428237425s ago: executing program 0 (id=407): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr\x00') gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000340)="0429ce1ac2e508918c5c6fd560382b0c837508da0fcd68a14793e7f624380c", &(0x7f00000004c0)="77416b576a366863188d674a7ca81f4dd9f4f45e002aeddaa891e1cdf4980d57f94a725e2b27f62ff542b362674c564ba7c2fd76d4c12ee4fa3d2be5d11036be7e759d0f3eef4e6772a08089ccb610dd8122cdbe288662f241ac2d8096d840dd3999d6c5499b59"}}, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x400a00, 0x0) preadv(r2, &(0x7f0000000240)=[{0x0}], 0x1, 0x100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000240009000000000000000e0006"], 0x14}}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140643000000000e000a001000000086419820dd61", 0x2e}], 0x1}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fchdir(r1) recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/227, 0xe3}, {&(0x7f0000000280)=""/253, 0xfd}, {&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000380)=""/186, 0xba}, {&(0x7f0000000440)=""/122, 0x7a}], 0x5, &(0x7f0000000500)=""/110, 0x6e}, 0x8}], 0x1, 0x20, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0xd0, 0x31, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc1}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x474}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0xd0}}, 0x166b1ab5eb710134) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) 3.68751105s ago: executing program 3 (id=448): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=0x0, @ANYRESDEC=r0, @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000004c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x502, @remote, 0x7}, @in6={0xa, 0x4e20, 0xd0e, @mcast1, 0x8}, @in6={0xa, 0x4e23, 0x33c, @mcast2, 0x8}], 0x64) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4c20, @dev={0xac, 0x14, 0x14, 0x17}}]}, &(0x7f00000007c0)=0xc) shutdown(r2, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x50009401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000020300000000000000000085add1f800"], 0x14}}, 0x0) syz_io_uring_setup(0x5b49, &(0x7f0000000340)={0x0, 0x0, 0x8}, &(0x7f00000001c0), &(0x7f0000000200)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) landlock_create_ruleset(0x0, 0x0, 0x0) pidfd_send_signal(r5, 0x0, 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) r6 = inotify_init1(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r1], 0x7c}}, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000001380), 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffff01b45adbde08004500007000000000000190780a010101ac1414aa05009078e00000e0450000000000000000110000ac1414aa00000000070300443c00030a010102000000000000000000000000ac1414aa000000007d216ef9f801d16ce10d5a509f379bac1414bb000000000000000000000000ac141400"/141], 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0405626, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x4}}) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000002700)=ANY=[@ANYBLOB="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"], 0x174c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) inotify_add_watch(r6, &(0x7f0000000040)='.\x00', 0x5000000a) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x0, 0x1bd) preadv2(r9, 0x0, 0x0, 0x0, 0x0, 0x0) 3.687257374s ago: executing program 3 (id=449): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.819827042s ago: executing program 3 (id=452): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x25) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000240)={0x22, 0x3, 0x0, {0x0, 0x1, 0x0, '^'}}, 0x22) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x11) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000340)={&(0x7f0000000040), 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, r10}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f00000008c0)={0x0, 0x1, &(0x7f00000000c0)=[r10], &(0x7f0000000200), &(0x7f0000000380)=[r11], &(0x7f0000000340)}) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="07b37400", @ANYRES16=r7, @ANYBLOB="0200000000000008000101000000080001000000000027ac0f1cd4f0acf8cf692771134262debc3e183215c370c03f8d8dce918e5f9a916a9c99eacf51d6cd69f87fef1e24e73058c21d7f628ae891c4f56f99133961d29a1a8cfd51fee477b0aea61934f05eb4afd4d8d49e89acda99d33b777b29189c78c5d839fe6b47539c936bff02d5890b5cd1ba0c84fbfef5781863211b02c8493a51e0c4a9878f314f0186170fa8b281235d60"], 0x1c}}, 0x20000804) r12 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r12, 0x4068aea3, &(0x7f00000003c0)={0xce, 0x0, r12}) 2.152891626s ago: executing program 2 (id=455): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000300)={@local, @multicast2, @initdev}, &(0x7f0000000340)=0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0x7fff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={r3, @multicast2, @private=0xa010101}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000000800130000170000080014"], 0x4c}}, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000)=0x2b, r0, &(0x7f00000000c0)=0x1000, 0x8, 0x8) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0086426, &(0x7f0000000280)={0x7, &(0x7f00000001c0)=[{}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000002c0)={r6, 0x6}) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x0, 0x40000005, 0x5e3b) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @random="72b53b55b627", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev={0xac, 0x14, 0x14, 0xfe}}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r8, r9, 0x12}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1880c53c8b8696def6aba414997ec62a000000000000000071f1b3a536cb0623de51a28242e398b50fa6a527b2be796d3957b33b7069a7b741bbc049956c47592e2fbf70ef698855d97c7621dcc065eca276de48a935d4d5a5bbe0af"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.649149186s ago: executing program 1 (id=456): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES16=r1], 0x3c}}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3c25fe80000000000000dc8b850f238466cc00007a0000e2c21300ad6e911b518184", 0x28}], 0x1, 0x0, 0x21}, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5dd7ec84c47c69a0, 0x110, 0xffffffffffffffff, 0x8000000) openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x8100, 0x0) r5 = syz_io_uring_setup(0x74df, &(0x7f0000000300)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 1.419858579s ago: executing program 3 (id=457): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES64, @ANYRES16=r0, @ANYRESOCT, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xae, &(0x7f0000000140)=""/174, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x3, 0x6, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0xffffffffffffffff], 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x9) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000000300)=""/120, 0x78}, {&(0x7f00000003c0)}], 0x4, &(0x7f0000000480)=""/37, 0x25}, 0xa7}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000940)=""/186, 0xba}, {&(0x7f0000000a00)=""/106, 0x6a}, {&(0x7f0000000a80)=""/208, 0xd0}, {&(0x7f0000000e40)=""/115, 0x73}, {&(0x7f0000000c00)=""/79, 0x4f}, {&(0x7f0000000c80)=""/113, 0x71}, {&(0x7f0000000d00)=""/81, 0x51}], 0x7, &(0x7f0000000d80)=""/176, 0xb0}, 0x4}], 0x2, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x4) r5 = fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x4) symlinkat(&(0x7f0000000500)='./file0\x00', r6, &(0x7f00000002c0)='./file0\x00') renameat2(r6, &(0x7f0000000100)='./file0\x00', r6, &(0x7f00000000c0)='./file1\x00', 0x4) 1.309754008s ago: executing program 1 (id=458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES16=r1], 0x3c}}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) close_range(r2, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5dd7ec84c47c69a0, 0x110, 0xffffffffffffffff, 0x8000000) openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x8100, 0x0) r5 = syz_io_uring_setup(0x74df, &(0x7f0000000300)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 1.139659005s ago: executing program 2 (id=459): socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x0, &(0x7f0000006680)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r1, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x4, @mcast2, 0x5}}, 0x80) setuid(r0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/igmp\x00') sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, 0x0, 0x20048010) lseek(r4, 0x401, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000050000000004000000000000000f0e0009", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c000180060000000547000014000200fe8000000000000000000000000000bbb445d814d68531a6325223476be997e50f1eea28924a52f3b69afad13ad1ca4f457cdd51cc81d4ae191312f986dafc3f4710c6b46b8605cb4e7c29b3e7f5f7d2766722c4c4c2147ad6a47a3bd64fb602bc0409be54538fdb481715fcc333e323d6638382781e0e6a08847b6e57249604f97faa319fa8cdaedf43a97be4aaaa52474af4e460555c402f44066fe78a310b6762dfa3d3f61ef8753d8fd08d32c8048842a82ee828150c15b7417ae9e70da1b47d65308391d28858909ee34f3957406adae5bd91359cdcc1ecc5c442a4217fd647e943931ea3561eeacb07509206ab5962248e0ea75d12c98752bbf906249922529f26b1149a6078c9157ed50ed3ca6689e82ee33b4e10c415784adc8f2a48a3072ac6eb167b7caad288d3241e7d4ee9ecb89010539c3b735f6e78f910a95240e7ee93f13684018967ac66f2cb2741226e02c1bc48bddf5ba901534adb5542c05c920045b568d85aee802757e5c680b009ba14a5021ad4c667706867ce4dc212e65b1ce26b3b345676b4c984c7ca2a2704b97dcb5c647fe275b5e08820532dbe446417a40816992cfa50fddb1be837a3b5f3511bb4ed0c454d5a791c61dcbcc668b42ba574b28f0c4b8270665a61834239e71211d2bb24cfbf5ecf55"], 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x3f) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) 1.037678488s ago: executing program 1 (id=460): socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, 0x0, 0x2b1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000027c0)=';', 0x1}], 0x1}}], 0x1, 0x0) syz_usb_disconnect(0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000001440)={0x40}) shutdown(r1, 0x2) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="e5ff000000000000bc1008001f0000000fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) chdir(0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000008f80)={&(0x7f0000008b00), 0x6e, &(0x7f0000008e00)=[{&(0x7f0000008b80)=""/27, 0x1b}, {&(0x7f0000008bc0)=""/251, 0xfb}, {&(0x7f0000008cc0)=""/214, 0xd6}, {&(0x7f0000008dc0)=""/7, 0x7}], 0x4, &(0x7f0000008e40)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 980.255978ms ago: executing program 0 (id=454): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r1, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36b26fb0b71d0e6adfefcf1d8f7faf75e0f226bd99eea7960717142fa9ea4318123741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ce99fbfbf9b0a4def23d410f6296b32a334388107200759cda9036b4e369a9e152ddcc7f05a5f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967deabe802f5ab3e89bd6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837074e098ee207d2f73902fbcfcf49822775985bf32d715f5888b24efa000000000000ffffffdf000000000000000000000089a7b9b00000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f91a31cf41ab11f12fb1e0a494034127de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5dff5adbdee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf1128744bab6677fcb78e313841ec309baed0495f06d058a75fa4c81e5c9f42d9383e41d277b10392a912ffaf6f658f3fadd16286744f839c3f128f8f92d0992239eafce5c1b3f97a297c9e49a0c3510ef74080e6d1e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda154910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b61799257ab55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bc6cf8809c3a0d46ff7f008000000000ad1e1f493354b2822b98371d000000167d78e65b90eba0768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4c51b3fa00675cd1b66c5fd9c26a54d43fa050645bd9109b7e7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e3344b155cc20f49e298727340e97cdefb40e56e9cfad973347d0de7ba4754ff231a1b033d8f931ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef79b8d4c2ff030000000000000007b82e6044f643068cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c99220002af8c5e53d52c83ac3fa7c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a702a86c814459f3cdaaf99000000000000000000bfb32c826563c518d0ad23bc83ba3f3757210a057eff7615c868bd7d74233da1a3b56d4e04a7ec4792b1c4cffddbbdcfdd23ab5268f1b3d08ebb8ce498cbaaf5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fc02b70be8629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa44966945d93c33b038ce0d890f851811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f20a95b817ea3df3d6c0002a41783058e56c70afe8016b3dd9dc7785b36e609f173cc6b893ecd138289709839747837d6a6283b3452c57a5d44cacd363589845637071320921d22c1663964eddec902fc7cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c898b7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dca9c42c4d719347f39ef006c2df747ee6adb7cd04faf05c36de72354c64ebaf28a3de18607ebc4b70f50f71dae565749568a23319232dc213342fb472e98c9a412199ce7976bee5eaf40e60cb3fbe8b92dae5008e92d17d05ce74ffffe74ae71d5b8bd43a4e0bf0390335aa489689f5e3a4ac5adca96caab658b43cd499d95d3876c220d147ad1d0e626621d88f1370982f663793cac52ea0d14e595ff1f56427a0a813bb3b84d31d021eeea8faeff25bb66f5940d08a5509a66fc43962bcb2f7415bc38e355e80ec935aa6fe2d74bd475d89449fb46320fee40faff2fd005549fe6a042bd95decfde5e166971935f4cfd9c9e5bfd2d803644f4e5b7e6dc1a7a35df7134e2fad79269bf24bea4eb0213068e3054d9e4a8d1a9eb032cb390e2016d0ce10549728cb4732dc5adab16fa19ac70780b29e079be27c95d3dd2bd91a584c46d84d430fc6ea31ce0ba62fa27be9f6bc435203da7c3a5d68bf4dd4f81cbfaa1c87a15b9272853c9837db930952dca667194b71815a9eb49b495360dcdf31e0e560857d0541a916d6b5469ac1b36babc5a91e1d58925f20d9d5f8a0da3c30711b0d101cabceffbe072be69613ea0003c6e9bb5cd2413c8ddc17cfa319cf7aaeed0ffb07a08f8fb439f709dfe0732fe42192819870bdd87d5f612ade03540a28be446095269d9ea5a60bba1f2462f9921f2a731dbcf1d03964ea1e4f79514914d37877f57617b60fa2b58aa694fcb023024653c4b73efb12a57ffc6f8943262b77be933051e12bd4d768a422ea652d45b04a9c43b5c97fc3edea7002d51a0a74889334ee"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=@newqdisc={0x24}, 0x24}}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000140)={0x3, r5, 0x0, 0x0, 0x0, 0x1, 0x6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303df1bcf16000000000000000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r5}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$l2tp(r8, &(0x7f0000000080)={0x2, 0x0, @loopback, 0x3}, 0x10) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)) close(r8) 890.023815ms ago: executing program 0 (id=461): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'syz_tun\x00', 0x400}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe3a) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0xb00, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="4df193f35347"}, 0x0, {0x2, 0x4e20, @private}, 'syz_tun\x00'}) recvfrom$inet(r0, 0x0, 0x0, 0x60002141, 0x0, 0x0) 709.885789ms ago: executing program 0 (id=462): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr\x00') gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000340)="0429ce1ac2e508918c5c6fd560382b0c837508da0fcd68a14793e7f624380c", &(0x7f00000004c0)="77416b576a366863188d674a7ca81f4dd9f4f45e002aeddaa891e1cdf4980d57f94a725e2b27f62ff542b362674c564ba7c2fd76d4c12ee4fa3d2be5d11036be7e759d0f3eef4e6772a08089ccb610dd8122cdbe288662f241ac2d8096d840dd3999d6c5499b59"}}, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x400a00, 0x0) preadv(r2, &(0x7f0000000240)=[{0x0}], 0x1, 0x100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000240009000000000000000e0006"], 0x14}}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140643000000000e000a001000000086419820dd61", 0x2e}], 0x1}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fchdir(r1) recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/227, 0xe3}, {&(0x7f0000000280)=""/253, 0xfd}, {&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000380)=""/186, 0xba}, {&(0x7f0000000440)=""/122, 0x7a}], 0x5, &(0x7f0000000500)=""/110, 0x6e}, 0x8}], 0x1, 0x20, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0xd0, 0x31, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc1}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x474}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0xd0}}, 0x166b1ab5eb710134) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) 525.607031ms ago: executing program 3 (id=463): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790048000000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="0413"], 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x50c, 0xffffffff, 0x0, 0x0, 0x358, 0xfeffffff, 0xffffffff, 0x444, 0x444, 0x444, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x23c, 0x260, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x0, 0x6, 0x0, 0x0, 0x0, 0x40, 0x10000}}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@unspec=@cluster={{0x30}}]}, @REJECT={0x24}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, [], [], 'team_slave_1\x00', 'syzkaller1\x00'}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@eui64={{0x24}}]}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x568) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xb0, 0xc8, 0x5}}}, 0x7) 522.812581ms ago: executing program 3 (id=464): r0 = io_uring_setup(0x37b8, &(0x7f00000003c0)={0x0, 0x400, 0x100, 0x1000}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000ddc2440f413b", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000d840e60018a53663d96984368fcf6380a9d4eafcecc2a7f2382272c75cfe14b609f32c5381be14890230cd828a87e6a73390c52b8fd2964fac3dc0d368fbca3a7225faa4a23e99ef511a5ef743ad5422d73ca3a0b29a25ebf810de417323ac80e626dd05c14626fff81268b238d3876d01b9aefad18fdec21f5aa5776d4b32bc3b157d539d15095c2c4c9f206dc5ebbbe7c40bc391552c3e242fcbd1519a9a7633e1e530d19e3bcd29e07d180c4f55728ca691fdc57c5ed1029f50096549150c3c3a25a52be9af3e0d61374904158f62cba8048edf3d00a801bb8bae63d4dc3064c469e754aa6c904ae93d29c1ce85bc13f53dbf7f06eade3630cd1797ca965c2738788c170e5b806f70ee2311b3bb12b8e49daa5cdcc690218eea52c0bc4649beb10690ecf4ba0674dcf28bdaa77d7a806151cedeb25c803dbb258f13185bff76ce2deae71963c3b675297cc8c271cc201d1aa15d3fec348b2b049297d056d0a397137cc1700fe0dafdedeee36d320d400660fc15b3d59eda21d3ccf53bb1f52488e5efe45b69da32dd066085c7501fccd94e4431c357d8f466d84da77c2be0a22e95794ffd661eeb4e8afa375052bda9ad61d75a35494d09c03113e3b7"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="00000000000000005fbe0000070000007b8af8ff00000000bfa200000000800007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0xffffffffffffff26}}, {{&(0x7f00000002c0)={0xa, 0x4e22, 0x10001, @loopback, 0xffffff01}, 0x1c, 0x0}}], 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) preadv(r5, &(0x7f0000000200)=[{&(0x7f000001a900)=""/102391, 0x18ff7}], 0x200000000000001d, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r7, &(0x7f0000000240)=ANY=[], 0x40) pread64(r6, &(0x7f0000000340)=""/109, 0x6d, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xd) syz_clone(0xb13cc980, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r8, 0x3) r9 = syz_open_dev$usbmon(&(0x7f0000000080), 0xdf5, 0x0) read$usbmon(r9, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r9, 0x541b, 0x0) 239.832115ms ago: executing program 2 (id=465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES16=r1], 0x3c}}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3c25fe80000000000000dc8b850f238466cc00007a0000e2c21300ad6e911b518184", 0x28}], 0x1, 0x0, 0x21}, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5dd7ec84c47c69a0, 0x110, 0xffffffffffffffff, 0x8000000) openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x8100, 0x0) r5 = syz_io_uring_setup(0x74df, &(0x7f0000000300)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 109.119202ms ago: executing program 1 (id=466): socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x2b1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 108.585512ms ago: executing program 1 (id=467): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000186fa2bc600000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcffff124e000000000000003700feff0400000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$sr(0xffffff9c, &(0x7f0000000d00), 0x0, 0x0) r3 = openat$null(0xffffff9c, &(0x7f00000002c0), 0x602480, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000340), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x17, 0x0, 0x1, 0x2e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x700, 0x8, 0x100}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000340)=0x10, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) setsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000004c0)={r8, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x7, 0x1, 0x7, 0x3, {{0x2c, 0x4, 0x0, 0x7, 0xb0, 0x68, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @remote, {[@timestamp_prespec={0x44, 0x14, 0x80, 0x3, 0x9, [{@empty, 0x2}, {@private=0xa010101, 0x5}]}, @noop, @timestamp={0x44, 0x10, 0x45, 0x0, 0x3, [0x0, 0x6, 0x10000]}, @timestamp_prespec={0x44, 0x54, 0x22, 0x3, 0x1, [{@local, 0x3}, {@private=0xa010100}, {@local, 0x80000001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@empty, 0x6}, {@broadcast, 0x9}, {@rand_addr=0x64010101, 0x9}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@private=0xa010102, 0x2}]}, @noop, @rr={0x7, 0xb, 0x4d, [@remote, @private=0xa010101]}, @end, @timestamp={0x44, 0x14, 0xb3, 0x0, 0x1, [0x7, 0x5, 0x44c, 0x6]}]}}}}}) setpriority(0x1, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r2, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000b80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000800)={0x31c, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x104, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7fff, 0xd, 0x2, 0x1}, {0x0, 0x7f, 0xa0, 0x800}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xaa, 0x80, 0x81}, {0x0, 0x4, 0x5, 0x6}, {0x76ef, 0x6, 0x4, 0x5}]}}}]}}, {{0x8, 0x1, r14}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}]}, 0x31c}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$KVM_CREATE_VM(r2, 0x324, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback, 0xf, 0x1, 0x23, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r17 = openat$sr(0xffffff9c, &(0x7f0000000280), 0x800, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@fallback=r2, r2, 0x19, 0x4018, r2, @void, @value=r17, @void, @void, r16}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 65.961938ms ago: executing program 2 (id=468): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000006c0), 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f00000002c0), 0x2, 0x5}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 65.253429ms ago: executing program 1 (id=469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$FIBMAP(r4, 0x1, &(0x7f0000000100)=0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x4, 0x3, 0x4}, @IFLA_XFRM_IF_ID={0x8}]}}}]}, 0x44}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40404}, 0x100) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000006c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x10000, &(0x7f0000000b40), 0x106}}, 0x20) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r10 = socket(0x15, 0x5, 0x0) connect$l2tp6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1b) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r9, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f00000005c0), r8, 0x8}}, 0x18) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r10, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="a300000000010900010073797a302a0000000900010073797a3000000000128236e11098c44a3e94aa444a9306388fee8922c0173e9c0140774119c92de6c0ed3b7f9f7c74d46b9601e5a108c11508d8f27f602156dc3e19961a26bbcb5e35f7984d62fb4366268a0ec6b6de3530f74f126c9d6e4ca23123b18ea0ba103919f9ca06e1a7204ee33ffea724048a87a3c2b249c7f0"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f00000002c0), 0x2, 0x5}}, 0x20) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f00000004c0)="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", 0xff}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 62.729346ms ago: executing program 2 (id=470): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790048000000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="0413"], 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xb0, 0xc8, 0x5}}}, 0x7) 0s ago: executing program 2 (id=471): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000200)={"fe0d1acce4a37ef94acd000200", r0, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7", 0x76, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280), 0x208e24b) kernel console output (not intermixed with test programs): 003 length: 249 > 9 [ 36.553646][ T5353] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.556236][ T5354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.556393][ T5352] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.557256][ T5357] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.558869][ T5353] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.559216][ T5353] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.559536][ T5354] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.559755][ T5354] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.559861][ T5354] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.561522][ T5357] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.563966][ T5351] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.565388][ T5357] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.566579][ T5353] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.567337][ T5352] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.569478][ T5357] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.572445][ T5352] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.709015][ T5347] chnl_net:caif_netlink_parms(): no params data found [ 36.751676][ T5344] chnl_net:caif_netlink_parms(): no params data found [ 36.764887][ T5355] chnl_net:caif_netlink_parms(): no params data found [ 36.818626][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.820525][ T5347] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.822475][ T5347] bridge_slave_0: entered allmulticast mode [ 36.824793][ T5347] bridge_slave_0: entered promiscuous mode [ 36.870753][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.872649][ T5347] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.874523][ T5347] bridge_slave_1: entered allmulticast mode [ 36.876792][ T5347] bridge_slave_1: entered promiscuous mode [ 36.926577][ T5347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.934147][ T5344] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.937425][ T5344] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.939327][ T5344] bridge_slave_0: entered allmulticast mode [ 36.941292][ T5344] bridge_slave_0: entered promiscuous mode [ 36.943684][ T5355] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.945561][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.947513][ T5355] bridge_slave_0: entered allmulticast mode [ 36.949438][ T5355] bridge_slave_0: entered promiscuous mode [ 36.952285][ T5347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.962031][ T5344] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.963927][ T5344] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.965890][ T5344] bridge_slave_1: entered allmulticast mode [ 36.967900][ T5344] bridge_slave_1: entered promiscuous mode [ 36.970179][ T5355] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.972027][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.973884][ T5355] bridge_slave_1: entered allmulticast mode [ 36.976076][ T5355] bridge_slave_1: entered promiscuous mode [ 37.013700][ T5347] team0: Port device team_slave_0 added [ 37.025896][ T5344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.037641][ T5347] team0: Port device team_slave_1 added [ 37.046080][ T5349] chnl_net:caif_netlink_parms(): no params data found [ 37.049853][ T5344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.053235][ T5355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.064348][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.066284][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.072858][ T5347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.087764][ T5355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.090333][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.092117][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.099446][ T5347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.137762][ T5344] team0: Port device team_slave_0 added [ 37.141152][ T5355] team0: Port device team_slave_0 added [ 37.158673][ T5344] team0: Port device team_slave_1 added [ 37.160889][ T5355] team0: Port device team_slave_1 added [ 37.180001][ T5347] hsr_slave_0: entered promiscuous mode [ 37.181917][ T5347] hsr_slave_1: entered promiscuous mode [ 37.215735][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.217734][ T5349] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.219591][ T5349] bridge_slave_0: entered allmulticast mode [ 37.221527][ T5349] bridge_slave_0: entered promiscuous mode [ 37.224431][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.227385][ T5349] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.229421][ T5349] bridge_slave_1: entered allmulticast mode [ 37.231437][ T5349] bridge_slave_1: entered promiscuous mode [ 37.242073][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.243881][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.250521][ T5344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.254036][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.256001][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.262579][ T5355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.287052][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.288872][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.295418][ T5344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.308817][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.310666][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.317825][ T5355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.326069][ T5349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.347688][ T5349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.351413][ T5344] hsr_slave_0: entered promiscuous mode [ 37.353269][ T5344] hsr_slave_1: entered promiscuous mode [ 37.354980][ T5344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.359964][ T5344] Cannot create hsr debugfs directory [ 37.400431][ T5355] hsr_slave_0: entered promiscuous mode [ 37.402736][ T5355] hsr_slave_1: entered promiscuous mode [ 37.404897][ T5355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.407273][ T5355] Cannot create hsr debugfs directory [ 37.410684][ T5349] team0: Port device team_slave_0 added [ 37.414797][ T5349] team0: Port device team_slave_1 added [ 37.484736][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.487597][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.495944][ T5349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.500933][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.502775][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.509853][ T5349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.563504][ T5349] hsr_slave_0: entered promiscuous mode [ 37.565392][ T5349] hsr_slave_1: entered promiscuous mode [ 37.567354][ T5349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.569356][ T5349] Cannot create hsr debugfs directory [ 37.583813][ T5347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.603649][ T5347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.607035][ T5347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.611220][ T5347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.633702][ T5355] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.648231][ T5355] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.651532][ T5355] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.659255][ T5355] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.673347][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.675399][ T5347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.677721][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.679576][ T5347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.682650][ T5344] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.686657][ T5344] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.693113][ T5344] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.696374][ T5344] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.705075][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.708626][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.738658][ T5349] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.743895][ T5349] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.750477][ T5349] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.753734][ T5349] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.779509][ T5347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.790116][ T5347] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.804413][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.806352][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.812743][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.814662][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.821006][ T5355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.831691][ T5344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.845374][ T5355] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.848487][ T5344] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.858005][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.859858][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.863053][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.864904][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.868073][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.870490][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.881098][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.883508][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.903761][ T5349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.917752][ T5349] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.924506][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.926976][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.933219][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.935137][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.939518][ T5355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.963874][ T5349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.972497][ T5347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.982063][ T5344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.998652][ T5347] veth0_vlan: entered promiscuous mode [ 38.010040][ T5347] veth1_vlan: entered promiscuous mode [ 38.016990][ T5344] veth0_vlan: entered promiscuous mode [ 38.020280][ T5355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.034809][ T5344] veth1_vlan: entered promiscuous mode [ 38.049483][ T5349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.053817][ T5347] veth0_macvtap: entered promiscuous mode [ 38.057501][ T5347] veth1_macvtap: entered promiscuous mode [ 38.060830][ T5355] veth0_vlan: entered promiscuous mode [ 38.067126][ T5344] veth0_macvtap: entered promiscuous mode [ 38.071242][ T5344] veth1_macvtap: entered promiscuous mode [ 38.076748][ T5355] veth1_vlan: entered promiscuous mode [ 38.085100][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.089895][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.094715][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.098972][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.102416][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.105524][ T5344] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.110228][ T5344] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.112652][ T5344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.114944][ T5344] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.121099][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.123837][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.126975][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.140654][ T5347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.142978][ T5347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.145202][ T5347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.148138][ T5347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.158052][ T5349] veth0_vlan: entered promiscuous mode [ 38.177221][ T5355] veth0_macvtap: entered promiscuous mode [ 38.185370][ T5349] veth1_vlan: entered promiscuous mode [ 38.188296][ T5355] veth1_macvtap: entered promiscuous mode [ 38.192561][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.195218][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.198699][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.201325][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.224227][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.227864][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.231113][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.234583][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.240045][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.250319][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.250680][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.250934][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.250965][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.250978][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.250988][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.251772][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.252917][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.254998][ T5355] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.255139][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.258130][ T5355] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.279877][ T5355] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.283054][ T5355] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.293038][ T5349] veth0_macvtap: entered promiscuous mode [ 38.306268][ T5349] veth1_macvtap: entered promiscuous mode [ 38.316531][ T5344] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.319901][ T5349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.323252][ T5349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.326468][ T5349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.329236][ T5349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.331813][ T5349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.334424][ T5349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.338407][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.341632][ T5349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.344358][ T5349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.347806][ T5349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.350516][ T5349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.353029][ T5349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.355706][ T5349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.359140][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.370991][ T5349] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.373283][ T5349] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.376285][ T5349] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.378619][ T5349] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.400854][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 38.403151][ T5405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.405058][ T5405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.408419][ T5405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.410378][ T5405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.426790][ T217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.428970][ T217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.441145][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.443298][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.451894][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.455157][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.473603][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.476211][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.525687][ T5413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 38.528598][ T5413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.530588][ T5413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.533401][ T5413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.535391][ T5413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.578131][ T5345] Bluetooth: hci0: command tx timeout [ 38.578140][ T5352] Bluetooth: hci1: command tx timeout [ 38.587198][ T5352] Bluetooth: hci3: command tx timeout [ 38.619186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 38.622032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 38.655935][ T5352] Bluetooth: hci2: command tx timeout [ 39.396826][ T5427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 39.399410][ T5427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.402164][ T5427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.405307][ T5427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.408204][ T5427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.650455][ T5442] Bluetooth: MGMT ver 1.23 [ 40.655968][ T5352] Bluetooth: hci3: command tx timeout [ 40.657414][ T5352] Bluetooth: hci0: command tx timeout [ 40.658825][ T5352] Bluetooth: hci1: command tx timeout [ 40.717115][ T5443] netlink: 'syz.1.10': attribute type 10 has an invalid length. [ 40.746029][ T5345] Bluetooth: hci2: command tx timeout [ 41.479989][ T5471] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.773265][ T5479] delete_channel: no stack [ 41.948273][ T5485] delete_channel: no stack [ 42.100774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 42.100799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 42.203270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 42.305570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 42.305611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 42.365966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.368799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.371093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.564576][ T5477] delete_channel: no stack [ 42.733755][ T5500] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.21'. [ 42.745911][ T5345] Bluetooth: hci1: command tx timeout [ 42.746537][ T4792] Bluetooth: hci3: command tx timeout [ 42.749568][ T5352] Bluetooth: hci0: command tx timeout [ 42.787957][ T5483] delete_channel: no stack [ 42.816153][ T5352] Bluetooth: hci2: command tx timeout [ 43.188340][ T5508] syz.0.23(5508): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 43.394307][ T5514] delete_channel: no stack [ 43.827287][ T5529] netlink: 'syz.2.27': attribute type 2 has an invalid length. [ 43.863950][ T5529] : entered promiscuous mode [ 44.158210][ T5510] delete_channel: no stack [ 44.373975][ T5537] delete_channel: no stack [ 44.649947][ T5541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 44.815912][ T5352] Bluetooth: hci1: command tx timeout [ 44.825943][ T5352] Bluetooth: hci0: command tx timeout [ 44.825968][ T4792] Bluetooth: hci3: command tx timeout [ 44.888177][ T5547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31'. [ 44.896105][ T5547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 44.901971][ T5547] netlink: 104 bytes leftover after parsing attributes in process `syz.0.31'. [ 44.904342][ T5547] netlink: 104 bytes leftover after parsing attributes in process `syz.0.31'. [ 44.905935][ T5352] Bluetooth: hci2: command tx timeout [ 45.120245][ T5535] delete_channel: no stack [ 45.127883][ T5555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 45.130216][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.132119][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.135418][ T5555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.139033][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.439252][ T5575] delete_channel: no stack [ 45.577632][ T5582] overlayfs: missing 'workdir' [ 45.733543][ T5587] delete_channel: no stack [ 46.229413][ T5570] delete_channel: no stack [ 46.410906][ T5583] delete_channel: no stack [ 46.472218][ T5594] netlink: 36 bytes leftover after parsing attributes in process `syz.2.45'. [ 46.536368][ T5597] warning: `syz.2.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 46.648112][ T5600] can0: slcan on ptm0. [ 46.652822][ T39] audit: type=1326 audit(1729318117.201:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5603 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 46.659384][ T39] audit: type=1326 audit(1729318117.201:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5603 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 46.665031][ T39] audit: type=1326 audit(1729318117.211:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5603 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=123 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 46.670957][ T39] audit: type=1326 audit(1729318117.211:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5603 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 46.681658][ T39] audit: type=1326 audit(1729318117.211:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5603 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 46.694776][ T39] audit: type=1326 audit(1729318117.211:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5603 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 46.707575][ T39] audit: type=1326 audit(1729318117.211:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5603 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 46.718807][ T39] audit: type=1326 audit(1729318117.211:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5603 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 46.724129][ T39] audit: type=1326 audit(1729318117.221:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5603 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 46.732667][ T39] audit: type=1326 audit(1729318117.221:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5603 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 46.733786][ T5600] input: syz0 as /devices/virtual/input/input5 [ 46.873656][ T5619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 46.877483][ T5619] netlink: 168 bytes leftover after parsing attributes in process `syz.2.49'. [ 46.879761][ T5619] netlink: 168 bytes leftover after parsing attributes in process `syz.2.49'. [ 47.135944][ T5352] Bluetooth: hci3: command 0x0406 tx timeout [ 47.428086][ T5595] can0 (unregistered): slcan off ptm0. [ 47.975623][ T5489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.058193][ T5489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.107003][ T5352] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.109425][ T5352] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.111518][ T5352] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.113937][ T5352] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.118362][ T5352] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 48.121028][ T5352] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.133463][ T5489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.219442][ T5489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.284041][ T5641] delete_channel: no stack [ 48.290009][ T5641] Zero length message leads to an empty skb [ 48.393832][ T5489] bridge_slave_1: left allmulticast mode [ 48.396286][ T5489] bridge_slave_1: left promiscuous mode [ 48.398992][ T5489] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.407564][ T5489] bridge_slave_0: left allmulticast mode [ 48.409221][ T5489] bridge_slave_0: left promiscuous mode [ 48.411050][ T5489] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.634066][ T5645] delete_channel: no stack [ 48.920080][ T5489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.948961][ T5489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.968395][ T5489] bond0 (unregistering): Released all slaves [ 49.048229][ T5634] chnl_net:caif_netlink_parms(): no params data found [ 49.111631][ T5489] : left promiscuous mode [ 49.134985][ T5638] delete_channel: no stack [ 49.385011][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.388372][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.390301][ T5634] bridge_slave_0: entered allmulticast mode [ 49.392457][ T5634] bridge_slave_0: entered promiscuous mode [ 49.416038][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.418469][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.420978][ T5634] bridge_slave_1: entered allmulticast mode [ 49.423416][ T5634] bridge_slave_1: entered promiscuous mode [ 49.448907][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.454934][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.493248][ T5634] team0: Port device team_slave_0 added [ 49.500094][ T5634] team0: Port device team_slave_1 added [ 49.515044][ T5643] delete_channel: no stack [ 49.528155][ T5489] hsr_slave_0: left promiscuous mode [ 49.530074][ T5489] hsr_slave_1: left promiscuous mode [ 49.548885][ T5489] veth1_macvtap: left promiscuous mode [ 49.550473][ T5489] veth0_macvtap: left promiscuous mode [ 49.555039][ T5489] veth1_vlan: left promiscuous mode [ 49.557193][ T5489] veth0_vlan: left promiscuous mode [ 49.673836][ T5676] delete_channel: no stack [ 50.186304][ T5352] Bluetooth: hci3: command tx timeout [ 50.354637][ T5489] team0 (unregistering): Port device team_slave_1 removed [ 50.421878][ T5489] team0 (unregistering): Port device team_slave_0 removed [ 50.453003][ T5673] delete_channel: no stack [ 50.759599][ T5687] fuse: Bad value for 'fd' [ 50.878603][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.881267][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.889779][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.910361][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.912190][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.926071][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.986047][ T5634] hsr_slave_0: entered promiscuous mode [ 50.990579][ T5634] hsr_slave_1: entered promiscuous mode [ 50.993118][ T5634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.995102][ T5634] Cannot create hsr debugfs directory [ 51.196265][ T5700] delete_channel: no stack [ 51.261510][ T5705] delete_channel: no stack [ 51.474489][ T5710] can0: slcan on ttyS3. [ 51.731236][ T5634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.745150][ T5634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.752093][ T5634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.759992][ T5634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.042078][ T5696] delete_channel: no stack [ 52.052180][ T5701] delete_channel: no stack [ 52.150169][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.189507][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.265867][ T5352] Bluetooth: hci3: command tx timeout [ 52.272466][ T5490] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.274793][ T5490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.277594][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'. [ 52.283232][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.285120][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.397592][ T5725] autofs: Bad value for 'fd' [ 52.444089][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.466608][ T5706] can0 (unregistered): slcan off ttyS3. [ 52.490331][ T5634] veth0_vlan: entered promiscuous mode [ 52.496421][ T5634] veth1_vlan: entered promiscuous mode [ 52.518171][ T5634] veth0_macvtap: entered promiscuous mode [ 52.521767][ T5634] veth1_macvtap: entered promiscuous mode [ 52.530493][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.535510][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.539773][ T5634] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.542331][ T5634] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.544945][ T5634] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.547654][ T5634] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.620891][ T5489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.623108][ T5489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.644833][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.647146][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.704568][ T5746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 52.707519][ T5746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.710370][ T5746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.714176][ T5746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.718278][ T5746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.154471][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 53.200187][ T5764] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 53.201997][ T5764] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 53.206693][ T5764] vhci_hcd vhci_hcd.0: Device attached [ 53.302927][ T5768] afs: Unknown parameter 'obj_user' [ 53.385977][ T979] vhci_hcd: vhci_device speed not set [ 53.456789][ T979] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 54.113078][ T5765] vhci_hcd: connection reset by peer [ 54.117376][ T5489] vhci_hcd: stop threads [ 54.118803][ T5489] vhci_hcd: release socket [ 54.120720][ T5489] vhci_hcd: disconnect device [ 54.216449][ T5777] netlink: 'syz.3.72': attribute type 10 has an invalid length. [ 54.304950][ T8] libceph: connect (1)[c::]:6789 error -101 [ 54.306832][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 54.336518][ T5352] Bluetooth: hci3: command tx timeout [ 54.420770][ T5779] ceph: No mds server is up or the cluster is laggy [ 54.547216][ T5789] delete_channel: no stack [ 54.941477][ T5802] can0: slcan on ttyS3. [ 55.049172][ T5809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 55.294190][ T5787] delete_channel: no stack [ 55.809168][ T5800] can0 (unregistered): slcan off ttyS3. [ 55.919833][ T5832] delete_channel: no stack [ 56.078652][ T5837] delete_channel: no stack [ 56.263350][ T5846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 56.418399][ T5352] Bluetooth: hci3: command tx timeout [ 56.712568][ T5826] delete_channel: no stack [ 56.985401][ T5835] delete_channel: no stack [ 57.010141][ T5851] netlink: 36 bytes leftover after parsing attributes in process `syz.0.84'. [ 57.119632][ T5855] delete_channel: no stack [ 57.250543][ T5858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 57.498858][ T5352] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 57.819172][ T5853] delete_channel: no stack [ 57.926631][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 58.034310][ T5885] delete_channel: no stack [ 58.046408][ T5884] can0: slcan on ttyS3. [ 58.480105][ T5890] can1: slcan on ptm0. [ 58.487079][ T5890] input: syz0 as /devices/virtual/input/input6 [ 58.575863][ T979] vhci_hcd: vhci_device speed not set [ 58.849540][ T5879] delete_channel: no stack [ 59.082929][ T5912] delete_channel: no stack [ 59.116427][ T5880] can0 (unregistered): slcan off ttyS3. [ 59.119279][ T5886] can1 (unregistered): slcan off ptm0. [ 59.761878][ T5908] delete_channel: no stack [ 60.173791][ T5942] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.100'. [ 60.440088][ T979] libceph: connect (1)[c::]:6789 error -101 [ 60.441853][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 60.444284][ T979] libceph: connect (1)[c::]:6789 error -101 [ 60.446192][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 60.451300][ T5952] delete_channel: no stack [ 60.586794][ T5949] ceph: No mds server is up or the cluster is laggy [ 61.082621][ T5946] delete_channel: no stack [ 61.192238][ T5968] delete_channel: no stack [ 61.324658][ T5972] delete_channel: no stack [ 61.539979][ T5352] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 61.546386][ T5352] Bluetooth: hci3: Injecting HCI hardware error event [ 61.556064][ T5980] netlink: 'syz.3.106': attribute type 2 has an invalid length. [ 61.556906][ T4792] Bluetooth: hci3: hardware error 0x00 [ 61.581209][ T5980] : entered promiscuous mode [ 62.044642][ T5963] delete_channel: no stack [ 62.092465][ T5967] delete_channel: no stack [ 62.413869][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'. [ 62.816581][ T6009] FAULT_INJECTION: forcing a failure. [ 62.816581][ T6009] name failslab, interval 1, probability 0, space 0, times 1 [ 62.820398][ T6009] CPU: 1 UID: 0 PID: 6009 Comm: syz.2.115 Not tainted 6.12.0-rc3-syzkaller-00319-gb04ae0f45168 #0 [ 62.823399][ T6009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.826191][ T6009] Call Trace: [ 62.827067][ T6009] [ 62.827854][ T6009] dump_stack_lvl+0x16c/0x1f0 [ 62.829360][ T6009] should_fail_ex+0x497/0x5b0 [ 62.830905][ T6009] should_failslab+0xc2/0x120 [ 62.832500][ T6009] __kmalloc_cache_noprof+0x6b/0x310 [ 62.834297][ T6009] ? sctp_add_bind_addr+0x9d/0x3e0 [ 62.835637][ T6009] sctp_add_bind_addr+0x9d/0x3e0 [ 62.836935][ T6009] sctp_copy_local_addr_list+0x39e/0x5a0 [ 62.838409][ T6009] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 62.840007][ T6009] ? sctp_auth_asoc_copy_shkeys+0x2a7/0x360 [ 62.841547][ T6009] ? sctp_bind_addr_copy+0xe0/0x530 [ 62.842904][ T6009] sctp_bind_addr_copy+0xe0/0x530 [ 62.844223][ T6009] sctp_connect_new_asoc+0x1d8/0x790 [ 62.845601][ T6009] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 62.847269][ T6009] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 62.848823][ T6009] __sctp_connect+0x3f5/0xc60 [ 62.850081][ T6009] ? __pfx___sctp_connect+0x10/0x10 [ 62.851435][ T6009] ? __might_fault+0xe3/0x190 [ 62.852608][ T6009] ? __might_fault+0xe3/0x190 [ 62.853843][ T6009] __sctp_setsockopt_connectx+0xfc/0x170 [ 62.855308][ T6009] sctp_getsockopt+0x2e9f/0x7ae0 [ 62.856609][ T6009] ? __pfx_stack_trace_save+0x10/0x10 [ 62.858022][ T6009] ? aa_label_sk_perm+0x19d/0x5a0 [ 62.859435][ T6009] ? __lock_acquire+0xbdd/0x3ce0 [ 62.860726][ T6009] ? __pfx_sctp_getsockopt+0x10/0x10 [ 62.862120][ T6009] ? __pfx___lock_acquire+0x10/0x10 [ 62.863480][ T6009] ? hlock_class+0x4e/0x130 [ 62.864676][ T6009] ? __pfx___might_resched+0x10/0x10 [ 62.866065][ T6009] ? __pfx___lock_acquire+0x10/0x10 [ 62.867423][ T6009] ? aa_sk_perm+0x2f5/0xb20 [ 62.868618][ T6009] ? __pfx_aa_sk_perm+0x10/0x10 [ 62.869916][ T6009] ? find_held_lock+0x2d/0x110 [ 62.871173][ T6009] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 62.872709][ T6009] ? do_sock_getsockopt+0x3fe/0x870 [ 62.874081][ T6009] do_sock_getsockopt+0x3fe/0x870 [ 62.875407][ T6009] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 62.877134][ T6009] ? __fget_files+0x244/0x3f0 [ 62.878372][ T6009] __sys_getsockopt+0x1a1/0x270 [ 62.879641][ T6009] ? __pfx___sys_getsockopt+0x10/0x10 [ 62.881044][ T6009] ? fput+0x30/0x390 [ 62.882077][ T6009] ? ksys_write+0x1ad/0x260 [ 62.883269][ T6009] ? __pfx_ksys_write+0x10/0x10 [ 62.884535][ T6009] __ia32_sys_getsockopt+0xbc/0x160 [ 62.885895][ T6009] ? lockdep_hardirqs_on+0x7c/0x110 [ 62.887255][ T6009] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 62.888959][ T6009] __do_fast_syscall_32+0x73/0x120 [ 62.890327][ T6009] do_fast_syscall_32+0x32/0x80 [ 62.891611][ T6009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.893259][ T6009] RIP: 0023:0xf7f46579 [ 62.894335][ T6009] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 62.899445][ T6009] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 62.901594][ T6009] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 62.903671][ T6009] RDX: 000000000000006f RSI: 0000000020000000 RDI: 0000000020000240 [ 62.905727][ T6009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.907804][ T6009] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 62.909888][ T6009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.911948][ T6009] [ 62.912799][ C1] vkms_vblank_simulate: vblank timer overrun [ 62.959935][ T5352] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 63.352159][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 63.398839][ T6030] evm: overlay not supported [ 63.402237][ T6030] FAULT_INJECTION: forcing a failure. [ 63.402237][ T6030] name failslab, interval 1, probability 0, space 0, times 0 [ 63.405912][ T6030] CPU: 3 UID: 0 PID: 6030 Comm: syz.0.120 Not tainted 6.12.0-rc3-syzkaller-00319-gb04ae0f45168 #0 [ 63.408633][ T6030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.411471][ T6030] Call Trace: [ 63.412343][ T6030] [ 63.413115][ T6030] dump_stack_lvl+0x16c/0x1f0 [ 63.414365][ T6030] should_fail_ex+0x497/0x5b0 [ 63.415597][ T6030] ? fs_reclaim_acquire+0xae/0x150 [ 63.416922][ T6030] should_failslab+0xc2/0x120 [ 63.418256][ T6030] __kmalloc_cache_noprof+0x6b/0x310 [ 63.419632][ T6030] ? trace_lock_acquire+0x14a/0x1d0 [ 63.421085][ T6030] ? ima_add_digest_entry+0x52/0x530 [ 63.423625][ T6030] ima_add_digest_entry+0x52/0x530 [ 63.425165][ T6030] ima_add_template_entry+0x586/0x840 [ 63.426698][ T6030] ? __pfx_ima_add_template_entry+0x10/0x10 [ 63.428234][ T6030] ? ima_calc_field_array_hash+0x327/0x3c0 [ 63.429777][ T6030] ima_store_template+0xdc/0x150 [ 63.431070][ T6030] ima_store_measurement+0x223/0x5c0 [ 63.432488][ T6030] ? __pfx_ima_store_measurement+0x10/0x10 [ 63.434002][ T6030] ? ima_d_path+0x12c/0x2a0 [ 63.435181][ T6030] ? vfs_getxattr_alloc+0xf1/0x340 [ 63.436509][ T6030] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 63.437930][ T6030] process_measurement+0x1bcb/0x2370 [ 63.439295][ T6030] ? __pfx_process_measurement+0x10/0x10 [ 63.440745][ T6030] ? mnt_get_write_access+0x20c/0x300 [ 63.442140][ T6030] ? file_ra_state_init+0x39/0xe0 [ 63.443447][ T6030] ? do_dentry_open+0xbe9/0x1530 [ 63.444740][ T6030] ? __pfx_shmem_file_open+0x10/0x10 [ 63.446130][ T6030] ? __pfx_ovl_open+0x10/0x10 [ 63.447371][ T6030] ? bpf_lsm_file_open+0x9/0x10 [ 63.448654][ T6030] ? inode_to_bdi+0x9e/0x160 [ 63.449901][ T6030] ima_file_check+0xc1/0x110 [ 63.451128][ T6030] ? __pfx_ima_file_check+0x10/0x10 [ 63.452531][ T6030] security_file_post_open+0x8e/0x210 [ 63.453942][ T6030] path_openat+0x1419/0x2d60 [ 63.455155][ T6030] ? __pfx_path_openat+0x10/0x10 [ 63.456446][ T6030] ? __pfx___lock_acquire+0x10/0x10 [ 63.457811][ T6030] do_filp_open+0x1dc/0x430 [ 63.458999][ T6030] ? __pfx_do_filp_open+0x10/0x10 [ 63.460410][ T6030] ? find_held_lock+0x2d/0x110 [ 63.461685][ T6030] ? _raw_spin_unlock+0x28/0x50 [ 63.463069][ T6030] ? alloc_fd+0x2d7/0x6c0 [ 63.464225][ T6030] do_sys_openat2+0x17a/0x1e0 [ 63.465461][ T6030] ? __pfx_do_sys_openat2+0x10/0x10 [ 63.466847][ T6030] ? __fget_files+0x244/0x3f0 [ 63.468085][ T6030] __ia32_compat_sys_openat+0x16e/0x210 [ 63.469546][ T6030] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 63.471149][ T6030] ? ksys_write+0x1ad/0x260 [ 63.472378][ T6030] __do_fast_syscall_32+0x73/0x120 [ 63.473719][ T6030] do_fast_syscall_32+0x32/0x80 [ 63.475012][ T6030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 63.476659][ T6030] RIP: 0023:0xf744e579 [ 63.477729][ T6030] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 63.478622][ T6033] netlink: 'syz.1.117': attribute type 2 has an invalid length. [ 63.482670][ T6030] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 63.486819][ T6030] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020004400 [ 63.488860][ T6030] RDX: 000000000006b142 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.490935][ T6030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 63.493013][ T6030] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 63.495182][ T6030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.497169][ T6033] : entered promiscuous mode [ 63.497246][ T6030] [ 63.497443][ T6032] netlink: 'syz.2.119': attribute type 2 has an invalid length. [ 63.497489][ T6032] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.119'. [ 63.510147][ T6030] ima: OUT OF MEMORY ERROR creating queue entry [ 63.515872][ T39] kauditd_printk_skb: 65 callbacks suppressed [ 63.515881][ T39] audit: type=1804 audit(1729318134.061:77): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.120" name="/newroot/27/bus/bus" dev="overlay" ino=167 res=0 errno=0 [ 63.610135][ T6036] netlink: 'syz.0.121': attribute type 10 has an invalid length. [ 63.626250][ T4792] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 64.495895][ T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 64.808538][ T8] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 64.813071][ T8] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 64.817259][ T8] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 64.820297][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.839850][ T6056] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 64.853180][ T8] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 65.117860][ T4791] usb 7-1: USB disconnect, device number 2 [ 65.706034][ T4792] Bluetooth: hci3: Opcode 0x2046 failed: -110 [ 65.766868][ T6077] netlink: 56 bytes leftover after parsing attributes in process `syz.3.130'. [ 66.021950][ T6089] can0: slcan on ttyS3. [ 66.333860][ T6112] FAULT_INJECTION: forcing a failure. [ 66.333860][ T6112] name failslab, interval 1, probability 0, space 0, times 0 [ 66.337675][ T6112] CPU: 1 UID: 0 PID: 6112 Comm: syz.0.140 Not tainted 6.12.0-rc3-syzkaller-00319-gb04ae0f45168 #0 [ 66.340584][ T6112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.343392][ T6112] Call Trace: [ 66.344370][ T6112] [ 66.345154][ T6112] dump_stack_lvl+0x16c/0x1f0 [ 66.346400][ T6112] should_fail_ex+0x497/0x5b0 [ 66.347693][ T6112] ? fs_reclaim_acquire+0xae/0x150 [ 66.349076][ T6112] should_failslab+0xc2/0x120 [ 66.350712][ T6112] __kmalloc_noprof+0xcb/0x410 [ 66.352031][ T6112] ? rcu_is_watching+0x12/0xc0 [ 66.353287][ T6112] tomoyo_encode2+0x100/0x3e0 [ 66.354543][ T6112] tomoyo_realpath_from_path+0x1a7/0x710 [ 66.356024][ T6112] ? tomoyo_path_number_perm+0x232/0x5b0 [ 66.357490][ T6112] tomoyo_path_number_perm+0x245/0x5b0 [ 66.358906][ T6112] ? tomoyo_path_number_perm+0x232/0x5b0 [ 66.360369][ T6112] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 66.361951][ T6112] ? trace_lock_acquire+0x14a/0x1d0 [ 66.363342][ T6112] ? lock_acquire+0x2f/0xb0 [ 66.364573][ T6112] ? __fget_files+0x40/0x3f0 [ 66.366002][ T6112] ? __fget_files+0x244/0x3f0 [ 66.367242][ T6112] security_file_ioctl_compat+0x9b/0x240 [ 66.368716][ T6112] __do_compat_sys_ioctl+0x52/0x2b0 [ 66.370101][ T6112] __do_fast_syscall_32+0x73/0x120 [ 66.371478][ T6112] do_fast_syscall_32+0x32/0x80 [ 66.372776][ T6112] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.374444][ T6112] RIP: 0023:0xf744e579 [ 66.375516][ T6112] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 66.380503][ T6112] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 66.382658][ T6112] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040045701 [ 66.384690][ T6112] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.386762][ T6112] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.388800][ T6112] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 66.390864][ T6112] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.392918][ T6112] [ 66.393761][ C1] vkms_vblank_simulate: vblank timer overrun [ 66.400246][ T6112] ERROR: Out of memory at tomoyo_realpath_from_path. [ 66.476902][ T6120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.143'. [ 66.624922][ T6124] 9pnet_fd: Insufficient options for proto=fd [ 66.628644][ T6124] netlink: 9 bytes leftover after parsing attributes in process `syz.0.145'. [ 66.632208][ T6124] gretap0: entered promiscuous mode [ 66.641431][ T6124] netlink: 5 bytes leftover after parsing attributes in process `syz.0.145'. [ 66.644730][ T6124] 0ªX¹¦D: renamed from gretap0 [ 66.647825][ T6124] 0ªX¹¦D: left promiscuous mode [ 66.649180][ T6124] 0ªX¹¦D: entered allmulticast mode [ 66.651708][ T6124] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 66.856670][ T6086] can0 (unregistered): slcan off ttyS3. [ 66.949513][ T6140] netlink: 2 bytes leftover after parsing attributes in process `syz.2.149'. [ 66.952284][ T6140] batadv_slave_1: entered promiscuous mode [ 66.960498][ T6140] netlink: 'syz.2.149': attribute type 1 has an invalid length. [ 66.962600][ T6140] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.149'. [ 66.964937][ T6140] netlink: 9 bytes leftover after parsing attributes in process `syz.2.149'. [ 67.009986][ T6141] serio: Serial port pts0 [ 67.157037][ T39] audit: type=1326 audit(1729318137.711:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 67.162622][ T39] audit: type=1326 audit(1729318137.711:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 67.170184][ T39] audit: type=1326 audit(1729318137.711:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.152" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 67.175623][ T39] audit: type=1326 audit(1729318137.711:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 67.181268][ T39] audit: type=1326 audit(1729318137.711:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 67.186915][ T39] audit: type=1326 audit(1729318137.711:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.152" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 67.200259][ T39] audit: type=1326 audit(1729318137.751:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 67.205806][ T39] audit: type=1326 audit(1729318137.751:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 67.211291][ T39] audit: type=1326 audit(1729318137.751:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.152" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 67.315882][ T979] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.399003][ T6160] tmpfs: Bad value for 'mpol' [ 67.462337][ T6163] tipc: Started in network mode [ 67.463754][ T6163] tipc: Node identity ffffffff, cluster identity 4711 [ 67.465532][ T6163] tipc: Node number set to 4294967295 [ 67.477124][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.480033][ T979] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.484532][ T979] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.493076][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.506520][ T979] usb 5-1: config 0 descriptor?? [ 67.512568][ T979] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 68.175874][ T5352] Bluetooth: hci1: command 0x0406 tx timeout [ 68.244284][ T6138] syz.0.148 (6138): drop_caches: 2 [ 68.899274][ T6183] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 69.942752][ T30] usb 5-1: USB disconnect, device number 2 [ 70.237497][ T6208] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.659884][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.661785][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.832841][ T6242] can0: slcan on ttyS3. [ 70.975862][ T4792] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 70.978267][ T5352] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.456034][ T5408] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 71.547548][ T6271] FAULT_INJECTION: forcing a failure. [ 71.547548][ T6271] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 71.551028][ T6271] CPU: 2 UID: 0 PID: 6271 Comm: syz.1.184 Not tainted 6.12.0-rc3-syzkaller-00319-gb04ae0f45168 #0 [ 71.553754][ T6271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.556527][ T6271] Call Trace: [ 71.557395][ T6271] [ 71.558180][ T6271] dump_stack_lvl+0x16c/0x1f0 [ 71.559409][ T6271] should_fail_ex+0x497/0x5b0 [ 71.560639][ T6271] _copy_to_user+0x30/0xc0 [ 71.561812][ T6271] simple_read_from_buffer+0xd0/0x160 [ 71.563199][ T6271] proc_fail_nth_read+0x198/0x270 [ 71.564508][ T6271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.565979][ T6271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.567404][ T6271] vfs_read+0x1ce/0xbd0 [ 71.568486][ T6271] ? __fget_files+0x23a/0x3f0 [ 71.569718][ T6271] ? fdget_pos+0x24c/0x360 [ 71.570875][ T6271] ? __pfx_lock_release+0x10/0x10 [ 71.572173][ T6271] ? trace_lock_acquire+0x14a/0x1d0 [ 71.573515][ T6271] ? __pfx_vfs_read+0x10/0x10 [ 71.574746][ T6271] ? __pfx___mutex_lock+0x10/0x10 [ 71.576073][ T6271] ? __fget_files+0x244/0x3f0 [ 71.577293][ T6271] ksys_read+0x12f/0x260 [ 71.578402][ T6271] ? __pfx_ksys_read+0x10/0x10 [ 71.579640][ T6271] __do_fast_syscall_32+0x73/0x120 [ 71.580962][ T6271] do_fast_syscall_32+0x32/0x80 [ 71.582228][ T6271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.583859][ T6271] RIP: 0023:0xf743e579 [ 71.584920][ T6271] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 71.589856][ T6271] RSP: 002b:00000000f57265a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 71.592037][ T6271] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5726620 [ 71.594773][ T6271] RDX: 000000000000000f RSI: 00000000f742bff4 RDI: 0000000000000000 [ 71.597536][ T6271] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 71.600271][ T6271] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 71.603015][ T6271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.605760][ T6271] [ 71.608083][ T5408] usb 8-1: device descriptor read/64, error -71 [ 71.666885][ T6237] can0 (unregistered): slcan off ttyS3. [ 71.846448][ T5408] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 71.916196][ T6303] FAULT_INJECTION: forcing a failure. [ 71.916196][ T6303] name failslab, interval 1, probability 0, space 0, times 0 [ 71.919435][ T6303] CPU: 3 UID: 0 PID: 6303 Comm: syz.0.190 Not tainted 6.12.0-rc3-syzkaller-00319-gb04ae0f45168 #0 [ 71.922211][ T6303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.924950][ T6303] Call Trace: [ 71.925831][ T6303] [ 71.926597][ T6303] dump_stack_lvl+0x16c/0x1f0 [ 71.928037][ T6303] should_fail_ex+0x497/0x5b0 [ 71.929300][ T6303] ? fs_reclaim_acquire+0xae/0x150 [ 71.930657][ T6303] should_failslab+0xc2/0x120 [ 71.931953][ T6303] __kmalloc_cache_noprof+0x6b/0x310 [ 71.933320][ T6303] ? nfnl_err_add+0x4e/0x2d0 [ 71.934541][ T6303] nfnl_err_add+0x4e/0x2d0 [ 71.935705][ T6303] nfnetlink_rcv_batch+0xe40/0x24e0 [ 71.937070][ T6303] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 71.938531][ T6303] ? __pfx_lock_release+0x10/0x10 [ 71.939862][ T6303] ? __local_bh_enable_ip+0xa4/0x120 [ 71.941228][ T6303] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.942684][ T6303] ? __pfx___dev_queue_xmit+0x10/0x10 [ 71.944095][ T6303] ? __nla_parse+0x40/0x60 [ 71.945272][ T6303] nfnetlink_rcv+0x3c3/0x430 [ 71.946511][ T6303] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 71.947847][ T6303] netlink_unicast+0x53c/0x7f0 [ 71.949095][ T6303] ? __pfx_netlink_unicast+0x10/0x10 [ 71.950484][ T6303] ? __phys_addr_symbol+0x30/0x80 [ 71.951952][ T6303] ? __check_object_size+0x488/0x710 [ 71.953319][ T6303] netlink_sendmsg+0x8b8/0xd70 [ 71.954573][ T6303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.955939][ T6303] ? lock_acquire+0x2f/0xb0 [ 71.957122][ T6303] ____sys_sendmsg+0x9ae/0xb40 [ 71.958367][ T6303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.959734][ T6303] ? get_compat_msghdr+0x11b/0x170 [ 71.961059][ T6303] ? __pfx___lock_acquire+0x10/0x10 [ 71.962459][ T6303] ___sys_sendmsg+0x135/0x1e0 [ 71.963682][ T6303] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.965039][ T6303] ? lock_acquire+0x2f/0xb0 [ 71.965911][ T30] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 71.966224][ T6303] ? __fget_files+0x40/0x3f0 [ 71.969402][ T6303] ? fdget+0x176/0x210 [ 71.970491][ T6303] __sys_sendmsg+0x117/0x1f0 [ 71.971776][ T6303] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.973119][ T6303] ? __fget_files+0x244/0x3f0 [ 71.974365][ T6303] __do_fast_syscall_32+0x73/0x120 [ 71.975707][ T6303] do_fast_syscall_32+0x32/0x80 [ 71.975873][ T5408] usb 8-1: device descriptor read/64, error -71 [ 71.977110][ T6303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.977127][ T6303] RIP: 0023:0xf744e579 [ 71.977135][ T6303] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 71.977144][ T6303] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 71.977155][ T6303] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 71.977161][ T6303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.977166][ T6303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.977172][ T6303] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 71.977178][ T6303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.977189][ T6303] [ 72.106440][ T5408] usb usb8-port1: attempt power cycle [ 72.195861][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 72.199388][ T30] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 72.201713][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.204610][ T30] usb 6-1: config 0 descriptor?? [ 72.212289][ T30] as10x_usb: device has been detected [ 72.214380][ T30] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 72.222186][ T30] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 72.235542][ T6322] can0: slcan on ttyS3. [ 72.238028][ T30] as10x_usb: error during firmware upload part1 [ 72.240611][ T30] Registered device nBox DVB-T Dongle [ 72.456773][ T5408] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 72.462685][ T4791] usb 6-1: USB disconnect, device number 2 [ 72.472591][ T4791] Unregistered device nBox DVB-T Dongle [ 72.473619][ T4791] as10x_usb: device has been disconnected [ 72.486026][ T5408] usb 8-1: device descriptor read/8, error -71 [ 72.725847][ T5408] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 72.747135][ T5408] usb 8-1: device descriptor read/8, error -71 [ 72.856866][ T5408] usb usb8-port1: unable to enumerate USB device [ 72.905835][ T4791] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 72.926105][ T6319] can0 (unregistered): slcan off ttyS3. [ 72.989512][ T6348] netlink: 209756 bytes leftover after parsing attributes in process `syz.0.199'. [ 73.057858][ T4791] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 73.061224][ T4791] usb 6-1: config 0 has no interfaces? [ 73.063364][ T4791] usb 6-1: config 0 has no interfaces? [ 73.065455][ T4791] usb 6-1: config 0 has no interfaces? [ 73.067918][ T4791] usb 6-1: config 0 has no interfaces? [ 73.071370][ T4791] usb 6-1: config 0 has no interfaces? [ 73.073564][ T4791] usb 6-1: config 0 has no interfaces? [ 73.080084][ T4791] usb 6-1: config 0 has no interfaces? [ 73.082330][ T4791] usb 6-1: config 0 has no interfaces? [ 73.085272][ T4791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.087798][ T4791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.091361][ T4791] usb 6-1: Product: syz [ 73.092834][ T4791] usb 6-1: Manufacturer: syz [ 73.094203][ T4791] usb 6-1: SerialNumber: syz [ 73.097428][ T4791] usb 6-1: config 0 descriptor?? [ 73.304297][ T4791] usb 6-1: USB disconnect, device number 3 [ 73.648412][ T6363] FAULT_INJECTION: forcing a failure. [ 73.648412][ T6363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.651805][ T6363] CPU: 0 UID: 0 PID: 6363 Comm: syz.2.204 Not tainted 6.12.0-rc3-syzkaller-00319-gb04ae0f45168 #0 [ 73.654596][ T6363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.657359][ T6363] Call Trace: [ 73.658250][ T6363] [ 73.659027][ T6363] dump_stack_lvl+0x16c/0x1f0 [ 73.660259][ T6363] should_fail_ex+0x497/0x5b0 [ 73.661581][ T6363] _copy_from_user+0x30/0xf0 [ 73.662894][ T6363] snd_ctl_elem_add_compat+0x330/0x3f0 [ 73.664320][ T6363] snd_ctl_ioctl_compat+0x13b/0x990 [ 73.665773][ T6363] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 73.667298][ T6363] ? __fget_files+0x244/0x3f0 [ 73.668531][ T6363] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 73.670044][ T6363] __do_compat_sys_ioctl+0x259/0x2b0 [ 73.671461][ T6363] __do_fast_syscall_32+0x73/0x120 [ 73.672804][ T6363] do_fast_syscall_32+0x32/0x80 [ 73.674082][ T6363] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.675740][ T6363] RIP: 0023:0xf7f46579 [ 73.676821][ T6363] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 73.681837][ T6363] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 73.683996][ T6363] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c1105517 [ 73.686037][ T6363] RDX: 0000000020000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.688081][ T6363] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.690154][ T6363] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 73.692192][ T6363] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.694256][ T6363] [ 73.980229][ T30] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 74.092765][ T6378] FAULT_INJECTION: forcing a failure. [ 74.092765][ T6378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.096838][ T6378] CPU: 3 UID: 0 PID: 6378 Comm: syz.2.208 Not tainted 6.12.0-rc3-syzkaller-00319-gb04ae0f45168 #0 [ 74.099611][ T6378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.102389][ T6378] Call Trace: [ 74.103269][ T6378] [ 74.104049][ T6378] dump_stack_lvl+0x16c/0x1f0 [ 74.105294][ T6378] should_fail_ex+0x497/0x5b0 [ 74.106545][ T6378] _copy_from_user+0x30/0xf0 [ 74.107766][ T6378] input_event_from_user+0x22d/0x3b0 [ 74.109234][ T6378] ? __pfx_input_event_from_user+0x10/0x10 [ 74.110936][ T6378] ? input_inject_event+0x193/0x370 [ 74.112304][ T6378] evdev_write+0x377/0x750 [ 74.113480][ T6378] ? __pfx_evdev_write+0x10/0x10 [ 74.114789][ T6378] ? bpf_lsm_file_permission+0x9/0x10 [ 74.115849][ T30] usb 6-1: device descriptor read/64, error -71 [ 74.116186][ T6378] ? security_file_permission+0x71/0x210 [ 74.119313][ T6378] ? __pfx_evdev_write+0x10/0x10 [ 74.120622][ T6378] vfs_write+0x28e/0x1140 [ 74.121775][ T6378] ? __fget_files+0x23a/0x3f0 [ 74.123012][ T6378] ? __pfx_lock_release+0x10/0x10 [ 74.124339][ T6378] ? trace_lock_acquire+0x14a/0x1d0 [ 74.125716][ T6378] ? __pfx_vfs_write+0x10/0x10 [ 74.126993][ T6378] ? lock_acquire+0x2f/0xb0 [ 74.128190][ T6378] ? __fget_files+0x40/0x3f0 [ 74.129418][ T6378] ? __fget_files+0x244/0x3f0 [ 74.130666][ T6378] ksys_write+0x1fa/0x260 [ 74.131809][ T6378] ? __pfx_ksys_write+0x10/0x10 [ 74.133089][ T6378] __do_fast_syscall_32+0x73/0x120 [ 74.134490][ T6378] do_fast_syscall_32+0x32/0x80 [ 74.135778][ T6378] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.137425][ T6378] RIP: 0023:0xf7f46579 [ 74.138509][ T6378] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 74.143575][ T6378] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 74.145756][ T6378] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 74.147809][ T6378] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.149992][ T6378] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.152180][ T6378] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 74.154247][ T6378] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.156300][ T6378] [ 74.240198][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 74.328748][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 74.355811][ T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 74.485825][ T30] usb 6-1: device descriptor read/64, error -71 [ 74.596073][ T30] usb usb6-port1: attempt power cycle [ 74.952728][ T6400] usb usb8: usbfs: process 6400 (syz.1.215) did not claim interface 0 before use [ 75.132537][ T6410] fuse: Bad value for 'fd' [ 75.427206][ T6410] nbd0: detected capacity change from 0 to 14 [ 75.433810][ T6418] block nbd0: shutting down sockets [ 75.437554][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.439988][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.440148][ T6424] Driver unsupported XDP return value 0 on prog (id 80) dev N/A, expect packet loss! [ 75.442149][ T5339] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.449151][ T5339] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.451901][ T5339] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.454309][ T5339] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.460579][ T5339] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.463996][ T5339] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.466307][ T5339] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.468700][ T5339] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.470848][ T5339] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.473208][ T5339] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.475317][ T5339] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.477784][ T5339] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.479868][ T5339] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.482299][ T5339] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.484521][ T5339] ldm_validate_partition_table(): Disk read failed. [ 75.486515][ T5339] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.488864][ T5339] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.490965][ T5339] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.493349][ T5339] Buffer I/O error on dev nbd0, logical block 0, async page read [ 75.495493][ T5339] Dev nbd0: unable to read RDB block 0 [ 75.497220][ T5339] nbd0: unable to read partition table [ 75.498816][ T5339] nbd0: partition table beyond EOD, truncated [ 75.502773][ T5339] ldm_validate_partition_table(): Disk read failed. [ 75.504758][ T5339] Dev nbd0: unable to read RDB block 0 [ 75.506465][ T5339] nbd0: unable to read partition table [ 75.508033][ T5339] nbd0: partition table beyond EOD, truncated [ 75.554739][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'. [ 75.610623][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'. [ 75.792292][ T56] cfg80211: failed to load regulatory.db [ 76.016678][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 76.627388][ T6468] process 'syz.2.236' launched './file2' with NULL argv: empty string added [ 77.725846][ T5386] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 77.885828][ T5386] usb 7-1: Using ep0 maxpacket: 8 [ 77.890263][ T5386] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 77.892969][ T5386] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 77.896855][ T5386] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.901061][ T5386] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 77.904923][ T5386] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 77.910342][ T5386] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 77.913180][ T5386] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 77.917159][ T5386] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.921169][ T5386] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 77.925046][ T5386] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 77.930644][ T5386] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 77.933277][ T5386] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 77.937402][ T5386] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.941443][ T5386] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 77.945178][ T5386] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 77.954621][ T5386] usb 7-1: string descriptor 0 read error: -22 [ 77.957005][ T5386] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 77.960263][ T5386] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.972507][ T5386] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 78.010588][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 78.069171][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 78.389285][ T4791] usb 7-1: USB disconnect, device number 3 [ 79.248723][ T6506] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 79.285060][ T6506] netlink: 'syz.3.244': attribute type 3 has an invalid length. [ 79.293932][ T6506] netlink: 'syz.3.244': attribute type 3 has an invalid length. [ 80.200065][ T6523] program syz.3.249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.366100][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 80.420357][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 80.660201][ T6543] kvm: pic: single mode not supported [ 81.206051][ T6553] can0: slcan on ttyS3. [ 81.546048][ T4792] Bluetooth: hci2: command 0x0406 tx timeout [ 81.609234][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'. [ 82.056718][ T6547] can0 (unregistered): slcan off ttyS3. [ 82.216023][ T4791] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.380978][ T4791] usb 5-1: Using ep0 maxpacket: 8 [ 82.385451][ T4791] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 82.388146][ T4791] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 82.390560][ T4791] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.395791][ T4791] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.405858][ T4791] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.408008][ T4791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.456170][ T6608] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 82.535214][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 82.589611][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 82.765906][ T4791] usb 5-1: usb_control_msg returned -71 [ 82.767857][ T4791] usbtmc 5-1:16.0: can't read capabilities [ 82.774081][ T4791] usb 5-1: USB disconnect, device number 3 [ 83.428160][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 83.482363][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 83.623874][ T5057] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.765886][ T5057] usb 5-1: device descriptor read/64, error -71 [ 84.005854][ T5057] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 84.135921][ T5057] usb 5-1: device descriptor read/64, error -71 [ 84.246155][ T5057] usb usb5-port1: attempt power cycle [ 84.639286][ T5057] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 84.656271][ T5057] usb 5-1: device descriptor read/8, error -71 [ 84.905834][ T5057] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 84.936201][ T5057] usb 5-1: device descriptor read/8, error -71 [ 85.046029][ T5057] usb usb5-port1: unable to enumerate USB device [ 86.977336][ T6695] fuse: Bad value for 'fd' [ 87.156022][ T6696] nbd1: detected capacity change from 0 to 14 [ 87.159259][ T6695] block nbd1: shutting down sockets [ 87.160475][ T5339] blk_print_req_error: 25 callbacks suppressed [ 87.160484][ T5339] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.165044][ T5339] buffer_io_error: 25 callbacks suppressed [ 87.165051][ T5339] Buffer I/O error on dev nbd1, logical block 0, async page read [ 87.168876][ T5339] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.173339][ T5339] Buffer I/O error on dev nbd1, logical block 0, async page read [ 87.175610][ T5339] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.178329][ T5339] Buffer I/O error on dev nbd1, logical block 0, async page read [ 87.180503][ T5339] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.183691][ T5339] Buffer I/O error on dev nbd1, logical block 0, async page read [ 87.186487][ T5339] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.189527][ T5339] Buffer I/O error on dev nbd1, logical block 0, async page read [ 87.191801][ T5339] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.194521][ T5339] Buffer I/O error on dev nbd1, logical block 0, async page read [ 87.197690][ T5339] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.201584][ T5339] Buffer I/O error on dev nbd1, logical block 0, async page read [ 87.204636][ T5339] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.208014][ T5339] Buffer I/O error on dev nbd1, logical block 0, async page read [ 87.210724][ T5339] ldm_validate_partition_table(): Disk read failed. [ 87.213152][ T5339] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.216551][ T5339] Buffer I/O error on dev nbd1, logical block 0, async page read [ 87.220832][ T5339] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.224049][ T5339] Buffer I/O error on dev nbd1, logical block 0, async page read [ 87.229043][ T5339] Dev nbd1: unable to read RDB block 0 [ 87.233803][ T5339] nbd1: unable to read partition table [ 87.235929][ T5339] nbd1: partition table beyond EOD, truncated [ 87.241415][ T6695] ldm_validate_partition_table(): Disk read failed. [ 87.244847][ T6695] Dev nbd1: unable to read RDB block 0 [ 87.248836][ T6695] nbd1: unable to read partition table [ 87.251096][ T6695] nbd1: partition table beyond EOD, truncated [ 87.255039][ T5339] ldm_validate_partition_table(): Disk read failed. [ 87.258107][ T5339] Dev nbd1: unable to read RDB block 0 [ 87.261375][ T5339] nbd1: unable to read partition table [ 87.263383][ T5339] nbd1: partition table beyond EOD, truncated [ 87.310604][ T6709] autofs: Unknown parameter './file1' [ 87.655728][ T6722] can0: slcan on ttyS3. [ 88.536377][ T6719] can0 (unregistered): slcan off ttyS3. [ 88.794954][ T6760] fuse: Bad value for 'fd' [ 89.016347][ T6769] nbd3: detected capacity change from 0 to 14 [ 89.019152][ T6760] block nbd3: shutting down sockets [ 89.022712][ T5339] ldm_validate_partition_table(): Disk read failed. [ 89.026004][ T5339] Dev nbd3: unable to read RDB block 0 [ 89.027558][ T5339] nbd3: unable to read partition table [ 89.029035][ T5339] nbd3: partition table beyond EOD, truncated [ 89.041417][ T5339] ldm_validate_partition_table(): Disk read failed. [ 89.046361][ T5339] Dev nbd3: unable to read RDB block 0 [ 89.047911][ T5339] nbd3: unable to read partition table [ 89.049971][ T5339] nbd3: partition table beyond EOD, truncated [ 89.760916][ T6789] netlink: 'syz.0.306': attribute type 2 has an invalid length. [ 89.764467][ T6789] : entered promiscuous mode [ 90.104147][ T6800] can0: slcan on ttyS3. [ 90.411776][ T6815] netlink: 'syz.1.310': attribute type 2 has an invalid length. [ 90.415726][ T6815] openvswitch: : Dropping previously announced user features [ 90.713310][ T6818] netlink: 'syz.0.311': attribute type 10 has an invalid length. [ 90.718382][ T6818] bond0: (slave bond_slave_0): Releasing backup interface [ 91.016098][ T6796] can0 (unregistered): slcan off ttyS3. [ 91.513526][ T6837] openvswitch: netlink: Message has 4 unknown bytes. [ 91.815832][ T979] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 91.945849][ T979] usb 8-1: device descriptor read/64, error -71 [ 92.195866][ T979] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 92.326620][ T979] usb 8-1: device descriptor read/64, error -71 [ 92.450438][ T979] usb usb8-port1: attempt power cycle [ 92.470946][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 92.470956][ T39] audit: type=1326 audit(1729318163.021:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 92.478276][ T39] audit: type=1326 audit(1729318163.021:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 92.478731][ T6859] loop7: detected capacity change from 0 to 16384 [ 92.484360][ T39] audit: type=1326 audit(1729318163.021:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 92.491643][ T39] audit: type=1326 audit(1729318163.021:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 92.498558][ T39] audit: type=1326 audit(1729318163.021:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 92.506867][ T39] audit: type=1326 audit(1729318163.021:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 92.512309][ T39] audit: type=1326 audit(1729318163.021:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 92.518943][ T39] audit: type=1326 audit(1729318163.021:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 92.524765][ T39] audit: type=1326 audit(1729318163.021:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 92.530527][ T39] audit: type=1326 audit(1729318163.021:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 92.627426][ T6864] netlink: 'syz.1.319': attribute type 2 has an invalid length. [ 92.630097][ T6864] openvswitch: : Dropping previously announced user features [ 92.785874][ T979] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 92.806567][ T979] usb 8-1: device descriptor read/8, error -71 [ 92.886154][ T6867] can0: slcan on ttyS3. [ 93.045941][ T979] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 93.066374][ T979] usb 8-1: device descriptor read/8, error -71 [ 93.175976][ T979] usb usb8-port1: unable to enumerate USB device [ 93.646361][ T6865] can0 (unregistered): slcan off ttyS3. [ 93.838578][ T6893] can0: slcan on ttyS3. [ 94.659081][ T6886] can0 (unregistered): slcan off ttyS3. [ 94.917991][ T6914] can0: slcan on ttyS3. [ 95.596167][ T6906] can0 (unregistered): slcan off ttyS3. [ 96.127521][ T6967] input: syz0 as /devices/virtual/input/input7 [ 96.384663][ T6974] can0: slcan on ttyS3. [ 97.285893][ T6970] can0 (unregistered): slcan off ttyS3. [ 97.768141][ T7020] can0: slcan on ttyS3. [ 98.412154][ T7038] veth1_macvtap: left promiscuous mode [ 98.414134][ T7038] macsec0: entered promiscuous mode [ 98.416124][ T7038] macsec0: entered allmulticast mode [ 98.676517][ T7016] can0 (unregistered): slcan off ttyS3. [ 99.136347][ T7057] netlink: 'syz.1.348': attribute type 2 has an invalid length. [ 99.174843][ T7057] openvswitch: : Dropping previously announced user features [ 99.207021][ T7065] capability: warning: `syz.0.351' uses deprecated v2 capabilities in a way that may be insecure [ 99.238667][ T7062] netlink: 'syz.0.351': attribute type 1 has an invalid length. [ 99.240905][ T7062] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.351'. [ 99.249294][ T7066] can0: slcan on ttyS3. [ 99.366602][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.352'. [ 99.469050][ T7078] FAULT_INJECTION: forcing a failure. [ 99.469050][ T7078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.472607][ T7078] CPU: 1 UID: 0 PID: 7078 Comm: syz.3.353 Not tainted 6.12.0-rc3-syzkaller-00319-gb04ae0f45168 #0 [ 99.475375][ T7078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.477961][ T7078] Call Trace: [ 99.478834][ T7078] [ 99.479614][ T7078] dump_stack_lvl+0x16c/0x1f0 [ 99.480856][ T7078] should_fail_ex+0x497/0x5b0 [ 99.482097][ T7078] _copy_from_iter+0x29b/0x13e0 [ 99.483380][ T7078] ? __pfx__copy_from_iter+0x10/0x10 [ 99.484755][ T7078] ? __virt_addr_valid+0x1a4/0x590 [ 99.486111][ T7078] ? __virt_addr_valid+0x5e/0x590 [ 99.487450][ T7078] ? __phys_addr_symbol+0x30/0x80 [ 99.488775][ T7078] ? __check_object_size+0x488/0x710 [ 99.490185][ T7078] netlink_sendmsg+0x813/0xd70 [ 99.491451][ T7078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.492836][ T7078] ? lock_acquire+0x2f/0xb0 [ 99.494048][ T7078] ____sys_sendmsg+0x9ae/0xb40 [ 99.495314][ T7078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.496694][ T7078] ? get_compat_msghdr+0x11b/0x170 [ 99.498042][ T7078] ? psi_task_switch+0x203/0x8e0 [ 99.499347][ T7078] ___sys_sendmsg+0x135/0x1e0 [ 99.500591][ T7078] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.501961][ T7078] ? __pfx_lock_release+0x10/0x10 [ 99.503307][ T7078] ? trace_lock_acquire+0x14a/0x1d0 [ 99.504680][ T7078] ? finish_task_switch.isra.0+0x217/0xcc0 [ 99.506228][ T7078] ? __switch_to+0x749/0x1180 [ 99.507487][ T7078] ? fdget+0x176/0x210 [ 99.508573][ T7078] __sys_sendmsg+0x117/0x1f0 [ 99.509807][ T7078] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.511168][ T7078] __do_fast_syscall_32+0x73/0x120 [ 99.512521][ T7078] do_fast_syscall_32+0x32/0x80 [ 99.513823][ T7078] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.515488][ T7078] RIP: 0023:0xf73ce579 [ 99.516680][ T7078] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 99.521741][ T7078] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 99.523920][ T7078] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000380 [ 99.526018][ T7078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.528091][ T7078] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.530177][ T7078] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 99.532249][ T7078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.534348][ T7078] [ 100.106795][ T7063] can0 (unregistered): slcan off ttyS3. [ 100.239364][ T7102] netlink: 'syz.1.357': attribute type 10 has an invalid length. [ 100.919259][ T39] kauditd_printk_skb: 40 callbacks suppressed [ 100.919270][ T39] audit: type=1326 audit(1729318171.471:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.0.360" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x0 [ 101.326570][ T7119] FAULT_INJECTION: forcing a failure. [ 101.326570][ T7119] name failslab, interval 1, probability 0, space 0, times 0 [ 101.329691][ T7119] CPU: 1 UID: 0 PID: 7119 Comm: syz.3.361 Not tainted 6.12.0-rc3-syzkaller-00319-gb04ae0f45168 #0 [ 101.332306][ T7119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.334956][ T7119] Call Trace: [ 101.335821][ T7119] [ 101.336568][ T7119] dump_stack_lvl+0x16c/0x1f0 [ 101.337767][ T7119] should_fail_ex+0x497/0x5b0 [ 101.338956][ T7119] ? fs_reclaim_acquire+0xae/0x150 [ 101.340223][ T7119] should_failslab+0xc2/0x120 [ 101.341394][ T7119] __kmalloc_noprof+0xcb/0x410 [ 101.342617][ T7119] ? __pfx___mutex_trylock_common+0x10/0x10 [ 101.344090][ T7119] ? genl_rcv_msg+0x580/0x800 [ 101.345242][ T7119] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 101.347039][ T7119] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 101.348405][ T7119] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 101.349931][ T7119] ? __radix_tree_lookup+0x21f/0x2c0 [ 101.351264][ T7119] genl_rcv_msg+0x565/0x800 [ 101.352399][ T7119] ? __pfx_genl_rcv_msg+0x10/0x10 [ 101.353663][ T7119] ? __pfx_tipc_nl_bearer_disable+0x10/0x10 [ 101.355125][ T7119] netlink_rcv_skb+0x165/0x410 [ 101.356351][ T7119] ? __pfx_genl_rcv_msg+0x10/0x10 [ 101.357646][ T7119] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.358988][ T7119] ? down_read+0xc9/0x330 [ 101.360089][ T7119] ? __pfx_down_read+0x10/0x10 [ 101.361305][ T7119] ? netlink_deliver_tap+0x1ae/0xcf0 [ 101.362585][ T7119] genl_rcv+0x28/0x40 [ 101.363574][ T7119] netlink_unicast+0x53c/0x7f0 [ 101.364835][ T7119] ? __pfx_netlink_unicast+0x10/0x10 [ 101.366204][ T7119] ? __phys_addr_symbol+0x30/0x80 [ 101.367532][ T7119] ? __check_object_size+0x488/0x710 [ 101.368931][ T7119] netlink_sendmsg+0x8b8/0xd70 [ 101.370225][ T7119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.371622][ T7119] ? lock_acquire+0x2f/0xb0 [ 101.372835][ T7119] ____sys_sendmsg+0x9ae/0xb40 [ 101.374113][ T7119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.375509][ T7119] ? get_compat_msghdr+0x11b/0x170 [ 101.376857][ T7119] ? __pfx___lock_acquire+0x10/0x10 [ 101.378268][ T7119] ___sys_sendmsg+0x135/0x1e0 [ 101.379525][ T7119] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.380904][ T7119] ? lock_acquire+0x2f/0xb0 [ 101.382116][ T7119] ? __fget_files+0x40/0x3f0 [ 101.383244][ T7119] ? fdget+0x176/0x210 [ 101.384330][ T7119] __sys_sendmsg+0x117/0x1f0 [ 101.385560][ T7119] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.386912][ T7119] ? __fget_files+0x244/0x3f0 [ 101.388165][ T7119] __do_fast_syscall_32+0x73/0x120 [ 101.389534][ T7119] do_fast_syscall_32+0x32/0x80 [ 101.390824][ T7119] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.392483][ T7119] RIP: 0023:0xf73ce579 [ 101.393574][ T7119] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 101.398591][ T7119] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 101.400770][ T7119] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200009c0 [ 101.402843][ T7119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.404911][ T7119] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.406991][ T7119] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 101.409054][ T7119] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.411131][ T7119] [ 101.446274][ T7121] ======================================================= [ 101.446274][ T7121] WARNING: The mand mount option has been deprecated and [ 101.446274][ T7121] and is ignored by this kernel. Remove the mand [ 101.446274][ T7121] option from the mount to silence this warning. [ 101.446274][ T7121] ======================================================= [ 101.462326][ T7121] ntfs3(sr0): Primary boot signature is not NTFS. [ 101.464316][ T7121] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 101.701956][ T7127] netlink: 'syz.3.363': attribute type 2 has an invalid length. [ 101.708776][ T7127] openvswitch: : Dropping previously announced user features [ 101.861584][ T7129] netlink: 'syz.0.364': attribute type 2 has an invalid length. [ 101.865243][ T7129] openvswitch: : Dropping previously announced user features [ 102.591877][ T7143] can0: slcan on ttyS3. [ 102.648367][ T7147] netlink: 'syz.3.369': attribute type 10 has an invalid length. [ 103.129853][ T7159] netlink: 'syz.2.371': attribute type 5 has an invalid length. [ 103.174394][ T7161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.372'. [ 103.286008][ T7139] can0 (unregistered): slcan off ttyS3. [ 104.475818][ T57] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 104.625856][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 104.628373][ T57] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 104.630482][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.633104][ T57] usb 5-1: config 0 has no interface number 0 [ 104.634708][ T57] usb 5-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 104.638576][ T57] usb 5-1: config 0 interface 52 has no altsetting 0 [ 104.641483][ T57] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 104.643849][ T57] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 104.646238][ T57] usb 5-1: Product: syz [ 104.647349][ T57] usb 5-1: SerialNumber: syz [ 104.649493][ T57] usb 5-1: config 0 descriptor?? [ 105.059053][ T7188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.062247][ T7188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.066730][ T30] usb 5-1: USB disconnect, device number 8 [ 105.781404][ T7201] tipc: Enabling of bearer rejected, failed to enable media [ 105.982815][ T7212] dccp_close: ABORT with 32 bytes unread [ 106.079875][ T7217] can0: slcan on ttyS3. [ 106.586209][ T7233] netlink: 'syz.2.385': attribute type 2 has an invalid length. [ 106.604486][ T7233] : entered promiscuous mode [ 106.917112][ T7215] can0 (unregistered): slcan off ttyS3. [ 107.363996][ T7256] netlink: 'syz.2.387': attribute type 2 has an invalid length. [ 107.366768][ T7256] openvswitch: : Dropping previously announced user features [ 108.964881][ T7275] block device autoloading is deprecated and will be removed. [ 109.307448][ T7285] netlink: 'syz.0.395': attribute type 2 has an invalid length. [ 109.311350][ T7285] openvswitch: : Dropping previously announced user features [ 110.231737][ T4792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.234730][ T4792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.238218][ T4792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.240708][ T4792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.243233][ T4792] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 110.245287][ T4792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.312674][ T7294] chnl_net:caif_netlink_parms(): no params data found [ 110.355999][ T7294] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.358461][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.360422][ T7294] bridge_slave_0: entered allmulticast mode [ 110.362874][ T7294] bridge_slave_0: entered promiscuous mode [ 110.366334][ T7294] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.368746][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.371240][ T7294] bridge_slave_1: entered allmulticast mode [ 110.373689][ T7294] bridge_slave_1: entered promiscuous mode [ 110.392174][ T7294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.396671][ T7294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.418710][ T7294] team0: Port device team_slave_0 added [ 110.421203][ T7294] team0: Port device team_slave_1 added [ 110.438126][ T7294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.439963][ T7294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.448259][ T7294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.451835][ T7294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.453653][ T7294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.460330][ T7294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.481249][ T7294] hsr_slave_0: entered promiscuous mode [ 110.483180][ T7294] hsr_slave_1: entered promiscuous mode [ 110.485032][ T7294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.488947][ T7294] Cannot create hsr debugfs directory [ 110.506634][ T5386] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 110.555616][ T7294] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.658835][ T5386] usb 7-1: Using ep0 maxpacket: 8 [ 110.662077][ T5386] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 110.664248][ T5386] usb 7-1: config 179 has no interface number 0 [ 110.666114][ T5386] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 110.669167][ T5386] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 110.672214][ T5386] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 110.675111][ T5386] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 110.676185][ T7294] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.678247][ T5386] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 110.684532][ T5386] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 110.686965][ T5386] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.694096][ T7297] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.829481][ T7294] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.905804][ T5386] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input8 [ 110.922119][ T7294] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.102857][ T7294] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 111.108615][ T7294] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.111261][ T5386] usb 7-1: USB disconnect, device number 4 [ 111.112900][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 111.112918][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 111.118590][ T5386] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 111.120027][ T7294] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 111.124486][ T7294] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 111.150568][ T7294] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.152434][ T7294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.154371][ T7294] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.156340][ T7294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.176995][ T7294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.184519][ T1182] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.188422][ T1182] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.201082][ T7294] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.209533][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.211421][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.215397][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.217408][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.290655][ T7294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.306861][ T7294] veth0_vlan: entered promiscuous mode [ 111.310802][ T7294] veth1_vlan: entered promiscuous mode [ 111.320831][ T7294] veth0_macvtap: entered promiscuous mode [ 111.324098][ T7294] veth1_macvtap: entered promiscuous mode [ 111.331412][ T7294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.336175][ T7294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.339637][ T7294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.341926][ T7294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.344184][ T7294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.349939][ T7294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.376658][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.378714][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.388544][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.390699][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.496648][ T7322] overlay: Unknown parameter '/' [ 111.707266][ T7326] netlink: 32 bytes leftover after parsing attributes in process `syz.2.402'. [ 112.266274][ T4792] Bluetooth: hci4: command tx timeout [ 112.765107][ T5352] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.767702][ T5352] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.770491][ T5352] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.774861][ T5352] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.779567][ T5352] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 112.781728][ T5352] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 112.857772][ T7330] chnl_net:caif_netlink_parms(): no params data found [ 112.905223][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.907211][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.915554][ T7330] bridge_slave_0: entered allmulticast mode [ 112.918719][ T7330] bridge_slave_0: entered promiscuous mode [ 112.924909][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.927380][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.929255][ T7330] bridge_slave_1: entered allmulticast mode [ 112.931232][ T7330] bridge_slave_1: entered promiscuous mode [ 112.932997][ T7339] fuse: Unknown parameter '000000000000000000060xffffffffffffffff' [ 112.951515][ T7330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.956046][ T7330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.976968][ T7330] team0: Port device team_slave_0 added [ 112.980368][ T7330] team0: Port device team_slave_1 added [ 112.997776][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.999655][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.006360][ T7330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.010705][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.013022][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.022384][ T7330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.052603][ T7330] hsr_slave_0: entered promiscuous mode [ 113.054688][ T7330] hsr_slave_1: entered promiscuous mode [ 113.057888][ T7330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.059859][ T7330] Cannot create hsr debugfs directory [ 113.155734][ T7330] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.185905][ T7347] netlink: 'syz.0.407': attribute type 10 has an invalid length. [ 113.227093][ T7330] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.285658][ T7330] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.356769][ T7330] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.375815][ T72] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 113.430705][ T7330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.434155][ T7330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.437526][ T7330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.440629][ T7330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.477664][ T7330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.490381][ T7330] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.496414][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.498293][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.502784][ T5489] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.504654][ T5489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.525854][ T72] usb 7-1: Using ep0 maxpacket: 8 [ 113.528478][ T72] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.531016][ T72] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.533491][ T72] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 113.536761][ T72] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.540087][ T72] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.542412][ T72] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.547020][ T72] usbtmc 7-1:16.0: bulk endpoints not found [ 113.575234][ T7330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.592583][ T7330] veth0_vlan: entered promiscuous mode [ 113.596719][ T7330] veth1_vlan: entered promiscuous mode [ 113.607394][ T7330] veth0_macvtap: entered promiscuous mode [ 113.610507][ T7330] veth1_macvtap: entered promiscuous mode [ 113.617324][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.620037][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.623139][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.627179][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.629934][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.633139][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.637676][ T7330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.639975][ T7330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.642269][ T7330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.644539][ T7330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.670724][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.672891][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.680851][ T5489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.682945][ T5489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.910217][ T7359] netlink: 'syz.3.404': attribute type 2 has an invalid length. [ 113.923420][ T7359] : entered promiscuous mode [ 114.076542][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'. [ 114.346789][ T4792] Bluetooth: hci4: command tx timeout [ 114.816082][ T4792] Bluetooth: hci5: command tx timeout [ 115.030576][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 115.054727][ T7377] netlink: 'syz.1.414': attribute type 11 has an invalid length. [ 115.495872][ T4791] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 115.635817][ T4791] usb 6-1: device descriptor read/64, error -71 [ 115.638801][ T7386] can0: slcan on ttyS3. [ 115.885856][ T4791] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 116.026611][ T4791] usb 6-1: device descriptor read/64, error -71 [ 116.119555][ T56] usb 7-1: USB disconnect, device number 5 [ 116.136166][ T4791] usb usb6-port1: attempt power cycle [ 116.415832][ T4792] Bluetooth: hci4: command tx timeout [ 116.476441][ T7384] can0 (unregistered): slcan off ttyS3. [ 116.485862][ T4791] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 116.507409][ T4791] usb 6-1: device descriptor read/8, error -71 [ 116.668399][ T7411] delete_channel: no stack [ 116.802212][ T4791] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 116.818373][ T4791] usb 6-1: device descriptor read/8, error -71 [ 116.895980][ T4792] Bluetooth: hci5: command tx timeout [ 116.925896][ T7419] netlink: 'syz.3.420': attribute type 2 has an invalid length. [ 116.925988][ T4791] usb usb6-port1: unable to enumerate USB device [ 116.930517][ T7419] openvswitch: : Dropping previously announced user features [ 117.595673][ T7425] FAULT_INJECTION: forcing a failure. [ 117.595673][ T7425] name failslab, interval 1, probability 0, space 0, times 0 [ 117.599147][ T7425] CPU: 2 UID: 0 PID: 7425 Comm: syz.3.422 Not tainted 6.12.0-rc3-syzkaller-00319-gb04ae0f45168 #0 [ 117.601981][ T7425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.604862][ T7425] Call Trace: [ 117.605747][ T7425] [ 117.606524][ T7425] dump_stack_lvl+0x16c/0x1f0 [ 117.607813][ T7425] should_fail_ex+0x497/0x5b0 [ 117.609092][ T7425] ? fs_reclaim_acquire+0xae/0x150 [ 117.610535][ T7425] should_failslab+0xc2/0x120 [ 117.611771][ T7425] __kmalloc_node_track_caller_noprof+0xcf/0x440 [ 117.613417][ T7425] ? vfs_parse_fs_string+0xc4/0x150 [ 117.614838][ T7425] kmemdup_nul+0x34/0xb0 [ 117.615976][ T7425] vfs_parse_fs_string+0xc4/0x150 [ 117.617340][ T7425] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 117.618828][ T7425] ? kasan_save_track+0x14/0x30 [ 117.620196][ T7425] ? legacy_init_fs_context+0x96/0xe0 [ 117.621679][ T7425] ? alloc_fs_context+0x59b/0x9c0 [ 117.622999][ T7425] path_mount+0x677/0x1f10 [ 117.624169][ T7425] ? kmem_cache_free+0x152/0x4b0 [ 117.625506][ T7425] ? __pfx_path_mount+0x10/0x10 [ 117.626826][ T7425] ? putname+0x12e/0x170 [ 117.628003][ T7425] __ia32_sys_mount+0x292/0x310 [ 117.629318][ T7425] ? __pfx___ia32_sys_mount+0x10/0x10 [ 117.630767][ T7425] __do_fast_syscall_32+0x73/0x120 [ 117.632132][ T7425] do_fast_syscall_32+0x32/0x80 [ 117.633454][ T7425] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.635126][ T7425] RIP: 0023:0xf7fb1579 [ 117.636186][ T7425] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 117.641408][ T7425] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 117.643592][ T7425] RAX: ffffffffffffffda RBX: 0000000020004dc0 RCX: 0000000020004e00 [ 117.645699][ T7425] RDX: 0000000020004e40 RSI: 0000000000000000 RDI: 0000000020000340 [ 117.647806][ T7425] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.649897][ T7425] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 117.651995][ T7425] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.654106][ T7425] [ 117.675627][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.423'. [ 118.289350][ T7444] can0: slcan on ttyS3. [ 118.495935][ T4792] Bluetooth: hci4: command tx timeout [ 118.875257][ T7459] netlink: 'syz.2.430': attribute type 2 has an invalid length. [ 118.881635][ T7459] openvswitch: : Dropping previously announced user features [ 118.976133][ T4792] Bluetooth: hci5: command tx timeout [ 119.197315][ T7441] can0 (unregistered): slcan off ttyS3. [ 119.481518][ T7486] netlink: 188 bytes leftover after parsing attributes in process `syz.1.434'. [ 119.483864][ T7486] netlink: 'syz.1.434': attribute type 1 has an invalid length. [ 119.852099][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 119.906419][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 120.550162][ T7507] can0: slcan on ttyS3. [ 120.646857][ T7515] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 120.648612][ T7515] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 120.650702][ T7515] vhci_hcd vhci_hcd.0: Device attached [ 120.697535][ T7516] vhci_hcd: connection closed [ 120.699302][ T1097] vhci_hcd: stop threads [ 120.702421][ T1097] vhci_hcd: release socket [ 120.703980][ T1097] vhci_hcd: disconnect device [ 121.056776][ T4792] Bluetooth: hci5: command tx timeout [ 121.247609][ T7526] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "©b¸_v-f`‹‚" [ 121.306274][ T7503] can0 (unregistered): slcan off ttyS3. [ 121.364476][ T7543] FAULT_INJECTION: forcing a failure. [ 121.364476][ T7543] name failslab, interval 1, probability 0, space 0, times 0 [ 121.368045][ T7543] CPU: 2 UID: 0 PID: 7543 Comm: syz.1.446 Not tainted 6.12.0-rc3-syzkaller-00319-gb04ae0f45168 #0 [ 121.370779][ T7543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.373546][ T7543] Call Trace: [ 121.374422][ T7543] [ 121.375205][ T7543] dump_stack_lvl+0x16c/0x1f0 [ 121.376449][ T7543] should_fail_ex+0x497/0x5b0 [ 121.377806][ T7543] ? fs_reclaim_acquire+0xae/0x150 [ 121.379136][ T7543] should_failslab+0xc2/0x120 [ 121.380370][ T7543] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 121.381781][ T7543] ? vm_area_dup+0x53/0x300 [ 121.382977][ T7543] vm_area_dup+0x53/0x300 [ 121.384113][ T7543] copy_mm+0xe5a/0x2550 [ 121.385227][ T7543] ? __pfx_copy_mm+0x10/0x10 [ 121.386453][ T7543] ? copy_process+0x3c7d/0x6ee0 [ 121.387735][ T7543] ? __raw_spin_lock_init+0x3a/0x110 [ 121.389127][ T7543] copy_process+0x3e43/0x6ee0 [ 121.390382][ T7543] ? __pfx_copy_process+0x10/0x10 [ 121.391708][ T7543] ? find_held_lock+0x2d/0x110 [ 121.392968][ T7543] kernel_clone+0xfd/0x960 [ 121.394150][ T7543] ? __pfx_kernel_clone+0x10/0x10 [ 121.395478][ T7543] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 121.397025][ T7543] __do_compat_sys_ia32_clone+0xb7/0x100 [ 121.398499][ T7543] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 121.400121][ T7543] __do_fast_syscall_32+0x73/0x120 [ 121.401452][ T7543] do_fast_syscall_32+0x32/0x80 [ 121.402723][ T7543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.404366][ T7543] RIP: 0023:0xf7fb8579 [ 121.405519][ T7543] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 121.410500][ T7543] RSP: 002b:00000000f573651c EFLAGS: 00000202 ORIG_RAX: 0000000000000078 [ 121.412667][ T7543] RAX: ffffffffffffffda RBX: 0000000080082000 RCX: 0000000000000000 [ 121.414737][ T7543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.416785][ T7543] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.418851][ T7543] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 121.420900][ T7543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.422954][ T7543] [ 121.450787][ T7551] netlink: 'syz.1.447': attribute type 1 has an invalid length. [ 121.453227][ T7551] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.447'. [ 121.627327][ T7558] netlink: 'syz.2.445': attribute type 2 has an invalid length. [ 121.629551][ T7558] openvswitch: : Dropping previously announced user features [ 121.872867][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 121.926848][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 122.915134][ T7578] can0: slcan on ttyS3. [ 123.204839][ T7591] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "©b¸_v-f`‹‚" [ 123.405514][ T5352] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.409463][ T5352] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.412643][ T5352] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.418001][ T5352] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.424867][ T5352] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 123.427082][ T5352] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 123.513962][ T7593] chnl_net:caif_netlink_parms(): no params data found [ 123.603635][ T7593] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.605942][ T7593] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.607908][ T7593] bridge_slave_0: entered allmulticast mode [ 123.611502][ T7593] bridge_slave_0: entered promiscuous mode [ 123.615467][ T7593] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.617579][ T7593] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.619575][ T7593] bridge_slave_1: entered allmulticast mode [ 123.622494][ T7593] bridge_slave_1: entered promiscuous mode [ 123.667879][ T7593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.672223][ T7593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.694322][ T7593] team0: Port device team_slave_0 added [ 123.697465][ T7593] team0: Port device team_slave_1 added [ 123.706342][ T7573] can0 (unregistered): slcan off ttyS3. [ 123.717401][ T7593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.719524][ T7593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.726573][ T7593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.749356][ T7593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.751178][ T7593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.759551][ T7593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.782104][ T7593] hsr_slave_0: entered promiscuous mode [ 123.784276][ T7593] hsr_slave_1: entered promiscuous mode [ 123.796559][ T7593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.799554][ T7593] Cannot create hsr debugfs directory [ 123.893945][ T7593] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.976358][ T7593] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.048585][ T7593] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.140202][ T7593] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.225322][ T7593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.230199][ T7593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.233073][ T7593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.237878][ T7593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.281554][ T7593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.293479][ T7593] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.299379][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.301792][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.309778][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.311649][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.421560][ T7593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.446389][ T7593] veth0_vlan: entered promiscuous mode [ 124.451779][ T7593] veth1_vlan: entered promiscuous mode [ 124.464387][ T7593] veth0_macvtap: entered promiscuous mode [ 124.467920][ T7593] veth1_macvtap: entered promiscuous mode [ 124.473746][ T7593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.476876][ T7593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.479652][ T7593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.482519][ T7593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.485811][ T7593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.489996][ T7593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.492819][ T7593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.495368][ T7593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.498331][ T7593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.501433][ T7593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.505339][ T7593] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.507775][ T7593] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.510015][ T7593] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.512266][ T7593] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.553519][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.555604][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.565053][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.568119][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.653056][ T7640] netlink: 'syz.2.459': attribute type 2 has an invalid length. [ 124.656111][ T7640] openvswitch: : Dropping previously announced user features [ 124.901248][ T7649] netlink: 'syz.0.462': attribute type 10 has an invalid length. [ 124.909563][ T7649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.912705][ T7649] team0: Port device batadv0 added [ 125.088734][ T7654] dlm: plock device version mismatch: kernel (1.2.0), user (1986356271.1920428079.26478) [ 125.455939][ T4792] Bluetooth: hci6: command tx timeout SYZFAIL: ShmemBuilder: too large output offset size=14680064 consumed=-100663272 (errno 9: Bad file descriptor) [ 125.778298][ T5489] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.857973][ T5489] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.929451][ T5489] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.098939][ T5489] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.200519][ T5489] bridge_slave_1: left allmulticast mode [ 126.201906][ T5489] bridge_slave_1: left promiscuous mode [ 126.203363][ T5489] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.206088][ T5489] bridge_slave_0: left allmulticast mode [ 126.207590][ T5489] bridge_slave_0: left promiscuous mode [ 126.209203][ T5489] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.456989][ T5489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.460672][ T5489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.464051][ T5489] bond0 (unregistering): Released all slaves [ 126.696079][ T5489] hsr_slave_0: left promiscuous mode [ 126.698034][ T5489] hsr_slave_1: left promiscuous mode [ 126.699954][ T5489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.701934][ T5489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.704300][ T5489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.707262][ T5489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.723837][ T5489] veth1_macvtap: left promiscuous mode [ 126.725309][ T5489] veth0_macvtap: left promiscuous mode [ 126.727158][ T5489] veth1_vlan: left promiscuous mode [ 126.728540][ T5489] veth0_vlan: left promiscuous mode [ 127.055983][ T4792] Bluetooth: hci5: command 0x0406 tx timeout [ 127.317265][ T5489] team0 (unregistering): Port device team_slave_1 removed [ 127.376904][ T5489] team0 (unregistering): Port device team_slave_0 removed [ 127.537314][ T5352] Bluetooth: hci6: command tx timeout [ 128.327855][ T5489] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.399578][ T5489] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.470770][ T5489] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.556119][ T5489] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.683623][ T5489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.742082][ T5489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.836924][ T5489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.906782][ T5489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.006358][ T5489] bridge_slave_1: left allmulticast mode [ 129.008291][ T5489] bridge_slave_1: left promiscuous mode [ 129.011678][ T5489] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.017913][ T5489] bridge_slave_0: left allmulticast mode [ 129.019837][ T5489] bridge_slave_0: left promiscuous mode [ 129.021805][ T5489] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.027787][ T5489] bridge_slave_1: left allmulticast mode [ 129.029849][ T5489] bridge_slave_1: left promiscuous mode [ 129.031918][ T5489] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.035891][ T5489] bridge_slave_0: left allmulticast mode [ 129.037879][ T5489] bridge_slave_0: left promiscuous mode [ 129.040134][ T5489] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.508761][ T5489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.512574][ T5489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.516022][ T5489] bond0 (unregistering): Released all slaves [ 129.582898][ T5489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.586493][ T5489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.589699][ T5489] bond0 (unregistering): Released all slaves [ 129.615869][ T5352] Bluetooth: hci6: command tx timeout [ 129.669203][ T5489] : left promiscuous mode [ 129.726986][ T5489] : left promiscuous mode [ 130.169726][ T5489] hsr_slave_0: left promiscuous mode [ 130.171509][ T5489] hsr_slave_1: left promiscuous mode [ 130.173344][ T5489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.175221][ T5489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.178436][ T5489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.180358][ T5489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.184690][ T5489] hsr_slave_0: left promiscuous mode [ 130.187402][ T5489] hsr_slave_1: left promiscuous mode [ 130.221430][ T5489] veth1_macvtap: left promiscuous mode [ 130.222911][ T5489] veth0_macvtap: left promiscuous mode [ 130.224358][ T5489] veth1_vlan: left promiscuous mode [ 130.225830][ T5489] veth0_vlan: left promiscuous mode [ 130.228693][ T5489] veth0_macvtap: left promiscuous mode [ 130.230299][ T5489] veth1_vlan: left promiscuous mode [ 130.231698][ T5489] veth0_vlan: left promiscuous mode [ 130.825445][ T5489] team0 (unregistering): Port device team_slave_1 removed [ 130.898711][ T5489] team0 (unregistering): Port device team_slave_0 removed [ 131.705953][ T5352] Bluetooth: hci6: command tx timeout [ 131.865659][ T5489] team0 (unregistering): Port device team_slave_1 removed [ 131.928797][ T5489] team0 (unregistering): Port device team_slave_0 removed [ 132.100089][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 VM DIAGNOSIS: 06:09:56 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffc90028d4f728 RDX=ffff888023618000 RSI=ffffffff81d51ae6 RDI=ffff888023618444 RBP=8000000057dcd027 RSP=ffffc90028d4f880 R8 =0000000000000000 R9 =fffffbfff2039ca9 R10=ffffffff901ce54f R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000000 R15=ffffea00015f7340 RIP=ffffffff818cba11 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7405008 CR3=0000000066140000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000020210058 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b53fe40 RCX=ffffffff81732705 RDX=0000000000000000 RSI=ffffffff8b4e69e0 RDI=ffff88801b75ccc8 RBP=0000000000000000 RSP=ffffc90000477bc8 R8 =0000000000000000 R9 =ffffffff901d1838 R10=ffffffff901ce54f R11=0000000000000000 R12=ffff88801b75c880 R13=0000000000000000 R14=ffff88802b53fe51 R15=ffff88802b53ee80 RIP=ffffffff81730760 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7229510 CR3=0000000076ce0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000300000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000003ffff RBX=0000000000000001 RCX=ffffc9002b4f3000 RDX=0000000000040000 RSI=ffffffff88eb3ad2 RDI=0000000000000001 RBP=000000000003dbcc RSP=ffffc90023fa7788 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=ffff888024950640 R14=0000000000000000 R15=ffff8880289315e8 RIP=ffffffff818cba26 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2cd069 CR3=0000000076ce0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=0000000000000002 RCX=ffffffff81f9f1cb RDX=0000000000000002 RSI=0000000000000002 RDI=0000000000000000 RBP=ffff88804186d560 RSP=ffffc900041a7588 R8 =0000000000000001 R9 =ffffed100830dab5 R10=ffff88804186d5af R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff818cbc1a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe29655cf8 CR3=0000000064fea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000