last executing test programs: 2m14.378942975s ago: executing program 1 (id=1788): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xe080, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0xfffff034}, {0x20, 0xe, 0x0, 0x46}, {0x6}]}, 0x8) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) r2 = openat$vimc2(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000080)=0xa) 2m14.301609256s ago: executing program 1 (id=1789): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x7ff) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x2}) close(r1) ioctl$KVM_RUN(r0, 0xae80, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./bus\x00', 0x40, 0x58) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2801, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1cb, 0x38f}, 0x0, 0x0, 0xb7, 0xdc, 0x4, 0x2, 0x8, 0x2, 0x101a, 0xd7df}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x9, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3}}}]}, {0x4}, {0x2, 0x7, {0x1}}, {0xffffff19}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$phonet(0x23, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 2m13.43897017s ago: executing program 1 (id=1793): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000001100)={0x100, 0xee9, &(0x7f0000000040)="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", 0x0, 0x1c8}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000002900)={0x121c, 0x12, 0x9, 0x101, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0xfac}, [@typed={0x4, 0x95}, @generic="e2b43d1ea566830ef2494e18f9d2b02755a71a52a48fda278b47a34aa4d6331407e25ae447d8b31930196d2b8a92103a4337b4b73699d1e11d2d77fcf146a428ccfe4fe8c26b5bd4e9298a68995e344c422d8461cf8971e17276f2b9ade658400cc20cb6a45a395177a6fa60e8f3c730499ed344e1cd6fb7f9f7caa433cbe3070d16a4f415b656109da2622a2e010668538e9792654bc4382101acfff3dddb4414ca5214344074757c7a84ae5f51f7d6131d897e61fa0c4208652a9c5f6fbcb98362ae8d1df6207ed4557f66e71e85583e59f77469336720f5f36225091dbfbfa60efe42a421f4491bf7cde5146391574f32501fda79ff", @nested={0x108d, 0x6e, 0x0, 0x1, [@typed={0x8, 0x1f, 0x0, 0x0, @u32=0x7f}, @typed={0x9, 0xd3, 0x0, 0x0, @str='\xfe]*\\\x00'}, @generic="fcb559cae78d95de1085395c4be8ddc227a00f54e377b198a9a2a97977019734eb4ccdeee8380bb2d9917a0f3708c5741e9ca257375f5cfec06a142495b275dab4fec8e9e0d86dd254b1a1304cb19534d28752d3bb7683c0ae580b2fd3ae39a5dd9946131483ee86451435c3f2df855471", @nested={0x4, 0x77}, @generic="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"]}, @generic="5a8e64535d33edddce8e99bc6ce0e070ff60c49f32e3d1a2839211886718ef37728b26f5c20545df650799ffb16856d39c1c579a569d5f29da38e0b9222693c5138384608441792cf326492d03f844c77263348d995c4a1dfb5275c01f4b6ddc926fdb6a034b9a", @typed={0x9, 0x109, 0x0, 0x0, @str='@!!%\x00'}, @typed={0x8, 0xd, 0x0, 0x0, @ipv4=@local}]}, 0x121c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240"], 0x122}}, 0x4008090) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080)) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r5 = openat$sw_sync(0xffffff9c, &(0x7f0000000080), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x0, "e89c5b0900f8ff0000000007000000000000005b00", 0xffffffffffffffff}) r7 = epoll_create1(0x0) epoll_pwait2(r7, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)={0x30000000}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f00000001c0)={0x2c, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @generic={0x2, 0x1b, "0f117116ef6982b95999b492a0a6bd9ecde155186eab767b81a541"}]}, 0x28) 2m11.278400243s ago: executing program 1 (id=1802): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) r2 = openat$sw_sync_info(0xffffff9c, &(0x7f00000000c0), 0xc0440, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x1, 0x0, &(0x7f00000001c0)=""/123, &(0x7f0000000240)=""/141, &(0x7f0000000300)=""/135, 0x10000}) ioctl$CDROM_NEXT_WRITABLE(r2, 0x5394, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080), 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x1872, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m11.214175536s ago: executing program 1 (id=1804): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000700)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r2, 0x0, 0x0, 0x20048000, &(0x7f0000001240)={0x2, 0x6e23, @empty}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000025c0)=[@in={0x2, 0x4e23, @private=0xa010101}]}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000380)={r4}, &(0x7f0000000200)=0x8) mount$bind(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x25844, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000514010025bd7000fedbdf250800010000000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x2400c990}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r1}, './file1\x00'}) 2m11.213919107s ago: executing program 1 (id=1805): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "511cea7400", "c4545670a93fffc4a94f2dcd0a2b7754ad8e6c5fdee2f21282e5e117b4e2e82f", '\x00', "0000000000000010"}, 0x38) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00', r0}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r1, &(0x7f0000002640)={0x2020}, 0x2020) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x80000) read$watch_queue(r2, &(0x7f0000002e00)=""/4088, 0x199) read$watch_queue(r1, &(0x7f00000000c0)=""/19, 0x13) read$watch_queue(r4, &(0x7f0000001e00)=""/4096, 0x1000) 2m10.262492923s ago: executing program 3 (id=1812): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r6, &(0x7f0000001180)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000100)="1c", 0x1}], 0x1, &(0x7f0000001140)=[@init={0x14, 0x84, 0x0, {0xff, 0x5, 0x8, 0xfff7}}], 0x14, 0x84}, 0x40) bind$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8008743f, &(0x7f0000000180)) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) unshare(0x62040200) socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r7, 0x0, 0x4000000000010046) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r9, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 2m9.236055023s ago: executing program 3 (id=1814): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x35c) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80d}, 0x37) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000400)=@newtaction={0x60, 0x30, 0x53b, 0x70bd28, 0x25dfdbfe, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x0, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 2m8.138429827s ago: executing program 3 (id=1818): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r1, &(0x7f0000001a80)=[{&(0x7f00000007c0)="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", 0xaed}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000100)="06ff03076844268cb89e14f008004ee0ff", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120052f2"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003300010324bd7002fcdbdf2510000000"], 0x14}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd, 0x3]}, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000180)={0x0, 0x6, 0x1, 0x8, 0x0, [@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x10}, @private0]}, 0x38) setfsuid(0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2m8.058011474s ago: executing program 3 (id=1820): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x263e72f6, 0x4) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611224000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b868", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r4, 0x8800000) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r5, r4, 0x0, 0x558410e9) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc008300, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x48, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={'blake2b-256\x00'}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000aec000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "edf02ae0ad86bc6d52d8dc1d6a8fe53b3f6fc25951ad1de14e1ce6dd3cadbf3ff664fd091cdf6c939150559c4dad2c91049939214119a8119b5b633595ad6da7", 0x2f}, 0x48, r7) gettid() 2m7.940405034s ago: executing program 3 (id=1823): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r6, &(0x7f0000001180)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000100)="1c", 0x1}], 0x1, &(0x7f0000001140)=[@init={0x14, 0x84, 0x0, {0xff, 0x5, 0x8, 0xfff7}}], 0x14, 0x84}, 0x40) bind$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8008743f, &(0x7f0000000180)) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) unshare(0x62040200) socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r7, 0x0, 0x4000000000010046) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r9, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 2m7.518600308s ago: executing program 3 (id=1824): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x18, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4, 0x0, 0x2800}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) r3 = socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x1128, 0x30, 0x1, 0x0, 0x0, {}, [{0x1114, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x1084, 0x1, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x7, 0x7, 0xd20}, 0x80}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9acb, 0x8, 0x2, 0x5}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x5, 0xffffffffffffffff, 0x7, 0x6}, 0xa}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1128}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000004e80)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000440)="523d06866a5f92966f81e0f7f4c0d8999be7e77c1e96f754ba8da001e4de3fda5d13cb88ed26f5941368782fd3cd9598f43cf623d945bbddde6b8d8dbc05b26ff8a2672c8c1e4eb7f39688d101", 0x4d}, {&(0x7f00000004c0)="fc9054f1c960ae1e121c3be7ad0af92bc0fbd2346059adffde8334d1cab88e09bc85316a14c567a672c1eca6641acf2107f5f346ef03671a16d7dc3349954358eeb025", 0x43}, {&(0x7f0000000540)="4443cbc27937ba97b10f2f081d0fd41a9996d6c11a8555595b163c4613637ac786639307afe24b1e84d8a33c940f5c0352fa55a621ff9dc955d1ee8cd8dc6bb495f6dd0b1d749cf152a0745a855d0d8bb03968d7d66cc1a465ef274ec6c3d05e44", 0x61}], 0x3, &(0x7f0000001740)=[@rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r5, r2, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r1, r3, r7, r6, r2, r5]}}, @rights={{0x10, 0x1, 0x1, [r2]}}, @rights={{0x10, 0x1, 0x1, [r5]}}], 0x64, 0x800}}, {{&(0x7f00000018c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000001940)="8aeb8bde2b07848ab05a333f82b0f5534e6c36bff46b35bed6a36bde6726a793e0cbd3b01b8a0f5abf2074529d9d5ee77be4f8770cc359df2f4092225fba10675ba386d2205d2f39fb6d4eb7ef67e9d9715f02a2e77527fb0fe99017c6438f3522e5db9c1926c55d69723a7df0388292736534dca8d9e4c5d6f54227db215808576b44afe6adcbf7bc160b116a1678a46fdc49281cd6635998544e21da8525528392fbfc8ac46fb261a38651", 0xac}, {&(0x7f0000002b00)="12fb8fc5db657abc10ec8483168b9b1ebb64141e31783090210f9d4a3766242632c621e8436dd0d092e0f2b688e07291e1655db752be4d60dd909bbb63a4df63c161ab5ff9a1d69f738d6eee58343cd8b6c0d0b3923381a7db08e78157eb7cf0dc4f7a75f617d0b588e17361b2548765ef94bf36ce05ecac0cecdde667cf5cd30e121718a8cc64a297576a97bb7b7f5119687ac826de0d397b1d27c3cd45331c8fc30d4a6cb1f55dcc4b25709b62ad2280b0d638dbe75255944967d1e8af631410b5590de3d146fcb190ada98b339104bccd4f34dcd2ece4", 0xd8}, {&(0x7f0000001a00)="dc9e6ac8dc7561ca2426e528f463d95ca1503e5b", 0x14}, {&(0x7f0000001a40)="621c58374ae560c1c04615f1437103f1acb5c60ac1530632957cb5d22a09364bb1f46e60184c6c6a1a69c44d2239fb93251cfb186900f6b30e4c939fb3", 0x3d}, {&(0x7f0000002c00)="e3c6501c8805e3c93d1854ad568f81f83ede2e0e01ccd09c0aca61de6a7cc0b8430ecfd9de30d68ce743e671e6c49f58d4101973f4491fb68d473f570fadb25e2e87bad6e5655d81f91da6dacd30a6a8bc0c32fe51b2ad22575ca3f444c415b286399f57ef4841894d234519900e62fdf2ac4a9702e1d6a8bba72d8a69e0a67b4feb7573357f0d", 0x87}, {&(0x7f0000002cc0)="f24c570170ece7952c471c102b37b545380f56f7f5dc890a286ee1a1bcd105ff462992797fa1c5c740a02ccb14c894373b597b2f3719e79d45841462f0d0281390b7273574193f0404ce5f45f54a52d80c58817894e9cc48cfedd01ebd796d126cee54bd7d", 0x65}, {&(0x7f0000002d40)="9d4845de2361ac4244e6a62a9167d8d503a8e360bd0cbe20b7a918574b33d00ce32680e19d37175ff3d9d3a81214f33b69f37eb42e73235b9c8eb67d77507e1e734a95ee1c5b0ffdce818fa228b37706884a031559bc00c4ae647e4174d44771f48aa67746503782fd186cae95035f0ecb805f2f4348ddba0182570625c1127fdb75f763d6b077a65881f246cf", 0x8d}], 0x8, &(0x7f0000004e40)=[@rights={{0x28, 0x1, 0x1, [r6, 0xffffffffffffffff, r0, r1, r3, 0xffffffffffffffff, r1]}}, @cred={{0x18}}], 0x40, 0x20000010}}], 0x2, 0x4) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x49fd}, {}, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3e, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x400}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m7.473842582s ago: executing program 32 (id=1824): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x18, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4, 0x0, 0x2800}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) r3 = socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x1128, 0x30, 0x1, 0x0, 0x0, {}, [{0x1114, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x1084, 0x1, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x7, 0x7, 0xd20}, 0x80}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9acb, 0x8, 0x2, 0x5}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x5, 0xffffffffffffffff, 0x7, 0x6}, 0xa}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1128}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000004e80)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000440)="523d06866a5f92966f81e0f7f4c0d8999be7e77c1e96f754ba8da001e4de3fda5d13cb88ed26f5941368782fd3cd9598f43cf623d945bbddde6b8d8dbc05b26ff8a2672c8c1e4eb7f39688d101", 0x4d}, {&(0x7f00000004c0)="fc9054f1c960ae1e121c3be7ad0af92bc0fbd2346059adffde8334d1cab88e09bc85316a14c567a672c1eca6641acf2107f5f346ef03671a16d7dc3349954358eeb025", 0x43}, {&(0x7f0000000540)="4443cbc27937ba97b10f2f081d0fd41a9996d6c11a8555595b163c4613637ac786639307afe24b1e84d8a33c940f5c0352fa55a621ff9dc955d1ee8cd8dc6bb495f6dd0b1d749cf152a0745a855d0d8bb03968d7d66cc1a465ef274ec6c3d05e44", 0x61}], 0x3, &(0x7f0000001740)=[@rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r5, r2, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r1, r3, r7, r6, r2, r5]}}, @rights={{0x10, 0x1, 0x1, [r2]}}, @rights={{0x10, 0x1, 0x1, [r5]}}], 0x64, 0x800}}, {{&(0x7f00000018c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000001940)="8aeb8bde2b07848ab05a333f82b0f5534e6c36bff46b35bed6a36bde6726a793e0cbd3b01b8a0f5abf2074529d9d5ee77be4f8770cc359df2f4092225fba10675ba386d2205d2f39fb6d4eb7ef67e9d9715f02a2e77527fb0fe99017c6438f3522e5db9c1926c55d69723a7df0388292736534dca8d9e4c5d6f54227db215808576b44afe6adcbf7bc160b116a1678a46fdc49281cd6635998544e21da8525528392fbfc8ac46fb261a38651", 0xac}, {&(0x7f0000002b00)="12fb8fc5db657abc10ec8483168b9b1ebb64141e31783090210f9d4a3766242632c621e8436dd0d092e0f2b688e07291e1655db752be4d60dd909bbb63a4df63c161ab5ff9a1d69f738d6eee58343cd8b6c0d0b3923381a7db08e78157eb7cf0dc4f7a75f617d0b588e17361b2548765ef94bf36ce05ecac0cecdde667cf5cd30e121718a8cc64a297576a97bb7b7f5119687ac826de0d397b1d27c3cd45331c8fc30d4a6cb1f55dcc4b25709b62ad2280b0d638dbe75255944967d1e8af631410b5590de3d146fcb190ada98b339104bccd4f34dcd2ece4", 0xd8}, {&(0x7f0000001a00)="dc9e6ac8dc7561ca2426e528f463d95ca1503e5b", 0x14}, {&(0x7f0000001a40)="621c58374ae560c1c04615f1437103f1acb5c60ac1530632957cb5d22a09364bb1f46e60184c6c6a1a69c44d2239fb93251cfb186900f6b30e4c939fb3", 0x3d}, {&(0x7f0000002c00)="e3c6501c8805e3c93d1854ad568f81f83ede2e0e01ccd09c0aca61de6a7cc0b8430ecfd9de30d68ce743e671e6c49f58d4101973f4491fb68d473f570fadb25e2e87bad6e5655d81f91da6dacd30a6a8bc0c32fe51b2ad22575ca3f444c415b286399f57ef4841894d234519900e62fdf2ac4a9702e1d6a8bba72d8a69e0a67b4feb7573357f0d", 0x87}, {&(0x7f0000002cc0)="f24c570170ece7952c471c102b37b545380f56f7f5dc890a286ee1a1bcd105ff462992797fa1c5c740a02ccb14c894373b597b2f3719e79d45841462f0d0281390b7273574193f0404ce5f45f54a52d80c58817894e9cc48cfedd01ebd796d126cee54bd7d", 0x65}, {&(0x7f0000002d40)="9d4845de2361ac4244e6a62a9167d8d503a8e360bd0cbe20b7a918574b33d00ce32680e19d37175ff3d9d3a81214f33b69f37eb42e73235b9c8eb67d77507e1e734a95ee1c5b0ffdce818fa228b37706884a031559bc00c4ae647e4174d44771f48aa67746503782fd186cae95035f0ecb805f2f4348ddba0182570625c1127fdb75f763d6b077a65881f246cf", 0x8d}], 0x8, &(0x7f0000004e40)=[@rights={{0x28, 0x1, 0x1, [r6, 0xffffffffffffffff, r0, r1, r3, 0xffffffffffffffff, r1]}}, @cred={{0x18}}], 0x40, 0x20000010}}], 0x2, 0x4) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x49fd}, {}, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3e, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x400}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m55.769575616s ago: executing program 33 (id=1805): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "511cea7400", "c4545670a93fffc4a94f2dcd0a2b7754ad8e6c5fdee2f21282e5e117b4e2e82f", '\x00', "0000000000000010"}, 0x38) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00', r0}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r1, &(0x7f0000002640)={0x2020}, 0x2020) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x80000) read$watch_queue(r2, &(0x7f0000002e00)=""/4088, 0x199) read$watch_queue(r1, &(0x7f00000000c0)=""/19, 0x13) read$watch_queue(r4, &(0x7f0000001e00)=""/4096, 0x1000) 3.723951625s ago: executing program 2 (id=2372): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f00000001c0)=0x800007) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0), 0x880, 0x0) r3 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x100}, &(0x7f0000000380), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x53f5, &(0x7f0000000140)={0x0, 0x38f6, 0x20, 0x0, 0x1a3}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)='./file0\x00', 0x140, 0x0, 0x1, {0x0, r7}}) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x4, r1, 0x0, 0x0, 0x0, 0x10000, 0x0, {0x3, r7}}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000440)='nfsd\x00', 0x30244c0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000004000000000000000000000000000000000000000000000000001f489030b82b9315ade00316c78f1bb1eb10a5defa3b9e7baac34bbe07a329fef86f655ae9d7eb2525f7c59df564285ffbc69fac522ac55fcd7ed3f14f0c2846f2f6dd631504e3575cdd0279f4e4c0918fce6bfe026b99c0215bc8f46be2591eb54280d87a3ab3b99bae6575cb6a17ab87c7001fd5b08f405d315056a85b83048bbcb67c059794d44960edcfb934b76e71b4d23bde931887a333b9f7de7d144566352e5fffe32d8b73721ddccc7462dc7790ced4803a36ba5f0c6a67cae77e7a1a230a8d1099990004ec50"], 0x50) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1, 0x3a, 0xfffffffc, 0x0, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) syz_io_uring_submit(r5, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0xc, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12, 0x0, {0x0, r7}}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000400)={0xa, 0x4e22, 0x6, @mcast2, 0x5}, 0x1c) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x5, 0x6}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 3.577490174s ago: executing program 2 (id=2373): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sigaltstack(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1b, 0x1b, 0x3, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{}], "aafada"}]}, {0x0, [0x2e]}}, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) write$cgroup_devices(r1, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[], 0xa) write$cgroup_devices(r1, &(0x7f00000001c0)={'a', ' *:* ', 'rw\x00'}, 0x9) 3.576476456s ago: executing program 2 (id=2374): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x35c) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000080085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80d}, 0x37) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000400)=@newtaction={0x60, 0x30, 0x53b, 0x70bd28, 0x25dfdbfe, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x0, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 1.855453801s ago: executing program 4 (id=2383): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x4, 0x8, {0x3, 0x1}, {0x74, 0x2}, @period={0x58, 0x7, 0xa4, 0x4, 0xdf, {0x80, 0x9, 0x1, 0x4}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r2]) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x400}, &(0x7f0000000080)=0x8) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r2]) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x2000, 0x0) fanotify_init(0x2, 0x0) r5 = syz_io_uring_setup(0x3732, &(0x7f0000000700)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000640)=0x0) syz_io_uring_setup(0x1878, &(0x7f0000000340)={0x0, 0xedce, 0x0, 0x3, 0xc7}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x2, 0x0}) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0xff0f) 1.854846294s ago: executing program 2 (id=2384): getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000100)={0x2, 0x322ad10a, {0x0}, {}, 0x10c000, 0x4}) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x691) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x4048004) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x8000f28, 0x0) getrandom(&(0x7f0000000240)=""/154, 0x9a, 0x3) write(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r6 = memfd_create(&(0x7f0000000540)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x0) r7 = fcntl$dupfd(r3, 0x0, r6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0xfffff000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r9, 0x2004, 0x0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r10, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000180)=@ethtool_coalesce={0xf, 0x7, 0x3, 0x3, 0x2, 0x56527d82, 0x81, 0x8, 0x6, 0x0, 0x8, 0x1000, 0x5, 0x9, 0x3911, 0x995b, 0x6, 0x6e75, 0x8, 0x5, 0x10, 0x8, 0x2}}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000ff7f1ea10000a400000040000000", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000004000000040000000000"], 0x50) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000060000000070a0100000008000b400000000038000480340001800a00010072616e6765000000247aa58004000480080002400000000008000140000000150c000380050001008f0000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xd4}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x20}, 0x20050800) 1.637379415s ago: executing program 4 (id=2388): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={r2, 0xcc, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x3, @private1, 0x4}, @in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}, @in6={0xa, 0x4e23, 0xfffff76a, @empty, 0xff}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x6}]}, &(0x7f0000000140)=0xc) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 1.465878732s ago: executing program 4 (id=2390): socket$pppl2tp(0x18, 0x1, 0x1) r0 = userfaultfd(0x80001) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001c00010000000000000000000700", @ANYRES32=r2, @ANYBLOB="4000ba000a000200aa"], 0x68}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x9, 0x0, 0x0, 0xfffe, {0xa, 0x0, 0x5, @rand_addr=' \x01\x00'}}}, 0x32) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x5000000) 1.295670766s ago: executing program 4 (id=2393): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x35c) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7030000000008008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80d}, 0x37) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000400)=@newtaction={0x60, 0x30, 0x53b, 0x70bd28, 0x25dfdbfe, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x0, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 1.295460053s ago: executing program 5 (id=2394): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000f0514f9c2873a000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) 1.227655131s ago: executing program 5 (id=2395): r0 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x10b000, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x17, &(0x7f00000000c0)=0x200, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x54, &(0x7f0000000180)=0x9, 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) preadv(r2, &(0x7f00000010c0)=[{&(0x7f0000001800)=""/245, 0xf5}], 0x1, 0x5, 0x6) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = openat$pfkey(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f0000000140)={0xe0000000000000, 0x1f7}) 1.226979483s ago: executing program 5 (id=2396): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4801000010001307000000000000000064010100000000000000000000000000ac14141100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) socket$nl_route(0x10, 0x3, 0x0) 1.15493321s ago: executing program 5 (id=2398): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0x0, 0x11, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 1.097653665s ago: executing program 5 (id=2399): r0 = io_uring_setup(0x1468, &(0x7f0000000300)={0x0, 0x2bb8, 0x20, 0x3, 0x30d}) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = io_uring_setup(0xc32, &(0x7f00000003c0)={0x0, 0xc2a, 0x0, 0xfffffffd, 0x0, 0x0, r0}) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000580)={0x9fc4, "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"}) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073"], 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan0\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRESOCT=r1, @ANYRES8=r6], 0x30}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 816.676803ms ago: executing program 0 (id=2402): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5) r0 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0xa) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x4, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x10}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './bus\x00'}) fcntl$setsig(r4, 0xa, 0x2c) r5 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x4000000, 0xffffffff, 0x0, r0}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x4, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r8) mq_timedsend(r8, &(0x7f00000003c0)="4f2a60f22883ee5cc38d3fc80ee846efc10479dc3384aff419607ff179605c0fae2fe8a5608114ee5f3699b02ee97451433abf6d43b8ebd7575766bf2902cf5bb81fe395afe4312219a13296ce5171c2e9de37abd73c28a4a080d06834bef36b6e805eb913bb4880ab62c0c7f1fac1dca1599f50c5aba2884107770c9fe8c155f7041c2e1e2736afcf856fb520fb92e2a1d9c860325665bac740b336c6122ebd08cec5c4bf41c598f815e7d7bc437ed88bda9c51b48b72be93a2323cb3ecd1ae40d009b4451e047fe5d5dffdd8e1b09c52242dbecddb2483b3d6", 0xda, 0x100, &(0x7f0000000000)) io_uring_enter(r5, 0x567, 0x0, 0x0, 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000140)={0x18, 0xffffffffffffffda}, 0x18) 407.752497ms ago: executing program 4 (id=2403): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x78d9}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r3 = openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x54d540, 0x11, 0x3}, 0xffffffffffffff34) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4000, r0}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb068}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x1000, &(0x7f0000000740)=""/4096, 0x40f00, 0x40, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xc, 0xacd1, 0xfb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r3, r4], 0x0, 0x10, 0x3, @void, @value}, 0x94) 327.698688ms ago: executing program 4 (id=2404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf251500000008000300", @ANYRES32=r3, @ANYBLOB="0500290001000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000001c0), 0x0, 0x4004001) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) read$dsp(0xffffffffffffffff, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) 327.089769ms ago: executing program 0 (id=2405): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x104000, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) 207.380734ms ago: executing program 0 (id=2406): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, r0, 0x0, 0x8, 0x0) syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00']) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="08010000110001000000000000000000e00000010000000000000000000000000000000000000000e0000600ac1414bb000000000000000000000000e000000100"/92, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000"], 0x108}}, 0x0) r6 = dup2(r4, r4) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406441, &(0x7f0000000280)={0x3, 0x1043, 0xbdc5, 0xfffffffffffffca2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x5}]}}, &(0x7f00000002c0)=""/170, 0x26, 0xaa, 0x0, 0xfff, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000100060000000077f2ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0) open(0x0, 0x200200, 0x28) fchownat(r6, 0x0, 0x0, 0x0, 0x400) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 206.977704ms ago: executing program 5 (id=2407): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r6, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$sock_buf(r7, 0x1, 0x1b, 0x0, &(0x7f0000000280)) getpeername$llc(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x5, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x2, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000980)={r4, @in={{0x2, 0x4e22, @remote}}}, &(0x7f0000000500)=0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r4, 0x3, 0x8, 0x2, 0x3d, 0xfffffffa}, 0x14) read$FUSE(r1, &(0x7f0000004300)={0x2020}, 0x2020) 125.340616ms ago: executing program 0 (id=2408): socket$pppl2tp(0x18, 0x1, 0x1) r0 = userfaultfd(0x80001) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001c00010000000000000000000700", @ANYRES32=r2, @ANYBLOB="4000ba000a000200aa"], 0x68}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x60, &(0x7f0000000340)=[{&(0x7f0000000440)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190003000200060018c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e20, @private=0xa010101}, 0x3, 0x1, 0x4}}, 0x26) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.122699ms ago: executing program 2 (id=2409): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sigaltstack(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x3, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "92"}]}, {0x0, [0x2e]}}, 0x0, 0x2b, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) write$cgroup_devices(r1, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[], 0xa) write$cgroup_devices(r1, &(0x7f00000001c0)={'a', ' *:* ', 'rw\x00'}, 0x9) 1.7544ms ago: executing program 0 (id=2410): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x22201) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "9f9f00", 0x8000, 0x0, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x3e}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) openat$nullb(0xffffff9c, &(0x7f0000000140), 0x210021, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x5, r9, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) 1.472242ms ago: executing program 2 (id=2411): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x35c) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7030000000008008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80d}, 0x37) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000400)=@newtaction={0x60, 0x30, 0x53b, 0x70bd28, 0x25dfdbfe, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x0, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 0s ago: executing program 0 (id=2412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt(r1, 0x9, 0x248, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) openat$tun(0xffffff9c, &(0x7f00000000c0), 0x101400, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x218, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x208, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @nested={0x1e1, 0xde, 0x0, 0x1, [@nested={0xe5, 0xb4, 0x0, 0x1, [@generic="c31ff50200311124666bf3dda0cf1496540431e02ed69f9a99d3a0b41fef16258c7c21c67139debae54c9c", @typed={0x8, 0x6c, 0x0, 0x0, @uid}, @typed={0x8, 0x130, 0x0, 0x0, @uid}, @generic="7283b992b9ac016c125e846d037c5f985f0523c3dca57553694ad56c66406cc361f92463c015d70aa11b0e6e7eb077efac91fa820fd7db6be901c0ab1a869cd9e3667aa6b53ab625d2c6bef957925046d81dadde2d8c1706ce28102cbe810dda15c07c0f99adbeb972c86a389fdfcdeadd97fe8f338fe8c15f318ebe65b5c2c8b61a495c44d58c11f534bcfef03c67b06cb03d181d0c8087e01acd7d6e7ae21cd6e7fac6b5ff"]}, @generic="acbd915dd99b0b0ee44b2fb8b9a59e2b10b94766f5a4434c790fda834129e4868f5b36e35eee3590148e490f1d891d72df7519748ec5dfa154a54fd8fda87cfb00cc269b9b474ee34243fd263f11252f4ee656c17b3ba7f7b177fb460340ef4eebd7070d54ee5d25f8f411e81208a1e380f1b06c9441051170c83b9803511f2dc19327ccaac50c061d9c49346349fb13a9788e267ad1c3d6973be42001f11ab0838bfee243e0e20f2cfe89f8943d7d0fe063b6fd2c3ea2348de3da778551abc1c7e71a1c7fa339bf5509cf929c78133fc66fb21eeebdc609c59c4eb273b25cb2db1eb156bd5d0c06cffcc09250bc3a0aada0682735"]}]}]}, 0x218}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) pread64(r1, &(0x7f0000000040)=""/121, 0x79, 0x4) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0xffff, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x7, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x8001, 0x600}]}}}}}}, 0x46) kernel console output (not intermixed with test programs): .907793][ T6008] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 575.914408][ T6008] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 575.917729][ T6008] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.923019][T13747] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 575.928390][ T6008] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 576.050402][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 576.050412][ T40] audit: type=1326 audit(1742922856.644:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.0.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7fc00000 [ 576.094280][ T40] audit: type=1326 audit(1742922856.684:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.0.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f26579 code=0x7fc00000 [ 576.101245][ T40] audit: type=1326 audit(1742922856.684:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.0.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f265a7 code=0x7fc00000 [ 576.107526][ T40] audit: type=1326 audit(1742922856.684:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.0.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f26579 code=0x7fc00000 [ 576.169611][ T6008] usb 8-1: USB disconnect, device number 2 [ 576.412911][T13777] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.495679][T13777] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.557056][T13777] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.614849][T13777] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.667961][T13777] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.673095][T13777] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.678787][T13777] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.683427][T13777] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.742671][T13783] xt_bpf: check failed: parse error [ 576.776606][T13786] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1679'. [ 577.927263][T13814] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1689'. [ 577.978305][T13816] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.317044][T13816] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.415929][T13816] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.548044][T13816] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.640325][T13816] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.646325][T13816] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.651089][T13816] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.655638][T13816] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.758553][T13853] Cannot find set identified by id 0 to match [ 579.915870][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'. [ 579.977636][T13857] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 579.979656][T13857] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 579.997712][T13857] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 579.999634][T13857] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 580.003321][T13857] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 580.006970][T13857] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 580.010265][T13857] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 580.012003][T13857] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 580.062818][T13870] vlan2: entered allmulticast mode [ 580.065447][T13870] bond0: entered allmulticast mode [ 580.067049][T13870] bond_slave_0: entered allmulticast mode [ 580.068865][T13870] bond_slave_1: entered allmulticast mode [ 580.071813][T13870] bond0: left allmulticast mode [ 580.073295][T13870] bond_slave_0: left allmulticast mode [ 580.075342][T13870] bond_slave_1: left allmulticast mode [ 581.934337][ T5962] Bluetooth: hci0: command 0x0406 tx timeout [ 582.015836][ T5962] Bluetooth: hci2: command 0x0406 tx timeout [ 582.017586][ T5962] Bluetooth: hci1: command 0x0406 tx timeout [ 582.024309][T13412] Bluetooth: hci3: command 0x0406 tx timeout [ 582.155070][T13912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1715'. [ 582.399853][T13921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 582.402603][T13921] lo: entered promiscuous mode [ 582.404771][T13921] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1720'. [ 582.408045][T13921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 582.533892][ T1322] IPVS: starting estimator thread 0... [ 582.624888][T13927] IPVS: using max 36 ests per chain, 86400 per kthread [ 582.688249][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1721'. [ 582.944777][ T835] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 583.074781][ T835] usb 8-1: device descriptor read/64, error -71 [ 583.314359][ T835] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 583.444351][ T835] usb 8-1: device descriptor read/64, error -71 [ 583.571135][ T835] usb usb8-port1: attempt power cycle [ 583.774325][T12689] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 583.934355][ T835] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 583.934381][T12689] usb 6-1: Using ep0 maxpacket: 8 [ 583.939587][T12689] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.943196][T12689] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 583.945815][T12689] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 583.949727][T12689] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 583.952745][T12689] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 583.954784][ T835] usb 8-1: device descriptor read/8, error -71 [ 583.956022][T12689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.963418][T12689] hub 6-1:1.0: bad descriptor, ignoring hub [ 583.965242][T12689] hub 6-1:1.0: probe with driver hub failed with error -5 [ 583.967437][T12689] cdc_wdm 6-1:1.0: skipping garbage [ 583.968926][T12689] cdc_wdm 6-1:1.0: skipping garbage [ 583.973391][T12689] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 583.975398][T12689] cdc_wdm 6-1:1.0: Unknown control protocol [ 584.014370][T13412] Bluetooth: hci0: command 0x0406 tx timeout [ 584.094338][T13412] Bluetooth: hci3: command 0x0406 tx timeout [ 584.096074][T13412] Bluetooth: hci2: command 0x0406 tx timeout [ 584.097785][ T5962] Bluetooth: hci1: command 0x0406 tx timeout [ 584.214380][ T835] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 584.307007][ T835] usb 8-1: device descriptor read/8, error -71 [ 584.400000][T13957] Invalid logical block size (2047) [ 584.422356][ T835] usb usb8-port1: unable to enumerate USB device [ 584.586502][T13948] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 585.035226][ T6008] usb 6-1: USB disconnect, device number 3 [ 586.469874][ T40] audit: type=1326 audit(1742922867.064:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13983 comm="syz.3.1740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7fc00000 [ 588.084324][ T1322] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 588.224823][ T1322] usb 7-1: device descriptor read/64, error -71 [ 588.476243][ T1322] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 588.625575][ T1322] usb 7-1: device descriptor read/64, error -71 [ 588.744443][ T1322] usb usb7-port1: attempt power cycle [ 589.104315][ T1322] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 589.134695][ T1322] usb 7-1: device descriptor read/8, error -71 [ 589.394427][ T1322] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 589.415115][ T1322] usb 7-1: device descriptor read/8, error -71 [ 589.504302][ T40] audit: type=1326 audit(1742922870.094:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14052 comm="syz.1.1755" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff1579 code=0x0 [ 589.525294][ T1322] usb usb7-port1: unable to enumerate USB device [ 589.558401][ T40] audit: type=1800 audit(1742922870.154:103): pid=14056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1755" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 589.744313][ T57] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 589.794310][ T5989] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 589.907250][ T57] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 589.909584][ T57] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 589.912764][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 589.915860][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 589.919796][ T57] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 589.923321][ T57] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 589.926701][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.929820][ T57] usb 8-1: config 0 descriptor?? [ 589.932273][T14051] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 589.955560][ T5989] usb 5-1: config index 0 descriptor too short (expected 135, got 72) [ 589.959603][ T5989] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 589.962218][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.964705][ T5989] usb 5-1: Product: syz [ 589.965952][ T5989] usb 5-1: Manufacturer: syz [ 589.967307][ T5989] usb 5-1: SerialNumber: syz [ 589.971238][ T5989] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 589.992677][ T6009] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 590.338852][ T57] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 590.343722][ T57] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 590.349294][ T57] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 590.637831][ T835] usb 8-1: USB disconnect, device number 7 [ 591.054532][ T6009] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 591.058966][ T6009] ath9k_htc: Failed to initialize the device [ 591.092202][ T6009] usb 5-1: ath9k_htc: USB layer deinitialized [ 591.309275][ T835] usb 5-1: USB disconnect, device number 4 [ 591.454335][T14076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1759'. [ 591.471418][T14076] FAULT_INJECTION: forcing a failure. [ 591.471418][T14076] name failslab, interval 1, probability 0, space 0, times 0 [ 591.475113][T14076] CPU: 1 UID: 0 PID: 14076 Comm: syz.3.1759 Not tainted 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 591.475127][T14076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 591.475134][T14076] Call Trace: [ 591.475137][T14076] [ 591.475141][T14076] dump_stack_lvl+0x16c/0x1f0 [ 591.475159][T14076] should_fail_ex+0x50a/0x650 [ 591.475174][T14076] ? fs_reclaim_acquire+0xae/0x150 [ 591.475187][T14076] should_failslab+0xc2/0x120 [ 591.475197][T14076] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 591.475212][T14076] ? hlock_class+0x4e/0x130 [ 591.475222][T14076] ? __alloc_skb+0x2b1/0x380 [ 591.475237][T14076] __alloc_skb+0x2b1/0x380 [ 591.475249][T14076] ? __pfx___alloc_skb+0x10/0x10 [ 591.475265][T14076] netlink_alloc_large_skb+0x69/0x130 [ 591.475279][T14076] netlink_sendmsg+0x686/0xd70 [ 591.475294][T14076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.475307][T14076] ? __import_iovec+0x1cd/0x660 [ 591.475325][T14076] ____sys_sendmsg+0xa87/0xc70 [ 591.475336][T14076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 591.475345][T14076] ? get_compat_msghdr+0x11b/0x170 [ 591.475361][T14076] ___sys_sendmsg+0x135/0x1e0 [ 591.475375][T14076] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.475393][T14076] ? __pfx_lock_release+0x10/0x10 [ 591.475406][T14076] ? trace_lock_acquire+0x14e/0x1f0 [ 591.475425][T14076] ? __fget_files+0x20e/0x3b0 [ 591.475442][T14076] __sys_sendmsg+0x16e/0x220 [ 591.475455][T14076] ? __pfx___sys_sendmsg+0x10/0x10 [ 591.475475][T14076] __do_fast_syscall_32+0x73/0x120 [ 591.475490][T14076] do_fast_syscall_32+0x32/0x80 [ 591.475504][T14076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 591.475520][T14076] RIP: 0023:0xf7f64579 [ 591.475527][T14076] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 591.475537][T14076] RSP: 002b:00000000f504455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 591.475547][T14076] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800001c0 [ 591.475553][T14076] RDX: 0000000004000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 591.475558][T14076] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 591.475564][T14076] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 591.475569][T14076] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 591.475580][T14076] [ 592.271180][T13951] Bluetooth: hci1: unexpected event for opcode 0x2036 [ 593.193764][T14127] FAULT_INJECTION: forcing a failure. [ 593.193764][T14127] name failslab, interval 1, probability 0, space 0, times 0 [ 593.198091][T14127] CPU: 3 UID: 0 PID: 14127 Comm: syz.0.1771 Not tainted 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 593.198105][T14127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 593.198112][T14127] Call Trace: [ 593.198115][T14127] [ 593.198119][T14127] dump_stack_lvl+0x16c/0x1f0 [ 593.198137][T14127] should_fail_ex+0x50a/0x650 [ 593.198151][T14127] ? fs_reclaim_acquire+0xae/0x150 [ 593.198165][T14127] should_failslab+0xc2/0x120 [ 593.198175][T14127] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 593.198189][T14127] ? __alloc_skb+0x2b1/0x380 [ 593.198205][T14127] __alloc_skb+0x2b1/0x380 [ 593.198217][T14127] ? __pfx___alloc_skb+0x10/0x10 [ 593.198229][T14127] ? __pfx___nla_validate_parse+0x10/0x10 [ 593.198240][T14127] ? net_generic+0xea/0x2a0 [ 593.198254][T14127] ? __pfx_lock_release+0x10/0x10 [ 593.198269][T14127] netlink_dump+0x699/0xd00 [ 593.198282][T14127] ? __nla_parse+0x40/0x60 [ 593.198291][T14127] ? __pfx_netlink_dump+0x10/0x10 [ 593.198309][T14127] ? rcu_is_watching+0x12/0xc0 [ 593.198320][T14127] ? trace_contention_end+0xee/0x140 [ 593.198337][T14127] __netlink_dump_start+0x6ca/0x970 [ 593.198351][T14127] ip_set_dump+0x180/0x210 [ 593.198364][T14127] ? __pfx_ip_set_dump+0x10/0x10 [ 593.198377][T14127] ? __pfx_ip_set_dump_start+0x10/0x10 [ 593.198390][T14127] ? __pfx_ip_set_dump_do+0x10/0x10 [ 593.198399][T14127] ? __pfx_ip_set_dump_done+0x10/0x10 [ 593.198418][T14127] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 593.198443][T14127] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 593.198456][T14127] ? kmem_cache_free+0x2e2/0x4d0 [ 593.198471][T14127] ? find_held_lock+0x2d/0x110 [ 593.198497][T14127] netlink_rcv_skb+0x16b/0x440 [ 593.198509][T14127] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 593.198528][T14127] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 593.198545][T14127] ? __pfx_aa_get_newest_label+0x10/0x10 [ 593.198577][T14127] ? bpf_lsm_capable+0x9/0x10 [ 593.198593][T14127] ? security_capable+0x7e/0x260 [ 593.198614][T14127] ? ns_capable+0xd7/0x110 [ 593.198641][T14127] nfnetlink_rcv+0x1b4/0x430 [ 593.198664][T14127] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 593.198684][T14127] ? netlink_deliver_tap+0x1ae/0xd30 [ 593.198709][T14127] netlink_unicast+0x53c/0x7f0 [ 593.198731][T14127] ? __pfx_netlink_unicast+0x10/0x10 [ 593.198752][T14127] ? __phys_addr_symbol+0x30/0x80 [ 593.198767][T14127] ? __check_object_size+0x4c7/0x710 [ 593.198786][T14127] netlink_sendmsg+0x8cb/0xd70 [ 593.198810][T14127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.198830][T14127] ? __import_iovec+0x1cd/0x660 [ 593.198853][T14127] ____sys_sendmsg+0xa87/0xc70 [ 593.198866][T14127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 593.198875][T14127] ? get_compat_msghdr+0x11b/0x170 [ 593.198892][T14127] ___sys_sendmsg+0x135/0x1e0 [ 593.198906][T14127] ? __pfx____sys_sendmsg+0x10/0x10 [ 593.198925][T14127] ? __pfx_lock_release+0x10/0x10 [ 593.198938][T14127] ? trace_lock_acquire+0x14e/0x1f0 [ 593.198954][T14127] ? __fget_files+0x20e/0x3b0 [ 593.198971][T14127] __sys_sendmsg+0x16e/0x220 [ 593.198985][T14127] ? __pfx___sys_sendmsg+0x10/0x10 [ 593.199007][T14127] __do_fast_syscall_32+0x73/0x120 [ 593.199022][T14127] do_fast_syscall_32+0x32/0x80 [ 593.199035][T14127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 593.199051][T14127] RIP: 0023:0xf7f26579 [ 593.199060][T14127] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 593.199069][T14127] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 593.199079][T14127] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 593.199085][T14127] RDX: 0000000000004890 RSI: 0000000000000000 RDI: 0000000000000000 [ 593.199091][T14127] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 593.199097][T14127] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 593.199103][T14127] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 593.199115][T14127] [ 594.220321][T13951] Bluetooth: hci3: unexpected event for opcode 0x0403 [ 597.242212][T14244] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.308586][T14244] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.391130][T14244] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.448172][T14244] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.494784][T14251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1793'. [ 597.951271][T14244] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.956411][T14244] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.960991][T14244] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.965578][T14244] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.532640][ T5303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 603.539326][ T5303] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 603.542237][ T5303] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 603.545297][ T5303] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 603.552658][ T5303] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 603.554898][ T5303] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 603.640028][ T4697] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.690031][ T4697] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.700247][T14363] chnl_net:caif_netlink_parms(): no params data found [ 603.754095][ T4697] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.792472][T14363] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.794653][T14363] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.796712][T14363] bridge_slave_0: entered allmulticast mode [ 603.798802][T14363] bridge_slave_0: entered promiscuous mode [ 603.801385][T14363] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.803446][T14363] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.805739][T14363] bridge_slave_1: entered allmulticast mode [ 603.807889][T14363] bridge_slave_1: entered promiscuous mode [ 603.819458][ T4697] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.835640][T14363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.839669][T14363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.861154][T14363] team0: Port device team_slave_0 added [ 603.866043][T14363] team0: Port device team_slave_1 added [ 603.885574][T14363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.887561][T14363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.895689][T14363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.899645][T14363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.901565][T14363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.908987][T14363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.933484][T14363] hsr_slave_0: entered promiscuous mode [ 603.935600][T14363] hsr_slave_1: entered promiscuous mode [ 603.937414][T14363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.939484][T14363] Cannot create hsr debugfs directory [ 603.998571][ T4697] bridge_slave_1: left allmulticast mode [ 604.000372][ T4697] bridge_slave_1: left promiscuous mode [ 604.002996][ T4697] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.011135][ T4697] bridge_slave_0: left allmulticast mode [ 604.012759][ T4697] bridge_slave_0: left promiscuous mode [ 604.015297][ T4697] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.278089][ T4697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.283029][ T4697] bond0 (unregistering): (slave ): Releasing backup interface [ 604.286237][ T4697] bond0 (unregistering): Released all slaves [ 604.290648][ T4697] bond1 (unregistering): Released all slaves [ 604.295820][ T4697] bond2 (unregistering): Released all slaves [ 604.300776][ T4697] bond3 (unregistering): Released all slaves [ 604.304988][ T4697] bond4 (unregistering): Released all slaves [ 604.309220][ T4697] bond5 (unregistering): Released all slaves [ 604.313340][ T4697] bond6 (unregistering): Released all slaves [ 604.317852][ T4697] bond7 (unregistering): Released all slaves [ 604.322398][ T4697] bond8 (unregistering): Released all slaves [ 604.327728][ T4697] bond9 (unregistering): Released all slaves [ 604.332310][ T4697] bond10 (unregistering): Released all slaves [ 604.404167][ T4697] bond11 (unregistering): Released all slaves [ 604.408951][ T4697] bond12 (unregistering): Released all slaves [ 604.413110][ T4697] bond13 (unregistering): Released all slaves [ 604.417487][ T4697] bond14 (unregistering): Released all slaves [ 604.421727][ T4697] bond15 (unregistering): Released all slaves [ 604.585030][ T4697] bond16 (unregistering): Released all slaves [ 604.589328][ T4697] bond17 (unregistering): Released all slaves [ 604.704995][ T4697] bond18 (unregistering): Released all slaves [ 604.821011][ T4697] bond19 (unregistering): Released all slaves [ 604.881355][ T4697] bond20 (unregistering): Released all slaves [ 604.944642][ T4697] bond21 (unregistering): Released all slaves [ 605.005065][ T4697] bond22 (unregistering): Released all slaves [ 605.066103][ T4697] bond23 (unregistering): Released all slaves [ 605.070385][ T4697] bond24 (unregistering): Released all slaves [ 605.074622][ T4697] bond25 (unregistering): Released all slaves [ 605.078715][ T4697] bond26 (unregistering): Released all slaves [ 605.082828][ T4697] bond27 (unregistering): Released all slaves [ 605.087414][ T4697] bond28 (unregistering): Released all slaves [ 605.092025][ T4697] bond29 (unregistering): Released all slaves [ 605.154769][ T4697] bond30 (unregistering): Released all slaves [ 605.158996][ T4697] bond31 (unregistering): Released all slaves [ 605.163144][ T4697] bond32 (unregistering): Released all slaves [ 605.167720][ T4697] bond33 (unregistering): Released all slaves [ 605.172038][ T4697] bond34 (unregistering): Released all slaves [ 605.176236][ T4697] bond35 (unregistering): Released all slaves [ 605.180338][ T4697] bond36 (unregistering): Released all slaves [ 605.185052][ T4697] bond37 (unregistering): Released all slaves [ 605.189746][ T4697] bond38 (unregistering): Released all slaves [ 605.194875][ T4697] bond39 (unregistering): Released all slaves [ 605.199519][ T4697] bond40 (unregistering): Released all slaves [ 605.204165][ T4697] bond41 (unregistering): Released all slaves [ 605.209137][ T4697] bond42 (unregistering): Released all slaves [ 605.213668][ T4697] bond43 (unregistering): Released all slaves [ 605.219433][ T4697] bond44 (unregistering): Released all slaves [ 605.224016][ T4697] bond45 (unregistering): Released all slaves [ 605.288542][T14363] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 605.318655][T14363] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 605.326189][T14363] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 605.339362][T14363] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 605.414844][T14363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.449486][T14363] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.459988][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.461978][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.471378][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.473398][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.604954][T14400] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 605.608134][T14400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1829'. [ 605.625716][T13951] Bluetooth: hci3: command tx timeout [ 605.670968][T14400] bridge_slave_1: left allmulticast mode [ 605.672679][T14400] bridge_slave_1: left promiscuous mode [ 605.675245][T14400] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.678998][T14400] bridge_slave_0: left allmulticast mode [ 605.680638][T14400] bridge_slave_0: left promiscuous mode [ 605.682289][T14400] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.772709][ T4697] hsr_slave_0: left promiscuous mode [ 605.775021][ T4697] hsr_slave_1: left promiscuous mode [ 605.776880][ T4697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.779037][ T4697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.781675][ T4697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.783825][ T4697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.808064][ T4697] veth1_macvtap: left promiscuous mode [ 605.809835][ T4697] veth0_macvtap: left promiscuous mode [ 605.811406][ T4697] veth1_vlan: left promiscuous mode [ 605.812977][ T4697] veth0_vlan: left promiscuous mode [ 606.419064][ T4697] team0 (unregistering): Port device team_slave_1 removed [ 606.481912][ T4697] team0 (unregistering): Port device team_slave_0 removed [ 607.017673][T14363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.229404][T14363] veth0_vlan: entered promiscuous mode [ 607.251795][T14363] veth1_vlan: entered promiscuous mode [ 607.267327][T14363] veth0_macvtap: entered promiscuous mode [ 607.270615][T14363] veth1_macvtap: entered promiscuous mode [ 607.278204][T14363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.281125][T14363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.283834][T14363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.288703][T14363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.292039][T14363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.306575][T14363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.309540][T14363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.312375][T14363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.316339][T14363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.319678][T14363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.328296][T14363] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.330705][T14363] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.333124][T14363] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.337951][T14363] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.377570][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.379905][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.387457][ T4857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.389689][ T4857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.704344][T13951] Bluetooth: hci3: command tx timeout [ 609.774395][T13951] Bluetooth: hci3: command tx timeout [ 611.854402][T13951] Bluetooth: hci3: command tx timeout [ 612.479978][T14530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1843'. [ 613.988761][ T40] audit: type=1326 audit(1742922894.584:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 614.000196][ T40] audit: type=1326 audit(1742922894.594:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 614.010440][ T40] audit: type=1326 audit(1742922894.594:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 614.024116][ T40] audit: type=1326 audit(1742922894.594:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 614.036969][ T40] audit: type=1326 audit(1742922894.594:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 614.045777][ T40] audit: type=1326 audit(1742922894.594:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 614.100096][ T40] audit: type=1326 audit(1742922894.694:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 614.106712][ T40] audit: type=1326 audit(1742922894.694:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 614.176867][ T40] audit: type=1326 audit(1742922894.774:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 614.182533][ T40] audit: type=1326 audit(1742922894.774:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 614.482817][T14563] netlink: 'syz.0.1850': attribute type 7 has an invalid length. [ 614.485094][T14563] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1850'. [ 615.195559][ T5303] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 615.198396][ T5303] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 615.201011][ T5303] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 615.203481][ T5303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 615.208776][ T5303] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 615.210861][ T5303] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 615.320635][T14579] chnl_net:caif_netlink_parms(): no params data found [ 615.495385][T14579] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.497546][T14579] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.499859][T14579] bridge_slave_0: entered allmulticast mode [ 615.503838][T14579] bridge_slave_0: entered promiscuous mode [ 615.512632][T14579] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.525224][T14579] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.534595][T14579] bridge_slave_1: entered allmulticast mode [ 615.539235][T14579] bridge_slave_1: entered promiscuous mode [ 615.615884][T14596] netlink: 'syz.0.1855': attribute type 14 has an invalid length. [ 615.634800][T14600] QAT: failed to copy from user. [ 615.637704][T14596] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1855'. [ 615.658562][T14579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.663747][T14579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.723200][T14579] team0: Port device team_slave_0 added [ 615.728434][T14579] team0: Port device team_slave_1 added [ 615.757391][T14579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.759461][T14579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.768180][T14579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.772655][T14579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.774865][T14579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.781938][T14579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.811972][T14579] hsr_slave_0: entered promiscuous mode [ 615.814010][T14579] hsr_slave_1: entered promiscuous mode [ 615.816526][T14579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 615.819518][T14579] Cannot create hsr debugfs directory [ 615.902215][T14579] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 615.939047][T14579] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 616.095588][T14579] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 616.246122][T14579] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 616.486021][T14579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.494028][T14579] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.498606][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.501295][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.506131][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.508112][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.590344][T14579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.683356][T14579] veth0_vlan: entered promiscuous mode [ 616.688034][T14579] veth1_vlan: entered promiscuous mode [ 616.697846][T14579] veth0_macvtap: entered promiscuous mode [ 616.700990][T14579] veth1_macvtap: entered promiscuous mode [ 616.706921][T14579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.709812][T14579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.712559][T14579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.716133][T14579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.718895][T14579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.721827][T14579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.725099][T14579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.730038][T14579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.732929][T14579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.736765][T14579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.739717][T14579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.742463][T14579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.745397][T14579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.748927][T14579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.755275][T14579] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.757886][T14579] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.760385][T14579] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.762918][T14579] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.826896][ T4857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.829109][ T4857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.844739][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.846941][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.294445][ T5303] Bluetooth: hci0: command tx timeout [ 618.548134][T14675] No control pipe specified [ 618.704469][ T6008] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 618.865610][ T6008] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.868770][ T6008] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 618.873105][ T6008] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 618.877570][ T6008] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.879983][ T6008] usb 10-1: Product: syz [ 618.881190][ T6008] usb 10-1: Manufacturer: syz [ 618.882527][ T6008] usb 10-1: SerialNumber: syz [ 619.099565][T14667] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 619.374460][ T5303] Bluetooth: hci0: command tx timeout [ 619.706447][T14667] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 619.909912][ T6008] cdc_mbim 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 619.911868][ T6008] cdc_mbim 10-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 619.914073][ T6008] cdc_mbim 10-1:1.0: setting rx_max = 2048 [ 620.110568][ T6008] cdc_mbim 10-1:1.0: setting tx_max = 184 [ 620.113155][ T6008] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device [ 620.119251][ T6008] wwan wwan0: port wwan0mbim0 attached [ 620.126638][ T6008] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 42:42:42:42:42:42 [ 620.253015][ T5664] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 620.312632][ C2] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 620.314682][ C2] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 620.316644][ C2] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 620.318507][ C2] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 620.320424][ C2] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 620.322298][ C2] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 620.324240][ C2] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 620.326100][ C2] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 620.328734][ C2] cdc_mbim 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 620.335705][ T9] usb 10-1: USB disconnect, device number 2 [ 620.338704][ T9] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 620.440707][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 620.568611][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 620.568623][ T40] audit: type=1326 audit(1742922901.164:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14732 comm="syz.2.1873" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 620.584672][ T40] audit: type=1326 audit(1742922901.174:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14732 comm="syz.2.1873" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 620.590674][ T40] audit: type=1326 audit(1742922901.174:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14732 comm="syz.2.1873" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 620.596885][ T40] audit: type=1326 audit(1742922901.174:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14732 comm="syz.2.1873" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 620.602745][ T40] audit: type=1326 audit(1742922901.174:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14732 comm="syz.2.1873" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 620.609188][ T40] audit: type=1326 audit(1742922901.174:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14732 comm="syz.2.1873" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 620.911746][T14754] FAULT_INJECTION: forcing a failure. [ 620.911746][T14754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.919843][T14754] CPU: 2 UID: 0 PID: 14754 Comm: syz.5.1875 Not tainted 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 620.919861][T14754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 620.919867][T14754] Call Trace: [ 620.919871][T14754] [ 620.919876][T14754] dump_stack_lvl+0x16c/0x1f0 [ 620.919893][T14754] should_fail_ex+0x50a/0x650 [ 620.919909][T14754] _copy_from_user+0x2e/0xd0 [ 620.919924][T14754] get_compat_msghdr+0xa8/0x170 [ 620.919935][T14754] ? __pfx_get_compat_msghdr+0x10/0x10 [ 620.919950][T14754] ___sys_sendmsg+0x1b0/0x1e0 [ 620.919964][T14754] ? __pfx____sys_sendmsg+0x10/0x10 [ 620.919982][T14754] ? __pfx_lock_release+0x10/0x10 [ 620.919996][T14754] ? trace_lock_acquire+0x14e/0x1f0 [ 620.920012][T14754] ? __fget_files+0x20e/0x3b0 [ 620.920029][T14754] __sys_sendmsg+0x16e/0x220 [ 620.920048][T14754] ? __pfx___sys_sendmsg+0x10/0x10 [ 620.920071][T14754] __do_fast_syscall_32+0x73/0x120 [ 620.920086][T14754] do_fast_syscall_32+0x32/0x80 [ 620.920099][T14754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 620.920116][T14754] RIP: 0023:0xf7fc1579 [ 620.920123][T14754] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 620.920133][T14754] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 620.920143][T14754] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 620.920154][T14754] RDX: 0000000004000054 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.920159][T14754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.920165][T14754] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 620.920171][T14754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.920182][T14754] [ 621.270134][T14758] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 621.272860][T14758] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 621.464354][ T5303] Bluetooth: hci0: command tx timeout [ 621.924598][ T40] audit: type=1326 audit(1742922902.514:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14732 comm="syz.2.1873" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 621.940480][ T40] audit: type=1326 audit(1742922902.524:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14732 comm="syz.2.1873" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 622.134471][ T40] audit: type=1326 audit(1742922902.724:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14732 comm="syz.2.1873" exe="/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 622.145558][ T40] audit: type=1326 audit(1742922902.734:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14732 comm="syz.2.1873" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 623.534412][ T5303] Bluetooth: hci0: command tx timeout [ 623.778561][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.780788][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.871075][T14796] netlink: 'syz.2.1891': attribute type 14 has an invalid length. [ 623.917144][T14796] QAT: failed to copy from user. [ 623.919375][T14796] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1891'. [ 624.949117][T14812] netlink: 'syz.4.1888': attribute type 3 has an invalid length. [ 624.951421][T14812] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1888'. [ 624.958181][T14812] Bluetooth: MGMT ver 1.23 [ 625.942449][T14829] netlink: 'syz.0.1894': attribute type 1 has an invalid length. [ 626.033828][T14836] infiniband syz1: set down [ 626.036413][T14836] infiniband syz1: added syzkaller0 [ 626.061689][T14836] RDS/IB: syz1: added [ 626.063212][T14836] smc: adding ib device syz1 with port count 1 [ 626.065284][T14836] smc: ib device syz1 port 1 has pnetid [ 626.245529][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 626.245593][ T40] audit: type=1326 audit(1742922906.844:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.5.1898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 626.274364][ T40] audit: type=1326 audit(1742922906.844:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.5.1898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 626.282026][ T40] audit: type=1326 audit(1742922906.854:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.5.1898" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 626.289686][ T40] audit: type=1326 audit(1742922906.854:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.5.1898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 626.297338][ T40] audit: type=1326 audit(1742922906.854:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.5.1898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 626.305021][ T40] audit: type=1326 audit(1742922906.854:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.5.1898" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 626.427939][ T40] audit: type=1326 audit(1742922907.024:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.5.1898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 626.444401][ T40] audit: type=1326 audit(1742922907.024:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.5.1898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 626.494375][ T12] smc: removing ib device syz1 [ 626.697637][ T40] audit: type=1326 audit(1742922907.294:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.5.1898" exe="/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 626.703485][ T40] audit: type=1326 audit(1742922907.294:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.5.1898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 626.974384][ T5303] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 626.984353][ T5303] Bluetooth: hci0: command 0x0401 tx timeout [ 627.023480][T14860] netlink: 'syz.5.1902': attribute type 4 has an invalid length. [ 627.064350][ T1322] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 627.117038][T14865] bridge_slave_0: left allmulticast mode [ 627.118814][T14865] bridge_slave_0: left promiscuous mode [ 627.120775][T14865] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.132711][T14865] bridge_slave_1: left allmulticast mode [ 627.143030][T14865] bridge_slave_1: left promiscuous mode [ 627.153517][T14865] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.204723][T14865] bond0: (slave bond_slave_0): Releasing backup interface [ 627.208837][T14865] bond0: (slave bond_slave_1): Releasing backup interface [ 627.216281][ T1322] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.219379][ T1322] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 627.223790][ T1322] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 627.228561][ T1322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.230760][ T1322] usb 7-1: Product: syz [ 627.231971][ T1322] usb 7-1: Manufacturer: syz [ 627.232082][T14865] team0: Port device team_slave_0 removed [ 627.233300][ T1322] usb 7-1: SerialNumber: syz [ 627.238723][T14865] team0: Port device team_slave_1 removed [ 627.432485][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1904'. [ 627.443361][T14854] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 628.050502][T14854] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 628.256132][ T1322] cdc_mbim 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 628.258520][ T1322] cdc_mbim 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 628.261109][ T1322] cdc_mbim 7-1:1.0: setting rx_max = 2048 [ 628.459246][ T1322] cdc_mbim 7-1:1.0: setting tx_max = 184 [ 628.463257][ T1322] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 628.468585][ T1322] wwan wwan0: port wwan0mbim0 attached [ 628.477127][ T1322] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 42:42:42:42:42:42 [ 628.657556][ T5664] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 628.661605][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 628.663519][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 628.665428][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 628.667308][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 628.669180][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 628.671047][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 628.672941][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 628.674803][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 628.676703][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 628.678553][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 628.680621][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 628.682488][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 628.684412][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 628.686270][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 628.688146][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 628.690003][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 628.691892][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 628.693743][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 628.695656][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 628.697530][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 628.745658][ T1322] usb 7-1: USB disconnect, device number 7 [ 628.747647][ T1322] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 628.874854][ T1322] wwan wwan0: port wwan0mbim0 disconnected [ 629.017975][T14912] xt_CT: No such helper "syz0" [ 629.140937][T14921] netlink: 'syz.4.1908': attribute type 1 has an invalid length. [ 629.143102][T14921] netlink: 'syz.4.1908': attribute type 3 has an invalid length. [ 629.145327][T14921] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1908'. [ 629.365567][ T5303] Bluetooth: hci2: unexpected event 0x0f length: 8 > 4 [ 629.365594][ T5303] Bluetooth: hci2: unexpected event for opcode 0xaaaa [ 629.489824][T14934] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1912'. [ 629.798226][T14938] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1917'. [ 631.558267][T14994] capability: warning: `syz.0.1921' uses deprecated v2 capabilities in a way that may be insecure [ 631.611500][T14998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1923'. [ 632.112767][T15001] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 632.119704][T15001] lo speed is unknown, defaulting to 1000 [ 632.122341][T15001] lo speed is unknown, defaulting to 1000 [ 632.124191][T15001] lo speed is unknown, defaulting to 1000 [ 632.131913][T15006] tipc: Started in network mode [ 632.133344][T15006] tipc: Node identity ffffffff, cluster identity 4711 [ 632.135294][T15006] tipc: Node number set to 4294967295 [ 632.160189][T15001] infiniband sz1: set active [ 632.161572][T15001] infiniband sz1: added lo [ 632.163865][ T2296] lo speed is unknown, defaulting to 1000 [ 632.184195][T15001] RDS/IB: sz1: added [ 632.185441][T15001] smc: adding ib device sz1 with port count 1 [ 632.187193][T15001] smc: ib device sz1 port 1 has pnetid [ 632.189103][T15001] lo speed is unknown, defaulting to 1000 [ 632.204808][ T2296] lo speed is unknown, defaulting to 1000 [ 632.229099][T15001] lo speed is unknown, defaulting to 1000 [ 632.266100][T15001] lo speed is unknown, defaulting to 1000 [ 632.301980][T15001] lo speed is unknown, defaulting to 1000 [ 632.337549][T15001] lo speed is unknown, defaulting to 1000 [ 632.360293][T15016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1928'. [ 632.500128][T15021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1929'. [ 632.537034][T15025] xt_HMARK: proto mask must be zero with L3 mode [ 632.746568][T15031] lo speed is unknown, defaulting to 1000 [ 633.471597][T15035] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 25 [ 634.563988][T15057] bridge_slave_0: left allmulticast mode [ 634.565976][T15057] bridge_slave_0: left promiscuous mode [ 634.567634][T15057] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.572146][T15057] bridge_slave_1: left allmulticast mode [ 634.573897][T15057] bridge_slave_1: left promiscuous mode [ 634.576759][T15057] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.580840][T15057] bond0: (slave bond_slave_0): Releasing backup interface [ 634.586174][T15057] bond0: (slave bond_slave_1): Releasing backup interface [ 634.599905][T15057] team0: Port device team_slave_0 removed [ 634.608221][T15057] team0: Port device team_slave_1 removed [ 634.610135][T15057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.612294][T15057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.615816][T15057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.618076][T15057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.760536][T15067] pim6reg: entered allmulticast mode [ 634.770480][T15067] pim6reg: left allmulticast mode [ 634.862047][T15070] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 635.013807][T15072] rdma_rxe: rxe_newlink: failed to add lo [ 635.190242][T15075] lo speed is unknown, defaulting to 1000 [ 635.712327][T15082] lo speed is unknown, defaulting to 1000 [ 636.147291][ T1322] IPVS: starting estimator thread 0... [ 636.244475][T15093] IPVS: using max 36 ests per chain, 86400 per kthread [ 636.650985][T15108] XFS (nbd4): no-recovery mounts must be read-only. [ 637.305254][T15119] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 637.375903][T15120] rdma_rxe: rxe_newlink: failed to add lo [ 637.856701][ T5303] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 637.859165][ T5303] Bluetooth: hci3: Injecting HCI hardware error event [ 637.862707][T13951] Bluetooth: hci3: hardware error 0x00 [ 639.322952][T15153] lo speed is unknown, defaulting to 1000 [ 639.366913][T15151] lo speed is unknown, defaulting to 1000 [ 639.801636][T15176] pim6reg: entered allmulticast mode [ 639.864468][T15176] pim6reg: left allmulticast mode [ 639.944436][T13951] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 640.780573][T15198] lo speed is unknown, defaulting to 1000 [ 642.468834][T15224] netlink: 'syz.4.1976': attribute type 1 has an invalid length. [ 642.490241][T15224] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1976'. [ 642.495711][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1976'. [ 642.702556][T15231] lo speed is unknown, defaulting to 1000 [ 642.707267][T15232] netlink: 'syz.0.1985': attribute type 1 has an invalid length. [ 642.716360][T15232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1985'. [ 642.720483][T15232] bond48 (unregistering): Released all slaves [ 643.107915][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1985'. [ 643.714879][T15248] FAULT_INJECTION: forcing a failure. [ 643.714879][T15248] name failslab, interval 1, probability 0, space 0, times 0 [ 643.718430][T15248] CPU: 2 UID: 0 PID: 15248 Comm: syz.5.1981 Not tainted 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 643.718443][T15248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 643.718450][T15248] Call Trace: [ 643.718453][T15248] [ 643.718457][T15248] dump_stack_lvl+0x16c/0x1f0 [ 643.718474][T15248] should_fail_ex+0x50a/0x650 [ 643.718489][T15248] ? fs_reclaim_acquire+0xae/0x150 [ 643.718503][T15248] should_failslab+0xc2/0x120 [ 643.718514][T15248] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 643.718529][T15248] ? __d_alloc+0x31/0xaa0 [ 643.718538][T15248] ? lock_acquire.part.0+0x11b/0x380 [ 643.718553][T15248] __d_alloc+0x31/0xaa0 [ 643.718563][T15248] d_alloc_pseudo+0x1c/0xc0 [ 643.718575][T15248] alloc_file_pseudo+0xd0/0x230 [ 643.718587][T15248] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 643.718598][T15248] ? do_raw_spin_unlock+0x172/0x230 [ 643.718609][T15248] __anon_inode_getfile+0xf8/0x370 [ 643.718626][T15248] anon_inode_getfd+0x52/0xb0 [ 643.718641][T15248] map_create+0xbb4/0x1d20 [ 643.718656][T15248] ? __pfx_lock_release+0x10/0x10 [ 643.718669][T15248] ? trace_lock_acquire+0x14e/0x1f0 [ 643.718680][T15248] ? __pfx_map_create+0x10/0x10 [ 643.718693][T15248] ? lock_acquire+0x2f/0xb0 [ 643.718705][T15248] ? __might_fault+0xe3/0x190 [ 643.718715][T15248] ? __might_fault+0xe3/0x190 [ 643.718727][T15248] __sys_bpf+0x43f9/0x49f0 [ 643.718741][T15248] ? __pfx_lock_release+0x10/0x10 [ 643.718754][T15248] ? __pfx___sys_bpf+0x10/0x10 [ 643.718768][T15248] ? vfs_write+0x306/0x1150 [ 643.718783][T15248] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 643.718803][T15248] ? fput+0x70/0xf0 [ 643.718812][T15248] ? ksys_write+0x1ba/0x250 [ 643.718825][T15248] ? __pfx_ksys_write+0x10/0x10 [ 643.718840][T15248] __ia32_sys_bpf+0x76/0xe0 [ 643.718854][T15248] __do_fast_syscall_32+0x73/0x120 [ 643.718869][T15248] do_fast_syscall_32+0x32/0x80 [ 643.718882][T15248] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 643.718898][T15248] RIP: 0023:0xf7fc1579 [ 643.718906][T15248] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 643.718915][T15248] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 643.718930][T15248] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 643.718936][T15248] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 643.718941][T15248] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 643.718947][T15248] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 643.718952][T15248] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 643.718963][T15248] [ 643.776919][T15242] lo speed is unknown, defaulting to 1000 [ 644.448024][T15254] lo speed is unknown, defaulting to 1000 [ 646.219794][T15279] random: crng reseeded on system resumption [ 646.480977][T15283] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 646.494444][T13951] Bluetooth: hci2: command 0x0406 tx timeout [ 647.140914][T15309] lo speed is unknown, defaulting to 1000 [ 649.064609][ T5303] Bluetooth: hci0: command 0x0401 tx timeout [ 649.721196][T15389] lo speed is unknown, defaulting to 1000 [ 650.160806][T15401] FAULT_INJECTION: forcing a failure. [ 650.160806][T15401] name failslab, interval 1, probability 0, space 0, times 0 [ 650.163987][T15401] CPU: 3 UID: 0 PID: 15401 Comm: syz.2.2029 Not tainted 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 650.164000][T15401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 650.164006][T15401] Call Trace: [ 650.164009][T15401] [ 650.164013][T15401] dump_stack_lvl+0x16c/0x1f0 [ 650.164031][T15401] should_fail_ex+0x50a/0x650 [ 650.164045][T15401] ? fs_reclaim_acquire+0xae/0x150 [ 650.164058][T15401] ? tomoyo_encode2+0x100/0x3e0 [ 650.164072][T15401] should_failslab+0xc2/0x120 [ 650.164085][T15401] __kmalloc_noprof+0xcb/0x510 [ 650.164100][T15401] ? d_absolute_path+0x137/0x1b0 [ 650.164111][T15401] ? rcu_is_watching+0x12/0xc0 [ 650.164123][T15401] tomoyo_encode2+0x100/0x3e0 [ 650.164136][T15401] tomoyo_encode+0x29/0x50 [ 650.164147][T15401] tomoyo_realpath_from_path+0x19d/0x720 [ 650.164162][T15401] tomoyo_path_number_perm+0x248/0x590 [ 650.164177][T15401] ? tomoyo_path_number_perm+0x235/0x590 [ 650.164193][T15401] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 650.164220][T15401] ? __pfx_lock_release+0x10/0x10 [ 650.164246][T15401] ? trace_lock_acquire+0x14e/0x1f0 [ 650.164262][T15401] ? lock_acquire+0x2f/0xb0 [ 650.164274][T15401] ? __fget_files+0x40/0x3b0 [ 650.164289][T15401] ? __fget_files+0x20e/0x3b0 [ 650.164304][T15401] security_file_ioctl_compat+0x9b/0x240 [ 650.164316][T15401] __do_compat_sys_ioctl+0x4e/0x2c0 [ 650.164329][T15401] __do_fast_syscall_32+0x73/0x120 [ 650.164345][T15401] do_fast_syscall_32+0x32/0x80 [ 650.164358][T15401] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 650.164374][T15401] RIP: 0023:0xf7fb3579 [ 650.164382][T15401] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 650.164392][T15401] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 650.164401][T15401] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000001275 [ 650.164408][T15401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 650.164413][T15401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 650.164418][T15401] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 650.164424][T15401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 650.164435][T15401] [ 650.221747][T15401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 650.961294][T15412] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2032'. [ 651.022367][T15418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2035'. [ 651.025585][T15418] openvswitch: netlink: Flow key attr not present in new flow. [ 651.064979][T15412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2032'. [ 651.067767][T15412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2032'. [ 653.129867][T15438] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.186663][T15438] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.273289][T15438] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.355723][T15438] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.424160][T15438] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.428815][T15438] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.433959][T15438] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.438576][T15438] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.124980][T15484] lo speed is unknown, defaulting to 1000 [ 655.200296][T15501] random: crng reseeded on system resumption [ 655.294760][T15520] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2063'. [ 657.140293][T15574] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2079'. [ 657.193244][T15572] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.217984][T15576] IPv6: NLM_F_CREATE should be specified when creating new route [ 657.278120][T15581] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 657.283457][T15581] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 657.291444][T15572] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.453278][T15572] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.686108][T15572] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.832557][T15572] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.850766][T15572] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.868444][T15572] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.889387][T15572] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.284345][T14315] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 658.441179][T15613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2093'. [ 658.449902][T14315] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 658.459943][T14315] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 658.462755][T14315] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 658.465773][T14315] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 658.468818][T14315] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 658.473133][T14315] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 658.476384][T14315] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 658.478614][T14315] usb 7-1: Product: syz [ 658.479803][T14315] usb 7-1: Manufacturer: syz [ 658.491976][T14315] cdc_wdm 7-1:1.0: skipping garbage [ 658.493542][T14315] cdc_wdm 7-1:1.0: skipping garbage [ 658.497504][T14315] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 658.501260][T14315] cdc_wdm 7-1:1.0: Unknown control protocol [ 658.703558][ T58] usb 7-1: USB disconnect, device number 8 [ 658.998532][T15633] lo speed is unknown, defaulting to 1000 [ 659.183512][T15643] lo speed is unknown, defaulting to 1000 [ 660.276104][T15663] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2105'. [ 660.880179][T15678] ufs: Invalid option: "grpquota" or missing value [ 660.882604][T15678] ufs: wrong mount options [ 661.026334][T15683] lo speed is unknown, defaulting to 1000 [ 661.116488][T15684] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.201481][T15684] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.327606][T15684] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.405116][T15684] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.523994][T15684] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.538232][T15684] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.548529][T15684] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.558820][T15684] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.906336][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2114'. [ 662.227183][T15703] lo speed is unknown, defaulting to 1000 [ 662.247948][T15706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2119'. [ 662.281911][T15709] IPVS: sync thread started: state = MASTER, mcast_ifn = tunl0, syncid = 262145, id = 0 [ 662.428064][T15715] batman_adv: batadv0: Adding interface: ip6gretap1 [ 662.429981][T15715] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 662.436209][T15715] batman_adv: batadv0: Interface activated: ip6gretap1 [ 662.477526][T15715] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input11 [ 663.020255][T15731] [U]  [ 663.244776][T15724] lo speed is unknown, defaulting to 1000 [ 663.396652][T15735] "syz.5.2128" (15735) uses obsolete ecb(arc4) skcipher [ 663.775815][T15760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2136'. [ 664.048651][T15755] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.128638][T15765] lo speed is unknown, defaulting to 1000 [ 664.285203][T15755] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.517318][T15755] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.665710][T15755] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.771244][T15755] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.778919][T15755] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.787140][T15755] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.791808][T15755] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.474427][T12279] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 665.498900][ T6008] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 665.502310][ T6008] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 665.635497][T12279] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 665.637778][T12279] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 665.640916][T12279] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 665.643961][T12279] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 665.647415][T12279] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 665.651005][T12279] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 665.653557][T12279] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.658544][T12279] usb 7-1: config 0 descriptor?? [ 665.660511][T15789] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 665.914364][ T36] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 665.953759][T15802] lo speed is unknown, defaulting to 1000 [ 666.064488][ T36] usb 9-1: Using ep0 maxpacket: 32 [ 666.067248][T12279] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 666.071052][T12279] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 666.076097][ T36] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 666.076339][T12279] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 666.078336][ T36] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 666.084092][ T36] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 666.088226][ T36] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 666.090900][ T36] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 666.093556][ T36] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 666.097728][ T36] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 666.100207][ T36] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.108241][ T36] usb 9-1: config 0 descriptor?? [ 666.326376][ T36] usblp 9-1:0.0: usblp1: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 666.326723][T12279] usb 7-1: USB disconnect, device number 9 [ 666.337389][ T36] usb 9-1: USB disconnect, device number 2 [ 666.353108][T15808] lo speed is unknown, defaulting to 1000 [ 666.356857][ T36] usblp1: removed [ 666.480976][T15808] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 666.482954][T15808] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 666.487752][T15808] vhci_hcd vhci_hcd.0: Device attached [ 666.534780][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 666.534790][ T40] audit: type=1326 audit(1742922947.134:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15807 comm="syz.5.2149" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x0 [ 666.617797][T15811] vhci_hcd: connection closed [ 666.621217][T14990] vhci_hcd: stop threads [ 666.624393][T14990] vhci_hcd: release socket [ 666.626605][T14990] vhci_hcd: disconnect device [ 666.666769][ T1322] vhci_hcd: vhci_device speed not set [ 666.765054][ T2296] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 666.914446][ T2296] usb 9-1: Using ep0 maxpacket: 32 [ 666.918183][ T2296] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 666.921317][ T2296] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 666.924108][ T2296] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 666.927197][ T2296] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 666.930517][ T2296] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 666.933172][ T2296] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 666.937656][ T2296] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 666.941011][ T2296] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.947907][ T2296] usb 9-1: config 0 descriptor?? [ 667.165747][ T2296] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 667.367008][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'. [ 667.504349][ T5989] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 667.774351][ T5989] usb 10-1: Using ep0 maxpacket: 8 [ 667.779357][ T5989] usb 10-1: config 2 has an invalid interface number: 135 but max is 2 [ 667.781744][ T5989] usb 10-1: config 2 has an invalid interface number: 236 but max is 2 [ 667.784171][ T5989] usb 10-1: config 2 has an invalid interface number: 56 but max is 2 [ 667.786571][ T5989] usb 10-1: config 2 has no interface number 0 [ 667.788434][ T5989] usb 10-1: config 2 has no interface number 1 [ 667.790309][ T5989] usb 10-1: config 2 has no interface number 2 [ 667.792220][ T5989] usb 10-1: config 2 interface 135 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 667.795624][ T5989] usb 10-1: config 2 interface 135 altsetting 0 endpoint 0xE has an invalid bInterval 142, changing to 11 [ 667.863163][ T5989] usb 10-1: config 2 interface 135 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 667.869412][ T5989] usb 10-1: config 2 interface 135 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 667.878957][ T5989] usb 10-1: config 2 interface 135 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 667.888203][ T5989] usb 10-1: config 2 interface 135 altsetting 0 endpoint 0xF has invalid maxpacket 1136, setting to 1024 [ 667.897567][ T5989] usb 10-1: config 2 interface 236 has no altsetting 0 [ 667.905430][ T5989] usb 10-1: Dual-Role OTG device on HNP port [ 667.909456][ T5989] usb 10-1: New USB device found, idVendor=16c1, idProduct=1cde, bcdDevice=ea.32 [ 667.918297][ T5989] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.926481][ T5989] usb 10-1: Product: syz [ 667.929892][ T5989] usb 10-1: Manufacturer: syz [ 667.935444][ T5989] usb 10-1: SerialNumber: syz [ 667.941166][T15829] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 668.155069][T15829] lo speed is unknown, defaulting to 1000 [ 668.424767][T15851] lo speed is unknown, defaulting to 1000 [ 668.756309][ T5989] plfxlc 10-1:2.135: Firmware Version: 0 [ 668.758056][ T5989] plfxlc 10-1:2.135: Unit type is station [ 668.848240][ T5989] plfxlc 10-1:2.135: Direct firmware load for plfxlc/lifi-x.bin failed with error -2 [ 668.868655][ T5989] plfxlc 10-1:2.135: Falling back to sysfs fallback for: plfxlc/lifi-x.bin [ 668.904592][T15859] FAULT_INJECTION: forcing a failure. [ 668.904592][T15859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.908366][T15859] CPU: 3 UID: 0 PID: 15859 Comm: syz.5.2160 Not tainted 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 668.908380][T15859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 668.908386][T15859] Call Trace: [ 668.908389][T15859] [ 668.908394][T15859] dump_stack_lvl+0x16c/0x1f0 [ 668.908412][T15859] should_fail_ex+0x50a/0x650 [ 668.908427][T15859] _copy_from_user+0x2e/0xd0 [ 668.908443][T15859] vhost_vring_ioctl+0x359/0x1390 [ 668.908455][T15859] ? __pfx_vhost_vring_ioctl+0x10/0x10 [ 668.908465][T15859] ? vhost_dev_ioctl+0x131/0xdc0 [ 668.908488][T15859] vhost_vsock_dev_ioctl+0x8be/0xb50 [ 668.908503][T15859] ? trace_lock_acquire+0x14e/0x1f0 [ 668.908516][T15859] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 668.908534][T15859] ? __fget_files+0x20e/0x3b0 [ 668.908550][T15859] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 668.908564][T15859] compat_ptr_ioctl+0x6b/0xa0 [ 668.908576][T15859] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 668.908586][T15859] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 668.908599][T15859] __do_fast_syscall_32+0x73/0x120 [ 668.908614][T15859] do_fast_syscall_32+0x32/0x80 [ 668.908628][T15859] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 668.908644][T15859] RIP: 0023:0xf7fc1579 [ 668.908652][T15859] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 668.908662][T15859] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 668.908671][T15859] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004028af11 [ 668.908678][T15859] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 668.908683][T15859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 668.908689][T15859] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 668.908694][T15859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 668.908706][T15859] [ 668.914317][ T1017] usb 9-1: USB disconnect, device number 3 [ 669.211156][ T1017] usblp0: removed [ 669.245672][T13951] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 669.380973][T15885] lo speed is unknown, defaulting to 1000 [ 669.564021][T15885] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 669.565893][T15885] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 669.568731][T15885] vhci_hcd vhci_hcd.0: Device attached [ 669.676755][ T40] audit: type=1326 audit(1742922950.274:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.0.2168" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x0 [ 669.800923][ T835] vhci_hcd: vhci_device speed not set [ 669.854999][ T835] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 670.055919][T15889] vhci_hcd: connection reset by peer [ 670.059872][T15132] vhci_hcd: stop threads [ 670.061493][T15132] vhci_hcd: release socket [ 670.062821][T15132] vhci_hcd: disconnect device [ 670.065281][ T2296] libceph: connect (1)[c::]:6789 error -101 [ 670.067153][ T2296] libceph: mon0 (1)[c::]:6789 connect error [ 670.184904][T15892] ceph: No mds server is up or the cluster is laggy [ 670.354377][ T2296] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 670.504359][ T2296] usb 7-1: Using ep0 maxpacket: 32 [ 670.507100][ T2296] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 670.509403][ T2296] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 670.511895][ T2296] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 670.516528][ T2296] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 670.519187][ T2296] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 670.521889][ T2296] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 670.525978][ T2296] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 670.528567][ T2296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.532718][ T2296] usb 7-1: config 0 descriptor?? [ 670.744778][ T2296] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 670.754746][ T2296] usb 7-1: USB disconnect, device number 10 [ 670.761215][ T2296] usblp0: removed [ 670.763289][T15914] lo speed is unknown, defaulting to 1000 [ 670.829750][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'. [ 671.204395][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 671.354310][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 671.356968][ T9] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 671.359266][ T9] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 671.361614][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 671.364026][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 671.368260][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 671.370985][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 671.374768][ T9] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 671.377252][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.380467][ T9] usb 7-1: config 0 descriptor?? [ 671.588101][ T9] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 671.721121][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2180'. [ 671.721811][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2180'. [ 671.723716][T15932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2180'. [ 671.728943][T15932] netlink: 'syz.4.2180': attribute type 12 has an invalid length. [ 671.838143][T15935] usb usb8: usbfs: process 15935 (syz.4.2181) did not claim interface 0 before use [ 673.052541][T15959] lo speed is unknown, defaulting to 1000 [ 673.186838][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2187'. [ 673.491206][T15881] usb 7-1: USB disconnect, device number 11 [ 673.497273][T15881] usblp0: removed [ 673.596095][T15973] overlayfs: conflicting lowerdir path [ 673.953251][T15988] smc: removing ib device sz1 [ 674.733354][T15985] ceph: No mds server is up or the cluster is laggy [ 674.741485][T14058] libceph: connect (1)[c::]:6789 error -101 [ 674.743783][T14058] libceph: mon0 (1)[c::]:6789 connect error [ 674.964390][ T835] vhci_hcd: vhci_device speed not set [ 675.282883][ T6008] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 675.286731][ T6008] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 675.288917][ T6008] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 675.291086][ T6008] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 675.293483][ T6008] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 675.296440][ T6008] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 675.298789][ T6008] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 675.301089][ T6008] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 675.303243][ T6008] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 675.306760][ T6008] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 675.308955][ T6008] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 675.311100][ T6008] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 675.313283][ T6008] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 675.316006][ T6008] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 675.318234][ T6008] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 675.320447][ T6008] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 675.327307][ T6008] hid-generic 0000:3000000:0000.0007: hidraw1: HID v0.00 Device [sy] on syz0 [ 675.632101][T16012] FAULT_INJECTION: forcing a failure. [ 675.632101][T16012] name fail_futex, interval 1, probability 0, space 0, times 1 [ 675.636039][T16012] CPU: 3 UID: 0 PID: 16012 Comm: syz.0.2201 Not tainted 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 675.636052][T16012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 675.636059][T16012] Call Trace: [ 675.636062][T16012] [ 675.636066][T16012] dump_stack_lvl+0x16c/0x1f0 [ 675.636083][T16012] should_fail_ex+0x50a/0x650 [ 675.636097][T16012] ? futex_top_waiter+0x1c7/0x260 [ 675.636110][T16012] should_fail_futex+0x4c/0x60 [ 675.636122][T16012] futex_lock_pi_atomic+0x558/0xdb0 [ 675.636138][T16012] futex_lock_pi+0x2f6/0x7b0 [ 675.636153][T16012] ? __pfx_futex_lock_pi+0x10/0x10 [ 675.636167][T16012] ? find_held_lock+0x2d/0x110 [ 675.636198][T16012] ? find_held_lock+0x2d/0x110 [ 675.636211][T16012] ? __pfx_futex_wake_mark+0x10/0x10 [ 675.636226][T16012] ? vfs_write+0x306/0x1150 [ 675.636243][T16012] do_futex+0x11b/0x350 [ 675.636254][T16012] ? __pfx_do_futex+0x10/0x10 [ 675.636270][T16012] __ia32_sys_futex_time32+0x1da/0x460 [ 675.636284][T16012] ? fput+0x70/0xf0 [ 675.636293][T16012] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 675.636306][T16012] ? ksys_write+0x1ba/0x250 [ 675.636319][T16012] ? __pfx_ksys_write+0x10/0x10 [ 675.636336][T16012] __do_fast_syscall_32+0x73/0x120 [ 675.636351][T16012] do_fast_syscall_32+0x32/0x80 [ 675.636364][T16012] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 675.636380][T16012] RIP: 0023:0xf7f26579 [ 675.636388][T16012] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 675.636397][T16012] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 675.636408][T16012] RAX: ffffffffffffffda RBX: 000000008000cffc RCX: 0000000000000006 [ 675.636414][T16012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 675.636419][T16012] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 675.636425][T16012] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 675.636430][T16012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 675.636441][T16012] [ 676.314365][ T835] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 676.476117][ T835] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 676.478444][ T835] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 676.481594][ T835] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 676.484674][ T835] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 676.487700][ T835] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 676.491634][ T835] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 676.496316][ T835] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.499936][ T835] usb 9-1: config 0 descriptor?? [ 676.501848][T16020] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 676.910125][ T835] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 676.915418][ T835] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 676.923500][ T835] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 677.170768][ T6008] usb 9-1: USB disconnect, device number 4 [ 678.668888][T16055] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 678.998328][T15881] libceph: connect (1)[c::]:6789 error -101 [ 679.000315][T15881] libceph: mon0 (1)[c::]:6789 connect error [ 679.259370][T15881] libceph: connect (1)[c::]:6789 error -101 [ 679.261482][T15881] libceph: mon0 (1)[c::]:6789 connect error [ 679.324441][ T2296] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 679.484364][ T2296] usb 9-1: Using ep0 maxpacket: 32 [ 679.487025][ T2296] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.489817][ T2296] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 679.492291][ T2296] usb 9-1: config 0 interface 0 has no altsetting 0 [ 679.495034][ T2296] usb 9-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 679.497545][ T2296] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 679.500891][ T2296] usb 9-1: SerialNumber: syz [ 679.503506][ T2296] usb 9-1: config 0 descriptor?? [ 679.506231][ T2296] usb-storage 9-1:0.0: USB Mass Storage device detected [ 679.522145][ T2296] usb-storage 9-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 679.627896][T16073] ceph: No mds server is up or the cluster is laggy [ 679.704809][T16080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2218'. [ 679.713264][T16080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2218'. [ 679.767814][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2218'. [ 679.836871][ T835] usb 9-1: USB disconnect, device number 5 [ 682.595160][T16145] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 682.632250][T16147] program syz.5.2237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 683.046315][T16162] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=2645567642 (169316329088 ns) > initial count (67544062464 ns). Using initial count to start timer. [ 683.055312][T16162] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 683.124670][T16175] netlink: 'syz.2.2245': attribute type 21 has an invalid length. [ 683.126880][T16175] netlink: 'syz.2.2245': attribute type 1 has an invalid length. [ 683.129035][T16175] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2245'. [ 683.904313][ T40] audit: type=1326 audit(1742922964.494:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16190 comm="syz.5.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 683.914283][ T40] audit: type=1326 audit(1742922964.494:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16190 comm="syz.5.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 683.921640][ T40] audit: type=1326 audit(1742922964.504:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16190 comm="syz.5.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=448 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 683.930799][ T40] audit: type=1326 audit(1742922964.504:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16190 comm="syz.5.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 683.940958][ T40] audit: type=1326 audit(1742922964.504:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16190 comm="syz.5.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 683.946854][ T40] audit: type=1326 audit(1742922964.504:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16190 comm="syz.5.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 683.952779][ T40] audit: type=1326 audit(1742922964.504:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16190 comm="syz.5.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 683.961676][ T40] audit: type=1326 audit(1742922964.504:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16190 comm="syz.5.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 683.967913][ T40] audit: type=1326 audit(1742922964.504:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16190 comm="syz.5.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 683.974086][ T40] audit: type=1326 audit(1742922964.504:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16190 comm="syz.5.2250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 684.705835][ T5303] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 684.904419][ T5303] Bluetooth: hci0: command 0x0401 tx timeout [ 685.226069][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.227940][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.844412][ T6008] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 686.004455][ T6008] usb 9-1: Using ep0 maxpacket: 8 [ 686.008844][ T6008] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 686.012818][ T6008] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 686.016800][ T6008] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.021472][ T6008] usb 9-1: config 0 descriptor?? [ 686.229300][ T6008] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 686.503788][T12279] usb 9-1: USB disconnect, device number 6 [ 686.603717][T16249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2263'. [ 687.157291][T16257] netlink: 'syz.4.2267': attribute type 10 has an invalid length. [ 687.370888][T16265] netlink: 'syz.2.2270': attribute type 1 has an invalid length. [ 687.373133][T16265] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2270'. [ 688.255292][T16286] FAULT_INJECTION: forcing a failure. [ 688.255292][T16286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.258949][T16286] CPU: 3 UID: 0 PID: 16286 Comm: syz.0.2274 Not tainted 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 688.258962][T16286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 688.258968][T16286] Call Trace: [ 688.258972][T16286] [ 688.258976][T16286] dump_stack_lvl+0x16c/0x1f0 [ 688.258994][T16286] should_fail_ex+0x50a/0x650 [ 688.259009][T16286] _copy_to_user+0x32/0xd0 [ 688.259025][T16286] put_user_ifreq+0x100/0x150 [ 688.259035][T16286] sock_do_ioctl+0x232/0x280 [ 688.259045][T16286] ? __pfx_sock_do_ioctl+0x10/0x10 [ 688.259054][T16286] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 688.259072][T16286] compat_sock_ioctl+0x318/0x7e0 [ 688.259085][T16286] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 688.259098][T16286] ? __fget_files+0x20e/0x3b0 [ 688.259114][T16286] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 688.259125][T16286] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 688.259137][T16286] __do_fast_syscall_32+0x73/0x120 [ 688.259152][T16286] do_fast_syscall_32+0x32/0x80 [ 688.259166][T16286] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 688.259181][T16286] RIP: 0023:0xf7f26579 [ 688.259189][T16286] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 688.259199][T16286] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 688.259208][T16286] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008910 [ 688.259214][T16286] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 688.259220][T16286] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 688.259225][T16286] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 688.259231][T16286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 688.259242][T16286] [ 688.313204][ C3] vkms_vblank_simulate: vblank timer overrun [ 688.736360][T13951] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 688.739584][T13951] Bluetooth: hci2: Injecting HCI hardware error event [ 688.743168][ T5303] Bluetooth: hci2: hardware error 0x00 [ 689.452414][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2280'. [ 689.527146][T16309] syz.4.2284 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 690.814488][ T5303] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 711.799368][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2289'. [ 712.516984][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 712.517087][ T40] audit: type=1326 audit(1742922993.114:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16320 comm="syz.0.2289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7fc00000 [ 713.888745][T16359] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.479942][T16359] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.557416][T16359] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.613581][T16359] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.729457][T16359] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.736642][T16359] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.744608][T16359] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.748922][T16359] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.895001][T16400] netlink: 'syz.4.2311': attribute type 5 has an invalid length. [ 716.004354][T12279] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 716.164300][T12279] usb 7-1: Using ep0 maxpacket: 8 [ 716.168996][T12279] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 716.171387][T12279] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.174155][T12279] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 716.184748][T12279] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 716.187425][T12279] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.190726][T12279] usb 7-1: config 0 descriptor?? [ 716.397400][ T6009] usb 7-1: USB disconnect, device number 12 [ 717.082950][T16425] fuse: Bad value for 'user_id' [ 717.084489][T16425] fuse: Bad value for 'user_id' [ 717.086622][T16425] futex_wake_op: syz.0.2319 tries to shift op by 32; fix this program [ 718.145086][ T1322] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 718.307734][ T1322] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 718.310751][ T1322] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 718.313510][ T1322] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 718.316468][ T1322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.323254][T16442] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 718.326713][ T1322] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 718.559136][ T1322] usb 7-1: USB disconnect, device number 13 [ 720.043141][ T40] audit: type=1326 audit(1742923000.634:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16462 comm="syz.4.2328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7fc00000 [ 720.051544][T16487] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1558365176 (199470742528 ns) > initial count (55482769792 ns). Using initial count to start timer. [ 721.141824][T16506] overlayfs: failed to resolve 'uid=00000000004294967295': -2 [ 723.048584][T16554] FAULT_INJECTION: forcing a failure. [ 723.048584][T16554] name failslab, interval 1, probability 0, space 0, times 0 [ 723.051972][T16554] CPU: 2 UID: 0 PID: 16554 Comm: syz.0.2351 Not tainted 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 723.051985][T16554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 723.051991][T16554] Call Trace: [ 723.052023][T16554] [ 723.052028][T16554] dump_stack_lvl+0x16c/0x1f0 [ 723.052088][T16554] should_fail_ex+0x50a/0x650 [ 723.052118][T16554] ? fs_reclaim_acquire+0xae/0x150 [ 723.052132][T16554] should_failslab+0xc2/0x120 [ 723.052142][T16554] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 723.052157][T16554] ? security_file_alloc+0x34/0x2b0 [ 723.052170][T16554] security_file_alloc+0x34/0x2b0 [ 723.052181][T16554] init_file+0x93/0x4c0 [ 723.052198][T16554] alloc_empty_file+0x73/0x1e0 [ 723.052208][T16554] path_openat+0xe1/0x2d90 [ 723.052222][T16554] ? hlock_class+0x4e/0x130 [ 723.052233][T16554] ? __lock_acquire+0x15a9/0x3c40 [ 723.052250][T16554] ? __pfx_path_openat+0x10/0x10 [ 723.052264][T16554] ? __pfx___lock_acquire+0x10/0x10 [ 723.052276][T16554] ? lock_acquire.part.0+0x11b/0x380 [ 723.052290][T16554] ? find_held_lock+0x2d/0x110 [ 723.052301][T16554] do_filp_open+0x20c/0x470 [ 723.052315][T16554] ? __pfx_do_filp_open+0x10/0x10 [ 723.052329][T16554] ? find_held_lock+0x2d/0x110 [ 723.052346][T16554] ? _raw_spin_unlock+0x28/0x50 [ 723.052357][T16554] ? alloc_fd+0x420/0x760 [ 723.052374][T16554] do_sys_openat2+0x11c/0x1d0 [ 723.052384][T16554] ? __pfx_do_sys_openat2+0x10/0x10 [ 723.052395][T16554] ? __fget_files+0x20e/0x3b0 [ 723.052421][T16554] __ia32_sys_creat+0xcc/0x120 [ 723.052433][T16554] ? __pfx___ia32_sys_creat+0x10/0x10 [ 723.052444][T16554] ? __pfx_ksys_write+0x10/0x10 [ 723.052458][T16554] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 723.052472][T16554] ? lockdep_hardirqs_on+0x7c/0x110 [ 723.052485][T16554] __do_fast_syscall_32+0x73/0x120 [ 723.052499][T16554] do_fast_syscall_32+0x32/0x80 [ 723.052512][T16554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 723.052528][T16554] RIP: 0023:0xf7f26579 [ 723.052536][T16554] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 723.052546][T16554] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000008 [ 723.052556][T16554] RAX: ffffffffffffffda RBX: 0000000080001dc0 RCX: 00000000000001ab [ 723.052562][T16554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 723.052567][T16554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 723.052572][T16554] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 723.052578][T16554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 723.052589][T16554] [ 723.245685][T16560] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 723.413519][T16561] syz.4.2353 (16561): /proc/16557/oom_adj is deprecated, please use /proc/16557/oom_score_adj instead. [ 723.640095][T16584] netlink: 'syz.5.2358': attribute type 1 has an invalid length. [ 723.642238][T16584] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2358'. [ 723.763485][T16589] nbd: must specify a device to reconfigure [ 724.286718][T16623] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2362'. [ 724.289750][T16614] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2362'. [ 724.532920][ T5303] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 724.537602][ T5303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 724.541156][ T5303] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 724.543562][ T5303] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 724.545897][ T5303] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 724.547991][ T5303] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 724.646626][T16630] chnl_net:caif_netlink_parms(): no params data found [ 724.719989][T14990] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.801890][T16630] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.804969][T16630] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.807480][T16630] bridge_slave_0: entered allmulticast mode [ 724.809539][T16630] bridge_slave_0: entered promiscuous mode [ 724.824718][T14990] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.871549][T16630] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.873639][T16630] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.875916][T16630] bridge_slave_1: entered allmulticast mode [ 724.878074][T16630] bridge_slave_1: entered promiscuous mode [ 724.900816][T16630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.907064][T16630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.934071][T16630] team0: Port device team_slave_0 added [ 724.939193][T16630] team0: Port device team_slave_1 added [ 724.946076][T14990] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.973903][T16630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.978229][T16630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.985873][T16630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.991934][T14990] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.005292][T16630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.007266][T16630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.016934][T16630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.043665][T16630] hsr_slave_0: entered promiscuous mode [ 725.046780][T16630] hsr_slave_1: entered promiscuous mode [ 725.048850][T16630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.051076][T16630] Cannot create hsr debugfs directory [ 725.321181][T16642] FAULT_INJECTION: forcing a failure. [ 725.321181][T16642] name failslab, interval 1, probability 0, space 0, times 0 [ 725.326357][T16642] CPU: 1 UID: 0 PID: 16642 Comm: syz.4.2366 Not tainted 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 725.326370][T16642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 725.326376][T16642] Call Trace: [ 725.326379][T16642] [ 725.326383][T16642] dump_stack_lvl+0x16c/0x1f0 [ 725.326416][T16642] should_fail_ex+0x50a/0x650 [ 725.326432][T16642] should_failslab+0xc2/0x120 [ 725.326443][T16642] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 725.326458][T16642] ? trace_lock_acquire+0x14e/0x1f0 [ 725.326469][T16642] ? skb_clone+0x190/0x3f0 [ 725.326485][T16642] skb_clone+0x190/0x3f0 [ 725.326499][T16642] dev_queue_xmit_nit+0x38f/0xbc0 [ 725.326515][T16642] ? netif_skb_features+0x3b0/0xd50 [ 725.326528][T16642] dev_hard_start_xmit+0x283/0x7b0 [ 725.326542][T16642] __dev_queue_xmit+0x7f0/0x43e0 [ 725.326557][T16642] ? __pfx___dev_queue_xmit+0x10/0x10 [ 725.326579][T16642] ? __asan_memcpy+0x3c/0x60 [ 725.326592][T16642] ? __asan_memcpy+0x3c/0x60 [ 725.326605][T16642] ? __skb_clone+0x570/0x760 [ 725.326620][T16642] netlink_deliver_tap+0xa87/0xd30 [ 725.326636][T16642] netlink_unicast+0x5e1/0x7f0 [ 725.326650][T16642] ? __pfx_netlink_unicast+0x10/0x10 [ 725.326663][T16642] ? __phys_addr_symbol+0x30/0x80 [ 725.326673][T16642] ? __check_object_size+0x4c7/0x710 [ 725.326685][T16642] netlink_sendmsg+0x8cb/0xd70 [ 725.326700][T16642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 725.326713][T16642] ? __import_iovec+0x1cd/0x660 [ 725.326732][T16642] ____sys_sendmsg+0xa87/0xc70 [ 725.326744][T16642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 725.326753][T16642] ? get_compat_msghdr+0x11b/0x170 [ 725.326770][T16642] ___sys_sendmsg+0x135/0x1e0 [ 725.326784][T16642] ? __pfx____sys_sendmsg+0x10/0x10 [ 725.326802][T16642] ? __pfx_lock_release+0x10/0x10 [ 725.326815][T16642] ? trace_lock_acquire+0x14e/0x1f0 [ 725.326831][T16642] ? __fget_files+0x20e/0x3b0 [ 725.326848][T16642] __sys_sendmsg+0x16e/0x220 [ 725.326861][T16642] ? __pfx___sys_sendmsg+0x10/0x10 [ 725.326882][T16642] __do_fast_syscall_32+0x73/0x120 [ 725.326898][T16642] do_fast_syscall_32+0x32/0x80 [ 725.326911][T16642] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 725.326927][T16642] RIP: 0023:0xf73de579 [ 725.326935][T16642] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 725.326945][T16642] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 725.326955][T16642] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 725.326961][T16642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 725.326966][T16642] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 725.326972][T16642] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 725.326977][T16642] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 725.326989][T16642] [ 725.410202][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.550652][T14990] bond0 (unregistering): Released all slaves [ 725.625954][T14990] bond1 (unregistering): Released all slaves [ 725.712625][T14990] bond2 (unregistering): Released all slaves [ 725.820492][T14990] bond3 (unregistering): Released all slaves [ 725.824766][T14990] bond4 (unregistering): Released all slaves [ 725.906876][T14990] bond5 (unregistering): Released all slaves [ 725.911927][T14990] bond6 (unregistering): Released all slaves [ 725.916376][T14990] bond7 (unregistering): Released all slaves [ 725.920523][T14990] bond8 (unregistering): Released all slaves [ 725.925045][T14990] bond9 (unregistering): Released all slaves [ 726.011290][T14990] bond10 (unregistering): Released all slaves [ 726.016261][T14990] bond11 (unregistering): Released all slaves [ 726.020504][T14990] bond12 (unregistering): Released all slaves [ 726.024732][T14990] bond13 (unregistering): Released all slaves [ 726.028840][T14990] bond14 (unregistering): Released all slaves [ 726.033032][T14990] bond15 (unregistering): Released all slaves [ 726.037714][T14990] bond16 (unregistering): Released all slaves [ 726.042438][T14990] bond17 (unregistering): Released all slaves [ 726.047059][T14990] bond18 (unregistering): Released all slaves [ 726.051686][T14990] bond19 (unregistering): Released all slaves [ 726.056459][T14990] bond20 (unregistering): Released all slaves [ 726.061253][T14990] bond21 (unregistering): Released all slaves [ 726.065894][T14990] bond22 (unregistering): Released all slaves [ 726.185458][T14990] bond23 (unregistering): Released all slaves [ 726.301054][T14990] bond24 (unregistering): Released all slaves [ 726.306153][T14990] bond25 (unregistering): Released all slaves [ 726.311259][T14990] bond26 (unregistering): Released all slaves [ 726.316518][T14990] bond27 (unregistering): Released all slaves [ 726.321196][T14990] bond28 (unregistering): Released all slaves [ 726.326051][T14990] bond29 (unregistering): Released all slaves [ 726.331103][T14990] bond30 (unregistering): Released all slaves [ 726.335919][T14990] bond31 (unregistering): Released all slaves [ 726.423721][T14990] bond32 (unregistering): Released all slaves [ 726.501415][T14990] bond33 (unregistering): Released all slaves [ 726.506048][T14990] bond34 (unregistering): Released all slaves [ 726.510291][T14990] bond35 (unregistering): Released all slaves [ 726.514958][T14990] bond36 (unregistering): Released all slaves [ 726.519181][T14990] bond37 (unregistering): Released all slaves [ 726.523350][T14990] bond38 (unregistering): Released all slaves [ 726.527684][T14990] bond39 (unregistering): Released all slaves [ 726.531840][T14990] bond40 (unregistering): Released all slaves [ 726.536196][T14990] bond41 (unregistering): Released all slaves [ 726.540305][T14990] bond42 (unregistering): Released all slaves [ 726.544503][T14990] bond43 (unregistering): Released all slaves [ 726.549250][T14990] bond44 (unregistering): Released all slaves [ 726.553919][T14990] bond45 (unregistering): Released all slaves [ 726.558783][T14990] bond46 (unregistering): Released all slaves [ 726.563466][T14990] bond47 (unregistering): Released all slaves [ 726.575456][ T5303] Bluetooth: hci1: command tx timeout [ 726.742967][T16659] FAULT_INJECTION: forcing a failure. [ 726.742967][T16659] name failslab, interval 1, probability 0, space 0, times 0 [ 726.750667][T16659] CPU: 3 UID: 0 PID: 16659 Comm: syz.5.2370 Not tainted 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 726.750684][T16659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 726.750690][T16659] Call Trace: [ 726.750704][T16659] [ 726.750709][T16659] dump_stack_lvl+0x16c/0x1f0 [ 726.750728][T16659] should_fail_ex+0x50a/0x650 [ 726.750742][T16659] ? fs_reclaim_acquire+0xae/0x150 [ 726.750755][T16659] ? subflow_create_ctx+0x87/0x2a0 [ 726.750767][T16659] should_failslab+0xc2/0x120 [ 726.750777][T16659] __kmalloc_cache_noprof+0x68/0x410 [ 726.750790][T16659] ? tcp_set_ulp+0x267/0x7f0 [ 726.750806][T16659] subflow_create_ctx+0x87/0x2a0 [ 726.750819][T16659] subflow_ulp_init+0xc3/0x4d0 [ 726.750831][T16659] tcp_set_ulp+0x326/0x7f0 [ 726.750845][T16659] mptcp_subflow_create_socket+0x363/0xed0 [ 726.750859][T16659] ? __pfx_register_lock_class+0x10/0x10 [ 726.750875][T16659] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 726.750890][T16659] ? __lock_acquire+0x15a9/0x3c40 [ 726.750906][T16659] __mptcp_nmpc_sk+0x184/0x7d0 [ 726.750921][T16659] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 726.750937][T16659] ? hlock_class+0x4e/0x130 [ 726.750947][T16659] ? mark_lock+0xb5/0xc60 [ 726.750958][T16659] ? __pfx___lock_acquire+0x10/0x10 [ 726.750973][T16659] mptcp_connect+0x7d/0xc00 [ 726.750990][T16659] __inet_stream_connect+0x3c7/0x1020 [ 726.751004][T16659] ? find_held_lock+0x2d/0x110 [ 726.751016][T16659] ? __pfx___inet_stream_connect+0x10/0x10 [ 726.751030][T16659] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 726.751040][T16659] ? __pfx_inet_stream_connect+0x10/0x10 [ 726.751065][T16659] ? mark_held_locks+0x9f/0xe0 [ 726.751079][T16659] ? __local_bh_enable_ip+0xa4/0x120 [ 726.751098][T16659] ? __pfx_inet_stream_connect+0x10/0x10 [ 726.751111][T16659] inet_stream_connect+0x57/0xa0 [ 726.751126][T16659] __sys_connect_file+0x13e/0x1a0 [ 726.751140][T16659] __sys_connect+0x14f/0x170 [ 726.751150][T16659] ? __pfx___sys_connect+0x10/0x10 [ 726.751161][T16659] ? __fget_files+0x20e/0x3b0 [ 726.751179][T16659] ? __pfx_ksys_write+0x10/0x10 [ 726.751195][T16659] __ia32_sys_connect+0x71/0xb0 [ 726.751206][T16659] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 726.751221][T16659] __do_fast_syscall_32+0x73/0x120 [ 726.751235][T16659] do_fast_syscall_32+0x32/0x80 [ 726.751249][T16659] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 726.751265][T16659] RIP: 0023:0xf7fc1579 [ 726.751273][T16659] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 726.751282][T16659] RSP: 002b:00000000f50c555c EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 726.751292][T16659] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800009c0 [ 726.751299][T16659] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 726.751304][T16659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 726.751310][T16659] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 726.751315][T16659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 726.751327][T16659] [ 726.933633][T14990] IPVS: stopping master sync thread 15709 ... [ 727.184436][T16676] capability: warning: `syz.2.2372' uses 32-bit capabilities (legacy support in use) [ 727.249638][T14990] hsr_slave_0: left promiscuous mode [ 727.254339][T14990] hsr_slave_1: left promiscuous mode [ 727.285625][T14990] veth1_macvtap: left promiscuous mode [ 727.287343][T14990] veth0_macvtap: left promiscuous mode [ 727.289031][T14990] veth1_vlan: left promiscuous mode [ 727.291568][T14990] veth0_vlan: left promiscuous mode [ 728.664332][ T5303] Bluetooth: hci1: command tx timeout [ 728.898236][T16630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 728.902824][T16630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 728.914453][T16697] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2378'. [ 728.918032][T16697] IPv6: Can't replace route, no match found [ 728.924462][T16701] netlink: 'syz.4.2380': attribute type 5 has an invalid length. [ 728.929011][T16630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 728.948005][T16630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 729.029859][T16630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.041625][T16630] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.047717][T15137] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.049712][T15137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.052619][T16719] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2386'. [ 729.063630][T15132] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.065767][T15132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.171650][T16630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.197244][T16630] veth0_vlan: entered promiscuous mode [ 729.211491][T16630] veth1_vlan: entered promiscuous mode [ 729.237297][T16630] veth0_macvtap: entered promiscuous mode [ 729.242697][T16630] veth1_macvtap: entered promiscuous mode [ 729.251444][T16630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.256217][T16630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.259409][T16630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.263825][T16630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.268748][T16630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.272947][T16630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.277399][T16630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.280902][T16630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.284727][T16630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.287657][T16630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.291904][T16630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.295753][T16630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.298851][T16630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.303246][T16630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.310880][T16630] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.314580][T16630] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.317765][T16630] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.320812][T16630] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.368560][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.370667][T16737] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2390'. [ 729.370880][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.392963][T15137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.397041][T15137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.941502][T16775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2401'. [ 729.944335][T16775] FAULT_INJECTION: forcing a failure. [ 729.944335][T16775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.948412][T16775] CPU: 2 UID: 0 PID: 16775 Comm: syz.0.2401 Not tainted 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 729.948430][T16775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 729.948443][T16775] Call Trace: [ 729.948448][T16775] [ 729.948454][T16775] dump_stack_lvl+0x16c/0x1f0 [ 729.948478][T16775] should_fail_ex+0x50a/0x650 [ 729.948502][T16775] _copy_to_user+0x32/0xd0 [ 729.948527][T16775] simple_read_from_buffer+0xe0/0x170 [ 729.948551][T16775] proc_fail_nth_read+0x198/0x270 [ 729.948571][T16775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 729.948592][T16775] ? rw_verify_area+0xcf/0x680 [ 729.948610][T16775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 729.948629][T16775] vfs_read+0x1df/0xbf0 [ 729.948650][T16775] ? __pfx___mutex_lock+0x10/0x10 [ 729.948670][T16775] ? __pfx_vfs_read+0x10/0x10 [ 729.948696][T16775] ? __fget_files+0x20e/0x3b0 [ 729.948722][T16775] ksys_read+0x12b/0x250 [ 729.948741][T16775] ? __pfx_ksys_read+0x10/0x10 [ 729.948766][T16775] __do_fast_syscall_32+0x73/0x120 [ 729.948783][T16775] do_fast_syscall_32+0x32/0x80 [ 729.948797][T16775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 729.948813][T16775] RIP: 0023:0xf73ce579 [ 729.948821][T16775] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 729.948831][T16775] RSP: 002b:00000000f5056590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 729.948853][T16775] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5056620 [ 729.948860][T16775] RDX: 000000000000000f RSI: 00000000f73bcff4 RDI: 0000000000000000 [ 729.948865][T16775] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 729.948870][T16775] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 729.948876][T16775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 729.948888][T16775] [ 730.014316][ C2] vkms_vblank_simulate: vblank timer overrun [ 730.520571][T11339] IPVS: starting estimator thread 0... [ 730.614996][T16786] IPVS: using max 37 ests per chain, 88800 per kthread [ 730.650384][T16793] program syz.0.2406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 730.691859][T16798] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2408'. [ 730.703030][T16798] netlink: 'syz.0.2408': attribute type 25 has an invalid length. [ 730.734536][ T5303] Bluetooth: hci1: command tx timeout [ 730.836949][T16805] bridge: RTM_NEWNEIGH with invalid ether address [ 730.886742][T16808] tun0: tun_chr_ioctl cmd 1074025675 [ 730.888773][T16808] tun0: persist disabled [ 730.891616][T16808] netlink: 'syz.0.2412': attribute type 1 has an invalid length. [ 731.305867][ T5989] plfxlc 10-1:2.135: request_firmware failed (-110) [ 731.307732][ T5989] plfxlc 10-1:2.135: FPGA download failed (-110) [ 731.310090][ T5989] ------------[ cut here ]------------ [ 731.311627][ T5989] WARNING: CPU: 1 PID: 5989 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x89/0xb0 [ 731.314846][ T5989] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 731.316106][ T5989] CPU: 1 UID: 0 PID: 5989 Comm: kworker/1:3 Not tainted 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 731.320818][ T5989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 731.323820][ T5989] Workqueue: usb_hub_wq hub_event [ 731.325307][ T5989] RIP: 0010:plfxlc_mac_release+0x89/0xb0 [ 731.326877][ T5989] Code: 6d 75 d5 fa 48 8d bb 08 33 00 00 be ff ff ff ff e8 3c 35 71 04 31 ff 89 c3 89 c6 e8 51 70 d5 fa 85 db 75 d4 e8 48 75 d5 fa 90 <0f> 0b 90 5b 5d e9 3d 75 d5 fa 48 c7 c7 14 a8 62 90 e8 e1 c2 37 fb [ 731.332116][ T5989] RSP: 0018:ffffc90002da6ee0 EFLAGS: 00010293 [ 731.333831][ T5989] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff86e481ff [ 731.337174][ T5989] RDX: ffff88802241a440 RSI: ffffffff86e48208 RDI: 0000000000000005 [ 731.339357][ T5989] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 731.341570][ T5989] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920005b4de3 [ 731.343900][ T5989] R13: ffff888022b97000 R14: ffff8880785b30a0 R15: ffff888022b97078 [ 731.346459][ T5989] FS: 0000000000000000(0000) GS:ffff88802b500000(0000) knlGS:0000000000000000 [ 731.349196][ T5989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 731.351052][ T5989] CR2: 000000000c2830eb CR3: 000000005fb8c000 CR4: 0000000000352ef0 [ 731.353272][ T5989] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 731.355544][ T5989] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 731.357718][ T5989] Call Trace: [ 731.358675][ T5989] [ 731.359514][ T5989] ? __warn+0xea/0x3c0 [ 731.360658][ T5989] ? plfxlc_mac_release+0x89/0xb0 [ 731.362099][ T5989] ? report_bug+0x3c0/0x580 [ 731.363439][ T5989] ? handle_bug+0x54/0xa0 [ 731.364741][ T5989] ? exc_invalid_op+0x17/0x50 [ 731.366050][ T5989] ? asm_exc_invalid_op+0x1a/0x20 [ 731.367468][ T5989] ? plfxlc_mac_release+0x7f/0xb0 [ 731.368941][ T5989] ? plfxlc_mac_release+0x88/0xb0 [ 731.370513][ T5989] ? plfxlc_mac_release+0x89/0xb0 [ 731.371920][ T5989] probe+0x84a/0xba0 [ 731.373031][ T5989] ? __pfx_probe+0x10/0x10 [ 731.374441][ T5989] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 731.376104][ T5989] usb_probe_interface+0x300/0x9c0 [ 731.377531][ T5989] ? __pfx_usb_probe_interface+0x10/0x10 [ 731.379148][ T5989] really_probe+0x23e/0xa90 [ 731.380411][ T5989] __driver_probe_device+0x1de/0x440 [ 731.381905][ T5989] driver_probe_device+0x4c/0x1b0 [ 731.383363][ T5989] __device_attach_driver+0x1df/0x310 [ 731.384979][ T5989] ? __pfx___device_attach_driver+0x10/0x10 [ 731.386625][ T5989] bus_for_each_drv+0x157/0x1e0 [ 731.388109][ T5989] ? __pfx_bus_for_each_drv+0x10/0x10 [ 731.389595][ T5989] ? lockdep_hardirqs_on+0x7c/0x110 [ 731.391055][ T5989] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 731.392798][ T5989] __device_attach+0x1e8/0x4b0 [ 731.394137][ T5989] ? __pfx___device_attach+0x10/0x10 [ 731.395689][ T5989] ? do_raw_spin_unlock+0x172/0x230 [ 731.397142][ T5989] bus_probe_device+0x17f/0x1c0 [ 731.398507][ T5989] device_add+0x114b/0x1a70 [ 731.399775][ T5989] ? __pfx_device_add+0x10/0x10 [ 731.401181][ T5989] ? usb_set_configuration+0xf63/0x1c50 [ 731.402745][ T5989] usb_set_configuration+0x10cb/0x1c50 [ 731.404308][ T5989] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 731.405987][ T5989] usb_generic_driver_probe+0xb1/0x110 [ 731.407505][ T5989] usb_probe_device+0xec/0x3e0 [ 731.408831][ T5989] ? __pfx_usb_probe_device+0x10/0x10 [ 731.410314][ T5989] really_probe+0x23e/0xa90 [ 731.411598][ T5989] __driver_probe_device+0x1de/0x440 [ 731.413068][ T5989] ? usb_driver_applicable+0x1c7/0x220 [ 731.414683][ T5989] driver_probe_device+0x4c/0x1b0 [ 731.416109][ T5989] __device_attach_driver+0x1df/0x310 [ 731.417608][ T5989] ? __pfx___device_attach_driver+0x10/0x10 [ 731.419248][ T5989] bus_for_each_drv+0x157/0x1e0 [ 731.420611][ T5989] ? __pfx_bus_for_each_drv+0x10/0x10 [ 731.422126][ T5989] ? lockdep_hardirqs_on+0x7c/0x110 [ 731.423599][ T5989] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 731.425276][ T5989] __device_attach+0x1e8/0x4b0 [ 731.426613][ T5989] ? __pfx___device_attach+0x10/0x10 [ 731.428073][ T5989] ? do_raw_spin_unlock+0x172/0x230 [ 731.429510][ T5989] bus_probe_device+0x17f/0x1c0 [ 731.430860][ T5989] device_add+0x114b/0x1a70 [ 731.432127][ T5989] ? __pfx_device_add+0x10/0x10 [ 731.433513][ T5989] ? add_device_randomness+0xb8/0xf0 [ 731.435058][ T5989] usb_new_device+0xd09/0x1a20 [ 731.436401][ T5989] ? __pfx_usb_new_device+0x10/0x10 [ 731.437839][ T5989] hub_event+0x2d9a/0x4e10 [ 731.439111][ T5989] ? __pfx_hub_event+0x10/0x10 [ 731.440448][ T5989] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 731.442030][ T5989] ? rcu_is_watching+0x12/0xc0 [ 731.443414][ T5989] ? trace_lock_acquire+0x14e/0x1f0 [ 731.444929][ T5989] ? process_one_work+0x921/0x1ba0 [ 731.446357][ T5989] ? lock_acquire+0x2f/0xb0 [ 731.447629][ T5989] ? process_one_work+0x921/0x1ba0 [ 731.449045][ T5989] process_one_work+0x9c5/0x1ba0 [ 731.450433][ T5989] ? __pfx_br_fdb_cleanup+0x10/0x10 [ 731.452002][ T5989] ? __pfx_process_one_work+0x10/0x10 [ 731.453525][ T5989] ? assign_work+0x1a0/0x250 [ 731.454882][ T5989] worker_thread+0x6c8/0xf00 [ 731.456188][ T5989] ? __kthread_parkme+0x148/0x220 [ 731.457578][ T5989] ? __pfx_worker_thread+0x10/0x10 [ 731.459007][ T5989] kthread+0x3af/0x750 [ 731.460150][ T5989] ? __pfx_kthread+0x10/0x10 [ 731.461546][ T5989] ? lock_acquire+0x2f/0xb0 [ 731.462847][ T5989] ? __pfx_kthread+0x10/0x10 [ 731.464134][ T5989] ret_from_fork+0x45/0x80 [ 731.465491][ T5989] ? __pfx_kthread+0x10/0x10 [ 731.466809][ T5989] ret_from_fork_asm+0x1a/0x30 [ 731.468149][ T5989] [ 731.469019][ T5989] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 731.471023][ T5989] CPU: 1 UID: 0 PID: 5989 Comm: kworker/1:3 Not tainted 6.14.0-syzkaller-00624-g2f2d52945852 #0 [ 731.473844][ T5989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 731.476766][ T5989] Workqueue: usb_hub_wq hub_event [ 731.478162][ T5989] Call Trace: [ 731.479101][ T5989] [ 731.479935][ T5989] dump_stack_lvl+0x3d/0x1f0 [ 731.481225][ T5989] panic+0x71d/0x800 [ 731.482314][ T5989] ? __pfx_panic+0x10/0x10 [ 731.483582][ T5989] ? show_trace_log_lvl+0x29d/0x3d0 [ 731.485051][ T5989] ? check_panic_on_warn+0x1f/0xb0 [ 731.486473][ T5989] ? plfxlc_mac_release+0x89/0xb0 [ 731.487861][ T5989] check_panic_on_warn+0xab/0xb0 [ 731.489230][ T5989] __warn+0xf6/0x3c0 [ 731.490325][ T5989] ? plfxlc_mac_release+0x89/0xb0 [ 731.491752][ T5989] report_bug+0x3c0/0x580 [ 731.492985][ T5989] handle_bug+0x54/0xa0 [ 731.494151][ T5989] exc_invalid_op+0x17/0x50 [ 731.495437][ T5989] asm_exc_invalid_op+0x1a/0x20 [ 731.496781][ T5989] RIP: 0010:plfxlc_mac_release+0x89/0xb0 [ 731.498342][ T5989] Code: 6d 75 d5 fa 48 8d bb 08 33 00 00 be ff ff ff ff e8 3c 35 71 04 31 ff 89 c3 89 c6 e8 51 70 d5 fa 85 db 75 d4 e8 48 75 d5 fa 90 <0f> 0b 90 5b 5d e9 3d 75 d5 fa 48 c7 c7 14 a8 62 90 e8 e1 c2 37 fb [ 731.503621][ T5989] RSP: 0018:ffffc90002da6ee0 EFLAGS: 00010293 [ 731.505304][ T5989] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff86e481ff [ 731.507473][ T5989] RDX: ffff88802241a440 RSI: ffffffff86e48208 RDI: 0000000000000005 [ 731.509635][ T5989] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 731.511808][ T5989] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920005b4de3 [ 731.513987][ T5989] R13: ffff888022b97000 R14: ffff8880785b30a0 R15: ffff888022b97078 [ 731.516167][ T5989] ? plfxlc_mac_release+0x7f/0xb0 [ 731.517560][ T5989] ? plfxlc_mac_release+0x88/0xb0 [ 731.518965][ T5989] probe+0x84a/0xba0 [ 731.520066][ T5989] ? __pfx_probe+0x10/0x10 [ 731.521327][ T5989] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 731.522952][ T5989] usb_probe_interface+0x300/0x9c0 [ 731.524374][ T5989] ? __pfx_usb_probe_interface+0x10/0x10 [ 731.525928][ T5989] really_probe+0x23e/0xa90 [ 731.527207][ T5989] __driver_probe_device+0x1de/0x440 [ 731.528659][ T5989] driver_probe_device+0x4c/0x1b0 [ 731.530045][ T5989] __device_attach_driver+0x1df/0x310 [ 731.531538][ T5989] ? __pfx___device_attach_driver+0x10/0x10 [ 731.533209][ T5989] bus_for_each_drv+0x157/0x1e0 [ 731.534562][ T5989] ? __pfx_bus_for_each_drv+0x10/0x10 [ 731.536049][ T5989] ? lockdep_hardirqs_on+0x7c/0x110 [ 731.537485][ T5989] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 731.539093][ T5989] __device_attach+0x1e8/0x4b0 [ 731.540420][ T5989] ? __pfx___device_attach+0x10/0x10 [ 731.541882][ T5989] ? do_raw_spin_unlock+0x172/0x230 [ 731.543346][ T5989] bus_probe_device+0x17f/0x1c0 [ 731.544697][ T5989] device_add+0x114b/0x1a70 [ 731.545956][ T5989] ? __pfx_device_add+0x10/0x10 [ 731.547311][ T5989] ? usb_set_configuration+0xf63/0x1c50 [ 731.548841][ T5989] usb_set_configuration+0x10cb/0x1c50 [ 731.550359][ T5989] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 731.552036][ T5989] usb_generic_driver_probe+0xb1/0x110 [ 731.553555][ T5989] usb_probe_device+0xec/0x3e0 [ 731.554893][ T5989] ? __pfx_usb_probe_device+0x10/0x10 [ 731.556392][ T5989] really_probe+0x23e/0xa90 [ 731.557648][ T5989] __driver_probe_device+0x1de/0x440 [ 731.559109][ T5989] ? usb_driver_applicable+0x1c7/0x220 [ 731.560611][ T5989] driver_probe_device+0x4c/0x1b0 [ 731.562000][ T5989] __device_attach_driver+0x1df/0x310 [ 731.563499][ T5989] ? __pfx___device_attach_driver+0x10/0x10 [ 731.565132][ T5989] bus_for_each_drv+0x157/0x1e0 [ 731.566487][ T5989] ? __pfx_bus_for_each_drv+0x10/0x10 [ 731.567967][ T5989] ? lockdep_hardirqs_on+0x7c/0x110 [ 731.569404][ T5989] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 731.571021][ T5989] __device_attach+0x1e8/0x4b0 [ 731.572355][ T5989] ? __pfx___device_attach+0x10/0x10 [ 731.573827][ T5989] ? do_raw_spin_unlock+0x172/0x230 [ 731.575302][ T5989] bus_probe_device+0x17f/0x1c0 [ 731.576661][ T5989] device_add+0x114b/0x1a70 [ 731.577952][ T5989] ? __pfx_device_add+0x10/0x10 [ 731.579317][ T5989] ? add_device_randomness+0xb8/0xf0 [ 731.580817][ T5989] usb_new_device+0xd09/0x1a20 [ 731.582191][ T5989] ? __pfx_usb_new_device+0x10/0x10 [ 731.583692][ T5989] hub_event+0x2d9a/0x4e10 [ 731.584946][ T5989] ? __pfx_hub_event+0x10/0x10 [ 731.586298][ T5989] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 731.587854][ T5989] ? rcu_is_watching+0x12/0xc0 [ 731.589190][ T5989] ? trace_lock_acquire+0x14e/0x1f0 [ 731.590675][ T5989] ? process_one_work+0x921/0x1ba0 [ 731.592145][ T5989] ? lock_acquire+0x2f/0xb0 [ 731.593496][ T5989] ? process_one_work+0x921/0x1ba0 [ 731.594975][ T5989] process_one_work+0x9c5/0x1ba0 [ 731.596372][ T5989] ? __pfx_br_fdb_cleanup+0x10/0x10 [ 731.597819][ T5989] ? __pfx_process_one_work+0x10/0x10 [ 731.599336][ T5989] ? assign_work+0x1a0/0x250 [ 731.600626][ T5989] worker_thread+0x6c8/0xf00 [ 731.601919][ T5989] ? __kthread_parkme+0x148/0x220 [ 731.603337][ T5989] ? __pfx_worker_thread+0x10/0x10 [ 731.604758][ T5989] kthread+0x3af/0x750 [ 731.605903][ T5989] ? __pfx_kthread+0x10/0x10 [ 731.607212][ T5989] ? lock_acquire+0x2f/0xb0 [ 731.608497][ T5989] ? __pfx_kthread+0x10/0x10 [ 731.609793][ T5989] ret_from_fork+0x45/0x80 [ 731.611046][ T5989] ? __pfx_kthread+0x10/0x10 [ 731.612355][ T5989] ret_from_fork_asm+0x1a/0x30 [ 731.613707][ T5989] [ 731.615150][ T5989] Kernel Offset: disabled [ 731.616398][ T5989] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:16:52 Registers: info registers vcpu 0 CPU#0 RAX=0000000000bf78ad RBX=0000000000000000 RCX=ffffffff8b55c5f9 RDX=0000000000000000 RSI=ffffffff8b6cfd40 RDI=ffffffff8bd346a0 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed1005686f85 R10=ffff88802b437c2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90627510 R15=0000000000000000 RIP=ffffffff8b55d9df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2a0bf7 CR3=000000005fb8c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853e6e95 RDI=ffffffff9ab70da0 RBP=ffffffff9ab70d60 RSP=ffffc90002da6868 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000009 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9ab70d60 R15=0000000000000000 RIP=ffffffff853e6ebf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2830eb CR3=000000005fb8c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080080783 RBX=0000000000000000 RCX=ffff8880413a9070 RDX=000000000000009d RSI=ffffffff868585b6 RDI=ffff8880413a9268 RBP=0000000000000001 RSP=ffffc90000558b70 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000007 R12=0000000000000001 R13=0000000000004e20 R14=ffff8880413a9070 R15=0000000000000001 RIP=ffffffff868585fd RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f56e40 CR3=00000000715f2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000058f10f RBX=0000000000000003 RCX=ffffffff8b55c5f9 RDX=0000000000000000 RSI=ffffffff8b6cfd40 RDI=ffffffff8bd346a0 RBP=ffffed1003ad2910 RSP=ffffc900004afe08 R8 =0000000000000001 R9 =ffffed10056e6f85 R10=ffff88802b737c2b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d694880 R14=ffffffff90627510 R15=0000000000000000 RIP=ffffffff8b55d9df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057f464c0 CR3=000000004e9f0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=c097efe4c097efe4 c097efe4c097efe4 c097efe4c097efe4 c097efe4c097efe4 c097efe4c097efe4 c097efe4c097efe4 c097efe4c097efe4 c097efe4c097efe4 ZMM22=54848c5e54848c5e 54848c5e54848c5e 54848c5e54848c5e 54848c5e54848c5e 54848c5e54848c5e 54848c5e54848c5e 54848c5e54848c5e 54848c5e54848c5e ZMM23=ab631709ab631709 ab631709ab631709 ab631709ab631709 ab631709ab631709 ab631709ab631709 ab631709ab631709 ab631709ab631709 ab631709ab631709 ZMM24=30455c9430455c94 30455c9430455c94 30455c9430455c94 30455c9430455c94 30455c9430455c94 30455c9430455c94 30455c9430455c94 30455c9430455c94 ZMM25=eee092b8eee092b8 eee092b8eee092b8 eee092b8eee092b8 eee092b8eee092b8 eee092b8eee092b8 eee092b8eee092b8 eee092b8eee092b8 eee092b8eee092b8 ZMM26=5792497157924971 5792497157924971 5792497157924971 5792497157924971 5792497157924971 5792497157924971 5792497157924971 5792497157924971 ZMM27=4736d7a74736d7a7 4736d7a74736d7a7 4736d7a74736d7a7 4736d7a74736d7a7 4736d7a74736d7a7 4736d7a74736d7a7 4736d7a74736d7a7 4736d7a74736d7a7 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6714000067140000 6714000067140000 6714000067140000 6714000067140000 6714000067140000 6714000067140000 6714000067140000 6714000067140000