last executing test programs: 1m23.731960908s ago: executing program 2 (id=107): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000040)=0x23) 1m15.550271585s ago: executing program 2 (id=107): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000040)=0x23) 1m7.637698609s ago: executing program 2 (id=107): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000040)=0x23) 1m0.269187341s ago: executing program 2 (id=107): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000040)=0x23) 53.034994983s ago: executing program 2 (id=107): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000040)=0x23) 45.465907805s ago: executing program 2 (id=107): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000040)=0x23) 4.176760481s ago: executing program 3 (id=561): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$nmem0(0xffffff9c, &(0x7f00000021c0), 0x2040, 0x0) ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f0000ffc000/0x1000)=nil) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = openat$hpet(0xffffff9c, &(0x7f0000000100), 0x200080, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000140)=0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb}, {0x0, 0x2}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.176195228s ago: executing program 3 (id=562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000001440)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000340)={0x4}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r3], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x34000}], 0x1, 0x0, 0x0, 0xf00}}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20080090) 3.806442999s ago: executing program 3 (id=563): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) openat$vmci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000008000deffffffff918f2e2f"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0xc0884123, 0x0) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000048a01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c64) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba073b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14000000130001000000002af5c1660002000600"], 0x14}], 0x1}, 0x0) r7 = dup(r5) read$FUSE(r7, &(0x7f0000002c40)={0x2020}, 0xfffffe95) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000000540)={r11, 0xc9, "5f0cf2e9da7e2430891a794de3c99496e9f261d4f5d29619ed148945c40355497fd780d5dfb60e7ce18badb5bf29a97ce4c8abb67669a983a196c8e927e406b38395d950fa5f667078ac7140ffa5c9123baa16b898b628e36a68ac7ed321ee9093f9519b1322ac90aa807edcb8f56076cc0a673c8a2157bf54c9bbdc2989240295d0c89c4f800098fadcac4acd17bb0e693806fac1cdecd6083d59c789f687f19c252ca285aa8315439636e9262e3604d7e77541f48f66e367f7e2cf6b4191783a1a37ce2e768cb279"}, &(0x7f0000000280)=0xd1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000001c00)={r11, 0x800, "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"}, &(0x7f00000000c0)=0x808) 3.73658194s ago: executing program 3 (id=564): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) (fail_nth: 11) 3.650678618s ago: executing program 3 (id=565): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0xbf27, 0x10520, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x400000, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfe00, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9a02fff0}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$kcm(0x2d, 0x2, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) 3.385661875s ago: executing program 3 (id=566): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'hsr0\x00'}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x80141, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xff, 0x78042) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40008062, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00', {0x8, 0xe9f, 0xfd8a, 0x7ff}, 0x2f, [0x3, 0x1, 0x25, 0x7, 0x7fffffff, 0x1e5482e2, 0xfffffffe, 0x10001, 0xfff, 0x3, 0xfffffffe, 0x5, 0x80000000, 0x0, 0xfffffa10, 0x8, 0x10001, 0xc, 0x10001, 0x10000, 0x5, 0xff, 0x5, 0x200, 0x5, 0x40, 0x80000000, 0xf0, 0x3, 0x101, 0x6b8, 0x9, 0x8, 0x6, 0x5, 0x1000, 0x48, 0xfffff800, 0x55e, 0x7fffffff, 0x1000, 0x10000, 0x9, 0x3, 0x1ff, 0x2, 0x3, 0x8001, 0xd, 0x0, 0xc, 0x101, 0x80, 0xa, 0x7, 0xe, 0xb, 0x4, 0x0, 0x1f37, 0x2, 0x8, 0xff], [0x7, 0x800, 0x39, 0x2, 0x800, 0x5, 0x7d43, 0x3, 0x1, 0x6, 0x7, 0x6, 0x4, 0x4, 0xffff8001, 0xc1, 0xffffffff, 0x8, 0xfffffffa, 0x4, 0x0, 0x7, 0x5, 0x0, 0x1, 0x7, 0x1, 0x8, 0xf, 0x174e3ccd, 0xd, 0x9, 0x8, 0x3ff, 0x8, 0x2, 0x1, 0x6, 0x101, 0x1, 0x6, 0x2, 0x6, 0x2, 0x6, 0x80000000, 0x2, 0x1, 0xc954, 0x0, 0x3, 0x3, 0x9, 0xa6, 0x5d9cb6b4, 0x7, 0x200, 0x5, 0x9, 0x1, 0x10001, 0x1, 0x2, 0x7], [0xa, 0xa, 0xf41, 0x1, 0x4, 0x58b, 0x2, 0x80, 0x5, 0x4, 0x4, 0x8, 0x9, 0x4, 0x1, 0x4, 0x0, 0x9, 0x1, 0x1, 0x7ff, 0x4, 0xc, 0x2, 0x1, 0x7, 0x4, 0x941, 0x7, 0xcab, 0x5, 0xa, 0x6, 0x2, 0x400, 0x2, 0x7, 0x87d, 0x81, 0x10e, 0xe, 0x5, 0x6, 0x0, 0x1, 0x3, 0x100, 0x4, 0xfffffff3, 0x5, 0x100, 0x3, 0x6, 0x400, 0x401, 0x4, 0x200, 0x3, 0x7, 0x4, 0x1, 0x80, 0xad, 0xfffffb07], [0x200, 0xd, 0x9, 0x1, 0x2, 0x800, 0x4000000, 0x4, 0x5, 0x5, 0xe8, 0x3, 0x4, 0x7, 0x7, 0x5, 0x101, 0x1, 0x40, 0x8000, 0x8, 0x3, 0xffff, 0xffffffff, 0xe, 0x5c, 0x9, 0x3, 0x4, 0x7, 0x3, 0x8, 0x8, 0x1, 0x4, 0x1, 0xdf2, 0x9, 0x9f40, 0x4, 0x9, 0x400000, 0x80000000, 0x80000, 0x8, 0x7f, 0x3, 0x2, 0x80000000, 0x1, 0x3, 0xa, 0x3d, 0x23f, 0x5, 0x658b, 0x0, 0xc, 0x2, 0x6, 0x6, 0x7fffffff, 0x7, 0xc17b]}, 0x45c) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x5ed) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.352691464s ago: executing program 32 (id=566): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'hsr0\x00'}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x80141, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xff, 0x78042) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40008062, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00', {0x8, 0xe9f, 0xfd8a, 0x7ff}, 0x2f, [0x3, 0x1, 0x25, 0x7, 0x7fffffff, 0x1e5482e2, 0xfffffffe, 0x10001, 0xfff, 0x3, 0xfffffffe, 0x5, 0x80000000, 0x0, 0xfffffa10, 0x8, 0x10001, 0xc, 0x10001, 0x10000, 0x5, 0xff, 0x5, 0x200, 0x5, 0x40, 0x80000000, 0xf0, 0x3, 0x101, 0x6b8, 0x9, 0x8, 0x6, 0x5, 0x1000, 0x48, 0xfffff800, 0x55e, 0x7fffffff, 0x1000, 0x10000, 0x9, 0x3, 0x1ff, 0x2, 0x3, 0x8001, 0xd, 0x0, 0xc, 0x101, 0x80, 0xa, 0x7, 0xe, 0xb, 0x4, 0x0, 0x1f37, 0x2, 0x8, 0xff], [0x7, 0x800, 0x39, 0x2, 0x800, 0x5, 0x7d43, 0x3, 0x1, 0x6, 0x7, 0x6, 0x4, 0x4, 0xffff8001, 0xc1, 0xffffffff, 0x8, 0xfffffffa, 0x4, 0x0, 0x7, 0x5, 0x0, 0x1, 0x7, 0x1, 0x8, 0xf, 0x174e3ccd, 0xd, 0x9, 0x8, 0x3ff, 0x8, 0x2, 0x1, 0x6, 0x101, 0x1, 0x6, 0x2, 0x6, 0x2, 0x6, 0x80000000, 0x2, 0x1, 0xc954, 0x0, 0x3, 0x3, 0x9, 0xa6, 0x5d9cb6b4, 0x7, 0x200, 0x5, 0x9, 0x1, 0x10001, 0x1, 0x2, 0x7], [0xa, 0xa, 0xf41, 0x1, 0x4, 0x58b, 0x2, 0x80, 0x5, 0x4, 0x4, 0x8, 0x9, 0x4, 0x1, 0x4, 0x0, 0x9, 0x1, 0x1, 0x7ff, 0x4, 0xc, 0x2, 0x1, 0x7, 0x4, 0x941, 0x7, 0xcab, 0x5, 0xa, 0x6, 0x2, 0x400, 0x2, 0x7, 0x87d, 0x81, 0x10e, 0xe, 0x5, 0x6, 0x0, 0x1, 0x3, 0x100, 0x4, 0xfffffff3, 0x5, 0x100, 0x3, 0x6, 0x400, 0x401, 0x4, 0x200, 0x3, 0x7, 0x4, 0x1, 0x80, 0xad, 0xfffffb07], [0x200, 0xd, 0x9, 0x1, 0x2, 0x800, 0x4000000, 0x4, 0x5, 0x5, 0xe8, 0x3, 0x4, 0x7, 0x7, 0x5, 0x101, 0x1, 0x40, 0x8000, 0x8, 0x3, 0xffff, 0xffffffff, 0xe, 0x5c, 0x9, 0x3, 0x4, 0x7, 0x3, 0x8, 0x8, 0x1, 0x4, 0x1, 0xdf2, 0x9, 0x9f40, 0x4, 0x9, 0x400000, 0x80000000, 0x80000, 0x8, 0x7f, 0x3, 0x2, 0x80000000, 0x1, 0x3, 0xa, 0x3d, 0x23f, 0x5, 0x658b, 0x0, 0xc, 0x2, 0x6, 0x6, 0x7fffffff, 0x7, 0xc17b]}, 0x45c) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x5ed) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.817830953s ago: executing program 0 (id=572): r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000480)={0x335, @tick, 0x0, {}, 0x40}) tkill(r1, 0x7) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f00000000c0)={{0x7, 0x7b}, {0x10, 0x9}, 0x6, 0x4, 0x80}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000240)={0x72, "2b7ba4f6478a95041822a2b2f074edcb34089908e6618dbfdd8cc6d8040cc76f6ac232f86d5cb3bccbf94195aceb46fb79e49f1bb7960a84b8b8b89b0711aa41"}) write(r0, &(0x7f0000000040)="65b0", 0x2) 2.603682537s ago: executing program 1 (id=574): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x841, &(0x7f0000000200)={0xa, 0x4e22, 0x6749, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x458, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x15c, 0x180, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4b4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0) listen(r5, 0x0) r6 = syz_io_uring_setup(0x2461, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}}, 0x4004881) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002140)) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x2000, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0x5, 0x0, 0x0) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r8) 2.365237249s ago: executing program 1 (id=575): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES16, @ANYRES32, @ANYRESOCT, @ANYRES64=0x0], 0x48) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x40045108, 0x0) setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713}) bpf$PROG_LOAD(0x5, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x42ab00) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x32315258, 0x0, 0x6, [{0x0, 0x1000000}, {0x12, 0xd5a}, {0x4000000}, {0x100}, {0x0, 0x7}, {0x0, 0x9}, {0x10001}, {0x0, 0xc}], 0x20}}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup2(r1, r1) ioctl$KVM_RUN(r2, 0xae80, 0x0) read$msr(r2, &(0x7f00000002c0)=""/5, 0x5) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = dup(0xffffffffffffffff) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r5, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x6, 0x7e000000, 0x3, 0x4, 0x1}) 1.915562189s ago: executing program 0 (id=576): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp6\x00') open(0x0, 0x2a4c0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x30004001) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001800090318000000fbdbdf250a002000000000000000000008000400", @ANYRES32=r4, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="5439aff53ff03c5622f6b2b7b5751c6baef3d701b0f58f6839c2049ebc70f1fd481ce2cd16d183601bd7ba61ab68a960d701e1c09e95b813ffd682bbf091a9cd690722f9084481348ce0d5ddf98d7d791295c0dd4966a6ad805142f11a99baa40cf1cbe78097f2c8fd7374cf7fc4f777e5ea9cf36c119002409c2cae7681fc77c1e97cc8ffb81c6f4cd8fb235741cc1c5044bbf67fd64731358c498aebdd1f78a27d1201e99a1764a1cd92c9b60de739254f43705f5f38c2759492"], 0x3c}}, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000040)='0', 0x1) getpriority(0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40480c0}, 0xc000) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r9, 0x0, 0x2, &(0x7f0000000180)={0x10000, [0x32b9, 0xffffffff]}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xbe1081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x40010012) ioctl$TCFLSH(r0, 0x400455c8, 0x0) io_uring_enter(0xffffffffffffffff, 0x3023, 0x4000, 0x40, 0x0, 0x28) r10 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x8, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$CEC_TRANSMIT(r10, 0xc0386105, &(0x7f0000000040)={0x9, 0x1009, 0x3, 0x9, 0xfffffffa, 0x9, "980000000000000080ec67a9883d4504", 0x8, 0x3, 0x8, 0xfd, 0x3, 0x0, 0x6}) 1.845778777s ago: executing program 4 (id=567): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20048000}, 0x0) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x300}}], 0x1, 0x0) 1.736418615s ago: executing program 0 (id=577): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x403, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45010}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) unlinkat(0xffffffffffffffff, 0x0, 0x200) write(r0, &(0x7f0000000080)="857cc2bf", 0x4) socket$nl_generic(0x10, 0x3, 0x10) 1.736262406s ago: executing program 0 (id=578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'ip6gre0\x00', @local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0000080001081b60f556f21327f40433e4577f214b4bfbb64bebb9ae82a788cc0763053cf3d5facde5069d27e1866058ada64cddca9064188fe9eb7c92f69f9f0829b2ea266566f769a40655ac047d9c5e1712a3b54206a7eddce505c216484763ca2dd9e3d80c4b8c9c9e9ee2dd06a7adb4dfd0ed4f90ff67c29eaf0ca6b88c41007b8ee01abfcf1eb396ceb8c3dd4b65190012e968577f1a74a613a3c443a9facdef7d306f51e7257f8eb1784ada31f535a85e1cf305144b264e19c996e3d10d814627d90dbae95c728b8c803e554dea29242fd198c529e8a355754d9a230ca9746a553b3bad46c9dd082afc370e79f43640fa37e64cff8b784c1867a0d8d737c069c882b3fa2b6e43a1f3d07f4476869ea618b939129fdcdd1b9cc4b683034639d26827271cbab0e638476299bbe3cc06c84e38e8ebdd812f74993da2b12abcadd9487db741e7624c477ad879da11327006dda1c2668156f3274234334c791f44f65ba4a95474fcaa918a326bc9cd8bff7c53ac79ccc8536dbb031d9bc158d0eaf7de5f581e89e251eab0a4f4337f6b54dfb7daf062c028e026c6b7e414502fee2ce7d1a9296539ab331672d8a2841751eb4a152fbc5b3501181a145f21782271af9ab77ea0c46e4d66909b01464f97c70c9770677cb71b7541cd51f1afea20bcecce969013522ddc372b81845633075ce9d70f832939451bfa38759e03043ffaed67447584b103007b2b8dec46611f46a6ec9755f55fd51311103d43961a2553d962143fe5a5b86b2bd6940916984b948c525e8deb8f6a10eeda7c995fc35c4d294110b0ffc90371ecffef9579803dcaecf34e3a521751c69b8ca7f9495ddcdb8dc4d173225cd749064f37396631d19f6641a7a060a05fb6591431ba38d031903c7029a746b2cef0949c8a7df46fff1cc8c16ec471ae73cece7da644933ca91e3e061d40e8cb652e36d3cb358173684292e12ad75117421eb0f62dbb20054e452bcf22227a49f8d49ffaf71a07cf2d02419de9487e08860dfd7236548e87501355ecb130369a6ab243f9902e3d150320ced637ee0f2dc6d3efdbf0c42e5101f6da1947606b4fb9d4cc72824fd0f93ae859095a498adfd8521944c271be53e2656d80f9513e51d1619f924e929181434983abfad969cd480de17871b816bf0db6eac88e0bd3b56d723aeb118a1354f99d4861275daf8b414f8a549fc86db141a7926ea64966c15af2b96c0cec70d0fc82f347fee313ff3af2e6ca06ba3cad6ba3088d69c35a108697fdbbaded9e04d7f9df75591484c8e24389d23f3ca8b01cd8654679b0abd3fbbb49a6f78055c5adaffbe0c883c13fbe8d716b0617afa0b75f9d378b7e4b4ec2d3a8e261f688ab05ca99d749efeacdb6b3d7bc96b872d7ba24e0a0f508d1615a71bda1676ad3fadb2fca2fdd14f05f7b9178fbdea57e6c032f08a07f615349d8faea61b3924946a3ed41ef4803bca050d2eee1d1a4c8f36ae9821188fb0df81d3ee2b54608c0561beffddee775085ac6122ef083fe7cb13d2f181a3b0d2c96aa803963fdc8eb1d1bf68df94bb74519d067aaaf8a158f524fe6048cd7ac0fb38cbd7b1840e6298cf7e79329c39ca83cd46c03f6afa3069524d6e40786e389cb6b66c97bd41c538841f7f6661b5452c42075717a540cb0fb51013bef2559de873ace437967b9bce57a09cbb381cbc7fd999647f0a040de32a03b73cd53ebe09889c5dca9a46c4980401ea044d7eb1eaa041be7da9d99c6b93c423ac27f90a1b9bd4b50613a8b2772f383e64f6566b6452f28ee63e5faa77c181a35e76fc6df558eb18744305f18e7af96113277d178956889f0171dd498978bcebc6312c34db474efcde6fcd873f6f5ab866b59060394051ab11909d590106970dcaf0e1e10730d0a0cbe1fc11380d20b0550084b3bf269995b29282b19ed14f510d45ab607feed9dd92dff5a0ec93aa8f05fd5617ce705a5023d89ff3a0cf265688d7b02ed7a9d74fe5289402449dfa781dfe1efb1d2d94cdf3a33eadb603e2cbf8572ee09c0375a6083046860aa999a62624dd5e420d7c423e341d56afd8d0d7772fce88d22f0530354dd1111dab5948272b067ea1a8b6f8fe264e119b42349ac0a0832fba54202d695c83c9e9eb31bb793d7035883fd471e909ee23c444a59c95fff113ab10078cfe5e43bc0542b14fafd6b31059ee2ff1d6a5bdf00d0464ccd9cb1c21f3a69106b520ea5809d6225a60652fd9004684cac649e6eaf2e1bd64c7c742b675e05c3bc1884ddcf6b40349fbac3ff7d8c048605eb639e2d17b0dbac85b15c9413ed54fb0fbc7171bdda55e559d8175657d1dc7eaad1c84e78b3bdba785ae25a9925e85b4846495555fcef444f03845db48ccb65825106f26179f8c1bdec0d855c5213b0dc021f07f756cc250b3db808da27e10aeb9894bab0909d26390f5c8870dd53dc64c96b6162e520373b0ea424628ef34ab3f7e3a635b09a9b08563a32558054ea63ffb7695bac1ab0c75e5bf71c1bb47c2ba17937f09fee0bddecb58b925240c085495ac8b74e160c4b2bc70ed44848696f26c26e61909fe14ee94bca8f63bfa9c1d7a55f41eee791a587d06d235551eb09ebd55fbddf9ce72596f4b64e4fb9aee6efc6e1a3b10125b1e32a709786f427a2132c59e786751c0f81a3550b3e69ca364a7c85dcaec10d235629f2fc9ddd6b18e35408fc8b97b9f71c25cccb469ec27a8345be44233a29147e5e7660b4d602651dd65abec6d89f526e14f86abe998a84436586c56d7f48ca082700eff5ad3cd8071c0c1ced67a080c144b6f577000e0946a75ef55881fdfc9b8b438d16df916663047753c84daeb23efc1ec2d68c46d3f41b2d86dd32797cf8080c0ca25f8e1e4dda17a7876ca022b6681b2e777c3881930223d18a025158b2d1d662577523025bb45755c4c5880933b9e9fe274b9c4680389d23f5121292b5d36655fef3a20da2f159838a9af19ad78375b0262ce6b3458a7313d89630bf28ee77b3966d494cc82c0b2bfc7b6124c31ddc711055da0bddd38085fc817387418641370b5bd426164b4ccb297c5ebee675645b0d092f7abe64f16a21319d0cf5ad293417f20261e93373d91a70b69d40e6bc7c2370ef8642ed429af365936252eba0fcf0c484ee23717c37a01905fa269d3bed43f1bdf84978d9e772d2c07997189b87d2f6abe0d1941f11b313f957dff52569767228d7afb85a74430c9db2369bb0ab8e3c0f97d9e67da77e9fef66897e645e1f523c913d55d16e74ad77dddabe4242108167d1154eb2b46eb13c60b53b42b3b534d9ed6dbc173d76fb0197ad581b77f271fe942a276e4dbd901b69cce829e6a9e957a1c40c4c069e3a6150f5cea09064a257882c7d7a1302e4731d75b481c9f456f393a690e3594108c68debd1f124b979c501ce4c351025ddcf5cd30b16a5f7b41dabcb758c3ab3bb21e68e5499baacf9121b4f1e21d10709573301acfc79eec6d8f228cad624db3f2299c8b17e42714b1202b29cd5c9100f751406a7f7df66bbfacf6aa84d2bf9ae3d5b231899d8cbaf0aa14d5175657f2ccadc9e64e4e22695712f268fd8434cdc2778b55655d94078d845ae0a77204de25f0bc62f066e4518c152fc60aceb26c669f78d8a6d5a0c5c2b43ad4a72bed5142e382191b4ba431f8bad7874440b356badd7ecf8c95993479a3df2e510df8a24ae3f93cc1bf2043845f2b058ad4b7f370d1371d8f4cc463808a57bdcb4d4723e5d18b810fd170c9c24eb8b504e0415533d26ef4b16d83f18594e47fee5a71fca12fa47d4d0197055c046396b6f2a23377084303961159999c2bf9c24f916d5a455f86a0404bfe692ad58a5c231fa6738c88022786092e73712a11e34f6d39f3c64e5b7a4228e984b56f0d63322d14a8496b79b48df023a3ae1101ab77477a7586d23d18874a7e2fb29c8053ebc97971d39bf89c898fcd428f65a6299691a33f1a46a86e045b1f6672bf633c907e4c379974c042bc09094c977b14bc95574bc8732e591958dc651bc1986b0eeff5c429885f71f2fc38dcc12613fccbb1f4af54c5953ec27d6e5da4378a92e13cf1ed92dff2bea6f9d9791d537131f82c946fb4d4a2882e91b38d6fa530d99746d3a393e04bdb551b4f26132fecc0c1905c70b5f3b5ba32062bf53624cc38a6fe9eb6ea7b92dbb3ea03d6c591f0bfef13a86cce92b975137f44bc60a9569623e1bd9d520d633dedb553d34a34254e9dbcbb931018d38dc66ca4fb7a9c8db085e4d253c0b4447af19e169c2b1edd6b757e5ac86a6f22833c83efc786b4220a0f41679e6270fc3a1ee503a6b854187c2ad1a1f2539be4432d59c4218ddb443c45d31b1b708bbb579fcf54b58ee4692b12d98718d11a491fb4187e4a92ea24361556ba2c632edb1125b722c2a359e3f1b211d25ec1adbd2d446a778e322eca2b7a401cd546c6ca6364b329d14e0b2bdc2ef65cc7e851826f254662b21ff3043704ac677906e0b203cb0223dc98ab5962c2421e6ae7d493a296328a1eb2a8b9113a756f7ac1b3fc680515ff58c6e5551fbcf619a431bf33964c9521215602666430797b66280bd9dd6ae4fad5cc422a1068729a62a2424eb871c0245894b7c826c422a12b817a9ac03ee60112488c23831c8a58691ac36677f1f9d11a223c6876f791782d180bcc7cc89c0a8007c2b29b34d4dbc3c182177fc6a6e73b3cb1829bed54f39531b0c5e8096bb54e63a6b4d8f1b4e08e5d9d9053910b3909337f180cc923eb22802894be96865596c1dd5843e8b1e71e182ca84ce4b1bfcf4c2317368127c80bf550d8fd54eae06eab69b36d1b6be34bff9d7f2877bfd290440d7e586c9d4294516d21d51b3e4fbf499b17b0dc5be83ffc3539db6ca7674fae31166842c80637e34756969ecf1f5b34d6a574d33f14b44066e2bed57363a3904188464cbee3bc74347dda80260e3e84d7445e90d4d9203ada83f87f2e626a8afd1bb1574c163e42ee1da3c3b0f64778718899b72093572f4734ccd65aeb474714b4da71bb4132e4bd9f1a61f5c0a6bc22ec579aa00e36cfc180effc1d487b395e68d67ce2723dd124c005352a8a316f52001048a8e813ae154e8c44be672fdaf1673acdc408a132a20881e1b7a7542810ea9d8b23fc4581a2abc132764ddc4af3e767955040598f1466b721f868781364af3218331a1b97d993f657290c7e39ffa60930368763d7aae51ee7cc756174ad289131f3a613ae9a8ce5ed9988d2997dc12d0796784b5ec7466f828f7a0a998232c87a2526d7e5a0649af1065d4179fef22fb4e0045b8b0ada57720f44a1aebc2da74ca976dc1e0693a310f2d82e31891e490b085de010fcde5f0aa2fb0b05d45fddf375a6fe12e680b3e65ddfa8f03192c30f169b650b1baf39e2c5a3a22cac2461c09b5f82f21843ebaf832726b922972cc106163632a9aeebc4e6e314bd537ec159174514701fdd31c569731ee93788c442e9c4798e38d57d7255d0afbbfe7473c5263d23749929fa8bc2c1d9909097e22f035104515e2f646d4d0655aefd8f1c3c611411db96942d6e19339539a5f09c870bc84bdc6dc1ad620c677024fed897be10b4e4f1680e861a10d5b8d09cb9f1c51d26363c3359136c43205aaff1c1a9defea4907807043b11424ec63da0c8c3e042211c38ce9db985e17508bb3d6c0d9ba83c03e90a33520754af88af2d148a348f4dd8394fdbbee160a221b94939faa4e3384a155ac83af661e2993c2c3ca29609bd8a45697d2f7305a9047f95a"], 0x1007) 1.586411766s ago: executing program 0 (id=579): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000940)={0x18, 0x0, {0xfffe, @multicast, 'ip_vti0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) socket$qrtr(0x2a, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000700)='d\x9f\xcc\'K\x97s\xd6\x1b\x94\xc5\xc8\xee\xedS\x9a\x9a\xec\xf6W-\x0e\xfa\xd48`_\'\x00\x80\xb4\xb2\xe1\x9a\\!\x86\x10R\xf3oz\\\xb3+m\xb47\x14\x99\x0f\xd6\x9cYn*~\xdf~\x99x\x98\x9f\x89\x8c\x86\x13\xf7\xc6\xa4\xa9\xfe\x06d+\xd57\x1a\x8e\xc3GM\x11\x8c4w\x1e\xc5\xea\xf2\xc7#\xffuq\x82\xebr\xc6\x16\x99\xc35_\xbe29K\xad\xc2\xb5+2\xfe\x88\xb0\x9e\xc6P\xc5\xd9\xb5M^\x81\xdf\x00\x00\xf8\xb3@p\xa3y\xbd\'\xd5\xea\xed\xdc\xc2\x12Zu\f\x98=\xc3\n\x93\xf3Y\xc0\x02\x98\xe4Y\x91t\xf4\xf2\xae|\xb7\xb8\x81o\xd5\xb2^\xdf+m\xddJ\xc8\xac\xbe\xd6\x02\xb7|]\x9a\\ \xa0a=\x92X\a\x99\xc0l\x17I\x02i\xa4A\x8a\x1d\xb5Xt\xbck\xc1nU\x9f\xd3\\_\x80\xa7\xc7\xa2\xae\xe3\x95l]\x91\n}\x12\x93k\xf8DN\x0fGeN\x00\xb8\xc9\xabO\xd7\xfc\xa5u\xcf\x1c\x87\x06\x03\xc2\x9a2\x83\xaf\xd5\xee\xc8_\xbe\xfb\xb6\xa2\xe6\xad;\xfbC\x11\xb9\x84{\x9fr\x9b\x14\xf9\x00\x10\x1e\xcd\'%\x1d\x06\xdbe\xcd\xb8\xb1\x7f\xd2r\x1b\x84\xd6\'\x13\x9e>\x938\x0ef7\x8btv\bO\xe0$C\x95\x02\xb0\x91\xfewY\x1b\x05^\x85L\v\xd7]\xc8\xb3\x9d2g\xfc\x1b*\x02\x8d\xde\xeb\x06H\x1f/\xd2,\rR\x83L\xf3\x99\xc0\x11\x00\xd4\xbf*\xe6q\xa8\x9c\xf7\x1dh\x88\xf9\xb7\xf8x\x1bG\x90\x91rPK\xdeOX\x87', &(0x7f0000000440)='+\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r5 = semget$private(0x0, 0x4, 0xa1) semctl$SEM_STAT_ANY(r5, 0x0, 0x14, &(0x7f0000000880)=""/4096) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) read$FUSE(r6, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffce1) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x1, 0x0, r7, r9, r7, 0x0, 0xa6f4}, 0x0, 0xac2, 0x7fffffff, 0x7ff, r8, r8, 0x9}) 1.00509758s ago: executing program 1 (id=580): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0xbf27, 0x10520, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x400000, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfe00, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9a02fff0}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$kcm(0x2d, 0x2, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) 935.321807ms ago: executing program 4 (id=581): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20000011) openat$fuse(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x200000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 746.784793ms ago: executing program 1 (id=582): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x3, 0x1, 0x0, 0x5, 0xb, 0xc, 0xa739724c36fe02db}], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x4, 0xd, 0x3f1, 0x6f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/246, 0xf6}], 0x1) (async) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000400)=0xfffffffd) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r0, 0x0, 0x1000, 0x99, &(0x7f0000000440)="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", &(0x7f00000015c0)=""/153, 0x1, 0x0, 0xc8, 0x47, &(0x7f0000001440)="25e4aaca6f650200a552842ded997aef6aa3110b9182925b5ffb3954a98a55ef67206a6a91b6e81e7dc8e375a6b2fc292b3f443ca9f4f7ef2111b51a3eadd1080731cb26902b0fc89fe7e809088864cc6f1e9dacf0fa688b01bba0fb8fbf18de8859e86046bb6b315242ca2a10877e24df1d6ebdd39c36eaba5ad472f26fe3abc00897d94065b0cf5c4e6217bff53f96fd1fb88f2a7d7d95f932ce1175e1b5adf902f6e5f9ce1d5df6d9834f2614b2a13157bc09d0fe51e7baf0445a9dd6b3fc0b49ce991e9c3d6c", &(0x7f0000000300)="4c38cffd90fa02348656616f9f8424b51c9013d9d993a291dd0c8c8d11edd2b219d2ffd47c4c748c4d3c067194d5596140eca56b7e82933068b7770b9a098cfb63649c152a29cf", 0x4, 0x0, 0x1}, 0x4c) (rerun: 32) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/raw6\x00') r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000001140)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1c0000}}, 0x10) (async) read$char_usb(r1, &(0x7f00000003c0)=""/122, 0x7a) 746.476177ms ago: executing program 1 (id=583): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x841, &(0x7f0000000200)={0xa, 0x4e22, 0x6749, @loopback, 0xe}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x458, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x15c, 0x180, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4b4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0) listen(r5, 0x0) r6 = syz_io_uring_setup(0x2461, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}}, 0x4004881) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000002140)) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x2000, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0x5, 0x0, 0x0) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r8) 534.892013ms ago: executing program 0 (id=584): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = gettid() timer_create(0x3, &(0x7f0000000000)={0x0, 0x34, 0x1, @tid=r0}, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x482) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x4, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="d116d24a8ec3"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x8010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/166, 0xa6}], 0x1}, 0x8}, {{&(0x7f0000000440)=@l2, 0x80, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/132, 0x84}, {&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000000740)=""/143, 0x8f}, {&(0x7f0000000800)=""/27, 0x1b}, {&(0x7f0000000dc0)=""/111, 0x6f}, {&(0x7f0000000880)=""/213, 0xd5}], 0x6, &(0x7f0000000980)=""/136, 0x88}, 0x5}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000a40)=""/46, 0x2e}, {&(0x7f0000000a80)=""/86, 0x56}, {&(0x7f0000000b00)=""/59, 0x3b}, {&(0x7f0000000b40)=""/189, 0xbd}, {&(0x7f0000000c00)=""/6, 0x6}, {&(0x7f0000000c40)=""/93, 0x5d}], 0x6, &(0x7f0000000280)}, 0x9}], 0x3, 0x10122, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000011c0)=""/4080, 0xff0}, {&(0x7f0000000140)=""/70, 0x46}], 0x2}, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r6, 0x0) ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000340)='kfree\x00'}, 0x18) 148.088926ms ago: executing program 1 (id=585): r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r0, 0x9620}], 0x1, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x541b, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 0s ago: executing program 4 (id=586): io_submit(0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x2404c8c5) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004cc1) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="40090100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") read$char_usb(r2, &(0x7f0000000100)=""/50, 0x32) r3 = syz_usb_connect(0x2, 0xd7d, &(0x7f0000000bc0)={{0x12, 0x1, 0x10, 0x7d, 0x91, 0x82, 0x40, 0x16d8, 0x7251, 0x68b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd6b, 0x4, 0x6, 0x8, 0x10, 0x6d, [{{0x9, 0x4, 0x1, 0x7, 0xc, 0x45, 0xbb, 0xe9, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x80}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x302, 0x4, 0x5}]}], [{{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x0, 0x2, 0x7f, [@generic={0xe3, 0xa, "270200ddb5d9845c5cc8d9fd98c618edba8001e085e4f9a88d67e6925072ea7c078683da55afe1c1a23f8c094d3b93595ae279c9db4ec19bd52f072cad618a62273bf9762b440d14beb9d785213152edfe9a554d9b0970c79c427fa3a7fe991f69c5f57dcee7063315b57bf260929c7df6418506e3800d174ee6d2d162ab316adc55c8f755dc33c5901e275ba7c813df4d74d0c19b11c717a6e2c4f46ec9d611c053cad1ec781f15f1b5312d0b022ecaf9a49a0a9ba14579505b98fa1351eeb3bade40ee4ae9c16f01c39ba0bf2eb872b0deddd374c71fccdda21e5035621795d4"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x10, 0xac, 0x2, [@generic={0x8d, 0x5, "fbd1dec485f86bfdecc5d418e4bc980a7483a3bf0519a381fc337605147be08dae29e381373fc1b040c34d0c49d7ce52c48bc289795d24b91ebe15b19642f28ec5ccd4b0888d8e9213f65209fc03ce73310a0f92749c23aa06da0d5ff66572d0166e7a24d05b5431abbdd92f642108445e7d75dbd0818b48a55b75d8f6ecb2241943195a56d8734e66fea3"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0xf9, 0xe, 0x7, [@generic={0x4f, 0x9, "52b6c533699485b7b5b1bf5c467b8e1fa03c5d3d52c66609fa0583e87801c9473edbaff83cc02946ef7b6776a20816dfa0c7c8d1c505aea4549431f923e1db4eca74346d5d147330ea1b5850e1"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x9, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0xc, 0x200, 0xd, 0x4, 0xb2, [@generic={0x8a, 0x21, "9ff2d9b7a9bfed0f4d63dbb58612881125c448d068cab16f2adc6dc26f37c49a91c1e22c46f07ae5b9ffae47dd29e84e812b05011884b44d5ce85393ce55e8da68e3769e112df8ffe5a9b442e1fa6f0ba78f4e5978d5f2ef33bb74ef9b6938c3c80d42194cf0cad1a63a931bbebbe62ecb13069f5c701051bafd6c0c81c557b7930e5966fd85a976"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x94, 0x10, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf8, 0x1ff}]}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0x9, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x5}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0xd, 0x1, 0x3, [@generic={0xbd, 0x21, "f1440e94e3fa2bd720ce078c2087ae00f67908744b13a59ae626eb1cf55c0f11abf8507106ee2da12e4c4d4c38fae41936fd54531655721b105e9014ebeecbcf54a6747a7c61d065735f2476ed278632a747a345f4a092bfff295279f5a6692158dffa0af87e27ebeb659eebb27bde60634be96625ec5017dc0e970c88a823b5629d152ca8c297afd4bf918cdb253a997904a471b5c825fb8e374eb8c2c8e260853ef72508066eba519b1c23d4a287355c85d8cdd09c6ec61cea94"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0x5, 0x5, 0x6, [@generic={0x40, 0x21, "f09da837a0f50abf4c42f4704cb55dd05bc7d6636ba0e2aa8421f959fd837e5b7071fc7fd4fa8ba790970da40a81d3b903278fc8dc827bbb3330af396458"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x8, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x224}]}}, {{0x9, 0x5, 0x18, 0x0, 0x10, 0x10, 0xf9, 0x8, [@generic={0x3d, 0x6, "61bf61255270d7f9f49215873311082e2a7c3b9f0cded35e61f2607409e39094b72caf9058eb5757ca5376bd685ca419ae93c9f6ea43ecd85c912a"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0xf0, 0x8, 0x6, [@generic={0x1a, 0x0, "72d9847e909d19caee14dad0a05fe1e631f943a41249efda"}]}}]}}, {{0x9, 0x4, 0x61, 0x8, 0x2, 0xd0, 0x80, 0xb0, 0xfa, [@uac_control={{0xa, 0x24, 0x1, 0x6}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0x0, "d4c00301c018"}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0x4, '0OH'}, @mixer_unit={0x9, 0x24, 0x4, 0x4, 0x9, "1a63f0b5"}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0x2, "1742"}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x1, 0x7, "83dea817fca0"}]}], [{{0x9, 0x5, 0x0, 0x10, 0x200, 0x81, 0x1c, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xb}]}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0xd0, 0x9, 0x4f, [@generic={0x75, 0x8, "92ddfb0beca838720813c47787ade8e99eb09f3f9fd0ca8ec419fceb1e8b654c2c77111ffe3c70a57d488b616612d7e540945485c2442388f4609593c9945f4eb6e11a7d9dac9e3b7e2d62f8b57a950adcc67988e97e0fce1900853e74529a864e6e2da2efed65dc12eb86d4b5df57de10b711"}]}}]}}, {{0x9, 0x4, 0x42, 0x80, 0x8, 0x1, 0x75, 0xca, 0x6, [@hid_hid={0x9, 0x21, 0x40, 0xa, 0x1, {0x22, 0x11c}}, @hid_hid={0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0x3e2}}], [{{0x9, 0x5, 0xd, 0xc, 0x40, 0x8, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0xffff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x6, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xc92}]}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0xff, 0x7f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x243a}, @generic={0x21, 0x0, "9f0962667557efcd0f8821e6a980243475afe2aa91605eb401b10a26a9bcd2"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x6, 0x9, 0x7, [@generic={0x2b, 0x8, "446180ed84a41f9bc3b5e231f22c02274789abb498c29026bac7a2f44e597964616eab97be8aa9c060"}, @generic={0xe1, 0x8, "45f830fd803ab01dc9ab3d01f64c6dac9b9cf66fa31ecf43e16efb3416356eb61eb1f7e92a1013069696bb4b1b38275257115f6acf4b3846f9f031a23cddb8c75f3e2e1f408d7d464821e774f96e17e49b4e2b128ff68060d41864f227bb76327900a2d8532783ce4fbc4dcdba7c8bcbeb8eccec032fa6169cd5048791bde6aee8fcec7b221fc5b3fd343022a8a1989a36942b311e7c8968aa56ea1cad4895bb2a6eae92ec680ecc4bf8c663f10c869a8887c7ea26b4e47746d5931b095265c7c3f97b455df253178000ad46f8ac6efd778122b96241ed6b472a977f1c4801"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x2a, 0x8, 0xfc, [@generic={0x43, 0x22, "064e3c9aaa5b38f186e8f03f4e68a4c2e26c41b7588562cb860effc30a05e307f296fc60818ecb22dce3305b99c39f0a0fbf9a9e0f9fb88625e606de79cf14444d"}, @generic={0x3e, 0x4, "98518d8eccfb087ff621db2ac34a170142929aea4a6b7c60179ec0c8b375b4c30de69e264c1cb73aca787e467e7510e3568786ca9106c134ddaa4650"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x0, 0x3, 0xff, 0x6, [@generic={0x42, 0x23, "0dc052162dcda387f0c511fae92ab1f785a29802179a94931109d9a82ca0fcdfab3e9fff24474fd59a968a670c351a3f0befff042b1b7ac7a0bee329b9e70ba5"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0xf7, 0x8, 0x66, [@generic={0xeb, 0xd, "135ee3d198b1e2a74850cf23b156c017826d28fd2f04869de6e3b90bb31e5ecdbbc539e4c2ff88c91876d775a5c081548b42fe5d181302700d631de371af9ed9ecc6a784f442ac7bd8a0bd73198c3dab96a64681ed6d48d75fe70e70e6b16a2d2bda78952dd32e7fd227acad38f7b12de3b37386e6b0a698d587704e25d3bf108bf6f2d61987ff1753e08df51225843cf5080f4e781970cb7c98ed02eadeaf90e241e0772bc5ebb0eb300de5137a9afb1d60d5bd7f8e85b41640c372a6c7a92d366998989a978edb89f9cb2761bfc4d8448406bc3f2bffa66bae6b3d0e7c8d93c6d0b2bc6b2cbe7412"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x2, 0x98, 0xc, [@generic={0x22, 0x30, "0c2aca451fe01fc9738886f2432c5ead05a7197706c934e2eaf5ff85e0ea7ed6"}]}}]}}, {{0x9, 0x4, 0xdf, 0x0, 0xb, 0xdc, 0x7b, 0x58, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "1ce7"}, {0x5, 0x24, 0x0, 0xc}, {0xd, 0x24, 0xf, 0x1, 0xfffffffb, 0xff, 0x4, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x800, 0xfa, 0x3ff}, @country_functional={0x12, 0x24, 0x7, 0x7f, 0xc, [0x8, 0x8001, 0x400, 0x5, 0x2, 0x4]}, @obex={0x5, 0x24, 0x15, 0x2}, @mdlm_detail={0x16, 0x24, 0x13, 0x7, "e37edb7f9cd4291b0d43597e37f4796165af"}, @mbim_extended={0x8, 0x24, 0x1c, 0x541, 0xe, 0x8}]}], [{{0x9, 0x5, 0x6, 0x0, 0x3f7, 0x6e, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x1}]}}, {{0x9, 0x5, 0xc, 0x8, 0x38, 0xff, 0x0, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7f, 0x8}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0xf5, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1}, @generic={0xa2, 0x23, "2c93be71136e0232747e787a707a24b09d8a26469335508b2027675dc23cdede26cb788f99fc5d1439d982f347633c926bbf4b88278bf6ec9e727b3ca2f1efc131070254f586d8865266744c88115d77eb3567aa6926de11fde25ee1813548bc1eb781e4a7e14160c9de02de10c754dc8ab39361b3106c7cca86f18ae3565ef4331bcf6ef9f0c200811d9a8a20ed054d204186b23eead988137a538ce167a858"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0xa, 0xa, 0xd, [@generic={0xbf, 0x8, "8f48718bc2c2b1105b4e936d0a0f510fd5804d6eaa7f0689ca486c25ee6c074662bce2379526641c08029387f6028ff3b4e266b0a8c4092d489fdd24553d90ba928718bc7952f02e0d7d3c4898ebc4a74ce36a747118ea2ac2a2b5dc3d5237878514481582541c4e86566d82aedf7bb3d7beef53d111effa60a2ba003a122e32911e1e2297ff23b2e755377265fbce36b46017fb93ee6649a6869f9cdc3403084d417ddcefac745bc18ad6bdc6d86f68e486a7a789a6d67c7c33d8d6b2"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0x5, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xfd7a}]}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x2, 0x3, 0x0, [@generic={0x100, 0x22, "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"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0x0, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x1b}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x5, 0xfe, 0x40, [@generic={0x64, 0x3, "346ba71a9219b1ade6e6a5fde62149122e52c261770fad4f5994433323823647d64f285f616e9cefe0395e0156fc478e073731752e2727cd046e3934aca101923a40bb3018a342a90b6e4e9225c9572724efda3eb7bf860ed71c599741d3d2b2968e"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x7ff}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x8, 0x4, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x9}]}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0xc0, 0x2d, 0x7, [@generic={0xfb, 0x10, "3ecd40f1c1620ebcec0520d229b8ff1741dfc316281210690be62d2002ca98c970cd38863e5730f99a8527071cd31cf42375fd780862d71baf6624f01d3e16397aec9da90c567f3a46a420b0774cd96c75ba661fbef9a3b5c4dc3dbd1762f3d8b7409c746494338c869c6a51d56b7837ea40b5037148fe845d64d385673646849f83c0e84aeecbef6487c984b156e1b4fe4908ab54d7861a2e271389a7fc0602ab313590492bd37d1314e8e6ddd63319bcf1d2a348c1a9982acea7bea6921164de8bee906060631aa5ea17f22e3fe598b4cc8365e307f3fe6199d60371d82c9b9a80c1386917af62b7b5de2fcf689d5bff19a17b20511627f8"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0x7, 0xf, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x4}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x6, 0x7f, 0x5, 0xff, 0x8}, 0xc, &(0x7f00000001c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x5}]}, 0xa, [{0xaf, &(0x7f0000000200)=@string={0xaf, 0x3, "80e8f46a8528bece6b38dd1db6492bfcc004310e928c3ccfd60ecef17d4f72eb1598f5e2e48f37e7467361844b465e1504fd001d2a2b0650eac23bd26b8ad7d749d5bb6f4dd980b629b88a3e94c456aaeec5f46fd0261aa6b7daa594f082dede9d78486fb1f2f9ba6fad255d882806e8d4e462773208f97f44e2758108edfe43692d6d0ef43726163141f337df41d426a1d1a4a897a109aaf90899b7833a95be999bee7e798e24816aaa7b2373"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42c}}, {0x81, &(0x7f0000000340)=@string={0x81, 0x3, "f0b75b1cdebeb8e0d3a01fc2bc336037016715d8c49946080ff21c5596ea3844e502ba1391af9071c2144456086e9895b3ff3404ebaab761b94249eaf4b6f4675119e055e9f9fa48fbf5361917033217c6ddb9292c2eba62e0082e35154ea67e823e66c177d52d79eb74b24b35738cd2aa2e3a66d4dfed50357e59f4cc1ad2"}}, {0x1a, &(0x7f0000000400)=@string={0x1a, 0x3, "1cca8e3be841d32e9c4e4f6f1fa0a6f0f10e1dcd743f3035"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41a}}, {0x1b, &(0x7f0000000480)=@string={0x1b, 0x3, "ac8ba3c43d777c7af22dd208cca87a29dbe49f237aa5413b25"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x13, &(0x7f0000000500)=@string={0x13, 0x3, "eea05449d651ba29dc0d4328c7939155cd"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xf4e9}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000740)={0xc, &(0x7f0000000600)={0x20, 0x21, 0x6c, {0x6c, 0xa, "1432d73421c92d7a81af4cce8da3b32823c61b7ebcf59a62d9c36ffe4c18347c32d6a715a3e5709e9c3012029a9a2a4a19e7adbd76e5de2eb0c6f1e467e57551b9f491ca52e4e39c2510d2ad01f61bb40799c8644c69ab46bb9ef7706b8d753b0ab16d2e88666c17163a"}}, &(0x7f0000000680)={0x0, 0x3, 0xad, @string={0xad, 0x3, "6a1079c0405ee7ad4f4d54c6cbf713e11cdeee99e5c4d237057a22ef1334a5528859b2b6af28e8ab930872f61138f968ee038fa65f36d25b341536b0bcb157cab34b5100fcc3861c1b653e73da820709dc288298f0710c80a4840ada1d0ccb7f4f273b7c64af79ce009edd66103c59d27c3bc13f048b7ca2a47b5ed9ffa9569846a33dea438c5ab46d6649e633a4e761396c67ea562aea58078be1fd06b0723a735b59154db629b72cbeea"}}}, &(0x7f00000009c0)={0x1c, &(0x7f0000000780)={0x20, 0xa, 0x49, "6e887b9414a7e4b93d272cdf41cd271f055c36cb018114284fcc849128e1e9228d348e060abdc7d95612c61de4ba0a3f007be4c9b381a115de713af90066b47f840b54e5007f5da9ca"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000880)={0x20, 0x0, 0x7d, {0x7b, "eb70727f1155f35d1cb13bf70b27853a5ccc1195e30036deb28dee741c380f29db6ba05de5ce7506a2d4c0372c58f241289d04513525e175391cabeb632aa7250915e9bfded3a7f2c183ef442cc40f0160fea8435491ed60a99c6e1346c25fdff91c9e76ab9c055569c00ebcabda506c8ef6ebbdda5b1693951851"}}, &(0x7f0000000940)={0x20, 0x1, 0x1, 0x41}, &(0x7f0000000980)={0x20, 0x0, 0x1, 0x1}}) kernel console output (not intermixed with test programs): 10/0x10 [ 94.645814][ T6987] ? bpf_lsm_capable+0x9/0x10 [ 94.645824][ T6987] ? security_capable+0x7e/0x260 [ 94.645840][ T6987] ? ns_capable+0xd7/0x110 [ 94.645852][ T6987] nfnetlink_rcv+0x1b3/0x430 [ 94.645864][ T6987] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 94.645876][ T6987] ? netlink_deliver_tap+0x1ae/0xd30 [ 94.645890][ T6987] netlink_unicast+0x53a/0x7f0 [ 94.645903][ T6987] ? __pfx_netlink_unicast+0x10/0x10 [ 94.645918][ T6987] netlink_sendmsg+0x8d1/0xdd0 [ 94.645931][ T6987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.645944][ T6987] ? __import_iovec+0x1c8/0x660 [ 94.645961][ T6987] ____sys_sendmsg+0xa95/0xc70 [ 94.645973][ T6987] ? gfs2_rename+0x950/0x12c0 [ 94.645986][ T6987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.645999][ T6987] ? get_compat_msghdr+0x11a/0x170 [ 94.646015][ T6987] ___sys_sendmsg+0x134/0x1d0 [ 94.646026][ T6987] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.646053][ T6987] __sys_sendmsg+0x16d/0x220 [ 94.646063][ T6987] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.646080][ T6987] ? rcu_is_watching+0x12/0xc0 [ 94.646091][ T6987] __do_fast_syscall_32+0x73/0x120 [ 94.646105][ T6987] do_fast_syscall_32+0x32/0x80 [ 94.646118][ T6987] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.646130][ T6987] RIP: 0023:0xf705e579 [ 94.646138][ T6987] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 94.646148][ T6987] RSP: 002b:00000000f504e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 94.646157][ T6987] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 94.646163][ T6987] RDX: 0000000004004020 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.646168][ T6987] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.646173][ T6987] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 94.646178][ T6987] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.646190][ T6987] [ 94.665127][ T24] usb 6-1: USB disconnect, device number 10 [ 95.282165][ T5960] Bluetooth: hci0: command tx timeout [ 95.620090][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.286103][ T5956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.289464][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.292254][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.295093][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.298906][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.454488][ T7025] chnl_net:caif_netlink_parms(): no params data found [ 96.655690][ T7025] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.657994][ T7025] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.660217][ T7025] bridge_slave_0: entered allmulticast mode [ 96.663013][ T7025] bridge_slave_0: entered promiscuous mode [ 96.666270][ T7025] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.668523][ T7025] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.670839][ T7025] bridge_slave_1: entered allmulticast mode [ 96.674801][ T7025] bridge_slave_1: entered promiscuous mode [ 96.716754][ T7025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.720924][ T7025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.770033][ T7025] team0: Port device team_slave_0 added [ 96.787887][ T7025] team0: Port device team_slave_1 added [ 96.830091][ T7025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.832462][ T7025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.840251][ T7025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.848003][ T7025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.850227][ T7025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.858547][ T7025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.908372][ T7025] hsr_slave_0: entered promiscuous mode [ 96.910539][ T7025] hsr_slave_1: entered promiscuous mode [ 96.912746][ T7025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.915267][ T7025] Cannot create hsr debugfs directory [ 97.415847][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.494259][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.634862][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.983123][ T46] bridge_slave_1: left allmulticast mode [ 97.985021][ T46] bridge_slave_1: left promiscuous mode [ 97.987029][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.257186][ T46] bridge_slave_0: left allmulticast mode [ 98.259271][ T46] bridge_slave_0: left promiscuous mode [ 98.261401][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.322415][ T5956] Bluetooth: hci2: command tx timeout [ 98.344529][ T7038] netlink: 44 bytes leftover after parsing attributes in process `syz.3.244'. [ 98.499193][ T7065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.251'. [ 98.534823][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.539750][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.543638][ T46] bond0 (unregistering): Released all slaves [ 98.556121][ T7068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.251'. [ 98.887664][ T46] hsr_slave_0: left promiscuous mode [ 98.889739][ T46] hsr_slave_1: left promiscuous mode [ 98.891672][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.896430][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.899826][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.907944][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.926463][ T46] veth1_macvtap: left promiscuous mode [ 98.928245][ T46] veth0_macvtap: left promiscuous mode [ 98.930019][ T46] veth1_vlan: left promiscuous mode [ 98.931692][ T46] veth0_vlan: left promiscuous mode [ 99.481045][ T7095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.255'. [ 99.580870][ T46] team0 (unregistering): Port device team_slave_1 removed [ 99.638006][ T46] team0 (unregistering): Port device team_slave_0 removed [ 100.104610][ T7106] mmap: syz.0.258 (7106) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.174288][ T7025] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.205489][ T7025] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.255259][ T7025] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.292494][ T7025] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.315856][ T7121] /dev/nullb0: Can't open blockdev [ 100.358636][ T7025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.371756][ T7025] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.392834][ T1251] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.394985][ T1251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.398018][ T1251] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.400133][ T1251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.414689][ T5956] Bluetooth: hci2: command tx timeout [ 100.535975][ T7025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.561703][ T7025] veth0_vlan: entered promiscuous mode [ 100.570290][ T7025] veth1_vlan: entered promiscuous mode [ 100.585957][ T7025] veth0_macvtap: entered promiscuous mode [ 100.589574][ T7025] veth1_macvtap: entered promiscuous mode [ 100.597361][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.600634][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.604548][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.607890][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.611862][ T7025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.617372][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.620655][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.623846][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.627133][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.631004][ T7025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.643515][ T7025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.646311][ T7025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.649187][ T7025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.651887][ T7025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.681032][ T1251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.685261][ T1251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.715037][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.718305][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.193203][ T7161] netlink: 'syz.3.270': attribute type 3 has an invalid length. [ 102.195578][ T7161] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.270'. [ 102.200954][ T7161] trusted_key: syz.3.270 sent an empty control message without MSG_MORE. [ 102.251490][ T7161] netlink: 56 bytes leftover after parsing attributes in process `syz.3.270'. [ 102.346468][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 102.346478][ T40] audit: type=1326 audit(1746342586.872:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.3.271" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x0 [ 102.515231][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.269'. [ 102.577951][ T7167] FAULT_INJECTION: forcing a failure. [ 102.577951][ T7167] name failslab, interval 1, probability 0, space 0, times 0 [ 102.582055][ T7167] CPU: 2 UID: 0 PID: 7167 Comm: syz.1.272 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 102.582069][ T7167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.582087][ T7167] Call Trace: [ 102.582091][ T7167] [ 102.582096][ T7167] dump_stack_lvl+0x16c/0x1f0 [ 102.582113][ T7167] should_fail_ex+0x512/0x640 [ 102.582127][ T7167] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 102.582140][ T7167] should_failslab+0xc2/0x120 [ 102.582152][ T7167] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 102.582163][ T7167] ? find_held_lock+0x2b/0x80 [ 102.582172][ T7167] ? ovl_alloc_inode+0x25/0x190 [ 102.582187][ T7167] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 102.582198][ T7167] ovl_alloc_inode+0x25/0x190 [ 102.582210][ T7167] alloc_inode+0x61/0x240 [ 102.582222][ T7167] new_inode+0x22/0x1c0 [ 102.582235][ T7167] ovl_new_inode+0x1d/0x50 [ 102.582249][ T7167] ovl_create_object+0x17c/0x300 [ 102.582260][ T7167] ? __pfx_ovl_create_object+0x10/0x10 [ 102.582271][ T7167] ? devcgroup_check_permission+0x187/0x470 [ 102.582286][ T7167] ? match_exception_partial+0x239/0x2d0 [ 102.582302][ T7167] ovl_mknod+0x59/0x80 [ 102.582312][ T7167] vfs_mknod+0x5d7/0x8e0 [ 102.582335][ T7167] do_mknodat+0x30f/0x5d0 [ 102.582358][ T7167] ? __pfx_do_mknodat+0x10/0x10 [ 102.582376][ T7167] ? getname_flags.part.0+0x1c5/0x550 [ 102.582397][ T7167] __ia32_sys_mknod+0x85/0xb0 [ 102.582407][ T7167] __do_fast_syscall_32+0x73/0x120 [ 102.582422][ T7167] do_fast_syscall_32+0x32/0x80 [ 102.582436][ T7167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.582449][ T7167] RIP: 0023:0xf703e579 [ 102.582457][ T7167] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 102.582466][ T7167] RSP: 002b:00000000f502e55c EFLAGS: 00000296 ORIG_RAX: 000000000000000e [ 102.582477][ T7167] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000006000 [ 102.582483][ T7167] RDX: 0000000000000702 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.582488][ T7167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.582493][ T7167] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 102.582499][ T7167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.582511][ T7167] [ 102.715136][ T7168] block nbd3: shutting down sockets [ 103.392573][ T79] Bluetooth: hci2: Frame reassembly failed (-84) [ 103.560035][ T40] audit: type=1326 audit(1746342588.082:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.1.278" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 103.568541][ T40] audit: type=1326 audit(1746342588.082:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.1.278" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 103.577177][ T40] audit: type=1326 audit(1746342588.082:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.1.278" exe="/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 103.584697][ T40] audit: type=1326 audit(1746342588.082:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.1.278" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 103.591324][ T40] audit: type=1326 audit(1746342588.082:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.1.278" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 103.598169][ T40] audit: type=1326 audit(1746342588.082:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.1.278" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 103.605437][ T40] audit: type=1326 audit(1746342588.082:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.1.278" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 103.611957][ T40] audit: type=1326 audit(1746342588.082:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.1.278" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 103.618522][ T40] audit: type=1326 audit(1746342588.082:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.1.278" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 103.785406][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.812779][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 104.501219][ T7196] fuse: Bad value for 'fd' [ 104.572223][ T7198] netlink: 'syz.1.281': attribute type 10 has an invalid length. [ 104.574743][ T7198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.281'. [ 104.585935][ T67] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.589856][ T7198] team0: Port device geneve0 added [ 104.590026][ T67] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.595737][ T67] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.599999][ T67] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.603661][ T67] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.752215][ T956] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 104.904173][ T956] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.907863][ T956] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 104.911131][ T956] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.914831][ T956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 104.918297][ T956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 104.923093][ T956] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.926037][ T956] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.928652][ T956] usb 5-1: Product: syz [ 104.929973][ T956] usb 5-1: Manufacturer: syz [ 104.934759][ T956] cdc_wdm 5-1:1.0: skipping garbage [ 104.936487][ T956] cdc_wdm 5-1:1.0: skipping garbage [ 104.938953][ T956] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 104.940993][ T956] cdc_wdm 5-1:1.0: Unknown control protocol [ 104.983901][ T7199] chnl_net:caif_netlink_parms(): no params data found [ 105.132716][ T7199] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.135047][ T7199] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.137447][ T7199] bridge_slave_0: entered allmulticast mode [ 105.140032][ T7199] bridge_slave_0: entered promiscuous mode [ 105.143572][ T7199] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.146509][ T7199] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.148793][ T7199] bridge_slave_1: entered allmulticast mode [ 105.151406][ T7199] bridge_slave_1: entered promiscuous mode [ 105.185336][ T7199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.189891][ T7199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.225623][ T7199] team0: Port device team_slave_0 added [ 105.229223][ T7199] team0: Port device team_slave_1 added [ 105.260671][ T7199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.264172][ T7199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.272061][ T7199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.276603][ T7199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.278784][ T7199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.287419][ T7199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.310034][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 105.310153][ T956] usb 5-1: USB disconnect, device number 7 [ 105.312094][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 105.312118][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 105.324150][ T7208] fuse: Bad value for 'fd' [ 105.442195][ T5960] Bluetooth: hci2: command 0x1003 tx timeout [ 105.447252][ T5956] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 105.470079][ T7199] hsr_slave_0: entered promiscuous mode [ 105.480604][ T7199] hsr_slave_1: entered promiscuous mode [ 105.483910][ T7199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.486407][ T7199] Cannot create hsr debugfs directory [ 105.795477][ T7223] input: syz1 as /devices/virtual/input/input9 [ 105.973787][ T7225] input: syz0 as /devices/virtual/input/input10 [ 106.075078][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.131078][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.157874][ T7229] netlink: 'syz.1.287': attribute type 10 has an invalid length. [ 106.160358][ T7229] netlink: 40 bytes leftover after parsing attributes in process `syz.1.287'. [ 106.194575][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.295063][ T12] bridge_slave_1: left allmulticast mode [ 106.297009][ T12] bridge_slave_1: left promiscuous mode [ 106.298908][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.302659][ T12] bridge_slave_0: left allmulticast mode [ 106.304440][ T12] bridge_slave_0: left promiscuous mode [ 106.306289][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.514869][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.520913][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.526307][ T12] bond0 (unregistering): Released all slaves [ 106.643930][ T5956] Bluetooth: hci4: command tx timeout [ 106.733374][ T7239] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 107.286283][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 107.301901][ T7199] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.309702][ T7199] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.317640][ T7199] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.321715][ T7199] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.379579][ T7259] team0: Port device geneve0 removed [ 107.392626][ T7199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.403321][ T7199] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.410148][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.412467][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.420492][ T7259] team0: Mode changed to "activebackup" [ 107.427130][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.429440][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.521868][ T7199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.540759][ T7199] veth0_vlan: entered promiscuous mode [ 107.545955][ T7199] veth1_vlan: entered promiscuous mode [ 107.558920][ T7199] veth0_macvtap: entered promiscuous mode [ 107.562762][ T7199] veth1_macvtap: entered promiscuous mode [ 107.570981][ T7199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.574268][ T7199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.577287][ T7199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.580472][ T7199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.583515][ T7199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.586668][ T7199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.590352][ T7199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.595142][ T7199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.598357][ T7199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.601276][ T7199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.604487][ T7199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.607376][ T7199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.611177][ T7199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.615936][ T7199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.620710][ T7199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.623500][ T7199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.626554][ T7199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.629238][ T7199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.692587][ T6017] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 107.864307][ T6017] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.867014][ T6017] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 107.870366][ T6017] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.873378][ T6017] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.876992][ T6017] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 107.880593][ T6017] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.885695][ T6017] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.892853][ T6017] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.895495][ T6017] usb 6-1: Product: syz [ 107.896820][ T6017] usb 6-1: Manufacturer: syz [ 107.900502][ T7259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.903833][ T6017] cdc_wdm 6-1:1.0: skipping garbage [ 107.905878][ T6017] cdc_wdm 6-1:1.0: skipping garbage [ 107.908192][ T6017] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 107.910077][ T6017] cdc_wdm 6-1:1.0: Unknown control protocol [ 108.038288][ T34] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 108.040238][ T34] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 108.111578][ T1251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.116535][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 108.116641][ T1251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.118596][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 108.124021][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 108.126150][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 108.128146][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 108.130173][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 108.132256][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 108.134291][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 108.136360][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 108.138387][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 108.140440][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 108.142470][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 108.144538][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 108.146553][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 108.148607][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 108.150636][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 108.152709][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 108.154749][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 108.178003][ T6017] usb 6-1: USB disconnect, device number 11 [ 108.178577][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 108.179805][ T7259] cdc_wdm 6-1:1.0: Tx URB error: -19 [ 108.184907][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.187332][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.196597][ T12] hsr_slave_0: left promiscuous mode [ 108.199985][ T12] hsr_slave_1: left promiscuous mode [ 108.202780][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.206031][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.209853][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.214016][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.243588][ T12] veth1_macvtap: left promiscuous mode [ 108.246145][ T12] veth0_macvtap: left promiscuous mode [ 108.248357][ T12] veth1_vlan: left promiscuous mode [ 108.250089][ T12] veth0_vlan: left promiscuous mode [ 108.785097][ T12] team0 (unregistering): Port device team_slave_1 removed [ 108.879069][ T12] team0 (unregistering): Port device team_slave_0 removed [ 109.290653][ T7259] tipc: Started in network mode [ 109.292399][ T7259] tipc: Node identity 080211000001, cluster identity 4711 [ 109.294707][ T7259] tipc: Enabled bearer , priority 23 [ 109.837719][ T7293] fuse: Bad value for 'fd' [ 110.092204][ T34] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 110.263705][ T34] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.266310][ T34] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 110.269351][ T34] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.272192][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 110.275453][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 110.280132][ T34] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 110.283157][ T34] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 110.285592][ T34] usb 6-1: Product: syz [ 110.286904][ T34] usb 6-1: Manufacturer: syz [ 110.292775][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 110.294461][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 110.297915][ T34] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 110.300200][ T34] cdc_wdm 6-1:1.0: Unknown control protocol [ 110.413350][ T24] tipc: Node number set to 134418688 [ 110.601714][ C1] wdm_int_callback: 99 callbacks suppressed [ 110.601728][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 110.605583][ C1] wdm_int_callback: 99 callbacks suppressed [ 110.605591][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 110.609417][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 110.611602][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 110.613672][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 110.615677][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 110.617691][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 110.619632][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 110.621917][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 110.623931][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 110.625957][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 110.627977][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 110.630020][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 110.632088][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 110.634025][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 110.636077][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 110.638156][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 110.640407][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 110.642746][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 110.644867][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 110.648868][ T29] usb 6-1: USB disconnect, device number 12 [ 110.650832][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 110.665626][ T7293] fuse: Bad value for 'fd' [ 111.224211][ T7316] FAULT_INJECTION: forcing a failure. [ 111.224211][ T7316] name failslab, interval 1, probability 0, space 0, times 0 [ 111.228086][ T7316] CPU: 1 UID: 0 PID: 7316 Comm: syz.3.311 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 111.228099][ T7316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.228105][ T7316] Call Trace: [ 111.228108][ T7316] [ 111.228112][ T7316] dump_stack_lvl+0x16c/0x1f0 [ 111.228129][ T7316] should_fail_ex+0x512/0x640 [ 111.228143][ T7316] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 111.228160][ T7316] should_failslab+0xc2/0x120 [ 111.228173][ T7316] __kmalloc_cache_noprof+0x6a/0x3e0 [ 111.228188][ T7316] ? device_add+0xccc/0x1a70 [ 111.228203][ T7316] device_add+0xccc/0x1a70 [ 111.228217][ T7316] ? __pfx_device_add+0x10/0x10 [ 111.228229][ T7316] ? rcu_is_watching+0x12/0xc0 [ 111.228239][ T7316] ? lockdep_init_map_type+0x5c/0x280 [ 111.228255][ T7316] input_register_device+0x7e8/0x1130 [ 111.228268][ T7316] ? input_ff_create+0x256/0x350 [ 111.228288][ T7316] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 111.228306][ T7316] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 111.228324][ T7316] ? find_held_lock+0x2b/0x80 [ 111.228332][ T7316] ? hook_file_ioctl_common+0x145/0x410 [ 111.228347][ T7316] ? __fput_deferred+0x320/0x370 [ 111.228370][ T7316] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.228386][ T7316] ? __pfx_uinput_compat_ioctl+0x10/0x10 [ 111.228401][ T7316] __ia32_compat_sys_ioctl+0x24c/0x360 [ 111.228417][ T7316] __do_fast_syscall_32+0x73/0x120 [ 111.228432][ T7316] do_fast_syscall_32+0x32/0x80 [ 111.228445][ T7316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.228457][ T7316] RIP: 0023:0xf705e579 [ 111.228466][ T7316] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 111.228475][ T7316] RSP: 002b:00000000f504e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 111.228484][ T7316] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 111.228490][ T7316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.228496][ T7316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.228501][ T7316] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 111.228506][ T7316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.228519][ T7316] [ 111.397962][ T7319] netlink: 'syz.3.312': attribute type 10 has an invalid length. [ 111.400413][ T7319] netlink: 40 bytes leftover after parsing attributes in process `syz.3.312'. [ 111.719451][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.347828][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.411186][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.494741][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.632255][ T46] bridge_slave_1: left allmulticast mode [ 112.635224][ T46] bridge_slave_1: left promiscuous mode [ 112.637659][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.664555][ T46] bridge_slave_0: left allmulticast mode [ 112.666676][ T46] bridge_slave_0: left promiscuous mode [ 112.668749][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.800325][ T5960] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.805278][ T5960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.809497][ T5960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.812159][ T5960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.814605][ T5960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.899937][ T7341] fuse: Bad value for 'user_id' [ 112.901643][ T7341] fuse: Bad value for 'user_id' [ 112.927694][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.932665][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.936654][ T46] bond0 (unregistering): Released all slaves [ 113.121453][ T7338] chnl_net:caif_netlink_parms(): no params data found [ 113.240933][ T7338] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.243315][ T7338] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.245555][ T7338] bridge_slave_0: entered allmulticast mode [ 113.249932][ T7338] bridge_slave_0: entered promiscuous mode [ 113.270126][ T7338] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.272790][ T7338] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.275908][ T7338] bridge_slave_1: entered allmulticast mode [ 113.279667][ T7338] bridge_slave_1: entered promiscuous mode [ 113.314636][ T7338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.319022][ T7338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.357271][ T7338] team0: Port device team_slave_0 added [ 113.366737][ T7338] team0: Port device team_slave_1 added [ 113.453875][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.456801][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.468083][ T7338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.474037][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.476878][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.487653][ T7338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.552398][ T7338] hsr_slave_0: entered promiscuous mode [ 113.554592][ T7338] hsr_slave_1: entered promiscuous mode [ 113.556621][ T7338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.559055][ T7338] Cannot create hsr debugfs directory [ 113.661018][ T46] hsr_slave_0: left promiscuous mode [ 113.666549][ T46] hsr_slave_1: left promiscuous mode [ 113.668524][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.670831][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.674338][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.677280][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.702892][ T46] veth1_macvtap: left promiscuous mode [ 113.704778][ T46] veth0_macvtap: left promiscuous mode [ 113.706623][ T46] veth1_vlan: left promiscuous mode [ 113.708936][ T46] veth0_vlan: left promiscuous mode [ 114.197856][ T7375] blktrace: Concurrent blktraces are not allowed on sg0 [ 114.235971][ T46] team0 (unregistering): Port device team_slave_1 removed [ 114.288595][ T46] team0 (unregistering): Port device team_slave_0 removed [ 114.962424][ T5960] Bluetooth: hci2: command tx timeout [ 115.064998][ T7374] netlink: 830 bytes leftover after parsing attributes in process `syz.0.320'. [ 115.209130][ T7392] netlink: 'syz.0.323': attribute type 10 has an invalid length. [ 115.212282][ T7392] netlink: 40 bytes leftover after parsing attributes in process `syz.0.323'. [ 115.244453][ T7392] team0: Port device geneve0 added [ 116.087660][ T7338] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 116.096313][ T7338] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 116.108682][ T7338] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 116.124569][ T7338] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 116.165891][ T7338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.175161][ T7338] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.180208][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.182487][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.189716][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.192033][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.309457][ T7338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.339075][ T7338] veth0_vlan: entered promiscuous mode [ 116.343804][ T7338] veth1_vlan: entered promiscuous mode [ 116.369196][ T7338] veth0_macvtap: entered promiscuous mode [ 116.375986][ T7338] veth1_macvtap: entered promiscuous mode [ 116.388077][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.391301][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.402123][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.405371][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.409928][ T7338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.416508][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.419762][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.423886][ T7338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.427114][ T7338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.430837][ T7338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.450438][ T7338] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.453240][ T7338] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.456173][ T7338] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.458898][ T7338] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.494660][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.497146][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.519133][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.521660][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.719322][ T7445] FAULT_INJECTION: forcing a failure. [ 116.719322][ T7445] name failslab, interval 1, probability 0, space 0, times 0 [ 116.723621][ T7445] CPU: 2 UID: 0 PID: 7445 Comm: syz.1.328 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 116.723634][ T7445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.723641][ T7445] Call Trace: [ 116.723645][ T7445] [ 116.723649][ T7445] dump_stack_lvl+0x16c/0x1f0 [ 116.723666][ T7445] should_fail_ex+0x512/0x640 [ 116.723679][ T7445] ? __kmalloc_noprof+0xbf/0x510 [ 116.723691][ T7445] ? constrain_params_by_rules+0x175/0xca0 [ 116.723705][ T7445] should_failslab+0xc2/0x120 [ 116.723717][ T7445] __kmalloc_noprof+0xd2/0x510 [ 116.723726][ T7445] ? kasan_quarantine_put+0x10a/0x240 [ 116.723735][ T7445] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.723751][ T7445] constrain_params_by_rules+0x175/0xca0 [ 116.723764][ T7445] ? constrain_params_by_rules+0xa09/0xca0 [ 116.723780][ T7445] ? constrain_params_by_rules+0xa0e/0xca0 [ 116.723795][ T7445] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 116.723812][ T7445] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 116.723829][ T7445] ? snd_pcm_oss_change_params_locked+0x1398/0x3b40 [ 116.723843][ T7445] ? snd_pcm_oss_make_ready+0xe6/0x1b0 [ 116.723857][ T7445] ? snd_interval_refine+0x2fa/0x580 [ 116.723869][ T7445] snd_pcm_hw_refine+0x7de/0xad0 [ 116.723885][ T7445] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 116.723901][ T7445] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 116.723919][ T7445] snd_pcm_hw_param_first+0x334/0x6f0 [ 116.723936][ T7445] snd_pcm_hw_param_near.constprop.0+0x702/0x8e0 [ 116.723951][ T7445] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 116.723966][ T7445] ? __asan_memset+0x23/0x50 [ 116.723979][ T7445] ? calc_src_frames.isra.0+0x187/0x1d0 [ 116.723996][ T7445] snd_pcm_oss_change_params_locked+0x1398/0x3b40 [ 116.724042][ T7445] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 116.724066][ T7445] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 116.724081][ T7445] snd_pcm_oss_sync+0x1de/0x840 [ 116.724096][ T7445] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 116.724109][ T7445] snd_pcm_oss_release+0x28b/0x310 [ 116.724124][ T7445] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 116.724137][ T7445] __fput+0x3ff/0xb70 [ 116.724151][ T7445] fput_close_sync+0x118/0x260 [ 116.724164][ T7445] ? __pfx_fput_close_sync+0x10/0x10 [ 116.724175][ T7445] ? dnotify_flush+0x79/0x4c0 [ 116.724188][ T7445] __ia32_sys_close+0x8b/0x120 [ 116.724201][ T7445] __do_fast_syscall_32+0x73/0x120 [ 116.724216][ T7445] do_fast_syscall_32+0x32/0x80 [ 116.724233][ T7445] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.724248][ T7445] RIP: 0023:0xf703e579 [ 116.724260][ T7445] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 116.724273][ T7445] RSP: 002b:00000000f502e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000006 [ 116.724289][ T7445] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 116.724300][ T7445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.724309][ T7445] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.724317][ T7445] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 116.724327][ T7445] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.724350][ T7445] [ 117.446476][ T7460] netlink: 'syz.0.332': attribute type 1 has an invalid length. [ 117.449022][ T7460] netlink: 228 bytes leftover after parsing attributes in process `syz.0.332'. [ 117.579004][ T7460] vlan0: entered promiscuous mode [ 117.588420][ T7460] team0: Port device vlan0 added [ 117.828795][ T7470] Device name cannot be null; rc = [-22] [ 118.809565][ T7491] FAULT_INJECTION: forcing a failure. [ 118.809565][ T7491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.813674][ T7491] CPU: 3 UID: 0 PID: 7491 Comm: syz.3.342 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 118.813688][ T7491] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.813694][ T7491] Call Trace: [ 118.813697][ T7491] [ 118.813701][ T7491] dump_stack_lvl+0x16c/0x1f0 [ 118.813718][ T7491] should_fail_ex+0x512/0x640 [ 118.813734][ T7491] _copy_from_user+0x2e/0xd0 [ 118.813749][ T7491] do_compat_sigaltstack+0xf6/0x310 [ 118.813763][ T7491] ? __pfx_do_compat_sigaltstack+0x10/0x10 [ 118.813776][ T7491] ? ia32_restore_sigcontext+0x451/0x630 [ 118.813786][ T7491] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 118.813798][ T7491] ? rcu_is_watching+0x12/0xc0 [ 118.813807][ T7491] ? _raw_spin_unlock_irq+0x23/0x50 [ 118.813819][ T7491] ? lockdep_hardirqs_on+0x7c/0x110 [ 118.813833][ T7491] compat_restore_altstack+0x17/0x40 [ 118.813847][ T7491] __do_compat_sys_rt_sigreturn+0x195/0x1f0 [ 118.813857][ T7491] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 118.813868][ T7491] ? rcu_is_watching+0x12/0xc0 [ 118.813878][ T7491] do_int80_emulation+0x104/0x200 [ 118.813893][ T7491] asm_int80_emulation+0x1a/0x20 [ 118.813903][ T7491] RIP: 0023:0xf705e577 [ 118.813910][ T7491] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 118.813920][ T7491] RSP: 002b:00000000f504e55c EFLAGS: 00000296 [ 118.813928][ T7491] RAX: 0000000000000091 RBX: 0000000000000006 RCX: 0000000080000300 [ 118.813934][ T7491] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.813940][ T7491] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.813945][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.813950][ T7491] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.813962][ T7491] [ 118.947358][ T7495] netlink: 'syz.1.340': attribute type 10 has an invalid length. [ 118.949819][ T7495] netlink: 40 bytes leftover after parsing attributes in process `syz.1.340'. [ 118.968007][ T7495] team0: Port device geneve0 added [ 119.331759][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.616021][ T7505] netlink: 14 bytes leftover after parsing attributes in process `syz.3.346'. [ 120.630721][ T7505] syz.3.346 (7505) used greatest stack depth: 19048 bytes left [ 120.703562][ T5956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.706851][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.709509][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.712629][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.715441][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.806012][ T7512] chnl_net:caif_netlink_parms(): no params data found [ 120.865975][ T7512] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.868308][ T7512] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.870600][ T7512] bridge_slave_0: entered allmulticast mode [ 120.873374][ T7512] bridge_slave_0: entered promiscuous mode [ 120.877134][ T7512] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.879721][ T7512] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.882776][ T7512] bridge_slave_1: entered allmulticast mode [ 120.886427][ T7512] bridge_slave_1: entered promiscuous mode [ 120.940998][ T7512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.945347][ T7512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.981658][ T7512] team0: Port device team_slave_0 added [ 120.986958][ T7512] team0: Port device team_slave_1 added [ 121.031576][ T7512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.034395][ T7512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.046062][ T7512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.051571][ T7512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.054337][ T7512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.063499][ T7512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.098636][ T7512] hsr_slave_0: entered promiscuous mode [ 121.100864][ T7512] hsr_slave_1: entered promiscuous mode [ 121.103077][ T7512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.105419][ T7512] Cannot create hsr debugfs directory [ 121.134079][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.211037][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.288033][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.399450][ T64] bridge_slave_1: left allmulticast mode [ 121.401315][ T64] bridge_slave_1: left promiscuous mode [ 121.403275][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.407171][ T64] bridge_slave_0: left allmulticast mode [ 121.408997][ T64] bridge_slave_0: left promiscuous mode [ 121.410808][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.623990][ T7535] FAULT_INJECTION: forcing a failure. [ 121.623990][ T7535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.628255][ T7535] CPU: 2 UID: 0 PID: 7535 Comm: syz.3.353 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 121.628270][ T7535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.628276][ T7535] Call Trace: [ 121.628280][ T7535] [ 121.628284][ T7535] dump_stack_lvl+0x16c/0x1f0 [ 121.628302][ T7535] should_fail_ex+0x512/0x640 [ 121.628319][ T7535] _copy_to_user+0x32/0xd0 [ 121.628334][ T7535] compat_do_ebt_get_ctl+0x27c/0x5a0 [ 121.628349][ T7535] ? __pfx_compat_do_ebt_get_ctl+0x10/0x10 [ 121.628361][ T7535] ? trace_cap_capable+0x18d/0x200 [ 121.628374][ T7535] ? bpf_lsm_capable+0x9/0x10 [ 121.628384][ T7535] ? security_capable+0x7e/0x260 [ 121.628401][ T7535] do_ebt_get_ctl+0x2c4/0x6d0 [ 121.628414][ T7535] ? __pfx_do_ebt_get_ctl+0x10/0x10 [ 121.628434][ T7535] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 121.628448][ T7535] nf_getsockopt+0x79/0xe0 [ 121.628460][ T7535] ip_getsockopt+0x18c/0x1e0 [ 121.628475][ T7535] ? __pfx_ip_getsockopt+0x10/0x10 [ 121.628492][ T7535] tcp_getsockopt+0x9e/0x100 [ 121.628510][ T7535] smc_getsockopt+0x162/0x370 [ 121.628519][ T7535] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 121.628533][ T7535] ? __pfx_smc_getsockopt+0x10/0x10 [ 121.628541][ T7535] ? find_held_lock+0x2b/0x80 [ 121.628553][ T7535] ? __pfx_smc_getsockopt+0x10/0x10 [ 121.628563][ T7535] do_sock_getsockopt+0x3fc/0x800 [ 121.628578][ T7535] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 121.628590][ T7535] ? __fget_files+0x204/0x3c0 [ 121.628612][ T7535] __sys_getsockopt+0x123/0x1a0 [ 121.628625][ T7535] __ia32_sys_getsockopt+0xbc/0x160 [ 121.628634][ T7535] ? lockdep_hardirqs_on+0x7c/0x110 [ 121.628647][ T7535] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 121.628661][ T7535] __do_fast_syscall_32+0x73/0x120 [ 121.628676][ T7535] do_fast_syscall_32+0x32/0x80 [ 121.628689][ T7535] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.628701][ T7535] RIP: 0023:0xf705e579 [ 121.628710][ T7535] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 121.628719][ T7535] RSP: 002b:00000000f504e55c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 121.628729][ T7535] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 121.628735][ T7535] RDX: 0000000000000082 RSI: 0000000080000240 RDI: 0000000080000340 [ 121.628741][ T7535] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.628746][ T7535] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 121.628752][ T7535] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.628764][ T7535] [ 121.743651][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.748111][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.751830][ T64] bond0 (unregistering): Released all slaves [ 121.814531][ T5984] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 121.940346][ T7536] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 121.942461][ T7536] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.945610][ T7536] vhci_hcd vhci_hcd.0: Device attached [ 121.988580][ T5984] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 121.991971][ T5984] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 122.000798][ T5984] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 122.005819][ T5984] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 122.009770][ T5984] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 122.016718][ T5984] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 122.019983][ T5984] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 122.026919][ T5984] usb 6-1: Product: syz [ 122.028352][ T5984] usb 6-1: Manufacturer: syz [ 122.039610][ T5984] cdc_wdm 6-1:1.0: skipping garbage [ 122.041311][ T5984] cdc_wdm 6-1:1.0: skipping garbage [ 122.045066][ T5984] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 122.046953][ T5984] cdc_wdm 6-1:1.0: Unknown control protocol [ 122.103731][ T7553] FAULT_INJECTION: forcing a failure. [ 122.103731][ T7553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.109029][ T7553] CPU: 1 UID: 0 PID: 7553 Comm: syz.3.356 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 122.109054][ T7553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 122.109060][ T7553] Call Trace: [ 122.109063][ T7553] [ 122.109067][ T7553] dump_stack_lvl+0x16c/0x1f0 [ 122.109085][ T7553] should_fail_ex+0x512/0x640 [ 122.109101][ T7553] _copy_to_user+0x32/0xd0 [ 122.109117][ T7553] simple_read_from_buffer+0xcb/0x170 [ 122.109133][ T7553] proc_fail_nth_read+0x197/0x270 [ 122.109148][ T7553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.109162][ T7553] ? rw_verify_area+0xcf/0x680 [ 122.109176][ T7553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.109189][ T7553] vfs_read+0x1de/0xc70 [ 122.109200][ T7553] ? __pfx___mutex_lock+0x10/0x10 [ 122.109213][ T7553] ? __pfx_vfs_read+0x10/0x10 [ 122.109225][ T7553] ? __fget_files+0x20e/0x3c0 [ 122.109248][ T7553] ksys_read+0x12a/0x240 [ 122.109257][ T7553] ? __pfx_ksys_read+0x10/0x10 [ 122.109265][ T7553] ? rcu_is_watching+0x12/0xc0 [ 122.109275][ T7553] ? rcu_is_watching+0x12/0xc0 [ 122.109286][ T7553] __do_fast_syscall_32+0x73/0x120 [ 122.109301][ T7553] do_fast_syscall_32+0x32/0x80 [ 122.109314][ T7553] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.109327][ T7553] RIP: 0023:0xf705e579 [ 122.109335][ T7553] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 122.109344][ T7553] RSP: 002b:00000000f502d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 122.109354][ T7553] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f502d620 [ 122.109360][ T7553] RDX: 000000000000000f RSI: 00000000f73c2ff4 RDI: 0000000000000000 [ 122.109365][ T7553] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 122.109371][ T7553] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 122.109376][ T7553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.109389][ T7553] [ 122.185872][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.222277][ T835] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 122.270834][ T64] hsr_slave_0: left promiscuous mode [ 122.273053][ T64] hsr_slave_1: left promiscuous mode [ 122.274996][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.278307][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.281279][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.284805][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.323756][ T64] veth1_macvtap: left promiscuous mode [ 122.326076][ T64] veth0_macvtap: left promiscuous mode [ 122.328395][ T64] veth1_vlan: left promiscuous mode [ 122.330553][ T64] veth0_vlan: left promiscuous mode [ 122.341770][ C3] wdm_int_callback: 7 callbacks suppressed [ 122.341783][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 122.345670][ C3] wdm_int_callback: 7 callbacks suppressed [ 122.345678][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 122.350553][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 122.353366][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 122.355990][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 122.358668][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 122.361690][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 122.364513][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 122.367412][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 122.370183][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 122.373173][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 122.375981][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 122.378787][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 122.381551][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 122.386473][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 122.388893][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 122.391065][ T7545] vhci_hcd: connection reset by peer [ 122.391616][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 122.396484][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 122.399589][ T5984] usb 6-1: USB disconnect, device number 13 [ 122.402363][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 122.402380][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 122.402393][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 122.420045][ T1139] vhci_hcd: stop threads [ 122.421795][ T1139] vhci_hcd: release socket [ 122.426048][ T1139] vhci_hcd: disconnect device [ 122.812472][ T5956] Bluetooth: hci2: command tx timeout [ 122.934956][ T64] team0 (unregistering): Port device team_slave_1 removed [ 123.030049][ T64] team0 (unregistering): Port device team_slave_0 removed [ 123.554661][ T7512] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 123.558741][ T7512] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 123.564856][ T7512] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.570952][ T7512] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 123.619857][ T7512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.639181][ T7512] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.663613][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.666748][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.675825][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.678076][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.778524][ T7512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.812754][ T7512] veth0_vlan: entered promiscuous mode [ 123.817977][ T7512] veth1_vlan: entered promiscuous mode [ 123.833489][ T7512] veth0_macvtap: entered promiscuous mode [ 123.838505][ T7512] veth1_macvtap: entered promiscuous mode [ 123.849904][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.853869][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.856895][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.860177][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.866194][ T7512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.877072][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.880989][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.884556][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.887848][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.888606][ T7512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.895313][ T7512] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.898035][ T7512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.901425][ T7512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.904995][ T7512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.945997][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.949313][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.966144][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.968614][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.725293][ T7615] lo speed is unknown, defaulting to 1000 [ 124.729512][ T7615] lo speed is unknown, defaulting to 1000 [ 124.733650][ T7615] lo speed is unknown, defaulting to 1000 [ 124.810885][ T7615] infiniband syz0: set active [ 124.813997][ T6671] lo speed is unknown, defaulting to 1000 [ 124.816125][ T7615] infiniband syz0: added lo [ 124.839918][ T7615] RDS/IB: syz0: added [ 124.841678][ T7615] smc: adding ib device syz0 with port count 1 [ 124.844095][ T7615] smc: ib device syz0 port 1 has pnetid [ 124.858898][ T57] lo speed is unknown, defaulting to 1000 [ 124.864279][ T7615] lo speed is unknown, defaulting to 1000 [ 124.996642][ T7615] lo speed is unknown, defaulting to 1000 [ 125.074754][ T7615] lo speed is unknown, defaulting to 1000 [ 125.174497][ T7615] lo speed is unknown, defaulting to 1000 [ 125.340421][ T1139] tipc: Subscription rejected, illegal request [ 126.326793][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.432163][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 126.584624][ T24] usb 6-1: config 0 has no interfaces? [ 126.587823][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 126.590633][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.593385][ T24] usb 6-1: Product: syz [ 126.594700][ T24] usb 6-1: Manufacturer: syz [ 126.596159][ T24] usb 6-1: SerialNumber: syz [ 126.599133][ T24] usb 6-1: config 0 descriptor?? [ 126.810678][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.377'. [ 127.352441][ T835] vhci_hcd: vhci_device speed not set [ 127.409996][ T5960] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.421960][ T5960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.425986][ T5960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.429908][ T5960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.433045][ T5960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.450319][ T7689] lo speed is unknown, defaulting to 1000 [ 127.665934][ T7689] chnl_net:caif_netlink_parms(): no params data found [ 127.750628][ T7689] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.753212][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.755770][ T7689] bridge_slave_0: entered allmulticast mode [ 127.758521][ T7689] bridge_slave_0: entered promiscuous mode [ 127.761690][ T7689] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.765179][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.767421][ T7689] bridge_slave_1: entered allmulticast mode [ 127.769977][ T7689] bridge_slave_1: entered promiscuous mode [ 127.801777][ T7689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.806364][ T7689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.846624][ T7689] team0: Port device team_slave_0 added [ 127.854593][ T7689] team0: Port device team_slave_1 added [ 127.916500][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.919664][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.931743][ T7689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.936105][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.938344][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.946572][ T7689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.985051][ T7689] hsr_slave_0: entered promiscuous mode [ 127.987277][ T7689] hsr_slave_1: entered promiscuous mode [ 127.989405][ T7689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.991943][ T7689] Cannot create hsr debugfs directory [ 128.369219][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.467290][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.581646][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.728404][ T12] bridge_slave_1: left allmulticast mode [ 128.730350][ T12] bridge_slave_1: left promiscuous mode [ 128.733014][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.737271][ T12] bridge_slave_0: left allmulticast mode [ 128.739117][ T12] bridge_slave_0: left promiscuous mode [ 128.741023][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.944615][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.948729][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.952518][ T12] bond0 (unregistering): Released all slaves [ 129.282565][ T5984] usb 6-1: USB disconnect, device number 14 [ 129.416695][ T12] hsr_slave_0: left promiscuous mode [ 129.419845][ T12] hsr_slave_1: left promiscuous mode [ 129.424969][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.428027][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.431790][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.435984][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.456036][ T5960] Bluetooth: hci2: command tx timeout [ 129.474039][ T12] veth1_macvtap: left promiscuous mode [ 129.475841][ T12] veth0_macvtap: left promiscuous mode [ 129.477642][ T12] veth1_vlan: left promiscuous mode [ 129.479336][ T12] veth0_vlan: left promiscuous mode [ 129.824320][ T7761] af_packet: tpacket_rcv: packet too big, clamped from 3 to 4294967272. macoff=96 [ 130.341111][ T12] team0 (unregistering): Port device team_slave_1 removed [ 130.460839][ T12] team0 (unregistering): Port device team_slave_0 removed [ 131.215579][ T7689] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 131.220570][ T7689] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 131.236433][ T7689] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 131.246501][ T7689] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 131.343259][ T7689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.357382][ T7689] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.365362][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.367652][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.374259][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.376597][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.532160][ T5960] Bluetooth: hci2: command tx timeout [ 131.593315][ T7789] lo speed is unknown, defaulting to 1000 [ 131.726906][ T7689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.749759][ T7689] veth0_vlan: entered promiscuous mode [ 131.755604][ T7689] veth1_vlan: entered promiscuous mode [ 131.770133][ T7689] veth0_macvtap: entered promiscuous mode [ 131.774191][ T7689] veth1_macvtap: entered promiscuous mode [ 131.783950][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.787516][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.791253][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.802681][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.806492][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.818779][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.822060][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.825430][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.828712][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.832902][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.847053][ T7689] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.849782][ T7689] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.852871][ T7689] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.855589][ T7689] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.898090][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.900706][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.911528][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.914471][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.175171][ T7799] warning: `syz.0.399' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.244345][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.246362][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.919924][ T106] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.128016][ T5956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.134696][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.137835][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.141105][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.144609][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.165503][ T7836] lo speed is unknown, defaulting to 1000 [ 135.420129][ T7836] chnl_net:caif_netlink_parms(): no params data found [ 135.624421][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.627250][ T7836] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.630022][ T7836] bridge_slave_0: entered allmulticast mode [ 135.636728][ T7836] bridge_slave_0: entered promiscuous mode [ 135.646527][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.651300][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.663969][ T7836] bridge_slave_1: entered allmulticast mode [ 135.666574][ T7836] bridge_slave_1: entered promiscuous mode [ 135.697937][ T7836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.702466][ T7836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.735950][ T7836] team0: Port device team_slave_0 added [ 135.739924][ T7836] team0: Port device team_slave_1 added [ 135.771287][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.774990][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.782881][ T7836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.786954][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.789121][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.801194][ T7836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.836554][ T7836] hsr_slave_0: entered promiscuous mode [ 135.839209][ T7836] hsr_slave_1: entered promiscuous mode [ 135.841708][ T7836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.844326][ T7836] Cannot create hsr debugfs directory [ 135.894154][ T106] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.991339][ T106] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.103599][ T106] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.124316][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 136.127336][ T7862] FAULT_INJECTION: forcing a failure. [ 136.127336][ T7862] name failslab, interval 1, probability 0, space 0, times 0 [ 136.131348][ T7862] CPU: 2 UID: 0 PID: 7862 Comm: syz.3.412 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 136.131372][ T7862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.131378][ T7862] Call Trace: [ 136.131382][ T7862] [ 136.131386][ T7862] dump_stack_lvl+0x16c/0x1f0 [ 136.131404][ T7862] should_fail_ex+0x512/0x640 [ 136.131418][ T7862] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 136.131436][ T7862] should_failslab+0xc2/0x120 [ 136.131448][ T7862] __kmalloc_cache_noprof+0x6a/0x3e0 [ 136.131464][ T7862] ? __asan_memset+0x23/0x50 [ 136.131477][ T7862] ? alloc_netdev_mqs+0xece/0x1570 [ 136.131489][ T7862] ? __xdp_rxq_info_reg+0x14e/0x2d0 [ 136.131503][ T7862] alloc_netdev_mqs+0xece/0x1570 [ 136.131517][ T7862] rtnl_create_link+0xc10/0xfa0 [ 136.131531][ T7862] rtnl_newlink+0xb69/0x2000 [ 136.131546][ T7862] ? __pfx_rtnl_newlink+0x10/0x10 [ 136.131563][ T7862] ? kfree_skbmem+0x1a4/0x1f0 [ 136.131581][ T7862] ? rcu_is_watching+0x12/0xc0 [ 136.131591][ T7862] ? trace_cap_capable+0x18d/0x200 [ 136.131604][ T7862] ? find_held_lock+0x2b/0x80 [ 136.131613][ T7862] ? __pfx_rtnl_newlink+0x10/0x10 [ 136.131623][ T7862] ? __pfx_rtnl_newlink+0x10/0x10 [ 136.131633][ T7862] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 136.131644][ T7862] ? __pfx_rtnl_newlink+0x10/0x10 [ 136.131656][ T7862] rtnetlink_rcv_msg+0x95b/0xe90 [ 136.131668][ T7862] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.131682][ T7862] ? __lock_acquire+0xaa4/0x1ba0 [ 136.131697][ T7862] netlink_rcv_skb+0x16a/0x440 [ 136.131710][ T7862] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.131722][ T7862] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.131733][ T7862] ? find_held_lock+0x2b/0x80 [ 136.131753][ T7862] netlink_unicast+0x53a/0x7f0 [ 136.131766][ T7862] ? __pfx_netlink_unicast+0x10/0x10 [ 136.131782][ T7862] netlink_sendmsg+0x8d1/0xdd0 [ 136.131796][ T7862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.131808][ T7862] ? __import_iovec+0x1c8/0x660 [ 136.131840][ T7862] ____sys_sendmsg+0xa95/0xc70 [ 136.131857][ T7862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.131870][ T7862] ? get_compat_msghdr+0x11a/0x170 [ 136.131886][ T7862] ___sys_sendmsg+0x134/0x1d0 [ 136.131898][ T7862] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.131926][ T7862] __sys_sendmsg+0x16d/0x220 [ 136.131937][ T7862] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.131952][ T7862] ? rcu_is_watching+0x12/0xc0 [ 136.131961][ T7862] ? rcu_is_watching+0x12/0xc0 [ 136.131972][ T7862] __do_fast_syscall_32+0x73/0x120 [ 136.131986][ T7862] do_fast_syscall_32+0x32/0x80 [ 136.132000][ T7862] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.132013][ T7862] RIP: 0023:0xf705e579 [ 136.132021][ T7862] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 136.132035][ T7862] RSP: 002b:00000000f502d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 136.132044][ T7862] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000040 [ 136.132051][ T7862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.132056][ T7862] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.132061][ T7862] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 136.132067][ T7862] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.132090][ T7862] [ 136.235979][ C2] vkms_vblank_simulate: vblank timer overrun [ 136.349600][ T106] bridge_slave_1: left allmulticast mode [ 136.351429][ T106] bridge_slave_1: left promiscuous mode [ 136.354894][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.358425][ T106] bridge_slave_0: left allmulticast mode [ 136.360850][ T106] bridge_slave_0: left promiscuous mode [ 136.364983][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.773509][ T106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.777929][ T106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.781491][ T106] bond0 (unregistering): Released all slaves [ 136.798089][ T7874] FAULT_INJECTION: forcing a failure. [ 136.798089][ T7874] name failslab, interval 1, probability 0, space 0, times 0 [ 136.802495][ T7874] CPU: 1 UID: 0 PID: 7874 Comm: syz.1.414 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 136.802509][ T7874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.802516][ T7874] Call Trace: [ 136.802519][ T7874] [ 136.802523][ T7874] dump_stack_lvl+0x16c/0x1f0 [ 136.802541][ T7874] should_fail_ex+0x512/0x640 [ 136.802555][ T7874] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 136.802581][ T7874] should_failslab+0xc2/0x120 [ 136.802593][ T7874] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 136.802604][ T7874] ? sock_alloc_inode+0x25/0x1c0 [ 136.802631][ T7874] ? __pfx_sock_alloc_inode+0x10/0x10 [ 136.802643][ T7874] sock_alloc_inode+0x25/0x1c0 [ 136.802655][ T7874] alloc_inode+0x61/0x240 [ 136.802668][ T7874] sock_alloc+0x40/0x280 [ 136.802680][ T7874] __sock_create+0xc1/0x8d0 [ 136.802696][ T7874] start_sync_thread+0x155e/0x28b0 [ 136.802708][ T7874] ? __pfx_sync_thread_backup+0x10/0x10 [ 136.802719][ T7874] ? __lock_acquire+0xaa4/0x1ba0 [ 136.802735][ T7874] ? __pfx_start_sync_thread+0x10/0x10 [ 136.802749][ T7874] ? find_held_lock+0x2b/0x80 [ 136.802758][ T7874] ? __might_fault+0xe3/0x190 [ 136.802774][ T7874] ? do_ip_vs_set_ctl+0x451/0x11d0 [ 136.802791][ T7874] do_ip_vs_set_ctl+0x451/0x11d0 [ 136.802803][ T7874] ? __lock_acquire+0xaa4/0x1ba0 [ 136.802819][ T7874] ? __mutex_trylock_common+0x80/0x250 [ 136.802832][ T7874] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 136.802848][ T7874] ? __pfx___mutex_trylock_common+0x10/0x10 [ 136.802864][ T7874] ? __pfx___might_resched+0x10/0x10 [ 136.802881][ T7874] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 136.802895][ T7874] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 136.802921][ T7874] ? nf_setsockopt+0x8a/0xf0 [ 136.802931][ T7874] nf_setsockopt+0x8a/0xf0 [ 136.802943][ T7874] ip_setsockopt+0xcb/0xf0 [ 136.802958][ T7874] tcp_setsockopt+0xa4/0x100 [ 136.802975][ T7874] smc_setsockopt+0x1b3/0xa00 [ 136.802984][ T7874] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 136.802999][ T7874] ? __pfx_smc_setsockopt+0x10/0x10 [ 136.803008][ T7874] ? find_held_lock+0x2b/0x80 [ 136.803023][ T7874] ? __pfx_smc_setsockopt+0x10/0x10 [ 136.803033][ T7874] do_sock_setsockopt+0x221/0x470 [ 136.803045][ T7874] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 136.803067][ T7874] __sys_setsockopt+0x120/0x1a0 [ 136.803079][ T7874] __ia32_sys_setsockopt+0xbc/0x160 [ 136.803091][ T7874] ? lockdep_hardirqs_on+0x7c/0x110 [ 136.803104][ T7874] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 136.803117][ T7874] __do_fast_syscall_32+0x73/0x120 [ 136.803132][ T7874] do_fast_syscall_32+0x32/0x80 [ 136.803146][ T7874] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.803158][ T7874] RIP: 0023:0xf703e579 [ 136.803166][ T7874] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 136.803176][ T7874] RSP: 002b:00000000f4fec55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 136.803185][ T7874] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 136.803191][ T7874] RDX: 000000000000048b RSI: 0000000080000000 RDI: 0000000000000018 [ 136.803199][ T7874] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.803205][ T7874] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 136.803210][ T7874] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.803227][ T7874] [ 136.803304][ T7874] socket: no more sockets [ 136.911725][ T7874] IPVS: Error during creation of socket; terminating [ 137.202339][ T5956] Bluetooth: hci2: command tx timeout [ 137.247472][ T7836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 137.255020][ T7836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 137.261681][ T7836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 137.265985][ T7836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 137.440021][ T106] hsr_slave_0: left promiscuous mode [ 137.446139][ T106] hsr_slave_1: left promiscuous mode [ 137.453166][ T106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.456074][ T106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.477327][ T106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.480278][ T106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.508233][ T106] veth1_macvtap: left promiscuous mode [ 137.510034][ T106] veth0_macvtap: left promiscuous mode [ 137.511853][ T106] veth1_vlan: left promiscuous mode [ 137.514263][ T106] veth0_vlan: left promiscuous mode [ 138.395466][ T106] team0 (unregistering): Port device team_slave_1 removed [ 138.466091][ T106] team0 (unregistering): Port device team_slave_0 removed [ 138.774808][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 138.774819][ T40] audit: type=1326 audit(1746342623.302:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7910 comm="syz.3.422" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x0 [ 139.090645][ T7836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.100972][ T7836] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.106025][ T7914] random: crng reseeded on system resumption [ 139.106213][ T1251] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.110691][ T1251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.125038][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.127347][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.284280][ T5956] Bluetooth: hci2: command tx timeout [ 139.313062][ T7836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.349234][ T7836] veth0_vlan: entered promiscuous mode [ 139.358547][ T7836] veth1_vlan: entered promiscuous mode [ 139.374751][ T7836] veth0_macvtap: entered promiscuous mode [ 139.378387][ T7836] veth1_macvtap: entered promiscuous mode [ 139.389127][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.394249][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.397374][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.400615][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.406902][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.410800][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.415773][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.418844][ T7836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.422163][ T7836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.427046][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.446454][ T7836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.449267][ T7836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.452029][ T7836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.455360][ T7836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.515746][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.526206][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.542432][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.545914][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.136048][ T40] audit: type=1326 audit(1746342625.662:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 141.142855][ T40] audit: type=1326 audit(1746342625.662:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 141.149355][ T40] audit: type=1326 audit(1746342625.662:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 141.156351][ T40] audit: type=1326 audit(1746342625.662:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 141.163395][ T40] audit: type=1326 audit(1746342625.662:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 141.169858][ T40] audit: type=1326 audit(1746342625.662:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 141.176243][ T40] audit: type=1326 audit(1746342625.662:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 141.182619][ T40] audit: type=1326 audit(1746342625.672:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 141.188962][ T40] audit: type=1326 audit(1746342625.672:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 141.362235][ T5960] Bluetooth: hci2: command tx timeout [ 141.832204][ T6737] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 141.993988][ T6737] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.997103][ T6737] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.001173][ T6737] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.004294][ T6737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.297667][ T6737] usb 5-1: usb_control_msg returned -32 [ 142.299446][ T6737] usbtmc 5-1:16.0: can't read capabilities [ 142.752240][ T6017] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 142.767558][ T956] usb 5-1: USB disconnect, device number 8 [ 142.914250][ T6017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.919021][ T6017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.923354][ T6017] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.928813][ T6017] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.933151][ T6017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.939061][ T6017] usb 6-1: config 0 descriptor?? [ 143.351113][ T6017] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 143.360774][ T6017] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 143.626969][ T6017] usb 6-1: USB disconnect, device number 15 [ 144.672199][ T7723] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 144.836459][ T7723] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 144.840118][ T7723] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 144.844676][ T7723] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 144.848854][ T7723] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 144.853670][ T7723] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 144.859537][ T7723] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 144.863443][ T7723] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 144.866685][ T7723] usb 8-1: Product: syz [ 144.868440][ T7723] usb 8-1: Manufacturer: syz [ 144.875253][ T7723] cdc_wdm 8-1:1.0: skipping garbage [ 144.877597][ T7723] cdc_wdm 8-1:1.0: skipping garbage [ 144.882514][ T7723] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 144.885135][ T7723] cdc_wdm 8-1:1.0: Unknown control protocol [ 145.194765][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 145.195264][ T6017] usb 8-1: USB disconnect, device number 5 [ 145.196893][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 145.196903][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 146.892464][ T7723] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 147.044342][ T7723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.047715][ T7723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.050715][ T7723] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.054853][ T7723] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.057688][ T7723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.061172][ T7723] usb 5-1: config 0 descriptor?? [ 147.469558][ T7723] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 147.475600][ T7723] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 147.736372][ T6017] usb 5-1: USB disconnect, device number 9 [ 148.407543][ T8029] netlink: 'syz.0.455': attribute type 10 has an invalid length. [ 148.410122][ T8029] netlink: 40 bytes leftover after parsing attributes in process `syz.0.455'. [ 149.193913][ T8035] netlink: 'syz.1.457': attribute type 4 has an invalid length. [ 149.196340][ T8035] netlink: 152 bytes leftover after parsing attributes in process `syz.1.457'. [ 149.204032][ T8035] : renamed from bond0 (while UP) [ 149.396783][ T8043] lo speed is unknown, defaulting to 1000 [ 149.675266][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 149.675283][ T40] audit: type=1804 audit(1746342634.202:105): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.459" name="/newroot/134/bus" dev="tmpfs" ino=719 res=1 errno=0 [ 150.702294][ T7723] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 150.873795][ T7723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.877167][ T7723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.880170][ T7723] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.884755][ T7723] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.888217][ T7723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.902906][ T7723] usb 5-1: config 0 descriptor?? [ 150.957962][ T8061] netlink: 'syz.1.464': attribute type 10 has an invalid length. [ 150.960512][ T8061] netlink: 40 bytes leftover after parsing attributes in process `syz.1.464'. [ 151.368432][ T7723] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 151.399266][ T7723] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 151.606492][ T7723] usb 5-1: USB disconnect, device number 10 [ 151.920157][ T8067] "syz.1.466" (8067) uses obsolete ecb(arc4) skcipher [ 154.194663][ T8107] bridge_slave_0: left allmulticast mode [ 154.196611][ T8107] bridge_slave_0: left promiscuous mode [ 154.198540][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.203313][ T8107] bridge_slave_1: left allmulticast mode [ 154.205159][ T8107] bridge_slave_1: left promiscuous mode [ 154.207067][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.214415][ T8107] bond0: (slave bond_slave_0): Releasing backup interface [ 154.218727][ T8107] bond0: (slave bond_slave_1): Releasing backup interface [ 154.228923][ T8107] team0: Port device team_slave_0 removed [ 154.235162][ T8107] team0: Port device team_slave_1 removed [ 154.237761][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.240414][ T8107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.244012][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.246379][ T8107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.259640][ T8107] team0: Port device vlan0 removed [ 154.264990][ T8107] team0: Port device geneve0 removed [ 154.269775][ T65] lo speed is unknown, defaulting to 1000 [ 154.278460][ T8108] team0: Mode changed to "activebackup" [ 154.363089][ T8111] netlink: 'syz.1.478': attribute type 10 has an invalid length. [ 154.365508][ T8111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.478'. [ 154.562211][ T956] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 154.569452][ T8113] veth1_to_batadv: mtu less than device minimum [ 154.578797][ T8113] vlan0: entered promiscuous mode [ 154.591550][ T8113] team0: Port device vlan0 added [ 154.724702][ T956] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.727436][ T956] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 154.730928][ T956] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 154.734306][ T956] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.737942][ T956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 154.741642][ T956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.747492][ T956] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 154.750419][ T956] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.753068][ T956] usb 5-1: Product: syz [ 154.754385][ T956] usb 5-1: Manufacturer: syz [ 154.757402][ T8107] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 154.761091][ T956] cdc_wdm 5-1:1.0: skipping garbage [ 154.762889][ T956] cdc_wdm 5-1:1.0: skipping garbage [ 154.766114][ T956] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 154.767972][ T956] cdc_wdm 5-1:1.0: Unknown control protocol [ 154.932303][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 154.964827][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 154.967372][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 154.969964][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 154.972574][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 154.975090][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 154.977631][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 154.980076][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 154.982628][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 154.985201][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 154.987774][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 154.990367][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 154.992970][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 154.995589][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 154.998169][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 155.000799][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 155.002945][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 155.004959][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 155.006800][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 155.008754][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 155.010822][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 155.029218][ T956] usb 5-1: USB disconnect, device number 11 [ 155.029266][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 155.103405][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 155.106182][ T9] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 155.109477][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 155.112572][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 155.116112][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 155.120838][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.123954][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.126576][ T9] usb 8-1: Product: syz [ 155.128017][ T9] usb 8-1: Manufacturer: syz [ 155.133360][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 155.135075][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 155.137698][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 155.139621][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 155.642479][ T5988] usb 8-1: USB disconnect, device number 6 [ 155.642532][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 156.004571][ T8135] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 156.524539][ T8170] bridge_slave_0: left allmulticast mode [ 156.526411][ T8170] bridge_slave_0: left promiscuous mode [ 156.528429][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.535780][ T8170] bridge_slave_1: left allmulticast mode [ 156.538287][ T8170] bridge_slave_1: left promiscuous mode [ 156.540842][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.546711][ T8170] bond0: (slave bond_slave_0): Releasing backup interface [ 156.551334][ T8170] bond0: (slave bond_slave_1): Releasing backup interface [ 156.561048][ T8170] team0: Port device team_slave_0 removed [ 156.566982][ T8170] team0: Port device team_slave_1 removed [ 156.569140][ T8170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.571384][ T8170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.575270][ T8170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.578253][ T8170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.590737][ T8170] team0: Port device vlan0 removed [ 156.594780][ T8170] batman_adv: batadv0: Removing interface: macvtap0 [ 156.600225][ T8170] team0: Port device geneve0 removed [ 156.613812][ T8171] team0: Mode changed to "activebackup" [ 156.732921][ T8174] netlink: 'syz.1.489': attribute type 10 has an invalid length. [ 156.735447][ T8174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.489'. [ 156.895255][ T7723] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 157.032460][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 157.054115][ T7723] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.059041][ T7723] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 157.083843][ T7723] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.089017][ T7723] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.095243][ T7723] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 157.099852][ T7723] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 157.104822][ T7723] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 157.107630][ T7723] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.110078][ T7723] usb 8-1: Product: syz [ 157.113808][ T7723] usb 8-1: Manufacturer: syz [ 157.134375][ T8170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.137475][ T7723] cdc_wdm 8-1:1.0: skipping garbage [ 157.140550][ T7723] cdc_wdm 8-1:1.0: skipping garbage [ 157.145039][ T7723] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 157.148548][ T7723] cdc_wdm 8-1:1.0: Unknown control protocol [ 157.400289][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 157.400295][ T956] usb 8-1: USB disconnect, device number 7 [ 158.643734][ T34] libceph: connect (1)[c::]:6789 error -101 [ 158.645786][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 158.694187][ T8205] PKCS7: Unknown OID: [4] 0.38.35.51.951690.11253 [ 158.696515][ T8205] PKCS7: Only support pkcs7_signedData type [ 158.834114][ T8200] /dev/sr0: Can't open blockdev [ 158.903923][ T65] libceph: connect (1)[c::]:6789 error -101 [ 158.906630][ T65] libceph: mon0 (1)[c::]:6789 connect error [ 159.368733][ T8202] ceph: No mds server is up or the cluster is laggy [ 159.576838][ T7723] libceph: connect (1)[c::]:6789 error -101 [ 159.579697][ T7723] libceph: mon0 (1)[c::]:6789 connect error [ 159.844346][ T7723] libceph: connect (1)[c::]:6789 error -101 [ 159.847227][ T7723] libceph: mon0 (1)[c::]:6789 connect error [ 160.134621][ T65] IPVS: starting estimator thread 0... [ 160.232192][ T8226] IPVS: using max 49 ests per chain, 117600 per kthread [ 160.287589][ T8215] ceph: No mds server is up or the cluster is laggy [ 161.319106][ T8247] netlink: 'syz.0.508': attribute type 10 has an invalid length. [ 161.321597][ T8247] netlink: 40 bytes leftover after parsing attributes in process `syz.0.508'. [ 161.337907][ T8247] team0: Port device geneve0 added [ 162.392295][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 162.533124][ T9] usb 5-1: device descriptor read/64, error -71 [ 162.772501][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 162.902353][ T9] usb 5-1: device descriptor read/64, error -71 [ 162.912232][ T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 163.013417][ T9] usb usb5-port1: attempt power cycle [ 163.063231][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 163.066114][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 163.070723][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 163.077801][ T24] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 163.081427][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.084256][ T24] usb 8-1: Product: syz [ 163.085751][ T24] usb 8-1: Manufacturer: syz [ 163.087510][ T24] usb 8-1: SerialNumber: syz [ 163.092247][ T24] usb 8-1: config 0 descriptor?? [ 163.316551][ T8259] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(23) [ 163.318623][ T8259] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 163.321678][ T8259] vhci_hcd vhci_hcd.0: Device attached [ 163.329502][ T8259] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(25) [ 163.331489][ T8259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 163.336204][ T8259] vhci_hcd vhci_hcd.0: Device attached [ 163.340127][ T8259] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 163.345559][ T8264] vhci_hcd: connection closed [ 163.346322][ T8262] vhci_hcd: connection closed [ 163.348280][ T46] vhci_hcd: stop threads [ 163.351105][ T46] vhci_hcd: release socket [ 163.352698][ T46] vhci_hcd: disconnect device [ 163.354506][ T24] appledisplay 8-1:0.0: Error while getting initial brightness: -110 [ 163.358094][ T46] vhci_hcd: stop threads [ 163.359443][ T24] appledisplay 8-1:0.0: probe with driver appledisplay failed with error -110 [ 163.362705][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 163.365284][ T46] vhci_hcd: release socket [ 163.366744][ T46] vhci_hcd: disconnect device [ 163.368201][ T24] usb 8-1: USB disconnect, device number 8 [ 163.393379][ T9] usb 5-1: device descriptor read/8, error -71 [ 163.642382][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 163.664378][ T9] usb 5-1: device descriptor read/8, error -71 [ 163.773463][ T9] usb usb5-port1: unable to enumerate USB device [ 167.202529][ T5989] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 167.332409][ T5989] usb 6-1: device descriptor read/64, error -71 [ 167.406617][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 167.409585][ T8323] netlink: 'syz.3.529': attribute type 5 has an invalid length. [ 167.412306][ T8323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.529'. [ 167.430119][ T8323] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 167.433306][ T8323] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 167.436297][ T8323] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 167.439097][ T8323] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 167.442068][ T8323] geneve2: entered promiscuous mode [ 167.448389][ T8323] geneve2: entered allmulticast mode [ 167.582238][ T5989] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 167.712230][ T5989] usb 6-1: device descriptor read/64, error -71 [ 167.822520][ T5989] usb usb6-port1: attempt power cycle [ 168.183632][ T5989] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 168.202982][ T5989] usb 6-1: device descriptor read/8, error -71 [ 168.442197][ T5989] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 168.474450][ T5989] usb 6-1: device descriptor read/8, error -71 [ 168.592391][ T5989] usb usb6-port1: unable to enumerate USB device [ 169.026570][ T8337] netlink: 'syz.0.534': attribute type 75 has an invalid length. [ 169.051900][ T8339] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 170.011170][ T8349] netlink: 'syz.1.538': attribute type 1 has an invalid length. [ 170.015706][ T8349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.538'. [ 170.362180][ T5989] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 170.523307][ T5989] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 170.526375][ T5989] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 170.529344][ T5989] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72 [ 170.535578][ T5989] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 170.538494][ T5989] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.540969][ T5989] usb 8-1: Product: syz [ 170.542539][ T5989] usb 8-1: Manufacturer: syz [ 170.544031][ T5989] usb 8-1: SerialNumber: syz [ 170.547753][ T8351] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 170.756228][ T5989] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 170.947948][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 170.950721][ T8361] netlink: 'syz.1.541': attribute type 5 has an invalid length. [ 170.953255][ T8361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.541'. [ 170.958078][ C2] usblp0: nonzero read bulk status received: -71 [ 170.959034][ T8361] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 170.963281][ T8361] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 170.966118][ T8361] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 170.968811][ T8361] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 171.182288][ T8361] geneve2: entered promiscuous mode [ 171.186073][ T8361] geneve2: entered allmulticast mode [ 171.203340][ T65] usb 8-1: USB disconnect, device number 9 [ 171.213409][ T65] usblp0: removed [ 172.984362][ T8394] process 'syz.3.547' launched './file1' with NULL argv: empty string added [ 173.420418][ T8404] FAULT_INJECTION: forcing a failure. [ 173.420418][ T8404] name failslab, interval 1, probability 0, space 0, times 0 [ 173.426407][ T8404] CPU: 3 UID: 0 PID: 8404 Comm: syz.1.553 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 173.426422][ T8404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 173.426428][ T8404] Call Trace: [ 173.426432][ T8404] [ 173.426436][ T8404] dump_stack_lvl+0x16c/0x1f0 [ 173.426453][ T8404] should_fail_ex+0x512/0x640 [ 173.426467][ T8404] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 173.426481][ T8404] should_failslab+0xc2/0x120 [ 173.426493][ T8404] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 173.426504][ T8404] ? __alloc_skb+0x2b2/0x380 [ 173.426515][ T8404] ? bpf_lsm_capable+0x9/0x10 [ 173.426526][ T8404] __alloc_skb+0x2b2/0x380 [ 173.426536][ T8404] ? __pfx___alloc_skb+0x10/0x10 [ 173.426546][ T8404] ? genl_rcv_msg+0x4d0/0x800 [ 173.426559][ T8404] ? genl_rcv_msg+0x4bb/0x800 [ 173.426575][ T8404] netlink_ack+0x15d/0xb80 [ 173.426587][ T8404] ? __lock_acquire+0xaa4/0x1ba0 [ 173.426603][ T8404] netlink_rcv_skb+0x347/0x440 [ 173.426614][ T8404] ? __pfx_genl_rcv_msg+0x10/0x10 [ 173.426628][ T8404] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 173.426646][ T8404] ? __pfx_down_read+0x10/0x10 [ 173.426661][ T8404] ? netlink_deliver_tap+0x1ae/0xd30 [ 173.426674][ T8404] genl_rcv+0x28/0x40 [ 173.426686][ T8404] netlink_unicast+0x53a/0x7f0 [ 173.426704][ T8404] ? __pfx_netlink_unicast+0x10/0x10 [ 173.426720][ T8404] netlink_sendmsg+0x8d1/0xdd0 [ 173.426734][ T8404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.426747][ T8404] ? __import_iovec+0x1c8/0x660 [ 173.426764][ T8404] ____sys_sendmsg+0xa95/0xc70 [ 173.426780][ T8404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.426792][ T8404] ? get_compat_msghdr+0x11a/0x170 [ 173.426809][ T8404] ___sys_sendmsg+0x134/0x1d0 [ 173.426821][ T8404] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.426849][ T8404] __sys_sendmsg+0x16d/0x220 [ 173.426860][ T8404] ? __pfx___sys_sendmsg+0x10/0x10 [ 173.426875][ T8404] ? rcu_is_watching+0x12/0xc0 [ 173.426885][ T8404] ? rcu_is_watching+0x12/0xc0 [ 173.426895][ T8404] __do_fast_syscall_32+0x73/0x120 [ 173.426910][ T8404] do_fast_syscall_32+0x32/0x80 [ 173.426923][ T8404] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.426936][ T8404] RIP: 0023:0xf703e579 [ 173.426943][ T8404] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 173.426953][ T8404] RSP: 002b:00000000f502e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 173.426962][ T8404] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 173.426968][ T8404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.426974][ T8404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.426979][ T8404] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 173.426985][ T8404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.426997][ T8404] [ 173.984152][ T8413] netlink: 'syz.1.554': attribute type 9 has an invalid length. [ 173.986608][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 174.002694][ T8413] hsr0: entered promiscuous mode [ 174.004645][ T8413] macvlan2: entered promiscuous mode [ 174.006767][ T8413] macvlan2: entered allmulticast mode [ 174.008519][ T8413] hsr0: entered allmulticast mode [ 174.010343][ T8413] hsr_slave_0: entered allmulticast mode [ 174.012298][ T8413] hsr_slave_1: entered allmulticast mode [ 174.923579][ T8424] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 175.263017][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'. [ 175.266029][ T8437] netlink: 'syz.0.557': attribute type 5 has an invalid length. [ 175.268624][ T8437] netlink: 20 bytes leftover after parsing attributes in process `syz.0.557'. [ 175.554951][ T8437] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 175.558132][ T8437] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 175.561287][ T8437] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 175.565001][ T8437] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 175.568311][ T8437] geneve2: entered promiscuous mode [ 175.570338][ T8437] geneve2: entered allmulticast mode [ 175.597482][ T8444] FAULT_INJECTION: forcing a failure. [ 175.597482][ T8444] name failslab, interval 1, probability 0, space 0, times 0 [ 175.601395][ T8444] CPU: 2 UID: 0 PID: 8444 Comm: syz.3.564 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 175.601408][ T8444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.601414][ T8444] Call Trace: [ 175.601418][ T8444] [ 175.601422][ T8444] dump_stack_lvl+0x16c/0x1f0 [ 175.601438][ T8444] should_fail_ex+0x512/0x640 [ 175.601452][ T8444] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 175.601465][ T8444] should_failslab+0xc2/0x120 [ 175.601477][ T8444] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 175.601488][ T8444] ? alloc_vfsmnt+0x23/0x6f0 [ 175.601501][ T8444] alloc_vfsmnt+0x23/0x6f0 [ 175.601513][ T8444] vfs_create_mount+0x93/0x500 [ 175.601528][ T8444] path_mount+0x19e8/0x1f20 [ 175.601539][ T8444] ? kmem_cache_free+0x2d4/0x4d0 [ 175.601548][ T8444] ? __pfx_path_mount+0x10/0x10 [ 175.601560][ T8444] ? putname+0x154/0x1a0 [ 175.601572][ T8444] __ia32_sys_mount+0x28b/0x310 [ 175.601583][ T8444] ? __pfx___ia32_sys_mount+0x10/0x10 [ 175.601594][ T8444] ? rcu_is_watching+0x12/0xc0 [ 175.601606][ T8444] __do_fast_syscall_32+0x73/0x120 [ 175.601621][ T8444] do_fast_syscall_32+0x32/0x80 [ 175.601634][ T8444] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.601647][ T8444] RIP: 0023:0xf705e579 [ 175.601655][ T8444] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 175.601664][ T8444] RSP: 002b:00000000f504e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 175.601674][ T8444] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000240 [ 175.601680][ T8444] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.601686][ T8444] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.601691][ T8444] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 175.601697][ T8444] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.601709][ T8444] [ 176.037486][ T8451] tmpfs: Bad value for 'mpol' [ 176.081276][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.085988][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.088732][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.091370][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.094846][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.111970][ T8453] lo speed is unknown, defaulting to 1000 [ 176.309036][ T8453] chnl_net:caif_netlink_parms(): no params data found [ 176.434293][ T8453] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.437722][ T8453] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.440972][ T8453] bridge_slave_0: entered allmulticast mode [ 176.445186][ T8453] bridge_slave_0: entered promiscuous mode [ 176.449100][ T8453] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.452053][ T8453] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.454737][ T8453] bridge_slave_1: entered allmulticast mode [ 176.458634][ T8453] bridge_slave_1: entered promiscuous mode [ 176.518951][ T8453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.524836][ T8453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.590768][ T8453] team0: Port device team_slave_0 added [ 176.597349][ T8453] team0: Port device team_slave_1 added [ 176.721899][ T8453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.729498][ T8453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.739920][ T8453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.753373][ T8453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.755544][ T8453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.764542][ T8453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.803553][ T8453] hsr_slave_0: entered promiscuous mode [ 176.805935][ T8453] hsr_slave_1: entered promiscuous mode [ 176.808114][ T8453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.810563][ T8453] Cannot create hsr debugfs directory [ 176.920241][ T8453] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 176.924335][ T8453] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 176.928255][ T8453] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.933687][ T8453] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.979848][ T8453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.004684][ T8453] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.010544][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.012870][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.023793][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.026033][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.120929][ T8453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.251073][ T8453] veth0_vlan: entered promiscuous mode [ 177.260097][ T8453] veth1_vlan: entered promiscuous mode [ 177.283673][ T8453] veth0_macvtap: entered promiscuous mode [ 177.289311][ T8453] veth1_macvtap: entered promiscuous mode [ 177.303482][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.308227][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.314361][ T8453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.325359][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.329596][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.336163][ T8453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.344255][ T8453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.347872][ T8453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.352422][ T8453] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.355229][ T8453] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.404824][ T8493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.576'. [ 177.408510][ T8493] IPv6: Can't replace route, no match found [ 177.416335][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.418791][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.444741][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.447208][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.571192][ T8499] random: crng reseeded on system resumption [ 177.614656][ T8501] ip6gre0: entered allmulticast mode [ 178.172320][ T5960] Bluetooth: hci3: command tx timeout [ 178.351083][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.355115][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 178.570718][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.574436][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 178.650738][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.654086][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 178.727783][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.731597][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 179.169039][ T64] bond0 (unregistering): Released all slaves [ 179.514080][ T64] hsr_slave_0: left promiscuous mode [ 179.516406][ T64] hsr_slave_1: left promiscuous mode [ 179.533076][ T64] veth1_macvtap: left promiscuous mode [ 179.534933][ T64] veth1_vlan: left promiscuous mode [ 179.592199][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 179.605350][ T29] ------------[ cut here ]------------ [ 179.607238][ T29] workqueue: cannot queue hci_conn_timeout on wq hci2 [ 179.609376][ T29] WARNING: CPU: 1 PID: 29 at kernel/workqueue.c:2257 __queue_work+0xc9c/0x10f0 [ 179.612147][ T29] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 179.613626][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:0 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 179.618710][ T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.622183][ T29] Workqueue: events l2cap_chan_timeout [ 179.623942][ T29] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 179.625665][ T29] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 60 e1 8b 8b e8 55 4f f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 36 6e 37 00 90 0f 0b 90 e9 1b f6 ff [ 179.631769][ T29] RSP: 0018:ffffc90000577a50 EFLAGS: 00010086 [ 179.633734][ T29] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a8f78 [ 179.636282][ T29] RDX: ffff88801c3c8000 RSI: ffffffff817a8f85 RDI: 0000000000000001 [ 179.638815][ T29] RBP: ffff88806f130948 R08: 0000000000000001 R09: 0000000000000000 [ 179.641360][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 179.643856][ T29] R13: ffff88806a59b800 R14: ffff88806a59b978 R15: ffff88806f130950 [ 179.646346][ T29] FS: 0000000000000000(0000) GS:ffff8880978ec000(0000) knlGS:0000000000000000 [ 179.649210][ T29] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.651319][ T29] CR2: 00007ffd6897ddd8 CR3: 000000006284d000 CR4: 0000000000352ef0 [ 179.653922][ T29] Call Trace: [ 179.655063][ T29] [ 179.656107][ T29] ? __cancel_work+0x2c8/0x370 [ 179.657445][ T29] ? clear_pending_if_disabled+0xa8/0x210 [ 179.658992][ T29] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 179.660687][ T29] __queue_delayed_work+0x35b/0x460 [ 179.662116][ T29] queue_delayed_work_on+0x1b5/0x200 [ 179.663617][ T29] l2cap_chan_del+0x5a0/0x8f0 [ 179.665065][ T29] l2cap_chan_close+0xfe/0xa30 [ 179.666531][ T29] ? debug_object_deactivate+0x1ec/0x3a0 [ 179.668267][ T29] ? __pfx_l2cap_chan_close+0x10/0x10 [ 179.669915][ T29] l2cap_chan_timeout+0x196/0x310 [ 179.671509][ T29] process_one_work+0x9cc/0x1b70 [ 179.673112][ T29] ? __pfx_process_one_work+0x10/0x10 [ 179.674777][ T29] ? assign_work+0x1a0/0x250 [ 179.676252][ T29] worker_thread+0x6c8/0xf10 [ 179.677724][ T29] ? __pfx_worker_thread+0x10/0x10 [ 179.679339][ T29] kthread+0x3c2/0x780 [ 179.680651][ T29] ? __pfx_kthread+0x10/0x10 [ 179.682061][ T29] ? __pfx_kthread+0x10/0x10 [ 179.683523][ T29] ? __pfx_kthread+0x10/0x10 [ 179.684979][ T29] ? __pfx_kthread+0x10/0x10 [ 179.686425][ T29] ? rcu_is_watching+0x12/0xc0 [ 179.687883][ T29] ? __pfx_kthread+0x10/0x10 [ 179.689330][ T29] ret_from_fork+0x45/0x80 [ 179.690702][ T29] ? __pfx_kthread+0x10/0x10 [ 179.692132][ T29] ret_from_fork_asm+0x1a/0x30 [ 179.693634][ T29] [ 179.694603][ T29] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 179.696790][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:0 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(full) [ 179.700407][ T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.703704][ T29] Workqueue: events l2cap_chan_timeout [ 179.705408][ T29] Call Trace: [ 179.706460][ T29] [ 179.707398][ T29] dump_stack_lvl+0x3d/0x1f0 [ 179.708862][ T29] panic+0x71c/0x800 [ 179.710108][ T29] ? __pfx_panic+0x10/0x10 [ 179.711519][ T29] ? show_trace_log_lvl+0x29b/0x3e0 [ 179.713157][ T29] ? check_panic_on_warn+0x1f/0xb0 [ 179.714751][ T29] ? __queue_work+0xc9c/0x10f0 [ 179.716275][ T29] check_panic_on_warn+0xab/0xb0 [ 179.717824][ T29] __warn+0xf6/0x3c0 [ 179.719058][ T29] ? __pfx_vprintk_emit+0x10/0x10 [ 179.720648][ T29] ? __queue_work+0xc9c/0x10f0 [ 179.722151][ T29] report_bug+0x3c3/0x580 [ 179.723512][ T29] ? __queue_work+0xc9c/0x10f0 [ 179.725014][ T29] handle_bug+0x184/0x210 [ 179.726377][ T29] exc_invalid_op+0x17/0x50 [ 179.727789][ T29] asm_exc_invalid_op+0x1a/0x20 [ 179.729297][ T29] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 179.730974][ T29] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 60 e1 8b 8b e8 55 4f f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 36 6e 37 00 90 0f 0b 90 e9 1b f6 ff [ 179.736842][ T29] RSP: 0018:ffffc90000577a50 EFLAGS: 00010086 [ 179.738696][ T29] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a8f78 [ 179.741130][ T29] RDX: ffff88801c3c8000 RSI: ffffffff817a8f85 RDI: 0000000000000001 [ 179.743579][ T29] RBP: ffff88806f130948 R08: 0000000000000001 R09: 0000000000000000 [ 179.746036][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 179.748477][ T29] R13: ffff88806a59b800 R14: ffff88806a59b978 R15: ffff88806f130950 [ 179.750905][ T29] ? __warn_printk+0x198/0x350 [ 179.752456][ T29] ? __warn_printk+0x1a5/0x350 [ 179.753971][ T29] ? __cancel_work+0x2c8/0x370 [ 179.755401][ T29] ? clear_pending_if_disabled+0xa8/0x210 [ 179.757199][ T29] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 179.759095][ T29] __queue_delayed_work+0x35b/0x460 [ 179.760702][ T29] queue_delayed_work_on+0x1b5/0x200 [ 179.762343][ T29] l2cap_chan_del+0x5a0/0x8f0 [ 179.763819][ T29] l2cap_chan_close+0xfe/0xa30 [ 179.765318][ T29] ? debug_object_deactivate+0x1ec/0x3a0 [ 179.767074][ T29] ? __pfx_l2cap_chan_close+0x10/0x10 [ 179.768760][ T29] l2cap_chan_timeout+0x196/0x310 [ 179.770337][ T29] process_one_work+0x9cc/0x1b70 [ 179.771881][ T29] ? __pfx_process_one_work+0x10/0x10 [ 179.773564][ T29] ? assign_work+0x1a0/0x250 [ 179.775021][ T29] worker_thread+0x6c8/0xf10 [ 179.776497][ T29] ? __pfx_worker_thread+0x10/0x10 [ 179.778106][ T29] kthread+0x3c2/0x780 [ 179.779393][ T29] ? __pfx_kthread+0x10/0x10 [ 179.780883][ T29] ? __pfx_kthread+0x10/0x10 [ 179.782348][ T29] ? __pfx_kthread+0x10/0x10 [ 179.783812][ T29] ? __pfx_kthread+0x10/0x10 [ 179.785272][ T29] ? rcu_is_watching+0x12/0xc0 [ 179.786785][ T29] ? __pfx_kthread+0x10/0x10 [ 179.788244][ T29] ret_from_fork+0x45/0x80 [ 179.789648][ T29] ? __pfx_kthread+0x10/0x10 [ 179.791107][ T29] ret_from_fork_asm+0x1a/0x30 [ 179.792633][ T29] [ 179.794306][ T29] Kernel Offset: disabled [ 179.795679][ T29] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:11:04 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b23b100 RCX=ffffffff81aec3ce RDX=ffff88801daa4880 RSI=ffffffff81aec3a8 RDI=0000000000000005 RBP=ffffc9000044fd10 RSP=ffffc9000044fc40 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c7944e R12=1ffff92000089f8c R13=0000000000000002 R14=0000000000000001 R15=ffffed1005647621 RIP=ffffffff81aec3aa RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5115510 CR3=00000000493bd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854c2735 RDI=ffffffff9addfbc0 RBP=ffffffff9addfb80 RSP=ffffc900005773c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000006f R14=ffffffff9addfb80 R15=ffffffff854c26d0 RIP=ffffffff854c275f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd6897ddd8 CR3=000000006284d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffea0001b6d540 RCX=ffffffff822aa7c8 RDX=ffff88802307a440 RSI=ffffffff822a95ae RDI=ffffea0001b6d540 RBP=0000000000000000 RSP=ffffc90002c77730 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=00000000000001e7 RIP=ffffffff81baad36 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7ef6e40 CR3=000000004df82000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7392ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffea0001af2c00 RCX=ffffffff81f515e2 RDX=ffff888025f94880 RSI=ffffffff81f5184f RDI=0000000000000005 RBP=00000000ffffffff RSP=ffffc90002bd7898 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff8880404b0048 R13=ffff88807ffd6400 R14=ffffffffffffffff R15=04fff00000020901 RIP=ffffffff81baad36 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd36a928d00 ffffffff 00c00000 GS =0000 ffff888097aec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffebdc3bff8 CR3=0000000048735000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000400 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2520646670206461 62203a6425206c65 6e6e61686300632e 736c656e6e616863 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=a5e5edeca5e5edec a5e5edeca5e5edec a5e5edeca5e5edec a5e5edeca5e5edec a5e5edeca5e5edec a5e5edeca5e5edec a5e5edeca5e5edec a5e5edeca5e5edec ZMM22=cce2995ccce2995c cce2995ccce2995c cce2995ccce2995c cce2995ccce2995c cce2995ccce2995c cce2995ccce2995c cce2995ccce2995c cce2995ccce2995c ZMM23=d46d17f2d46d17f2 d46d17f2d46d17f2 d46d17f2d46d17f2 d46d17f2d46d17f2 d46d17f2d46d17f2 d46d17f2d46d17f2 d46d17f2d46d17f2 d46d17f2d46d17f2 ZMM24=acb8cce0acb8cce0 acb8cce0acb8cce0 acb8cce0acb8cce0 acb8cce0acb8cce0 acb8cce0acb8cce0 acb8cce0acb8cce0 acb8cce0acb8cce0 acb8cce0acb8cce0 ZMM25=49828d0549828d05 49828d0549828d05 49828d0549828d05 49828d0549828d05 49828d0549828d05 49828d0549828d05 49828d0549828d05 49828d0549828d05 ZMM26=6878bf446878bf44 6878bf446878bf44 6878bf446878bf44 6878bf446878bf44 6878bf446878bf44 6878bf446878bf44 6878bf446878bf44 6878bf446878bf44 ZMM27=f594b7baf594b7ba f594b7baf594b7ba f594b7baf594b7ba f594b7baf594b7ba f594b7baf594b7ba f594b7baf594b7ba f594b7baf594b7ba f594b7baf594b7ba ZMM28=000000500000004f 0000004e0000004d 0000004c0000004b 0000004a00000049 0000004800000047 0000004600000045 0000004400000043 0000004200000041 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2006000020060000 2006000020060000 2006000020060000 2006000020060000 2006000020060000 2006000020060000 2006000020060000 2006000020060000