last executing test programs: 29.822303117s ago: executing program 0 (id=73): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) setsockopt(r0, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) sendto(r0, 0x0, 0x42, 0x40040, &(0x7f0000000500)=@generic={0x2d, "000000003f0000000800010000000600"}, 0x80) 29.751540639s ago: executing program 0 (id=75): capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000540)={0x200000, 0x200003, 0x0, 0x0, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000014c0)='./sys\x00', &(0x7f0000001500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001540)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) write(r0, &(0x7f0000001580)='0', 0x1) 29.750838407s ago: executing program 0 (id=76): syz_open_dev$admmidi(&(0x7f0000000180), 0x20, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newsa={0x16c, 0x10, 0x100, 0x0, 0x0, {{@in6=@private2, @in, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0xff}, 0x0, 0x3c}, @in6=@private2, {0x2000000000}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_auth={0x7e, 0x1, {{'crc32\x00'}, 0x1b0, "df4f05b5ca1aa4d28df8379d32a3fc3cd3533af2b03f2c6269b70123db2d23f6c0df1683ad178a8118614c1a79b0db3414c1a71b261a"}}]}, 0x16c}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f00000002c0)='autofs\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc0000001e00300226bd7000fedbdf2500000000000000000000ffffac1414aa000004d602003300000000000000000000000000000000010500000006350000050019002b00000024001700020000002cbd70002abd7000299a70002abd70000208000009000000836c000024000900060000000000000004000000000000000200000000000000c690000000000000080027000300000024000900faffffffffffffff01000000000000001000000000000000010000000000008008000b00540700000800000003000000"], 0xcc}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000480)=ANY=[], 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000004c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) symlink(&(0x7f00000000c0)='./security/apparmor/.replace\x00', &(0x7f0000000080)='./security/apparmor/.load\x00') r5 = open(&(0x7f0000000580)='.\x00', 0x18c82, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0x810c9365, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r6) socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./security\x00', &(0x7f0000000740)='securityfs\x00', 0x0, 0x0) openat(r1, &(0x7f0000000780)='./security/apparmor/.replace\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000007c0)='./security/apparmor/.load\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="04080076657273696f6e00020500000004080070726f66696c6500070502002f00040600666c616773000702000000000200000000020003000008020000000002000000000200000000020000000008", 0x89) bind$rxrpc(r5, &(0x7f0000000880)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e28, @empty}}, 0x24) syz_emit_ethernet(0x2a, &(0x7f00000008c0)=ANY=[@ANYBLOB="d3b238000000aaaaaaaa8fae08004500001cddffffc94310353ee2e6c67f0785000100009ee8cdd6b85ddbf803a4f6c103d8683db8db83672ba3785e173895fc66"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 29.663626809s ago: executing program 0 (id=77): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0x5c, 0x30, 0xb, 0x70bd2c, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000002, 0x0, 0x20000000, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/mtrr\x00', 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000380)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @remote, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x33, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0xe, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0xf, [{@multicast1}, {@rand_addr=0x64010102}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffbff}]}]}}}}}}}, 0x0) ioctl(r2, 0xc0104d08, &(0x7f0000000300)) bind$l2tp6(r2, &(0x7f0000000340)={0xa, 0x0, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3}, 0x20) setsockopt$inet_int(r2, 0x0, 0x11, &(0x7f0000000300)=0x10001, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x40000, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000640)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x8, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) 29.663386103s ago: executing program 0 (id=78): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000c00)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000001000000000000003800000000000000020000004408dad0000000034424a7836401010200000007ac1414aafffffff10a01010200070001ac1414bb00000007b7a106000000000000009e105f2a91c7f03dbcc2242f3a2b9873cb8893d8d6ff60f3036ea37996bc5fe192857616f733966348121b60405295d5fdb8f52e34b1627954d7f4bd42f87ef1b25b9406e508d6b11e2af04a5a9ce0740cc91238eb055da312ad0acb751f0f55f277f12b244560471b2469de029a91bf5edde5010c128ed8e906fc03aa08d86a64b296473c63bd32e9b0a9c3152ac4a49120"], 0x48}}], 0x2, 0xf00) 29.303513093s ago: executing program 0 (id=81): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000700)=@IORING_OP_FUTEX_WAITV={0x35, 0x9, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) (async) r6 = dup3(r5, r4, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x1}) (rerun: 32) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000480)=""/80}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000540)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r6}, @flat=@handle={0x73682a85, 0x1, 0x3}, @fd}, &(0x7f0000000640)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (rerun: 32) syz_open_dev$tty1(0xc, 0x4, 0x3) 29.224373943s ago: executing program 32 (id=81): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000700)=@IORING_OP_FUTEX_WAITV={0x35, 0x9, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) (async) r6 = dup3(r5, r4, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x1}) (rerun: 32) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000480)=""/80}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000540)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r6}, @flat=@handle={0x73682a85, 0x1, 0x3}, @fd}, &(0x7f0000000640)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (rerun: 32) syz_open_dev$tty1(0xc, 0x4, 0x3) 7.175089945s ago: executing program 1 (id=311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0xa6, 0x4007}, 0x8000) 7.174919981s ago: executing program 1 (id=312): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004084}, 0x480c4) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000400), 0x651, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x6c, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="74000000090601020000000000000700030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 5.64298126s ago: executing program 1 (id=317): syz_emit_vhci(&(0x7f0000001780)=ANY=[@ANYBLOB="043e0b06c900060008"], 0xe) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3, 0x1}}, './file0\x00'}) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x3, 0xae7, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x127}}}, &(0x7f00000002c0)) syz_open_dev$ublk_chdev(&(0x7f0000000300), r5, 0x2) r6 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r6, 0x5417, &(0x7f0000000340)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge_slave_0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) r8 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000500)=0x5) setreuid(r9, 0x0) setpriority(0x2, 0xff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000580)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioperm(0x4, 0x8, 0x5) process_mrelease(0xffffffffffffffff, 0x1000000) syz_open_dev$sg(0x0, 0x0, 0x9840) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x48008) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000b40)=ANY=[@ANYBLOB="040f0400001c04"], 0x7) ioctl$KVM_GET_STATS_FD_vm(r11, 0xaece) 4.984304108s ago: executing program 1 (id=321): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x14, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4044084) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = creat(&(0x7f0000000540)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c4605069e0dfffffffffbffffff0200030009000000ca020001380000006042000042000020fbff20000300f8ff1e040002000000000000007001000000010000000200000097e710185a0504dd1e0700000001000051e5746404000000fafdffff030000000900000001feffff010100000000000051e574640600000000000000fcffffff000800000e00200004000000c00400106e7cebc1fffca71edc0b6310216d6306"], 0x98) close(r5) execve(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) mount(&(0x7f0000000700)=@sr0, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', &(0x7f0000000780)='coda\x00', 0xa20c13, &(0x7f00000007c0)='@\x00') sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r9, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x310, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2000c001) 4.503621218s ago: executing program 2 (id=324): bind$alg(0xffffffffffffffff, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg$can_j1939(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x2000) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) r3 = msgget$private(0x0, 0x1) msgrcv(r3, &(0x7f0000000000)={0x0, ""/73}, 0x4d, 0x1, 0x799475a83145d3cc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x4e24, 0x5, @empty, 0x27b0f767}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000840)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000008c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000900)='ipvlan1\x00', 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000940)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = dup(r2) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000a00)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000a40)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a80)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x800, 0x31, 0xffff1891, 0x0, 0xb23be0fbe66397b6, 0x9, 0x1b}, 0x9c) 4.503454429s ago: executing program 2 (id=325): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/lo/queues/tx-0/tx_timeout\x00', 0x0, 0x0) read(r0, &(0x7f0000000440), 0x100) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/devices/virtual/net/lo/queues/tx-0/tx_timeout\x00', 0x0, 0x0) read(r1, &(0x7f00000004c0), 0x100) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r2, 0x1, 0x3d, &(0x7f0000000000)="0b00000001000000", 0x8) sendmsg$sock(r2, &(0x7f0000000040)={&(0x7f0000000100)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0x7fffffffffffffff}}], 0x18}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="503dcf1551a8016738f55bbb46e3a158133ad5f2d1f77d025f622bce9e3aff4d33399bc1232b6b041cf001edb0e90ed5c701bda3767c09d85262375bc1c79e626ced03c755ed387c7ef41acd32bcdf4b37a8a9d0da903f306783020d00d365e225b26da40e7aab5be9fffbf8eccc29b3c0994a855c87a8de0f2640eac52ea364f3eb19e328b54ee7e3aac9ac10c52231e6c94e748201ba", @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf2510000000080001007063690011000200303030303a30303a31302e300000000008000b00040000000600110000000000080013000b0000000500140000000000"], 0x50}, 0x1, 0x0, 0x0, 0x44040}, 0x4044000) 2.944591437s ago: executing program 4 (id=333): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000001520000100feffffff000000000a0000fbffe9000300000000140003006c6f00"/48], 0x30}}, 0x20000000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r3 = socket(0x10, 0x2, 0x0) timerfd_create(0x8, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x9}}}}}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000400)=@gcm_256={{0x304}, "eab98b6f41c7abd1", "ca71b8ed8f099a1b6fc232416cca5d6b5e0892b340ee97393269f7369c71de4e", "609774bc", "27b4094e84db4dfc"}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="18050000080000000000000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000010400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000001437e3030085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.045571647s ago: executing program 4 (id=334): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0xb, 0x0, 0x4}) (async) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0xb, 0x0, 0x4}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @loopback, 0x3681}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000080)={@in6={{0xa, 0x4e21, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r1, 0xe4772000) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e21, 0x9, @loopback, 0x400}}, 0x0, 0x0, 0x38, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) connect$inet6(r1, &(0x7f00000006c0)={0xa, 0x4e20, 0x1ff, @loopback, 0x6}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x204, 0x98, 0x11, 0x148, 0x0, 0x0, 0x170, 0x2a8, 0x2a8, 0x170, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xff000000, 'wg1\x00', 'syzkaller0\x00', {0x99380e6a96eb266d}, {0xff}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x0, 0x1}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x9, 0xfffffe00, 0x9, 'snmp\x00', 'syz0\x00', {0xfffffff7}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x260) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x204, 0x98, 0x11, 0x148, 0x0, 0x0, 0x170, 0x2a8, 0x2a8, 0x170, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xff000000, 'wg1\x00', 'syzkaller0\x00', {0x99380e6a96eb266d}, {0xff}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x0, 0x1}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x9, 0xfffffe00, 0x9, 'snmp\x00', 'syz0\x00', {0xfffffff7}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x260) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000001fe000001000000000500010003fff900080004"], 0x2c}}, 0x0) 1.73925137s ago: executing program 2 (id=335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x10c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xdc, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xcc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xa}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_INGRESS_QOS={0x70, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0x9}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8}, @IFLA_PROMISCUITY={0x8}]}, 0x10c}, 0x1, 0xba01}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x3, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x2, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40840}, 0x4005) syz_emit_ethernet(0xa2, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527e", 0x6c, 0x3c, 0x0, @empty, @mcast2, {[@dstopts={0x0, 0x3, '\x00', [@ra, @hao={0xc9, 0x10, @mcast1}, @pad1]}]}}}}}, 0x0) r2 = memfd_create(&(0x7f0000000a00)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8}, @TCA_CODEL_TARGET={0x8}]}}]}, 0x44}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000980)={@fallback=r1, 0x20, 0x0, 0x401, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={r3, r5, 0x25, 0xd, @val=@netkit={@void, @value, @void, @void, r7}}, 0x1c) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400c65c00000101000000000000000008"], 0x14}}, 0x4004) 1.716851537s ago: executing program 1 (id=336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f0000000000)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'btrfs.', '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81'}, 0x0, 0x0, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x100000001, &(0x7f0000000180)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f00000001c0)=@known='user.incfs.size\x00', 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="244000000104124a2e740000000000000200000005000100010000000800054007010000"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000340)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000400)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000004c0)={0x100}, 0x30, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000540)={0x100, r5}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000600)={0x100, r6}, 0x0) close(r4) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000640)={0xaa, 0x562}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000680)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f00000006c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) fsopen(&(0x7f0000000700)='ramfs\x00', 0x0) 1.666020991s ago: executing program 2 (id=337): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000e21f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x1d, 0x2, 0x6) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f00000005c0)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000640), &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0) syz_ublk_setup_io_uring(0x6a36, &(0x7f0000000700)={0x0, 0xd8e, 0x1000, 0x0, 0x3cb, 0x0, r3}, &(0x7f0000000780)=0x0, &(0x7f00000007c0), &(0x7f0000000800)) syz_io_uring_submit(r6, r4, r5, &(0x7f0000000840)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003e40)={'syztnl1\x00', &(0x7f0000003dc0)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x5, 0x8, 0x0, @mcast1, @empty, 0x40, 0x7800, 0x4, 0x7}}) sendmmsg$inet6(r2, &(0x7f0000004340)=[{{&(0x7f00000008c0)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c, &(0x7f0000002a40)=[{&(0x7f0000000900)}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="11fd63f0786a6f37ec4f051a3a3eb3ff62e3e392c25777c1b17ddf02f0c559b23d58f874d5ce7112b6cba90ca604eb1a890a90927b8bcf2691b5e3fee708302e03a2de53cf312000e8f33acd4166449139c0ce5ad40be8d6f1fc57d39b0784f7f61b57e218c707a7", 0x68}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="cd5c843e653428098bb9ea0a1b7b556b1c9a8aa96746c5b29bd2d0fa4803ec7987f55f405fc38165e3e7b12d9b8d7a9e9996a606e59172743e19bbbf741b67788ef86b27caf9f071253fe53705f23944ab0afb5605a123fca996968ea2", 0x5d}], 0x5}}, {{&(0x7f0000002a80)={0xa, 0x4e20, 0x40, @private1, 0x5}, 0x1c, &(0x7f0000003d80)=[{&(0x7f0000002ac0)="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", 0x1000}, {&(0x7f0000003ac0)="3c061df01f", 0x5}, {&(0x7f0000003b00)="2e2e4c5dddcfd3ee", 0x8}, {&(0x7f0000003b40)="f9adf5622e4b", 0x6}, {&(0x7f0000003b80)="bdf247dd3b858552b5a6df00d480582fc256c845117d0cc4b3019aeb912488547a3dff37e79ad1f6905efe2c59177f366d06313515e66ba8e14d6d04fd1f7fe03a990c5598f0248eaf2da97fbf2d6d81c28730eb7b0a38215d2be55ed20e53038e89170fa5b7e2f6d6e9be461229dd83cbf90b185bf464071e6f1ca11a6b69d2c4573593031578b74ba2aa49beb6e9109a7f587b1dc30b122f6baffc1576037dd9eddf5e1cf312783dcdfc62c27c1cb5d14cbee65cb1c2c5becf4b64f5973bb25338b5c0bdd7998b7b24154dcce18f24dd902211440f36f63fed4e8c33d0b09b66643b679873ea4d0d2006fdc4", 0xed}, {&(0x7f0000003c80)="2b40f2142be500407a807855d9dcd7219ac1ec392afadf8e35d9517b84a093dde972a44f48b5f3583fb23ea6167ad4121ad1c6062933a3bf39421e7187ebd3701781f9788c5bb5201ca3e4f6c3876d317caec450f3afb5a657ca16aae8483928dfb4f707e5825ef5bf3ea88e0353b89ba319e0783dc194c6b10cd7474a7c7ae673bc2d93d679231827b3dd047056c64cc3241c5694c0cc66ae1db6388234730aa69377693fd5d20010c063f71563a86f5cb70165e6d3fe652ac4b6ddd448c8fc7dae37ac523381a3fbc14692134f9a3e0d6a617e00ddad0b6916215932861a58455243b2bff320a6", 0xe8}], 0x6, &(0x7f0000003e80)=[@flowinfo={{0x10, 0x29, 0xb, 0x1000}}, @hoplimit_2292={{0x10}}, @flowinfo={{0x10, 0x29, 0xb, 0x2}}, @pktinfo={{0x20, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r7}}}, @dstopts={{0x74, 0x29, 0x37, {0x8f, 0xb, '\x00', [@pad1, @calipso={0x7, 0x18, {0x3, 0x4, 0xf, 0x4, [0x3, 0x6]}}, @ra={0x5, 0x2, 0xb59}, @calipso={0x7, 0x30, {0x3, 0xa, 0x4, 0x5af, [0x7, 0x0, 0xb, 0xffffffffffff71c0, 0x800]}}, @jumbo={0xc2, 0x4, 0x47}, @pad1, @enc_lim={0x4, 0x1, 0x1}]}}}], 0xc4}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003f80)="f78da37c6f1ef45c90102389ec284c568595bedc643429588cba0858bbf1d366381882bc7365e5cb7a85b73cc49c58deb07ae546c738aa6b49abc0a9018b19f19782136c6f7ef9f3cf41c6a2d6da6b979fe3255800217bf61a7cde3f86c077969da7800dcb925471fc003b", 0x6b}, {&(0x7f0000004000)="71a45691653d0d322dc8de696ce4cba38dd0994c8cc758e7ad3bbc41f1529ea85a6cfd4c0ee34da04e6c0ed17c63bc19ca1cd15010b21b7fe9c654f97b85effb307f0ced89c74dff88de3bee357d0160ff1f6abf76dae880c315c6da4655f8e46e9d4cb87288269a09be8ae7bc", 0x6d}, {&(0x7f0000004080)="43e8751deb8070e3c88c565b1ca4be882109e217454ce2f1a6c077cac60bfc912af4629bbacf92b85923c0d6494477dd1e8884d706e13e03e5a56968586d05", 0x3f}, {&(0x7f00000040c0)="12b2289456874d510c6abe78ae823d978a556e177d3fcb94e931be397037a6fe7227e3241c9a38bb2cada2d50caafb76a899e8f9406de324b7851e9bea9ed6e946d690788b82c476b8600ff28f20ff8400fe2581eb789dbd871e596ee23fc6b6f6994324302ed92e3fc9b50fed21bbb767e9f8ffae1b4b3f0649a1c8405c595e3439581ce507edcee88cdb21258169b3b6826ae041cfac9e9ebb86ad433f190c238c23216a9ab9dcfd52d749e7f46a289aed082791e44fb77ae5a83d14fe7e", 0xbf}], 0x4, &(0x7f00000041c0)=[@hopopts_2292={{0x2c, 0x29, 0x36, {0x8, 0x2, '\x00', [@pad1, @ra={0x5, 0x2, 0x200}, @jumbo={0xc2, 0x4, 0x101}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x3}}, @rthdr_2292={{0x24, 0x29, 0x39, {0x4, 0x2, 0x2, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}]}}}, @rthdrdstopts={{0x34, 0x29, 0x37, {0x2f, 0x3, '\x00', [@ra={0x5, 0x2, 0x401}, @pad1, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}]}}}, @rthdr_2292={{0x84, 0x29, 0x39, {0x3c, 0xe, 0x2, 0x9, 0x0, [@private0, @loopback, @mcast1, @mcast2, @loopback, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @hopopts_2292={{0x24, 0x29, 0x36, {0x16, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0xa}, @jumbo={0xc2, 0x4, 0x93ae7af}]}}}, @rthdr={{0x34, 0x29, 0x39, {0x6c, 0x4, 0x2, 0x6, 0x0, [@private0, @mcast1]}}}], 0x170}}], 0x3, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r1}, 0xc) syz_usb_connect(0x0, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000045c0)='./dev/ttyUSB0\x00', 0x1, 0x0) write(r8, &(0x7f0000004600)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) 1.378561133s ago: executing program 3 (id=339): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x15) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/221, 0xdd}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 1.297797429s ago: executing program 3 (id=340): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001240)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000001280)="0900000001ff97", 0x7) 1.297653727s ago: executing program 3 (id=341): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000b40)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r0, &(0x7f0000000c00)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48}}], 0x2, 0xf00) 1.292937558s ago: executing program 3 (id=342): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x943f41) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0xfffff000) 1.14018336s ago: executing program 4 (id=343): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat$dir(0xffffff9c, &(0x7f0000000180)='./sys\x00', 0x100, 0x62) openat(r0, &(0x7f0000000140)='./cgroup/pids.max\x00', 0x84642, 0x11) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000480)={""/32, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}]}) write$yama_ptrace_scope(r1, &(0x7f0000000100)='0\x00', 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x100, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x7fffd, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xf, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0}, './cgroup/pids.max/../file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@private0, @in6=@private1}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000980)=0xe4) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) 1.117270937s ago: executing program 3 (id=344): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x943f41) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0xfffff000) (fail_nth: 2) 1.008214132s ago: executing program 4 (id=345): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0x40000001c5002, 0x0) io_setup(0x222, &(0x7f00000005c0)=0x0) io_submit(r2, 0x3, &(0x7f0000000780)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x5, r1, &(0x7f0000000800)="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", 0x200, 0x200}, 0x0, 0x0]) read(r0, &(0x7f0000000100)=""/94, 0x5e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffff}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044000}, 0x44800) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000ac0)=0xf) write$binfmt_misc(r7, 0x0, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r6, 0x40285881, &(0x7f0000000180)={r4, 0x0, 0x5, 0x2, 0x3ff, 0x8}) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40880, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf2502202fc8", @ANYRES32=r8, @ANYBLOB="08000200ac1414aa"], 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22b96}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}}, 0x2400c000) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) connect$inet(r4, &(0x7f0000000c00)={0x2, 0x2000, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000002d000700"/20], 0x14}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000b40)='./sec\x00', &(0x7f0000000b80)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./sec/apparmor/.load\x00', 0x2, 0x0) 1.006914744s ago: executing program 3 (id=346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x404041, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) (rerun: 64) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r6, &(0x7f0000000540)='7', 0x1) (async) write(r5, &(0x7f0000000580)='252:0 1', 0x7) (async) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x3}, 0x8) (async, rerun: 32) shutdown(r7, 0x1) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x14c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x7ff9}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x8, 0x30, 0x0, 0x2, 0x20, 0x7}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r10], 0x3c}}, 0x0) (async) write(r0, &(0x7f0000000700)="ffffffffffff0011223344554305000f32fde100000100112233445500112233445500ff0000", 0xfdef) 324.519062ms ago: executing program 2 (id=347): mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001980)='./dev\x00', &(0x7f00000019c0)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a80)='./dev/md0\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070a0101"], 0x118}, 0x1, 0x0, 0x0, 0x20080010}, 0x24000082) ioctl(r0, 0x40480923, 0x0) ioctl(r0, 0x400c0930, 0x0) 322.893355ms ago: executing program 2 (id=348): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xbfb3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x4) ioctl$USBDEVFS_RESET(r0, 0x5514) 90.017406ms ago: executing program 1 (id=349): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x11) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r2, 0x0, 0x4000020) readv(r2, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f00000001c0)={0x32, 0x2, 0x2, 0x8, 0x0, [@mcast2]}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x96346fe8a85d2583, 0x0, 0x808}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x40) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6028d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x182b356d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000280)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000340), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000001480)={[{0x2b, 'cpu'}]}, 0x5) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r8, &(0x7f0000000400)='1', 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) 2.721695ms ago: executing program 4 (id=350): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000b40)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r0, &(0x7f0000000c00)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48}}], 0x2, 0xf00) 0s ago: executing program 4 (id=351): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f00000004c0)='usbip-vudc.0', 0xc) kernel console output (not intermixed with test programs): tooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.960105][ T65] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.969729][ T5746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.970767][ T65] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.466107][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.466201][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.466292][ T5743] bridge_slave_0: entered allmulticast mode [ 38.467636][ T5743] bridge_slave_0: entered promiscuous mode [ 38.501941][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.501985][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.502038][ T5743] bridge_slave_1: entered allmulticast mode [ 38.502793][ T5743] bridge_slave_1: entered promiscuous mode [ 38.553619][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.554584][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.554644][ T5731] bridge_slave_0: entered allmulticast mode [ 38.555363][ T5731] bridge_slave_0: entered promiscuous mode [ 38.565213][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.565255][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.565451][ T5731] bridge_slave_1: entered allmulticast mode [ 38.566204][ T5731] bridge_slave_1: entered promiscuous mode [ 38.585965][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.608902][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.619010][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.619057][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.619116][ T5730] bridge_slave_0: entered allmulticast mode [ 38.619875][ T5730] bridge_slave_0: entered promiscuous mode [ 38.621557][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.621597][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.621669][ T5730] bridge_slave_1: entered allmulticast mode [ 38.622459][ T5730] bridge_slave_1: entered promiscuous mode [ 38.645861][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.645943][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.646046][ T5738] bridge_slave_0: entered allmulticast mode [ 38.647809][ T5738] bridge_slave_0: entered promiscuous mode [ 38.660398][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.662450][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.671126][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.671667][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.671728][ T5738] bridge_slave_1: entered allmulticast mode [ 38.672483][ T5738] bridge_slave_1: entered promiscuous mode [ 38.684635][ T5743] team0: Port device team_slave_0 added [ 38.698838][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.700689][ T5743] team0: Port device team_slave_1 added [ 38.707555][ T5731] team0: Port device team_slave_0 added [ 38.709336][ T5731] team0: Port device team_slave_1 added [ 38.717361][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.731925][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.738437][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.738448][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.738490][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.747731][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.765016][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.765026][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.765039][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.770924][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.770933][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.770946][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.781116][ T5730] team0: Port device team_slave_0 added [ 38.783237][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.783245][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.783258][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.789668][ T5738] team0: Port device team_slave_0 added [ 38.791711][ T5738] team0: Port device team_slave_1 added [ 38.792530][ T5730] team0: Port device team_slave_1 added [ 38.837148][ T5743] hsr_slave_0: entered promiscuous mode [ 38.837647][ T5743] hsr_slave_1: entered promiscuous mode [ 38.850283][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.850293][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.850306][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.853477][ T5731] hsr_slave_0: entered promiscuous mode [ 38.853899][ T5731] hsr_slave_1: entered promiscuous mode [ 38.854198][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 38.854234][ T5731] Cannot create hsr debugfs directory [ 38.854867][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.854878][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.854895][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.855873][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.855881][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.855894][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.856602][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.856612][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.856630][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.915143][ T5738] hsr_slave_0: entered promiscuous mode [ 38.915627][ T5738] hsr_slave_1: entered promiscuous mode [ 38.915900][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 38.915911][ T5738] Cannot create hsr debugfs directory [ 38.952397][ T5730] hsr_slave_0: entered promiscuous mode [ 38.952834][ T5730] hsr_slave_1: entered promiscuous mode [ 38.953156][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 38.953167][ T5730] Cannot create hsr debugfs directory [ 39.156179][ T5731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.164775][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.165339][ T5731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.169467][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.177991][ T5731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.179578][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.180011][ T5731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.182445][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.214373][ T5743] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.216602][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.218162][ T5743] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.222998][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.223564][ T5743] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.226074][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.230239][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.230289][ T5731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.230501][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.230545][ T5731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.232576][ T5743] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.238147][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.281349][ T5738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.285783][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.288345][ T5738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.296521][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.297041][ T5738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.299154][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.301762][ T5738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.304114][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.305095][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.305141][ T5743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.305242][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.305313][ T5743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.372263][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.372308][ T5738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.372444][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.372513][ T5738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.390759][ T5730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.395456][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.396104][ T5730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.399499][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.406573][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.407388][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.409083][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.409334][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.410387][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.410908][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.425983][ T5730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.429826][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.430487][ T5730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.432301][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.436282][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.464425][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.481533][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.481620][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.487176][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.491629][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.491708][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.517652][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.531366][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.531435][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.545116][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.545160][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.548721][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.564458][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.568418][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.568585][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.581347][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.581744][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.617564][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.642004][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.650033][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.650155][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.657763][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.657832][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.853218][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.861519][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.869168][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.895284][ T5743] veth0_vlan: entered promiscuous mode [ 39.910252][ T5743] veth1_vlan: entered promiscuous mode [ 39.921641][ T5731] veth0_vlan: entered promiscuous mode [ 39.924684][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.926670][ T5738] veth0_vlan: entered promiscuous mode [ 39.930226][ T5731] veth1_vlan: entered promiscuous mode [ 39.939667][ T5738] veth1_vlan: entered promiscuous mode [ 39.950160][ T5743] veth0_macvtap: entered promiscuous mode [ 39.959251][ T5743] veth1_macvtap: entered promiscuous mode [ 39.964742][ T65] Bluetooth: hci2: command tx timeout [ 39.964747][ T5740] Bluetooth: hci1: command tx timeout [ 39.975399][ T5730] veth0_vlan: entered promiscuous mode [ 39.978092][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.979124][ T5731] veth0_macvtap: entered promiscuous mode [ 39.980153][ T5738] veth0_macvtap: entered promiscuous mode [ 39.986627][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.988022][ T5731] veth1_macvtap: entered promiscuous mode [ 39.990440][ T5738] veth1_macvtap: entered promiscuous mode [ 39.996225][ T5730] veth1_vlan: entered promiscuous mode [ 40.005992][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.011387][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.014666][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.017158][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.027850][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.034433][ T5740] Bluetooth: hci3: command tx timeout [ 40.034964][ T65] Bluetooth: hci0: command tx timeout [ 40.035246][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.035271][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.055747][ T5730] veth0_macvtap: entered promiscuous mode [ 40.067085][ T5730] veth1_macvtap: entered promiscuous mode [ 40.112310][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.117327][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.117343][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.121635][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.121647][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.121731][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.135083][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.143641][ T208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.143652][ T208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.161773][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.161784][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.184860][ T208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.184872][ T208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.202980][ T5743] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.207771][ T208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.207782][ T208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.210536][ T5743] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.216469][ T5743] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.217826][ T5743] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.219455][ T208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.219465][ T208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.232837][ T5731] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.237826][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.237867][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.237886][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.237903][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.237922][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.237940][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.237957][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.237975][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.237993][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.238012][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.238029][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.238047][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.241651][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.241663][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.360352][ T5886] jffs2: notice: (5886) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 40.464118][ T5895] null_blk: disk nullb1 created [ 40.707248][ T5904] capability: warning: `syz.2.8' uses deprecated v2 capabilities in a way that may be insecure [ 40.764430][ T5808] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 40.854674][ T25] e1000 0000:00:06.0 eth0: Reset adapter [ 40.994656][ T5808] usb 6-1: Using ep0 maxpacket: 16 [ 40.995625][ T5808] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 41.050559][ T5902] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 41.181974][ T5808] usb 6-1: config 0 has no interfaces? [ 41.449662][ T5881] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 41.468011][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.468027][ T5808] usb 6-1: Product: syz [ 41.468034][ T5808] usb 6-1: Manufacturer: syz [ 41.468041][ T5808] usb 6-1: SerialNumber: syz [ 41.658184][ T43] audit: type=1326 audit(1791861619.575:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.3.10" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x0 [ 41.726985][ T5808] usb 6-1: config 0 descriptor?? [ 41.759480][ T65] Bluetooth: hci1: unexpected subevent 0x10 length: 30 > 2 [ 41.797117][ T25] e1000 0000:00:06.0 eth0: Reset adapter [ 41.814967][ T5927] Zero length message leads to an empty skb [ 41.869902][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 41.922506][ T5915] warning: `syz.2.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 41.943513][ T5808] usb 6-1: USB disconnect, device number 2 [ 41.984545][ T5940] FAULT_INJECTION: forcing a failure. [ 41.984545][ T5940] name failslab, interval 1, probability 0, space 0, times 1 [ 41.984565][ T5940] CPU: 1 UID: 0 PID: 5940 Comm: syz.2.13 Not tainted syzkaller #0 PREEMPT(full) [ 41.984578][ T5940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.984584][ T5940] Call Trace: [ 41.984588][ T5940] [ 41.984593][ T5940] dump_stack_lvl+0x100/0x190 [ 41.984617][ T5940] should_fail_ex.cold+0x5/0xa [ 41.984632][ T5940] should_failslab+0xc2/0x120 [ 41.984650][ T5940] __kvmalloc_node_noprof+0x113/0x9b0 [ 41.984684][ T5940] ? listxattr+0x89/0x190 [ 41.984702][ T5940] listxattr+0x89/0x190 [ 41.984718][ T5940] path_listxattrat+0x2b3/0x370 [ 41.984735][ T5940] ? __pfx_path_listxattrat+0x10/0x10 [ 41.984757][ T5940] __do_fast_syscall_32+0x13a/0x8b0 [ 41.984769][ T5940] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.984787][ T5940] do_fast_syscall_32+0x32/0x70 [ 41.984799][ T5940] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 41.984813][ T5940] RIP: 0023:0xf748efec [ 41.984826][ T5940] Code: Unable to access opcode bytes at 0xf748efc2. [ 41.984831][ T5940] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ea [ 41.984842][ T5940] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000880 [ 41.984849][ T5940] RDX: 0000000000000022 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.984856][ T5940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 41.984862][ T5940] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 41.984869][ T5940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.984884][ T5940] [ 42.035301][ T65] Bluetooth: hci2: command tx timeout [ 42.035321][ T65] Bluetooth: hci1: command tx timeout [ 42.114523][ T5740] Bluetooth: hci0: command tx timeout [ 42.124711][ T5740] Bluetooth: hci3: command tx timeout [ 42.537057][ T5965] netlink: 'syz.1.15': attribute type 39 has an invalid length. [ 42.589808][ T5966] trusted_key: encrypted_key: insufficient parameters specified [ 42.800310][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 42.801522][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 42.801662][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 42.802011][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 43.957629][ T5882] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 44.116080][ T65] Bluetooth: hci2: command tx timeout [ 44.116149][ T5740] Bluetooth: hci1: command tx timeout [ 44.195446][ T5740] Bluetooth: hci3: command tx timeout [ 44.195480][ T5740] Bluetooth: hci0: command tx timeout [ 46.195552][ T65] Bluetooth: hci1: command tx timeout [ 46.195577][ T65] Bluetooth: hci2: command tx timeout [ 46.274540][ T5740] Bluetooth: hci0: command tx timeout [ 46.274564][ T5740] Bluetooth: hci3: command tx timeout [ 50.982405][ T6001] syz.3.20 uses obsolete (PF_INET,SOCK_PACKET) [ 51.120373][ T6004] fuse: Unknown parameter '00000000000000000008' [ 51.538211][ T6013] netlink: 'syz.3.23': attribute type 12 has an invalid length. [ 51.647139][ T6011] infiniband syz0: set active [ 51.647153][ T6011] infiniband syz0: added team_slave_0 [ 51.662412][ T6011] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 51.662444][ T6011] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 51.662479][ T6011] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 51.688897][ T6011] RDS/IB: syz0: added [ 51.690287][ T6011] smc: adding ib device syz0 with port count 1 [ 51.690349][ T6011] smc: ib device syz0 port 1 has no pnetid [ 51.718706][ T6018] bond1: option arp_interval: invalid value (18446744073709551615) [ 51.718722][ T6018] bond1: option arp_interval: allowed values 0 - 2147483647 [ 51.720831][ T6018] bond1 (unregistering): Released all slaves [ 52.539259][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 53.181409][ T6054] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20004 [ 53.427814][ T6064] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 53.427947][ T6064] xt_TPROXY: Can be used only with -p tcp or -p udp [ 53.443783][ T6057] FAULT_INJECTION: forcing a failure. [ 53.443783][ T6057] name failslab, interval 1, probability 0, space 0, times 0 [ 53.443813][ T6057] CPU: 3 UID: 0 PID: 6057 Comm: syz.1.31 Not tainted syzkaller #0 PREEMPT(full) [ 53.443836][ T6057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.443846][ T6057] Call Trace: [ 53.443852][ T6057] [ 53.443860][ T6057] dump_stack_lvl+0x100/0x190 [ 53.443891][ T6057] should_fail_ex.cold+0x5/0xa [ 53.443917][ T6057] should_failslab+0xc2/0x120 [ 53.443947][ T6057] __kmalloc_cache_noprof+0x91/0x6d0 [ 53.443970][ T6057] ? __kasan_kmalloc+0xaa/0xb0 [ 53.443997][ T6057] ? ntfs_init_fs_context+0x4d/0x620 [ 53.444029][ T6057] ntfs_init_fs_context+0x4d/0x620 [ 53.444054][ T6057] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 53.444085][ T6057] alloc_fs_context+0x60c/0xf40 [ 53.444110][ T6057] __ia32_sys_fsopen+0xef/0x230 [ 53.444135][ T6057] __do_fast_syscall_32+0x13a/0x8b0 [ 53.444161][ T6057] do_fast_syscall_32+0x32/0x70 [ 53.444182][ T6057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.444207][ T6057] RIP: 0023:0xf748efec [ 53.444229][ T6057] Code: Unable to access opcode bytes at 0xf748efc2. [ 53.444238][ T6057] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 53.444276][ T6057] RAX: ffffffffffffffda RBX: 0000000080000400 RCX: 0000000000000000 [ 53.444291][ T6057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.444304][ T6057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.444315][ T6057] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.444325][ T6057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.444348][ T6057] [ 53.574670][ T6069] FAULT_INJECTION: forcing a failure. [ 53.574670][ T6069] name failslab, interval 1, probability 0, space 0, times 0 [ 53.574693][ T6069] CPU: 0 UID: 0 PID: 6069 Comm: syz.3.35 Not tainted syzkaller #0 PREEMPT(full) [ 53.574707][ T6069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.574713][ T6069] Call Trace: [ 53.574718][ T6069] [ 53.574722][ T6069] dump_stack_lvl+0x100/0x190 [ 53.574742][ T6069] should_fail_ex.cold+0x5/0xa [ 53.574757][ T6069] should_failslab+0xc2/0x120 [ 53.574776][ T6069] __kmalloc_cache_noprof+0x91/0x6d0 [ 53.574790][ T6069] ? io_wq_create+0x6a/0x9a0 [ 53.574805][ T6069] io_wq_create+0x6a/0x9a0 [ 53.574818][ T6069] io_uring_alloc_task_context+0x2d9/0x656 [ 53.574830][ T6069] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 53.574844][ T6069] ? alloc_file_pseudo+0x1ee/0x290 [ 53.574876][ T6069] __io_uring_add_tctx_node.cold+0x15/0x20a [ 53.574887][ T6069] ? security_inode_init_security_anon+0x7b/0x230 [ 53.574902][ T6069] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 53.574921][ T6069] ? __anon_inode_getfile+0x17c/0x280 [ 53.574937][ T6069] io_uring_setup.cold+0x194c/0x1c0e [ 53.574957][ T6069] ? __pfx_io_uring_setup+0x10/0x10 [ 53.574972][ T6069] ? __pfx_do_futex+0x10/0x10 [ 53.574991][ T6069] ? xfd_validate_state+0x129/0x190 [ 53.575023][ T6069] __ia32_sys_io_uring_setup+0xc2/0x170 [ 53.575040][ T6069] __do_fast_syscall_32+0x13a/0x8b0 [ 53.575060][ T6069] do_fast_syscall_32+0x32/0x70 [ 53.575077][ T6069] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.575091][ T6069] RIP: 0023:0xf740efec [ 53.575104][ T6069] Code: Unable to access opcode bytes at 0xf740efc2. [ 53.575109][ T6069] RSP: 002b:00000000f54264bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 53.575121][ T6069] RAX: ffffffffffffffda RBX: 0000000000000f00 RCX: 0000000080000140 [ 53.575128][ T6069] RDX: 00000000f7191057 RSI: 0000000000000001 RDI: 00000000f542653c [ 53.575134][ T6069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.575141][ T6069] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.575147][ T6069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.575161][ T6069] [ 53.637103][ T6071] FAULT_INJECTION: forcing a failure. [ 53.637103][ T6071] name failslab, interval 1, probability 0, space 0, times 0 [ 53.637133][ T6071] CPU: 1 UID: 0 PID: 6071 Comm: syz.3.36 Not tainted syzkaller #0 PREEMPT(full) [ 53.637157][ T6071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.637168][ T6071] Call Trace: [ 53.637176][ T6071] [ 53.637184][ T6071] dump_stack_lvl+0x100/0x190 [ 53.637218][ T6071] should_fail_ex.cold+0x5/0xa [ 53.637245][ T6071] should_failslab+0xc2/0x120 [ 53.637277][ T6071] __kmalloc_cache_noprof+0x91/0x6d0 [ 53.637302][ T6071] ? apply_wqattrs_prepare+0x136/0xbb0 [ 53.637338][ T6071] apply_wqattrs_prepare+0x136/0xbb0 [ 53.637367][ T6071] ? __alloc_workqueue+0x8ca/0x1950 [ 53.637403][ T6071] apply_workqueue_attrs_locked+0x64/0xe0 [ 53.637459][ T6071] __alloc_workqueue+0x9a7/0x1950 [ 53.637490][ T6071] alloc_workqueue_noprof+0xc7/0x130 [ 53.637512][ T6071] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 53.637533][ T6071] ? __pfx_dev_set_name+0x10/0x10 [ 53.637568][ T6071] ? __kasan_kmalloc+0xaa/0xb0 [ 53.637599][ T6071] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 53.637625][ T6071] hci_register_dev+0x1cf/0xcc0 [ 53.637654][ T6071] hci_uart_tty_ioctl+0x8fd/0xcb0 [ 53.637686][ T6071] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 53.637711][ T6071] tty_compat_ioctl+0x24d/0x420 [ 53.637736][ T6071] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 53.637761][ T6071] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 53.637789][ T6071] __do_fast_syscall_32+0x13a/0x8b0 [ 53.637814][ T6071] do_fast_syscall_32+0x32/0x70 [ 53.637835][ T6071] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.637860][ T6071] RIP: 0023:0xf740efec [ 53.637880][ T6071] Code: Unable to access opcode bytes at 0xf740efc2. [ 53.637890][ T6071] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 53.637910][ T6071] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400455c8 [ 53.637923][ T6071] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.637934][ T6071] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.637946][ T6071] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.637958][ T6071] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.637985][ T6071] [ 53.638937][ T6071] Bluetooth: Can't register HCI device [ 53.664236][ T6073] syz.0.37 (6073): attempted to duplicate a private mapping with mremap. This is not supported. [ 53.957973][ T6060] FAULT_INJECTION: forcing a failure. [ 53.957973][ T6060] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 53.957995][ T6060] CPU: 3 UID: 0 PID: 6060 Comm: syz.1.31 Not tainted syzkaller #0 PREEMPT(full) [ 53.958008][ T6060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.958023][ T6060] Call Trace: [ 53.958027][ T6060] [ 53.958032][ T6060] dump_stack_lvl+0x100/0x190 [ 53.958053][ T6060] should_fail_ex.cold+0x5/0xa [ 53.958069][ T6060] _copy_from_user+0x2e/0xd0 [ 53.958082][ T6060] __sys_bpf+0x2f5/0x4a30 [ 53.958100][ T6060] ? __pfx___sys_bpf+0x10/0x10 [ 53.958113][ T6060] ? __pfx_futex_hash+0x10/0x10 [ 53.958126][ T6060] ? irqentry_exit+0x24d/0xa10 [ 53.958138][ T6060] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.958165][ T6060] ? __put_user_nocheck_8+0x10/0x10 [ 53.958198][ T6060] ? do_vfs_ioctl+0x226/0x13e0 [ 53.958220][ T6060] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 53.958236][ T6060] ? xfd_validate_state+0x129/0x190 [ 53.958256][ T6060] ? __ia32_sys_bpf+0xcc/0x170 [ 53.958269][ T6060] __ia32_sys_bpf+0xcc/0x170 [ 53.958283][ T6060] ? __do_fast_syscall_32+0xb3/0x8b0 [ 53.958297][ T6060] __do_fast_syscall_32+0x13a/0x8b0 [ 53.958311][ T6060] do_fast_syscall_32+0x32/0x70 [ 53.958322][ T6060] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.958336][ T6060] RIP: 0023:0xf748efec [ 53.958348][ T6060] Code: Unable to access opcode bytes at 0xf748efc2. [ 53.958353][ T6060] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 53.958364][ T6060] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000540 [ 53.958371][ T6060] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.958378][ T6060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.958384][ T6060] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.958391][ T6060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.958405][ T6060] [ 54.016798][ T1159] IPVS: starting estimator thread 0... [ 54.104455][ T6078] IPVS: using max 43 ests per chain, 103200 per kthread [ 54.454387][ T5809] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 54.455438][ T6090] Bluetooth: MGMT ver 1.23 [ 54.604161][ T6098] hsr_slave_0: left promiscuous mode [ 54.610534][ T5809] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 54.611726][ T5809] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 54.611749][ T5809] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 54.611767][ T5809] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 54.612476][ T6098] hsr_slave_1: left promiscuous mode [ 54.613375][ T5809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 54.613427][ T5809] usb 6-1: Product: syz [ 54.613437][ T5809] usb 6-1: Manufacturer: syz [ 54.843889][ T6080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 54.844085][ T6080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 54.852818][ T5809] dvb_ttusb_budget: ttusb_init_controller: error [ 54.852874][ T5809] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 54.887725][ T5809] DVB: Unable to find symbol cx22700_attach() [ 54.905407][ T5809] DVB: Unable to find symbol tda10046_attach() [ 54.905425][ T5809] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 55.056672][ T6080] dvb_ttusb_budget: failed urb submission (0: err = -8)! [ 55.067204][ T5809] usb 6-1: USB disconnect, device number 3 [ 55.210708][ T6114] ======================================================= [ 55.210708][ T6114] WARNING: The mand mount option has been deprecated and [ 55.210708][ T6114] and is ignored by this kernel. Remove the mand [ 55.210708][ T6114] option from the mount to silence this warning. [ 55.210708][ T6114] ======================================================= [ 55.287686][ T6119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.47'. [ 55.287702][ T6119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.47'. [ 55.458721][ T73] IPVS: starting estimator thread 0... [ 55.502614][ T6133] futex_wake_op: syz.3.53 tries to shift op by 144; fix this program [ 55.518252][ T6125] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 55.554524][ T6131] IPVS: using max 28 ests per chain, 67200 per kthread [ 55.584408][ T5809] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.745078][ T5809] usb 5-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 55.746015][ T5809] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.746038][ T5809] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.747400][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 55.747416][ T5809] usb 5-1: Product: syz [ 55.747430][ T5809] usb 5-1: Manufacturer: syz [ 55.754235][ T5809] navman 5-1:1.0: navman converter detected [ 55.783893][ T5809] usb 5-1: navman converter now attached to ttyUSB0 [ 55.898941][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 55.959777][ T6123] navman ttyUSB0: navman_open - failed submitting interrupt urb, error -90 [ 55.961508][ T5808] usb 5-1: USB disconnect, device number 2 [ 55.980642][ T5808] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 55.981151][ T5808] navman 5-1:1.0: device disconnected [ 56.093298][ T6142] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 56.095458][ T6141] [U]  [ 56.416378][ T6146] tmpfs: Unknown parameter 'n' [ 56.514410][ T5740] Bluetooth: hci0: command 0x1405 tx timeout [ 56.514823][ T65] Bluetooth: hci0: Opcode 0x1405 failed: -110 [ 56.541279][ T6153] sctp: [Deprecated]: syz.3.59 (pid 6153) Use of int in max_burst socket option. [ 56.541279][ T6153] Use struct sctp_assoc_value instead [ 56.674246][ T6160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.63'. [ 56.674928][ T6160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.63'. [ 56.674938][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 57.146410][ T6163] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 57.383895][ T6167] FAULT_INJECTION: forcing a failure. [ 57.383895][ T6167] name failslab, interval 1, probability 0, space 0, times 0 [ 57.383916][ T6167] CPU: 3 UID: 0 PID: 6167 Comm: syz.3.66 Not tainted syzkaller #0 PREEMPT(full) [ 57.383930][ T6167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.383936][ T6167] Call Trace: [ 57.383941][ T6167] [ 57.383945][ T6167] dump_stack_lvl+0x100/0x190 [ 57.383964][ T6167] should_fail_ex.cold+0x5/0xa [ 57.383980][ T6167] should_failslab+0xc2/0x120 [ 57.383999][ T6167] __kvmalloc_node_noprof+0x113/0x9b0 [ 57.384016][ T6167] ? bpf_check_cfg+0xb4/0x990 [ 57.384031][ T6167] bpf_check_cfg+0xb4/0x990 [ 57.384044][ T6167] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.384064][ T6167] bpf_check+0x7d45/0xac70 [ 57.384081][ T6167] ? __css_rstat_updated+0x1ce/0x590 [ 57.384092][ T6167] ? __lock_acquire+0x5c0/0x1f40 [ 57.384108][ T6167] ? __pfx___css_rstat_updated+0x10/0x10 [ 57.384128][ T6167] ? __pfx_bpf_check+0x10/0x10 [ 57.384145][ T6167] ? lock_acquire+0x1d1/0x380 [ 57.384161][ T6167] ? find_held_lock+0x2b/0x80 [ 57.384174][ T6167] ? bpf_prog_load+0x1a27/0x2ab0 [ 57.384193][ T6167] ? __asan_memset+0x23/0x50 [ 57.384210][ T6167] ? bpf_prog_load+0x1ae1/0x2ab0 [ 57.384226][ T6167] bpf_prog_load+0x1ae1/0x2ab0 [ 57.384245][ T6167] ? __pfx_bpf_prog_load+0x10/0x10 [ 57.384281][ T6167] ? lock_acquire+0x1d1/0x380 [ 57.384311][ T6167] __sys_bpf+0x1f46/0x4a30 [ 57.384329][ T6167] ? __pfx___sys_bpf+0x10/0x10 [ 57.384342][ T6167] ? find_held_lock+0x2b/0x80 [ 57.384355][ T6167] ? futex_wake+0x4ea/0x5e0 [ 57.384381][ T6167] ? rcu_read_lock_any_held+0x6a/0x90 [ 57.384395][ T6167] ? find_held_lock+0x2b/0x80 [ 57.384408][ T6167] ? ksys_write+0x190/0x250 [ 57.384425][ T6167] ? ksys_write+0x190/0x250 [ 57.384458][ T6167] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 57.384479][ T6167] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 57.384501][ T6167] ? fput+0x7c/0x100 [ 57.384525][ T6167] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 57.384542][ T6167] ? ksys_write+0x1ac/0x250 [ 57.384558][ T6167] ? __ia32_sys_bpf+0xcc/0x170 [ 57.384571][ T6167] __ia32_sys_bpf+0xcc/0x170 [ 57.384585][ T6167] ? __do_fast_syscall_32+0xb3/0x8b0 [ 57.384599][ T6167] __do_fast_syscall_32+0x13a/0x8b0 [ 57.384609][ T6167] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.384628][ T6167] do_fast_syscall_32+0x32/0x70 [ 57.384639][ T6167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.384653][ T6167] RIP: 0023:0xf740efec [ 57.384667][ T6167] Code: Unable to access opcode bytes at 0xf740efc2. [ 57.384672][ T6167] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 57.384684][ T6167] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000180 [ 57.384691][ T6167] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.384698][ T6167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.384704][ T6167] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 57.384711][ T6167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.384724][ T6167] [ 57.520669][ T6173] overlayfs: upper fs does not support file handles, falling back to index=off. [ 57.834365][ T5809] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 58.004370][ T5809] usb 7-1: Using ep0 maxpacket: 32 [ 58.006221][ T5809] usb 7-1: unable to get BOS descriptor or descriptor too short [ 58.006256][ T5809] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 58.007136][ T5809] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 58.007153][ T5809] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 58.007170][ T5809] usb 7-1: config 14 has no interface number 0 [ 58.007185][ T5809] usb 7-1: config 14 has no interface number 1 [ 58.007230][ T5809] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 58.007248][ T5809] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 58.007273][ T5809] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 58.007291][ T5809] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 58.007310][ T5809] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 58.007357][ T5809] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.007380][ T5809] usb 7-1: config 14 interface 57 has no altsetting 0 [ 58.007394][ T5809] usb 7-1: config 14 interface 228 has no altsetting 0 [ 58.013956][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.013977][ T5809] usb 7-1: Product: syz [ 58.013991][ T5809] usb 7-1: Manufacturer: syz [ 58.014002][ T5809] usb 7-1: SerialNumber: syz [ 58.089149][ T5824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.129843][ T6200] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 58.184008][ T5824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.245805][ T5824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.300797][ T5740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.306535][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.309092][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.311124][ T5740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.312079][ T5740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.313943][ T5824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.437456][ T5809] legousbtower 7-1:14.57: interrupt endpoints not found [ 58.462660][ T5824] bridge_slave_1: left allmulticast mode [ 58.462693][ T5824] bridge_slave_1: left promiscuous mode [ 58.463873][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.473317][ T5824] bridge_slave_0: left allmulticast mode [ 58.473338][ T5824] bridge_slave_0: left promiscuous mode [ 58.473504][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.613650][ T5824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.623647][ T5824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.625617][ T5824] bond0 (unregistering): Released all slaves [ 58.720347][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 58.733074][ T6223] FAULT_INJECTION: forcing a failure. [ 58.733074][ T6223] name failslab, interval 1, probability 0, space 0, times 0 [ 58.733093][ T6223] CPU: 0 UID: 0 PID: 6223 Comm: syz.3.86 Not tainted syzkaller #0 PREEMPT(full) [ 58.733105][ T6223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.733112][ T6223] Call Trace: [ 58.733116][ T6223] [ 58.733121][ T6223] dump_stack_lvl+0x100/0x190 [ 58.733141][ T6223] should_fail_ex.cold+0x5/0xa [ 58.733157][ T6223] should_failslab+0xc2/0x120 [ 58.733175][ T6223] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 58.733193][ T6223] ? __alloc_skb+0x140/0x710 [ 58.733208][ T6223] __alloc_skb+0x140/0x710 [ 58.733219][ T6223] ? __alloc_skb+0x5b7/0x710 [ 58.733232][ T6223] ? __pfx___alloc_skb+0x10/0x10 [ 58.733246][ T6223] ? __asan_memcpy+0x3c/0x60 [ 58.733262][ T6223] alloc_uevent_skb+0x7d/0x210 [ 58.733279][ T6223] kobject_uevent_env+0x122c/0x18b0 [ 58.733299][ T6223] net_rx_queue_update_kobjects+0x1dd/0x760 [ 58.733320][ T6223] ? kset_register+0x1bb/0x290 [ 58.733337][ T6223] netdev_register_kobject+0x2c6/0x410 [ 58.733356][ T6223] register_netdevice+0x15b6/0x25a0 [ 58.733374][ T6223] ? __pfx_register_netdevice+0x10/0x10 [ 58.733394][ T6223] bond_newlink+0x6a/0x100 [ 58.733407][ T6223] ? __pfx_bond_newlink+0x10/0x10 [ 58.733419][ T6223] rtnl_newlink+0x1697/0x2620 [ 58.733438][ T6223] ? __pfx_rtnl_newlink+0x10/0x10 [ 58.733454][ T6223] ? rcu_is_watching+0x13/0xc0 [ 58.733478][ T6223] ? find_held_lock+0x2b/0x80 [ 58.733494][ T6223] ? lock_acquire+0x1d1/0x380 [ 58.733510][ T6223] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 58.733526][ T6223] ? find_held_lock+0x2b/0x80 [ 58.733540][ T6223] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 58.733555][ T6223] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 58.733570][ T6223] ? __pfx_rtnl_newlink+0x10/0x10 [ 58.733585][ T6223] rtnetlink_rcv_msg+0x95e/0xe90 [ 58.733602][ T6223] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 58.733621][ T6223] ? ref_tracker_free+0x37e/0x6c0 [ 58.733638][ T6223] netlink_rcv_skb+0x159/0x420 [ 58.733651][ T6223] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 58.733666][ T6223] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 58.733683][ T6223] ? netlink_deliver_tap+0x1ae/0xcc0 [ 58.733697][ T6223] netlink_unicast+0x585/0x850 [ 58.733711][ T6223] ? __pfx_netlink_unicast+0x10/0x10 [ 58.733727][ T6223] netlink_sendmsg+0x8b0/0xda0 [ 58.733741][ T6223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.733754][ T6223] ? apparmor_socket_sendmsg+0x165/0x280 [ 58.733769][ T6223] ____sys_sendmsg+0xa4d/0xbe0 [ 58.733785][ T6223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.733799][ T6223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.733822][ T6223] ___sys_sendmsg+0x190/0x1e0 [ 58.733839][ T6223] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.733857][ T6223] ? futex_wait+0x11e/0x370 [ 58.733877][ T6223] ? find_held_lock+0x2b/0x80 [ 58.733899][ T6223] __sys_sendmsg+0x160/0x210 [ 58.733913][ T6223] ? __pfx___sys_sendmsg+0x10/0x10 [ 58.733941][ T6223] __do_fast_syscall_32+0x13a/0x8b0 [ 58.733956][ T6223] do_fast_syscall_32+0x32/0x70 [ 58.733968][ T6223] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 58.733984][ T6223] RIP: 0023:0xf740efec [ 58.733997][ T6223] Code: Unable to access opcode bytes at 0xf740efc2. [ 58.734002][ T6223] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 58.734014][ T6223] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000400 [ 58.734021][ T6223] RDX: 00000000097a09f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.734027][ T6223] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 58.734034][ T6223] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 58.734040][ T6223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.734054][ T6223] [ 58.740639][ T6223] bond1: entered promiscuous mode [ 58.740660][ T6223] bond1: entered allmulticast mode [ 58.740886][ T6223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.833081][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 58.840622][ T5809] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 58.843372][ T5809] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 59.027698][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 59.068891][ T5824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.068922][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.069781][ T5824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.069792][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.086077][ T5824] veth1_macvtap: left promiscuous mode [ 59.086131][ T5824] veth0_macvtap: left promiscuous mode [ 59.086206][ T5824] veth1_vlan: left promiscuous mode [ 59.086312][ T5824] veth0_vlan: left promiscuous mode [ 59.232931][ T5824] team0 (unregistering): Port device team_slave_1 removed [ 59.246923][ T5824] team0 (unregistering): Port device team_slave_0 removed [ 59.403382][ T58] usb 7-1: USB disconnect, device number 2 [ 59.403518][ C2] usb 7-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 59.421772][ T58] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 59.485670][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 59.488998][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 59.495106][ T6208] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.495148][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.495205][ T6208] bridge_slave_0: entered allmulticast mode [ 59.496011][ T6208] bridge_slave_0: entered promiscuous mode [ 59.499778][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.499892][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.499983][ T6208] bridge_slave_1: entered allmulticast mode [ 59.500971][ T6208] bridge_slave_1: entered promiscuous mode [ 59.519992][ T6208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.521414][ T6208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.534470][ T6208] team0: Port device team_slave_0 added [ 59.535712][ T6208] team0: Port device team_slave_1 added [ 59.546608][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.546616][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.546629][ T6208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.547925][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.547933][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.547945][ T6208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.579625][ T6264] netlink: 'syz.1.91': attribute type 29 has an invalid length. [ 59.579638][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 59.594812][ T6208] hsr_slave_0: entered promiscuous mode [ 59.595240][ T6208] hsr_slave_1: entered promiscuous mode [ 59.595552][ T6208] debugfs: 'hsr0' already exists in 'hsr' [ 59.595564][ T6208] Cannot create hsr debugfs directory [ 59.619071][ T6183] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.72' sets config #0 [ 59.744055][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 59.808001][ T6208] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.811524][ T6208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.812765][ T6208] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.821562][ T6208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.822078][ T6208] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.825730][ T6208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.829478][ T6208] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.833851][ T6208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.849303][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.849349][ T6208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.849448][ T6208] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.849497][ T6208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.886972][ T6208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.903010][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.906464][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.916710][ T6208] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.923692][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.923736][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.929769][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.929812][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.953101][ T6208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.985584][ T6272] netlink: 'syz.1.92': attribute type 10 has an invalid length. [ 59.997007][ T6272] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 60.354909][ T65] Bluetooth: hci2: command tx timeout [ 60.431706][ T6208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.653995][ T6208] veth0_vlan: entered promiscuous mode [ 60.661996][ T6208] veth1_vlan: entered promiscuous mode [ 60.693244][ T6208] veth0_macvtap: entered promiscuous mode [ 60.698243][ T6208] veth1_macvtap: entered promiscuous mode [ 60.710390][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.723017][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.728524][ T5824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.748883][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.775819][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.775855][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.796826][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.796846][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.829901][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.829916][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.046475][ T6314] overlay: Unknown parameter '/' [ 61.049187][ T6314] overlay: Bad value for 'nfs_export' [ 61.080576][ T6314] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888070070000 pfn:0x70070 [ 61.080596][ T6314] head: order:4 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 61.080605][ T6314] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 61.080616][ T6314] page_type: f8(unknown) [ 61.080625][ T6314] raw: 04fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 61.080635][ T6314] raw: ffff888070070000 0000000000000000 00000000f8000000 0000000000000000 [ 61.080645][ T6314] head: 04fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 61.080655][ T6314] head: ffff888070070000 0000000000000000 00000000f8000000 0000000000000000 [ 61.080665][ T6314] head: 04fff00000000004 fffffffffffffc01 00000000ffffffff 00000000ffffffff [ 61.080675][ T6314] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000010 [ 61.080681][ T6314] page dumped because: unmovable page [ 61.080688][ T6314] page_owner tracks the page as allocated [ 61.080692][ T6314] page last allocated via order 4, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 6208, tgid 6208 (syz-executor), ts 60795282500 [ 61.080710][ T6314] post_alloc_hook+0xfd/0x120 [ 61.080725][ T6314] get_page_from_freelist+0x110d/0x35d0 [ 61.080738][ T6314] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 61.080751][ T6314] alloc_pages_mpol+0x201/0x550 [ 61.080761][ T6314] ___kmalloc_large_node+0xe8/0x130 [ 61.080783][ T6314] __kmalloc_large_node_noprof+0x1c/0x70 [ 61.080798][ T6314] __kmalloc_noprof+0x5a8/0x840 [ 61.080818][ T6314] wiphy_new_nm+0x701/0x2350 [ 61.080838][ T6314] ieee80211_alloc_hw_nm+0x1b2e/0x2310 [ 61.080867][ T6314] mac80211_hwsim_new_radio+0x1de/0x6510 [ 61.080893][ T6314] hwsim_new_radio_nl+0xc6b/0x13f0 [ 61.080915][ T6314] genl_family_rcv_msg_doit+0x214/0x300 [ 61.080935][ T6314] genl_rcv_msg+0x560/0x800 [ 61.080948][ T6314] netlink_rcv_skb+0x159/0x420 [ 61.080959][ T6314] genl_rcv+0x28/0x40 [ 61.080971][ T6314] netlink_unicast+0x585/0x850 [ 61.080983][ T6314] page last free pid 5881 tgid 5881 ts 60536538763 stack trace: [ 61.080991][ T6314] __free_frozen_pages+0x79f/0x10f0 [ 61.081002][ T6314] tlb_remove_table_rcu+0x2cf/0x380 [ 61.081013][ T6314] rcu_core+0x5f0/0x1260 [ 61.081024][ T6314] handle_softirqs+0x1e6/0x9d0 [ 61.081040][ T6314] __irq_exit_rcu+0x16a/0x210 [ 61.081056][ T6314] irq_exit_rcu+0x9/0x30 [ 61.081072][ T6314] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 61.081089][ T6314] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 61.093159][ T6326] netlink: 'syz.1.98': attribute type 1 has an invalid length. [ 61.101168][ T65] Bluetooth: hci3: Unable to find connection for big 0x00 [ 61.221699][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 61.361825][ T6336] netlink: 312 bytes leftover after parsing attributes in process `syz.2.103'. [ 61.568925][ T6338] trusted_key: syz.2.103 sent an empty control message without MSG_MORE. [ 61.603122][ T6340] process 'syz.3.104' launched '/dev/fd/4' with NULL argv: empty string added [ 61.655729][ T6343] netlink: 'syz.1.105': attribute type 10 has an invalid length. [ 61.671413][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.677176][ T6343] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 61.685308][ T6343] netlink: 14 bytes leftover after parsing attributes in process `syz.1.105'. [ 61.702371][ T6343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.708580][ T6343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.712810][ T6343] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 61.721924][ T6343] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 61.726180][ T6343] bond0 (unregistering): Released all slaves [ 61.743226][ T6345] syz.1.105: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 61.743339][ T6345] CPU: 2 UID: 0 PID: 6345 Comm: syz.1.105 Not tainted syzkaller #0 PREEMPT(full) [ 61.743354][ T6345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.743361][ T6345] Call Trace: [ 61.743365][ T6345] [ 61.743370][ T6345] dump_stack_lvl+0x100/0x190 [ 61.743390][ T6345] warn_alloc.cold+0x9e/0xb2 [ 61.743403][ T6345] ? __pfx_warn_alloc+0x10/0x10 [ 61.743424][ T6345] ? __lock_acquire+0x5c0/0x1f40 [ 61.743444][ T6345] __vmalloc_node_range_noprof+0x123b/0x1420 [ 61.743462][ T6345] ? __lock_acquire+0x5c0/0x1f40 [ 61.743478][ T6345] ? __lock_acquire+0x5c0/0x1f40 [ 61.743498][ T6345] ? do_replace+0x1c6/0x490 [ 61.743517][ T6345] ? do_raw_spin_lock+0x128/0x260 [ 61.743531][ T6345] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 61.743550][ T6345] ? __lock_acquire+0x5c0/0x1f40 [ 61.743567][ T6345] ? do_raw_spin_unlock+0x145/0x1e0 [ 61.743580][ T6345] ? do_replace+0x1c6/0x490 [ 61.743593][ T6345] __vmalloc_node_noprof+0xad/0xf0 [ 61.743610][ T6345] ? do_replace+0x1c6/0x490 [ 61.743625][ T6345] __vmalloc_noprof+0xa3/0x120 [ 61.743635][ T6345] ? __pfx___vmalloc_noprof+0x10/0x10 [ 61.743651][ T6345] do_replace+0x1c6/0x490 [ 61.743665][ T6345] ? __pfx_do_replace+0x10/0x10 [ 61.743685][ T6345] ? register_lock_class+0x3f/0x7b0 [ 61.743705][ T6345] compat_do_replace+0x589/0x7a0 [ 61.743721][ T6345] ? __pfx_compat_do_replace+0x10/0x10 [ 61.743742][ T6345] ? bpf_lsm_capable+0x9/0x10 [ 61.743754][ T6345] ? security_capable+0x80/0x260 [ 61.743774][ T6345] do_ebt_set_ctl+0x3f4/0x4a0 [ 61.743789][ T6345] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 61.743804][ T6345] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 61.743818][ T6345] ? nf_sockopt_find.isra.0+0x222/0x290 [ 61.743834][ T6345] nf_setsockopt+0x8d/0xf0 [ 61.743849][ T6345] ip_setsockopt+0xcb/0xf0 [ 61.743860][ T6345] tcp_setsockopt+0xa7/0x100 [ 61.743875][ T6345] smc_setsockopt+0x1b6/0xa40 [ 61.743889][ T6345] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 61.743908][ T6345] ? __pfx_smc_setsockopt+0x10/0x10 [ 61.743924][ T6345] ? aa_sock_opt_perm+0x114/0x1e0 [ 61.743942][ T6345] ? __pfx_smc_setsockopt+0x10/0x10 [ 61.743958][ T6345] do_sock_setsockopt+0xf3/0x1d0 [ 61.743975][ T6345] __sys_setsockopt+0x119/0x190 [ 61.743990][ T6345] __ia32_sys_setsockopt+0xbc/0x160 [ 61.744003][ T6345] ? __do_fast_syscall_32+0xb3/0x8b0 [ 61.744014][ T6345] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.744031][ T6345] __do_fast_syscall_32+0x13a/0x8b0 [ 61.744044][ T6345] do_fast_syscall_32+0x32/0x70 [ 61.744056][ T6345] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.744071][ T6345] RIP: 0023:0xf748efec [ 61.744084][ T6345] Code: Unable to access opcode bytes at 0xf748efc2. [ 61.744090][ T6345] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 61.744101][ T6345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 61.744108][ T6345] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 61.744115][ T6345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.744121][ T6345] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 61.744127][ T6345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.744141][ T6345] [ 61.744146][ T6345] Mem-Info: [ 61.744151][ T6345] active_anon:8573 inactive_anon:30 isolated_anon:0 [ 61.744151][ T6345] active_file:8330 inactive_file:50930 isolated_file:0 [ 61.744151][ T6345] unevictable:1000 dirty:442 writeback:0 [ 61.744151][ T6345] slab_reclaimable:8036 slab_unreclaimable:54527 [ 61.744151][ T6345] mapped:26803 shmem:4351 pagetables:1093 [ 61.744151][ T6345] sec_pagetables:300 bounce:0 [ 61.744151][ T6345] kernel_misc_reclaimable:0 [ 61.744151][ T6345] free:37390 free_pcp:6281 free_cma:0 [ 61.744177][ T6345] Node 0 active_anon:28kB inactive_anon:40kB active_file:144kB inactive_file:164kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:24kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8000kB pagetables:1048kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 61.744205][ T6345] Node 1 active_anon:34264kB inactive_anon:80kB active_file:33176kB inactive_file:203556kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:107164kB dirty:1744kB writeback:0kB shmem:15404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5588kB pagetables:3324kB sec_pagetables:80kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 61.744234][ T6345] Node 0 DMA free:2324kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:484kB local_pcp:128kB free_cma:0kB [ 61.744404][ T6345] lowmem_reserve[]: 0 259 259 259 259 [ 61.744427][ T6345] Node 0 DMA32 free:15276kB boost:2048kB min:13752kB low:16676kB high:19600kB reserved_highatomic:0kB free_highatomic:0kB active_anon:28kB inactive_anon:40kB active_file:16kB inactive_file:164kB unevictable:2000kB writepending:20kB zspages:0kB present:1032196kB managed:265360kB mlocked:0kB bounce:0kB free_pcp:8512kB local_pcp:2368kB free_cma:0kB [ 61.744460][ T6345] lowmem_reserve[]: 0 0 0 0 0 [ 61.744479][ T6345] Node 1 DMA32 free:131960kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34264kB inactive_anon:80kB active_file:33176kB inactive_file:203556kB unevictable:2000kB writepending:1744kB zspages:2448kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:16128kB local_pcp:1052kB free_cma:0kB [ 61.744517][ T6345] lowmem_reserve[]: 0 0 0 0 0 [ 61.744534][ T6345] Node 0 DMA: 69*4kB (UE) 40*8kB (UE) 8*16kB (UE) 20*32kB (UE) 9*64kB (UE) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2324kB [ 61.744710][ T6345] Node 0 DMA32: 27*4kB (UE) 68*8kB (UME) 44*16kB (UME) 83*32kB (UME) 50*64kB (UME) 35*128kB (UME) 14*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 15276kB [ 61.745134][ T6345] Node 1 DMA32: 21*4kB (E) 35*8kB (UE) 317*16kB (U) 203*32kB (UME) 99*64kB (UE) 43*128kB (UME) 38*256kB (UME) 32*512kB (UME) 14*1024kB (UME) 7*2048kB (UM) 13*4096kB (UM) = 131804kB [ 61.745223][ T6345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 61.745232][ T6345] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 61.745240][ T6345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 61.745248][ T6345] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 61.746843][ T6345] 63763 total pagecache pages [ 61.746850][ T6345] 151 pages in swap cache [ 61.746854][ T6345] Free swap = 120512kB [ 61.746858][ T6345] Total swap = 124996kB [ 61.746863][ T6345] 524155 pages RAM [ 61.746866][ T6345] 0 pages HighMem/MovableOnly [ 61.746870][ T6345] 216923 pages reserved [ 61.746874][ T6345] 0 pages cma reserved [ 61.859124][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 61.945431][ T6345] mmap: syz.1.105 (6345) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.150248][ T6350] binder: 6349:6350 ioctl c0306201 800001c0 returned -14 [ 62.150618][ T6350] binder_alloc: binder_alloc_mmap_handler: 6349 80ffe000-81000000 already mapped failed -16 [ 62.355484][ T6356] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 62.434511][ T65] Bluetooth: hci2: command tx timeout [ 62.593188][ T6368] netlink: 100 bytes leftover after parsing attributes in process `syz.3.112'. [ 62.593267][ T6368] netlink: 100 bytes leftover after parsing attributes in process `syz.3.112'. [ 62.593323][ T6368] netlink: 100 bytes leftover after parsing attributes in process `syz.3.112'. [ 62.888742][ T43] audit: type=1326 audit(1791861640.802:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.1.114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000 [ 62.888774][ T43] audit: type=1326 audit(1791861640.802:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.1.114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000 [ 62.890037][ T43] audit: type=1326 audit(1791861640.802:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.1.114" exe="/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf721a990 code=0x7ffc0000 [ 62.890143][ T43] audit: type=1326 audit(1791861640.802:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.1.114" exe="/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf748efec code=0x7ffc0000 [ 62.890194][ T43] audit: type=1326 audit(1791861640.802:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.1.114" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf748efec code=0x7ffc0000 [ 62.890214][ T43] audit: type=1326 audit(1791861640.802:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.1.114" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf748efec code=0x7ffc0000 [ 62.890306][ T43] audit: type=1326 audit(1791861640.802:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.1.114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000 [ 62.890385][ T43] audit: type=1326 audit(1791861640.802:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.1.114" exe="/syz-executor" sig=0 arch=40000003 syscall=229 compat=1 ip=0xf748efec code=0x7ffc0000 [ 62.890407][ T43] audit: type=1326 audit(1791861640.802:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.1.114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000 [ 62.890427][ T43] audit: type=1326 audit(1791861640.802:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.1.114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efec code=0x7ffc0000 [ 62.901637][ T6373] input: syz0 as /devices/virtual/input/input7 [ 63.384770][ T42] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 63.479459][ T6391] FAULT_INJECTION: forcing a failure. [ 63.479459][ T6391] name failslab, interval 1, probability 0, space 0, times 0 [ 63.479478][ T6391] CPU: 0 UID: 0 PID: 6391 Comm: syz.2.121 Not tainted syzkaller #0 PREEMPT(full) [ 63.479490][ T6391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.479497][ T6391] Call Trace: [ 63.479501][ T6391] [ 63.479505][ T6391] dump_stack_lvl+0x100/0x190 [ 63.479523][ T6391] should_fail_ex.cold+0x5/0xa [ 63.479536][ T6391] ? __netlink_lookup+0x652/0x900 [ 63.479555][ T6391] should_failslab+0xc2/0x120 [ 63.479572][ T6391] kmem_cache_alloc_noprof+0x92/0x6a0 [ 63.479588][ T6391] ? skb_clone+0x190/0x400 [ 63.479603][ T6391] skb_clone+0x190/0x400 [ 63.479617][ T6391] netlink_deliver_tap+0xaed/0xcc0 [ 63.479630][ T6391] netlink_unicast+0x62b/0x850 [ 63.479644][ T6391] ? __pfx_netlink_unicast+0x10/0x10 [ 63.479659][ T6391] netlink_sendmsg+0x8b0/0xda0 [ 63.479673][ T6391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.479686][ T6391] ? apparmor_socket_sendmsg+0x165/0x280 [ 63.479701][ T6391] ____sys_sendmsg+0xa4d/0xbe0 [ 63.479716][ T6391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.479729][ T6391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.479751][ T6391] ___sys_sendmsg+0x190/0x1e0 [ 63.479768][ T6391] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.479791][ T6391] ? find_held_lock+0x2b/0x80 [ 63.479813][ T6391] __sys_sendmsg+0x160/0x210 [ 63.479826][ T6391] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.479843][ T6391] ? __pfx_ksys_write+0x10/0x10 [ 63.479859][ T6391] __do_fast_syscall_32+0x13a/0x8b0 [ 63.479871][ T6391] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.479889][ T6391] do_fast_syscall_32+0x32/0x70 [ 63.479900][ T6391] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 63.479914][ T6391] RIP: 0023:0xf748efec [ 63.479926][ T6391] Code: Unable to access opcode bytes at 0xf748efc2. [ 63.479931][ T6391] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 63.479942][ T6391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 63.479949][ T6391] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.479955][ T6391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 63.479961][ T6391] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 63.479968][ T6391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.479981][ T6391] [ 63.556795][ T42] usb 6-1: device descriptor read/64, error -71 [ 63.795337][ T42] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 63.914496][ T58] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 63.924926][ T42] usb 6-1: device descriptor read/64, error -71 [ 64.034716][ T42] usb usb6-port1: attempt power cycle [ 64.094774][ T58] usb 8-1: Using ep0 maxpacket: 16 [ 64.098494][ T58] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.105375][ T58] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.107256][ T58] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.112361][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 64.112477][ T58] usb 8-1: SerialNumber: syz [ 64.374931][ T42] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 64.395348][ T42] usb 6-1: device descriptor read/8, error -71 [ 64.395586][ T6408] syzkaller0: entered promiscuous mode [ 64.395635][ T6408] syzkaller0: entered allmulticast mode [ 64.514467][ T65] Bluetooth: hci2: command tx timeout [ 64.521470][ T6411] openvswitch: netlink: EtherType 50a is less than min 600 [ 64.522230][ T6396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.532120][ T6396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.622202][ T5808] sony 0005:054C:03D5.0002: UNIQ does not contain a MAC address; duplicate check skipped [ 64.635071][ T42] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 64.650083][ T5808] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0002/input/input8 [ 64.655815][ T42] usb 6-1: device descriptor read/8, error -71 [ 64.695178][ T5808] sony 0005:054C:03D5.0002: input,hidraw1: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 64.765312][ T42] usb usb6-port1: unable to enumerate USB device [ 64.792059][ T58] cdc_acm 8-1:1.0: skipping garbage [ 64.795486][ T58] usb 8-1: USB disconnect, device number 2 [ 64.809078][ T6415] fido_id[6415]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 64.997881][ T6429] __nla_validate_parse: 30 callbacks suppressed [ 64.997894][ T6429] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.134'. [ 65.141112][ T6438] bond1 (unregistering): Released all slaves [ 65.175790][ T6442] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.512.0), cmd(3) [ 65.230312][ T6444] FAULT_INJECTION: forcing a failure. [ 65.230312][ T6444] name failslab, interval 1, probability 0, space 0, times 0 [ 65.230331][ T6444] CPU: 3 UID: 0 PID: 6444 Comm: syz.4.140 Not tainted syzkaller #0 PREEMPT(full) [ 65.230344][ T6444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.230350][ T6444] Call Trace: [ 65.230354][ T6444] [ 65.230358][ T6444] dump_stack_lvl+0x100/0x190 [ 65.230383][ T6444] should_fail_ex.cold+0x5/0xa [ 65.230398][ T6444] should_failslab+0xc2/0x120 [ 65.230416][ T6444] __kmalloc_cache_noprof+0x91/0x6d0 [ 65.230429][ T6444] ? bpf_lsm_capable+0x9/0x10 [ 65.230442][ T6444] ? bpf_diag_init+0x96/0x160 [ 65.230459][ T6444] bpf_diag_init+0x96/0x160 [ 65.230474][ T6444] bpf_check+0x9fc/0xac70 [ 65.230498][ T6444] ? __css_rstat_updated+0x1ce/0x590 [ 65.230512][ T6444] ? __lock_acquire+0x5c0/0x1f40 [ 65.230536][ T6444] ? __pfx___css_rstat_updated+0x10/0x10 [ 65.230563][ T6444] ? find_held_lock+0x2b/0x80 [ 65.230587][ T6444] ? __pfx_bpf_check+0x10/0x10 [ 65.230611][ T6444] ? lock_acquire+0x1d1/0x380 [ 65.230633][ T6444] ? bpf_prog_load+0x1a27/0x2ab0 [ 65.230661][ T6444] ? find_held_lock+0x2b/0x80 [ 65.230680][ T6444] ? bpf_prog_load+0x1a27/0x2ab0 [ 65.230709][ T6444] ? __asan_memset+0x23/0x50 [ 65.230734][ T6444] ? bpf_prog_load+0x1ae1/0x2ab0 [ 65.230758][ T6444] bpf_prog_load+0x1ae1/0x2ab0 [ 65.230789][ T6444] ? __pfx_bpf_prog_load+0x10/0x10 [ 65.230835][ T6444] __sys_bpf+0x1f46/0x4a30 [ 65.230861][ T6444] ? __pfx___sys_bpf+0x10/0x10 [ 65.230879][ T6444] ? lock_acquire+0x1d1/0x380 [ 65.230904][ T6444] ? get_pid_task+0x2a/0x250 [ 65.230924][ T6444] ? find_held_lock+0x2b/0x80 [ 65.230943][ T6444] ? get_pid_task+0xfc/0x250 [ 65.230960][ T6444] ? get_pid_task+0xfc/0x250 [ 65.230985][ T6444] ? proc_fail_nth_write+0x9f/0x220 [ 65.231008][ T6444] ? find_held_lock+0x2b/0x80 [ 65.231032][ T6444] ? rcu_read_lock_any_held+0x6a/0x90 [ 65.231053][ T6444] ? find_held_lock+0x2b/0x80 [ 65.231073][ T6444] ? ksys_write+0x190/0x250 [ 65.231093][ T6444] ? ksys_write+0x190/0x250 [ 65.231114][ T6444] ? lock_acquire+0x1d1/0x380 [ 65.231155][ T6444] ? fput+0x7c/0x100 [ 65.231183][ T6444] ? __ia32_sys_bpf+0xcc/0x170 [ 65.231202][ T6444] __ia32_sys_bpf+0xcc/0x170 [ 65.231224][ T6444] ? __do_fast_syscall_32+0xb3/0x8b0 [ 65.231244][ T6444] __do_fast_syscall_32+0x13a/0x8b0 [ 65.231263][ T6444] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.231291][ T6444] do_fast_syscall_32+0x32/0x70 [ 65.231333][ T6444] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.231356][ T6444] RIP: 0023:0xf7f18fec [ 65.231375][ T6444] Code: Unable to access opcode bytes at 0xf7f18fc2. [ 65.231390][ T6444] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 65.231406][ T6444] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000340 [ 65.231415][ T6444] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.231421][ T6444] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.231428][ T6444] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.231434][ T6444] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.231448][ T6444] [ 65.326744][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.143'. [ 65.377080][ T6454] ipvlan2: entered allmulticast mode [ 65.377100][ T6454] ip6gretap0: entered allmulticast mode [ 65.418478][ T6459] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 65.418494][ T6459] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 65.422111][ T6459] vhci_hcd vhci_hcd.0: Device attached [ 65.445660][ T65] Bluetooth: hci2: ACL packet for unknown connection handle 1316 [ 65.489864][ T6459] netlink: 44 bytes leftover after parsing attributes in process `syz.2.148'. [ 65.516726][ T6459] netlink: 256 bytes leftover after parsing attributes in process `syz.2.148'. [ 65.520149][ T6463] vhci_hcd: connection closed [ 65.523724][ T12] vhci_hcd vhci_hcd.2: stop threads [ 65.524095][ T12] vhci_hcd vhci_hcd.2: release socket [ 65.524123][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 66.091133][ T6509] syzkaller0: entered promiscuous mode [ 66.091153][ T6509] syzkaller0: entered allmulticast mode [ 66.106098][ T6509] simple: /dev/video#_1 [ 66.106113][ T6509] simple: /dev/video#_2 [ 66.106121][ T6509] simple: /dev/video#_3 [ 66.106129][ T6509] simple: /dev/video#_4 [ 66.106137][ T6509] simple: /dev/video#_5 [ 66.106145][ T6509] simple: /dev/video#_6 [ 66.106152][ T6509] simple: /dev/video#_7 [ 66.106160][ T6509] simple: /dev/video#_8 [ 66.106168][ T6509] simple: /dev/video#_9 [ 66.106176][ T6509] simple: /dev/video#_10 [ 66.106184][ T6509] simple: /dev/video#_11 [ 66.106192][ T6509] simple: /dev/video#_12 [ 66.106200][ T6509] simple: /dev/video#_13 [ 66.106207][ T6509] simple: /dev/video#_14 [ 66.106215][ T6509] simple: /dev/video#_15 [ 66.106223][ T6509] simple: /dev/video#_16 [ 66.106231][ T6509] simple: /dev/video#_17 [ 66.106239][ T6509] simple: /dev/video#_18 [ 66.106247][ T6509] simple: /dev/video#_19 [ 66.106255][ T6509] simple: /dev/video#_20 [ 66.106263][ T6509] simple: /dev/video#_21 [ 66.106271][ T6509] simple: /dev/video#_22 [ 66.106279][ T6509] simple: /dev/video#_23 [ 66.106287][ T6509] simple: /dev/video#_24 [ 66.106294][ T6509] simple: /dev/video#_25 [ 66.106302][ T6509] simple: /dev/video#_26 [ 66.106310][ T6509] simple: /dev/video#_27 [ 66.106318][ T6509] simple: /dev/video#_28 [ 66.106326][ T6509] simple: /dev/video#_29 [ 66.106334][ T6509] simple: /dev/video#_30 [ 66.106342][ T6509] simple: /dev/video#_31 [ 66.106350][ T6509] simple: /dev/video#_32 [ 66.106360][ T6509] TC_ACT_REPEAT abuse ? [ 66.239375][ T6532] syzkaller0: entered promiscuous mode [ 66.239388][ T6532] syzkaller0: entered allmulticast mode [ 66.461503][ T65] Bluetooth: Unknown LE signaling command 0x09 [ 66.461522][ T65] Bluetooth: Wrong link type (-22) [ 66.471136][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 66.471155][ T6553] netlink: 'syz.1.168': attribute type 5 has an invalid length. [ 66.471163][ T6553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.168'. [ 66.486025][ T6553] geneve2: entered promiscuous mode [ 66.486038][ T6553] geneve2: entered allmulticast mode [ 66.505517][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 66.505542][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 66.505561][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 66.505579][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 66.506547][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'. [ 66.594365][ T65] Bluetooth: hci2: command tx timeout [ 67.022724][ T6585] binder: 6580:6585 ioctl 4018620d 0 returned -22 [ 67.087394][ T65] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 67.087408][ T65] Bluetooth: Wrong link type (-22) [ 67.107884][ T6583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.179'. [ 67.111190][ T6583] netlink: 436 bytes leftover after parsing attributes in process `syz.3.179'. [ 67.264714][ T5881] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 67.415773][ T5881] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 67.416982][ T5881] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.417007][ T5881] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.418260][ T5881] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 67.418279][ T5881] usb 9-1: Manufacturer: syz [ 67.421627][ T5881] usb 9-1: config 0 descriptor?? [ 67.843138][ T6600] ipvlan2: entered allmulticast mode [ 67.843153][ T6600] ip6gretap0: entered allmulticast mode [ 67.845941][ T6600] batman_adv: batadv0: Adding interface: ipvlan2 [ 67.845952][ T6600] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.845969][ T6600] batman_adv: batadv0: Interface activated: ipvlan2 [ 67.870856][ T6602] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 67.870900][ T6602] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 67.872593][ T6602] hsr_slave_0: left promiscuous mode [ 67.873125][ T6602] hsr_slave_1: left promiscuous mode [ 67.900747][ T6604] random: crng reseeded on system resumption [ 68.065787][ T6619] tmpfs: Unknown parameter 'uŠrquota_block_hardlioit' [ 68.194508][ T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 68.354340][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 68.354779][ T25] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 68.355564][ T25] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 68.355585][ T25] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 68.355598][ T25] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 68.355610][ T25] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 68.357121][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.357132][ T25] usb 6-1: Product: syz [ 68.357140][ T25] usb 6-1: Manufacturer: syz [ 68.357147][ T25] usb 6-1: SerialNumber: syz [ 68.363205][ C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 68.367611][ T25] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input11 [ 68.584387][ T25] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 68.584399][ T25] (id 0x00) [ 68.634355][ T25] rc_core: IR keymap rc-imon-pad not found [ 68.634368][ T25] Registered IR keymap rc-empty [ 68.634404][ T25] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 68.634413][ T25] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 68.785740][ T25] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 68.787371][ T25] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input12 [ 68.792467][ T25] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:8> initialized [ 69.228359][ T6630] netlink: 108 bytes leftover after parsing attributes in process `syz.2.191'. [ 69.321913][ T57] usb 6-1: USB disconnect, device number 8 [ 69.871721][ T6664] e1000 0000:00:06.0 eth0: checksum_partial proto=a888! [ 69.986872][ T5881] usbhid 9-1:0.0: can't add hid device: -71 [ 69.986922][ T5881] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 70.003341][ T5881] usb 9-1: USB disconnect, device number 2 [ 70.147332][ T6698] FAULT_INJECTION: forcing a failure. [ 70.147332][ T6698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.147353][ T6698] CPU: 2 UID: 0 PID: 6698 Comm: syz.3.211 Not tainted syzkaller #0 PREEMPT(full) [ 70.147365][ T6698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.147372][ T6698] Call Trace: [ 70.147376][ T6698] [ 70.147381][ T6698] dump_stack_lvl+0x100/0x190 [ 70.147400][ T6698] should_fail_ex.cold+0x5/0xa [ 70.147415][ T6698] strncpy_from_user+0x3b/0x2d0 [ 70.147433][ T6698] __do_sys_add_key+0xd4/0x460 [ 70.147451][ T6698] ? __pfx___do_sys_add_key+0x10/0x10 [ 70.147475][ T6698] __do_fast_syscall_32+0x13a/0x8b0 [ 70.147489][ T6698] do_fast_syscall_32+0x32/0x70 [ 70.147502][ T6698] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.147517][ T6698] RIP: 0023:0xf740efec [ 70.147530][ T6698] Code: Unable to access opcode bytes at 0xf740efc2. [ 70.147535][ T6698] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 70.147547][ T6698] RAX: ffffffffffffffda RBX: 0000000080000340 RCX: 0000000000000000 [ 70.147554][ T6698] RDX: 00000000800005c0 RSI: 0000000000000559 RDI: 00000000ffffffff [ 70.147561][ T6698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.147567][ T6698] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 70.147573][ T6698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.147587][ T6698] [ 70.239849][ T6706] smpboot: CPU 1 is now offline [ 70.249394][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.249429][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.280427][ T6706] smpboot: CPU 3 is now offline [ 70.416419][ T6707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.215'. [ 70.423794][ T6707] geneve2: entered promiscuous mode [ 70.444438][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 54897 - 0 [ 70.444483][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 54897 - 0 [ 70.444513][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 54897 - 0 [ 70.444542][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 54897 - 0 [ 70.496023][ T6713] FAULT_INJECTION: forcing a failure. [ 70.496023][ T6713] name failslab, interval 1, probability 0, space 0, times 0 [ 70.496043][ T6713] CPU: 2 UID: 0 PID: 6713 Comm: syz.4.217 Not tainted syzkaller #0 PREEMPT(full) [ 70.496056][ T6713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.496063][ T6713] Call Trace: [ 70.496066][ T6713] [ 70.496071][ T6713] dump_stack_lvl+0x100/0x190 [ 70.496090][ T6713] should_fail_ex.cold+0x5/0xa [ 70.496105][ T6713] should_failslab+0xc2/0x120 [ 70.496123][ T6713] kmem_cache_alloc_noprof+0x92/0x6a0 [ 70.496137][ T6713] ? __alloc_skb+0x4e9/0x710 [ 70.496149][ T6713] ? __alloc_skb+0x5b7/0x710 [ 70.496160][ T6713] ? sctp_chunkify+0x51/0x2f0 [ 70.496179][ T6713] sctp_chunkify+0x51/0x2f0 [ 70.496199][ T6713] _sctp_make_chunk+0x148/0x270 [ 70.496224][ T6713] sctp_make_datafrag_empty+0x14e/0x230 [ 70.496254][ T6713] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 70.496280][ T6713] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 70.496302][ T6713] ? sctp_datamsg_from_user+0x8e/0x1360 [ 70.496327][ T6713] sctp_datamsg_from_user+0x5ea/0x1360 [ 70.496350][ T6713] sctp_sendmsg_to_asoc+0xb1c/0x1cb0 [ 70.496368][ T6713] ? aa_inet_msg_perm+0x337/0x8f0 [ 70.496385][ T6713] ? down_write+0x146/0x1f0 [ 70.496398][ T6713] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 70.496411][ T6713] ? do_raw_spin_lock+0x128/0x260 [ 70.496423][ T6713] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 70.496438][ T6713] ? sctp_sendmsg_check_sflags+0x176/0x360 [ 70.496451][ T6713] sctp_sendmsg+0x1144/0x22e0 [ 70.496469][ T6713] ? __pfx_sctp_sendmsg+0x10/0x10 [ 70.496484][ T6713] ? __lock_acquire+0x5c0/0x1f40 [ 70.496502][ T6713] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 70.496522][ T6713] ? aa_sock_msg_perm+0x11e/0x200 [ 70.496541][ T6713] ? __pfx_sctp_sendmsg+0x10/0x10 [ 70.496556][ T6713] inet_sendmsg+0x11c/0x140 [ 70.496567][ T6713] ____sys_sendmsg+0x9c9/0xbe0 [ 70.496582][ T6713] ? __pfx_inet_sendmsg+0x10/0x10 [ 70.496593][ T6713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.496612][ T6713] ? _kstrtoull+0x144/0x200 [ 70.496626][ T6713] ? __pfx__kstrtoull+0x10/0x10 [ 70.496641][ T6713] ___sys_sendmsg+0x190/0x1e0 [ 70.496659][ T6713] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.496676][ T6713] ? __lock_acquire+0x5c0/0x1f40 [ 70.496697][ T6713] ? __fget_files+0x34/0x3d0 [ 70.496721][ T6713] __sys_sendmmsg+0x309/0x440 [ 70.496736][ T6713] ? __pfx___sys_sendmmsg+0x10/0x10 [ 70.496749][ T6713] ? find_held_lock+0x2b/0x80 [ 70.496766][ T6713] ? __mutex_unlock_slowpath+0x35d/0x930 [ 70.496784][ T6713] ? fput+0x7c/0x100 [ 70.496800][ T6713] ? ksys_write+0x1ac/0x250 [ 70.496816][ T6713] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 70.496833][ T6713] ? lockdep_hardirqs_on+0x7d/0x110 [ 70.496850][ T6713] __do_fast_syscall_32+0x13a/0x8b0 [ 70.496860][ T6713] ? lockdep_hardirqs_on+0x7d/0x110 [ 70.496878][ T6713] do_fast_syscall_32+0x32/0x70 [ 70.496890][ T6713] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.496904][ T6713] RIP: 0023:0xf7f18fec [ 70.496917][ T6713] Code: Unable to access opcode bytes at 0xf7f18fc2. [ 70.496922][ T6713] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 70.496933][ T6713] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000580 [ 70.496940][ T6713] RDX: 0000000000000001 RSI: 0000000000008015 RDI: 0000000000000000 [ 70.496946][ T6713] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.496952][ T6713] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 70.496958][ T6713] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.496986][ T6713] [ 70.525036][ T25] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 70.692727][ T25] usb 6-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 70.693679][ T25] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 70.693702][ T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 70.693714][ T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 70.693725][ T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 70.693737][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 70.693749][ T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 70.693763][ T25] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 70.697964][ T25] usb 6-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 70.697983][ T25] usb 6-1: Product: syz [ 70.697993][ T25] usb 6-1: Manufacturer: syz [ 70.698002][ T25] usb 6-1: SerialNumber: syz [ 70.723045][ T6709] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.723219][ T6709] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.723370][ T6709] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.723452][ T6709] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.726884][ T25] keyspan 6-1:1.0: Keyspan 1 port adapter converter detected [ 70.727359][ T25] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 70.731252][ T25] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 70.731326][ T25] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 70.752088][ T25] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 70.873854][ T854] cfg80211: failed to load regulatory.db [ 70.992367][ T43] kauditd_printk_skb: 335 callbacks suppressed [ 70.992379][ T43] audit: type=1400 audit(1791861648.888:348): apparmor="STATUS" operation="profile_load" profile="unconfined" name=2F3A22 pid=6722 comm="syz.3.222" [ 71.049816][ T43] audit: type=1326 audit(1791861648.934:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.4.223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 71.051431][ T43] audit: type=1326 audit(1791861648.934:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.4.223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 71.061041][ T43] audit: type=1326 audit(1791861648.944:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.4.223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 71.061070][ T43] audit: type=1326 audit(1791861648.944:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.4.223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 71.061089][ T43] audit: type=1326 audit(1791861648.944:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.4.223" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 71.061109][ T43] audit: type=1326 audit(1791861648.944:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.4.223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 71.061130][ T43] audit: type=1326 audit(1791861648.944:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.4.223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 71.061149][ T43] audit: type=1326 audit(1791861648.944:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.4.223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 71.061168][ T43] audit: type=1326 audit(1791861648.944:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.4.223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18fec code=0x7ffc0000 [ 71.145531][ T6726] tmpfs: Bad value for 'mpol' [ 71.328509][ T25] usb 6-1: USB disconnect, device number 9 [ 71.358621][ T25] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 71.361118][ T25] keyspan 6-1:1.0: device disconnected [ 71.456454][ T6743] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 71.899348][ T6757] 9pnet_fd: Insufficient options for proto=fd [ 71.936206][ T6760] CIFS: Witness protocol support is experimental [ 71.936227][ T6760] CIFS mount error: No usable UNC path provided in device string! [ 71.936227][ T6760] [ 71.936396][ T6760] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 71.966831][ T6762] overlay: ./file0 is not a directory [ 72.151817][ T6777] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 72.151834][ T6777] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 72.151983][ T6777] vhci_hcd vhci_hcd.0: Device attached [ 72.169749][ T6777] FAULT_INJECTION: forcing a failure. [ 72.169749][ T6777] name failslab, interval 1, probability 0, space 0, times 0 [ 72.169769][ T6777] CPU: 0 UID: 0 PID: 6777 Comm: syz.4.233 Not tainted syzkaller #0 PREEMPT(full) [ 72.169782][ T6777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.169788][ T6777] Call Trace: [ 72.169792][ T6777] [ 72.169797][ T6777] dump_stack_lvl+0x100/0x190 [ 72.169816][ T6777] should_fail_ex.cold+0x5/0xa [ 72.169831][ T6777] should_failslab+0xc2/0x120 [ 72.169850][ T6777] __kmalloc_cache_noprof+0x91/0x6d0 [ 72.169864][ T6777] ? proc_self_get_link+0x189/0x1f0 [ 72.169885][ T6777] proc_self_get_link+0x189/0x1f0 [ 72.169916][ T6777] pick_link+0xac2/0x13c0 [ 72.169930][ T6777] ? __pfx_proc_self_get_link+0x10/0x10 [ 72.169950][ T6777] step_into_slowpath+0x9b3/0x1150 [ 72.169971][ T6777] ? __pfx_step_into_slowpath+0x10/0x10 [ 72.169995][ T6777] ? lookup_fast+0x2da/0x600 [ 72.170012][ T6777] ? inode_permission+0x374/0x620 [ 72.170032][ T6777] link_path_walk+0xf28/0x1cc0 [ 72.170065][ T6777] path_openat+0x1ac/0x2440 [ 72.170091][ T6777] ? __pfx_path_openat+0x10/0x10 [ 72.170122][ T6777] do_file_open+0x20e/0x430 [ 72.170149][ T6777] ? __pfx_do_file_open+0x10/0x10 [ 72.170191][ T6777] ? _raw_spin_unlock+0x28/0x50 [ 72.170216][ T6777] ? alloc_fd+0x471/0x7a0 [ 72.170240][ T6777] do_sys_openat2+0x10f/0x1e0 [ 72.170253][ T6777] ? __pfx_do_sys_openat2+0x10/0x10 [ 72.170264][ T6777] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 72.170278][ T6777] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 72.170295][ T6777] __ia32_compat_sys_openat+0x12d/0x210 [ 72.170308][ T6777] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 72.170327][ T6777] do_int80_emulation+0x166/0x650 [ 72.170341][ T6777] asm_int80_emulation+0x1a/0x20 [ 72.170352][ T6777] RIP: 0023:0xf710762b [ 72.170362][ T6777] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 72.170373][ T6777] RSP: 002b:00000000f53c642c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 72.170384][ T6777] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f71d2145 [ 72.170391][ T6777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.170398][ T6777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.170404][ T6777] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.170410][ T6777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.170425][ T6777] [ 72.261457][ T6777] binder: 6776:6777 ioctl 84009422 80000280 returned -22 [ 72.261984][ T6777] binder: 6776:6777 ioctl 50009403 80000680 returned -22 [ 72.264465][ T6778] vhci_hcd: connection closed [ 72.273972][ T12] vhci_hcd vhci_hcd.4: stop threads [ 72.274024][ T12] vhci_hcd vhci_hcd.4: release socket [ 72.274735][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 72.345688][ T5882] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 73.230095][ T6807] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 73.242964][ T6807] CIFS: Attempting to mount //127.0.0.1/test [ 73.275716][ T6807] CIFS: VFS: Error connecting to socket. Aborting operation. [ 73.275836][ T6807] CIFS: VFS: cifs_mount failed w/return code = -111 [ 73.570491][ T243] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 73.571275][ T6811] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 73.660921][ T6814] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 73.689872][ T6821] virtio-fs: tag not found [ 73.987049][ T6835] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input13 [ 74.424384][ T6864] 0x0000000003ff-0x000000020000 : "" [ 74.465145][ T6864] ftl_cs: FTL header corrupt! [ 74.498222][ T6861] syzkaller0: entered promiscuous mode [ 74.498237][ T6861] syzkaller0: entered allmulticast mode [ 74.516598][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 74.544116][ T6864] bridge: RTM_NEWNEIGH with invalid ether address [ 74.627935][ T6871] netlink: 68 bytes leftover after parsing attributes in process `syz.3.261'. [ 74.628198][ T6871] netlink: 68 bytes leftover after parsing attributes in process `syz.3.261'. [ 74.628328][ T6871] netlink: 68 bytes leftover after parsing attributes in process `syz.3.261'. [ 74.628456][ T6871] netlink: 68 bytes leftover after parsing attributes in process `syz.3.261'. [ 74.628575][ T6871] netlink: 68 bytes leftover after parsing attributes in process `syz.3.261'. [ 74.628693][ T6871] netlink: 68 bytes leftover after parsing attributes in process `syz.3.261'. [ 74.628820][ T6871] netlink: 68 bytes leftover after parsing attributes in process `syz.3.261'. [ 74.628940][ T6871] netlink: 68 bytes leftover after parsing attributes in process `syz.3.261'. [ 74.629064][ T6871] netlink: 68 bytes leftover after parsing attributes in process `syz.3.261'. [ 74.654928][ T9] usb 7-1: device descriptor read/64, error -71 [ 74.655025][ T5882] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 74.814338][ T5882] usb 9-1: Using ep0 maxpacket: 16 [ 74.819708][ T5882] usb 9-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 74.821334][ T5882] usb 9-1: config 4 has an invalid interface number: 51 but max is 0 [ 74.821353][ T5882] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 74.821367][ T5882] usb 9-1: config 4 has no interface number 0 [ 74.821394][ T5882] usb 9-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 74.821414][ T5882] usb 9-1: config 4 interface 51 has no altsetting 0 [ 74.823538][ T5882] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.823555][ T5882] usb 9-1: Product: syz [ 74.823566][ T5882] usb 9-1: Manufacturer: syz [ 74.823628][ T5882] usb 9-1: SerialNumber: syz [ 74.840397][ T5882] cdc_eem 9-1:4.51: probe with driver cdc_eem failed with error -22 [ 74.902708][ T6878] cdrom: dropping to single frame dma [ 74.910423][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 75.049842][ T9] usb 7-1: device descriptor read/64, error -71 [ 75.169555][ T9] usb usb7-port1: attempt power cycle [ 75.526982][ T5958] usb 9-1: USB disconnect, device number 3 [ 75.530804][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 75.556180][ T9] usb 7-1: device descriptor read/8, error -71 [ 75.751515][ T6894] gfs2: error -5 reading superblock [ 75.808115][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 75.829839][ T9] usb 7-1: device descriptor read/8, error -71 [ 75.896619][ T6898] __nla_validate_parse: 18 callbacks suppressed [ 75.896632][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 75.897098][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 75.947222][ T9] usb usb7-port1: unable to enumerate USB device [ 76.203349][ T5958] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 76.212365][ T6904] netlink: 64 bytes leftover after parsing attributes in process `syz.4.271'. [ 76.222186][ T6904] syzkaller1: entered promiscuous mode [ 76.222199][ T6904] syzkaller1: entered allmulticast mode [ 76.224406][ T6904] netlink: 32 bytes leftover after parsing attributes in process `syz.4.271'. [ 76.224418][ T6904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.271'. [ 76.387108][ T5958] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 76.388623][ T5958] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 76.388643][ T5958] usb 6-1: config 1 has no interface number 0 [ 76.391962][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.391986][ T5958] usb 6-1: Product: syz [ 76.391999][ T5958] usb 6-1: Manufacturer: syz [ 76.392011][ T5958] usb 6-1: SerialNumber: syz [ 76.432836][ T5958] usb 6-1: 3:1 : does not exist [ 76.432857][ T5958] usb 6-1: 3:2 : does not exist [ 76.620200][ T6910] FAULT_INJECTION: forcing a failure. [ 76.620200][ T6910] name failslab, interval 1, probability 0, space 0, times 0 [ 76.620222][ T6910] CPU: 0 UID: 0 PID: 6910 Comm: syz.3.274 Not tainted syzkaller #0 PREEMPT(full) [ 76.620236][ T6910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.620244][ T6910] Call Trace: [ 76.620248][ T6910] [ 76.620252][ T6910] dump_stack_lvl+0x100/0x190 [ 76.620273][ T6910] should_fail_ex.cold+0x5/0xa [ 76.620289][ T6910] should_failslab+0xc2/0x120 [ 76.620308][ T6910] kmem_cache_alloc_noprof+0x92/0x6a0 [ 76.620323][ T6910] ? current_cpuset_is_being_rebound+0xf6/0x370 [ 76.620337][ T6910] ? sp_alloc+0x27/0x160 [ 76.620351][ T6910] sp_alloc+0x27/0x160 [ 76.620363][ T6910] ? __pfx_shmem_set_policy+0x10/0x10 [ 76.620379][ T6910] mpol_set_shared_policy+0xa5/0x850 [ 76.620396][ T6910] ? __pfx_shmem_set_policy+0x10/0x10 [ 76.620410][ T6910] mbind_range+0x339/0x550 [ 76.620425][ T6910] do_mbind+0x7dc/0xfd0 [ 76.620442][ T6910] ? __pfx_do_mbind+0x10/0x10 [ 76.620455][ T6910] ? find_held_lock+0x2b/0x80 [ 76.620469][ T6910] ? ksys_write+0x190/0x250 [ 76.620489][ T6910] ? __pfx_get_nodes+0x10/0x10 [ 76.620509][ T6910] kernel_mbind+0x1b7/0x200 [ 76.620523][ T6910] ? __pfx_kernel_mbind+0x10/0x10 [ 76.620540][ T6910] __do_fast_syscall_32+0x13a/0x8b0 [ 76.620552][ T6910] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.620571][ T6910] do_fast_syscall_32+0x32/0x70 [ 76.620583][ T6910] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.620597][ T6910] RIP: 0023:0xf740efec [ 76.620627][ T6910] Code: Unable to access opcode bytes at 0xf740efc2. [ 76.620632][ T6910] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 76.620645][ T6910] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 76.620652][ T6910] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.620660][ T6910] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 76.620667][ T6910] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 76.620674][ T6910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.620690][ T6910] [ 76.713713][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.714097][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.721960][ T58] usb 6-1: USB disconnect, device number 10 [ 76.977310][ T6919] udc dummy_udc.0: failed to start g1: -19 [ 76.982723][ T6919] UDC core: g1: couldn't find an available UDC or it's busy [ 77.575669][ T6940] random: crng reseeded on system resumption [ 77.666825][ T6946] xt_connbytes: Forcing CT accounting to be enabled [ 77.666937][ T6946] Cannot find del_set index 0 as target [ 77.686361][ T6947] netlink: 32 bytes leftover after parsing attributes in process `syz.1.278'. [ 77.898052][ T6962] syzkaller1: entered promiscuous mode [ 77.898065][ T6962] syzkaller1: entered allmulticast mode [ 78.077961][ T6965] netlink: 'syz.2.290': attribute type 12 has an invalid length. [ 78.138019][ T6976] netlink: 32 bytes leftover after parsing attributes in process `syz.3.295'. [ 78.308845][ T58] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 78.468779][ T58] usb 9-1: Using ep0 maxpacket: 8 [ 78.471111][ T58] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 78.472309][ T58] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.472332][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.476375][ T58] usb 9-1: config 0 descriptor?? [ 78.697275][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.698480][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.702816][ T58] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 78.922892][ T58] usb 9-1: USB disconnect, device number 4 [ 78.922969][ C2] iowarrior 9-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 78.955134][ T7004] bond1 (unregistering): Released all slaves [ 79.024942][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 79.024959][ T43] audit: type=1326 audit(1791861656.393:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.2.303" exe="/syz-executor" sig=9 arch=40000003 syscall=172 compat=1 ip=0xf748efec code=0x0 [ 79.141856][ T6971] kernel profiling enabled (shift: 7) [ 79.465085][ T7015] netlink: 40 bytes leftover after parsing attributes in process `syz.1.305'. [ 79.465429][ T7015] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 79.537357][ T5958] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 79.698060][ T5958] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 79.698906][ T5958] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 79.698919][ T5958] usb 8-1: config 0 has no interface number 0 [ 79.698937][ T5958] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 79.698950][ T5958] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 79.698969][ T5958] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.701858][ T5958] usb 8-1: config 0 descriptor?? [ 79.702356][ T7013] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 79.734318][ T5958] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 79.821567][ T1159] Bluetooth: hci4: Frame reassembly failed (-84) [ 79.956765][ T854] usb 8-1: USB disconnect, device number 3 [ 79.981031][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 81.799367][ T5740] Bluetooth: to_multiplier 0 < 10 [ 81.818645][ T7049] futex_wake_op: syz.1.317 tries to shift op by 144; fix this program [ 81.837687][ T7047] program syz.2.316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.964017][ T5740] Bluetooth: hci4: command 0x1003 tx timeout [ 81.966268][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 82.058390][ T43] audit: type=1326 audit(1791861659.238:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.4.320" exe="/syz-executor" sig=31 arch=40000003 syscall=354 compat=1 ip=0xf7f18fec code=0x0 [ 82.430031][ T7078] FAULT_INJECTION: forcing a failure. [ 82.430031][ T7078] name failslab, interval 1, probability 0, space 0, times 0 [ 82.430053][ T7078] CPU: 0 UID: 0 PID: 7078 Comm: syz.1.321 Not tainted syzkaller #0 PREEMPT(full) [ 82.430068][ T7078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.430075][ T7078] Call Trace: [ 82.430079][ T7078] [ 82.430084][ T7078] dump_stack_lvl+0x100/0x190 [ 82.430161][ T7078] should_fail_ex.cold+0x5/0xa [ 82.430178][ T7078] should_failslab+0xc2/0x120 [ 82.430216][ T7078] kmem_cache_alloc_noprof+0x92/0x6a0 [ 82.430233][ T7078] ? __kernfs_new_node+0xd2/0xa10 [ 82.430249][ T7078] __kernfs_new_node+0xd2/0xa10 [ 82.430263][ T7078] ? __pfx___kernfs_new_node+0x10/0x10 [ 82.430277][ T7078] ? lock_acquire+0x1d1/0x380 [ 82.430295][ T7078] ? kernfs_root+0x23/0x2a0 [ 82.430311][ T7078] ? find_held_lock+0x2b/0x80 [ 82.430324][ T7078] ? kernfs_root+0xee/0x2a0 [ 82.430339][ T7078] ? kernfs_root+0xee/0x2a0 [ 82.430360][ T7078] kernfs_new_node+0x117/0x150 [ 82.430387][ T7078] __kernfs_create_file+0x53/0x350 [ 82.430404][ T7078] sysfs_add_file_mode_ns+0x207/0x3c0 [ 82.430425][ T7078] sysfs_merge_group+0x194/0x340 [ 82.430442][ T7078] ? __pfx_sysfs_merge_group+0x10/0x10 [ 82.430460][ T7078] ? bus_add_device+0x2e2/0x6c0 [ 82.430472][ T7078] ? __pfx_bus_add_device+0x10/0x10 [ 82.430482][ T7078] ? __pfx_dev_add_physical_location+0x10/0x10 [ 82.430502][ T7078] dpm_sysfs_add+0x237/0x280 [ 82.430519][ T7078] device_add+0x9f4/0x1970 [ 82.430535][ T7078] ? __pfx_device_add+0x10/0x10 [ 82.430549][ T7078] ? kfree_const+0x5a/0x70 [ 82.430561][ T7078] ? kfree+0x1e5/0x6d0 [ 82.430578][ T7078] device_create_groups_vargs+0x1f8/0x270 [ 82.430596][ T7078] device_create+0xed/0x130 [ 82.430612][ T7078] ? __pfx_device_create+0x10/0x10 [ 82.430627][ T7078] ? lockdep_init_map_type+0x5c/0x250 [ 82.430646][ T7078] ? timer_init_key+0x150/0x310 [ 82.430666][ T7078] ? ieee80211_roc_setup+0x136/0x270 [ 82.430702][ T7078] ? ieee80211_alloc_hw_nm+0x1a2a/0x2310 [ 82.430725][ T7078] mac80211_hwsim_new_radio+0x37c/0x6510 [ 82.430748][ T7078] ? __asan_memset+0x23/0x50 [ 82.430764][ T7078] ? __nla_validate_parse+0x1e7/0x28b0 [ 82.430781][ T7078] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 82.430801][ T7078] hwsim_new_radio_nl+0xc6b/0x13f0 [ 82.430817][ T7078] ? trace_kmalloc+0xeb/0x110 [ 82.430834][ T7078] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 82.430854][ T7078] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 82.430869][ T7078] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 82.430887][ T7078] genl_family_rcv_msg_doit+0x214/0x300 [ 82.430903][ T7078] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 82.430917][ T7078] ? genl_get_cmd+0x3e7/0x760 [ 82.430933][ T7078] ? bpf_lsm_capable+0x9/0x10 [ 82.430945][ T7078] ? security_capable+0x80/0x260 [ 82.430970][ T7078] ? ns_capable+0xd2/0xf0 [ 82.430989][ T7078] genl_rcv_msg+0x560/0x800 [ 82.431005][ T7078] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.431020][ T7078] ? __lock_acquire+0x5c0/0x1f40 [ 82.431037][ T7078] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 82.431058][ T7078] netlink_rcv_skb+0x159/0x420 [ 82.431071][ T7078] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.431087][ T7078] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.431107][ T7078] ? netlink_deliver_tap+0x1ae/0xcc0 [ 82.431120][ T7078] genl_rcv+0x28/0x40 [ 82.431133][ T7078] netlink_unicast+0x585/0x850 [ 82.431147][ T7078] ? __pfx_netlink_unicast+0x10/0x10 [ 82.431163][ T7078] netlink_sendmsg+0x8b0/0xda0 [ 82.431178][ T7078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.431192][ T7078] ? apparmor_socket_sendmsg+0x165/0x280 [ 82.431206][ T7078] ____sys_sendmsg+0xa4d/0xbe0 [ 82.431244][ T7078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.431259][ T7078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.431284][ T7078] ___sys_sendmsg+0x190/0x1e0 [ 82.431303][ T7078] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.431322][ T7078] ? futex_wait+0x11e/0x370 [ 82.431343][ T7078] ? find_held_lock+0x2b/0x80 [ 82.431368][ T7078] __sys_sendmsg+0x160/0x210 [ 82.431382][ T7078] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.431405][ T7078] __do_fast_syscall_32+0x13a/0x8b0 [ 82.431443][ T7078] do_fast_syscall_32+0x32/0x70 [ 82.431456][ T7078] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.431472][ T7078] RIP: 0023:0xf748efec [ 82.431486][ T7078] Code: Unable to access opcode bytes at 0xf748efc2. [ 82.431492][ T7078] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 82.431503][ T7078] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 82.431511][ T7078] RDX: 0000000004044084 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.431519][ T7078] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.431526][ T7078] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 82.431532][ T7078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.431548][ T7078] [ 82.611867][ T7078] Invalid argument reading file caps for ./file0 [ 82.967965][ T58] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 82.997110][ T7097] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 83.106845][ T58] usb 8-1: device descriptor read/64, error -71 [ 83.363327][ T58] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 83.502429][ T58] usb 8-1: device descriptor read/64, error -71 [ 83.602320][ T7102] netlink: 'syz.4.328': attribute type 2 has an invalid length. [ 83.622471][ T58] usb usb8-port1: attempt power cycle [ 83.983092][ T58] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 84.004896][ T58] usb 8-1: device descriptor read/8, error -71 [ 84.261125][ T58] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 84.283262][ T58] usb 8-1: device descriptor read/8, error -71 [ 84.400276][ T58] usb usb8-port1: unable to enumerate USB device [ 84.605056][ T7118] netlink: 256 bytes leftover after parsing attributes in process `syz.4.333'. [ 84.605195][ T7118] unsupported nlmsg_type 40 [ 85.394405][ T7123] xt_NFQUEUE: number of total queues is 0 [ 85.394624][ T7124] xt_NFQUEUE: number of total queues is 0 [ 85.618120][ T7078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.003413][ T7133] input: syz0 as /devices/virtual/input/input14 [ 86.056281][ T5808] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 86.099680][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 86.155127][ T65] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 86.155295][ T65] Bluetooth: hci3: Injecting HCI hardware error event [ 86.156485][ T65] Bluetooth: hci3: hardware error 0x00 [ 86.216790][ T5808] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 86.217711][ T5808] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.217734][ T5808] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 86.217833][ T5808] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.219130][ T5808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 86.219142][ T5808] usb 7-1: Product: syz [ 86.219150][ T5808] usb 7-1: Manufacturer: syz [ 86.223060][ T7130] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.224212][ T5808] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 86.256869][ T5808] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 86.259502][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 86.263783][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.268677][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.268692][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.268704][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.268715][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.268735][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.313581][ T7144] ipvlan2: entered allmulticast mode [ 86.313596][ T7144] batadv_slave_1: entered allmulticast mode [ 86.315372][ T7144] batman_adv: batadv0: Adding interface: ipvlan2 [ 86.315381][ T7144] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.315396][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.315405][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.315411][ T7144] batman_adv: batadv0: Interface activated: ipvlan2 [ 86.353980][ T7146] FAULT_INJECTION: forcing a failure. [ 86.353980][ T7146] name failslab, interval 1, probability 0, space 0, times 0 [ 86.353999][ T7146] CPU: 0 UID: 0 PID: 7146 Comm: syz.3.344 Not tainted syzkaller #0 PREEMPT(full) [ 86.354012][ T7146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.354019][ T7146] Call Trace: [ 86.354023][ T7146] [ 86.354028][ T7146] dump_stack_lvl+0x100/0x190 [ 86.354057][ T7146] should_fail_ex.cold+0x5/0xa [ 86.354075][ T7146] should_failslab+0xc2/0x120 [ 86.354093][ T7146] __kmalloc_noprof+0xfc/0x840 [ 86.354109][ T7146] ? tomoyo_encode2+0xfb/0x3c0 [ 86.354127][ T7146] tomoyo_encode2+0xfb/0x3c0 [ 86.354144][ T7146] tomoyo_encode+0x29/0x50 [ 86.354159][ T7146] tomoyo_realpath_from_path+0x18c/0x690 [ 86.354178][ T7146] tomoyo_path_number_perm+0x23c/0x580 [ 86.354191][ T7146] ? tomoyo_path_number_perm+0x22e/0x580 [ 86.354205][ T7146] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 86.354218][ T7146] ? get_pid_task+0x106/0x250 [ 86.354235][ T7146] ? __lock_acquire+0x5c0/0x1f40 [ 86.354261][ T7146] ? __fget_files+0x34/0x3d0 [ 86.354277][ T7146] ? find_held_lock+0x2b/0x80 [ 86.354289][ T7146] ? __fget_files+0x215/0x3d0 [ 86.354303][ T7146] ? hook_file_ioctl_common+0x140/0x440 [ 86.354317][ T7146] ? __fget_files+0x215/0x3d0 [ 86.354334][ T7146] ? __fget_files+0x21f/0x3d0 [ 86.354351][ T7146] security_file_ioctl_compat+0xd3/0x230 [ 86.354366][ T7146] __ia32_compat_sys_ioctl+0xc2/0x360 [ 86.354381][ T7146] __do_fast_syscall_32+0x13a/0x8b0 [ 86.354393][ T7146] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.354412][ T7146] do_fast_syscall_32+0x32/0x70 [ 86.354423][ T7146] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.354438][ T7146] RIP: 0023:0xf740efec [ 86.354450][ T7146] Code: Unable to access opcode bytes at 0xf740efc2. [ 86.354455][ T7146] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 86.354466][ T7146] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080045510 [ 86.354473][ T7146] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.354480][ T7146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.354486][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.354495][ T7146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.354510][ T7146] [ 86.359688][ T7146] ERROR: Out of memory at tomoyo_realpath_from_path. [ 86.457053][ T5808] usb 7-1: USB disconnect, device number 7 [ 86.470230][ T5808] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 86.470550][ T5808] garmin_gps 7-1:1.0: device disconnected [ 86.478004][ T7150] batman_adv: batadv0: Adding interface: syzkaller0 [ 86.478014][ T7150] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.478030][ T7150] batman_adv: batadv0: Interface activated: syzkaller0 [ 86.489935][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 86.489957][ T9] usbtmc 6-1:16.0: can't read capabilities [ 86.497300][ T7155] netlink: 'syz.4.345': attribute type 1 has an invalid length. [ 86.512224][ T7155] bond1: entered promiscuous mode [ 86.512372][ T7155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.535105][ T7155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.535298][ T7155] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 86.535310][ T7155] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 86.547018][ T7155] bond1: (slave wireguard0): making interface the new active one [ 86.547033][ T7155] wireguard0: entered promiscuous mode [ 86.552240][ T7155] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 86.558632][ T7155] netlink: 'syz.4.345': attribute type 1 has an invalid length. [ 86.759907][ T9] usb 6-1: USB disconnect, device number 11 [ 87.073246][ T7159] netlink: 260 bytes leftover after parsing attributes in process `syz.2.347'. [ 87.449318][ T7169] ================================================================== [ 87.449329][ T7169] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 87.449351][ T7169] Read of size 160 at addr ffffffff9ccb8c20 by task syz.4.351/7169 [ 87.449360][ T7169] [ 87.449367][ T7169] CPU: 0 UID: 0 PID: 7169 Comm: syz.4.351 Not tainted syzkaller #0 PREEMPT(full) [ 87.449381][ T7169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.449388][ T7169] Call Trace: [ 87.449393][ T7169] [ 87.449397][ T7169] dump_stack_lvl+0x100/0x190 [ 87.449413][ T7169] print_report+0x13d/0x4b0 [ 87.449430][ T7169] ? __virt_addr_valid+0x239/0x430 [ 87.449449][ T7169] ? usb_copy_descriptors+0x18d/0x320 [ 87.449464][ T7169] kasan_report+0xdf/0x1c0 [ 87.449482][ T7169] ? usb_copy_descriptors+0x18d/0x320 [ 87.449498][ T7169] kasan_check_range+0x10f/0x1e0 [ 87.449511][ T7169] __asan_memcpy+0x23/0x60 [ 87.449524][ T7169] usb_copy_descriptors+0x18d/0x320 [ 87.449540][ T7169] usb_assign_descriptors+0xd2/0x470 [ 87.449557][ T7169] f_audio_bind+0x243a/0x3950 [ 87.449576][ T7169] ? __pfx_f_audio_bind+0x10/0x10 [ 87.449593][ T7169] usb_add_function+0x219/0x890 [ 87.449608][ T7169] ? composite_dev_prepare+0x1c1/0x420 [ 87.449626][ T7169] configfs_composite_bind+0xd83/0x1960 [ 87.449643][ T7169] ? kernfs_create_link+0x1bd/0x240 [ 87.449658][ T7169] gadget_bind_driver+0x28c/0xbf0 [ 87.449670][ T7169] ? __pfx_gadget_bind_driver+0x10/0x10 [ 87.449682][ T7169] really_probe+0x241/0xa60 [ 87.449696][ T7169] __driver_probe_device+0x210/0x460 [ 87.449708][ T7169] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.449725][ T7169] driver_probe_device+0x4a/0x140 [ 87.449738][ T7169] __driver_attach+0x21f/0x5b0 [ 87.449750][ T7169] ? __pfx___driver_attach+0x10/0x10 [ 87.449762][ T7169] bus_for_each_dev+0x13e/0x1d0 [ 87.449779][ T7169] ? __pfx_bus_for_each_dev+0x10/0x10 [ 87.449795][ T7169] ? bus_add_driver+0x2b5/0x5b0 [ 87.449808][ T7169] bus_add_driver+0x305/0x5b0 [ 87.449820][ T7169] driver_register+0x1e2/0x360 [ 87.449834][ T7169] usb_gadget_register_driver_owner+0x132/0x210 [ 87.449846][ T7169] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 87.449861][ T7169] configfs_write_iter+0x302/0x4e0 [ 87.449874][ T7169] vfs_write+0x6af/0x1050 [ 87.449887][ T7169] ? __pfx_configfs_write_iter+0x10/0x10 [ 87.449906][ T7169] ? __pfx_vfs_write+0x10/0x10 [ 87.449920][ T7169] ? find_held_lock+0x2b/0x80 [ 87.449938][ T7169] ksys_write+0x12a/0x250 [ 87.449952][ T7169] ? __pfx_ksys_write+0x10/0x10 [ 87.449969][ T7169] __do_fast_syscall_32+0x13a/0x8b0 [ 87.449982][ T7169] do_fast_syscall_32+0x32/0x70 [ 87.449994][ T7169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.450008][ T7169] RIP: 0023:0xf7f18fec [ 87.450021][ T7169] Code: Unable to access opcode bytes at 0xf7f18fc2. [ 87.450026][ T7169] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 87.450037][ T7169] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 87.450045][ T7169] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 87.450051][ T7169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.450058][ T7169] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 87.450065][ T7169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.450075][ T7169] [ 87.450079][ T7169] [ 87.450081][ T7169] The buggy address belongs to the variable: [ 87.450084][ T7169] ac_header_desc+0x0/0x40 [ 87.450100][ T7169] [ 87.450103][ T7169] The buggy address belongs to the physical page: [ 87.450108][ T7169] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ccb8 [ 87.450118][ T7169] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 87.450133][ T7169] raw: 00fff00000002000 ffffea0000732e08 ffffea0000732e08 0000000000000000 [ 87.450143][ T7169] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 87.450149][ T7169] page dumped because: kasan: bad access detected [ 87.450191][ T7169] page_owner info is not present (never set?) [ 87.450197][ T7169] [ 87.450200][ T7169] Memory state around the buggy address: [ 87.450206][ T7169] ffffffff9ccb8b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 87.450215][ T7169] ffffffff9ccb8b80: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 87.450223][ T7169] >ffffffff9ccb8c00: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 87.450229][ T7169] ^ [ 87.450235][ T7169] ffffffff9ccb8c80: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 87.450244][ T7169] ffffffff9ccb8d00: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 87.450263][ T7169] ================================================================== [ 87.450330][ T7169] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.595873][ T7169] CPU: 0 UID: 0 PID: 7169 Comm: syz.4.351 Not tainted syzkaller #0 PREEMPT(full) [ 87.598791][ T7169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.601975][ T7169] Call Trace: [ 87.603064][ T7169] [ 87.604036][ T7169] dump_stack_lvl+0x100/0x190 [ 87.605484][ T7169] vpanic+0x553/0x970 [ 87.606747][ T7169] ? __pfx_vpanic+0x10/0x10 [ 87.608200][ T7169] ? mark_held_locks+0x40/0x70 [ 87.609729][ T7169] ? usb_copy_descriptors+0x18d/0x320 [ 87.611450][ T7169] panic+0xd1/0xe0 [ 87.612660][ T7169] ? __pfx_panic+0x10/0x10 [ 87.614106][ T7169] ? usb_copy_descriptors+0x18d/0x320 [ 87.615827][ T7169] ? preempt_schedule_common+0x3c/0xb0 [ 87.617562][ T7169] check_panic_on_warn.cold+0x19/0x34 [ 87.619300][ T7169] end_report.part.0+0x3a/0x90 [ 87.620837][ T7169] kasan_report.cold+0xe/0x18 [ 87.622346][ T7169] ? usb_copy_descriptors+0x18d/0x320 [ 87.624071][ T7169] kasan_check_range+0x10f/0x1e0 [ 87.625647][ T7169] __asan_memcpy+0x23/0x60 [ 87.627079][ T7169] usb_copy_descriptors+0x18d/0x320 [ 87.628743][ T7169] usb_assign_descriptors+0xd2/0x470 [ 87.630504][ T7169] f_audio_bind+0x243a/0x3950 [ 87.632013][ T7169] ? __pfx_f_audio_bind+0x10/0x10 [ 87.633617][ T7169] usb_add_function+0x219/0x890 [ 87.635160][ T7169] ? composite_dev_prepare+0x1c1/0x420 [ 87.636905][ T7169] configfs_composite_bind+0xd83/0x1960 [ 87.638652][ T7169] ? kernfs_create_link+0x1bd/0x240 [ 87.640267][ T7169] gadget_bind_driver+0x28c/0xbf0 [ 87.641816][ T7169] ? __pfx_gadget_bind_driver+0x10/0x10 [ 87.643508][ T7169] really_probe+0x241/0xa60 [ 87.644908][ T7169] __driver_probe_device+0x210/0x460 [ 87.646518][ T7169] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.648553][ T7169] driver_probe_device+0x4a/0x140 [ 87.650302][ T7169] __driver_attach+0x21f/0x5b0 [ 87.651760][ T7169] ? __pfx___driver_attach+0x10/0x10 [ 87.653377][ T7169] bus_for_each_dev+0x13e/0x1d0 [ 87.654954][ T7169] ? __pfx_bus_for_each_dev+0x10/0x10 [ 87.656703][ T7169] ? bus_add_driver+0x2b5/0x5b0 [ 87.658252][ T7169] bus_add_driver+0x305/0x5b0 [ 87.659724][ T7169] driver_register+0x1e2/0x360 [ 87.661226][ T7169] usb_gadget_register_driver_owner+0x132/0x210 [ 87.663213][ T7169] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 87.664952][ T7169] configfs_write_iter+0x302/0x4e0 [ 87.666503][ T7169] vfs_write+0x6af/0x1050 [ 87.667861][ T7169] ? __pfx_configfs_write_iter+0x10/0x10 [ 87.669889][ T7169] ? __pfx_vfs_write+0x10/0x10 [ 87.671624][ T7169] ? find_held_lock+0x2b/0x80 [ 87.673130][ T7169] ksys_write+0x12a/0x250 [ 87.674513][ T7169] ? __pfx_ksys_write+0x10/0x10 [ 87.676065][ T7169] __do_fast_syscall_32+0x13a/0x8b0 [ 87.677734][ T7169] do_fast_syscall_32+0x32/0x70 [ 87.679297][ T7169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.681303][ T7169] RIP: 0023:0xf7f18fec [ 87.682608][ T7169] Code: Unable to access opcode bytes at 0xf7f18fc2. [ 87.684724][ T7169] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 87.687326][ T7169] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 87.690014][ T7169] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 87.692484][ T7169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.694966][ T7169] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 87.697430][ T7169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.699962][ T7169] [ 87.701486][ T7169] Kernel Offset: disabled [ 87.702892][ T7169] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:21:05 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b109a5 RDI=ffffffff9cc6cba0 RBP=ffffffff9cc6cb60 RSP=ffffc90002a1ef20 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6666666666666620 R12=0000000000000000 R13=0000000000000066 R14=0000000000000004 R15=ffffc90002a1f238 RIP=ffffffff85b109cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809574a000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f19000 CR3=000000004dce1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801df04b00 RSI=ffffffff81b67e9e RDI=ffff88801df04b00 RBP=0000000000000001 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=0000000000000000 RIP=ffffffff81b67e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809584a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffd27084 CR3=000000000fb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff932d123a RBX=ffffffff928c6680 RCX=dffffc0000000000 RDX=1ffffffff2518cd0 RSI=0000000000000000 RDI=ffffffff928c6670 RBP=ffffffff928c6670 RSP=ffffc9000394ed48 R8 =ffffffff932d1276 R9 =0000000000000007 R10=0000000000000200 R11=0000000000047fbf R12=ffffffff928c6694 R13=ffffffff857fbfbd R14=ffffffff928c6670 R15=ffffffff928c6670 RIP=ffffffff810014b0 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809594a000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032e02ff8 CR3=00000000774e9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801df00000 RSI=ffffffff81b67e9e RDI=ffff88801df00000 RBP=0000000000000003 RSP=ffffc9000049fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000093fc4 R15=0000000000000000 RIP=ffffffff81b67e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095a4a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564437a2a6b8 CR3=000000000fb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000