last executing test programs: 6.973183692s ago: executing program 0 (id=380): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000001b80)=[{&(0x7f0000000140)=""/105, 0x69}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000700000000040014001a8010000580"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 6.608812809s ago: executing program 0 (id=383): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000037c00000400c2800c0001800600060084"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{0x9, 0x87, 0xe}, {0x3, 0x4, 0x0, 0x3}, {0xffff, 0xd, 0x5, 0x5}, {0x4, 0x2, 0x9, 0x2}, {0xb, 0x7, 0x6, 0x7e59da37}, {0x6d, 0x7, 0x1, 0x80}, {0xd, 0x1, 0xfb, 0x5325}, {0x3, 0x2, 0xfc, 0x4}, {0x3, 0x3, 0x2, 0x400}]}) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x2c, r2, 0x601, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) 6.126048138s ago: executing program 0 (id=384): socket$packet(0x11, 0x3, 0x300) openat$vsock(0xffffff9c, &(0x7f0000000040), 0x2200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18fac8e9dc18000000000004"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0xfffffffffffffeac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000b00)={0x54, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc, 0x90, 0xfffffffffefffff7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x50831}, 0x4000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r4 = memfd_secret(0x0) mmap(&(0x7f00005a6000/0x1000)=nil, 0x1000, 0x2, 0x28011, r4, 0x0) dup3(r3, 0xffffffffffffffff, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, 0x0) r7 = openat(0xffffffffffffffff, 0x0, 0x8000, 0x100) fremovexattr(r7, 0x0) ioctl$PTP_SYS_OFFSET(r6, 0x43403d05, &(0x7f0000000900)={0x19}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="090000001400000008000000baab000042000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00o\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 5.62327825s ago: executing program 1 (id=386): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) dup3(r0, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0xf0ffff, &(0x7f0000000180)=ANY=[@ANYBLOB="090000001400000008000000baab000042000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00o\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 5.574681671s ago: executing program 0 (id=388): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1004, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) dup2(0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r2, &(0x7f00000062c0)="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", 0x2000, 0x0) close(r2) 5.023183554s ago: executing program 1 (id=390): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) syz_open_dev$video(0x0, 0xfffffffd, 0x10bd00) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5407000044000701fefffffffcdbdf25037c0000040045803c0701"], 0x754}}, 0xc000) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000001c0)={0x3, 0xdcc, 0x533, 0x0, 0x4}) 4.725162349s ago: executing program 1 (id=393): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r1, @ANYBLOB="79a9"], 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a801, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r4, 0x4068aea3, &(0x7f0000000000)={0xed, 0x0, 0x93}) timer_delete(r3) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x2009168, 0x1000, 0x1, 0x23e}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x9, 0x7e149c0b]}, 0x8) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, &(0x7f0000000380)=0x8080000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000008b8790f64c071b8e0f52c7aa8572acbf0d5b540f14f04e42ed1079c8841e431fab194841412095c191bfbdeab57fb2e9195954d837e2c3649ae85259fc1799968ba4576297c8fd75976d2e08a387397a232f6c0ff5c233b1eaf1868d90c595f6fa5722e6", @ANYRES16=r8, @ANYBLOB="370625bd7000fddbdf25210000001c002d800500040001000000080002000200000005000100020000000c0006000100000001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4004800) write$rfkill(r2, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) r9 = syz_open_dev$audion(&(0x7f00000002c0), 0x20000003, 0x1) write$P9_RVERSION(r9, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) 3.755489242s ago: executing program 3 (id=396): bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0/file0\x00'}) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000003c0)=@filename='./file0\x00', r5, &(0x7f0000000600)={0x2, 0xe26, 0x1, 0x5}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13f}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208800, 0x0) 2.906746533s ago: executing program 1 (id=398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040110}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, 0x0, 0x4011) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0xa, 0x5, 0x81, 0x4}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001900000000000000000000000400190000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc01000000000000000000000000000000000000000000000200", @ANYRESDEC], 0xc8}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r7, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f00000070c0)={&(0x7f0000006200)={0x50, 0xffffffffffffffda, 0x9, {0x7, 0x2d, 0x1, 0x6000040, 0x1, 0x2005, 0x8, 0x8, 0x0, 0x0, 0x10, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r7, r9, 0x6700000000000000) bind$inet(r4, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r4, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') (async) accept4$inet(r4, 0x0, 0x0, 0x0) 2.646421074s ago: executing program 1 (id=400): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x5c}}, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) keyctl$update(0x2, r1, &(0x7f0000000180)="1230d297834dfab794f81acb8623b05ffc33c0b478a2a2feee6d1e54e8c59241a7f67ed9354442d2d28da8e2ed4324959d11348d0c75c6eee43f7e6f7d02f6bea14df55877363e50578c95494f6e305613682e7904db0d3a833bca5f1d2db646bf", 0x61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dynamic_debug/control\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='file drivers/md/raid5.c +', 0x19) 2.505871542s ago: executing program 1 (id=401): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000400)=0xf) ioctl(r5, 0x400455c8, &(0x7f0000000008)='\x00') r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x400448c9, &(0x7f0000000000)) mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0xf) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f00000000c0)=0x5) 2.125183709s ago: executing program 0 (id=402): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000140)=0x11d) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x6ca8c0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000540)={@random="e90c610faca2", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0x78, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "c280440876218f4076c9f025d316ae0235103803e8122f7ac1bc5b24d97134ef", "eeb6ad324972d996277be1c7919f46f8", {"430f140c019f1953ffa9e47fadca163a", "3b70439ab82b682a6576c87b9f8bb9ff"}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0x3}, 0x6) ioctl$sock_bt_hci(r6, 0x800448d7, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r7, {0x1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0xfff0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 1.476061838s ago: executing program 2 (id=403): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fddbdf253800000008000300", @ANYRES32=r2, @ANYBLOB="0c00580001"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4040000) 1.377330285s ago: executing program 2 (id=404): mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./proc\x00', 0x1af) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0305d0e9d6b5d432", @ANYBLOB="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", @ANYRESHEX=r1], 0x24}, 0x1, 0x0, 0x0, 0x24048800}, 0x20000040) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x802) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, 0x0, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r6, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x40) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') r7 = accept4$inet(r6, 0x0, 0x0, 0x0) write(r7, &(0x7f0000000600)="00000081fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000008100000000000000000000000000000400000049fe534d4", 0x85) write(r2, &(0x7f0000000140)='1\n', 0x2) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB="00002cbd7000fbdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000e0001006e657464657673696d0000000f0002006e657464657673696d300008008e00ae145f84080001007063690011000200303030303a30303a31302e300000000008008e0000000000"], 0x88}, 0x1, 0x0, 0x0, 0xc840}, 0x40010041) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x2, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x38}, @empty}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) write(r10, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e0010203080002007f0000010800030001000000", 0x34) 1.24703719s ago: executing program 2 (id=405): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0xff) open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x80) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x85, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}, 0x8e11}], 0x1, 0x40010042, 0x0) 1.18728349s ago: executing program 0 (id=406): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x202) ppoll(&(0x7f0000000240)=[{r1, 0x4224}], 0x1, &(0x7f0000000340), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r3}) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0xffffffffffffffda, 0x9d6, {0x7, 0x29, 0xfffffffb, 0x48400410, 0x1, 0x0, 0xb, 0x2, 0x0, 0x0, 0x8, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_usb_control_io(r6, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0145b0e, &(0x7f0000000000)) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101341) r9 = openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f00000001c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) ioctl$USBDEVFS_IOCTL(r8, 0x80045515, &(0x7f0000000100)=@usbdevfs_driver={0x80000001, 0x6, 0x0}) 1.187036393s ago: executing program 2 (id=407): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x630bc3) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xa}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x40007, 0x4, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) r2 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r3, 0xfffffff8}, 0x8) 1.054678672s ago: executing program 2 (id=408): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008f}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@deltclass={0x44, 0x29, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x6}, {0x1, 0x4}, {0xc, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x8}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_RATE={0x6, 0x5, {0xff}}, @tclass_kind_options=@c_mq={0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="1f0000001300034700bb65e1c3e4ffff060003000100000045000000250000", 0x1f}], 0x1) syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x3, 0x12) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit']) chdir(&(0x7f0000000100)='./file0\x00') r5 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000901, 0x0, &(0x7f0000000500)) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 636.845151ms ago: executing program 3 (id=409): openat$ppp(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x13, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000001c0)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000078a151f75080039", 0x27) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r6, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="3c000000100003040000", @ANYRES32=0x0], 0x3c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000140), 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 256.943614ms ago: executing program 3 (id=410): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket(0x2, 0x805, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r1 = getpid() sched_getparam(r1, &(0x7f0000001180)) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) openat2(r3, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)={0x12000, 0x22, 0x8}, 0x18) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000140)='file drivers/md/raid5.c +p', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)='md0', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='raid5', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r6, &(0x7f0000000380)='4', 0x1) 204.703478ms ago: executing program 2 (id=411): iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x68278a5f5c49abfb, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x5}]}]}, 0x28}}, 0x0) timerfd_create(0x2, 0x800) r3 = timerfd_create(0x4, 0x80000) timerfd_gettime(r3, &(0x7f00000001c0)) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) mmap$panthor(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x30, r4, 0x9) 204.281323ms ago: executing program 3 (id=412): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fddbdf253800000008000300", @ANYRES32=r2, @ANYBLOB="0c00580001"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4040000) 117.317972ms ago: executing program 3 (id=413): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) syz_open_dev$video(0x0, 0xfffffffd, 0x10bd00) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5407000044000701fefffffffcdbdf25037c0000040045803c0701"], 0x754}}, 0xc000) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000001c0)={0x3, 0xdcc, 0x533, 0x0, 0x4}) 0s ago: executing program 3 (id=414): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='44100,48000,88200,96000,176+00,1920', 0x23) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='usbip-vudc.0', 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:41858' (ED25519) to the list of known hosts. [ 42.477149][ T5649] cgroup: Unknown subsys name 'net' [ 42.623490][ T5649] cgroup: Unknown subsys name 'cpuset' [ 42.630551][ T5649] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.717545][ T5649] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.388801][ T5737] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.402752][ T5740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.405156][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.407146][ T5740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.409509][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.413724][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.416030][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.418499][ T5740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.420639][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.424103][ T5740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.426887][ T5750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.430336][ T5740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.432869][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.433647][ T5752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.433692][ T5093] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.438231][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.441488][ T5752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.445080][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.447461][ T5749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.449625][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.066845][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.070575][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.073672][ T5743] bridge_slave_0: entered allmulticast mode [ 49.077529][ T5743] bridge_slave_0: entered promiscuous mode [ 49.098616][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.100944][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.103887][ T5743] bridge_slave_1: entered allmulticast mode [ 49.107749][ T5743] bridge_slave_1: entered promiscuous mode [ 49.164968][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.193370][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.252877][ T5743] team0: Port device team_slave_0 added [ 49.286286][ T5743] team0: Port device team_slave_1 added [ 49.362030][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.365240][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.368404][ T5734] bridge_slave_0: entered allmulticast mode [ 49.372413][ T5734] bridge_slave_0: entered promiscuous mode [ 49.395889][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.398478][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.400874][ T5744] bridge_slave_0: entered allmulticast mode [ 49.405395][ T5744] bridge_slave_0: entered promiscuous mode [ 49.416581][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.419757][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.422183][ T5734] bridge_slave_1: entered allmulticast mode [ 49.425054][ T5734] bridge_slave_1: entered promiscuous mode [ 49.435207][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.437680][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.446029][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.453146][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.456301][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.467887][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.472681][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.476058][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.479261][ T5744] bridge_slave_1: entered allmulticast mode [ 49.483189][ T5744] bridge_slave_1: entered promiscuous mode [ 49.535204][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.542554][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.547433][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.581532][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.605017][ T5734] team0: Port device team_slave_0 added [ 49.618231][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.621208][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.624117][ T5733] bridge_slave_0: entered allmulticast mode [ 49.627722][ T5733] bridge_slave_0: entered promiscuous mode [ 49.632280][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.635094][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.637386][ T5733] bridge_slave_1: entered allmulticast mode [ 49.640236][ T5733] bridge_slave_1: entered promiscuous mode [ 49.646272][ T5743] hsr_slave_0: entered promiscuous mode [ 49.649927][ T5743] hsr_slave_1: entered promiscuous mode [ 49.654632][ T5734] team0: Port device team_slave_1 added [ 49.681077][ T5744] team0: Port device team_slave_0 added [ 49.712320][ T5744] team0: Port device team_slave_1 added [ 49.715866][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.719437][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.721754][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.730640][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.762187][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.776689][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.779769][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.789829][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.829943][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.832498][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.842111][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.862624][ T5733] team0: Port device team_slave_0 added [ 49.867322][ T5733] team0: Port device team_slave_1 added [ 49.872101][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.874337][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.882366][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.961206][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.964225][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.974931][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.984899][ T5734] hsr_slave_0: entered promiscuous mode [ 49.987462][ T5734] hsr_slave_1: entered promiscuous mode [ 49.990501][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 49.993058][ T5734] Cannot create hsr debugfs directory [ 50.014346][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.017060][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.027429][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.054936][ T5744] hsr_slave_0: entered promiscuous mode [ 50.058095][ T5744] hsr_slave_1: entered promiscuous mode [ 50.065123][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 50.068462][ T5744] Cannot create hsr debugfs directory [ 50.145121][ T5733] hsr_slave_0: entered promiscuous mode [ 50.148236][ T5733] hsr_slave_1: entered promiscuous mode [ 50.150821][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 50.152853][ T5733] Cannot create hsr debugfs directory [ 50.370831][ T5743] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.381236][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.438536][ T5743] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.450427][ T65] Bluetooth: hci1: command tx timeout [ 50.451540][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.456929][ T5743] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.466121][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.470167][ T5743] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.477116][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.538689][ T65] Bluetooth: hci3: command tx timeout [ 50.538740][ T5741] Bluetooth: hci2: command tx timeout [ 50.538780][ T5740] Bluetooth: hci0: command tx timeout [ 50.606261][ T5734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.615112][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.619329][ T5734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.626715][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.631096][ T5734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.638902][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.642765][ T5734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.651731][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.743810][ T5744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.749241][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.759093][ T5744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.765831][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.770124][ T5744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.776895][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.794514][ T5744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.803099][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.856194][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.882317][ T5733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.890211][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.903390][ T5733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.912845][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.929653][ T5733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.936369][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.940820][ T5733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.948564][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.952957][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.971979][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.975581][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.004395][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.006961][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.037529][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.083178][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.120753][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.128597][ T218] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.131473][ T218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.142640][ T218] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.145261][ T218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.176901][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.191863][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.194208][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.214490][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.217078][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.240781][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.276038][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.291068][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.294224][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.306141][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.309334][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.559517][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.601649][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.611888][ T5743] veth0_vlan: entered promiscuous mode [ 51.626219][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.632531][ T5743] veth1_vlan: entered promiscuous mode [ 51.697877][ T5744] veth0_vlan: entered promiscuous mode [ 51.705072][ T5744] veth1_vlan: entered promiscuous mode [ 51.709426][ T5743] veth0_macvtap: entered promiscuous mode [ 51.716753][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.726366][ T5743] veth1_macvtap: entered promiscuous mode [ 51.741274][ T5734] veth0_vlan: entered promiscuous mode [ 51.755942][ T5734] veth1_vlan: entered promiscuous mode [ 51.772834][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.786672][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.803550][ T5744] veth0_macvtap: entered promiscuous mode [ 51.811575][ T5733] veth0_vlan: entered promiscuous mode [ 51.819503][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.829752][ T5744] veth1_macvtap: entered promiscuous mode [ 51.850064][ T5733] veth1_vlan: entered promiscuous mode [ 51.855717][ T5734] veth0_macvtap: entered promiscuous mode [ 51.858782][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.878236][ T5734] veth1_macvtap: entered promiscuous mode [ 51.886063][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.894712][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.934225][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.955744][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.958241][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.962908][ T5733] veth0_macvtap: entered promiscuous mode [ 51.963349][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.968748][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.998794][ T5733] veth1_macvtap: entered promiscuous mode [ 52.008137][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.011957][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.033705][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.049298][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.050854][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.055989][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.088721][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.091849][ T5743] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 52.093305][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.125006][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.125656][ T5743] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.129408][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.145339][ T5743] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.146340][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.150213][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.154944][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.155082][ T5743] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.175295][ T5743] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.229096][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.241424][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.291697][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.298607][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.299622][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.304166][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.360705][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.372789][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.398976][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.402856][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.498937][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.520322][ T5893] overlay: Unknown parameter '/' [ 52.529352][ T5741] Bluetooth: hci1: command tx timeout [ 52.608817][ T5741] Bluetooth: hci2: command tx timeout [ 52.612365][ T65] Bluetooth: hci0: command tx timeout [ 52.616496][ T5741] Bluetooth: hci3: command tx timeout [ 52.679354][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.687392][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.694323][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.697528][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.701170][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.702161][ T5893] netlink: zone id is out of range [ 52.724221][ T5893] netlink: zone id is out of range [ 52.733469][ T5893] netlink: zone id is out of range [ 53.058537][ T62] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.864079][ T62] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.878949][ T62] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.889958][ T62] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 53.898186][ T62] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.908469][ T62] usb 5-1: Product: syz [ 53.913621][ T62] usb 5-1: Manufacturer: syz [ 53.915597][ T62] usb 5-1: SerialNumber: syz [ 53.931871][ T5905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6'. [ 54.012014][ T5905] Zero length message leads to an empty skb [ 54.233587][ T5911] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 54.322047][ T5922] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 54.608415][ T5740] Bluetooth: hci1: command tx timeout [ 54.698429][ T5740] Bluetooth: hci3: command tx timeout [ 54.701216][ T5740] Bluetooth: hci0: command tx timeout [ 54.703553][ T5740] Bluetooth: hci2: command tx timeout [ 54.874761][ T5911] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 55.087168][ T5922] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 55.183712][ T5928] tipc: Started in network mode [ 55.189006][ T5928] tipc: Node identity e0000001, cluster identity 4711 [ 55.191273][ T5928] tipc: Enabling of bearer rejected, failed to enable media [ 55.277045][ T5933] overlay: Unknown parameter '/' [ 55.333220][ T5935] netlink: zone id is out of range [ 55.335595][ T5935] netlink: zone id is out of range [ 55.339215][ T5935] netlink: zone id is out of range [ 56.203121][ T5837] usb 5-1: USB disconnect, device number 2 [ 56.375697][ T5938] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 56.429800][ T5938] bond1: entered promiscuous mode [ 56.572491][ T5942] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 56.696621][ T65] Bluetooth: hci1: command tx timeout [ 56.778716][ T5942] bond1: entered promiscuous mode [ 56.781941][ T65] Bluetooth: hci2: command tx timeout [ 56.785420][ T65] Bluetooth: hci0: command tx timeout [ 56.787747][ T65] Bluetooth: hci3: command tx timeout [ 57.309423][ T5948] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 57.400120][ T5953] overlay: Unknown parameter '/' [ 57.414013][ T5953] netlink: zone id is out of range [ 57.415787][ T5953] netlink: zone id is out of range [ 57.417666][ T5953] netlink: zone id is out of range [ 57.462809][ T5948] bond2: entered promiscuous mode [ 57.575424][ T5954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14'. [ 58.105478][ T5958] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 58.378988][ T5958] bond3: entered promiscuous mode [ 59.169541][ T5969] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 59.181956][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 59.477702][ T5977] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 59.539186][ T5977] bond1: entered promiscuous mode [ 61.330158][ T6023] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 61.347588][ T6026] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 61.628472][ T5981] CIFS: Attempting to mount //127.0.0.1/share [ 61.635499][ T5981] CIFS: VFS: Error connecting to socket. Aborting operation. [ 61.641725][ T5981] CIFS: VFS: cifs_mount failed w/return code = -4 [ 61.799313][ T6029] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 61.813968][ T6032] overlay: Unknown parameter '/' [ 61.870468][ T6034] netlink: zone id is out of range [ 61.872245][ T6034] netlink: zone id is out of range [ 61.874133][ T6034] netlink: zone id is out of range [ 62.024587][ T6029] bond2: entered promiscuous mode [ 62.381068][ T6041] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 62.724488][ T1343] cfg80211: failed to load regulatory.db [ 63.899551][ T6056] tipc: Started in network mode [ 63.901250][ T6056] tipc: Node identity e0000001, cluster identity 4711 [ 63.903525][ T6056] tipc: Enabling of bearer rejected, failed to enable media [ 64.285587][ T6060] Bluetooth: MGMT ver 1.23 [ 64.752330][ T6072] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 65.040786][ T6072] bond3: entered promiscuous mode [ 65.401734][ T6076] tipc: Started in network mode [ 65.403396][ T6076] tipc: Node identity e0000001, cluster identity 4711 [ 65.405643][ T6076] tipc: Enabling of bearer rejected, failed to enable media [ 66.961720][ T6076] CIFS: Attempting to mount //127.0.0.1/share [ 66.972210][ T6076] CIFS: VFS: Error connecting to socket. Aborting operation. [ 66.974734][ T6076] CIFS: VFS: cifs_mount failed w/return code = -4 [ 67.042947][ T6106] batadv_slave_1: entered promiscuous mode [ 67.058053][ T6106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.50'. [ 67.096901][ T6106] batadv_slave_1: left promiscuous mode [ 67.230149][ T6109] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 67.372745][ T6113] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 67.533157][ T6109] bond4: entered promiscuous mode [ 67.542198][ T6114] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 67.561033][ T6113] bond4: entered promiscuous mode [ 67.629664][ T6114] bond1: entered promiscuous mode [ 67.715641][ T6125] batadv_slave_1: entered promiscuous mode [ 67.723504][ T6125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.55'. [ 67.734210][ T6125] batadv_slave_1: left promiscuous mode [ 67.855884][ T6128] netlink: zone id is out of range [ 67.858957][ T6128] netlink: zone id is out of range [ 67.861421][ T6128] netlink: zone id is out of range [ 68.701846][ T6136] tipc: Started in network mode [ 68.703467][ T6136] tipc: Node identity e0000001, cluster identity 4711 [ 68.708578][ T6136] tipc: Enabling of bearer rejected, failed to enable media [ 68.914311][ T6140] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 69.092238][ T6140] bond2: entered promiscuous mode [ 69.439397][ T6147] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 69.461093][ T6147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.63'. [ 69.684761][ T6152] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 69.825848][ T6152] bond3: entered promiscuous mode [ 69.996531][ T6156] batadv_slave_1: entered promiscuous mode [ 70.003480][ T6156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.65'. [ 70.010125][ T6156] batadv_slave_1: left promiscuous mode [ 70.253333][ T6162] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 70.387801][ T6162] bond2: entered promiscuous mode [ 70.575681][ T6168] batadv_slave_1: entered promiscuous mode [ 70.587541][ T6168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.69'. [ 70.604918][ T6168] batadv_slave_1: left promiscuous mode [ 70.655569][ T6170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.70'. [ 71.108034][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.115349][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.415085][ T6136] CIFS: Attempting to mount //127.0.0.1/share [ 71.420198][ T6136] CIFS: VFS: Error connecting to socket. Aborting operation. [ 71.423019][ T6136] CIFS: VFS: cifs_mount failed w/return code = -4 [ 71.671938][ T6184] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 71.759919][ T6184] bond4: entered promiscuous mode [ 71.998150][ T6188] bond5: entered promiscuous mode [ 72.257578][ T6196] tipc: Enabling of bearer rejected, failed to enable media [ 72.313954][ T6200] tipc: Enabling of bearer rejected, failed to enable media [ 72.325028][ T6199] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 72.335102][ T6199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.76'. [ 72.595169][ T6202] bond6: entered promiscuous mode [ 72.931402][ T6210] netlink: zone id is out of range [ 72.933494][ T6210] netlink: zone id is out of range [ 72.935664][ T6210] netlink: zone id is out of range [ 73.104368][ T6211] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 73.390178][ T6211] bond5: entered promiscuous mode [ 73.745167][ T6216] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 73.756304][ T6216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.82'. [ 73.845883][ T6196] CIFS: Attempting to mount //127.0.0.1/share [ 73.864007][ T6196] CIFS: VFS: Error connecting to socket. Aborting operation. [ 73.874652][ T6196] CIFS: VFS: cifs_mount failed w/return code = -4 [ 73.931187][ T6196] syz.0.78 (6196) used greatest stack depth: 19104 bytes left [ 74.015194][ T6222] netlink: zone id is out of range [ 74.018063][ T6222] netlink: zone id is out of range [ 74.020754][ T6222] netlink: zone id is out of range [ 74.028844][ T6200] CIFS: Attempting to mount //127.0.0.1/share [ 74.038177][ T6200] CIFS: VFS: Error connecting to socket. Aborting operation. [ 74.047260][ T6200] CIFS: VFS: cifs_mount failed w/return code = -4 [ 74.137037][ T6224] tipc: Enabling of bearer rejected, failed to enable media [ 75.177030][ T6247] batadv_slave_1: entered promiscuous mode [ 75.183497][ T6247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.89'. [ 75.200042][ T6247] batadv_slave_1: left promiscuous mode [ 75.378233][ T6250] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 75.497426][ T6250] bond7: entered promiscuous mode [ 76.078509][ T5746] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 76.241101][ T5746] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.245667][ T5746] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.336005][ T5746] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 76.344358][ T5746] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.350671][ T5746] usb 6-1: Product: syz [ 76.352569][ T5746] usb 6-1: Manufacturer: syz [ 76.360287][ T5746] usb 6-1: SerialNumber: syz [ 76.856112][ T6266] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 76.861803][ T6266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.94'. [ 77.168227][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 77.195115][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 77.203759][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 77.211648][ T6270] batadv_slave_1: entered promiscuous mode [ 77.230975][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 77.284096][ T6272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.96'. [ 78.166642][ T6269] batadv_slave_1: left promiscuous mode [ 78.822713][ T6285] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 78.932216][ T6285] bond6: entered promiscuous mode [ 79.108805][ T6291] netlink: 16 bytes leftover after parsing attributes in process `syz.3.103'. [ 79.569243][ T6304] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 79.778207][ T6304] bond7: entered promiscuous mode [ 79.815849][ T5736] usb 6-1: USB disconnect, device number 2 [ 80.097341][ T6323] tipc: Enabling of bearer rejected, failed to enable media [ 80.237818][ T6326] batadv_slave_1: entered promiscuous mode [ 80.258229][ T6326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.112'. [ 80.267340][ T6326] batadv_slave_1: left promiscuous mode [ 80.330086][ T6328] batadv_slave_1: entered promiscuous mode [ 80.337048][ T6328] netlink: 28 bytes leftover after parsing attributes in process `syz.0.113'. [ 80.345837][ T6328] batadv_slave_1: left promiscuous mode [ 80.392268][ T6330] tipc: Enabling of bearer rejected, failed to enable media [ 81.129149][ T6334] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 81.294932][ T6334] bond5: entered promiscuous mode [ 81.746120][ T6323] CIFS: Attempting to mount //127.0.0.1/share [ 81.756197][ T6323] CIFS: VFS: Error connecting to socket. Aborting operation. [ 81.760008][ T6323] CIFS: VFS: cifs_mount failed w/return code = -4 [ 81.815870][ T6339] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 81.982067][ T6343] netlink: 'syz.1.117': attribute type 4 has an invalid length. [ 81.985689][ T6343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.117'. [ 82.003965][ T6339] bond6: entered promiscuous mode [ 82.308909][ T5736] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 82.488835][ T5736] usb 6-1: Using ep0 maxpacket: 32 [ 82.507999][ T5736] usb 6-1: config 0 has no interfaces? [ 82.525252][ T5736] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 82.533373][ T5736] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 82.544752][ T5736] usb 6-1: Product: syz [ 82.562188][ T5736] usb 6-1: Manufacturer: syz [ 82.573125][ T5736] usb 6-1: SerialNumber: syz [ 82.640195][ T5736] usb 6-1: config 0 descriptor?? [ 82.821092][ T6345] syz.3.118 uses obsolete (PF_INET,SOCK_PACKET) [ 83.228508][ T5837] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 83.379659][ T5837] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 83.384631][ T5837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.392881][ T5837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.398550][ T5837] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 83.409348][ T5837] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 83.412387][ T5837] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 83.416899][ T5837] usb 8-1: Manufacturer: syz [ 83.421906][ T5837] usb 8-1: config 0 descriptor?? [ 83.541302][ T6352] FAULT_INJECTION: forcing a failure. [ 83.541302][ T6352] name failslab, interval 1, probability 0, space 0, times 1 [ 83.550696][ T6352] CPU: 1 UID: 0 PID: 6352 Comm: syz.0.121 Not tainted syzkaller #0 PREEMPT(full) [ 83.550726][ T6352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.550737][ T6352] Call Trace: [ 83.550743][ T6352] [ 83.550751][ T6352] dump_stack_lvl+0x100/0x190 [ 83.550798][ T6352] should_fail_ex.cold+0x5/0xa [ 83.550821][ T6352] should_failslab+0xc2/0x120 [ 83.550849][ T6352] __kmalloc_noprof+0xfc/0x820 [ 83.550872][ T6352] ? is_bpf_text_address+0x8a/0x1a0 [ 83.550895][ T6352] ? bpf_test_init.isra.0+0x88/0x100 [ 83.550922][ T6352] bpf_test_init.isra.0+0x88/0x100 [ 83.550949][ T6352] bpf_prog_test_run_skb+0x497/0x3540 [ 83.550969][ T6352] ? find_held_lock+0x2b/0x80 [ 83.550992][ T6352] ? __fget_files+0x211/0x3d0 [ 83.551017][ T6352] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 83.551040][ T6352] ? fput+0x79/0x100 [ 83.551064][ T6352] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 83.551084][ T6352] __sys_bpf+0x2a12/0x4e80 [ 83.551113][ T6352] ? __pfx___sys_bpf+0x10/0x10 [ 83.551134][ T6352] ? find_held_lock+0x2b/0x80 [ 83.551155][ T6352] ? get_pid_task+0xfc/0x250 [ 83.551179][ T6352] ? get_pid_task+0xfc/0x250 [ 83.551208][ T6352] ? proc_fail_nth_write+0x9f/0x220 [ 83.551235][ T6352] ? find_held_lock+0x2b/0x80 [ 83.551263][ T6352] ? rcu_read_lock_any_held+0x6a/0xa0 [ 83.551293][ T6352] ? find_held_lock+0x2b/0x80 [ 83.551320][ T6352] ? ksys_write+0x190/0x250 [ 83.551337][ T6352] ? ksys_write+0x190/0x250 [ 83.551372][ T6352] ? fput+0x79/0x100 [ 83.551396][ T6352] ? __ia32_sys_bpf+0xcc/0x170 [ 83.551415][ T6352] __ia32_sys_bpf+0xcc/0x170 [ 83.551436][ T6352] ? __do_fast_syscall_32+0x98/0x970 [ 83.551465][ T6352] __do_fast_syscall_32+0xe7/0x970 [ 83.551490][ T6352] ? lockdep_hardirqs_on+0x78/0x100 [ 83.551517][ T6352] do_fast_syscall_32+0x32/0x70 [ 83.551547][ T6352] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.551572][ T6352] RIP: 0023:0xf709efec [ 83.551594][ T6352] Code: Unable to access opcode bytes at 0xf709efc2. [ 83.551615][ T6352] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 83.551633][ T6352] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800003c0 [ 83.551645][ T6352] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.551655][ T6352] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.551664][ T6352] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 83.551674][ T6352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.551697][ T6352] [ 83.877114][ T5843] usb 6-1: USB disconnect, device number 3 [ 84.122948][ T6349] CIFS: Attempting to mount //127.0.0.1/share [ 84.126701][ T6349] CIFS: VFS: Error connecting to socket. Aborting operation. [ 84.130613][ T6349] CIFS: VFS: cifs_mount failed w/return code = -4 [ 84.416960][ T6360] bond8: entered promiscuous mode [ 84.597103][ T5837] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 84.605400][ T5837] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 84.868956][ T6368] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 84.953039][ T6368] bond8: entered promiscuous mode [ 85.254091][ T42] audit: type=1326 audit(1786185336.059:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.1.129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 85.274653][ T42] audit: type=1326 audit(1786185336.069:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.1.129" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 85.288236][ T6379] ata1.00: invalid multi_count 128 ignored [ 85.298458][ T42] audit: type=1326 audit(1786185336.069:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.1.129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 85.308676][ T42] audit: type=1326 audit(1786185336.069:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.1.129" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 85.315830][ T42] audit: type=1326 audit(1786185336.069:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.1.129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 85.322721][ T42] audit: type=1326 audit(1786185336.069:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.1.129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 85.331481][ T42] audit: type=1326 audit(1786185336.079:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.1.129" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 85.340533][ T42] audit: type=1326 audit(1786185336.079:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.1.129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 85.349579][ T42] audit: type=1326 audit(1786185336.079:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.1.129" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 85.358262][ T6380] netlink: 'syz.1.129': attribute type 29 has an invalid length. [ 85.363683][ T42] audit: type=1326 audit(1786185336.079:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.1.129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 85.372514][ T6380] netlink: 'syz.1.129': attribute type 29 has an invalid length. [ 85.380318][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 85.393840][ T6379] macsec1: entered promiscuous mode [ 85.395964][ T6379] dummy0: entered promiscuous mode [ 85.402414][ T6379] macsec1: entered allmulticast mode [ 85.405520][ T6379] dummy0: entered allmulticast mode [ 85.472912][ T6380] syzkaller1: entered promiscuous mode [ 85.476535][ T6380] syzkaller1: entered allmulticast mode [ 85.797427][ T6390] bond9: entered promiscuous mode [ 85.872753][ T6396] netlink: 'syz.0.133': attribute type 1 has an invalid length. [ 85.901977][ T6396] 8021q: adding VLAN 0 to HW filter on device bond3 [ 85.912996][ T6396] netlink: 24 bytes leftover after parsing attributes in process `syz.0.133'. [ 85.934364][ T6396] bond3: (slave veth0_to_bond): making interface the new active one [ 86.008803][ T6398] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 86.018829][ T6396] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 86.161324][ T6398] bond9: entered promiscuous mode [ 86.280139][ T6407] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 86.320897][ T6407] bond10: entered promiscuous mode [ 86.538534][ T41] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.593035][ T6415] overlay: Unknown parameter '/' [ 86.598950][ T6415] netlink: zone id is out of range [ 86.601343][ T6415] netlink: zone id is out of range [ 86.603891][ T6415] netlink: zone id is out of range [ 86.757654][ T41] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.762444][ T41] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.819271][ T6419] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 86.866473][ T6419] bond11: entered promiscuous mode [ 86.871876][ T41] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 86.896320][ T6416] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 86.906665][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.916385][ T5843] usb 8-1: USB disconnect, device number 2 [ 86.928865][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 86.934182][ T41] usb 5-1: Product: syz [ 86.936323][ T41] usb 5-1: Manufacturer: syz [ 86.964515][ T41] usb 5-1: SerialNumber: syz [ 88.398387][ T5746] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 88.561612][ T5746] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.568458][ T5746] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 88.574745][ T5746] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.749430][ T5746] usb 7-1: config 0 descriptor?? [ 88.968765][ T5746] usbhid 7-1:0.0: can't add hid device: -71 [ 88.970787][ T5746] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 88.991885][ T5746] usb 7-1: USB disconnect, device number 2 [ 89.418528][ T5820] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 89.433615][ T34] usb 5-1: USB disconnect, device number 3 [ 89.469837][ T6449] bond10: entered promiscuous mode [ 89.552636][ T6441] CIFS: Attempting to mount //127.0.0.1/share [ 89.562935][ T6441] CIFS: VFS: Error connecting to socket. Aborting operation. [ 89.570974][ T6441] CIFS: VFS: cifs_mount failed w/return code = -4 [ 89.580687][ T5820] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 89.584292][ T5820] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 89.587451][ T5820] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.595173][ T5820] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 89.598595][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.601185][ T5820] usb 7-1: Product: syz [ 89.602559][ T5820] usb 7-1: Manufacturer: syz [ 89.606139][ T5820] usb 7-1: SerialNumber: syz [ 89.776984][ T6457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.149'. [ 89.786348][ T6459] batadv_slave_1: entered promiscuous mode [ 89.795049][ T6459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.150'. [ 89.804794][ T6459] batadv_slave_1: left promiscuous mode [ 90.098467][ T56] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 90.130305][ T6472] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 90.133111][ T6472] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 90.138209][ T6472] vhci_hcd vhci_hcd.0: Device attached [ 90.143388][ T6475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.149435][ T6475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.225512][ T6464] CIFS: Attempting to mount //127.0.0.1/share [ 90.228426][ T56] usb 8-1: device descriptor read/64, error -71 [ 90.231861][ T6464] CIFS: VFS: Error connecting to socket. Aborting operation. [ 90.234455][ T6464] CIFS: VFS: cifs_mount failed w/return code = -4 [ 90.408487][ T41] usb 40-1: SetAddress Request (2) to port 0 [ 90.411347][ T41] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 90.478495][ T56] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 90.496870][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.500408][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.608443][ T56] usb 8-1: device descriptor read/64, error -71 [ 90.720497][ T56] usb usb8-port1: attempt power cycle [ 90.902846][ T6473] vhci_hcd: connection reset by peer [ 90.912341][ T12] vhci_hcd vhci_hcd.1: stop threads [ 90.915478][ T12] vhci_hcd vhci_hcd.1: release socket [ 90.918641][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 90.996549][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.999858][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.058407][ T56] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 91.078903][ T56] usb 8-1: device descriptor read/8, error -71 [ 91.235932][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.239435][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.242632][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.318465][ T56] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 91.341031][ T56] usb 8-1: device descriptor read/8, error -71 [ 91.447556][ T1343] usb 7-1: USB disconnect, device number 3 [ 91.452915][ T56] usb usb8-port1: unable to enumerate USB device [ 91.522401][ T6490] batadv_slave_1: entered promiscuous mode [ 91.544364][ T6490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.157'. [ 91.556773][ T6490] batadv_slave_1: left promiscuous mode [ 91.616826][ T5648] net_ratelimit: 30 callbacks suppressed [ 91.616841][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.621482][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.634505][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.637352][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.727350][ T6498] bond12: entered promiscuous mode [ 91.779035][ T6497] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 91.885477][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.928397][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.931726][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.934740][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.939139][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.941718][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.945820][ T6497] bond11: entered promiscuous mode [ 92.105919][ T6484] CIFS: Attempting to mount //127.0.0.1/share [ 92.126882][ T6484] CIFS: VFS: Error connecting to socket. Aborting operation. [ 92.137060][ T6484] CIFS: VFS: cifs_mount failed w/return code = -4 [ 92.489224][ T6506] CIFS: Attempting to mount //127.0.0.1/share [ 92.492919][ T6506] CIFS: VFS: Error connecting to socket. Aborting operation. [ 92.495437][ T6506] CIFS: VFS: cifs_mount failed w/return code = -4 [ 92.507432][ T6523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.165'. [ 92.514065][ T6523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.165'. [ 92.573479][ T6524] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.165'. [ 92.693436][ T6528] batadv_slave_1: entered promiscuous mode [ 92.706704][ T6528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.166'. [ 92.742877][ T6528] batadv_slave_1: left promiscuous mode [ 92.952580][ T6530] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.982928][ T6534] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 93.056921][ T6534] bond13: entered promiscuous mode [ 93.418462][ T6541] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 93.473857][ T6541] bond14: entered promiscuous mode [ 94.243287][ T6554] CIFS: Attempting to mount //127.0.0.1/share [ 94.262247][ T6554] CIFS: VFS: Error connecting to socket. Aborting operation. [ 94.266155][ T6554] CIFS: VFS: cifs_mount failed w/return code = -4 [ 94.508813][ T5843] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 94.558462][ T6562] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 94.638083][ T6562] bond15: entered promiscuous mode [ 94.689059][ T5843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.700990][ T5843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.708057][ T5843] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.720580][ T6567] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 94.721598][ T5843] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.738897][ T5843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.758146][ T6567] bond4: entered promiscuous mode [ 94.768102][ T5843] usb 8-1: config 0 descriptor?? [ 95.188481][ T5746] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 95.197769][ T6557] typec_fusb302 1-0022: I2C/SMBus block functionality not supported! [ 95.204805][ T6557] i2c i2c-1: new_device: Instantiated device typec_fusb302 at 0x22 [ 95.218076][ T6557] Invalid option length (1047276) for dns_resolver key [ 95.228486][ T62] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 95.255637][ T6557] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.350944][ T5746] usb 5-1: unable to get BOS descriptor or descriptor too short [ 95.353711][ T5746] usb 5-1: not running at top speed; connect to a high speed hub [ 95.356854][ T5746] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 95.359385][ T5746] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 95.361702][ T5746] usb 5-1: config 14 has no interface number 0 [ 95.363541][ T5746] usb 5-1: config 14 has no interface number 1 [ 95.365672][ T5746] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 95.370009][ T5746] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 95.373411][ T5746] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 95.376705][ T5746] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 95.379746][ T5746] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid maxpacket 65280, setting to 64 [ 95.380612][ T62] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.382850][ T5746] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.387284][ T62] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 95.390754][ T5746] usb 5-1: config 14 interface 57 has no altsetting 0 [ 95.390768][ T5746] usb 5-1: config 14 interface 228 has no altsetting 0 [ 95.392464][ T5746] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 95.395068][ T62] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 95.396900][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.399917][ T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.402238][ T5746] usb 5-1: Product: syz [ 95.402249][ T5746] usb 5-1: Manufacturer: syz [ 95.402257][ T5746] usb 5-1: SerialNumber: syz [ 95.403726][ T5843] usbhid 8-1:0.0: can't add hid device: -71 [ 95.441659][ T62] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 95.460193][ T62] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 95.634396][ T5447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.731039][ T41] usb 40-1: device descriptor read/8, error -110 [ 95.733265][ T5843] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 95.736926][ T5843] usb 8-1: USB disconnect, device number 7 [ 95.907462][ T5746] legousbtower 5-1:14.57: interrupt endpoints not found [ 96.122477][ T41] usb usb40-port1: attempt power cycle [ 96.238513][ T6593] CIFS: Attempting to mount //127.0.0.1/share [ 96.244882][ T6593] CIFS: VFS: Error connecting to socket. Aborting operation. [ 96.247663][ T6593] CIFS: VFS: cifs_mount failed w/return code = -4 [ 96.701888][ T41] usb usb40-port1: unable to enumerate USB device [ 96.740692][ T5649] net_ratelimit: 178 callbacks suppressed [ 96.740708][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.761991][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.766681][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.775159][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.780586][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.790147][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.810801][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.814065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.827450][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.839709][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.872772][ T6604] FAULT_INJECTION: forcing a failure. [ 96.872772][ T6604] name failslab, interval 1, probability 0, space 0, times 0 [ 96.889300][ T6604] CPU: 0 UID: 0 PID: 6604 Comm: syz.3.188 Not tainted syzkaller #0 PREEMPT(full) [ 96.889324][ T6604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.889333][ T6604] Call Trace: [ 96.889340][ T6604] [ 96.889361][ T6604] dump_stack_lvl+0x100/0x190 [ 96.889390][ T6604] should_fail_ex.cold+0x5/0xa [ 96.889406][ T6604] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 96.889425][ T6604] should_failslab+0xc2/0x120 [ 96.889454][ T6604] kmem_cache_alloc_noprof+0x91/0x6a0 [ 96.889477][ T6604] ? skb_clone+0x190/0x400 [ 96.889504][ T6604] skb_clone+0x190/0x400 [ 96.889527][ T6604] netlink_deliver_tap+0xaed/0xcc0 [ 96.889552][ T6604] netlink_unicast+0x62b/0x850 [ 96.889573][ T6604] ? __pfx_netlink_unicast+0x10/0x10 [ 96.889598][ T6604] netlink_sendmsg+0x8b0/0xda0 [ 96.889620][ T6604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.889642][ T6604] ? apparmor_socket_sendmsg+0x15b/0x270 [ 96.889664][ T6604] ____sys_sendmsg+0xa4d/0xbe0 [ 96.889703][ T6604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.889725][ T6604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.889752][ T6604] ___sys_sendmsg+0x190/0x1e0 [ 96.889771][ T6604] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.889799][ T6604] ? find_held_lock+0x2b/0x80 [ 96.889834][ T6604] __sys_sendmsg+0x160/0x210 [ 96.889858][ T6604] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.889886][ T6604] ? __pfx_ksys_write+0x10/0x10 [ 96.889907][ T6604] __do_fast_syscall_32+0xe7/0x970 [ 96.889932][ T6604] ? lockdep_hardirqs_on+0x78/0x100 [ 96.903407][ T6604] do_fast_syscall_32+0x32/0x70 [ 96.903446][ T6604] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.903501][ T6604] RIP: 0023:0xf7f35fec [ 96.903524][ T6604] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 96.903532][ T6604] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 96.903548][ T6604] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 96.903558][ T6604] RDX: 0000000000004040 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.903566][ T6604] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.903592][ T6604] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.903601][ T6604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.903621][ T6604] [ 96.991926][ T6607] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 97.083999][ T6607] bond16: entered promiscuous mode [ 97.429617][ T6620] 9p: Could not find request transport: ÿÿ [ 97.511561][ T5740] Bluetooth: hci3: link tx timeout [ 97.513641][ T5740] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 97.522077][ T5740] Bluetooth: hci3: link tx timeout [ 97.524177][ T5740] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 97.527021][ T5740] Bluetooth: hci3: link tx timeout [ 97.530923][ T5740] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 97.534515][ T5740] Bluetooth: hci3: link tx timeout [ 97.536557][ T5740] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 97.540447][ T5740] Bluetooth: hci3: link tx timeout [ 97.542585][ T5740] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 97.546877][ T5740] Bluetooth: hci3: link tx timeout [ 97.548470][ T5740] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 97.554589][ T5740] Bluetooth: hci3: link tx timeout [ 97.556288][ T5740] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 97.560178][ T5740] Bluetooth: hci3: link tx timeout [ 97.564889][ T5740] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 97.569986][ T5740] Bluetooth: hci3: link tx timeout [ 97.572332][ T5740] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 97.577259][ T5746] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 97.584021][ T5740] Bluetooth: hci3: link tx timeout [ 97.585783][ T5740] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 97.592475][ T5746] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 97.593116][ T5740] Bluetooth: hci3: link tx timeout [ 97.596031][ T5740] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 97.600786][ T5740] Bluetooth: hci3: link tx timeout [ 97.602445][ T5740] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 98.196622][ T5843] usb 6-1: USB disconnect, device number 4 [ 98.231288][ T5843] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 98.240491][ T5843] spcp8x5 6-1:1.0: device disconnected [ 98.435002][ T1343] usb 5-1: USB disconnect, device number 4 [ 98.448375][ T1343] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 98.618443][ T5843] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 98.781261][ T5843] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.785318][ T5843] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.794045][ T5843] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 98.797803][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.801007][ T5843] usb 6-1: Product: syz [ 98.802641][ T5843] usb 6-1: Manufacturer: syz [ 98.804524][ T5843] usb 6-1: SerialNumber: syz [ 99.053394][ T6636] tmpfs: Unknown parameter '' [ 99.568629][ T5740] Bluetooth: hci3: command 0x0406 tx timeout [ 99.813000][ T6639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.199'. [ 99.823680][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 100.058891][ T6630] CIFS: Attempting to mount //127.0.0.1/share [ 100.065488][ T6630] CIFS: VFS: Error connecting to socket. Aborting operation. [ 100.073633][ T6630] CIFS: VFS: cifs_mount failed w/return code = -4 [ 100.366056][ T6645] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 100.514456][ T6645] bond17: entered promiscuous mode [ 100.603291][ T6642] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.611984][ T6642] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 100.633691][ T6659] batadv_slave_1: entered promiscuous mode [ 100.650765][ T6659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.203'. [ 100.666214][ T6656] team0: Port device team_slave_1 removed [ 100.670213][ T6642] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.681545][ T6642] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 100.695187][ T6642] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.697454][ T6659] batadv_slave_1: left promiscuous mode [ 100.699783][ T6642] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 100.716153][ T6642] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.721745][ T6642] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 101.028503][ T41] usb 6-1: USB disconnect, device number 5 [ 101.101909][ T6686] tmpfs: Unknown parameter '' [ 101.694361][ T6707] batadv_slave_1: entered promiscuous mode [ 101.712257][ T6707] batadv_slave_1: left promiscuous mode [ 101.798393][ C1] net_ratelimit: 173 callbacks suppressed [ 101.798410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.889812][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.897172][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.902525][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.905929][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.925729][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.928678][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.932468][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.938575][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.947724][ T6709] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 101.953274][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.999083][ T6709] bond18: entered promiscuous mode [ 102.218448][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.298491][ T5843] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 102.388578][ T34] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.392932][ T34] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.401079][ T34] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 102.404083][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.406633][ T34] usb 5-1: Product: syz [ 102.407921][ T34] usb 5-1: Manufacturer: syz [ 102.409505][ T34] usb 5-1: SerialNumber: syz [ 102.461124][ T5843] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.464848][ T5843] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.470514][ T5843] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 102.473353][ T5843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.475854][ T5843] usb 8-1: Product: syz [ 102.477151][ T5843] usb 8-1: Manufacturer: syz [ 102.478895][ T5843] usb 8-1: SerialNumber: syz [ 102.486187][ T5843] chaoskey 8-1:1.0: Unable to register with hwrng [ 103.193014][ T6739] netlink: 'syz.1.220': attribute type 4 has an invalid length. [ 103.209404][ T6739] netlink: 'syz.1.220': attribute type 4 has an invalid length. [ 103.219674][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 103.374312][ T6744] tmpfs: Unknown parameter '' [ 104.416648][ T6747] batadv_slave_1: entered promiscuous mode [ 104.783764][ T6746] batadv_slave_1: left promiscuous mode [ 105.008568][ T5740] Bluetooth: hci4: command 0x1003 tx timeout [ 105.013473][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 105.378764][ T29] usb 5-1: USB disconnect, device number 5 [ 105.427860][ T6758] netlink: 'syz.1.227': attribute type 4 has an invalid length. [ 105.461575][ T10] usb 8-1: USB disconnect, device number 8 [ 105.483712][ T6758] netlink: 'syz.1.227': attribute type 4 has an invalid length. [ 105.744727][ T6755] CIFS: Attempting to mount //127.0.0.1/share [ 105.750465][ T6755] CIFS: VFS: Error connecting to socket. Aborting operation. [ 105.753034][ T6755] CIFS: VFS: cifs_mount failed w/return code = -4 [ 106.112176][ T6784] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 106.131286][ T6784] 8021q: adding VLAN 0 to HW filter on device bond19 [ 106.585109][ T6787] CIFS: Attempting to mount //127.0.0.1/share [ 106.590463][ T6787] CIFS: VFS: Error connecting to socket. Aborting operation. [ 106.593738][ T6787] CIFS: VFS: cifs_mount failed w/return code = -4 [ 107.004862][ T5648] net_ratelimit: 150 callbacks suppressed [ 107.004886][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.010998][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.043725][ T6790] CIFS: Attempting to mount //127.0.0.1/share [ 107.051474][ T6790] CIFS: VFS: Error connecting to socket. Aborting operation. [ 107.054557][ T6790] CIFS: VFS: cifs_mount failed w/return code = -4 [ 107.085298][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.098752][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.102713][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.106160][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.120039][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.125601][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.140257][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.188432][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.441960][ T6801] netlink: 'syz.3.240': attribute type 1 has an invalid length. [ 107.492442][ T5740] Bluetooth: hci4: command 0xfc11 tx timeout [ 107.499969][ T65] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 107.509113][ T1343] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 107.703845][ T1343] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.712886][ T1343] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.732821][ T1343] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 107.736297][ T1343] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.742825][ T1343] usb 7-1: Product: syz [ 107.745044][ T1343] usb 7-1: Manufacturer: syz [ 107.747485][ T1343] usb 7-1: SerialNumber: syz [ 108.808655][ T6811] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 109.049336][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 109.077469][ T6811] bond12: entered promiscuous mode [ 110.243899][ T6831] batadv_slave_1: entered promiscuous mode [ 110.312712][ T6831] batadv_slave_1: left promiscuous mode [ 110.439582][ T6834] batadv_slave_1: entered promiscuous mode [ 110.452483][ T6834] batadv_slave_1: left promiscuous mode [ 111.485170][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 111.485190][ T42] audit: type=1800 audit(1786185362.289:49): pid=6845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.257" name="bmaControls" dev="configfs" ino=14583 res=0 errno=0 [ 111.548574][ T5746] usb 7-1: USB disconnect, device number 4 [ 111.676931][ T6850] tmpfs: Unknown parameter '' [ 111.750907][ T6852] process 'syz.1.256' launched './file2' with NULL argv: empty string added [ 112.013150][ T5648] net_ratelimit: 148 callbacks suppressed [ 112.013174][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.019181][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.166660][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.218481][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.222288][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.225801][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.238636][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.242275][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.416532][ T6854] CIFS: Attempting to mount //127.0.0.1/share [ 112.424944][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.429785][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.441916][ T6854] CIFS: VFS: Error connecting to socket. Aborting operation. [ 112.445536][ T6854] CIFS: VFS: cifs_mount failed w/return code = -4 [ 112.498500][ T6859] orangefs: client-core tried to read wrong size [ 112.781763][ T6867] 9p: Bad value for 'rfdno' [ 112.815778][ T6873] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 112.832142][ T6873] bond7: entered promiscuous mode [ 113.688946][ T6890] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 113.794308][ T6890] bond20: entered promiscuous mode [ 114.327084][ T6896] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 114.330856][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 114.532884][ T6906] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 114.593887][ T6906] bond5: entered promiscuous mode [ 114.896860][ T6901] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 114.916001][ T6901] bond13: entered promiscuous mode [ 114.948230][ T6914] batadv_slave_1: entered promiscuous mode [ 114.961230][ T6914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.277'. [ 114.981257][ T6914] batadv_slave_1: left promiscuous mode [ 115.090340][ T6919] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 115.191809][ T6919] bond6: entered promiscuous mode [ 115.361577][ T6925] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 115.410741][ T6928] fuse: Unknown parameter 'gV_' [ 115.415585][ T6928] capability: warning: `syz.0.281' uses deprecated v2 capabilities in a way that may be insecure [ 115.456416][ T6925] bond21: entered promiscuous mode [ 115.459898][ T6907] CIFS: Attempting to mount //127.0.0.1/share [ 115.479964][ T6907] CIFS: VFS: Error connecting to socket. Aborting operation. [ 115.485487][ T6907] CIFS: VFS: cifs_mount failed w/return code = -4 [ 115.669415][ T6937] netlink: 'syz.3.284': attribute type 1 has an invalid length. [ 115.702328][ T6937] 8021q: adding VLAN 0 to HW filter on device bond8 [ 115.731406][ T6937] bond8: (slave veth0_to_bond): making interface the new active one [ 115.734780][ T6937] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 115.756638][ T6937] bond8: entered promiscuous mode [ 115.758801][ T6937] veth0_to_bond: entered promiscuous mode [ 115.760653][ T6937] bond8: entered allmulticast mode [ 115.762304][ T6937] veth0_to_bond: entered allmulticast mode [ 115.779190][ T6937] macvlan2: entered promiscuous mode [ 115.780936][ T6937] macvlan2: entered allmulticast mode [ 115.785627][ T6937] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 115.790218][ T6937] bond8: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 116.084517][ T6948] batadv_slave_1: entered promiscuous mode [ 116.109122][ T6948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.288'. [ 116.153008][ T6948] batadv_slave_1: left promiscuous mode [ 117.027102][ T5649] net_ratelimit: 196 callbacks suppressed [ 117.027127][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.048920][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.061721][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.087157][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.103243][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.156339][ T6960] tipc: Enabling of bearer rejected, failed to enable media [ 117.156366][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.208428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.212116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.215912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.222201][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.440048][ T6965] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 117.457726][ T6965] bond7: entered promiscuous mode [ 117.792133][ T6973] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 117.872904][ T6971] Console: switching to colour dummy device 80x25 [ 118.130757][ T6973] bond14: entered promiscuous mode [ 118.343790][ T6978] Illegal XDP return value 4294967294 on prog (id 15) dev N/A, expect packet loss! [ 118.363611][ T6978] Bluetooth: MGMT ver 1.23 [ 118.376374][ T6978] 9p: Bad value for 'rfdno' [ 118.473187][ T6960] CIFS: Attempting to mount //127.0.0.1/share [ 118.477791][ T6960] CIFS: VFS: Error connecting to socket. Aborting operation. [ 118.481979][ T6960] CIFS: VFS: cifs_mount failed w/return code = -4 [ 118.688896][ T6962] CIFS: Attempting to mount //127.0.0.1/share [ 118.707080][ T6980] syzkaller0: entered promiscuous mode [ 118.716082][ T6980] syzkaller0: entered allmulticast mode [ 118.729277][ T6962] CIFS: VFS: Error connecting to socket. Aborting operation. [ 118.732995][ T6962] CIFS: VFS: cifs_mount failed w/return code = -4 [ 118.942586][ T6983] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 119.129236][ T6995] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 119.146131][ T6997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.301'. [ 119.203949][ T7000] overlay: Unknown parameter '/' [ 119.209795][ T7001] syz.0.301 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 119.234878][ T6995] bond9: entered promiscuous mode [ 119.240658][ T7001] usb usb7: usbfs: process 7001 (syz.0.301) did not claim interface 0 before use [ 120.298620][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 120.439626][ T29] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 120.466487][ T34] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.471474][ T34] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.485831][ T34] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 120.490151][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.493840][ T34] usb 6-1: Product: syz [ 120.496155][ T34] usb 6-1: Manufacturer: syz [ 120.498540][ T34] usb 6-1: SerialNumber: syz [ 120.598397][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 120.603173][ T29] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.611033][ T29] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.624032][ T29] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 120.627008][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.629592][ T29] usb 8-1: Product: syz [ 120.630922][ T29] usb 8-1: Manufacturer: syz [ 120.632394][ T29] usb 8-1: SerialNumber: syz [ 120.643320][ T29] chaoskey 8-1:1.0: Unable to register with hwrng [ 120.760334][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.764559][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.772844][ T10] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 120.776458][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.780570][ T10] usb 7-1: Product: syz [ 120.782200][ T10] usb 7-1: Manufacturer: syz [ 120.784197][ T10] usb 7-1: SerialNumber: syz [ 120.800624][ T10] chaoskey 7-1:1.0: Unable to register with hwrng [ 121.640711][ T41] usb 6-1: USB disconnect, device number 6 [ 121.696734][ T7019] CIFS: Attempting to mount //127.0.0.1/share [ 121.703723][ T7019] CIFS: VFS: Error connecting to socket. Aborting operation. [ 121.706390][ T7019] CIFS: VFS: cifs_mount failed w/return code = -4 [ 121.722822][ T5736] usb 8-1: USB disconnect, device number 9 [ 121.871287][ T29] usb 7-1: USB disconnect, device number 5 [ 122.150406][ T5649] net_ratelimit: 131 callbacks suppressed [ 122.150422][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.198492][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.202190][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.205756][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.217054][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.220667][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.222220][ T7029] netlink: 56 bytes leftover after parsing attributes in process `syz.0.312'. [ 122.226645][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.230567][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.231855][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.312'. [ 122.263448][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.268565][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.412125][ T7040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.418571][ T7039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.437255][ T7042] batadv_slave_1: entered promiscuous mode [ 122.496773][ T7042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.316'. [ 122.507268][ T7045] syzkaller0: entered promiscuous mode [ 122.509796][ T7045] syzkaller0: entered allmulticast mode [ 122.514715][ T7042] batadv_slave_1: left promiscuous mode [ 122.554195][ T7045] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 122.582230][ T7045] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 122.592415][ T7049] ======================================================= [ 122.592415][ T7049] WARNING: The mand mount option has been deprecated and [ 122.592415][ T7049] and is ignored by this kernel. Remove the mand [ 122.592415][ T7049] option from the mount to silence this warning. [ 122.592415][ T7049] ======================================================= [ 122.611201][ T7049] overlayfs: fs on './file1/file0' does not support file handles, falling back to index=off,nfs_export=off. [ 122.833094][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 122.936219][ T7057] tipc: Enabling of bearer rejected, failed to enable media [ 123.075640][ T7062] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 123.154436][ T7062] bond8: entered promiscuous mode [ 123.294202][ T7057] CIFS: Attempting to mount //127.0.0.1/share [ 123.301933][ T7057] CIFS: VFS: Error connecting to socket. Aborting operation. [ 123.309277][ T7057] CIFS: VFS: cifs_mount failed w/return code = -4 [ 123.570763][ T7069] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 123.579725][ T7074] tmpfs: Unknown parameter 'grpquota_block_har' [ 123.720517][ T7076] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 123.927757][ T7069] bond10: entered promiscuous mode [ 124.160260][ T7076] bond9: entered promiscuous mode [ 124.792056][ T7103] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 124.870852][ T7103] bond15: entered promiscuous mode [ 124.874072][ T7109] batadv_slave_1: entered promiscuous mode [ 124.895379][ T7109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.335'. [ 124.930898][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 124.935780][ T7109] batadv_slave_1: left promiscuous mode [ 125.077160][ T7113] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 125.109146][ T7113] bond22: entered promiscuous mode [ 125.378652][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 125.525787][ T7117] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 125.565253][ T7117] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 125.645509][ T7117] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 125.694936][ T7117] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 125.723773][ T38] Bluetooth: hci4: Frame reassembly failed (-84) [ 125.838633][ T7117] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 125.839497][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.347'. [ 126.328966][ T7137] batadv_slave_1: entered promiscuous mode [ 126.338595][ T7137] netlink: 28 bytes leftover after parsing attributes in process `syz.3.344'. [ 126.347555][ T7137] batadv_slave_1: left promiscuous mode [ 126.553194][ T7144] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 126.599517][ T7144] bond10: entered promiscuous mode [ 127.051715][ T7150] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 127.095278][ T7150] bond11: entered promiscuous mode [ 127.302546][ T5649] net_ratelimit: 194 callbacks suppressed [ 127.302567][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.348415][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.351268][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.353957][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.358217][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.361024][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.367050][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.379280][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.387833][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.390909][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.495544][ T7165] batadv_slave_1: entered promiscuous mode [ 127.501385][ T7165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.354'. [ 127.514246][ T7165] batadv_slave_1: left promiscuous mode [ 127.535237][ T7167] tipc: Enabling of bearer rejected, failed to enable media [ 127.576834][ T7170] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 127.601971][ T7170] bond23: entered promiscuous mode [ 127.730088][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 128.243685][ T7167] CIFS: Attempting to mount //127.0.0.1/share [ 128.280428][ T7167] CIFS: VFS: Error connecting to socket. Aborting operation. [ 128.285091][ T7167] CIFS: VFS: cifs_mount failed w/return code = -4 [ 129.047743][ T7194] jffs2: notice: (7194) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 129.120105][ T7199] batadv_slave_1: entered promiscuous mode [ 129.142553][ T7199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.365'. [ 129.164555][ T7199] batadv_slave_1: left promiscuous mode [ 129.416110][ T7210] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 129.498364][ T7210] bond12: entered promiscuous mode [ 130.118862][ T5746] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 130.280109][ T5746] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.287671][ T5746] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.298761][ T5746] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 130.304099][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.311453][ T5746] usb 5-1: Product: syz [ 130.313242][ T5746] usb 5-1: Manufacturer: syz [ 130.322518][ T5746] usb 5-1: SerialNumber: syz [ 130.482603][ T42] audit: type=1800 audit(1786185381.289:50): pid=7224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.369" name="bus" dev="ramfs" ino=17434 res=0 errno=0 [ 130.829075][ T7234] FAULT_INJECTION: forcing a failure. [ 130.829075][ T7234] name failslab, interval 1, probability 0, space 0, times 0 [ 130.836238][ T7234] CPU: 3 UID: 0 PID: 7234 Comm: syz.1.375 Not tainted syzkaller #0 PREEMPT(full) [ 130.836263][ T7234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.836274][ T7234] Call Trace: [ 130.836281][ T7234] [ 130.836288][ T7234] dump_stack_lvl+0x100/0x190 [ 130.836321][ T7234] should_fail_ex.cold+0x5/0xa [ 130.836339][ T7234] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 130.836365][ T7234] should_failslab+0xc2/0x120 [ 130.836393][ T7234] kmem_cache_alloc_noprof+0x91/0x6a0 [ 130.836418][ T7234] ? skb_clone+0x190/0x400 [ 130.836447][ T7234] skb_clone+0x190/0x400 [ 130.836471][ T7234] netlink_deliver_tap+0xaed/0xcc0 [ 130.836497][ T7234] netlink_unicast+0x6a5/0x850 [ 130.836519][ T7234] ? __pfx_netlink_unicast+0x10/0x10 [ 130.836554][ T7234] ? genl_rcv_msg+0x4be/0x800 [ 130.836582][ T7234] netlink_ack+0x655/0xb80 [ 130.836608][ T7234] netlink_rcv_skb+0x333/0x420 [ 130.836629][ T7234] ? __pfx_genl_rcv_msg+0x10/0x10 [ 130.836652][ T7234] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.836679][ T7234] ? netlink_deliver_tap+0x1ae/0xcc0 [ 130.836701][ T7234] genl_rcv+0x28/0x40 [ 130.836720][ T7234] netlink_unicast+0x585/0x850 [ 130.836744][ T7234] ? __pfx_netlink_unicast+0x10/0x10 [ 130.836770][ T7234] netlink_sendmsg+0x8b0/0xda0 [ 130.836796][ T7234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.836821][ T7234] ? apparmor_socket_sendmsg+0x15b/0x270 [ 130.836853][ T7234] ____sys_sendmsg+0xa4d/0xbe0 [ 130.836872][ T7234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.836895][ T7234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.836926][ T7234] ___sys_sendmsg+0x190/0x1e0 [ 130.836950][ T7234] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.836983][ T7234] ? find_held_lock+0x2b/0x80 [ 130.837025][ T7234] __sys_sendmsg+0x160/0x210 [ 130.837051][ T7234] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.837082][ T7234] ? __pfx_ksys_write+0x10/0x10 [ 130.837106][ T7234] __do_fast_syscall_32+0xe7/0x970 [ 130.837135][ T7234] ? lockdep_hardirqs_on+0x78/0x100 [ 130.837161][ T7234] do_fast_syscall_32+0x32/0x70 [ 130.837186][ T7234] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.837209][ T7234] RIP: 0023:0xf7f63fec [ 130.837233][ T7234] Code: Unable to access opcode bytes at 0xf7f63fc2. [ 130.837240][ T7234] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 130.837259][ T7234] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 130.837269][ T7234] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.837279][ T7234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.837288][ T7234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.837297][ T7234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.837321][ T7234] [ 130.918599][ T5736] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 131.069933][ T5736] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.074066][ T5736] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.082452][ T5736] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 131.087159][ T5736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.090987][ T5736] usb 7-1: Product: syz [ 131.092340][ T5736] usb 7-1: Manufacturer: syz [ 131.095552][ T5736] usb 7-1: SerialNumber: syz [ 131.107810][ T5736] chaoskey 7-1:1.0: Unable to register with hwrng [ 131.183083][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'. [ 131.291458][ T5746] usb 5-1: USB disconnect, device number 6 [ 131.304216][ T7244] netlink: 'syz.3.377': attribute type 1 has an invalid length. [ 132.357133][ T5649] net_ratelimit: 131 callbacks suppressed [ 132.357172][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.361852][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.374043][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.376931][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.384014][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.386926][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.393938][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.400970][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.404934][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.411598][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.532771][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.534973][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.687265][ T7254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.380'. [ 132.845847][ T7259] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 133.898756][ T5736] usb 7-1: USB disconnect, device number 6 [ 134.052460][ T7283] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 134.145034][ T7283] bond11: entered promiscuous mode [ 134.422375][ T7289] netlink: 'syz.3.391': attribute type 1 has an invalid length. [ 134.507374][ T7289] 8021q: adding VLAN 0 to HW filter on device bond12 [ 134.518705][ T7292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.391'. [ 134.632661][ T7295] FAULT_INJECTION: forcing a failure. [ 134.632661][ T7295] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 134.639550][ T7295] CPU: 3 UID: 0 PID: 7295 Comm: syz.2.392 Not tainted syzkaller #0 PREEMPT(full) [ 134.639578][ T7295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.639588][ T7295] Call Trace: [ 134.639596][ T7295] [ 134.639604][ T7295] dump_stack_lvl+0x100/0x190 [ 134.639636][ T7295] should_fail_ex.cold+0x5/0xa [ 134.639661][ T7295] copy_folio_from_iter_atomic+0x5c8/0x2000 [ 134.639696][ T7295] ? find_held_lock+0x2b/0x80 [ 134.639720][ T7295] ? aa_file_perm+0x7e4/0x14d0 [ 134.639751][ T7295] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 134.639781][ T7295] ? shmem_write_begin+0x1ba/0x420 [ 134.639806][ T7295] ? __pfx_shmem_write_begin+0x10/0x10 [ 134.639827][ T7295] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 134.639857][ T7295] generic_perform_write+0x4cb/0xa40 [ 134.639896][ T7295] ? __pfx_generic_perform_write+0x10/0x10 [ 134.639929][ T7295] ? file_update_time_flags+0x373/0x500 [ 134.639959][ T7295] shmem_file_write_iter+0x10e/0x140 [ 134.639988][ T7295] vfs_write+0x6ac/0x1050 [ 134.640009][ T7295] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 134.640036][ T7295] ? __pfx_vfs_write+0x10/0x10 [ 134.640053][ T7295] ? find_held_lock+0x2b/0x80 [ 134.640094][ T7295] ksys_write+0x12a/0x250 [ 134.640113][ T7295] ? __pfx_ksys_write+0x10/0x10 [ 134.640131][ T7295] ? ksys_write+0x1ac/0x250 [ 134.640149][ T7295] ? __pfx_ksys_write+0x10/0x10 [ 134.640173][ T7295] __do_fast_syscall_32+0xe7/0x970 [ 134.640202][ T7295] ? lockdep_hardirqs_on+0x78/0x100 [ 134.640237][ T7295] do_fast_syscall_32+0x32/0x70 [ 134.640264][ T7295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.640288][ T7295] RIP: 0023:0xf7fa7fec [ 134.640312][ T7295] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 134.640320][ T7295] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 134.640339][ T7295] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 134.640350][ T7295] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 134.640360][ T7295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.640371][ T7295] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 134.640381][ T7295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.640404][ T7295] [ 134.816283][ T7300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.394'. [ 135.218862][ T29] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 135.413194][ T29] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 135.420426][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 135.432615][ T29] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 135.436656][ T29] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 135.440352][ T29] usb 6-1: Product: syz [ 135.442357][ T29] usb 6-1: Manufacturer: syz [ 135.444686][ T29] usb 6-1: SerialNumber: syz [ 135.466999][ T29] usb 6-1: config 0 descriptor?? [ 135.554767][ T29] usb 6-1: selecting invalid altsetting 0 [ 135.832226][ T41] usb 6-1: USB disconnect, device number 7 [ 135.870439][ T7312] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 136.464408][ T7315] tipc: Enabling of bearer rejected, failed to enable media [ 136.642500][ T7315] CIFS: Attempting to mount //127.0.0.1/share [ 136.649231][ T7315] CIFS: VFS: Error connecting to socket. Aborting operation. [ 136.652390][ T7315] CIFS: VFS: cifs_mount failed w/return code = -4 [ 136.755372][ T7318] tipc: Enabling of bearer rejected, failed to enable media getty: ttyS0: read error: Resource temporarily unavailable [ 137.061191][ T7328] macsec0: entered promiscuous mode [ 137.353340][ T7326] infiniband syz0: set active [ 137.355813][ T7326] infiniband syz0: added bond_slave_1 [ 137.371917][ T7326] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 137.378235][ T7326] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 137.385401][ T7326] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 137.418001][ T7326] RDS/IB: syz0: added [ 137.420331][ T7326] smc: adding ib device syz0 with port count 1 [ 137.423222][ T7326] smc: ib device syz0 port 1 has no pnetid [ 137.528830][ T5648] net_ratelimit: 131 callbacks suppressed [ 137.528852][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.533700][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.796806][ T7318] CIFS: Attempting to mount //127.0.0.1/share [ 137.802200][ T7318] CIFS: VFS: Error connecting to socket. Aborting operation. [ 137.804621][ T7318] CIFS: VFS: cifs_mount failed w/return code = -4 [ 137.825148][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.829144][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.835108][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.841381][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.851633][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.855163][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.866925][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.873551][ T5649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.917311][ T7338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.403'. [ 137.971554][ T7340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.404'. [ 137.980616][ T7340] CIFS: Attempting to mount //127.0.0.1/share [ 138.035663][ T7341] CIFS: VFS: Invalid response size 0 for command 0 [ 138.038986][ T7340] CIFS: VFS: cifs_mount failed w/return code = -5 [ 138.039008][ T7342] veth0_macvtap: entered allmulticast mode [ 138.048173][ T7339] veth0_macvtap: left allmulticast mode [ 138.346281][ T7354] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 138.558449][ T5820] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 138.876185][ T7356] batadv_slave_1: entered promiscuous mode [ 138.884045][ T7356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.409'. [ 138.904566][ T7356] batadv_slave_1: left promiscuous mode [ 139.008379][ T7327] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 139.143603][ T7362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.412'. [ 139.238460][ T5820] usb 5-1: Using ep0 maxpacket: 8 [ 139.242835][ T5820] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.246814][ T5820] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.250998][ T5820] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.255052][ T5820] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.260359][ T5820] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.264896][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.379115][ T7369] ================================================================== [ 139.381708][ T7369] BUG: KASAN: invalid-free in f_uac2_opts_c_srate_store+0x1d4/0x260 [ 139.384235][ T7369] Free of addr ffff888071738a9f by task syz.3.414/7369 [ 139.386476][ T7369] [ 139.387657][ T7369] CPU: 0 UID: 0 PID: 7369 Comm: syz.3.414 Not tainted syzkaller #0 PREEMPT(full) [ 139.387675][ T7369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.387683][ T7369] Call Trace: [ 139.387689][ T7369] [ 139.387694][ T7369] dump_stack_lvl+0x100/0x190 [ 139.387711][ T7369] print_report+0x13d/0x4b0 [ 139.387731][ T7369] ? __virt_addr_valid+0x239/0x430 [ 139.387747][ T7369] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 139.387766][ T7369] kasan_report_invalid_free+0xb8/0x190 [ 139.387784][ T7369] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 139.387802][ T7369] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 139.387819][ T7369] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 139.387835][ T7369] check_slab_allocation+0xe1/0xf0 [ 139.387849][ T7369] ? f_uac2_opts_c_srate_store+0x1c0/0x260 [ 139.387866][ T7369] kfree+0x1b6/0x6c0 [ 139.387878][ T7369] ? __asan_memcpy+0x3c/0x60 [ 139.387890][ T7369] f_uac2_opts_c_srate_store+0x1d4/0x260 [ 139.387907][ T7369] ? __pfx_f_uac2_opts_c_srate_store+0x10/0x10 [ 139.387925][ T7369] ? configfs_write_iter+0x388/0x4e0 [ 139.387939][ T7369] configfs_write_iter+0x302/0x4e0 [ 139.387951][ T7369] vfs_write+0x6ac/0x1050 [ 139.387962][ T7369] ? __pfx_configfs_write_iter+0x10/0x10 [ 139.387974][ T7369] ? __pfx_vfs_write+0x10/0x10 [ 139.387983][ T7369] ? find_held_lock+0x2b/0x80 [ 139.388001][ T7369] ksys_write+0x12a/0x250 [ 139.388011][ T7369] ? __pfx_ksys_write+0x10/0x10 [ 139.388022][ T7369] __do_fast_syscall_32+0xe7/0x970 [ 139.388040][ T7369] do_fast_syscall_32+0x32/0x70 [ 139.388056][ T7369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.388070][ T7369] RIP: 0023:0xf7f35fec [ 139.388085][ T7369] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 139.388090][ T7369] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 139.388100][ T7369] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 139.388107][ T7369] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.388113][ T7369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.388119][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.388126][ T7369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.388137][ T7369] [ 139.388142][ T7369] [ 139.457792][ T7369] Allocated by task 7369: [ 139.459287][ T7369] kasan_save_stack+0x30/0x50 [ 139.460787][ T7369] kasan_save_track+0x14/0x30 [ 139.462246][ T7369] __kasan_kmalloc+0xaa/0xb0 [ 139.463721][ T7369] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 139.465754][ T7369] kstrdup+0x51/0xe0 [ 139.466997][ T7369] f_uac2_opts_c_srate_store+0x113/0x260 [ 139.469182][ T7369] configfs_write_iter+0x302/0x4e0 [ 139.470817][ T7369] vfs_write+0x6ac/0x1050 [ 139.472212][ T7369] ksys_write+0x12a/0x250 [ 139.473924][ T7369] __do_fast_syscall_32+0xe7/0x970 [ 139.475970][ T7369] do_fast_syscall_32+0x32/0x70 [ 139.477781][ T7369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.479861][ T7369] [ 139.480582][ T5820] usb 5-1: GET_CAPABILITIES returned 0 [ 139.480837][ T7369] The buggy address belongs to the object at ffff888071738a80 [ 139.480837][ T7369] which belongs to the cache kmalloc-64 of size 64 [ 139.482677][ T5820] usbtmc 5-1:16.0: can't read capabilities [ 139.486881][ T7369] The buggy address is located 31 bytes inside of [ 139.486881][ T7369] 36-byte region [ffff888071738a80, ffff888071738aa4) [ 139.486900][ T7369] [ 139.486903][ T7369] The buggy address belongs to the physical page: [ 139.486910][ T7369] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888071738d80 pfn:0x71738 [ 139.486924][ T7369] flags: 0x4fff00000000200(workingset|node=1|zone=1|lastcpupid=0x7ff) [ 139.501165][ T7369] page_type: f5(slab) [ 139.502477][ T7369] raw: 04fff00000000200 ffff88801bc428c0 ffffea0001429790 ffffea0001330ed0 [ 139.505151][ T7369] raw: ffff888071738d80 000000080020001f 00000000f5000000 0000000000000000 [ 139.507805][ T7369] page dumped because: kasan: bad access detected [ 139.509808][ T7369] page_owner tracks the page as allocated [ 139.511545][ T7369] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6308, tgid 6308 (udevd), ts 87217162085, free_ts 85835115166 [ 139.517511][ T7369] post_alloc_hook+0xfd/0x120 [ 139.518944][ T7369] get_page_from_freelist+0xf48/0x3530 [ 139.520642][ T7369] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 139.522525][ T7369] new_slab+0xa2/0x640 [ 139.523833][ T7369] refill_objects+0xe3/0x410 [ 139.525291][ T7369] __pcs_replace_empty_main+0x376/0x680 [ 139.526987][ T7369] __kmalloc_noprof+0x66d/0x820 [ 139.528502][ T7369] tomoyo_encode2+0xfb/0x3c0 [ 139.529964][ T7369] tomoyo_encode+0x29/0x50 [ 139.531375][ T7369] tomoyo_realpath_from_path+0x18c/0x690 [ 139.533162][ T7369] tomoyo_path_perm+0x276/0x460 [ 139.534708][ T7369] security_inode_getattr+0x116/0x280 [ 139.536405][ T7369] vfs_statx+0x11f/0x3f0 [ 139.537756][ T7369] vfs_fstatat+0x77/0xe0 [ 139.539096][ T7369] __do_sys_newfstatat+0x9d/0x120 [ 139.540680][ T7369] do_syscall_64+0x115/0x840 [ 139.542154][ T7369] page last free pid 5837 tgid 5837 stack trace: [ 139.544132][ T7369] __free_frozen_pages+0x79f/0x1090 [ 139.545786][ T7369] kasan_depopulate_vmalloc_pte+0x5d/0x80 [ 139.547564][ T7369] __apply_to_page_range+0xb1d/0x1520 [ 139.549244][ T7369] __kasan_release_vmalloc+0xd7/0xe0 [ 139.550915][ T7369] purge_vmap_node+0x210/0xb40 [ 139.552472][ T7369] __purge_vmap_area_lazy+0x90a/0xc00 [ 139.554121][ T7369] drain_vmap_area_work+0x27/0x40 [ 139.555680][ T7369] process_one_work+0xa23/0x1940 [ 139.557243][ T7369] worker_thread+0x5ef/0xe50 [ 139.558717][ T7369] kthread+0x370/0x450 [ 139.560012][ T7369] ret_from_fork+0x72b/0xd50 [ 139.561471][ T7369] ret_from_fork_asm+0x1a/0x30 [ 139.563036][ T7369] [ 139.563816][ T7369] Memory state around the buggy address: [ 139.565738][ T7369] ffff888071738980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 139.568239][ T7369] ffff888071738a00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 139.570718][ T7369] >ffff888071738a80: 00 00 00 00 04 fc fc fc fc fc fc fc fc fc fc fc [ 139.573170][ T7369] ^ [ 139.574722][ T7369] ffff888071738b00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 139.577217][ T7369] ffff888071738b80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 139.579661][ T7369] ================================================================== [ 139.599284][ T7369] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 139.602405][ T7369] CPU: 3 UID: 0 PID: 7369 Comm: syz.3.414 Not tainted syzkaller #0 PREEMPT(full) [ 139.605963][ T7369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.609905][ T7369] Call Trace: [ 139.611098][ T7369] [ 139.612141][ T7369] dump_stack_lvl+0x100/0x190 [ 139.614117][ T7369] vpanic+0x552/0x970 [ 139.615740][ T7369] ? __pfx_vpanic+0x10/0x10 [ 139.617320][ T7369] panic+0xd1/0xe0 [ 139.618534][ T7369] ? __pfx_panic+0x10/0x10 [ 139.620170][ T7369] ? preempt_schedule_common+0x42/0xc0 [ 139.622381][ T7369] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 139.624275][ T7369] check_panic_on_warn.cold+0x19/0x34 [ 139.626016][ T7369] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 139.628333][ T7369] end_report.part.0+0x3a/0x90 [ 139.630241][ T7369] kasan_report_invalid_free.cold+0xd/0x12 [ 139.632755][ T7369] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 139.635062][ T7369] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 139.637525][ T7369] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 139.640159][ T7369] check_slab_allocation+0xe1/0xf0 [ 139.642316][ T7369] ? f_uac2_opts_c_srate_store+0x1c0/0x260 [ 139.644697][ T7369] kfree+0x1b6/0x6c0 [ 139.646282][ T7369] ? __asan_memcpy+0x3c/0x60 [ 139.647905][ T7369] f_uac2_opts_c_srate_store+0x1d4/0x260 [ 139.649850][ T7369] ? __pfx_f_uac2_opts_c_srate_store+0x10/0x10 [ 139.652465][ T7369] ? configfs_write_iter+0x388/0x4e0 [ 139.654329][ T7369] configfs_write_iter+0x302/0x4e0 [ 139.655951][ T7369] vfs_write+0x6ac/0x1050 [ 139.657327][ T7369] ? __pfx_configfs_write_iter+0x10/0x10 [ 139.659173][ T7369] ? __pfx_vfs_write+0x10/0x10 [ 139.660817][ T7369] ? find_held_lock+0x2b/0x80 [ 139.662377][ T7369] ksys_write+0x12a/0x250 [ 139.663765][ T7369] ? __pfx_ksys_write+0x10/0x10 [ 139.665306][ T7369] __do_fast_syscall_32+0xe7/0x970 [ 139.666942][ T7369] do_fast_syscall_32+0x32/0x70 [ 139.668521][ T7369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.670604][ T7369] RIP: 0023:0xf7f35fec [ 139.671907][ T7369] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 139.674005][ T7369] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 139.676607][ T7369] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 139.679079][ T7369] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.681875][ T7369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.684613][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.687424][ T7369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.690740][ T7369] [ 139.693157][ T7369] Kernel Offset: disabled [ 139.695011][ T7369] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:36:30 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85a0deb0 RDI=ffffffff9b9e3520 RBP=ffffffff9b9e34e0 RSP=ffffc90008aa7540 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000036333754 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff373c6f6 R15=dffffc0000000000 RIP=ffffffff85a0ded7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bf3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c42c210 CR3=0000000070498000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000040000 RBX=ffff8880004d3130 RCX=0000000000000000 RDX=000000000005082d RSI=ffff8880004d3108 RDI=ffff88806ada2748 RBP=ffff8880004d2540 RSP=ffffc90004267330 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=000000000000082d R13=0000000000000002 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e55470 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f045e37b300 ffffffff 00c00000 GS =0000 ffff888096cf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000563a88f01000 CR3=0000000022185000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a6 0000001800000000 0000000000000000 0000000000000017 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20808008000d9003 7e9408000d88033a 0000077e0000001a 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0725dfdbfd0070bd 2503006c08048c03 000400048803a200 0000080804800304 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8002068003068002 0790030008000788 030fffffffff0207 8003000800060800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 200800060274ce0d 8002019ec8080004 000f980000000000 0000000000000001 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff e7080db803010800 0db0030a9808000d a0030c08000d9803 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030008000da80300 08000da003020800 0d98037808000788 03ebb835675f47bf ZMM25=0290e3120290e312 0290e3120290e312 0290e3120290e312 0290e3120290e312 0290e3120290e312 0290e3120290e312 0290e3120290e312 0290e3120290e312 ZMM26=5fa7ff095fa7ff09 5fa7ff095fa7ff09 5fa7ff095fa7ff09 5fa7ff095fa7ff09 5fa7ff095fa7ff09 5fa7ff095fa7ff09 5fa7ff095fa7ff09 5fa7ff095fa7ff09 ZMM27=2d7b5b8e2d7b5b8e 2d7b5b8e2d7b5b8e 2d7b5b8e2d7b5b8e 2d7b5b8e2d7b5b8e 2d7b5b8e2d7b5b8e 2d7b5b8e2d7b5b8e 2d7b5b8e2d7b5b8e 2d7b5b8e2d7b5b8e ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a0050000a0050000 a0050000a0050000 a0050000a0050000 a0050000a0050000 a0050000a0050000 a0050000a0050000 a0050000a0050000 a0050000a0050000 info registers vcpu 2 CPU#2 RAX=0000000080000000 RBX=00000000ff8f333c RCX=ffffffff81ac486f RDX=ffff888073bb8000 RSI=ffffffff81ac48ca RDI=ffff888073bb8000 RBP=ffffc900093a7f48 RSP=ffffc900093a7cd0 R8 =0000000000000006 R9 =00007ffffffff000 R10=00000000ff8f333c R11=0000000000000000 R12=ffff888073bb8000 R13=ffffc900093a7df0 R14=ffff888073bb8998 R15=00007ffffffff000 RIP=ffffffff8209c10f RFL=00040293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096df3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080006000 CR3=000000005f8fe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000026a50d RBX=ffff88801c7f2540 RCX=ffffffff8bb81335 RDX=0000000000000000 RSI=ffffffff8e1a2693 RDI=ffffffff8c3fe580 RBP=ffffed10038fe4a8 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bb7f8ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ef3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f721ea06 CR3=0000000065142000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000