last executing test programs: 9m59.758318784s ago: executing program 0 (id=451): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000260b0a0002000180c200000c00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26000411}, 0x800) 9m59.711155715s ago: executing program 0 (id=454): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 9m59.708847819s ago: executing program 0 (id=455): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept4(r0, 0x0, 0x0, 0x0) 9m59.488033034s ago: executing program 0 (id=464): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) creat(&(0x7f00000000c0)='./file0\x00', 0x4) 9m59.392636775s ago: executing program 0 (id=458): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2100, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)="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", 0x4b3}], 0x1}}], 0x1, 0x11) 9m59.097823514s ago: executing program 0 (id=468): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 9m59.066363021s ago: executing program 32 (id=468): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 8m22.621429726s ago: executing program 4 (id=2170): socket(0xa, 0x3, 0x3a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x400000a, 0x54032, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xc0, &(0x7f0000000000)=0x3, 0x0, 0x4) 8m21.736733855s ago: executing program 4 (id=2177): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 8m21.548910984s ago: executing program 4 (id=2186): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000280)=0x40, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000002c0)=0x30) 8m21.427863189s ago: executing program 4 (id=2191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 8m21.347892189s ago: executing program 4 (id=2193): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 8m20.624235031s ago: executing program 3 (id=2198): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) 8m20.595318461s ago: executing program 3 (id=2209): socket(0xa, 0x3, 0x3a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x400000a, 0x54032, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xc0, &(0x7f0000000000)=0x3, 0x0, 0x4) 8m20.494073428s ago: executing program 4 (id=2203): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) openat$cgroup_ro(r2, &(0x7f00000003c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) 8m19.715085725s ago: executing program 3 (id=2208): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) 8m19.668647887s ago: executing program 3 (id=2212): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 8m19.475764s ago: executing program 3 (id=2214): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 8m5.256954364s ago: executing program 33 (id=2203): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) openat$cgroup_ro(r2, &(0x7f00000003c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) 8m5.231207155s ago: executing program 3 (id=2220): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3d5) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f00000003c0)='./cgroup\x00') link(&(0x7f0000000240)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 7m50.229077749s ago: executing program 34 (id=2220): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3d5) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f00000003c0)='./cgroup\x00') link(&(0x7f0000000240)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 4.571928212s ago: executing program 2 (id=5840): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@random="aefc3a13cc28", @random, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp={0x44, 0x4, 0x5, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) r2 = socket$netlink(0x10, 0x3, 0x10) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), 0xffffffffffffffff) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000001c0)={0xfffffff7, 0xffff, 0x15493eef, 0x5, 0x0, "62077c318703f64494959affbb411cf0dce0b9", 0x80000000, 0x80}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x3f00, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0xe9) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, 0x0, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) sendmsg$inet6(r0, &(0x7f0000002c00)={&(0x7f0000000040)={0xa, 0x4e21, 0x5, @remote, 0xfffffffb}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000000)="85", 0x1}], 0x1}, 0x200008c4) 4.245206208s ago: executing program 2 (id=5841): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8) 3.789463015s ago: executing program 5 (id=5849): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='wchan\x00') r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) fsopen(&(0x7f0000000040)='exfat\x00', 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) syz_usbip_server_init(0x3) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) pread64(r0, &(0x7f0000000480)=""/209, 0xd1, 0x170ac66a) 3.195532844s ago: executing program 2 (id=5851): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='wchan\x00') r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) fsopen(&(0x7f0000000040)='exfat\x00', 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) syz_usbip_server_init(0x3) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) pread64(r0, &(0x7f0000000480)=""/209, 0xd1, 0x170ac66a) 3.195281474s ago: executing program 6 (id=5852): mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffff) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) unlink(&(0x7f00000003c0)='./file0\x00') prlimit64(0x0, 0x8, &(0x7f0000000300)={0x2}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace(0x4207, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_SET_SOCK(r2, 0xab08, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000009c40)=ANY=[@ANYBLOB="04140003c9"], 0x17) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2141980, 0x0, 0x0, 0x0, 0x0, 0x0) 3.18309751s ago: executing program 5 (id=5858): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x0, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000480)='incremental-fs\x00', 0x1) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) 2.961289405s ago: executing program 6 (id=5853): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@random="aefc3a13cc28", @random, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp={0x44, 0x4, 0x5, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) r2 = socket$netlink(0x10, 0x3, 0x10) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), 0xffffffffffffffff) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000001c0)={0xfffffff7, 0xffff, 0x15493eef, 0x5, 0x0, "62077c318703f64494959affbb411cf0dce0b9", 0x80000000, 0x80}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x3f00, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0xe9) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, 0x0, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) sendmsg$inet6(r0, &(0x7f0000002c00)={&(0x7f0000000040)={0xa, 0x4e21, 0x5, @remote, 0xfffffffb}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000000)="85", 0x1}], 0x1}, 0x200008c4) 2.635453426s ago: executing program 2 (id=5854): bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) syz_emit_ethernet(0x8a, &(0x7f0000000300)={@random="195df410dc24", @random="000600", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "aac4e0", 0x54, 0x2c, 0x0, @dev, @local, {[@routing={0x2b}, @routing={0x4, 0x0, 0x2, 0x6}], {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xff}}}}}}}}}, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.444512581s ago: executing program 6 (id=5855): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) rt_sigsuspend(&(0x7f00000000c0)={[0x5]}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_newvlan={0x17, 0x70, 0x1}, 0x18}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e19, 0xffffffff, @private1, 0xe}, 0x1c) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) ftruncate(r4, 0x7fffffff) sendto(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)=@nfc_llcp={0x27, 0x0, 0x0, 0x5, 0x8, 0x1, "1de1c362e40e45862096f6ff833fcafb18147d2e3cd81d1ad9ecbe24491ae1c94c2327452ddc21dddf7a069e45949beb4ad9c9543ad2759d129d12fe879a04", 0x13}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000740)) 2.286927927s ago: executing program 5 (id=5856): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r4, r3, 0x0, 0x8010002b) 2.158504572s ago: executing program 1 (id=5857): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x5c}}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x52, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd604dd308001c0600fc010000000800", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70020100907800"], 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.618060082s ago: executing program 6 (id=5859): mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) capset(&(0x7f0000000ac0)={0x19980330}, &(0x7f0000000180)={0x0, 0x10000, 0xc898, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 1.615674033s ago: executing program 2 (id=5867): bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) syz_emit_ethernet(0x8a, &(0x7f0000000300)={@random="195df410dc24", @random="000600", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "aac4e0", 0x54, 0x2c, 0x0, @dev, @local, {[@routing={0x2b}, @routing={0x4, 0x0, 0x2, 0x6}], {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xff}}}}}}}}}, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.380612608s ago: executing program 5 (id=5860): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0xd023}) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a050400000000000000000200000088000480340001800c0001007061796c6f6164002400028008000340000000000800024000000000080001400000001008000440000000022c0001800e000100696d6d6564696174650000001800028008000140000000140c000280050001002d00000024000180090001006d6574610000000014000280080001400000001408000240000000db0900010073797a30000000000900020073797a32"], 0xdc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.183305413s ago: executing program 5 (id=5861): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x400, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 1.18313993s ago: executing program 1 (id=5862): creat(&(0x7f00000001c0)='./file1\x00', 0x2) socket(0x80000000000000a, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socket$kcm(0x10, 0x3, 0x10) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c051) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x1, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x100, 0x3, 0x41}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) 1.162432994s ago: executing program 1 (id=5863): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x24) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) close(0x3) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x10, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}]}}]}]}]}}]}, 0x68}}, 0x20040054) 1.044859251s ago: executing program 1 (id=5864): socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x9}}, 0x20) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0xff, 0x9, 0x19, 0xa, 0xffffffffffffff01, 0xb, 0x7, 0x3}, &(0x7f00000000c0)={0x757, 0x7f, 0x7, 0xfff, 0x8876, 0xa, 0x3, 0x1}, &(0x7f0000000100)={0x9, 0x77, 0xbdb, 0x0, 0x8, 0x4, 0x5, 0x1}, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r5, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 468.118717ms ago: executing program 1 (id=5865): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@random="aefc3a13cc28", @random, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp={0x44, 0x4, 0x5, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) r2 = socket$netlink(0x10, 0x3, 0x10) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), 0xffffffffffffffff) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000001c0)={0xfffffff7, 0xffff, 0x15493eef, 0x5, 0x0, "62077c318703f64494959affbb411cf0dce0b9", 0x80000000, 0x80}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x3f00, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0xe9) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, 0x0, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) sendmsg$inet6(r0, &(0x7f0000002c00)={&(0x7f0000000040)={0xa, 0x4e21, 0x5, @remote, 0xfffffffb}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000000)="85", 0x1}], 0x1}, 0x200008c4) 467.865152ms ago: executing program 6 (id=5866): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) r4 = dup(r3) r5 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, 0x0}, 0x8010) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 427.271996ms ago: executing program 2 (id=5868): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 263.830252ms ago: executing program 5 (id=5869): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0xc, 0xffffffffffffffff, {0xffffffff}}, './file0\x00'}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x3) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000640), &(0x7f0000000680)=0x4) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7ffd}, @broadcast, @device_a, @random="8ae7f1d6e4c2", {0x5, 0xddb}, @value=@ver_80211n={0x0, 0xe6e, 0x3, 0x0, 0x0, 0x1, 0x1}}, @void, @val={0x1, 0x2, [{0x1b}, {0x6, 0x1}]}, @void, @val={0x2d, 0x1a, {0x800, 0x3, 0x1, 0x0, {0x8, 0x40, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x3, 0x7}}, @void, [{0xdd, 0x57, "533fa12108a4d6e7b7691de88085778e64170bbe6eab52a43a684b5280c9b93ca34f0c8c37d205141346e3e5d7e5a6495383f7cce52ea01f39502f0309a5e6d7f0c3bce1c0c4336c1cfaf717192ab9db7d9d7bdfc2a560"}, {0xdd, 0x6, "3efa2e0d7745"}, {0xdd, 0x6, "58171bb65ac1"}, {0xdd, 0xf, "eaeccb120fe691cedab71fdebdd3ca"}, {0xdd, 0x27, "aa957c2f49b30db0cc6aaa57687407f0a45ddb8c4b36c51619ce439197d44e48290650d4b461e5"}, {0xdd, 0x42, "cc7793f5a001c73bb64270f18f5046a768b5605d9cff0fad54ca135f2ddb3e29496c07bd346a4df3ec8b3ef7293099de002214f15db94806464ef93f1da0b4085d12"}, {0xdd, 0xe0, "0cfc32d7770fcf5636ecc7e765b49f9249aa5e93efe7687d19f7f2e786c4d81c88d8cf2c8e256af80a9b45a4af77b5cee058de95ca24c118921c0599438c301f1021165dd07de52479151abbaf68d170e63d4586bb2173c8dac4698be3d28d9264c1e61d8b75b3207a6cec4180d822ab2ffcde900d6b53d33294084765ed4174bea5aaaa95f0057c2e4805b2d90b1466f98fd8465ab2ba8b73908e37e0da2b3cee52241b25023ccdaa8efeca314ac030dd7d942127d3726b6c865c8cb26ac5d75b190c8ae122ba53cf61578febcbd397c2096c129efada0f77d1cc1ef7197868"}]}, 0x205) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) 97.89533ms ago: executing program 1 (id=5870): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8) 0s ago: executing program 6 (id=5871): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x5c}}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x52, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd604dd308001c0600fc010000000800", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70020100907800"], 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) kernel console output (not intermixed with test programs): [ 357.472786][ T59] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 357.483061][ T61] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 359.592708][T13746] net_ratelimit: 35 callbacks suppressed [ 359.592721][T13746] bond7: (slave macvlan2): failed to get link speed/duplex [ 359.702767][ T1253] bond7: (slave macvlan2): failed to get link speed/duplex [ 359.813909][ T1253] bond7: (slave macvlan2): failed to get link speed/duplex [ 359.922923][T15273] bond7: (slave macvlan2): failed to get link speed/duplex [ 360.032847][ T1253] bond7: (slave macvlan2): failed to get link speed/duplex [ 360.152759][T13746] bond7: (slave macvlan2): failed to get link speed/duplex [ 360.263148][T13746] bond7: (slave macvlan2): failed to get link speed/duplex [ 360.373688][ T60] bond7: (slave macvlan2): failed to get link speed/duplex [ 360.482749][T13746] bond7: (slave macvlan2): failed to get link speed/duplex [ 360.593352][ T60] bond7: (slave macvlan2): failed to get link speed/duplex [ 360.686148][T16758] netlink: 'syz.2.3992': attribute type 10 has an invalid length. [ 361.349847][T16789] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4001'. [ 361.371222][ T40] audit: type=1800 audit(1755482995.417:335): pid=16795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4003" name="file1" dev="tmpfs" ino=5788 res=0 errno=0 [ 361.422763][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 362.541583][T16829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4016'. [ 364.653146][T15286] net_ratelimit: 34 callbacks suppressed [ 364.653160][T15286] bond7: (slave macvlan2): failed to get link speed/duplex [ 364.763477][T13746] bond7: (slave macvlan2): failed to get link speed/duplex [ 364.872952][T15286] bond7: (slave macvlan2): failed to get link speed/duplex [ 364.992761][T13746] bond7: (slave macvlan2): failed to get link speed/duplex [ 365.103499][T15286] bond7: (slave macvlan2): failed to get link speed/duplex [ 365.223229][T15286] bond7: (slave macvlan2): failed to get link speed/duplex [ 365.336025][T15308] bond7: (slave macvlan2): failed to get link speed/duplex [ 365.442817][T13746] bond7: (slave macvlan2): failed to get link speed/duplex [ 365.483028][ T61] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 365.552769][T15273] bond7: (slave macvlan2): failed to get link speed/duplex [ 365.634237][ T61] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.637911][ T61] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.641140][ T61] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 365.646555][ T61] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 365.649501][ T61] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.661140][ T61] usb 11-1: config 0 descriptor?? [ 365.663466][T13746] bond7: (slave macvlan2): failed to get link speed/duplex [ 366.077209][ T61] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 366.131644][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4033'. [ 366.166866][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4033'. [ 366.429204][ T61] usb 11-1: USB disconnect, device number 3 [ 366.879215][T16917] gtp0: entered promiscuous mode [ 367.718170][ T40] audit: type=1326 audit(1755483001.767:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16929 comm="syz.1.4052" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x0 [ 368.615346][T16944] lo speed is unknown, defaulting to 1000 [ 368.618076][T16944] lo speed is unknown, defaulting to 1000 [ 368.621208][T16944] lo speed is unknown, defaulting to 1000 [ 368.629417][T16944] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 368.653542][T16944] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 368.668380][T16944] lo speed is unknown, defaulting to 1000 [ 368.671096][T16944] lo speed is unknown, defaulting to 1000 [ 368.674249][T16944] lo speed is unknown, defaulting to 1000 [ 368.676844][T16944] lo speed is unknown, defaulting to 1000 [ 369.693014][T15273] net_ratelimit: 34 callbacks suppressed [ 369.693028][T15273] bond7: (slave macvlan2): failed to get link speed/duplex [ 369.814963][T15308] bond7: (slave macvlan2): failed to get link speed/duplex [ 369.932772][T15273] bond7: (slave macvlan2): failed to get link speed/duplex [ 370.023791][T16968] kvm: pic: non byte write [ 370.025563][T16968] kvm: pic: non byte write [ 370.033513][T16968] kvm: pic: non byte write [ 370.035228][T16968] kvm: pic: non byte write [ 370.038151][T16968] kvm: pic: non byte write [ 370.039930][T16968] kvm: pic: non byte write [ 370.042827][T15286] bond7: (slave macvlan2): failed to get link speed/duplex [ 370.043214][T16968] kvm: pic: non byte write [ 370.047937][T16968] kvm: pic: non byte write [ 370.050007][T16968] kvm: pic: single mode not supported [ 370.152860][T15286] bond7: (slave macvlan2): failed to get link speed/duplex [ 370.208282][ T40] audit: type=1326 audit(1755483004.257:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16978 comm="syz.5.4060" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x0 [ 370.263190][ T60] bond7: (slave macvlan2): failed to get link speed/duplex [ 370.330474][T16977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4059'. [ 370.373085][T15308] bond7: (slave macvlan2): failed to get link speed/duplex [ 370.492976][ T60] bond7: (slave macvlan2): failed to get link speed/duplex [ 370.603068][T15273] bond7: (slave macvlan2): failed to get link speed/duplex [ 370.713994][T15273] bond7: (slave macvlan2): failed to get link speed/duplex [ 371.012770][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.723088][T15308] net_ratelimit: 34 callbacks suppressed [ 374.723102][T15308] bond7: (slave macvlan2): failed to get link speed/duplex [ 374.832830][ T60] bond7: (slave macvlan2): failed to get link speed/duplex [ 374.936941][T17059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4079'. [ 374.973722][ T1140] bond7: (slave macvlan2): failed to get link speed/duplex [ 375.083020][ T60] bond7: (slave macvlan2): failed to get link speed/duplex [ 375.192762][ T60] bond7: (slave macvlan2): failed to get link speed/duplex [ 375.302769][T15308] bond7: (slave macvlan2): failed to get link speed/duplex [ 375.397075][T17072] bond10: entered allmulticast mode [ 375.398964][T17072] 8021q: adding VLAN 0 to HW filter on device bond10 [ 375.412900][ T60] bond7: (slave macvlan2): failed to get link speed/duplex [ 375.517563][T17084] xfrm0: entered promiscuous mode [ 375.519707][T17084] xfrm0: entered allmulticast mode [ 375.543724][T13746] bond7: (slave macvlan2): failed to get link speed/duplex [ 375.687018][T13746] bond7: (slave macvlan2): failed to get link speed/duplex [ 375.793452][T13746] bond7: (slave macvlan2): failed to get link speed/duplex [ 377.842266][T17131] xfrm0: entered promiscuous mode [ 377.845279][T17131] xfrm0: entered allmulticast mode [ 378.056701][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.060057][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.478105][T17141] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 378.631937][T17152] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4107'. [ 378.713421][T17159] bond4: entered allmulticast mode [ 378.715203][T17159] 8021q: adding VLAN 0 to HW filter on device bond4 [ 379.433274][T17178] netlink: 'syz.1.4116': attribute type 1 has an invalid length. [ 379.459466][T17178] 8021q: adding VLAN 0 to HW filter on device bond6 [ 379.478265][T17178] vlan0: entered allmulticast mode [ 379.479971][T17178] veth1: entered allmulticast mode [ 379.482380][T17178] bond6: (slave vlan0): Opening slave failed [ 379.598268][T17183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4118'. [ 379.733376][ T1140] net_ratelimit: 31 callbacks suppressed [ 379.733389][ T1140] bond7: (slave macvlan2): failed to get link speed/duplex [ 379.842792][ T1140] bond7: (slave macvlan2): failed to get link speed/duplex [ 379.952809][T15273] bond7: (slave macvlan2): failed to get link speed/duplex [ 380.062823][ T1253] bond7: (slave macvlan2): failed to get link speed/duplex [ 380.103723][ T40] audit: type=1326 audit(1755483014.157:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17200 comm="syz.1.4125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7fc00000 [ 380.172990][T15286] bond7: (slave macvlan2): failed to get link speed/duplex [ 380.282774][T15286] bond7: (slave macvlan2): failed to get link speed/duplex [ 380.321001][T17207] netlink: 'syz.5.4127': attribute type 1 has an invalid length. [ 380.334992][T17207] 8021q: adding VLAN 0 to HW filter on device bond5 [ 380.352810][T17207] vlan4: entered allmulticast mode [ 380.354653][T17207] veth1: entered allmulticast mode [ 380.357014][T17207] bond5: (slave vlan4): Opening slave failed [ 380.392708][T15273] bond7: (slave macvlan2): failed to get link speed/duplex [ 380.512795][ T1253] bond7: (slave macvlan2): failed to get link speed/duplex [ 380.624096][ T1253] bond7: (slave macvlan2): failed to get link speed/duplex [ 380.732843][T15273] bond7: (slave macvlan2): failed to get link speed/duplex [ 380.830206][ T40] audit: type=1326 audit(1755483014.877:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.2.4137" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ee579 code=0x0 [ 380.837569][ T40] audit: type=1326 audit(1755483014.877:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17200 comm="syz.1.4125" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f48579 code=0x7fc00000 [ 380.850645][ T40] audit: type=1804 audit(1755483014.897:341): pid=17219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4129" name="/newroot/276/file1" dev="fuse" ino=1 res=1 errno=0 [ 380.857735][ T40] audit: type=1800 audit(1755483014.907:342): pid=17219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4129" name="/" dev="fuse" ino=1 res=0 errno=0 [ 380.896393][T17226] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4139'. [ 381.989243][T17255] batadv0: Device is already in use. [ 382.039339][T17261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4145'. [ 382.616807][T17276] netlink: 'syz.6.4149': attribute type 1 has an invalid length. [ 382.644119][T17276] 8021q: adding VLAN 0 to HW filter on device bond4 [ 382.664604][T17276] vlan2: entered allmulticast mode [ 382.666315][T17276] veth1: entered allmulticast mode [ 382.668633][T17276] bond4: (slave vlan2): Opening slave failed [ 382.673107][T17281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4151'. [ 382.694533][T17281] sch_tbf: burst 88 is lower than device veth29 mtu (1514) ! [ 382.759458][T17287] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 382.762066][T17287] overlayfs: failed to set xattr on upper [ 382.764252][T17287] overlayfs: ...falling back to redirect_dir=nofollow. [ 382.766570][T17287] overlayfs: ...falling back to index=off. [ 382.768436][T17287] overlayfs: ...falling back to uuid=null. [ 384.783111][T15286] net_ratelimit: 35 callbacks suppressed [ 384.783124][T15286] bond7: (slave macvlan2): failed to get link speed/duplex [ 384.892751][T15823] bond7: (slave macvlan2): failed to get link speed/duplex [ 385.002754][T15286] bond7: (slave macvlan2): failed to get link speed/duplex [ 385.112827][T15286] bond7: (slave macvlan2): failed to get link speed/duplex [ 385.223060][ T1140] bond7: (slave macvlan2): failed to get link speed/duplex [ 385.332782][ T1140] bond7: (slave macvlan2): failed to get link speed/duplex [ 385.442857][T15823] bond7: (slave macvlan2): failed to get link speed/duplex [ 385.562851][T15273] bond7: (slave macvlan2): failed to get link speed/duplex [ 385.672884][T15823] bond7: (slave macvlan2): failed to get link speed/duplex [ 385.782742][T15823] bond7: (slave macvlan2): failed to get link speed/duplex [ 386.922092][T17327] overlayfs: failed to clone upperpath [ 386.973952][T17332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4173'. [ 387.005150][T17332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4173'. [ 387.007975][T17332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4173'. [ 387.058942][T17344] netlink: 'syz.1.4178': attribute type 16 has an invalid length. [ 387.061402][T17344] netlink: 'syz.1.4178': attribute type 17 has an invalid length. [ 387.076911][T17344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.079756][T17344] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.103654][ T7580] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 387.141399][T17350] gfs2: gfs2 mount does not exist [ 387.255286][T17357] netlink: 'syz.2.4190': attribute type 16 has an invalid length. [ 387.257847][T17357] netlink: 'syz.2.4190': attribute type 17 has an invalid length. [ 387.274156][T15823] bond0: (slave bond_slave_0): interface is now down [ 387.274311][T17357] batadv0: entered promiscuous mode [ 387.277358][T15823] bond0: (slave bond_slave_1): interface is now down [ 387.279685][T17357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.281786][T15823] bond0: (slave batadv0): interface is now down [ 387.285628][T17357] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.302747][T15317] bond0: (slave bond_slave_0): interface is now down [ 387.304905][T15317] bond0: (slave bond_slave_1): interface is now down [ 387.307091][T15317] bond0: (slave batadv0): interface is now down [ 387.312078][T15317] bond0: now running without any active interface! [ 387.354675][T15317] bond7: (slave macvlan2): link status definitely down, disabling slave [ 387.449124][T17375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4188'. [ 387.470209][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4188'. [ 387.473022][T17375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4188'. [ 387.606159][T17386] overlayfs: failed to clone upperpath [ 387.640298][T17388] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 387.842973][T17394] netlink: 'syz.5.4196': attribute type 16 has an invalid length. [ 387.845530][T17394] netlink: 'syz.5.4196': attribute type 17 has an invalid length. [ 387.859308][T17394] syz_tun: left promiscuous mode [ 387.863809][T17394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.866675][T17394] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.869586][T17394] tipc: Resetting bearer [ 387.871385][T17394] tipc: Resetting bearer [ 387.893066][ T59] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 387.936234][T17398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4198'. [ 387.956989][T17398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4198'. [ 388.035200][T15286] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 388.053058][ T7580] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 388.062874][ T59] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 388.167993][T17402] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4200'. [ 388.244204][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 388.693431][ T1140] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 388.884199][T17412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4203'. [ 389.094167][ T1253] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 389.097704][ T1253] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 389.572722][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.733733][T15273] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 389.821057][T17442] gfs2: gfs2 mount does not exist [ 390.074172][T17469] overlayfs: failed to clone upperpath [ 391.681522][T17509] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 391.684576][ T1140] netdevsim netdevsim6 : set [0, 0] type 1 family 0 port 8472 - 0 [ 391.687090][ T1140] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.689970][ T1140] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.692942][ T1140] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.834020][T17520] lo speed is unknown, defaulting to 1000 [ 391.835899][T17520] lo speed is unknown, defaulting to 1000 [ 391.838038][T17520] lo speed is unknown, defaulting to 1000 [ 391.860075][T17520] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 391.862787][T17522] overlayfs: failed to clone upperpath [ 391.875157][T17520] lo speed is unknown, defaulting to 1000 [ 391.877679][T17520] lo speed is unknown, defaulting to 1000 [ 391.881065][T17520] lo speed is unknown, defaulting to 1000 [ 391.884095][T17520] lo speed is unknown, defaulting to 1000 [ 392.954292][T17562] tipc: Enabling of bearer rejected, failed to enable media [ 393.064745][T17554] __nla_validate_parse: 1 callbacks suppressed [ 393.064758][T17554] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4235'. [ 393.252819][ C3] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 393.252837][ C3] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 393.330947][ T63] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 393.386975][T17582] overlayfs: failed to clone upperpath [ 393.426161][T17585] siw: device registration error -23 [ 394.052783][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 394.286732][T17598] netlink: 'syz.2.4248': attribute type 1 has an invalid length. [ 394.314053][T17598] 8021q: adding VLAN 0 to HW filter on device bond11 [ 394.373758][T17598] 8021q: adding VLAN 0 to HW filter on device bond11 [ 394.376091][T17598] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 394.380084][T17598] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 394.396215][T17600] bond12: entered promiscuous mode [ 394.400280][T17600] 8021q: adding VLAN 0 to HW filter on device bond12 [ 394.403939][T17600] bond11: (slave bond12): Enslaving as an active interface with a down link [ 394.412302][T17600] macvlan3: entered promiscuous mode [ 394.414307][T17600] macvlan3: entered allmulticast mode [ 394.416305][T17600] bond11: entered promiscuous mode [ 394.418293][T17600] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 394.421747][T17600] bond11: left promiscuous mode [ 394.668055][T17603] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4249'. [ 394.887123][T17615] overlayfs: failed to clone upperpath [ 394.924460][T17617] lo speed is unknown, defaulting to 1000 [ 394.927546][T17619] netlink: 'syz.1.4255': attribute type 16 has an invalid length. [ 394.930128][T17619] netlink: 'syz.1.4255': attribute type 17 has an invalid length. [ 394.947841][T17619] net_ratelimit: 17 callbacks suppressed [ 394.947847][T17619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 394.986262][ T34] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 395.892981][ T34] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 396.732218][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 397.746162][T17687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4278'. [ 397.839245][T17698] netlink: 'syz.1.4282': attribute type 1 has an invalid length. [ 397.850519][T17698] 8021q: adding VLAN 0 to HW filter on device bond7 [ 397.870006][T17698] bond7: (slave geneve2): making interface the new active one [ 397.873904][T17698] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 397.906362][T17698] bond7: entered promiscuous mode [ 397.909664][T17698] geneve2: entered promiscuous mode [ 398.066841][ T60] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.069471][ T60] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.071997][ T60] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.074881][ T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.868439][T17727] MPI: mpi too large (124808 bits) [ 398.904942][T17729] bridge21: entered promiscuous mode [ 398.906688][T17729] bridge21: entered allmulticast mode [ 400.474886][T17778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4302'. [ 400.495970][T17778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4302'. [ 401.517798][T17799] tipc: Cannot configure node identity twice [ 402.382799][ C3] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 402.672866][ T59] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 402.822891][ T59] usb 11-1: Using ep0 maxpacket: 16 [ 402.879701][T17815] bond0: (slave syz_tun): Releasing backup interface [ 402.881717][T17815] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 402.943254][ T59] usb 11-1: unable to get BOS descriptor or descriptor too short [ 402.946469][ T59] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 402.948919][ T59] usb 11-1: can't read configurations, error -71 [ 403.022716][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 403.047646][T17849] wireguard0: entered promiscuous mode [ 403.049878][T17849] wireguard0: entered allmulticast mode [ 403.699047][T17862] netlink: 552 bytes leftover after parsing attributes in process `syz.5.4331'. [ 403.702001][T17862] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4331'. [ 403.718309][ T40] audit: type=1804 audit(1755483037.767:343): pid=17866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4330" name="file0" dev="ramfs" ino=57341 res=1 errno=0 [ 403.848827][T17870] dvmrp1: entered allmulticast mode [ 404.693185][ T5984] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 405.124806][ T63] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 405.130402][T17886] overlayfs: failed to clone upperpath [ 405.815514][T17912] netlink: 'syz.6.4342': attribute type 1 has an invalid length. [ 405.826349][T17912] 8021q: adding VLAN 0 to HW filter on device bond5 [ 405.851825][T17918] lo speed is unknown, defaulting to 1000 [ 405.859942][T17912] bond5: (slave geneve2): making interface the new active one [ 405.863227][T17912] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 405.874062][T15823] netdevsim netdevsim6 : set [1, 0] type 2 family 0 port 6081 - 0 [ 405.876587][T15823] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.886186][T17912] bond5: entered promiscuous mode [ 405.887752][T17912] geneve2: entered promiscuous mode [ 405.890278][T15823] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.902748][T15823] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.926472][T17920] lo speed is unknown, defaulting to 1000 [ 414.972059][T17955] netlink: 552 bytes leftover after parsing attributes in process `syz.6.4352'. [ 414.975095][T17955] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4352'. [ 415.057900][T17957] overlayfs: failed to clone upperpath [ 415.275647][T17972] netlink: 'syz.2.4357': attribute type 1 has an invalid length. [ 415.288604][T17972] 8021q: adding VLAN 0 to HW filter on device bond13 [ 415.315708][T17972] bond13: (slave geneve2): making interface the new active one [ 415.318722][T17972] bond13: (slave geneve2): Enslaving as an active interface with an up link [ 415.321491][T15823] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.326286][T15823] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.328854][T15823] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.331376][T15823] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.336588][T17972] bond13: entered promiscuous mode [ 415.338340][T17972] geneve2: entered promiscuous mode [ 415.656706][T18002] macsec0: entered promiscuous mode [ 416.236385][T18012] overlayfs: failed to clone upperpath [ 416.581322][T18020] netlink: 'syz.5.4374': attribute type 1 has an invalid length. [ 416.588267][T18021] dvmrp1: entered allmulticast mode [ 416.603265][T18020] 8021q: adding VLAN 0 to HW filter on device bond6 [ 416.624072][T18020] 8021q: adding VLAN 0 to HW filter on device bond6 [ 416.626428][T18020] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 416.630312][T18020] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 416.679624][T18030] bond7: entered promiscuous mode [ 416.682946][T18030] 8021q: adding VLAN 0 to HW filter on device bond7 [ 416.686240][T18030] bond6: (slave bond7): Enslaving as an active interface with a down link [ 416.724719][T18020] macvlan3: entered promiscuous mode [ 416.727350][T18020] macvlan3: entered allmulticast mode [ 416.729869][T18020] bond6: entered promiscuous mode [ 416.732421][T18020] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 416.736901][T18020] bond6: left promiscuous mode [ 416.866953][T18034] lo speed is unknown, defaulting to 1000 [ 417.728733][T18066] netlink: 'syz.1.4377': attribute type 10 has an invalid length. [ 418.491583][ T40] audit: type=1804 audit(1755483052.537:344): pid=18085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4382" name="file0" dev="ramfs" ino=60732 res=1 errno=0 [ 418.527946][T18087] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4383'. [ 418.538402][T18087] dummy0: entered promiscuous mode [ 418.543761][T18087] dummy0: left promiscuous mode [ 418.656702][T18089] lo speed is unknown, defaulting to 1000 [ 419.662729][ C3] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 419.901706][T18116] bridge8: entered promiscuous mode [ 419.903577][T18116] bridge8: entered allmulticast mode [ 420.678185][ T40] audit: type=1804 audit(1755483054.727:345): pid=18135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4395" name="file0" dev="ramfs" ino=61595 res=1 errno=0 [ 421.214107][T18141] netlink: 552 bytes leftover after parsing attributes in process `syz.2.4406'. [ 421.217009][T18141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4406'. [ 421.374213][T18149] netlink: 'syz.2.4400': attribute type 1 has an invalid length. [ 421.387426][T18149] 8021q: adding VLAN 0 to HW filter on device bond14 [ 421.400092][T18149] 8021q: adding VLAN 0 to HW filter on device bond14 [ 421.402535][T18149] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address [ 421.408170][T18149] bond14: (slave vxcan1): Error -95 calling set_mac_address [ 421.480263][T18151] veth45: entered promiscuous mode [ 421.484467][T18151] bond14: (slave veth45): Enslaving as an active interface with a down link [ 421.510577][T18149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4400'. [ 421.514345][T18149] 8021q: adding VLAN 0 to HW filter on device bond14 [ 421.572720][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 421.645661][T18166] macsec0: entered promiscuous mode [ 422.856388][T18190] netlink: 'syz.1.4412': attribute type 1 has an invalid length. [ 422.884085][T18190] 8021q: adding VLAN 0 to HW filter on device bond8 [ 422.919553][T18190] 8021q: adding VLAN 0 to HW filter on device bond8 [ 422.922564][T18190] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 422.928537][T18190] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 422.964962][T18195] bond9: entered promiscuous mode [ 422.970278][T18195] 8021q: adding VLAN 0 to HW filter on device bond9 [ 422.974891][T18195] bond8: (slave bond9): Enslaving as an active interface with a down link [ 422.999258][T18195] macvlan0: entered promiscuous mode [ 423.001378][T18195] macvlan0: entered allmulticast mode [ 423.002018][T17935] libceph: connect (1)[c::]:6789 error -22 [ 423.003496][T18195] bond8: entered promiscuous mode [ 423.004386][T18195] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 423.005498][T17935] libceph: mon0 (1)[c::]:6789 connect error [ 423.012210][T18195] bond8: left promiscuous mode [ 423.057206][T18200] ceph: No mds server is up or the cluster is laggy [ 424.136716][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.140936][T18234] netlink: 'syz.6.4426': attribute type 1 has an invalid length. [ 424.154875][T18234] 8021q: adding VLAN 0 to HW filter on device bond6 [ 424.177647][T18234] 8021q: adding VLAN 0 to HW filter on device bond6 [ 424.179921][T18234] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 424.184000][T18234] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 424.230466][T18238] bond7: entered promiscuous mode [ 424.234799][T18238] 8021q: adding VLAN 0 to HW filter on device bond7 [ 424.238503][T18238] bond6: (slave bond7): Enslaving as an active interface with a down link [ 424.278540][T18234] macvlan2: entered promiscuous mode [ 424.280325][T18234] macvlan2: entered allmulticast mode [ 424.282452][T18234] bond6: entered promiscuous mode [ 424.285831][T18234] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 424.289209][T18234] bond6: left promiscuous mode [ 425.413178][T18259] netlink: 'syz.5.4440': attribute type 1 has an invalid length. [ 425.437064][T18259] 8021q: adding VLAN 0 to HW filter on device bond8 [ 425.459173][T18259] 8021q: adding VLAN 0 to HW filter on device bond8 [ 425.461438][T18259] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 425.465592][T18259] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 425.517223][T18263] veth13: entered promiscuous mode [ 425.521357][T18263] bond8: (slave veth13): Enslaving as an active interface with a down link [ 425.559166][T18259] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4440'. [ 425.562409][T18259] 8021q: adding VLAN 0 to HW filter on device bond8 [ 425.604940][T18264] bridge5: entered promiscuous mode [ 425.613064][T18264] bridge5: entered allmulticast mode [ 425.763830][ T40] audit: type=1804 audit(1755483059.757:346): pid=18268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4433" name="file0" dev="ramfs" ino=61686 res=1 errno=0 [ 426.285041][T18270] netlink: 272 bytes leftover after parsing attributes in process `syz.2.4444'. [ 426.379937][T18279] netlink: 'syz.1.4437': attribute type 4 has an invalid length. [ 426.698592][T18296] wireguard0: entered promiscuous mode [ 426.700511][T18296] wireguard0: entered allmulticast mode [ 426.856426][T18299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4445'. [ 426.882456][T18299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4445'. [ 427.247993][T18308] netlink: 272 bytes leftover after parsing attributes in process `syz.1.4449'. [ 427.282738][T18311] netlink: 'syz.1.4450': attribute type 1 has an invalid length. [ 427.302101][T18311] 8021q: adding VLAN 0 to HW filter on device bond10 [ 427.327972][T18311] 8021q: adding VLAN 0 to HW filter on device bond10 [ 427.330281][T18311] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 427.334925][T18311] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 427.394927][T18318] veth33: entered promiscuous mode [ 427.398167][T18318] bond10: (slave veth33): Enslaving as an active interface with a down link [ 427.442975][T18311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4450'. [ 427.446202][T18311] 8021q: adding VLAN 0 to HW filter on device bond10 [ 427.572255][T18323] lo speed is unknown, defaulting to 1000 [ 427.716638][T18327] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4452'. [ 427.934646][T18324] lo speed is unknown, defaulting to 1000 [ 432.171776][T18391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4472'. [ 433.241614][T18429] input: syz1 as /devices/virtual/input/input9 [ 433.272492][T18433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4485'. [ 433.647744][T18446] wireguard0: entered promiscuous mode [ 433.650956][T18446] wireguard0: entered allmulticast mode [ 434.279075][ T40] audit: type=1326 audit(1755483068.327:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18454 comm="syz.2.4490" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ee579 code=0x0 [ 434.604355][T18469] siw: device registration error -23 [ 434.631945][T18474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4497'. [ 434.948944][T18486] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 435.075067][T18492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4511'. [ 435.078034][T18492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4511'. [ 435.080908][T18492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4511'. [ 435.084027][T18492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4511'. [ 435.271587][T18497] wireguard0: entered promiscuous mode [ 435.274047][T18497] wireguard0: entered allmulticast mode [ 436.087164][T18511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4505'. [ 436.111396][T18511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4505'. [ 436.322666][T18515] bridge24: entered promiscuous mode [ 436.324533][T18515] bridge24: entered allmulticast mode [ 437.309074][T18540] wireguard1: entered promiscuous mode [ 437.312829][T18540] wireguard1: entered allmulticast mode [ 437.405983][ T40] audit: type=1804 audit(1755483071.447:348): pid=18545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4518" name="file0" dev="ramfs" ino=61061 res=1 errno=0 [ 437.661468][T18547] Bluetooth: MGMT ver 1.23 [ 438.605419][T18564] bridge6: entered promiscuous mode [ 438.607279][T18564] bridge6: entered allmulticast mode [ 439.124816][T18571] bridge: RTM_NEWNEIGH with invalid ether address [ 439.470469][T18579] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.475575][T18579] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.563252][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.565296][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.727161][T18579] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.730410][T18579] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.820333][T18579] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.823730][T18579] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.883539][T18579] netdevsim netdevsim6  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.887206][T18579] netdevsim netdevsim6  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.996130][T15317] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.998751][T15317] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.007670][T15317] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.010255][T15317] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.038622][T18586] wireguard1: entered promiscuous mode [ 440.040400][T18586] wireguard1: entered allmulticast mode [ 440.064935][T13746] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.067527][T13746] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.070100][T13746] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.073153][T13746] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.337317][T18589] siw: device registration error -23 [ 441.158385][ T40] audit: type=1326 audit(1755483075.207:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18601 comm="syz.5.4534" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe2579 code=0x0 [ 441.368557][T18608] bridge25: entered promiscuous mode [ 441.385213][T18608] bridge25: entered allmulticast mode [ 443.613564][T18656] wireguard2: entered promiscuous mode [ 443.615403][T18656] wireguard2: entered allmulticast mode [ 443.845661][ T40] audit: type=1326 audit(1755483077.897:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18643 comm="syz.6.4547" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f22579 code=0x0 [ 444.349689][T18668] overlayfs: failed to clone upperpath [ 444.392088][T18670] bond0: (slave batadv0): Releasing backup interface [ 444.394958][T18670] batadv0: left promiscuous mode [ 444.400316][T18670] bond8: (slave veth0_to_bond): Releasing active interface [ 444.404774][T18670] bond0: (slave bond_slave_0): Releasing backup interface [ 444.408421][T18670] bond0: (slave bond_slave_1): Releasing backup interface [ 444.414419][T18670] team0: Port device team_slave_1 removed [ 444.416498][T18670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.419321][T18670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.422566][T18670] bond0: (slave wlan1): Releasing backup interface [ 444.426632][T18670] bond1: (slave bond2): Releasing backup interface [ 444.429960][T18670] bond3: (slave veth19): Releasing active interface [ 444.433861][T18670] bond5: (slave veth29): Releasing active interface [ 444.438581][T18670] bond6: (slave gretap1): Releasing backup interface [ 444.448895][T18670] bond7: (slave macvlan2): Releasing backup interface [ 444.453748][T18670] bond8: (slave veth39): Releasing active interface [ 444.458061][T18670] bond9: (slave erspan1): Releasing active interface [ 444.465561][T18670] bond11: (slave bond12): Releasing active interface [ 444.469920][T18670] bond13: (slave geneve2): Releasing active interface [ 444.472111][T18670] geneve2: left promiscuous mode [ 444.490038][T18670] bond14: (slave veth45): Releasing active interface [ 444.497224][ T34] lo speed is unknown, defaulting to 1000 [ 444.504524][ T60] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.509228][ T60] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.511928][ T60] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.516221][ T60] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.523415][T18674] team0: Mode changed to "activebackup" [ 444.594460][T18670] vlan0: entered promiscuous mode [ 444.598482][T18670] tipc: Enabled bearer , priority 0 [ 444.764258][T18686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4557'. [ 444.839555][T18690] netlink: 'syz.2.4560': attribute type 39 has an invalid length. [ 445.676858][ T10] tipc: Node number set to 2886997007 [ 445.870610][T18710] overlayfs: failed to clone upperpath [ 446.062291][ T40] audit: type=1326 audit(1755483080.107:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18698 comm="syz.1.4563" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f48579 code=0x0 [ 446.589784][T18730] wireguard1: entered promiscuous mode [ 446.591668][T18730] wireguard1: entered allmulticast mode [ 449.412541][T18742] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4581'. [ 449.417355][T18744] bond2: (slave veth0_to_bond): Releasing active interface [ 449.424672][T18744] bond0: (slave wlan1): Releasing backup interface [ 449.429377][T18744] bond1: (slave gretap1): Releasing active interface [ 449.437895][T18744] bond2: (slave veth5): Releasing active interface [ 449.442812][T18744] bond3: (slave erspan1): Releasing active interface [ 449.448450][T18744] bond0: (slave vxlan0): Releasing backup interface [ 449.457406][T18744] bond5: (slave geneve2): Releasing active interface [ 449.460269][T18744] geneve2: left promiscuous mode [ 449.468327][T18744] bond6: (slave bond7): Releasing active interface [ 449.473634][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 449.484577][T15317] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.488271][T15317] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.493981][T15317] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.497496][T15317] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.514141][T15317] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.517489][T15317] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.521040][T15317] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.533651][T15317] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.573987][T18744] team0: Mode changed to "activebackup" [ 449.579764][T18744] vlan0: entered promiscuous mode [ 449.582522][T18744] tipc: Enabled bearer , priority 0 [ 449.812891][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 450.615329][T18777] lo speed is unknown, defaulting to 1000 [ 450.694839][T17935] tipc: Node number set to 1353909833 [ 450.994514][T18784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4586'. [ 452.058769][T18812] netlink: 'syz.1.4600': attribute type 1 has an invalid length. [ 452.065529][T18810] ptrace attach of "/syz-executor exec"[11661] was attempted by "/syz-executor exec"[18810] [ 452.109093][T18812] bond11: (slave geneve3): making interface the new active one [ 452.111838][T18812] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 452.115833][T15273] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 452.117759][T18812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4600'. [ 452.118316][T15273] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 452.118336][T15273] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 452.127156][T18812] 8021q: adding VLAN 0 to HW filter on device bond11 [ 452.131464][T15273] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 452.652839][T18826] lo speed is unknown, defaulting to 1000 [ 452.870436][ T40] audit: type=1804 audit(1755483086.917:352): pid=18834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4596" name="file0" dev="ramfs" ino=63099 res=1 errno=0 [ 454.862746][ C3] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 455.532229][T18871] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.535825][T18871] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 455.569720][T18873] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4611'. [ 455.742244][T18871] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.752888][T18871] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 455.818066][T18871] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.821113][T18871] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 455.902172][T18871] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.905702][T18871] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 455.978126][ T60] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 455.981634][ T60] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 455.994721][ T60] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 455.999162][ T60] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 456.008962][ T60] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 456.013164][ T60] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 456.023848][ T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 456.045103][ T60] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 457.412735][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 460.231276][T18950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4632'. [ 460.235858][T18950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4632'. [ 460.242766][T18950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4632'. [ 460.798044][T18964] lo speed is unknown, defaulting to 1000 [ 462.773566][T19007] tipc: Resetting bearer [ 462.776401][T19007] bond3: (slave veth0_to_bond): Releasing active interface [ 462.784717][T19007] bond0: (slave wlan1): Releasing backup interface [ 462.788392][T19007] bond3: (slave veth9): Releasing active interface [ 462.792010][T19007] bond6: (slave bond7): Releasing active interface [ 462.796949][T19007] bond8: (slave veth13): Releasing active interface [ 462.803031][ T6043] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 462.820961][T19009] lo speed is unknown, defaulting to 1000 [ 462.870232][T19007] team0: Mode changed to "activebackup" [ 462.878123][T19007] vlan0: left allmulticast mode [ 462.883060][T19007] team0: Port device vlan0 added [ 462.887670][T19007] tipc: Enabling of bearer rejected, already enabled [ 462.928744][T19021] netlink: 'syz.2.4655': attribute type 1 has an invalid length. [ 462.952942][T19021] 8021q: adding VLAN 0 to HW filter on device bond15 [ 462.970393][T19021] vlan5: entered promiscuous mode [ 462.972159][T19021] bond15: entered promiscuous mode [ 462.977603][T19021] vlan5: entered allmulticast mode [ 462.979251][T19021] bond15: entered allmulticast mode [ 463.073237][T19031] pim6reg: entered allmulticast mode [ 463.163214][ T40] audit: type=1326 audit(1755483097.217:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.4658" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 463.171224][ T40] audit: type=1326 audit(1755483097.217:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.4658" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 463.192793][ T40] audit: type=1326 audit(1755483097.247:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.4658" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 463.199671][ T40] audit: type=1326 audit(1755483097.247:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.4658" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 463.206794][ T40] audit: type=1326 audit(1755483097.247:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.4658" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 463.213924][ T40] audit: type=1326 audit(1755483097.247:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.4658" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 463.220694][ T40] audit: type=1326 audit(1755483097.247:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.4658" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 463.227737][ T40] audit: type=1326 audit(1755483097.247:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.4658" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 463.254453][ T40] audit: type=1326 audit(1755483097.307:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.4658" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 463.261621][ T40] audit: type=1326 audit(1755483097.307:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.4658" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 463.270175][T19033] overlayfs: failed to clone upperpath [ 463.814027][ T6043] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 463.878386][T19042] lo speed is unknown, defaulting to 1000 [ 464.045516][T19052] bond5: (slave veth0_to_bond): Releasing active interface [ 464.049516][T19052] bond4: (slave gretap1): Releasing active interface [ 464.050644][T19054] overlayfs: failed to clone upperpath [ 464.057986][T19052] bond5: (slave veth27): Releasing active interface [ 464.061669][T19052] bond7: (slave geneve2): Releasing active interface [ 464.064035][T19052] geneve2: left promiscuous mode [ 464.071819][T19052] bond8: (slave bond9): Releasing active interface [ 464.083120][ T6097] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 464.104112][T19052] bond10: (slave veth33): Releasing active interface [ 464.110347][T19052] bond11: (slave geneve3): Releasing active interface [ 464.119027][T15280] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 464.129828][T15280] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 464.141838][T15280] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 464.151556][T15280] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 464.160464][T15280] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 464.170034][T15280] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 464.177293][T15280] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 464.179878][T15280] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 464.199749][T19052] team0: Mode changed to "activebackup" [ 464.204373][T19052] tipc: Enabled bearer , priority 0 [ 464.943041][ T6097] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 466.141630][T19091] lo speed is unknown, defaulting to 1000 [ 466.402103][T19098] tipc: Enabling of bearer rejected, failed to enable media [ 466.409746][T19098] tipc: Enabling of bearer rejected, failed to enable media [ 466.464907][T19100] lo speed is unknown, defaulting to 1000 [ 469.089722][T19146] pim6reg: entered allmulticast mode [ 469.118937][T19151] openvswitch: netlink: Flow key attr not present in new flow. [ 469.260367][T19154] tipc: Enabled bearer , priority 10 [ 469.266065][T19154] tipc: Enabling of bearer rejected, failed to enable media [ 469.293578][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 469.293589][ T40] audit: type=1326 audit(1755483103.347:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.6.4693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 469.302200][ T40] audit: type=1326 audit(1755483103.347:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.6.4693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 469.309020][ T40] audit: type=1326 audit(1755483103.347:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.6.4693" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 469.312146][T19156] overlayfs: failed to get inode (-116) [ 469.316044][ T40] audit: type=1326 audit(1755483103.347:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.6.4693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 469.318624][T19156] overlayfs: failed to look up (bus) for ino (-116) [ 469.326214][ T40] audit: type=1326 audit(1755483103.347:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.6.4693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 469.335073][ T40] audit: type=1326 audit(1755483103.347:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.6.4693" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 469.341673][ T40] audit: type=1326 audit(1755483103.347:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.6.4693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 469.348552][ T40] audit: type=1326 audit(1755483103.347:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.6.4693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 469.355276][ T40] audit: type=1326 audit(1755483103.347:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.6.4693" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 469.361836][ T40] audit: type=1326 audit(1755483103.347:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.6.4693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 469.545275][T19162] tipc: Enabling of bearer rejected, failed to enable media [ 469.961979][T19176] tipc: Enabling of bearer rejected, failed to enable media [ 470.473249][T19181] pim6reg: entered allmulticast mode [ 470.481250][T19186] tipc: Enabled bearer , priority 10 [ 470.488401][T19186] tipc: Bearer : already 2 bearers with priority 10 [ 470.490785][T19186] tipc: Bearer : trying with adjusted priority [ 470.493981][T19186] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 470.658086][T19194] tipc: Resetting bearer [ 471.517842][T19211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4708'. [ 471.522873][T19211] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4708'. [ 471.600069][T19211] bond0 (unregistering): Released all slaves [ 471.720776][T19216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4711'. [ 471.733183][T19216] vlan0: entered allmulticast mode [ 471.734862][T19216] bridge0: entered allmulticast mode [ 471.736690][T19216] bridge22: port 1(vlan0) entered blocking state [ 471.738863][T19216] bridge22: port 1(vlan0) entered disabled state [ 471.741778][T19216] vlan0: entered promiscuous mode [ 471.743886][T19216] bridge0: entered promiscuous mode [ 471.935211][T19229] netlink: 'syz.5.4717': attribute type 1 has an invalid length. [ 472.001807][T19229] 8021q: adding VLAN 0 to HW filter on device bond9 [ 472.195454][T19232] bond9: (slave veth15): Enslaving as an active interface with a down link [ 472.205841][T19229] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 472.310150][T19229] vlan4: entered allmulticast mode [ 472.312533][T19229] veth0_to_bond: entered allmulticast mode [ 472.316217][T19229] veth0_to_bond: entered promiscuous mode [ 472.320706][T19229] veth0_to_bond: left promiscuous mode [ 472.324342][T19229] veth0_to_bond: entered promiscuous mode [ 472.326698][T19229] bond9: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 472.336375][T19229] veth0_to_bond: left promiscuous mode [ 472.716349][T19247] tipc: Enabled bearer , priority 0 [ 472.723388][T19247] syzkaller0: entered promiscuous mode [ 472.725009][T19247] syzkaller0: entered allmulticast mode [ 472.753669][T19247] tipc: Resetting bearer [ 472.758069][T19245] tipc: Resetting bearer [ 472.766087][T19245] tipc: Disabling bearer [ 472.838326][T19252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4724'. [ 472.844827][T19256] tipc: Enabled bearer , priority 0 [ 472.847717][T19256] syzkaller0: entered promiscuous mode [ 472.849641][T19256] syzkaller0: entered allmulticast mode [ 472.856101][T19256] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 472.869295][T19256] syzkaller0: MTU too low for tipc bearer [ 472.871253][T19256] tipc: Disabling bearer [ 473.777294][T19274] tipc: Enabling of bearer rejected, failed to enable media [ 474.272277][T19288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4734'. [ 474.276175][ C3] vcan0: j1939_session_tx_dat: 0xffff88805f508c00: queue data error: -100 [ 474.785757][T19297] tipc: Bearer : already 2 bearers with priority 10 [ 474.788183][T19297] tipc: Bearer : trying with adjusted priority [ 474.790464][T19297] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 475.258597][T19305] overlayfs: failed to clone upperpath [ 475.846273][ T7579] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 476.012726][ T7579] usb 11-1: Using ep0 maxpacket: 32 [ 476.016854][ T7579] usb 11-1: config 0 has an invalid interface number: 12 but max is 0 [ 476.019615][ T7579] usb 11-1: config 0 has no interface number 0 [ 476.021640][ T7579] usb 11-1: config 0 interface 12 has no altsetting 0 [ 476.025568][ T7579] usb 11-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 476.028655][ T7579] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.031219][ T7579] usb 11-1: Product: syz [ 476.032706][ T7579] usb 11-1: Manufacturer: syz [ 476.034246][ T7579] usb 11-1: SerialNumber: syz [ 476.037164][ T7579] usb 11-1: config 0 descriptor?? [ 476.532551][ T7579] f81534 11-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 476.535032][ T7579] f81534 11-1:0.12: f81534_find_config_idx: read failed: -71 [ 476.537377][ T7579] f81534 11-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 476.539846][ T7579] f81534 11-1:0.12: probe with driver f81534 failed with error -71 [ 476.548429][ T7579] usb 11-1: USB disconnect, device number 6 [ 477.309092][T19357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4751'. [ 477.320687][T19357] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4751'. [ 477.442840][T19357] bond0 (unregistering): Released all slaves [ 477.841793][T19362] overlayfs: failed to clone upperpath [ 477.929539][T19363] tipc: Resetting bearer [ 477.995930][ T6043] lo speed is unknown, defaulting to 1000 [ 477.999305][ T6043] syz2: Port: 1 Link DOWN [ 478.132457][T19371] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 478.169484][T19375] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4755'. [ 478.186729][T19375] vlan4: entered allmulticast mode [ 478.188448][T19375] bridge0: entered allmulticast mode [ 478.190248][T19375] bridge10: port 1(vlan4) entered blocking state [ 478.192310][T19375] bridge10: port 1(vlan4) entered disabled state [ 478.197952][T19375] vlan4: entered promiscuous mode [ 478.200031][T19375] bridge0: entered promiscuous mode [ 478.360356][T19380] netlink: 'syz.6.4756': attribute type 1 has an invalid length. [ 478.378715][T19380] 8021q: adding VLAN 0 to HW filter on device bond8 [ 478.409225][T19380] bond8: (slave veth9): Enslaving as an active interface with a down link [ 478.433506][T19380] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 478.444926][T19380] vlan2: entered allmulticast mode [ 478.446596][T19380] veth0_to_bond: entered allmulticast mode [ 478.448806][T19380] veth0_to_bond: entered promiscuous mode [ 478.450874][T19380] veth0_to_bond: left promiscuous mode [ 478.452966][T19380] veth0_to_bond: entered promiscuous mode [ 478.454919][T19380] bond8: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 478.460283][T19380] veth0_to_bond: left promiscuous mode [ 478.770218][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4760'. [ 478.775126][T19392] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4760'. [ 478.857426][T19392] bond0 (unregistering): Released all slaves [ 479.103934][T19406] tipc: Enabling of bearer rejected, failed to enable media [ 479.334070][T19412] lo speed is unknown, defaulting to 1000 [ 480.785306][T19397] Set syz1 is full, maxelem 65536 reached [ 481.005288][T19438] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 481.011577][T15298] Bluetooth: hci4: Frame reassembly failed (-84) [ 481.386616][T19447] tipc: Enabling of bearer rejected, failed to enable media [ 483.012847][ T5980] Bluetooth: hci4: command 0x1003 tx timeout [ 483.013148][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 483.750008][T19509] netlink: 'syz.2.4789': attribute type 1 has an invalid length. [ 486.142820][T19554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4804'. [ 486.387577][T19560] bridge11: entered promiscuous mode [ 486.389369][T19560] bridge11: entered allmulticast mode [ 488.290160][T19604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4816'. [ 489.751004][T19638] fuse: Unknown parameter '18446744073709551615ÿ' [ 490.060156][T19662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4827'. [ 492.860586][T19739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4845'. [ 493.440409][T19756] 9p: Unknown Cache mode or invalid value fscach [ 493.920197][T19760] fuse: Unknown parameter '18446744073709551615ÿ' [ 495.812795][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 497.533057][T19832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4872'. [ 499.586744][T19861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4882'. [ 499.678311][T19869] bridge26: entered promiscuous mode [ 499.680832][T19869] bridge26: entered allmulticast mode [ 500.882965][T19893] 9p: Unknown Cache mode or invalid value fscach [ 500.937808][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.939807][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.006051][T19920] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4900'. [ 503.843670][T19936] 9p: Unknown Cache mode or invalid value fscach [ 505.911348][T19984] 9p: Unknown Cache mode or invalid value fscach [ 508.683540][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 508.683553][ T40] audit: type=1804 audit(1755483142.737:438): pid=20030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4925" name="bus" dev="tmpfs" ino=7092 res=1 errno=0 [ 508.758268][T20031] netlink: 'syz.6.4924': attribute type 5 has an invalid length. [ 508.879926][T20031] netlink: 'syz.6.4924': attribute type 7 has an invalid length. [ 508.925059][T20031] : entered promiscuous mode [ 509.553597][T20042] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4932'. [ 510.268028][ T40] audit: type=1326 audit(1755483144.307:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20055 comm="syz.2.4935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 510.276351][ T40] audit: type=1326 audit(1755483144.307:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20055 comm="syz.2.4935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 510.284853][ T40] audit: type=1326 audit(1755483144.307:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20055 comm="syz.2.4935" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 510.295013][ T40] audit: type=1326 audit(1755483144.307:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20055 comm="syz.2.4935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 510.303389][ T40] audit: type=1326 audit(1755483144.307:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20055 comm="syz.2.4935" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 510.311393][ T40] audit: type=1326 audit(1755483144.307:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20055 comm="syz.2.4935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 510.322325][ T40] audit: type=1326 audit(1755483144.307:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20055 comm="syz.2.4935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 510.330113][ T40] audit: type=1326 audit(1755483144.307:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20055 comm="syz.2.4935" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 510.337831][ T40] audit: type=1326 audit(1755483144.307:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20055 comm="syz.2.4935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 512.364910][T20084] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4944'. [ 514.283362][ T40] kauditd_printk_skb: 236 callbacks suppressed [ 514.283375][ T40] audit: type=1804 audit(1755483148.257:684): pid=20146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4963" name="bus" dev="tmpfs" ino=3779 res=1 errno=0 [ 514.537489][T20151] netlink: 'syz.2.4961': attribute type 5 has an invalid length. [ 514.540869][T20151] netlink: 'syz.2.4961': attribute type 7 has an invalid length. [ 514.625833][T20151] : entered promiscuous mode [ 515.941485][T20185] delete_channel: no stack [ 516.545442][T20204] netlink: 'syz.5.4977': attribute type 5 has an invalid length. [ 516.547916][T20204] netlink: 'syz.5.4977': attribute type 7 has an invalid length. [ 516.586753][T20204] : entered promiscuous mode [ 517.717598][T20216] lo speed is unknown, defaulting to 1000 [ 518.345715][T20233] 9pnet: bogus RREAD count (69 > 41) [ 518.349117][ T40] audit: type=1800 audit(1755483152.397:685): pid=20233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4986" name="/" dev="9p" ino=2 res=0 errno=0 [ 519.968398][T20269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4991'. [ 519.987496][T20270] netlink: 'syz.1.4992': attribute type 5 has an invalid length. [ 519.990038][T20270] netlink: 'syz.1.4992': attribute type 7 has an invalid length. [ 520.011569][T20270] : entered promiscuous mode [ 520.819313][T20280] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 520.829921][T20280] picdev_read: 86 callbacks suppressed [ 520.829932][T20280] kvm: pic: non byte read [ 520.834120][T20280] kvm: pic: level sensitive irq not supported [ 520.834452][T20280] kvm: pic: non byte read [ 520.838704][T20280] kvm: pic: level sensitive irq not supported [ 520.839120][T20280] kvm: pic: non byte read [ 520.848471][T20280] kvm: pic: level sensitive irq not supported [ 520.849079][T20280] kvm: pic: non byte read [ 520.855324][T20280] kvm: pic: level sensitive irq not supported [ 520.855688][T20280] kvm: pic: non byte read [ 520.861398][T20280] kvm: pic: level sensitive irq not supported [ 520.861762][T20280] kvm: pic: non byte read [ 521.019246][T20290] delete_channel: no stack [ 521.106161][T20297] lo speed is unknown, defaulting to 1000 [ 521.165412][T20297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5004'. [ 521.644529][T20305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5006'. [ 521.968714][T20317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5008'. [ 522.667089][T20321] delete_channel: no stack [ 523.879683][T20344] netlink: 'syz.2.5019': attribute type 10 has an invalid length. [ 523.889369][T20344] team0: Port device dummy0 added [ 524.366897][T20353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5021'. [ 525.029192][ T40] audit: type=1804 audit(1755483159.047:686): pid=20367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5023" name="bus" dev="tmpfs" ino=7178 res=1 errno=0 [ 525.815089][T20376] tipc: Disabling bearer [ 525.818137][T20376] team0 (unregistering): Port device vlan0 removed [ 528.051981][ T40] audit: type=1804 audit(1755483162.097:687): pid=20428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.5036" name="/newroot/474/bus" dev="tmpfs" ino=2600 res=1 errno=0 [ 528.845986][T20443] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5041'. [ 529.570645][T20456] overlayfs: failed to clone upperpath [ 529.635189][T20464] tipc: Enabling of bearer rejected, failed to enable media [ 529.937621][T20474] tipc: Enabling of bearer rejected, already enabled [ 530.040043][ T40] audit: type=1804 audit(1755483164.087:688): pid=20478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5055" name="bus" dev="tmpfs" ino=7263 res=1 errno=0 [ 530.369473][T20481] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5057'. [ 530.582152][T20488] tipc: Enabling of bearer rejected, failed to enable media [ 530.680096][T20499] tipc: Enabling of bearer rejected, failed to enable media [ 531.456908][T20513] lo speed is unknown, defaulting to 1000 [ 531.517856][T20513] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5067'. [ 531.595493][T20519] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 531.599626][T20519] cramfs: wrong magic [ 531.652812][ C3] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 532.088631][ T40] audit: type=1804 audit(1755483166.137:689): pid=20533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5070" name="bus" dev="tmpfs" ino=7250 res=1 errno=0 [ 532.491225][T20540] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 532.538275][T20540] cramfs: wrong magic [ 532.717373][T20548] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5075'. [ 532.811917][T20552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5074'. [ 534.548209][T20581] tipc: Enabling of bearer rejected, failed to enable media [ 534.629107][T20588] tipc: Enabling of bearer rejected, failed to enable media [ 534.718276][T20597] tipc: Enabling of bearer rejected, failed to enable media [ 534.764440][T20596] tipc: Enabling of bearer rejected, failed to enable media [ 534.802303][T20606] tipc: Enabling of bearer rejected, failed to enable media [ 534.986265][T20618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5096'. [ 535.015617][T20621] tipc: Enabling of bearer rejected, failed to enable media [ 535.123222][T20628] tipc: Enabling of bearer rejected, failed to enable media [ 535.381032][T20641] tipc: Enabled bearer , priority 0 [ 535.383742][T20641] syzkaller0: entered promiscuous mode [ 535.385588][T20641] syzkaller0: entered allmulticast mode [ 535.402278][T20641] tipc: Resetting bearer [ 535.410308][T20639] tipc: Resetting bearer [ 535.445856][T20639] tipc: Disabling bearer [ 535.726779][T20647] tipc: Enabling of bearer rejected, failed to enable media [ 535.798005][T20652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5105'. [ 535.826056][T20654] tipc: Enabling of bearer rejected, failed to enable media [ 535.837841][T20656] tipc: Enabled bearer , priority 0 [ 535.840743][T20656] syzkaller0: entered promiscuous mode [ 535.842478][T20656] syzkaller0: entered allmulticast mode [ 535.859008][T20656] tipc: Resetting bearer [ 535.863178][T20655] tipc: Resetting bearer [ 535.871857][T20655] tipc: Disabling bearer [ 536.143318][T20662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5108'. [ 537.332421][T20677] netlink: 'syz.1.5112': attribute type 10 has an invalid length. [ 537.380951][T20686] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5114'. [ 537.424228][T20690] tipc: Enabled bearer , priority 0 [ 537.427207][T20690] syzkaller0: entered promiscuous mode [ 537.428933][T20690] syzkaller0: entered allmulticast mode [ 537.441873][T20690] tipc: Resetting bearer [ 537.446700][T20689] tipc: Resetting bearer [ 537.454462][T20689] tipc: Disabling bearer [ 537.479937][T20693] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5123'. [ 538.559174][T20713] tipc: Enabling of bearer rejected, failed to enable media [ 539.874017][T20746] tipc: Enabling of bearer rejected, failed to enable media [ 539.976566][T20752] tipc: Enabling of bearer rejected, failed to enable media [ 540.068769][T20765] tipc: Enabled bearer , priority 0 [ 540.071655][T20765] syzkaller0: entered promiscuous mode [ 540.073501][T20765] syzkaller0: entered allmulticast mode [ 540.108358][T20765] tipc: Resetting bearer [ 540.112420][T20763] tipc: Resetting bearer [ 540.121696][T20763] tipc: Disabling bearer [ 540.326692][T20773] tipc: Enabling of bearer rejected, failed to enable media [ 540.447097][T20782] tipc: Enabled bearer , priority 0 [ 540.450717][T20782] syzkaller0: entered promiscuous mode [ 540.453139][T20782] syzkaller0: entered allmulticast mode [ 540.470822][T20782] tipc: Resetting bearer [ 540.476611][T20781] tipc: Resetting bearer [ 540.478522][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.478573][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.491362][T20781] tipc: Disabling bearer [ 540.954729][T20797] macsec0: entered allmulticast mode [ 541.467609][T20801] tipc: Enabling of bearer rejected, failed to enable media [ 542.494437][T20823] tipc: Enabled bearer , priority 0 [ 542.497894][T20823] syzkaller0: entered promiscuous mode [ 542.500077][T20823] syzkaller0: entered allmulticast mode [ 542.514370][T20823] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 542.554955][T20823] tipc: Resetting bearer [ 542.563221][T20822] tipc: Resetting bearer [ 542.571938][T20822] tipc: Disabling bearer [ 542.594889][T20826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5151'. [ 542.652895][T20829] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5155'. [ 542.690846][T20831] tipc: Enabled bearer , priority 0 [ 542.694178][T20831] syzkaller0: entered promiscuous mode [ 542.731457][T20831] tipc: Resetting bearer [ 542.745203][T20830] tipc: Resetting bearer [ 542.772657][T20830] tipc: Disabling bearer [ 542.823075][T20834] tipc: Enabling of bearer rejected, failed to enable media [ 543.268078][T20839] loop6: detected capacity change from 0 to 524287999 [ 543.636572][T20852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5160'. [ 544.639169][T20874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5168'. [ 545.320978][T20892] vivid-007: ================= START STATUS ================= [ 545.324842][T20892] vivid-007: Generate PTS: true [ 545.327287][T20892] vivid-007: Generate SCR: true [ 545.328999][T20892] tpg source WxH: 320x240 (Y'CbCr) [ 545.330701][T20892] tpg field: 1 [ 545.331819][T20892] tpg crop: (0,0)/320x240 [ 545.333345][T20892] tpg compose: (0,0)/320x240 [ 545.335369][T20892] tpg colorspace: 8 [ 545.337153][T20892] tpg transfer function: 0/0 [ 545.338585][T20892] tpg Y'CbCr encoding: 0/0 [ 545.340107][T20892] tpg quantization: 0/0 [ 545.343853][T20892] tpg RGB range: 0/2 [ 545.345191][T20892] vivid-007: ================== END STATUS ================== [ 545.366253][T20891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5182'. [ 545.367221][T20892] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 545.371422][T20892] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 545.375582][T20892] vhci_hcd vhci_hcd.0: Device attached [ 545.622991][ T61] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 546.130585][T20895] vhci_hcd: connection reset by peer [ 546.141558][T15317] vhci_hcd: stop threads [ 546.147874][T15317] vhci_hcd: release socket [ 546.155390][T15317] vhci_hcd: disconnect device [ 546.358359][T20908] macsec0: entered promiscuous mode [ 546.360435][T20908] macsec0: entered allmulticast mode [ 547.316478][T20927] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5185'. [ 547.318963][T20928] tipc: Enabling of bearer rejected, failed to enable media [ 547.384141][T20934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5194'. [ 547.492029][T20942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 547.495181][T20942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 547.497858][T20942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 547.500552][T20942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 547.503727][T20942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 547.506601][T20942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 547.509385][T20942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 547.511955][T20942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 547.514981][T20942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 547.517650][T20942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 548.290258][T20953] tipc: Enabling of bearer rejected, failed to enable media [ 549.141013][T20978] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5198'. [ 549.558548][T20993] overlayfs: failed to clone upperpath [ 550.055700][T21005] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5210'. [ 550.762710][ T61] vhci_hcd: vhci_device speed not set [ 551.528951][T21048] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5219'. [ 552.981566][T21075] lo: entered allmulticast mode [ 552.986716][T21074] lo: left allmulticast mode [ 554.126702][T21100] dvmrp1: left allmulticast mode [ 555.617638][ T40] audit: type=1326 audit(1755483189.667:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21139 comm="syz.1.5254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 555.627362][ T40] audit: type=1326 audit(1755483189.667:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21139 comm="syz.1.5254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 555.638758][ T40] audit: type=1326 audit(1755483189.667:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21139 comm="syz.1.5254" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 555.647538][ T40] audit: type=1326 audit(1755483189.667:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21139 comm="syz.1.5254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 555.658748][ T40] audit: type=1326 audit(1755483189.667:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21139 comm="syz.1.5254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 555.666365][ T40] audit: type=1326 audit(1755483189.667:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21139 comm="syz.1.5254" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 555.673311][ T40] audit: type=1326 audit(1755483189.667:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21139 comm="syz.1.5254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 555.680198][T21145] overlayfs: failed to clone upperpath [ 555.680326][ T40] audit: type=1326 audit(1755483189.667:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21139 comm="syz.1.5254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 555.689213][ T40] audit: type=1326 audit(1755483189.667:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21139 comm="syz.1.5254" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 555.696045][ T40] audit: type=1326 audit(1755483189.667:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21139 comm="syz.1.5254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 555.765177][T21149] dvmrp1: left allmulticast mode [ 561.091399][T21255] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5288'. [ 561.148042][T21260] vivid-007: ================= START STATUS ================= [ 561.150464][T21260] vivid-007: Generate PTS: true [ 561.152040][T21260] vivid-007: Generate SCR: true [ 561.154147][T21260] tpg source WxH: 320x240 (Y'CbCr) [ 561.155788][T21260] tpg field: 1 [ 561.156903][T21260] tpg crop: (0,0)/320x240 [ 561.158291][T21260] tpg compose: (0,0)/320x240 [ 561.159831][T21260] tpg colorspace: 8 [ 561.161047][T21260] tpg transfer function: 0/0 [ 561.162483][T21260] tpg Y'CbCr encoding: 0/0 [ 561.165224][T21260] tpg quantization: 0/0 [ 561.166572][T21260] tpg RGB range: 0/2 [ 561.167947][T21260] vivid-007: ================== END STATUS ================== [ 562.375034][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.377161][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.608462][T21282] netlink: 'syz.1.5290': attribute type 16 has an invalid length. [ 562.611594][T21282] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5290'. [ 562.616792][T21282] bridge_slave_0: entered allmulticast mode [ 562.714840][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 562.714852][ T40] audit: type=1800 audit(1755483196.757:726): pid=21296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5293" name="bus" dev="overlay" ino=2939 res=0 errno=0 [ 562.728943][T21296] macsec2: entered promiscuous mode [ 562.730631][T21296] dummy0: entered promiscuous mode [ 562.734429][T21296] dummy0: left promiscuous mode [ 562.998837][T21302] vivid-007: ================= START STATUS ================= [ 563.001333][T21302] vivid-007: Generate PTS: true [ 563.003277][T21302] vivid-007: Generate SCR: true [ 563.006769][T21302] tpg source WxH: 320x240 (Y'CbCr) [ 563.008551][T21302] tpg field: 1 [ 563.009919][T21302] tpg crop: (0,0)/320x240 [ 563.011433][T21302] tpg compose: (0,0)/320x240 [ 563.013300][T21302] tpg colorspace: 8 [ 563.014642][T21302] tpg transfer function: 0/0 [ 563.016167][T21302] tpg Y'CbCr encoding: 0/0 [ 563.017663][T21302] tpg quantization: 0/0 [ 563.019326][T21302] tpg RGB range: 0/2 [ 563.020625][T21302] vivid-007: ================== END STATUS ================== [ 563.033536][T21302] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 563.035706][T21302] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 563.038285][T21302] vhci_hcd vhci_hcd.0: Device attached [ 563.303387][T17935] usb 49-1: new high-speed USB device number 3 using vhci_hcd [ 563.787973][T21303] vhci_hcd: connection reset by peer [ 563.792164][T15280] vhci_hcd: stop threads [ 563.799098][T15280] vhci_hcd: release socket [ 563.801976][T15280] vhci_hcd: disconnect device [ 564.835410][T21334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5301'. [ 566.529762][T21364] netlink: 'syz.6.5310': attribute type 16 has an invalid length. [ 566.532348][T21364] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5310'. [ 566.535641][T21364] bridge_slave_0: entered allmulticast mode [ 566.919115][T21380] vivid-007: ================= START STATUS ================= [ 566.921532][T21380] vivid-007: Generate PTS: true [ 566.923370][T21380] vivid-007: Generate SCR: true [ 566.925033][T21380] tpg source WxH: 320x240 (Y'CbCr) [ 566.926647][T21380] tpg field: 1 [ 566.927851][T21380] tpg crop: (0,0)/320x240 [ 566.929143][T21380] tpg compose: (0,0)/320x240 [ 566.930787][T21380] tpg colorspace: 8 [ 566.932098][T21380] tpg transfer function: 0/0 [ 566.933807][T21380] tpg Y'CbCr encoding: 0/0 [ 566.935241][T21380] tpg quantization: 0/0 [ 566.936570][T21380] tpg RGB range: 0/2 [ 566.937916][T21380] vivid-007: ================== END STATUS ================== [ 567.837259][T21394] vivid-007: ================= START STATUS ================= [ 567.839709][T21394] vivid-007: Generate PTS: true [ 567.841336][T21394] vivid-007: Generate SCR: true [ 567.843156][T21394] tpg source WxH: 320x240 (Y'CbCr) [ 567.847224][T21394] tpg field: 1 [ 567.850005][T21394] tpg crop: (0,0)/320x240 [ 567.851377][T21394] tpg compose: (0,0)/320x240 [ 567.856644][T21394] tpg colorspace: 8 [ 567.860120][T21394] tpg transfer function: 0/0 [ 567.861580][T21394] tpg Y'CbCr encoding: 0/0 [ 567.863532][T21394] tpg quantization: 0/0 [ 567.865357][T21394] tpg RGB range: 0/2 [ 567.866625][T21394] vivid-007: ================== END STATUS ================== [ 568.262823][ T10] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 568.442723][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 568.445957][ T10] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 568.449133][ T10] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 568.452230][ T10] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 568.452846][T17935] vhci_hcd: vhci_device speed not set [ 568.455752][ T10] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 568.461673][ T10] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 568.464674][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.674027][ T10] usb 11-1: usb_control_msg returned -32 [ 568.678523][ T10] usbtmc 11-1:16.0: can't read capabilities [ 568.954375][ T61] usb 11-1: USB disconnect, device number 7 [ 569.594566][T21423] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 569.596489][T21423] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 569.600183][T21423] vhci_hcd vhci_hcd.0: Device attached [ 569.621312][T21424] vhci_hcd: connection closed [ 569.621518][ T1253] vhci_hcd: stop threads [ 569.625330][ T1253] vhci_hcd: release socket [ 569.626758][ T1253] vhci_hcd: disconnect device [ 569.940994][T21439] tipc: Enabling of bearer rejected, failed to enable media [ 570.469637][T21452] can: request_module (can-proto-0) failed. [ 570.692599][T21464] tipc: Enabling of bearer rejected, failed to enable media [ 571.758208][T21487] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 571.761069][T21487] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 571.765148][T21487] vhci_hcd vhci_hcd.0: Device attached [ 572.043045][ T61] usb 49-1: new high-speed USB device number 4 using vhci_hcd [ 572.557806][T21488] vhci_hcd: connection reset by peer [ 572.560535][T15317] vhci_hcd: stop threads [ 572.562389][T15317] vhci_hcd: release socket [ 572.566224][T15317] vhci_hcd: disconnect device [ 573.032582][T21504] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5353'. [ 574.425773][T21534] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5363'. [ 577.172716][ T61] vhci_hcd: vhci_device speed not set [ 577.598827][T21580] vivid-007: ================= START STATUS ================= [ 577.601382][T21580] vivid-007: Generate PTS: true [ 577.603270][T21580] vivid-007: Generate SCR: true [ 577.604915][T21580] tpg source WxH: 320x240 (Y'CbCr) [ 577.606580][T21580] tpg field: 1 [ 577.607958][T21580] tpg crop: (0,0)/320x240 [ 577.609394][T21580] tpg compose: (0,0)/320x240 [ 577.611014][T21580] tpg colorspace: 8 [ 577.612283][T21580] tpg transfer function: 0/0 [ 577.614059][T21580] tpg Y'CbCr encoding: 0/0 [ 577.615525][T21580] tpg quantization: 0/0 [ 577.616926][T21580] tpg RGB range: 0/2 [ 577.618366][T21580] vivid-007: ================== END STATUS ================== [ 577.640847][T21580] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 577.642992][T21580] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 577.646945][T21580] vhci_hcd vhci_hcd.0: Device attached [ 577.942714][ T61] usb 49-1: device descriptor read/64, error -110 [ 578.372006][T21581] vhci_hcd: connection closed [ 578.373572][T15280] vhci_hcd: stop threads [ 578.388348][T15280] vhci_hcd: release socket [ 578.427957][T15280] vhci_hcd: disconnect device [ 578.451374][ T61] usb 49-1: new high-speed USB device number 5 using vhci_hcd [ 578.805991][ T61] usb 49-1: enqueue for inactive port 0 [ 578.888268][T21595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5377'. [ 578.961146][T21600] vivid-007: ================= START STATUS ================= [ 578.962802][ T61] vhci_hcd: vhci_device speed not set [ 578.964232][T21600] vivid-007: Generate PTS: true [ 578.966995][T21600] vivid-007: Generate SCR: true [ 578.968951][T21600] tpg source WxH: 320x240 (Y'CbCr) [ 578.971003][T21600] tpg field: 1 [ 578.972439][T21600] tpg crop: (0,0)/320x240 [ 578.973905][T21600] tpg compose: (0,0)/320x240 [ 578.975700][T21600] tpg colorspace: 8 [ 578.977282][T21600] tpg transfer function: 0/0 [ 578.978835][T21600] tpg Y'CbCr encoding: 0/0 [ 578.980282][T21600] tpg quantization: 0/0 [ 578.981668][T21600] tpg RGB range: 0/2 [ 578.983213][T21600] vivid-007: ================== END STATUS ================== [ 579.017539][T21604] tipc: Enabling of bearer rejected, failed to enable media [ 580.656492][T21632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5392'. [ 582.494914][T21666] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5402'. [ 582.672067][ T40] audit: type=1326 audit(1755483216.717:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21670 comm="syz.1.5404" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 582.678869][ T40] audit: type=1326 audit(1755483216.717:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21670 comm="syz.1.5404" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 582.685476][ T40] audit: type=1326 audit(1755483216.727:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21670 comm="syz.1.5404" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 582.685508][T21671] netlink: 'syz.1.5404': attribute type 3 has an invalid length. [ 582.692013][ T40] audit: type=1326 audit(1755483216.727:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21670 comm="syz.1.5404" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 582.701376][ T40] audit: type=1326 audit(1755483216.727:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21670 comm="syz.1.5404" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 582.708451][ T40] audit: type=1326 audit(1755483216.727:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21670 comm="syz.1.5404" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 582.716034][ T40] audit: type=1326 audit(1755483216.727:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21670 comm="syz.1.5404" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 582.724672][ T40] audit: type=1326 audit(1755483216.727:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21670 comm="syz.1.5404" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 582.732052][ T40] audit: type=1326 audit(1755483216.727:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21670 comm="syz.1.5404" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 582.740081][ T40] audit: type=1326 audit(1755483216.727:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21670 comm="syz.1.5404" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 584.634151][T21696] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 584.636334][T21696] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 584.639473][T21696] vhci_hcd vhci_hcd.0: Device attached [ 584.913653][ T59] usb 49-1: new high-speed USB device number 6 using vhci_hcd [ 585.383853][T21697] vhci_hcd: connection reset by peer [ 585.385759][T15280] vhci_hcd: stop threads [ 585.387614][T15280] vhci_hcd: release socket [ 585.392817][T15280] vhci_hcd: disconnect device [ 585.668078][ T63] Bluetooth: hci1: unexpected event for opcode 0x202d [ 586.906237][T21728] tipc: Enabled bearer , priority 0 [ 586.909611][T21728] syzkaller0: entered promiscuous mode [ 586.911467][T21728] syzkaller0: entered allmulticast mode [ 586.929353][T21728] tipc: Resetting bearer [ 586.936802][T21727] tipc: Resetting bearer [ 586.947655][T21727] tipc: Disabling bearer [ 588.130682][T21751] tipc: Enabling of bearer rejected, failed to enable media [ 588.221730][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 588.221740][ T40] audit: type=1326 audit(1755483222.267:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21755 comm="syz.2.5427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 588.232463][ T40] audit: type=1326 audit(1755483222.267:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21755 comm="syz.2.5427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 588.240577][ T40] audit: type=1326 audit(1755483222.277:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21755 comm="syz.2.5427" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 588.252285][T21756] netlink: 'syz.2.5427': attribute type 3 has an invalid length. [ 588.252349][ T40] audit: type=1326 audit(1755483222.277:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21755 comm="syz.2.5427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 588.263744][ T40] audit: type=1326 audit(1755483222.277:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21755 comm="syz.2.5427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 588.272267][ T40] audit: type=1326 audit(1755483222.277:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21755 comm="syz.2.5427" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 588.281757][ T40] audit: type=1326 audit(1755483222.277:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21755 comm="syz.2.5427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 588.291401][ T40] audit: type=1326 audit(1755483222.277:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21755 comm="syz.2.5427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 588.300303][ T40] audit: type=1326 audit(1755483222.277:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21755 comm="syz.2.5427" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 588.310077][ T40] audit: type=1326 audit(1755483222.277:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21755 comm="syz.2.5427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 588.318326][T21761] tipc: Enabling of bearer rejected, failed to enable media [ 588.408941][T21766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5429'. [ 589.729030][T21809] binder: Unknown parameter 'defcontext' [ 589.777703][T21809] netlink: 'syz.6.5439': attribute type 3 has an invalid length. [ 590.048516][ T59] vhci_hcd: vhci_device speed not set [ 590.116131][ T63] Bluetooth: hci0: unexpected event for opcode 0x202d [ 591.994939][T21845] tipc: Enabled bearer , priority 0 [ 591.998666][T21845] syzkaller0: entered promiscuous mode [ 592.000592][T21845] syzkaller0: entered allmulticast mode [ 592.031557][T21845] tipc: Resetting bearer [ 592.034955][T21842] tipc: Resetting bearer [ 592.046457][T21842] tipc: Disabling bearer [ 592.383113][T21859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5454'. [ 592.386400][T21859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5454'. [ 592.389847][T21859] netlink: 50 bytes leftover after parsing attributes in process `syz.6.5454'. [ 592.733837][T21866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5455'. [ 593.900666][T21889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5461'. [ 595.450358][T21911] vivid-007: ================= START STATUS ================= [ 595.454084][T21911] vivid-007: Generate PTS: true [ 595.456211][T21911] vivid-007: Generate SCR: true [ 595.458298][T21911] tpg source WxH: 320x240 (Y'CbCr) [ 595.460469][T21911] tpg field: 1 [ 595.461942][T21911] tpg crop: (0,0)/320x240 [ 595.463994][T21911] tpg compose: (0,0)/320x240 [ 595.465910][T21911] tpg colorspace: 8 [ 595.467178][T21911] tpg transfer function: 0/0 [ 595.468665][T21911] tpg Y'CbCr encoding: 0/0 [ 595.470415][T21911] tpg quantization: 0/0 [ 595.471995][T21911] tpg RGB range: 0/2 [ 595.473297][T21911] vivid-007: ================== END STATUS ================== [ 595.479550][T21911] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 595.481643][T21911] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 595.484054][T21911] vhci_hcd vhci_hcd.0: Device attached [ 595.488457][T21912] vhci_hcd: connection closed [ 595.488648][T15280] vhci_hcd: stop threads [ 595.497995][T15280] vhci_hcd: release socket [ 595.499366][T15280] vhci_hcd: disconnect device [ 595.572515][T21918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5470'. [ 596.148913][T21928] tipc: Enabled bearer , priority 0 [ 596.151824][T21928] syzkaller0: entered promiscuous mode [ 596.153753][T21928] syzkaller0: entered allmulticast mode [ 596.167282][T21928] tipc: Resetting bearer [ 596.170996][T21926] tipc: Resetting bearer [ 596.180822][T21926] tipc: Disabling bearer [ 596.481265][T21934] netlink: 'syz.6.5476': attribute type 1 has an invalid length. [ 597.005411][T21953] vivid-007: ================= START STATUS ================= [ 597.007921][T21953] vivid-007: Generate PTS: true [ 597.009473][T21953] vivid-007: Generate SCR: true [ 597.011291][T21953] tpg source WxH: 320x240 (Y'CbCr) [ 597.013635][T21953] tpg field: 1 [ 597.015106][T21953] tpg crop: (0,0)/320x240 [ 597.016964][T21953] tpg compose: (0,0)/320x240 [ 597.018896][T21953] tpg colorspace: 8 [ 597.020601][T21953] tpg transfer function: 0/0 [ 597.023162][T21953] tpg Y'CbCr encoding: 0/0 [ 597.025177][T21953] tpg quantization: 0/0 [ 597.026936][T21953] tpg RGB range: 0/2 [ 597.028455][T21953] vivid-007: ================== END STATUS ================== [ 597.034903][T21953] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 597.037204][T21953] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 597.040398][T21953] vhci_hcd vhci_hcd.0: Device attached [ 597.044267][T21954] vhci_hcd: connection closed [ 597.044890][ T60] vhci_hcd: stop threads [ 597.048653][ T60] vhci_hcd: release socket [ 597.050642][ T60] vhci_hcd: disconnect device [ 597.977102][T21975] tipc: Enabling of bearer rejected, failed to enable media [ 598.119197][T21979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5490'. [ 598.425588][T21991] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5492'. [ 598.877702][T21996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5494'. [ 598.880637][T21996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5494'. [ 598.883729][T21996] netlink: 50 bytes leftover after parsing attributes in process `syz.2.5494'. [ 599.474612][T22012] tipc: Enabling of bearer rejected, failed to enable media [ 599.521396][T22016] vivid-007: ================= START STATUS ================= [ 599.524172][T22016] vivid-007: Generate PTS: true [ 599.525734][T22016] vivid-007: Generate SCR: true [ 599.527330][T22016] tpg source WxH: 320x240 (Y'CbCr) [ 599.528930][T22016] tpg field: 1 [ 599.530008][T22016] tpg crop: (0,0)/320x240 [ 599.531392][T22016] tpg compose: (0,0)/320x240 [ 599.532979][T22016] tpg colorspace: 8 [ 599.534200][T22016] tpg transfer function: 0/0 [ 599.535795][T22016] tpg Y'CbCr encoding: 0/0 [ 599.537620][T22016] tpg quantization: 0/0 [ 599.539406][T22016] tpg RGB range: 0/2 [ 599.541085][T22016] vivid-007: ================== END STATUS ================== [ 599.547019][T22016] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 599.549833][T22016] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 599.553780][T22016] vhci_hcd vhci_hcd.0: Device attached [ 599.558779][T22017] vhci_hcd: connection closed [ 599.561057][T15298] vhci_hcd: stop threads [ 599.570478][T15298] vhci_hcd: release socket [ 599.571978][T15298] vhci_hcd: disconnect device [ 599.691607][T22023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5501'. [ 600.622205][T22040] tipc: Enabled bearer , priority 0 [ 601.561535][T22057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5512'. [ 601.989285][T22067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5515'. [ 602.624339][T22069] netlink: 'syz.1.5517': attribute type 1 has an invalid length. [ 602.854646][T22085] tipc: Enabling of bearer rejected, failed to enable media [ 603.597690][T22101] vivid-007: ================= START STATUS ================= [ 603.600179][T22101] vivid-007: Generate PTS: true [ 603.601763][T22101] vivid-007: Generate SCR: true [ 603.603409][T22101] tpg source WxH: 320x240 (Y'CbCr) [ 603.605041][T22101] tpg field: 1 [ 603.606129][T22101] tpg crop: (0,0)/320x240 [ 603.607529][T22101] tpg compose: (0,0)/320x240 [ 603.608991][T22101] tpg colorspace: 8 [ 603.610208][T22101] tpg transfer function: 0/0 [ 603.611674][T22101] tpg Y'CbCr encoding: 0/0 [ 603.613139][T22101] tpg quantization: 0/0 [ 603.614456][T22101] tpg RGB range: 0/2 [ 603.615722][T22101] vivid-007: ================== END STATUS ================== [ 603.620107][T22101] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 603.622173][T22101] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 603.624644][T22101] vhci_hcd vhci_hcd.0: Device attached [ 603.628096][T22102] vhci_hcd: connection closed [ 603.628220][ T60] vhci_hcd: stop threads [ 603.631151][ T60] vhci_hcd: release socket [ 603.632594][ T60] vhci_hcd: disconnect device [ 605.403551][T22130] tipc: Enabling of bearer rejected, failed to enable media [ 607.681410][T22177] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 607.700696][T22178] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5546'. [ 608.491694][T22191] tipc: Enabling of bearer rejected, already enabled [ 608.521945][T22193] tipc: Enabling of bearer rejected, already enabled [ 609.397875][T22224] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5561'. [ 609.880607][T22234] tipc: Enabled bearer , priority 0 [ 609.883717][T22234] syzkaller0: entered promiscuous mode [ 609.885546][T22234] syzkaller0: entered allmulticast mode [ 609.900715][T22234] tipc: Resetting bearer [ 609.904748][T22233] tipc: Resetting bearer [ 609.913727][T22233] tipc: Disabling bearer [ 610.007139][T22236] vivid-007: ================= START STATUS ================= [ 610.009582][T22236] vivid-007: Generate PTS: true [ 610.011118][T22236] vivid-007: Generate SCR: true [ 610.012952][T22236] tpg source WxH: 320x240 (Y'CbCr) [ 610.014554][T22236] tpg field: 1 [ 610.015640][T22236] tpg crop: (0,0)/320x240 [ 610.017012][T22236] tpg compose: (0,0)/320x240 [ 610.018455][T22236] tpg colorspace: 8 [ 610.019673][T22236] tpg transfer function: 0/0 [ 610.021118][T22236] tpg Y'CbCr encoding: 0/0 [ 610.022520][T22236] tpg quantization: 0/0 [ 610.023889][T22236] tpg RGB range: 0/2 [ 610.025137][T22236] vivid-007: ================== END STATUS ================== [ 610.033138][T22236] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 610.035198][T22236] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 610.037616][T22236] vhci_hcd vhci_hcd.0: Device attached [ 610.045263][T22237] vhci_hcd: connection closed [ 610.050555][T15280] vhci_hcd: stop threads [ 610.054340][T15280] vhci_hcd: release socket [ 610.056223][T15280] vhci_hcd: disconnect device [ 611.096416][T22272] tipc: Enabling of bearer rejected, failed to enable media [ 613.367514][T22305] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 613.375870][T22305] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 615.332745][ T5980] Bluetooth: hci1: command 0x0406 tx timeout [ 615.412790][ T5980] Bluetooth: hci0: command 0x0405 tx timeout [ 615.513528][T22344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5592'. [ 615.516338][T22344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5592'. [ 616.265324][T22353] vivid-007: ================= START STATUS ================= [ 616.268363][T22353] vivid-007: Generate PTS: true [ 616.270302][T22353] vivid-007: Generate SCR: true [ 616.272323][T22353] tpg source WxH: 320x240 (Y'CbCr) [ 616.274523][T22353] tpg field: 1 [ 616.275906][T22353] tpg crop: (0,0)/320x240 [ 616.277622][T22353] tpg compose: (0,0)/320x240 [ 616.279469][T22353] tpg colorspace: 8 [ 616.280705][T22353] tpg transfer function: 0/0 [ 616.282177][T22353] tpg Y'CbCr encoding: 0/0 [ 616.284024][T22353] tpg quantization: 0/0 [ 616.285686][T22353] tpg RGB range: 0/2 [ 616.287252][T22353] vivid-007: ================== END STATUS ================== [ 616.291493][T22353] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 616.293589][T22353] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 616.296046][T22353] vhci_hcd vhci_hcd.0: Device attached [ 616.301040][T22356] vhci_hcd: connection closed [ 616.301239][ T1253] vhci_hcd: stop threads [ 616.304905][ T1253] vhci_hcd: release socket [ 616.306466][ T1253] vhci_hcd: disconnect device [ 616.907588][T22373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5601'. [ 617.906678][T22392] vivid-007: ================= START STATUS ================= [ 617.909193][T22392] vivid-007: Generate PTS: true [ 617.910873][T22392] vivid-007: Generate SCR: true [ 617.912461][T22392] tpg source WxH: 320x240 (Y'CbCr) [ 617.916037][T22392] tpg field: 1 [ 617.917236][T22392] tpg crop: (0,0)/320x240 [ 617.918646][T22392] tpg compose: (0,0)/320x240 [ 617.920171][T22392] tpg colorspace: 8 [ 617.921841][T22392] tpg transfer function: 0/0 [ 617.923471][T22392] tpg Y'CbCr encoding: 0/0 [ 617.927079][T22392] tpg quantization: 0/0 [ 617.930353][T22392] tpg RGB range: 0/2 [ 617.931901][T22392] vivid-007: ================== END STATUS ================== [ 618.118379][T22392] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 618.120484][T22392] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 618.123063][T22392] vhci_hcd vhci_hcd.0: Device attached [ 618.312429][T22393] vhci_hcd: connection closed [ 618.314571][T15317] vhci_hcd: stop threads [ 618.317588][T15317] vhci_hcd: release socket [ 618.319843][T15317] vhci_hcd: disconnect device [ 618.372830][ T7579] usb 49-1: new high-speed USB device number 7 using vhci_hcd [ 618.375837][ T7579] usb 49-1: enqueue for inactive port 0 [ 618.452921][ T7579] vhci_hcd: vhci_device speed not set [ 619.807160][T22420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5623'. [ 619.982460][T22429] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5611'. [ 621.652013][T22448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5617'. [ 623.068171][T22474] vlan4 (unregistering): left promiscuous mode [ 623.071995][T22474] bridge0 (unregistering): left promiscuous mode [ 623.076250][T22474] bridge10: port 1(vlan4) entered disabled state [ 623.468357][T22481] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5628'. [ 623.825961][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.828170][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.976037][T22495] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5634'. [ 624.340814][T22503] overlayfs: failed to clone upperpath [ 625.975925][T22532] vivid-007: ================= START STATUS ================= [ 625.980143][T22532] vivid-007: Generate PTS: true [ 625.986281][T22532] vivid-007: Generate SCR: true [ 625.989496][T22532] tpg source WxH: 320x240 (Y'CbCr) [ 625.991155][T22532] tpg field: 1 [ 625.992272][T22532] tpg crop: (0,0)/320x240 [ 625.993947][T22532] tpg compose: (0,0)/320x240 [ 625.995462][T22532] tpg colorspace: 8 [ 625.996755][T22532] tpg transfer function: 0/0 [ 625.998239][T22532] tpg Y'CbCr encoding: 0/0 [ 625.999696][T22532] tpg quantization: 0/0 [ 626.001045][T22532] tpg RGB range: 0/2 [ 626.002310][T22532] vivid-007: ================== END STATUS ================== [ 626.010579][T22531] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 626.012574][T22531] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 626.016149][T22531] vhci_hcd vhci_hcd.0: Device attached [ 626.019172][T22535] vhci_hcd: connection closed [ 626.024038][T15280] vhci_hcd: stop threads [ 626.026911][T15280] vhci_hcd: release socket [ 626.028332][T15280] vhci_hcd: disconnect device [ 626.152021][T22539] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5645'. [ 629.431045][T22570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5652'. [ 630.172907][T22578] netlink: 'syz.5.5654': attribute type 1 has an invalid length. [ 630.192528][T22578] bond0: entered promiscuous mode [ 630.198966][T22578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.239132][T22578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.253166][T22578] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 630.256672][T22578] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 630.293093][T22578] bond0: (slave ip6gre1): making interface the new active one [ 630.295615][T22578] ip6gre1: entered promiscuous mode [ 630.298151][T22578] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 630.502276][T22582] vivid-007: ================= START STATUS ================= [ 630.505738][T22582] vivid-007: Generate PTS: true [ 630.507717][T22582] vivid-007: Generate SCR: true [ 630.509538][T22582] tpg source WxH: 320x240 (Y'CbCr) [ 630.511638][T22582] tpg field: 1 [ 630.513936][T22582] tpg crop: (0,0)/320x240 [ 630.515761][T22582] tpg compose: (0,0)/320x240 [ 630.517367][T22582] tpg colorspace: 8 [ 630.518702][T22582] tpg transfer function: 0/0 [ 630.520290][T22582] tpg Y'CbCr encoding: 0/0 [ 630.521808][T22582] tpg quantization: 0/0 [ 630.523394][T22582] tpg RGB range: 0/2 [ 630.524805][T22582] vivid-007: ================== END STATUS ================== [ 630.531061][T22582] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 630.533326][T22582] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 630.536477][T22582] vhci_hcd vhci_hcd.0: Device attached [ 630.540984][T22584] vhci_hcd: connection closed [ 630.541148][T15286] vhci_hcd: stop threads [ 630.544178][T15286] vhci_hcd: release socket [ 630.545588][T15286] vhci_hcd: disconnect device [ 631.930461][T22600] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5663'. [ 633.285373][T22638] vivid-007: ================= START STATUS ================= [ 633.287819][T22638] vivid-007: Generate PTS: true [ 633.289378][T22638] vivid-007: Generate SCR: true [ 633.295984][T22638] tpg source WxH: 320x240 (Y'CbCr) [ 633.297680][T22638] tpg field: 1 [ 633.300604][T22638] tpg crop: (0,0)/320x240 [ 633.302030][T22638] tpg compose: (0,0)/320x240 [ 633.307299][T22638] tpg colorspace: 8 [ 633.310518][T22638] tpg transfer function: 0/0 [ 633.315360][T22638] tpg Y'CbCr encoding: 0/0 [ 633.318673][T22638] tpg quantization: 0/0 [ 633.322177][T22638] tpg RGB range: 0/2 [ 633.327695][T22638] vivid-007: ================== END STATUS ================== [ 633.337846][T22638] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 633.339981][T22638] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 633.345012][T22638] vhci_hcd vhci_hcd.0: Device attached [ 633.582888][ T61] usb 49-1: new high-speed USB device number 8 using vhci_hcd [ 634.051281][T22641] vhci_hcd: connection reset by peer [ 634.054316][ T60] vhci_hcd: stop threads [ 634.055716][ T60] vhci_hcd: release socket [ 634.057313][ T60] vhci_hcd: disconnect device [ 634.713981][T22656] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5674'. [ 637.839409][T22705] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5688'. [ 637.845215][T22705] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5688'. [ 637.848764][T22705] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5688'. [ 638.696840][ T61] vhci_hcd: vhci_device speed not set [ 639.172784][ C2] ip6_tnl_xmit_ctl: 3062 callbacks suppressed [ 639.172798][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 639.517285][T22743] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5698'. [ 639.520900][T22743] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5698'. [ 639.667539][T22749] vivid-007: ================= START STATUS ================= [ 639.670038][T22749] vivid-007: Generate PTS: true [ 639.671716][T22749] vivid-007: Generate SCR: true [ 639.673423][T22749] tpg source WxH: 320x240 (Y'CbCr) [ 639.675117][T22749] tpg field: 1 [ 639.676275][T22749] tpg crop: (0,0)/320x240 [ 639.677709][T22749] tpg compose: (0,0)/320x240 [ 639.679251][T22749] tpg colorspace: 8 [ 639.680530][T22749] tpg transfer function: 0/0 [ 639.682098][T22749] tpg Y'CbCr encoding: 0/0 [ 639.683649][T22749] tpg quantization: 0/0 [ 639.685044][T22749] tpg RGB range: 0/2 [ 639.686380][T22749] vivid-007: ================== END STATUS ================== [ 639.691840][T22749] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 639.693996][T22749] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 639.696996][T22749] vhci_hcd vhci_hcd.0: Device attached [ 639.932822][ T7579] usb 49-1: new high-speed USB device number 9 using vhci_hcd [ 640.448450][T22750] vhci_hcd: connection reset by peer [ 640.450386][T15317] vhci_hcd: stop threads [ 640.451797][T15317] vhci_hcd: release socket [ 640.457344][T15317] vhci_hcd: disconnect device [ 641.544468][T22783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5708'. [ 641.548359][T22783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5708'. [ 641.979276][T22791] vivid-007: ================= START STATUS ================= [ 641.981727][T22791] vivid-007: Generate PTS: true [ 641.983443][T22791] vivid-007: Generate SCR: true [ 641.985060][T22791] tpg source WxH: 320x240 (Y'CbCr) [ 641.986718][T22791] tpg field: 1 [ 641.987855][T22791] tpg crop: (0,0)/320x240 [ 641.989230][T22791] tpg compose: (0,0)/320x240 [ 641.990742][T22791] tpg colorspace: 8 [ 641.992000][T22791] tpg transfer function: 0/0 [ 641.993675][T22791] tpg Y'CbCr encoding: 0/0 [ 641.995235][T22791] tpg quantization: 0/0 [ 641.996721][T22791] tpg RGB range: 0/2 [ 641.998110][T22791] vivid-007: ================== END STATUS ================== [ 642.009783][T22791] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 642.011866][T22791] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 642.015855][T22791] vhci_hcd vhci_hcd.0: Device attached [ 642.082219][ T40] kauditd_printk_skb: 72 callbacks suppressed [ 642.082230][ T40] audit: type=1804 audit(1755483276.127:848): pid=22795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5710" name="cgroup.controllers" dev="tmpfs" ino=4774 res=1 errno=0 [ 642.093108][ T40] audit: type=1800 audit(1755483276.137:849): pid=22795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5710" name="cgroup.controllers" dev="tmpfs" ino=4774 res=0 errno=0 [ 642.107642][ T40] audit: type=1800 audit(1755483276.137:850): pid=22795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5710" name="cgroup.controllers" dev="tmpfs" ino=4774 res=0 errno=0 [ 642.761125][T22792] vhci_hcd: connection closed [ 642.762846][T15280] vhci_hcd: stop threads [ 642.768569][T15280] vhci_hcd: release socket [ 642.770311][T15280] vhci_hcd: disconnect device [ 643.046578][T22815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5718'. [ 643.049434][T22815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5718'. [ 643.120096][T22817] team0: Port device dummy0 removed [ 643.143325][T22817] team0: Mode changed to "broadcast" [ 643.149071][T22817] tipc: Enabling of bearer rejected, already enabled [ 643.563739][T22825] lo speed is unknown, defaulting to 1000 [ 644.090682][T22833] overlayfs: failed to clone upperpath [ 644.194006][T22834] vlan0 (unregistering): left promiscuous mode [ 644.201923][T22834] bridge0 (unregistering): left promiscuous mode [ 644.222092][T22834] bridge22: port 1(vlan0) entered disabled state [ 645.180733][ T7579] vhci_hcd: vhci_device speed not set [ 646.047444][T22868] bond9: (slave veth0_to_bond): Releasing active interface [ 646.049478][T22869] overlayfs: failed to clone upperpath [ 646.204363][T22868] bond9: (slave veth15): Releasing active interface [ 646.428070][T22868] bond0: (slave ip6gre1): Releasing backup interface [ 646.430283][T22868] ip6gre1: left promiscuous mode [ 649.053175][T22920] overlayfs: failed to clone upperpath [ 653.354307][T22987] tipc: Resetting bearer [ 653.371259][T22987] team0: Mode changed to "broadcast" [ 653.374412][T22987] tipc: Enabling of bearer rejected, already enabled [ 653.392880][ T61] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 653.432300][ T40] audit: type=1804 audit(1755483287.467:851): pid=22991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.5760" name="/newroot/646/cgroup.controllers" dev="tmpfs" ino=3510 res=1 errno=0 [ 653.439744][ T40] audit: type=1800 audit(1755483287.467:852): pid=22991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5760" name="cgroup.controllers" dev="tmpfs" ino=3510 res=0 errno=0 [ 653.446890][ T40] audit: type=1800 audit(1755483287.477:853): pid=22991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5760" name="cgroup.controllers" dev="tmpfs" ino=3510 res=0 errno=0 [ 653.508964][ T61] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 654.113247][T22998] overlayfs: failed to clone upperpath [ 657.580124][T23043] overlayfs: failed to clone upperpath [ 658.848999][T23071] lo speed is unknown, defaulting to 1000 [ 660.969945][T23109] tipc: Resetting bearer [ 660.993042][ T7579] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 661.274276][ T7579] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 661.395521][T23121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.192386][T23171] vivid-007: ================= START STATUS ================= [ 664.194997][T23171] vivid-007: Generate PTS: true [ 664.196648][T23171] vivid-007: Generate SCR: true [ 664.198280][T23171] tpg source WxH: 320x240 (Y'CbCr) [ 664.199985][T23171] tpg field: 1 [ 664.201150][T23171] tpg crop: (0,0)/320x240 [ 664.202573][T23171] tpg compose: (0,0)/320x240 [ 664.204944][T23171] tpg colorspace: 8 [ 664.206539][T23171] tpg transfer function: 0/0 [ 664.208084][T23171] tpg Y'CbCr encoding: 0/0 [ 664.209516][T23171] tpg quantization: 0/0 [ 664.210858][T23171] tpg RGB range: 0/2 [ 664.212139][T23171] vivid-007: ================== END STATUS ================== [ 664.217404][T23171] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 664.219498][T23171] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 664.222106][T23171] vhci_hcd vhci_hcd.0: Device attached [ 664.362579][T23178] delete_channel: no stack [ 664.472893][ T59] usb 49-1: new high-speed USB device number 10 using vhci_hcd [ 664.966819][T23172] vhci_hcd: connection reset by peer [ 664.968805][T15317] vhci_hcd: stop threads [ 664.970173][T15317] vhci_hcd: release socket [ 664.971627][T15317] vhci_hcd: disconnect device [ 665.766162][T23203] bridge_slave_0: left allmulticast mode [ 665.912439][T23203] xfrm0: left promiscuous mode [ 665.914129][T23203] xfrm0: left allmulticast mode [ 665.916389][T23203] vlan0: left promiscuous mode [ 665.918531][T23203] macsec0: left promiscuous mode [ 665.920722][T23203] gretap1: left promiscuous mode [ 665.922702][T23203] macsec1: left promiscuous mode [ 665.924290][T23203] macsec1: left allmulticast mode [ 665.928942][T23203] bond5: left promiscuous mode [ 665.930733][T23203] bond7: left promiscuous mode [ 665.932998][T23203] bridge5: left promiscuous mode [ 665.934667][T23203] bridge5: left allmulticast mode [ 665.937864][T23203] wireguard0: left promiscuous mode [ 665.939572][T23203] wireguard0: left allmulticast mode [ 665.942184][T23203] bridge6: left promiscuous mode [ 665.943887][T23203] bridge6: left allmulticast mode [ 667.560682][T23233] vivid-007: ================= START STATUS ================= [ 667.563979][T23233] vivid-007: Generate PTS: true [ 667.565888][T23233] vivid-007: Generate SCR: true [ 667.567664][T23233] tpg source WxH: 320x240 (Y'CbCr) [ 667.569297][T23233] tpg field: 1 [ 667.570404][T23233] tpg crop: (0,0)/320x240 [ 667.571790][T23233] tpg compose: (0,0)/320x240 [ 667.573346][T23233] tpg colorspace: 8 [ 667.574570][T23233] tpg transfer function: 0/0 [ 667.576060][T23233] tpg Y'CbCr encoding: 0/0 [ 667.577545][T23233] tpg quantization: 0/0 [ 667.578931][T23233] tpg RGB range: 0/2 [ 667.580356][T23233] vivid-007: ================== END STATUS ================== [ 667.619428][T23233] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 667.621481][T23233] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 667.624210][T23233] vhci_hcd vhci_hcd.0: Device attached [ 668.350599][T23234] vhci_hcd: connection closed [ 668.350789][T15298] vhci_hcd: stop threads [ 668.353991][T15298] vhci_hcd: release socket [ 668.355526][T15298] vhci_hcd: disconnect device [ 668.947739][T23261] vivid-007: ================= START STATUS ================= [ 668.950748][T23261] vivid-007: Generate PTS: true [ 668.952493][T23261] vivid-007: Generate SCR: true [ 668.954384][T23261] tpg source WxH: 320x240 (Y'CbCr) [ 668.956068][T23261] tpg field: 1 [ 668.957166][T23261] tpg crop: (0,0)/320x240 [ 668.958577][T23261] tpg compose: (0,0)/320x240 [ 668.960086][T23261] tpg colorspace: 8 [ 668.961476][T23261] tpg transfer function: 0/0 [ 668.963475][T23261] tpg Y'CbCr encoding: 0/0 [ 668.965277][T23261] tpg quantization: 0/0 [ 668.966614][T23261] tpg RGB range: 0/2 [ 668.967799][T23261] vivid-007: ================== END STATUS ================== [ 668.982173][T23261] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 668.984267][T23261] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 668.987026][T23261] vhci_hcd vhci_hcd.0: Device attached [ 669.424117][T23264] vhci_hcd: connection closed [ 669.424334][T15317] vhci_hcd: stop threads [ 669.427156][T15317] vhci_hcd: release socket [ 669.432739][T15317] vhci_hcd: disconnect device [ 669.562728][ T59] vhci_hcd: vhci_device speed not set [ 670.453387][T23285] bond8: (slave veth0_to_bond): Releasing active interface [ 670.460787][T23285] bond8: (slave veth9): Releasing active interface [ 670.910013][T23299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5843'. [ 672.035245][T23319] block nbd6: NBD_DISCONNECT [ 672.036841][T23319] block nbd6: Send disconnect failed -22 [ 672.038675][T23319] block nbd6: Disconnected due to user request. [ 672.040673][T23319] block nbd6: shutting down sockets [ 672.116288][T23324] sp0: Synchronizing with TNC [ 672.134249][T23324] block nbd6: not configured, cannot reconfigure [ 672.189355][T23326] sp0: Found TNC [ 673.777061][T23356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5860'. [ 674.286819][T23348] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 674.289098][T23348] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 675.009536][T23388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.022754][ C3] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 675.363041][T15308] ------------[ cut here ]------------ [ 675.365407][T15308] WARNING: CPU: 2 PID: 15308 at io_uring/io_uring.c:2981 io_ring_exit_work+0x3fc/0x10a0 [ 675.368454][T15308] Modules linked in: [ 675.370578][T15308] CPU: 2 UID: 0 PID: 15308 Comm: kworker/u32:59 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 675.377257][T15308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 675.381303][T15308] Workqueue: iou_exit io_ring_exit_work [ 675.383565][T15308] RIP: 0010:io_ring_exit_work+0x3fc/0x10a0 [ 675.386090][T15308] Code: 0f 85 b6 0a 00 00 48 8b 05 81 05 4c 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 bf fe e5 fc 4d 85 f6 79 12 e8 45 03 e6 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 33 03 e6 fc 48 8b 74 24 60 [ 675.394126][T15308] RSP: 0018:ffffc90007327a90 EFLAGS: 00010293 [ 675.396709][T15308] RAX: 0000000000000000 RBX: ffff88805ff806c8 RCX: ffffffff84d50c91 [ 675.399992][T15308] RDX: ffff888013b0a440 RSI: ffffffff84d50c9b RDI: 0000000000000007 [ 675.403360][T15308] RBP: ffffc90007327c50 R08: 0000000000000007 R09: 0000000000000000 [ 675.406724][T15308] R10: fffffffffffffffc R11: 0000000000000000 R12: ffff88805ff80000 [ 675.409990][T15308] R13: dffffc0000000000 R14: fffffffffffffffc R15: ffff88805ff80040 [ 675.413331][T15308] FS: 0000000000000000(0000) GS:ffff8880976c6000(0000) knlGS:0000000000000000 [ 675.416823][T15308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 675.419464][T15308] CR2: 000000002ce24220 CR3: 000000004b7a3000 CR4: 0000000000352ef0 [ 675.422840][T15308] Call Trace: [ 675.424300][T15308] [ 675.425568][T15308] ? do_raw_spin_lock+0x12c/0x2b0 [ 675.427751][T15308] ? __pfx_io_ring_exit_work+0x10/0x10 [ 675.430058][T15308] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 675.432523][T15308] ? debug_object_deactivate+0x1ec/0x3a0 [ 675.434915][T15308] ? rcu_is_watching+0x12/0xc0 [ 675.436440][T15308] process_one_work+0x9cc/0x1b70 [ 675.438004][T15308] ? __pfx_process_one_work+0x10/0x10 [ 675.439712][T15308] ? assign_work+0x1a0/0x250 [ 675.441175][T15308] worker_thread+0x6c8/0xf10 [ 675.442847][T15308] ? __kthread_parkme+0x19e/0x250 [ 675.444463][T15308] ? __pfx_worker_thread+0x10/0x10 [ 675.446112][T15308] kthread+0x3c2/0x780 [ 675.447434][T15308] ? __pfx_kthread+0x10/0x10 [ 675.448897][T15308] ? rcu_is_watching+0x12/0xc0 [ 675.450407][T15308] ? __pfx_kthread+0x10/0x10 [ 675.451881][T15308] ret_from_fork+0x5d4/0x6f0 [ 675.453405][T15308] ? __pfx_kthread+0x10/0x10 [ 675.454883][T15308] ret_from_fork_asm+0x1a/0x30 [ 675.456415][T15308] [ 675.457415][T15308] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 675.459683][T15308] CPU: 2 UID: 0 PID: 15308 Comm: kworker/u32:59 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 675.463472][T15308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 675.466806][T15308] Workqueue: iou_exit io_ring_exit_work [ 675.468544][T15308] Call Trace: [ 675.469605][T15308] [ 675.470551][T15308] dump_stack_lvl+0x3d/0x1f0 [ 675.472024][T15308] vpanic+0x6e8/0x7a0 [ 675.473296][T15308] ? __pfx_vpanic+0x10/0x10 [ 675.474739][T15308] ? io_ring_exit_work+0x3fc/0x10a0 [ 675.476376][T15308] panic+0xca/0xd0 [ 675.477570][T15308] ? __pfx_panic+0x10/0x10 [ 675.478989][T15308] ? check_panic_on_warn+0x1f/0xb0 [ 675.480594][T15308] check_panic_on_warn+0xab/0xb0 [ 675.482148][T15308] __warn+0xf6/0x3c0 [ 675.483389][T15308] ? io_ring_exit_work+0x3fc/0x10a0 [ 675.484933][T15308] report_bug+0x3c3/0x580 [ 675.486222][T15308] ? io_ring_exit_work+0x3fc/0x10a0 [ 675.487856][T15308] handle_bug+0x184/0x210 [ 675.489223][T15308] exc_invalid_op+0x17/0x50 [ 675.490666][T15308] asm_exc_invalid_op+0x1a/0x20 [ 675.492186][T15308] RIP: 0010:io_ring_exit_work+0x3fc/0x10a0 [ 675.494007][T15308] Code: 0f 85 b6 0a 00 00 48 8b 05 81 05 4c 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 bf fe e5 fc 4d 85 f6 79 12 e8 45 03 e6 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 33 03 e6 fc 48 8b 74 24 60 [ 675.499961][T15308] RSP: 0018:ffffc90007327a90 EFLAGS: 00010293 [ 675.501857][T15308] RAX: 0000000000000000 RBX: ffff88805ff806c8 RCX: ffffffff84d50c91 [ 675.504107][T15308] RDX: ffff888013b0a440 RSI: ffffffff84d50c9b RDI: 0000000000000007 [ 675.506262][T15308] RBP: ffffc90007327c50 R08: 0000000000000007 R09: 0000000000000000 [ 675.508649][T15308] R10: fffffffffffffffc R11: 0000000000000000 R12: ffff88805ff80000 [ 675.511092][T15308] R13: dffffc0000000000 R14: fffffffffffffffc R15: ffff88805ff80040 [ 675.513531][T15308] ? io_ring_exit_work+0x3f1/0x10a0 [ 675.515163][T15308] ? io_ring_exit_work+0x3fb/0x10a0 [ 675.516808][T15308] ? do_raw_spin_lock+0x12c/0x2b0 [ 675.518388][T15308] ? __pfx_io_ring_exit_work+0x10/0x10 [ 675.520095][T15308] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 675.521898][T15308] ? debug_object_deactivate+0x1ec/0x3a0 [ 675.523698][T15308] ? rcu_is_watching+0x12/0xc0 [ 675.525198][T15308] process_one_work+0x9cc/0x1b70 [ 675.526774][T15308] ? __pfx_process_one_work+0x10/0x10 [ 675.528454][T15308] ? assign_work+0x1a0/0x250 [ 675.529908][T15308] worker_thread+0x6c8/0xf10 [ 675.531365][T15308] ? __kthread_parkme+0x19e/0x250 [ 675.532951][T15308] ? __pfx_worker_thread+0x10/0x10 [ 675.534556][T15308] kthread+0x3c2/0x780 [ 675.535871][T15308] ? __pfx_kthread+0x10/0x10 [ 675.537335][T15308] ? rcu_is_watching+0x12/0xc0 [ 675.538863][T15308] ? __pfx_kthread+0x10/0x10 [ 675.540329][T15308] ret_from_fork+0x5d4/0x6f0 [ 675.541785][T15308] ? __pfx_kthread+0x10/0x10 [ 675.543248][T15308] ret_from_fork_asm+0x1a/0x30 [ 675.544773][T15308] [ 675.546276][T15308] Kernel Offset: disabled [ 675.547644][T15308] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:21:49 Registers: info registers vcpu 0 CPU#0 RAX=0000000000c544df RBX=0000000000000000 RCX=ffffffff8b904bf9 RDX=0000000000000000 RSI=ffffffff8de4bb3e RDI=ffffffff8c162980 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab6c90 R15=0000000000000000 RIP=ffffffff8b90375f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7373a5c CR3=0000000056978000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=8a363805 EBX=00000000 ECX=00000000 EDX=00001805 ESI=8a363805 EDI=ffffffff EBP=f73f0000 ESP=ffde9808 EIP=f708e6de EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 56bb5440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005574570ab000 CR3=000000004b7a3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85614085 RDI=ffffffff9b0f6600 RBP=ffffffff9b0f65c0 RSP=ffffc90007327400 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0f65c0 R15=ffffffff85614020 RIP=ffffffff856140af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002ce24220 CR3=000000004b7a3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff888026c6b000 RCX=ffffffff866a4904 RDX=ffff88801c338000 RSI=ffffffff866a49db RDI=0000000000000004 RBP=0000000000000001 RSP=ffffc900005e8ea0 R8 =0000000000000004 R9 =0000000000000006 R10=0000000000000006 R11=0000000000000000 R12=ffffc90000415008 R13=0000000000000001 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff866a4b59 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002d3fdff8 CR3=0000000060cd5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000