last executing test programs: 4m0.387434859s ago: executing program 3 (id=103): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x78, 0x0, 0x7, {0xe, 0x4, 0x0, {0x1, 0xfffffffffffffff7, 0x1, 0x5, 0x6ff, 0xfa5e, 0x3, 0x0, 0x5, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) write$cgroup_int(r2, 0x0, 0x0) 4m0.22061773s ago: executing program 3 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x164) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0/file0\x00', 0x40800, 0xa1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r2, 0x0, 0x2, 0x0) 4m0.089161778s ago: executing program 3 (id=107): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x13, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4m0.08892567s ago: executing program 3 (id=108): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x1, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0xffffffffffffffb6, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}, 0x1, 0x0, 0x0, 0x40}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m59.990773027s ago: executing program 3 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m59.99054182s ago: executing program 3 (id=110): r0 = io_uring_setup(0x6813, &(0x7f0000000780)={0x0, 0x9860, 0x0, 0x0, 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m44.140127445s ago: executing program 32 (id=110): r0 = io_uring_setup(0x6813, &(0x7f0000000780)={0x0, 0x9860, 0x0, 0x0, 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.270449986s ago: executing program 4 (id=2666): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x101}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x20004808) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r2, &(0x7f0000000740), 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xfffb) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x0) lseek(r2, 0x0, 0x4) 6.683858037s ago: executing program 4 (id=2669): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20024090) close_range(r0, 0xffffffffffffffff, 0x0) 6.36381719s ago: executing program 1 (id=2672): r0 = getpid() ioperm(0x2, 0x5632, 0x400) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(0x0, 0x1, 0x0) sched_setattr(r0, &(0x7f00000009c0)={0x38, 0x0, 0x0, 0x10, 0x3, 0x4, 0x0, 0x2, 0x2, 0x2}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.842006598s ago: executing program 4 (id=2675): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004045) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmdt(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 5.370584755s ago: executing program 2 (id=2678): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 4.672205337s ago: executing program 2 (id=2680): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x89745301ffea7a81}, 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 4.67033252s ago: executing program 4 (id=2681): r0 = socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) alarm(0x7) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x6e}, {@local, 0x4e20, 0x2, 0x2, 0x12d5c, 0x12d5c}}, 0x44) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x700}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x4000) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0xf0f002, 0x2}) 4.648210007s ago: executing program 1 (id=2688): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = open$dir(0x0, 0x141000, 0x80) open_tree(r1, 0x0, 0x89901) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 4.102099997s ago: executing program 4 (id=2682): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xce0a, 0x10100, 0x3, 0x370, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x1c, 0x0, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x1c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) acct(0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r6, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) 4.01849536s ago: executing program 0 (id=2683): socket(0x40000000015, 0x5, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) userfaultfd(0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$tun(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.737846014s ago: executing program 0 (id=2684): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1fc}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000240)=""/32, 0x20}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f00000004c0)=""/235, 0xeb}, {&(0x7f00000003c0)=""/176, 0xb0}], 0x5}}], 0x2, 0x0, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x82, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="ec00000010000100000000000000000000000000000000000000000000000000ac1414aa001b000000000000000000004e200000000000800a0000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000ac1e00010000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063500000a00000000000000"], 0xec}}, 0x4800) write$proc_mixer(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="53594e544820274d6173746572204361707475726520537769746368272030303030303030303030303030303030303030300a50484f4e4549ce0a4d4f4e49544f5220274361707475726520566f6c756d6527203030b030303030303030303030303030303030300a4c494e453220274c696e65272030303030303030303030303030303030303030300a4449474954414c320a3fd7ab9e74a518eb7452be9ccf558f88ba65494f76f5b9ddf694d6ab7c803a29b2b32af1c14b1ace1ab9c3cb6eaff4"], 0x94) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) accept4$ax25(r3, 0x0, 0x0, 0x0) writev(r2, &(0x7f00000023c0)=[{&(0x7f00000020c0)="02a218a2f0bdf14cb2cefdfe8958547030fea59cfda609f009f142d7a34144005c228b502204e8567a986f1a0ba6c2361820e522bfef8ce16103fd2e114ef102b0f3688d1092eb8d09c4f2f2cf4442fbcf03d25a0170c917fb35693e45256869fcc0628750489de3588b7d566969515729", 0x71}], 0x1) 3.664492565s ago: executing program 0 (id=2685): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = io_uring_setup(0x2a2c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffffc}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 3.639754233s ago: executing program 1 (id=2686): socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000400), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000002240)={&(0x7f0000000100)=[0x0], 0x1}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1c) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 3.612440902s ago: executing program 2 (id=2687): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004503002b00000000002f907800000000e0000001248088a80000000000ff000010000800000086dd86dd88be00000000100000000100000000000000080022eb0000000020000000020000000000000000000092be23fb4358855fc3"], 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x28, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x503, 0x65}}}}}, 0x28}}, 0x4000054) 3.588285665s ago: executing program 1 (id=2689): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 3.537392784s ago: executing program 0 (id=2690): r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0xd0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.936134916s ago: executing program 4 (id=2691): ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000500)) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 2.525307288s ago: executing program 2 (id=2692): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x400c890) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001440)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.484835395s ago: executing program 1 (id=2693): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x40000) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x2200077d) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000007, 0x4000010, r1, 0x8000000) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 2.478709694s ago: executing program 2 (id=2701): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.063668962s ago: executing program 1 (id=2694): socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.063460445s ago: executing program 2 (id=2695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x33, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, &(0x7f0000000380)) 1.063319611s ago: executing program 0 (id=2696): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002100)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) socket$packet(0x11, 0x3, 0x300) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 0s ago: executing program 0 (id=2697): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x89745301ffea7a81}, 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 0s ago: executing program 2 (id=2698): socket$packet(0x11, 0x3, 0x300) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "45542f745866c700", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) kernel console output (not intermixed with test programs): ut0 [ 131.312341][ T8989] team0: Mode changed to "broadcast" [ 131.317786][ T8989] vlan0: entered promiscuous mode [ 131.326810][ T8989] team0: Port device vlan0 added [ 131.330539][ T8989] tipc: Enabled bearer , priority 0 [ 131.483772][ T57] usb 6-1: USB disconnect, device number 8 [ 132.033779][ T9018] Invalid ELF header magic: != ELF [ 132.052140][ T9018] Bluetooth: MGMT ver 1.23 [ 132.237651][ T9022] binder: 9021:9022 ioctl c0306201 0 returned -14 [ 132.346904][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.348979][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.358647][ T9022] binder: 9021:9022 ioctl c0306201 0 returned -14 [ 132.583701][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1001'. [ 132.587623][ T9032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1001'. [ 132.590756][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 132.602701][ T9032] raw_sendmsg: syz.0.1001 forgot to set AF_INET. Fix it! [ 132.846858][ T9043] Invalid ELF header magic: != ELF [ 133.034407][ T9057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1009'. [ 133.041179][ T9057] vlan3: entered promiscuous mode [ 133.042839][ T9057] bridge0: entered promiscuous mode [ 133.796409][ T9063] netlink: 'syz.2.1021': attribute type 10 has an invalid length. [ 133.806301][ T9063] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 133.810249][ T9063] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 133.813837][ T9063] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 134.144589][ T1463] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 134.297706][ T1463] usb 9-1: config 1 interface 0 has no altsetting 0 [ 134.301436][ T1463] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 134.304343][ T1463] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.307422][ T1463] usb 9-1: Product: syz [ 134.308793][ T1463] usb 9-1: Manufacturer: syz [ 134.310255][ T1463] usb 9-1: SerialNumber: syz [ 134.681032][ T9087] Invalid ELF header magic: != ELF [ 134.928454][ T1463] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 135.295796][ T5978] usb 9-1: USB disconnect, device number 5 [ 135.300139][ T5978] usblp0: removed [ 135.620405][ T9108] netlink: 'syz.1.1026': attribute type 39 has an invalid length. [ 136.265174][ T9120] 9pnet: Found fid 0 not clunked [ 136.596317][ T40] audit: type=1326 audit(2000000025.639:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.4.1035" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x0 [ 137.158388][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1038'. [ 139.430761][ T9199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1055'. [ 139.434938][ T9199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1055'. [ 139.448137][ T9204] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 139.450509][ T9204] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 139.453739][ T9204] vhci_hcd vhci_hcd.0: Device attached [ 139.460738][ T9204] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 139.463121][ T9204] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.465787][ T9204] vhci_hcd vhci_hcd.0: Device attached [ 139.476485][ T9204] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 139.478703][ T9204] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 139.481349][ T9204] vhci_hcd vhci_hcd.0: Device attached [ 139.486347][ T9204] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 139.488414][ T9204] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 139.491320][ T9204] vhci_hcd vhci_hcd.0: Device attached [ 139.497376][ T9204] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 139.500103][ T9204] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 139.503213][ T9204] vhci_hcd vhci_hcd.0: Device attached [ 139.508578][ T9204] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 139.512500][ T9204] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 139.517777][ T9204] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 139.524165][ T9204] vhci_hcd vhci_hcd.0: port 0 already used [ 139.530515][ T9216] vhci_hcd: connection closed [ 139.531511][ T12] vhci_hcd: stop threads [ 139.534588][ T12] vhci_hcd: release socket [ 139.536024][ T12] vhci_hcd: disconnect device [ 139.537871][ T9214] vhci_hcd: connection closed [ 139.538079][ T9208] vhci_hcd: connection closed [ 139.539697][ T1148] vhci_hcd: stop threads [ 139.542547][ T1148] vhci_hcd: release socket [ 139.543380][ T9206] vhci_hcd: connection closed [ 139.543955][ T1148] vhci_hcd: disconnect device [ 139.544382][ T9210] vhci_hcd: connection closed [ 139.547855][ T1148] vhci_hcd: stop threads [ 139.551095][ T1148] vhci_hcd: release socket [ 139.552985][ T1148] vhci_hcd: disconnect device [ 139.567986][ T1148] vhci_hcd: stop threads [ 139.569736][ T1148] vhci_hcd: release socket [ 139.582722][ T1148] vhci_hcd: disconnect device [ 139.588410][ T1148] vhci_hcd: stop threads [ 139.589761][ T1148] vhci_hcd: release socket [ 139.593453][ T1148] vhci_hcd: disconnect device [ 140.284955][ T873] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 140.435921][ T873] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.439269][ T873] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 140.442053][ T873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.446266][ T873] usb 9-1: config 0 descriptor?? [ 140.659763][ T873] usbhid 9-1:0.0: can't add hid device: -71 [ 140.661745][ T873] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 140.668424][ T873] usb 9-1: USB disconnect, device number 6 [ 141.094665][ T873] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 141.156533][ T9260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1076'. [ 141.197952][ T9260] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 141.208855][ T9260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.264539][ T873] usb 9-1: Using ep0 maxpacket: 32 [ 141.267645][ T873] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.270217][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1078'. [ 141.270913][ T873] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 141.273747][ T9269] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1078'. [ 141.278040][ T873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.287012][ T873] usb 9-1: config 0 descriptor?? [ 141.290802][ T873] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 141.296410][ T873] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 141.380532][ T9273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.444279][ T9273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.499488][ T9273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.895985][ T5978] usb 9-1: USB disconnect, device number 7 [ 141.901549][ T5978] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 142.423884][ T9286] netlink: 'syz.2.1087': attribute type 39 has an invalid length. [ 142.432127][ T9291] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 142.434664][ T9291] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 142.441664][ T9291] vhci_hcd vhci_hcd.0: Device attached [ 142.447767][ T9291] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 142.449942][ T9291] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.452391][ T9291] vhci_hcd vhci_hcd.0: Device attached [ 142.456478][ T9291] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 142.458755][ T9291] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 142.461590][ T9291] vhci_hcd vhci_hcd.0: Device attached [ 142.466384][ T9291] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 142.468459][ T9291] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 142.471194][ T9291] vhci_hcd vhci_hcd.0: Device attached [ 142.475372][ T9291] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 142.477668][ T9291] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 142.480356][ T9291] vhci_hcd vhci_hcd.0: Device attached [ 142.490331][ T9291] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 142.494168][ T9291] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 142.499385][ T9291] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 142.506327][ T9291] vhci_hcd vhci_hcd.0: port 0 already used [ 142.510126][ T9301] vhci_hcd: connection closed [ 142.510228][ T9297] vhci_hcd: connection closed [ 142.510496][ T9299] vhci_hcd: connection closed [ 142.513200][ T9292] vhci_hcd: connection closed [ 142.513581][ T9295] vhci_hcd: connection closed [ 142.514607][ T64] vhci_hcd: stop threads [ 142.514619][ T64] vhci_hcd: release socket [ 142.514627][ T64] vhci_hcd: disconnect device [ 142.515973][ T64] vhci_hcd: stop threads [ 142.524342][ T64] vhci_hcd: release socket [ 142.526321][ T64] vhci_hcd: disconnect device [ 142.528128][ T64] vhci_hcd: stop threads [ 142.530129][ T64] vhci_hcd: release socket [ 142.532186][ T64] vhci_hcd: disconnect device [ 142.534546][ T64] vhci_hcd: stop threads [ 142.535922][ T64] vhci_hcd: release socket [ 142.537523][ T64] vhci_hcd: disconnect device [ 142.539460][ T64] vhci_hcd: stop threads [ 142.540883][ T64] vhci_hcd: release socket [ 142.542316][ T64] vhci_hcd: disconnect device [ 142.601196][ T9306] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 142.605429][ T9306] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 142.695652][ T9306] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 142.704621][ T9306] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 142.780063][ T9306] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 142.783362][ T9306] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 142.879633][ T9306] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 142.882805][ T9306] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 142.969126][ T9306] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 142.971873][ T9306] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 142.984643][ T9306] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 142.987325][ T9306] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 143.000776][ T9306] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 143.004181][ T9306] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 143.023488][ T9306] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 143.027044][ T9306] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 143.307396][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 143.398165][ T9335] overlayfs: failed to clone upperpath [ 143.433507][ T9338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1099'. [ 144.457243][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880132a0400: rx timeout, send abort [ 144.461096][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880132a0400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 144.790626][ T9371] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.801016][ T9376] netlink: 'syz.4.1111': attribute type 10 has an invalid length. [ 144.805638][ T9376] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1111'. [ 144.833285][ T9376] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 144.836435][ T9376] team0: Failed to send options change via netlink (err -105) [ 144.839148][ T9376] team0: Port device geneve0 added [ 144.891300][ T9371] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.002750][ T9371] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.081045][ T9371] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.162765][ T9371] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.170551][ T9371] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.179877][ T9371] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.187897][ T9371] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.479123][ T40] audit: type=1800 audit(2000000034.519:409): pid=9385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1115" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 145.766198][ T9402] netlink: 'syz.4.1123': attribute type 39 has an invalid length. [ 146.642342][ T67] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 148.686066][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1154'. [ 148.877454][ T9509] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 148.880872][ T9509] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 148.984336][ T9518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1163'. [ 148.989869][ T67] Bluetooth: hci2: Malformed LE Event: 0x0d [ 150.019177][ T9556] bridge: RTM_NEWNEIGH with invalid ether address [ 150.051244][ T9558] overlayfs: failed to clone upperpath [ 150.549395][ T9578] loop8: detected capacity change from 0 to 1 [ 150.554848][ T8409] Dev loop8: unable to read RDB block 1 [ 150.557177][ T8409] loop8: unable to read partition table [ 150.559438][ T8409] loop8: partition table beyond EOD, truncated [ 150.564252][ T9578] Dev loop8: unable to read RDB block 1 [ 150.582597][ T9578] loop8: unable to read partition table [ 150.584401][ T9578] loop8: partition table beyond EOD, truncated [ 150.589566][ T9578] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 150.664798][ T67] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 150.668240][ T67] Bluetooth: hci3: Injecting HCI hardware error event [ 150.672659][ T5950] Bluetooth: hci3: hardware error 0x00 [ 150.713262][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1191'. [ 150.725618][ T9590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1190'. [ 150.776213][ T9594] bond0: (slave wlan1): Releasing backup interface [ 150.785162][ T9594] mac80211_hwsim hwsim3 wlan1 (unregistering): left promiscuous mode [ 150.794684][ T9594] mac80211_hwsim hwsim3 wlan1 (unregistering): left allmulticast mode [ 151.476397][ T40] audit: type=1326 audit(2000000040.519:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.1202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 151.483996][ T40] audit: type=1326 audit(2000000040.519:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.1202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 151.491749][ T40] audit: type=1326 audit(2000000040.519:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.1202" exe="/syz-executor" sig=0 arch=40000003 syscall=122 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 151.500682][ T40] audit: type=1326 audit(2000000040.519:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.1202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 151.509344][ T40] audit: type=1326 audit(2000000040.519:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.1202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 152.372537][ T9635] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 152.744592][ T5950] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 152.860803][ T5950] Bluetooth: Frame is too long (len 65, expected len 4) [ 153.673643][ T40] audit: type=1804 audit(2000000042.709:415): pid=9676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1220" name="file0" dev="tmpfs" ino=2160 res=1 errno=0 [ 154.029864][ T9693] overlayfs: failed to clone upperpath [ 154.033301][ T9691] syzkaller0: entered promiscuous mode [ 154.036537][ T9691] syzkaller0: entered allmulticast mode [ 154.410230][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1230'. [ 154.434559][ T5978] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 154.461378][ T9704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1230'. [ 154.491056][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d73b400: Timeout. Failed to send simple message. [ 154.494247][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801274ac00: Timeout. Failed to send simple message. [ 154.497214][ C0] vcan0: j1939_tp_rxtimer: 0xffff888012749400: Timeout. Failed to send simple message. [ 154.500196][ C0] vcan0: j1939_tp_rxtimer: 0xffff888012749c00: Timeout. Failed to send simple message. [ 154.503208][ C0] vcan0: j1939_tp_rxtimer: 0xffff888012748c00: Timeout. Failed to send simple message. [ 154.506263][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801274a400: Timeout. Failed to send simple message. [ 154.509217][ C0] vcan0: j1939_tp_rxtimer: 0xffff888012749000: Timeout. Failed to send simple message. [ 154.512095][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801c389000: Timeout. Failed to send simple message. [ 154.515153][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026ebf000: Timeout. Failed to send simple message. [ 154.518120][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804a593c00: Timeout. Failed to send simple message. [ 154.521085][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804a590800: Timeout. Failed to send simple message. [ 154.524186][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804a593800: Timeout. Failed to send simple message. [ 154.527322][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804af89c00: Timeout. Failed to send simple message. [ 154.530322][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804af8b800: Timeout. Failed to send simple message. [ 154.533473][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804af8b000: Timeout. Failed to send simple message. [ 154.536585][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066f03000: Timeout. Failed to send simple message. [ 154.539806][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066f03400: Timeout. Failed to send simple message. [ 154.542812][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066f02800: Timeout. Failed to send simple message. [ 154.545975][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077108000: Timeout. Failed to send simple message. [ 154.549009][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077108400: Timeout. Failed to send simple message. [ 154.551929][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077108800: Timeout. Failed to send simple message. [ 154.554936][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077108c00: Timeout. Failed to send simple message. [ 154.557851][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077109000: Timeout. Failed to send simple message. [ 154.560817][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077109400: Timeout. Failed to send simple message. [ 154.563760][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077109800: Timeout. Failed to send simple message. [ 154.566743][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077109c00: Timeout. Failed to send simple message. [ 154.569707][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807710a000: Timeout. Failed to send simple message. [ 154.572635][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807710a400: Timeout. Failed to send simple message. [ 154.575598][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807710a800: Timeout. Failed to send simple message. [ 154.578447][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807710ac00: Timeout. Failed to send simple message. [ 154.581309][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807710b000: Timeout. Failed to send simple message. [ 154.584204][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807710b400: Timeout. Failed to send simple message. [ 154.585245][ T5978] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 154.587099][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807710b800: Timeout. Failed to send simple message. [ 154.590887][ T5978] usb 9-1: config 0 has no interfaces? [ 154.593018][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807710bc00: Timeout. Failed to send simple message. [ 154.596160][ T5978] usb 9-1: config 0 has no interfaces? [ 154.598118][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806f57b000: Timeout. Failed to send simple message. [ 154.598146][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806f578000: Timeout. Failed to send simple message. [ 154.601206][ T5978] usb 9-1: config 0 has no interfaces? [ 154.603124][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806f57a800: Timeout. Failed to send simple message. [ 154.603160][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806b63c800: Timeout. Failed to send simple message. [ 154.609487][ T5978] usb 9-1: config 0 has no interfaces? [ 154.611519][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806b63d000: Timeout. Failed to send simple message. [ 154.611547][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dcb4000: Timeout. Failed to send simple message. [ 154.616374][ T5978] usb 9-1: config 0 has no interfaces? [ 154.616911][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dcb4800: Timeout. Failed to send simple message. [ 154.616937][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ab30000: Timeout. Failed to send simple message. [ 154.621478][ T5978] usb 9-1: config 0 has no interfaces? [ 154.623470][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ab32400: Timeout. Failed to send simple message. [ 154.623496][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ab33c00: Timeout. Failed to send simple message. [ 154.626693][ T5978] usb 9-1: config 0 has no interfaces? [ 154.628579][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ab31c00: Timeout. Failed to send simple message. [ 154.628606][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ab30c00: Timeout. Failed to send simple message. [ 154.633157][ T5978] usb 9-1: config 0 has no interfaces? [ 154.633890][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ab32000: Timeout. Failed to send simple message. [ 154.633921][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ab30400: Timeout. Failed to send simple message. [ 154.640104][ T5978] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 154.640634][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ab30800: Timeout. Failed to send simple message. [ 154.642912][ T5978] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 154.645599][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ab32800: Timeout. Failed to send simple message. [ 154.645625][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806add8400: Timeout. Failed to send simple message. [ 154.649303][ T5978] usb 9-1: Product: syz [ 154.650880][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806add8000: Timeout. Failed to send simple message. [ 154.650911][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806addac00: Timeout. Failed to send simple message. [ 154.654638][ T5978] usb 9-1: Manufacturer: syz [ 154.657557][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069d43400: Timeout. Failed to send simple message. [ 154.660952][ T5978] usb 9-1: SerialNumber: syz [ 154.663864][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069d40400: Timeout. Failed to send simple message. [ 154.670346][ T5978] usb 9-1: config 0 descriptor?? [ 154.672741][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069d42400: Timeout. Failed to send simple message. [ 154.693233][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069d40c00: Timeout. Failed to send simple message. [ 154.696327][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069d40800: Timeout. Failed to send simple message. [ 154.699153][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069d42c00: Timeout. Failed to send simple message. [ 154.702020][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069d43800: Timeout. Failed to send simple message. [ 154.705230][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069d41c00: Timeout. Failed to send simple message. [ 154.708406][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069d41000: Timeout. Failed to send simple message. [ 154.711887][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069d43000: Timeout. Failed to send simple message. [ 154.715176][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069d41800: Timeout. Failed to send simple message. [ 154.718534][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a14b000: Timeout. Failed to send simple message. [ 154.721939][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a14a800: Timeout. Failed to send simple message. [ 154.725466][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a14ac00: Timeout. Failed to send simple message. [ 154.728600][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066f77c00: Timeout. Failed to send simple message. [ 154.732035][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dd63000: Timeout. Failed to send simple message. [ 154.735498][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dd63400: Timeout. Failed to send simple message. [ 154.738808][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dd62000: Timeout. Failed to send simple message. [ 154.741596][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dd62800: Timeout. Failed to send simple message. [ 154.744544][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880702bf800: Timeout. Failed to send simple message. [ 154.747441][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880702bf400: Timeout. Failed to send simple message. [ 154.750803][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804aca5c00: Timeout. Failed to send simple message. [ 154.754239][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e7d4000: Timeout. Failed to send simple message. [ 154.757704][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e7d5800: Timeout. Failed to send simple message. [ 154.761134][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e7d5400: Timeout. Failed to send simple message. [ 154.764577][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e7d4400: Timeout. Failed to send simple message. [ 154.767937][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805334ec00: Timeout. Failed to send simple message. [ 154.771501][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805334e400: Timeout. Failed to send simple message. [ 154.774703][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805334f800: Timeout. Failed to send simple message. [ 154.777711][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805334f000: Timeout. Failed to send simple message. [ 154.781028][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805334e800: Timeout. Failed to send simple message. [ 154.784410][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805334fc00: Timeout. Failed to send simple message. [ 154.787454][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805334f400: Timeout. Failed to send simple message. [ 154.790878][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805334e000: Timeout. Failed to send simple message. [ 154.794117][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a7a3000: Timeout. Failed to send simple message. [ 154.797153][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a7a2000: Timeout. Failed to send simple message. [ 154.800322][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a7a0000: Timeout. Failed to send simple message. [ 154.803642][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a7a0c00: Timeout. Failed to send simple message. [ 154.806737][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a7a0400: Timeout. Failed to send simple message. [ 154.809801][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a9e5400: Timeout. Failed to send simple message. [ 154.813119][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a9e5000: Timeout. Failed to send simple message. [ 154.816174][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804a4e1000: Timeout. Failed to send simple message. [ 154.819634][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804a4e0c00: Timeout. Failed to send simple message. [ 154.822980][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804a4e1400: Timeout. Failed to send simple message. [ 154.826218][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de65000: Timeout. Failed to send simple message. [ 154.829143][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de64800: Timeout. Failed to send simple message. [ 154.832125][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de65800: Timeout. Failed to send simple message. [ 154.835178][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de65400: Timeout. Failed to send simple message. [ 154.838395][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de67800: Timeout. Failed to send simple message. [ 154.841410][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de64400: Timeout. Failed to send simple message. [ 154.844826][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de64c00: Timeout. Failed to send simple message. [ 154.848201][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de64000: Timeout. Failed to send simple message. [ 154.851169][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f7a3000: Timeout. Failed to send simple message. [ 154.854135][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f7a0c00: Timeout. Failed to send simple message. [ 154.857184][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f7a1000: Timeout. Failed to send simple message. [ 154.860113][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f7a2000: Timeout. Failed to send simple message. [ 154.863098][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f7a3400: Timeout. Failed to send simple message. [ 154.866113][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f7a1400: Timeout. Failed to send simple message. [ 154.869251][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f7a1800: Timeout. Failed to send simple message. [ 154.872394][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f7a3c00: Timeout. Failed to send simple message. [ 154.875871][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f7a0800: Timeout. Failed to send simple message. [ 154.879563][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804dba9000: Timeout. Failed to send simple message. [ 154.883023][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804dbaac00: Timeout. Failed to send simple message. [ 154.886158][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880503a8c00: Timeout. Failed to send simple message. [ 154.889513][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880503aa400: Timeout. Failed to send simple message. [ 154.893033][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880503a9800: Timeout. Failed to send simple message. [ 154.896328][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880503aa000: Timeout. Failed to send simple message. [ 154.899192][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880503aac00: Timeout. Failed to send simple message. [ 154.902603][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880503aa800: Timeout. Failed to send simple message. [ 154.905818][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880503a8800: Timeout. Failed to send simple message. [ 154.909209][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880503a8000: Timeout. Failed to send simple message. [ 154.912849][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880503ab400: Timeout. Failed to send simple message. [ 154.916195][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880503abc00: Timeout. Failed to send simple message. [ 154.919228][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880503a9c00: Timeout. Failed to send simple message. [ 154.922482][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880503a9400: Timeout. Failed to send simple message. [ 154.925563][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069f8a800: Timeout. Failed to send simple message. [ 154.928671][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069f8a400: Timeout. Failed to send simple message. [ 154.931729][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069f8a000: Timeout. Failed to send simple message. [ 154.935217][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069f8b400: Timeout. Failed to send simple message. [ 154.938311][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069f8b000: Timeout. Failed to send simple message. [ 154.940510][ T24] usb 9-1: USB disconnect, device number 8 [ 154.941632][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069f8ac00: Timeout. Failed to send simple message. [ 154.941659][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806b639c00: Timeout. Failed to send simple message. [ 154.941684][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806adbcc00: Timeout. Failed to send simple message. [ 154.954247][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806adbe000: Timeout. Failed to send simple message. [ 154.957323][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806adbd400: Timeout. Failed to send simple message. [ 154.960445][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806adbec00: Timeout. Failed to send simple message. [ 154.963572][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806adbf400: Timeout. Failed to send simple message. [ 154.966848][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806adbd800: Timeout. Failed to send simple message. [ 154.969915][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806adbd000: Timeout. Failed to send simple message. [ 154.972796][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806adbdc00: Timeout. Failed to send simple message. [ 154.975809][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806f9bd000: Timeout. Failed to send simple message. [ 154.978612][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806f9bd400: Timeout. Failed to send simple message. [ 154.981705][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e324000: Timeout. Failed to send simple message. [ 154.985071][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e324400: Timeout. Failed to send simple message. [ 154.988548][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e325400: Timeout. Failed to send simple message. [ 154.992064][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e327000: Timeout. Failed to send simple message. [ 154.995368][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e324800: Timeout. Failed to send simple message. [ 154.998395][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e326400: Timeout. Failed to send simple message. [ 155.001311][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e324c00: Timeout. Failed to send simple message. [ 155.004422][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e326c00: Timeout. Failed to send simple message. [ 155.007831][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069eb6800: Timeout. Failed to send simple message. [ 155.011135][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069eb5800: Timeout. Failed to send simple message. [ 155.014012][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069eb5c00: Timeout. Failed to send simple message. [ 155.017017][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069eb6400: Timeout. Failed to send simple message. [ 155.020329][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069eb6c00: Timeout. Failed to send simple message. [ 155.023309][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069eb7000: Timeout. Failed to send simple message. [ 155.026420][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de41400: Timeout. Failed to send simple message. [ 155.029426][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de41000: Timeout. Failed to send simple message. [ 155.032427][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de40c00: Timeout. Failed to send simple message. [ 155.035487][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de43000: Timeout. Failed to send simple message. [ 155.038491][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de43400: Timeout. Failed to send simple message. [ 155.041507][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de42800: Timeout. Failed to send simple message. [ 155.044578][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de43800: Timeout. Failed to send simple message. [ 155.047547][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de42c00: Timeout. Failed to send simple message. [ 155.050529][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de41800: Timeout. Failed to send simple message. [ 155.053675][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805de40800: Timeout. Failed to send simple message. [ 155.057132][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880503db400: Timeout. Failed to send simple message. [ 155.060077][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880503d9400: Timeout. Failed to send simple message. [ 155.062948][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880503d9800: Timeout. Failed to send simple message. [ 155.065889][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806aeb5800: Timeout. Failed to send simple message. [ 155.068756][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806aeb7c00: Timeout. Failed to send simple message. [ 155.071626][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021d72400: Timeout. Failed to send simple message. [ 155.074571][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021d73c00: Timeout. Failed to send simple message. [ 155.077448][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021d73800: Timeout. Failed to send simple message. [ 155.080527][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021d72800: Timeout. Failed to send simple message. [ 155.083740][ C0] vcan0: j1939_tp_rxtimer: 0xffff888000a07c00: Timeout. Failed to send simple message. [ 155.087191][ C0] vcan0: j1939_tp_rxtimer: 0xffff888000a07800: Timeout. Failed to send simple message. [ 155.090284][ C0] vcan0: j1939_tp_rxtimer: 0xffff888000a07400: Timeout. Failed to send simple message. [ 155.093480][ C0] vcan0: j1939_tp_rxtimer: 0xffff888000a07000: Timeout. Failed to send simple message. [ 155.096888][ C0] vcan0: j1939_tp_rxtimer: 0xffff888000a06c00: Timeout. Failed to send simple message. [ 155.100251][ C0] vcan0: j1939_tp_rxtimer: 0xffff888000a06800: Timeout. Failed to send simple message. [ 155.103260][ C0] vcan0: j1939_tp_rxtimer: 0xffff888000a05000: Timeout. Failed to send simple message. [ 155.106335][ C0] vcan0: j1939_tp_rxtimer: 0xffff888000a04c00: Timeout. Failed to send simple message. [ 155.109427][ C0] vcan0: j1939_tp_rxtimer: 0xffff888000a04800: Timeout. Failed to send simple message. [ 155.112874][ C0] vcan0: j1939_tp_rxtimer: 0xffff888000a04400: Timeout. Failed to send simple message. [ 155.116178][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802325e400: Timeout. Failed to send simple message. [ 155.119293][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802325c800: Timeout. Failed to send simple message. [ 155.122564][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802325cc00: Timeout. Failed to send simple message. [ 155.125949][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802325d400: Timeout. Failed to send simple message. [ 155.129260][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802325d800: Timeout. Failed to send simple message. [ 155.132472][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802325d000: Timeout. Failed to send simple message. [ 155.135946][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805beca800: Timeout. Failed to send simple message. [ 155.139338][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065528400: Timeout. Failed to send simple message. [ 155.142892][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065529400: Timeout. Failed to send simple message. [ 155.146200][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065529000: Timeout. Failed to send simple message. [ 155.149642][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065528c00: Timeout. Failed to send simple message. [ 155.152856][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065528000: Timeout. Failed to send simple message. [ 155.156164][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806552b400: Timeout. Failed to send simple message. [ 155.159387][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806552ac00: Timeout. Failed to send simple message. [ 155.162626][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806552b000: Timeout. Failed to send simple message. [ 155.166150][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880691a7000: Timeout. Failed to send simple message. [ 155.169549][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a28b400: Timeout. Failed to send simple message. [ 155.172851][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a28a400: Timeout. Failed to send simple message. [ 155.176070][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e20f000: Timeout. Failed to send simple message. [ 155.178964][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a290c00: Timeout. Failed to send simple message. [ 155.181943][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a291400: Timeout. Failed to send simple message. [ 155.185022][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a290800: Timeout. Failed to send simple message. [ 155.187995][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a292c00: Timeout. Failed to send simple message. [ 155.191384][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a293000: Timeout. Failed to send simple message. [ 155.194386][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a291800: Timeout. Failed to send simple message. [ 155.197450][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a290000: Timeout. Failed to send simple message. [ 155.200448][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a293400: Timeout. Failed to send simple message. [ 155.203403][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804a7a0400: Timeout. Failed to send simple message. [ 155.206454][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804a7a0800: Timeout. Failed to send simple message. [ 155.209448][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806b216800: Timeout. Failed to send simple message. [ 155.212456][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a16e400: Timeout. Failed to send simple message. [ 155.215540][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069ea2400: Timeout. Failed to send simple message. [ 155.218501][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069ea2c00: Timeout. Failed to send simple message. [ 155.912502][ T9696] Set syz1 is full, maxelem 65536 reached [ 156.327488][ T40] audit: type=1326 audit(2000000045.369:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9709 comm="syz.0.1235" exe="/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf710e579 code=0x0 [ 156.372608][ T9714] kvm: pic: single mode not supported [ 156.372620][ T9714] kvm: pic: level sensitive irq not supported [ 156.375025][ T9714] kvm: pic: single mode not supported [ 156.376962][ T9714] kvm: pic: level sensitive irq not supported [ 156.378936][ T9714] kvm: pic: single mode not supported [ 156.381140][ T9714] kvm: pic: level sensitive irq not supported [ 156.383182][ T9714] kvm: pic: single mode not supported [ 156.385187][ T9714] kvm: pic: level sensitive irq not supported [ 156.388244][ T9714] kvm: pic: single mode not supported [ 156.390114][ T9714] kvm: pic: level sensitive irq not supported [ 156.392039][ T9714] kvm: pic: single mode not supported [ 156.393891][ T9714] kvm: pic: level sensitive irq not supported [ 156.396485][ T9714] kvm: pic: single mode not supported [ 156.398413][ T9714] kvm: pic: level sensitive irq not supported [ 156.400380][ T9714] kvm: pic: single mode not supported [ 156.402289][ T9714] kvm: pic: level sensitive irq not supported [ 156.404250][ T9714] kvm: pic: single mode not supported [ 156.406785][ T9714] kvm: pic: level sensitive irq not supported [ 156.409838][ T9714] kvm: pic: single mode not supported [ 156.411757][ T9714] kvm: pic: level sensitive irq not supported [ 156.617395][ T9725] netlink: 'syz.4.1239': attribute type 1 has an invalid length. [ 156.645624][ T9725] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.648225][ T9725] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.650762][ T9725] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.653461][ T9725] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.657040][ T9725] bond2: (slave geneve2): making interface the new active one [ 156.659663][ T9725] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 156.894359][ T9739] netlink: 'syz.4.1245': attribute type 4 has an invalid length. [ 157.008922][ T9741] tipc: Enabled bearer , priority 0 [ 157.012685][ T9740] tipc: Resetting bearer [ 157.597610][ T9753] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 158.010119][ T9740] tipc: Disabling bearer [ 159.932547][ T9802] ref_ctr increment failed for inode: 0x8c8 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880127c9e00 [ 159.933211][ T40] audit: type=1804 audit(2000000048.969:417): pid=9802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1276" name="file0" dev="tmpfs" ino=2248 res=1 errno=0 [ 159.937243][ T9800] uprobe: syz.0.1276:9800 failed to unregister, leaking uprobe [ 160.115945][ T40] audit: type=1800 audit(2000000049.149:418): pid=9812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1269" name="nullb0" dev="tmpfs" ino=2259 res=0 errno=0 [ 160.160698][ T9821] usb usb9: usbfs: process 9821 (syz.2.1274) did not claim interface 9 before use [ 160.468677][ T9846] overlayfs: failed to clone upperpath [ 160.606346][ T9853] netlink: 'syz.2.1289': attribute type 11 has an invalid length. [ 160.608674][ T9853] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1289'. [ 161.415593][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1306'. [ 161.868300][ T40] audit: type=1804 audit(2000000050.909:419): pid=9906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1311" name="/newroot/318/file0" dev="tmpfs" ino=1880 res=1 errno=0 [ 161.868778][ T9906] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1 [ 161.878211][ T9906] ref_ctr increment failed for inode: 0x758 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880127ce400 [ 162.541221][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'. [ 162.887903][ T9931] loop6: detected capacity change from 0 to 67108927 [ 162.901046][ T8409] Buffer I/O error on dev loop6, logical block 8388592, async page read [ 163.126629][ T9944] netlink: 'syz.4.1324': attribute type 7 has an invalid length. [ 163.128934][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1324'. [ 163.150071][ T9909] Set syz1 is full, maxelem 65536 reached [ 163.472978][ T9965] overlayfs: failed to clone upperpath [ 163.934745][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 164.096794][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.100108][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 164.107172][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 164.110131][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 164.112985][ T9] usb 6-1: Manufacturer: syz [ 164.117928][ T9] usb 6-1: config 0 descriptor?? [ 164.266850][ T9994] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 50009418, magic 94 != 6b] [ 164.322807][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1347'. [ 164.326537][T10001] netlink: 'syz.4.1347': attribute type 5 has an invalid length. [ 164.328785][T10001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1347'. [ 164.331952][ T24] usb 6-1: USB disconnect, device number 9 [ 164.334963][T10001] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 164.337381][T10001] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 164.339903][T10001] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 164.342244][T10001] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 164.345216][T10001] geneve3: entered promiscuous mode [ 164.346851][T10001] geneve3: entered allmulticast mode [ 164.695485][T10025] kvm: pic: non byte read [ 164.698202][T10025] pic_ioport_write: 4 callbacks suppressed [ 164.698213][T10025] kvm: pic: level sensitive irq not supported [ 164.705003][T10025] kvm: pic: non byte read [ 164.716531][T10025] kvm: pic: level sensitive irq not supported [ 164.717208][T10025] kvm: pic: non byte read [ 164.724237][T10025] kvm: pic: level sensitive irq not supported [ 164.725456][T10025] kvm: pic: non byte read [ 164.729585][T10025] kvm: pic: level sensitive irq not supported [ 164.729814][T10025] kvm: pic: non byte read [ 164.733970][T10025] kvm: pic: level sensitive irq not supported [ 164.734201][T10025] kvm: pic: non byte read [ 164.738758][T10025] kvm: pic: level sensitive irq not supported [ 164.738988][T10025] kvm: pic: non byte read [ 164.743897][T10025] kvm: pic: level sensitive irq not supported [ 164.744127][T10025] kvm: pic: non byte read [ 164.750888][T10025] kvm: pic: level sensitive irq not supported [ 164.751211][T10025] kvm: pic: non byte read [ 164.757471][T10025] kvm: pic: level sensitive irq not supported [ 164.757705][T10025] kvm: pic: non byte read [ 164.762177][T10025] kvm: pic: level sensitive irq not supported [ 165.332759][T10065] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 165.337592][T10065] overlayfs: failed to set xattr on upper [ 165.339661][T10065] overlayfs: ...falling back to redirect_dir=nofollow. [ 165.342141][T10065] overlayfs: ...falling back to index=off. [ 165.344224][T10065] overlayfs: ...falling back to uuid=null. [ 165.346054][T10065] overlayfs: failed to clone lowerpath [ 165.425541][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 165.428386][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 165.430375][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 165.459653][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1378'. [ 165.674584][ T9] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 165.856120][ T9] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.859414][ T9] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 165.862825][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 165.874602][ T9] usb 7-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 165.878062][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.882126][ T9] usb 7-1: config 0 descriptor?? [ 165.884130][T10075] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 166.085177][T10091] netlink: 'syz.1.1382': attribute type 10 has an invalid length. [ 166.088448][T10091] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1382'. [ 166.098125][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 166.100624][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 166.113156][ T9] usb 7-1: USB disconnect, device number 7 [ 166.248340][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1385'. [ 167.305581][ T40] audit: type=1800 audit(2000000056.349:420): pid=10115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1388" name="/" dev="fuse" ino=0 res=0 errno=0 [ 167.467352][ T67] Bluetooth: hci4: command 0x1003 tx timeout [ 167.470839][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 167.720891][T10143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1399'. [ 167.759067][T10141] pic_ioport_write: 4 callbacks suppressed [ 167.759086][T10141] kvm: pic: single mode not supported [ 167.764273][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 167.765618][T10141] kvm: pic: single mode not supported [ 167.781017][T10141] kvm: pic: single mode not supported [ 167.877412][T10148] overlayfs: failed to clone upperpath [ 167.912475][T10151] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 167.966370][T10159] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 168.724571][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 168.915193][ T9] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 168.918345][ T9] usb 7-1: config 0 has no interfaces? [ 168.920809][ T9] usb 7-1: config 0 has no interfaces? [ 168.923302][ T9] usb 7-1: config 0 has no interfaces? [ 168.934927][ T9] usb 7-1: config 0 has no interfaces? [ 168.937464][ T9] usb 7-1: config 0 has no interfaces? [ 168.939994][ T9] usb 7-1: config 0 has no interfaces? [ 168.942525][ T9] usb 7-1: config 0 has no interfaces? [ 168.945236][ T9] usb 7-1: config 0 has no interfaces? [ 168.948805][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 168.951507][ T9] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 168.954100][ T9] usb 7-1: Product: syz [ 168.955870][ T9] usb 7-1: Manufacturer: syz [ 168.957335][ T9] usb 7-1: SerialNumber: syz [ 168.964844][ T9] usb 7-1: config 0 descriptor?? [ 169.241374][ T34] usb 7-1: USB disconnect, device number 8 [ 169.247601][T10175] orangefs_mount: mount request failed with -4 [ 169.510951][T10177] Set syz1 is full, maxelem 65536 reached [ 169.586101][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'. [ 169.620809][T10216] tipc: Enabling of bearer rejected, failed to enable media [ 170.275026][ T67] Bluetooth: hci2: command 0x0406 tx timeout [ 170.345533][T10228] Set syz1 is full, maxelem 65536 reached [ 170.823421][T10255] netlink: 'syz.4.1442': attribute type 4 has an invalid length. [ 170.827186][T10255] netlink: 'syz.4.1442': attribute type 4 has an invalid length. [ 170.942074][T10262] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1 [ 170.944837][ T40] audit: type=1804 audit(2000000059.979:421): pid=10262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1445" name="file0" dev="tmpfs" ino=2584 res=1 errno=0 [ 170.954741][T10262] ref_ctr increment failed for inode: 0xa18 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88806d69bc00 [ 171.034410][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1447'. [ 171.233354][T10280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1450'. [ 171.319035][T10286] overlayfs: failed to clone upperpath [ 171.399714][T10291] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.458692][T10291] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.529758][T10291] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.598118][T10291] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.682558][T10291] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.693219][T10291] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.704354][T10291] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.717667][T10291] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.793005][T10297] overlayfs: failed to clone upperpath [ 172.654782][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 172.806576][ T24] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 172.810483][ T24] usb 6-1: config 0 has no interfaces? [ 172.812958][ T24] usb 6-1: config 0 has no interfaces? [ 172.815580][ T24] usb 6-1: config 0 has no interfaces? [ 172.818028][ T24] usb 6-1: config 0 has no interfaces? [ 172.821528][ T24] usb 6-1: config 0 has no interfaces? [ 172.825718][ T24] usb 6-1: config 0 has no interfaces? [ 172.825937][ T40] audit: type=1804 audit(2000000061.869:422): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1465" name="/newroot/253/file0" dev="tmpfs" ino=1443 res=1 errno=0 [ 172.828693][ T24] usb 6-1: config 0 has no interfaces? [ 172.837380][ T24] usb 6-1: config 0 has no interfaces? [ 172.840697][ T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 172.843481][ T24] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 172.846165][ T24] usb 6-1: Product: syz [ 172.847472][ T24] usb 6-1: Manufacturer: syz [ 172.848950][ T24] usb 6-1: SerialNumber: syz [ 172.852603][ T24] usb 6-1: config 0 descriptor?? [ 172.919175][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1469'. [ 172.975100][T10333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1471'. [ 173.066671][ T34] usb 6-1: USB disconnect, device number 10 [ 173.181052][T10346] bridge0: port 4(syz_tun) entered blocking state [ 173.183656][T10346] bridge0: port 4(syz_tun) entered disabled state [ 173.186755][T10346] syz_tun: entered allmulticast mode [ 173.190135][T10346] syz_tun: entered promiscuous mode [ 173.622830][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802609d800: rx timeout, send abort [ 173.626449][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802609d800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 173.966841][ T40] audit: type=1804 audit(2000000063.009:423): pid=10387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1492" name="file0" dev="tmpfs" ino=2651 res=1 errno=0 [ 173.968606][T10386] uprobe: syz.0.1492:10386 failed to unregister, leaking uprobe [ 174.105616][T10394] netlink: 'syz.0.1494': attribute type 39 has an invalid length. [ 174.294574][ T6000] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 174.399556][T10390] Set syz1 is full, maxelem 65536 reached [ 174.445066][ T6000] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 174.449886][ T6000] usb 9-1: config 0 has no interfaces? [ 174.452746][ T6000] usb 9-1: config 0 has no interfaces? [ 174.456022][ T6000] usb 9-1: config 0 has no interfaces? [ 174.458837][ T6000] usb 9-1: config 0 has no interfaces? [ 174.461659][ T6000] usb 9-1: config 0 has no interfaces? [ 174.464772][ T6000] usb 9-1: config 0 has no interfaces? [ 174.467660][ T6000] usb 9-1: config 0 has no interfaces? [ 174.470492][ T6000] usb 9-1: config 0 has no interfaces? [ 174.474094][ T6000] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 174.477740][ T6000] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 174.480921][ T6000] usb 9-1: Product: syz [ 174.482545][ T6000] usb 9-1: Manufacturer: syz [ 174.484352][ T6000] usb 9-1: SerialNumber: syz [ 174.487453][ T6000] usb 9-1: config 0 descriptor?? [ 174.749679][ T835] usb 9-1: USB disconnect, device number 9 [ 174.897634][T10423] netlink: 'syz.2.1505': attribute type 39 has an invalid length. [ 175.296736][T10436] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 175.320524][T10436] tipc: Enabled bearer , priority 10 [ 175.525270][T10452] Set syz1 is full, maxelem 65536 reached [ 176.057806][ T40] audit: type=1326 audit(2000000065.099:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.0.1523" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 176.917018][T10485] uprobe: syz.0.1528:10485 failed to unregister, leaking uprobe [ 177.124912][T10495] netlink: 'syz.2.1533': attribute type 39 has an invalid length. [ 177.917668][T10514] overlayfs: failed to clone upperpath [ 177.959555][T10517] overlayfs: failed to clone upperpath [ 178.028804][T10520] vlan0: entered promiscuous mode [ 178.396727][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1549'. [ 178.478648][ T40] audit: type=1326 audit(2000000067.519:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.4.1553" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 178.494520][ T40] audit: type=1326 audit(2000000067.519:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.4.1553" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 178.501090][ T40] audit: type=1326 audit(2000000067.519:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.4.1553" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 178.515832][ T40] audit: type=1326 audit(2000000067.519:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.4.1553" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 178.522497][ T40] audit: type=1326 audit(2000000067.519:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.4.1553" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 178.539684][ T40] audit: type=1326 audit(2000000067.519:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.4.1553" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 178.547355][ T40] audit: type=1326 audit(2000000067.519:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.4.1553" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 178.554087][ T40] audit: type=1326 audit(2000000067.519:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.4.1553" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 178.561852][ T40] audit: type=1326 audit(2000000067.519:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.4.1553" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 178.568623][ T40] audit: type=1326 audit(2000000067.519:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.4.1553" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 178.667241][T10560] wireguard0: entered promiscuous mode [ 178.672027][T10560] wireguard0: entered allmulticast mode [ 180.019416][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1570'. [ 180.023183][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1570'. [ 180.062297][T10591] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 180.274274][T10604] tipc: Failed to remove unknown binding: 66,1,1/4:264305882/264305884 [ 180.277945][T10604] tipc: Failed to remove unknown binding: 66,1,1/4:264305882/264305884 [ 180.280499][T10604] tipc: Failed to remove unknown binding: 66,1,1/4:264305882/264305884 [ 180.530788][T10625] overlayfs: failed to clone upperpath [ 180.677196][T10629] netlink: 'syz.0.1581': attribute type 33 has an invalid length. [ 180.679666][T10629] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1581'. [ 180.687133][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1581'. [ 181.097153][T10641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1583'. [ 181.550412][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1591'. [ 181.944639][ T67] Bluetooth: hci2: command 0x0406 tx timeout [ 182.210361][T10678] overlayfs: failed to get inode (-116) [ 182.212298][T10678] overlayfs: failed to get inode (-116) [ 182.511772][T10690] overlayfs: statfs failed on './file0' [ 182.590935][T10698] batadv0: entered promiscuous mode [ 182.593303][T10698] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 182.596452][T10698] macvlan2: entered promiscuous mode [ 182.598269][T10698] macvlan2: entered allmulticast mode [ 182.599968][T10698] batadv0: entered allmulticast mode [ 182.601945][T10698] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 182.700799][T10712] : entered promiscuous mode [ 182.740169][T10720] overlayfs: failed to clone upperpath [ 183.150498][T10746] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 183.204119][T10750] vlan0: entered allmulticast mode [ 183.206185][T10750] bond0: entered allmulticast mode [ 183.208056][T10750] bond_slave_0: entered allmulticast mode [ 183.209875][T10750] bond_slave_1: entered allmulticast mode [ 183.212818][T10750] bridge0: port 4(vlan0) entered blocking state [ 183.217122][T10750] bridge0: port 4(vlan0) entered disabled state [ 183.221057][T10750] vlan0: entered promiscuous mode [ 183.223260][T10750] bridge0: port 4(vlan0) entered blocking state [ 183.225341][T10750] bridge0: port 4(vlan0) entered forwarding state [ 184.113251][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1642'. [ 184.116983][T10773] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 184.119901][T10773] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 184.291437][T10783] 9pnet: Found fid 0 not clunked [ 184.413670][T10794] syz_tun: entered allmulticast mode [ 184.421662][T10794] dvmrp1: entered allmulticast mode [ 184.445608][T10793] syz_tun: left allmulticast mode [ 184.798859][T10802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.877799][T10808] netfs: Couldn't get user pages (rc=-14) [ 185.378264][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 185.378274][ T40] audit: type=1326 audit(2000000074.419:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.0.1649" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 186.352356][T10845] delete_channel: no stack [ 186.947010][T10859] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 186.954872][T10861] 9pnet: Found fid 0 not clunked [ 187.202296][T10878] netlink: 'syz.1.1672': attribute type 10 has an invalid length. [ 187.208747][T10878] bridge0: port 3(syz_tun) entered disabled state [ 187.211137][T10878] syz_tun: left allmulticast mode [ 187.212831][T10878] bridge0: port 3(syz_tun) entered disabled state [ 187.218857][T10878] syz_tun: entered allmulticast mode [ 189.007300][ T40] audit: type=1326 audit(2000000078.049:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.2.1686" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x0 [ 190.260572][ T40] audit: type=1326 audit(2000000079.299:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.1.1701" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x0 [ 190.788469][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1706'. [ 191.133425][ T40] audit: type=1326 audit(2000000080.169:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10979 comm="syz.2.1716" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x0 [ 191.704194][T10992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1711'. [ 191.879575][T10997] overlayfs: failed to clone upperpath [ 191.881235][T10999] netlink: 'syz.2.1712': attribute type 1 has an invalid length. [ 191.912876][T10999] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.935860][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1712'. [ 191.941450][T10999] vlan4: entered promiscuous mode [ 191.943093][T10999] bond2: entered promiscuous mode [ 191.949457][T10999] dummy0: entered promiscuous mode [ 191.953281][T10999] bond2: (slave dummy0): making interface the new active one [ 191.956418][T10999] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 192.006723][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1715'. [ 192.075829][ T40] audit: type=1326 audit(2000000081.119:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11015 comm="syz.1.1730" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x7ffc0000 [ 192.082558][ T40] audit: type=1326 audit(2000000081.119:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11015 comm="syz.1.1730" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x7ffc0000 [ 192.090179][ T40] audit: type=1326 audit(2000000081.119:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11015 comm="syz.1.1730" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f08579 code=0x7ffc0000 [ 192.097123][ T40] audit: type=1326 audit(2000000081.119:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11015 comm="syz.1.1730" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x7ffc0000 [ 192.103794][ T40] audit: type=1326 audit(2000000081.119:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11015 comm="syz.1.1730" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x7ffc0000 [ 192.110538][ T40] audit: type=1326 audit(2000000081.119:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11015 comm="syz.1.1730" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f08579 code=0x7ffc0000 [ 192.117455][ T40] audit: type=1326 audit(2000000081.139:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11015 comm="syz.1.1730" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x7ffc0000 [ 192.124116][ T40] audit: type=1326 audit(2000000081.139:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11015 comm="syz.1.1730" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x7ffc0000 [ 192.130959][ T40] audit: type=1326 audit(2000000081.149:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11015 comm="syz.1.1730" exe="/syz-executor" sig=0 arch=40000003 syscall=13 compat=1 ip=0xf7f08579 code=0x7ffc0000 [ 193.237771][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1734'. [ 193.285928][T11053] syz_tun (unregistering): left allmulticast mode [ 193.288064][T11053] syz_tun (unregistering): left promiscuous mode [ 193.290154][T11053] bridge0: port 4(syz_tun) entered disabled state [ 193.743542][T11061] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 193.789122][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.791930][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.908119][T11070] netlink: 'syz.2.1741': attribute type 1 has an invalid length. [ 193.925584][T11066] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1736'. [ 193.928426][T11066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1736'. [ 193.932761][T11070] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 193.936803][T11070] bond3: (slave macvlan3): Enslaving as a backup interface with an up link [ 193.942342][T11066] geneve4: entered allmulticast mode [ 193.961482][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 194.600278][T11102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1751'. [ 194.962743][T11108] netlink: 'syz.2.1761': attribute type 4 has an invalid length. [ 194.969971][T11108] netlink: 'syz.2.1761': attribute type 4 has an invalid length. [ 194.970969][T11109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1753'. [ 195.126195][T11123] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1759'. [ 196.057403][T11145] overlayfs: failed to clone upperpath [ 196.244524][ T34] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 196.303848][T11160] __nla_validate_parse: 2 callbacks suppressed [ 196.303860][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'. [ 196.310644][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'. [ 196.313661][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'. [ 196.317180][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'. [ 196.385649][T11165] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 196.414799][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 196.424952][ T34] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.427600][ T34] usb 6-1: config 0 has no interface number 0 [ 196.431110][ T34] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 196.433870][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.436594][ T34] usb 6-1: Product: syz [ 196.437888][ T34] usb 6-1: Manufacturer: syz [ 196.444308][ T34] usb 6-1: SerialNumber: syz [ 196.451901][ T34] usb 6-1: config 0 descriptor?? [ 196.457404][ T34] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.539453][T11181] bond1: (slave dummy0): Releasing active interface [ 196.544224][T11181] bridge_slave_0: left allmulticast mode [ 196.546430][T11181] bridge_slave_0: left promiscuous mode [ 196.548272][T11181] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.552089][T11181] bridge_slave_1: left allmulticast mode [ 196.553958][T11181] bridge_slave_1: left promiscuous mode [ 196.558844][T11181] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.563248][T11181] bond0: (slave bond_slave_0): Releasing backup interface [ 196.571708][T11181] bond0: (slave bond_slave_1): Releasing backup interface [ 196.580659][T11181] team0: Port device team_slave_0 removed [ 196.588564][T11181] team0: Port device team_slave_1 removed [ 196.591332][T11181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.595342][T11181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.598522][T11181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.600939][T11181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.609321][T11181] team0: Port device geneve0 removed [ 196.612299][T11181] bond2: (slave geneve2): Releasing active interface [ 196.621130][T11181] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 196.623787][T11181] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 196.627124][T11181] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 196.629714][T11181] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 196.649414][ T1136] tipc: Resetting bearer [ 196.660919][ T34] usb 6-1: USB disconnect, device number 11 [ 196.757497][T11197] netlink: 'syz.4.1793': attribute type 1 has an invalid length. [ 196.770579][T11197] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.787198][T11197] ip6erspan0: entered promiscuous mode [ 196.790741][T11197] bond3: (slave ip6erspan0): making interface the new active one [ 196.793805][T11197] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 196.855943][T11203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1796'. [ 196.957501][T11212] futex_wake_op: syz.4.1806 tries to shift op by -33; fix this program [ 197.420775][T11239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.496965][T11241] overlayfs: failed to clone upperpath [ 197.507458][T11243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1818'. [ 197.567038][T11245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1811'. [ 197.747325][T11257] overlayfs: failed to clone upperpath [ 198.016257][T11263] tipc: Enabled bearer , priority 10 [ 198.035236][T11263] tipc: Enabling of bearer rejected, already enabled [ 198.135547][T11269] netlink: 'syz.1.1824': attribute type 7 has an invalid length. [ 198.138352][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 198.193309][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1832'. [ 198.252705][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1832'. [ 198.356897][T11281] sch_fq: defrate 113 ignored. [ 198.612204][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 198.612215][ T40] audit: type=1326 audit(2000000087.649:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11292 comm="syz.1.1830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x7ffc0000 [ 198.626227][ T40] audit: type=1326 audit(2000000087.649:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11292 comm="syz.1.1830" exe="/syz-executor" sig=0 arch=40000003 syscall=46 compat=1 ip=0xf7f08579 code=0x7ffc0000 [ 198.635023][ T40] audit: type=1326 audit(2000000087.649:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11292 comm="syz.1.1830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x7ffc0000 [ 198.642957][ T40] audit: type=1326 audit(2000000087.649:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11292 comm="syz.1.1830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x7ffc0000 [ 198.906570][ T67] Bluetooth: hci1: command 0x0406 tx timeout [ 200.744902][ C1] af_packet: tpacket_rcv: packet too big, clamped from 194 to 4294967272. macoff=96 [ 200.787552][T11344] netlink: 'syz.4.1849': attribute type 1 has an invalid length. [ 200.806481][T11344] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.828224][T11344] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.830520][T11344] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 200.834400][T11344] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 201.019462][T11354] tipc: Resetting bearer [ 201.037369][T11354] bond3: (slave ip6erspan0): Releasing active interface [ 201.107185][T11354] team0: Mode changed to "broadcast" [ 201.117438][T11354] team0: Port device vlan0 added [ 201.124659][T11354] tipc: Enabling of bearer rejected, already enabled [ 203.435920][ T40] audit: type=1326 audit(2000000092.479:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.0.1868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 203.459366][T11401] overlayfs: failed to clone upperpath [ 203.534812][ T40] audit: type=1326 audit(2000000092.579:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.0.1868" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf710e579 code=0x7fc00000 [ 203.544184][ T40] audit: type=1326 audit(2000000092.579:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.0.1868" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf710e5a7 code=0x7fc00000 [ 203.552651][ T40] audit: type=1326 audit(2000000092.579:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.0.1868" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf710e579 code=0x7fc00000 [ 204.166497][T11419] batadv_slave_1: entered promiscuous mode [ 204.321874][T11424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1877'. [ 204.344686][T11424] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.355729][T11424] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 204.402241][T11421] batadv_slave_1: left promiscuous mode [ 204.429244][T11424] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.432466][T11424] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 204.490273][T11424] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.493543][T11424] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 204.560013][T11424] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.563295][T11424] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 204.645683][T11424] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 204.648356][T11424] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 204.656742][T11424] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 204.659463][T11424] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 204.668324][T11424] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 204.671024][T11424] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 204.680179][T11424] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 204.682842][T11424] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 205.312083][T11437] 9p: Unknown uid 00000000004294967295 [ 206.054557][ T65] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 206.214827][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 206.219096][ T65] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.223700][ T65] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 206.226980][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.229458][ T65] usb 6-1: Product: syz [ 206.230805][ T65] usb 6-1: Manufacturer: syz [ 206.232372][ T65] usb 6-1: SerialNumber: syz [ 206.234952][ T65] usb 6-1: config 0 descriptor?? [ 206.386628][T11459] netlink: 'syz.2.1889': attribute type 1 has an invalid length. [ 206.407627][T11459] bond4: entered promiscuous mode [ 206.409848][T11459] bond4: entered allmulticast mode [ 206.425560][T11459] bond4: (slave erspan1): making interface the new active one [ 206.428091][T11459] erspan1: entered promiscuous mode [ 206.430407][T11459] erspan1: entered allmulticast mode [ 206.433346][T11459] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 206.458819][T11459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1889'. [ 206.464183][T11459] bond4: left promiscuous mode [ 206.465905][T11459] erspan1: left promiscuous mode [ 206.467571][T11459] bond4: left allmulticast mode [ 206.469190][T11459] erspan1: left allmulticast mode [ 206.471067][T11459] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.479891][T11466] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1893'. [ 206.508410][T11449] netlink: 'syz.1.1885': attribute type 12 has an invalid length. [ 206.518262][ T65] usb 6-1: Cannot retrieve CPort count: -71 [ 206.520623][ T65] usb 6-1: Cannot retrieve CPort count: -71 [ 206.522552][ T65] es2_ap_driver 6-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 206.531727][ T65] usb 6-1: USB disconnect, device number 12 [ 206.546092][ T5950] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 207.066918][T11482] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1896'. [ 207.604368][T11509] overlayfs: failed to clone upperpath [ 207.745204][T11516] macsec0: entered promiscuous mode [ 208.056287][T11529] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.1913'. [ 208.059005][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1913'. [ 208.424864][T11541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1920'. [ 208.460266][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1920'. [ 208.934005][T11550] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1923'. [ 209.248055][T11560] overlayfs: failed to clone upperpath [ 209.278231][T11562] overlayfs: failed to clone upperpath [ 209.953655][T11580] overlayfs: failed to clone upperpath [ 209.986025][T11582] overlayfs: failed to clone lowerpath [ 210.559531][T11602] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 210.564144][T11602] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 210.566740][T11602] gretap1: entered promiscuous mode [ 210.568462][T11602] gretap1: entered allmulticast mode [ 210.915392][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1946'. [ 210.919125][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1946'. [ 210.960033][T11608] netlink: 'syz.1.1947': attribute type 1 has an invalid length. [ 210.976451][T11608] bond4: entered promiscuous mode [ 210.978124][T11608] bond4: entered allmulticast mode [ 210.990897][T11608] bond5: entered allmulticast mode [ 210.993780][T11608] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.997929][T11608] bond4: (slave bond5): Enslaving as an active interface with a down link [ 211.003808][T11608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1947'. [ 211.008279][T11608] bond4: left promiscuous mode [ 211.009895][T11608] bond4: left allmulticast mode [ 211.011861][T11608] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.203303][ T40] audit: type=1326 audit(2000000100.239:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.1.1950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x7fc00000 [ 211.467076][T11637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1959'. [ 211.512143][T11641] overlayfs: failed to clone upperpath [ 211.982003][ T40] audit: type=1326 audit(2000000101.019:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.1.1950" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f08579 code=0x7fc00000 [ 211.988688][ T40] audit: type=1326 audit(2000000101.019:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.1.1950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x7fc00000 [ 211.995392][ T40] audit: type=1326 audit(2000000101.019:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.1.1950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x7fc00000 [ 212.559536][T11685] overlayfs: failed to clone upperpath [ 213.058098][T11704] 9pnet_fd: Insufficient options for proto=fd [ 213.920383][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1995'. [ 213.983807][T11736] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.986660][T11736] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.989245][T11736] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.991803][T11736] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.997619][T11736] vxlan0: entered promiscuous mode [ 214.564816][T11748] overlayfs: failed to clone upperpath [ 215.498866][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2026'. [ 215.562934][ T40] audit: type=1804 audit(2000000104.599:489): pid=11794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2017" name="file0" dev="tmpfs" ino=3010 res=1 errno=0 [ 215.565847][T11793] uprobe: syz.2.2017:11793 failed to unregister, leaking uprobe [ 215.646228][ T40] audit: type=1326 audit(2000000104.689:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11791 comm="syz.4.2018" exe="/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf70ae579 code=0x0 [ 217.637911][T11846] picdev_read: 15 callbacks suppressed [ 217.637928][T11846] kvm: pic: non byte read [ 217.642852][T11846] pic_ioport_write: 1 callbacks suppressed [ 217.642862][T11846] kvm: pic: level sensitive irq not supported [ 217.646140][T11846] kvm: pic: non byte read [ 217.651847][T11846] kvm: pic: level sensitive irq not supported [ 217.652195][T11846] kvm: pic: non byte read [ 217.658164][T11846] kvm: pic: level sensitive irq not supported [ 217.658478][T11846] kvm: pic: non byte read [ 217.663207][T11846] kvm: pic: level sensitive irq not supported [ 217.663441][T11846] kvm: pic: non byte read [ 217.670091][T11846] kvm: pic: level sensitive irq not supported [ 217.670322][T11846] kvm: pic: non byte read [ 217.675364][T11846] kvm: pic: level sensitive irq not supported [ 217.675598][T11846] kvm: pic: non byte read [ 217.679986][T11846] kvm: pic: level sensitive irq not supported [ 217.680216][T11846] kvm: pic: non byte read [ 217.685102][T11846] kvm: pic: level sensitive irq not supported [ 217.685332][T11846] kvm: pic: non byte read [ 217.690416][T11846] kvm: pic: level sensitive irq not supported [ 217.690681][T11846] kvm: pic: non byte read [ 217.695599][T11846] kvm: pic: level sensitive irq not supported [ 218.155050][ T1136] Bluetooth: hci4: Frame reassembly failed (-84) [ 218.160070][ T1136] Bluetooth: hci4: Frame reassembly failed (-84) [ 218.414646][ T65] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 218.586987][ T65] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.591255][ T65] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 218.594834][ T65] usb 6-1: config 0 interface 0 has no altsetting 0 [ 218.597789][ T65] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 218.600841][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.606358][ T65] usb 6-1: config 0 descriptor?? [ 218.613762][T11866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 218.830273][ T65] usbhid 6-1:0.0: can't add hid device: -71 [ 218.834937][ T65] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 218.843818][ T65] usb 6-1: USB disconnect, device number 13 [ 219.117122][T11889] Invalid ELF header magic: != ELF [ 219.645979][ T67] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 220.184601][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 220.184668][ T67] Bluetooth: hci4: command 0x1003 tx timeout [ 221.071332][T11917] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 222.146958][ T5950] Bluetooth: hci1: link tx timeout [ 222.348725][T11956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2078'. [ 222.355909][T11957] netlink: 'syz.2.2076': attribute type 33 has an invalid length. [ 222.358921][T11957] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2076'. [ 222.373839][T11957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2076'. [ 222.388268][T11957] bond2: (slave dummy0): Releasing active interface [ 222.747450][T11974] overlayfs: failed to clone upperpath [ 222.762493][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2083'. [ 222.769331][ C0] vcan0: j1939_session_tx_dat: 0xffff8880129a6c00: queue data error: -100 [ 223.396897][T11980] overlayfs: failed to clone upperpath [ 223.443741][ T40] audit: type=1804 audit(2000000112.479:491): pid=11984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2088" name="file0" dev="tmpfs" ino=3429 res=1 errno=0 [ 223.599663][T11990] : entered promiscuous mode [ 223.781570][T11999] batadv0: entered promiscuous mode [ 223.785926][T11999] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 223.789935][T11999] macvlan0: entered promiscuous mode [ 223.792304][T11999] macvlan0: entered allmulticast mode [ 223.794356][T11999] batadv0: entered allmulticast mode [ 223.801104][T11999] batadv0: left promiscuous mode [ 223.818995][T12003] bridge_slave_0: left allmulticast mode [ 223.820920][T12003] bridge_slave_0: left promiscuous mode [ 223.823105][T12003] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.827376][T12003] bridge_slave_1: left allmulticast mode [ 223.829124][T12003] bridge_slave_1: left promiscuous mode [ 223.831150][T12003] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.836655][T12003] bond0: (slave bond_slave_0): Releasing backup interface [ 223.839480][T12003] bond_slave_0: left promiscuous mode [ 223.841280][T12003] bond_slave_0: left allmulticast mode [ 223.844103][T12003] bond0: (slave bond_slave_1): Releasing backup interface [ 223.847886][T12003] bond_slave_1: left promiscuous mode [ 223.849740][T12003] bond_slave_1: left allmulticast mode [ 223.855627][T12003] team0: Port device team_slave_0 removed [ 223.863514][T12003] team0: Port device team_slave_1 removed [ 223.865782][T12003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.869118][T12003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.876314][T12003] vlan2: left promiscuous mode [ 223.878673][T12003] bridge0: port 3(vlan2) entered disabled state [ 223.888743][T12003] bond0: (slave macvlan2): Releasing backup interface [ 223.893131][T12003] macvlan2: left promiscuous mode [ 223.895738][T12003] macvlan2: left allmulticast mode [ 223.898576][T12003] batadv0: left allmulticast mode [ 223.901762][T12003] batadv0: left promiscuous mode [ 223.910275][T12003] bond3: (slave macvlan3): Releasing backup interface [ 223.917368][T12003] bond0: left promiscuous mode [ 223.925836][T12003] bond4: (slave erspan1): Releasing active interface [ 223.937887][T12005] team0: Mode changed to "broadcast" [ 223.947214][T12010] vlan0: entered promiscuous mode [ 223.990351][T12003] tipc: Enabled bearer , priority 0 [ 225.670515][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2108'. [ 225.679304][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2108'. [ 225.684761][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2108'. [ 227.087546][T12041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2113'. [ 227.093526][T12045] bridge_slave_0: left allmulticast mode [ 227.095381][T12045] bridge_slave_0: left promiscuous mode [ 227.097137][T12045] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.102093][T12045] bridge_slave_1: left allmulticast mode [ 227.104053][T12045] bridge_slave_1: left promiscuous mode [ 227.106374][T12045] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.111388][T12045] vlan0: left promiscuous mode [ 227.117677][T12045] bond0: (slave bond_slave_0): Releasing backup interface [ 227.120449][T12045] bond_slave_0: left allmulticast mode [ 227.122792][T12045] bond_slave_0: left promiscuous mode [ 227.135799][T12045] bond0: (slave bond_slave_1): Releasing backup interface [ 227.142677][T12045] bond_slave_1: left allmulticast mode [ 227.146514][T12045] bond_slave_1: left promiscuous mode [ 227.164884][T12045] team0: Port device team_slave_0 removed [ 227.169537][T12045] team0: Port device team_slave_1 removed [ 227.171755][T12045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.174178][T12045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.179401][T12045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.182266][T12045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.192852][T12052] netlink: 'syz.0.2113': attribute type 10 has an invalid length. [ 227.196167][T12045] bond2: (slave macvlan2): Releasing backup interface [ 227.199844][T12045] bond0: left promiscuous mode [ 227.205204][T12045] bond3: (slave ip6erspan0): Releasing active interface [ 227.209336][T12045] bridge0: port 4(vlan0) entered disabled state [ 227.218316][T12045] bond4: (slave bond5): Releasing active interface [ 227.240403][T12048] team0: No ports can be present during mode change [ 227.250234][T12052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.253672][T12052] team0: Port device bond0 added [ 227.256439][T12053] vlan0: entered promiscuous mode [ 227.258270][T12053] bond0: entered promiscuous mode [ 227.260330][T12053] vlan0: left allmulticast mode [ 227.262181][T12053] bond0: left allmulticast mode [ 227.269562][T12053] team0: Port device vlan0 added [ 227.272176][ T34] syz!: Port: 1 Link DOWN [ 227.304805][T12045] tipc: Enabled bearer , priority 0 [ 227.917132][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2123'. [ 227.924337][T12076] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.987736][T12076] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.058105][T12076] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.129352][T12076] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.217885][T12076] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.224744][T12076] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.231371][T12076] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.239167][T12076] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.382647][T12088] netlink: 'syz.4.2135': attribute type 1 has an invalid length. [ 228.401857][T12088] bond5: entered promiscuous mode [ 228.407593][T12088] bond5: entered allmulticast mode [ 228.432950][T12088] bond5: (slave erspan1): making interface the new active one [ 228.436750][T12088] erspan1: entered promiscuous mode [ 228.438563][T12088] erspan1: entered allmulticast mode [ 228.441331][T12088] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 228.486602][T12088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2135'. [ 228.491659][T12088] bond5: left promiscuous mode [ 228.493239][T12088] erspan1: left promiscuous mode [ 228.495297][T12088] bond5: left allmulticast mode [ 228.497086][T12088] erspan1: left allmulticast mode [ 228.499353][T12088] 8021q: adding VLAN 0 to HW filter on device bond5 [ 229.107329][T12105] vlan3: entered allmulticast mode [ 229.109016][T12105] bond0: entered allmulticast mode [ 229.110918][T12105] bridge0: port 1(vlan3) entered blocking state [ 229.113173][T12105] bridge0: port 1(vlan3) entered disabled state [ 229.142054][T12104] netlink: 'syz.2.2132': attribute type 12 has an invalid length. [ 229.381431][T12117] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2138'. [ 230.015393][T12128] overlayfs: failed to clone upperpath [ 230.126233][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2148'. [ 230.181652][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2148'. [ 231.898430][T12152] netlink: 'syz.4.2159': attribute type 1 has an invalid length. [ 231.921268][T12157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2152'. [ 231.926193][T12152] bond0: entered promiscuous mode [ 231.928347][T12152] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 231.932728][T12152] bond6: (slave macvlan0): Enslaving as a backup interface with a down link [ 232.071431][T12163] loop4: detected capacity change from 0 to 524255232 [ 232.137124][ T5950] Bluetooth: hci2: unknown advertising packet type: 0x6c [ 232.229081][ T40] audit: type=1326 audit(2000000121.269:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.4.2166" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7fc00000 [ 232.284535][ T40] audit: type=1326 audit(2000000121.319:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.4.2166" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70ae579 code=0x7fc00000 [ 232.291056][ T40] audit: type=1326 audit(2000000121.319:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.4.2166" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70ae5a7 code=0x7fc00000 [ 232.299472][ T40] audit: type=1326 audit(2000000121.319:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.4.2166" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf70ae579 code=0x7fc00000 [ 232.475194][T12182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2160'. [ 232.478673][T12182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2160'. [ 232.848688][T12196] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 232.852833][T12196] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 232.897308][T12201] netlink: 'syz.1.2175': attribute type 10 has an invalid length. [ 232.899795][T12201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2175'. [ 232.915625][T12201] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 232.919303][T12201] team0: Failed to send options change via netlink (err -105) [ 232.921906][T12201] team0: Port device geneve0 added [ 232.936422][T12196] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 232.940239][T12196] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 233.017790][T12196] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 233.020960][T12196] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 233.088177][T12196] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 233.091216][T12196] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 233.170166][T12196] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.173532][T12196] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 233.184259][T12196] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.187743][T12196] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 233.198059][T12196] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.201439][T12196] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 233.211654][T12196] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.215030][T12196] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 233.843555][T12215] overlayfs: failed to clone upperpath [ 235.312824][T12264] overlayfs: failed to clone upperpath [ 236.048361][T12279] netlink: 'syz.2.2192': attribute type 10 has an invalid length. [ 236.051527][T12279] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2192'. [ 236.104964][T12285] tipc: Resetting bearer [ 236.117329][T12285] team0: Port device vlan0 removed [ 236.129065][T12285] bond5: (slave erspan1): Releasing active interface [ 236.159645][T12289] netlink: 'syz.2.2209': attribute type 1 has an invalid length. [ 236.161421][T12285] bridge0: port 1(vlan3) entered disabled state [ 236.169564][T12285] bond6: (slave macvlan0): Releasing backup interface [ 236.172718][T12285] bond0: left promiscuous mode [ 236.177862][T12290] team0: Unable to change to the same mode the team is in [ 236.196918][T12289] bond5: entered promiscuous mode [ 236.198892][T12289] bond5: entered allmulticast mode [ 236.212291][T12285] team0: Port device vlan0 added [ 236.218646][T12285] tipc: Enabling of bearer rejected, already enabled [ 236.246938][T12289] bond6: entered allmulticast mode [ 236.250652][T12289] 8021q: adding VLAN 0 to HW filter on device bond6 [ 236.255267][T12289] bond5: (slave bond6): Enslaving as an active interface with a down link [ 236.279603][T12289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2209'. [ 236.283741][ T67] Bluetooth: hci1: link tx timeout [ 236.285163][T12289] bond5: left promiscuous mode [ 236.286630][ T67] Bluetooth: hci1: link tx timeout [ 236.287876][T12289] bond5: left allmulticast mode [ 236.288151][T12289] 8021q: adding VLAN 0 to HW filter on device bond5 [ 236.290040][ T67] Bluetooth: hci1: link tx timeout [ 236.298860][ T67] Bluetooth: hci1: link tx timeout [ 236.824588][ T67] Bluetooth: hci1: command 0x0406 tx timeout [ 237.515333][T12322] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 237.519413][T12322] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 237.648055][T12324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2214'. [ 237.689148][T12326] tipc: Resetting bearer [ 237.700295][T12326] team0: Port device vlan0 removed [ 237.747615][T12326] team0: Unable to change to the same mode the team is in [ 237.756571][T12326] team0: Port device vlan0 added [ 237.763457][T12326] tipc: Enabling of bearer rejected, already enabled [ 237.885729][T12332] team0: Port device geneve0 removed [ 237.897170][T12332] team0: Port device vlan0 removed [ 237.899896][ T1148] tipc: Resetting bearer [ 237.930497][T12332] team0: Mode changed to "broadcast" [ 237.936601][T12332] team0: Port device vlan0 added [ 237.941158][T12332] tipc: Enabling of bearer rejected, already enabled [ 238.045739][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 238.049780][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 238.052982][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 238.056175][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 238.306307][T12345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 238.408728][T12357] netlink: 'syz.0.2226': attribute type 1 has an invalid length. [ 238.431671][T12357] bond5: entered promiscuous mode [ 238.434053][T12357] bond5: entered allmulticast mode [ 238.473012][T12357] bond6: entered allmulticast mode [ 238.477253][T12357] 8021q: adding VLAN 0 to HW filter on device bond6 [ 238.481909][T12357] bond5: (slave bond6): Enslaving as an active interface with a down link [ 238.504077][T12357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2226'. [ 238.509358][T12357] bond5: left promiscuous mode [ 238.511422][T12357] bond5: left allmulticast mode [ 238.513827][T12357] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.576416][T12364] overlayfs: failed to clone upperpath [ 239.364247][T12384] overlayfs: failed to clone upperpath [ 239.386863][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'. [ 239.398260][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'. [ 240.098991][T12418] bond5: (slave bond6): Releasing active interface [ 241.034414][ T40] audit: type=1326 audit(2000000130.069:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.4.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 241.058741][ T40] audit: type=1326 audit(2000000130.069:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.4.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 241.079032][ T40] audit: type=1326 audit(2000000130.079:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.4.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 241.096510][ T40] audit: type=1326 audit(2000000130.079:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.4.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 241.104118][ T40] audit: type=1326 audit(2000000130.079:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.4.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 241.126277][ T40] audit: type=1326 audit(2000000130.079:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.4.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 241.132980][ T40] audit: type=1326 audit(2000000130.079:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.4.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 241.144107][ T40] audit: type=1326 audit(2000000130.079:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.4.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 241.151013][ T40] audit: type=1326 audit(2000000130.079:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.4.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 241.184571][ T40] audit: type=1326 audit(2000000130.079:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.4.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 241.602341][T12459] netlink: 'syz.0.2261': attribute type 1 has an invalid length. [ 241.616917][T12459] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.641083][T12459] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.643384][T12459] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 241.647385][T12459] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 242.161282][T12480] __nla_validate_parse: 9 callbacks suppressed [ 242.161298][T12480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2270'. [ 242.170088][T12480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2270'. [ 242.175283][T12480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2270'. [ 242.652655][T12490] netlink: 'syz.2.2273': attribute type 1 has an invalid length. [ 242.673401][T12490] 8021q: adding VLAN 0 to HW filter on device bond7 [ 242.714168][T12490] 8021q: adding VLAN 0 to HW filter on device bond7 [ 242.716997][T12490] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 242.721943][T12490] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 242.755860][T12492] ip6erspan0: entered promiscuous mode [ 242.759208][T12492] bond7: (slave ip6erspan0): making interface the new active one [ 242.762192][T12492] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link [ 243.930545][T12515] futex_wake_op: syz.1.2284 tries to shift op by -33; fix this program [ 243.943015][T12519] netlink: 'syz.4.2285': attribute type 1 has an invalid length. [ 243.979528][T12519] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.017549][T12519] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.020596][T12519] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 244.025949][T12519] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 244.314700][ T835] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 244.474612][ T835] usb 6-1: Using ep0 maxpacket: 8 [ 244.479735][ T835] usb 6-1: unable to get BOS descriptor or descriptor too short [ 244.484122][ T835] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 244.487627][ T835] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 244.491074][ T835] usb 6-1: config 4 has no interface number 0 [ 244.496163][ T835] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 244.499920][ T835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.503031][ T835] usb 6-1: Product: syz [ 244.504913][ T835] usb 6-1: Manufacturer: syz [ 244.506910][ T835] usb 6-1: SerialNumber: syz [ 245.219542][T12543] ip6gretap0: entered promiscuous mode [ 245.227119][T12543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.233865][T12543] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.238052][T12543] tipc: Resetting bearer [ 245.240694][T12543] tipc: Resetting bearer [ 245.244957][T12543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.269989][T12546] veth1_macvtap: left promiscuous mode [ 245.271833][T12546] macsec0: entered promiscuous mode [ 246.357738][T12558] sch_fq: defrate 113 ignored. [ 247.040372][ T835] usb 6-1: Found UVC 0.02 device syz (04f2:b746) [ 247.050071][ T835] usb 6-1: No valid video chain found. [ 247.059777][ T835] usb 6-1: USB disconnect, device number 14 [ 247.351986][T12608] overlayfs: failed to clone upperpath [ 247.470240][T12606] Set syz1 is full, maxelem 65536 reached [ 247.954215][T12621] overlayfs: failed to clone upperpath [ 248.051948][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2324'. [ 248.152070][T12629] team0: Port device vlan0 removed [ 248.319408][ T13] tipc: Resetting bearer [ 249.956449][T12670] netlink: 'syz.2.2335': attribute type 4 has an invalid length. [ 250.016576][T12670] netlink: 'syz.2.2335': attribute type 4 has an invalid length. [ 250.481076][T12687] overlayfs: failed to clone upperpath [ 251.150022][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2355'. [ 251.169530][T12700] bond8: entered promiscuous mode [ 251.171424][T12700] 8021q: adding VLAN 0 to HW filter on device bond8 [ 251.202041][T12705] overlayfs: failed to clone upperpath [ 255.230315][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.233132][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.688599][T12772] batadv0: entered promiscuous mode [ 255.690685][T12772] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 255.693545][T12772] macvlan1: entered allmulticast mode [ 255.695725][T12772] batadv0: entered allmulticast mode [ 255.699933][T12772] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 258.292566][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.298241][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.113444][T12864] batadv0: entered promiscuous mode [ 259.117063][T12864] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 259.121180][T12864] macvlan0: entered promiscuous mode [ 259.149315][T12864] batadv0: left promiscuous mode [ 260.622661][T12910] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2417'. [ 260.626550][T12910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2417'. [ 260.630430][T12910] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2417'. [ 260.634220][T12910] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2417'. [ 261.072101][T12916] bridge6: entered allmulticast mode [ 261.318317][T12922] ceph: No mds server is up or the cluster is laggy [ 261.381459][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2424'. [ 263.033712][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 263.033725][ T40] audit: type=1800 audit(2000000152.069:529): pid=12982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2440" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 264.547744][ T67] Bluetooth: Frame is too long (len 26, expected len 4) [ 265.465759][ T67] Bluetooth: hci1: command 0x0406 tx timeout [ 266.147020][T13080] netlink: 'syz.0.2474': attribute type 30 has an invalid length. [ 266.231558][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2475'. [ 266.234403][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2475'. [ 266.238145][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2475'. [ 267.059249][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2481'. [ 267.062777][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2481'. [ 267.071572][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2481'. [ 267.352797][T13118] bridge7: entered allmulticast mode [ 269.369070][ T40] audit: type=1326 audit(2000000158.409:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13162 comm="syz.1.2502" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x0 [ 269.710026][T13172] netlink: 'syz.4.2512': attribute type 30 has an invalid length. [ 270.123621][T13177] netlink: 'syz.4.2506': attribute type 10 has an invalid length. [ 270.887932][T13220] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 270.892850][T13220] macsec1: entered promiscuous mode [ 270.894940][T13220] macsec1: entered allmulticast mode [ 270.896785][T13220] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 270.976316][T13224] netlink: 'syz.1.2527': attribute type 13 has an invalid length. [ 271.078058][T13224] tipc: Resetting bearer [ 271.231987][T13224] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.235535][T13224] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.238157][T13224] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.240755][T13224] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.274921][T13224] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 271.277519][T13224] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 271.280135][T13224] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 271.283135][T13224] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 271.350653][T13224] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 273.192676][T13265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2537'. [ 273.275571][ T40] audit: type=1326 audit(2000000162.319:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.2.2538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 273.283160][ T40] audit: type=1326 audit(2000000162.319:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.2.2538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 273.291181][ T40] audit: type=1326 audit(2000000162.329:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.2.2538" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 273.298154][ T40] audit: type=1326 audit(2000000162.329:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.2.2538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 273.304933][ T40] audit: type=1326 audit(2000000162.329:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.2.2538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 273.311564][ T40] audit: type=1326 audit(2000000162.329:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.2.2538" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 273.318688][ T40] audit: type=1326 audit(2000000162.329:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.2.2538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 273.326164][ T40] audit: type=1326 audit(2000000162.329:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.2.2538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 273.332951][ T40] audit: type=1326 audit(2000000162.329:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.2.2538" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 273.613857][T13269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2539'. [ 273.640255][T13269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2539'. [ 273.643101][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2539'. [ 273.787163][T13275] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2540'. [ 273.790796][T13275] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2540'. [ 273.794636][T13275] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2540'. [ 273.798234][T13275] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2540'. [ 274.007998][ T6338] libceph: connect (1)[c::]:6789 error -101 [ 274.011221][ T6338] libceph: mon0 (1)[c::]:6789 connect error [ 274.039373][T13276] ceph: No mds server is up or the cluster is laggy [ 274.433914][T13283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2542'. [ 274.880022][T13304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2548'. [ 275.807309][ T34] libceph: connect (1)[c::]:6789 error -101 [ 275.809849][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 275.848322][T13324] ceph: No mds server is up or the cluster is laggy [ 275.851988][T13328] macsec1: entered promiscuous mode [ 275.854347][T13328] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 275.861627][T13328] macsec1: entered allmulticast mode [ 275.863932][T13328] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 276.350035][T13339] netlink: 'syz.0.2560': attribute type 10 has an invalid length. [ 276.425410][T13342] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 276.428087][T13342] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 279.337759][T13417] overlayfs: failed to clone upperpath [ 279.407851][T13423] overlayfs: failed to clone upperpath [ 279.600270][T13429] __nla_validate_parse: 9 callbacks suppressed [ 279.600287][T13429] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2588'. [ 280.459160][T13442] netlink: 'syz.4.2594': attribute type 13 has an invalid length. [ 280.592187][T13442] tipc: Resetting bearer [ 280.812841][T13442] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 280.822379][T13442] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 280.830318][T13442] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 280.832998][T13442] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 280.857174][T13442] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 280.860869][T13442] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 280.864414][T13442] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 280.868794][T13442] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 280.890120][T13442] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.893263][T13442] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.896370][T13442] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.899540][T13442] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.933260][T13442] batadv0: left promiscuous mode [ 283.178928][T13498] netlink: 'syz.0.2610': attribute type 13 has an invalid length. [ 283.534312][T13498] tipc: Resetting bearer [ 283.712121][T13498] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.714969][T13498] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.717712][T13498] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.720428][T13498] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.010357][T13498] syz.0.2610 (13498) used greatest stack depth: 18296 bytes left [ 284.060444][T13512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2615'. [ 284.089516][T13515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2616'. [ 286.338426][T13562] netlink: 'syz.0.2630': attribute type 1 has an invalid length. [ 286.414414][T13562] bond8: (slave gretap1): making interface the new active one [ 286.419584][T13562] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 286.438744][T13562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2630'. [ 286.448735][T13562] bond8 (unregistering): (slave gretap1): Releasing active interface [ 286.479162][T13562] bond8 (unregistering): Released all slaves [ 288.655102][T13649] netlink: 'syz.2.2645': attribute type 13 has an invalid length. [ 288.959803][T13649] tipc: Resetting bearer [ 289.026424][T13649] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.030058][T13649] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.033274][T13649] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.039697][T13649] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.295068][T13649] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 289.297403][T13649] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 289.314237][T13654] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 289.641287][T13663] cgroup: Unknown subsys name 'noxattr' [ 289.716487][T13665] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.2641'. [ 289.720250][T13665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2641'. [ 291.152015][T13683] wireguard0: entered promiscuous mode [ 292.482515][T13722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2662'. [ 292.613264][ T34] libceph: connect (1)[c::]:6789 error -101 [ 292.616087][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 292.764124][T13726] ceph: No mds server is up or the cluster is laggy [ 293.493063][ T40] kauditd_printk_skb: 1888 callbacks suppressed [ 293.493073][ T40] audit: type=1326 audit(2000000182.529:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13743 comm="syz.0.2668" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 293.568236][T13749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2670'. [ 293.575395][T13749] netlink: 'syz.1.2670': attribute type 7 has an invalid length. [ 293.578652][T13749] netlink: 'syz.1.2670': attribute type 8 has an invalid length. [ 293.581442][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2670'. [ 293.891120][T13758] overlayfs: failed to clone upperpath [ 294.255965][ T40] audit: type=1326 audit(2000000183.289:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13759 comm="syz.2.2674" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x0 [ 294.518101][T13776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2676'. [ 295.115860][T13763] netlink: 'syz.1.2672': attribute type 10 has an invalid length. [ 295.119823][T13763] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 295.804821][ T34] IPVS: starting estimator thread 0... [ 295.914555][T13799] IPVS: using max 48 ests per chain, 115200 per kthread [ 296.602706][T13813] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 296.607737][T13813] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 297.619095][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2692'. [ 300.196750][T13849] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN NOPTI [ 300.202032][T13849] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 300.207590][T13849] CPU: 0 UID: 0 PID: 13849 Comm: syz.2.2698 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 300.212447][T13849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 300.216336][T13849] RIP: 0010:find_match+0x136/0x15d0 [ 300.218028][T13849] Code: 48 c1 ea 03 80 3c 02 00 0f 85 ac 11 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 7d 00 49 8d bf c0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 93 11 00 00 4d 8b bf c0 00 00 00 e8 64 0b 50 01 [ 300.223969][T13849] RSP: 0018:ffffc90004b571c0 EFLAGS: 00010206 [ 300.226022][T13849] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: ffffc9000c001000 [ 300.228524][T13849] RDX: 0000000000000018 RSI: ffffffff8a18eaaf RDI: 00000000000000c0 [ 300.231000][T13849] RBP: ffffc90004b572c8 R08: 0000000000000001 R09: 0000000000000000 [ 300.233453][T13849] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801d705637 [ 300.235947][T13849] R13: ffff88801d705620 R14: 1ffff9200096ae47 R15: 0000000000000000 [ 300.238548][T13849] FS: 0000000000000000(0000) GS:ffff8880977ed000(0063) knlGS:00000000f506eb40 [ 300.241316][T13849] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 300.243405][T13849] CR2: 00000000f7320dd0 CR3: 0000000056313000 CR4: 0000000000352ef0 [ 300.246009][T13849] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 300.248572][T13849] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 300.250979][T13849] Call Trace: [ 300.252052][T13849] [ 300.252986][T13849] ? find_held_lock+0x2b/0x80 [ 300.254480][T13849] ? is_bpf_text_address+0x8a/0x1a0 [ 300.256287][T13849] ? __pfx_find_match+0x10/0x10 [ 300.257967][T13849] rt6_nh_find_match+0xfa/0x1a0 [ 300.259493][T13849] nexthop_for_each_fib6_nh+0x165/0x4a0 [ 300.261215][T13849] ? __pfx_rt6_nh_find_match+0x10/0x10 [ 300.262911][T13849] __find_rr_leaf+0x6e5/0xe00 [ 300.264378][T13849] ? __pfx___find_rr_leaf+0x10/0x10 [ 300.266127][T13849] ? fib6_node_lookup+0x12d/0x190 [ 300.267711][T13849] ? __pfx_fib6_node_lookup+0x10/0x10 [ 300.269440][T13849] fib6_table_lookup+0x57c/0xa30 [ 300.271009][T13849] ? __pfx_fib6_table_lookup+0x10/0x10 [ 300.272719][T13849] ip6_pol_route+0x1cc/0x1230 [ 300.274189][T13849] ? __pfx_ip6_pol_route+0x10/0x10 [ 300.275923][T13849] ? widen_string+0xdc/0x2d0 [ 300.277377][T13849] ? __pfx_ip6_addr_string+0x10/0x10 [ 300.279051][T13849] ? __pfx_widen_string+0x10/0x10 [ 300.280625][T13849] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 300.282404][T13849] fib6_rule_lookup+0x386/0x720 [ 300.283955][T13849] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 300.285757][T13849] ? __pfx_ip_addr_string+0x10/0x10 [ 300.287394][T13849] ip6_route_output_flags+0x1d0/0x640 [ 300.289080][T13849] ip6_dst_lookup_tail.constprop.0+0xa52/0x2140 [ 300.291025][T13849] ? vsnprintf+0x318/0x1160 [ 300.292465][T13849] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 300.294614][T13849] ? __pfx_vsnprintf+0x10/0x10 [ 300.296212][T13849] ? __schedule+0x1186/0x5de0 [ 300.297681][T13849] ? snprintf+0xc7/0x100 [ 300.299062][T13849] ip6_dst_lookup_flow+0x99/0x1d0 [ 300.300606][T13849] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 300.302336][T13849] tcp_v6_connect+0xe11/0x2150 [ 300.303854][T13849] ? __pfx_tcp_v6_connect+0x10/0x10 [ 300.305605][T13849] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 300.307304][T13849] ? __lock_acquire+0xaa4/0x1ba0 [ 300.308872][T13849] ? __inet_stream_connect+0x3c5/0x1020 [ 300.310614][T13849] __inet_stream_connect+0x3c5/0x1020 [ 300.312286][T13849] ? __pfx___inet_stream_connect+0x10/0x10 [ 300.314078][T13849] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 300.315890][T13849] ? __pfx_inet_stream_connect+0x10/0x10 [ 300.317643][T13849] ? __local_bh_enable_ip+0xa4/0x120 [ 300.319316][T13849] ? __pfx_inet_stream_connect+0x10/0x10 [ 300.321145][T13849] inet_stream_connect+0x57/0xa0 [ 300.322718][T13849] __sys_connect_file+0x13e/0x1a0 [ 300.324305][T13849] __sys_connect+0x14d/0x170 [ 300.325897][T13849] ? __pfx___sys_connect+0x10/0x10 [ 300.327524][T13849] ? rcu_is_watching+0x12/0xc0 [ 300.329052][T13849] __ia32_sys_connect+0x71/0xb0 [ 300.330607][T13849] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 300.332691][T13849] __do_fast_syscall_32+0x73/0x120 [ 300.334300][T13849] do_fast_syscall_32+0x32/0x80 [ 300.335968][T13849] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.337949][T13849] RIP: 0023:0xf707e579 [ 300.339196][T13849] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 300.345074][T13849] RSP: 002b:00000000f506e55c EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 300.348183][T13849] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 300.350706][T13849] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 300.353209][T13849] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 300.355766][T13849] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 300.358218][T13849] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 300.360645][T13849] [ 300.361631][T13849] Modules linked in: [ 300.363053][T13849] ---[ end trace 0000000000000000 ]--- [ 300.384210][T13849] RIP: 0010:find_match+0x136/0x15d0 [ 300.392533][T13849] Code: 48 c1 ea 03 80 3c 02 00 0f 85 ac 11 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 7d 00 49 8d bf c0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 93 11 00 00 4d 8b bf c0 00 00 00 e8 64 0b 50 01 [ 300.415864][T13849] RSP: 0018:ffffc90004b571c0 EFLAGS: 00010206 [ 300.431841][T13849] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: ffffc9000c001000 [ 300.435939][T13849] RDX: 0000000000000018 RSI: ffffffff8a18eaaf RDI: 00000000000000c0 [ 300.439446][T13849] RBP: ffffc90004b572c8 R08: 0000000000000001 R09: 0000000000000000 [ 300.488534][T13849] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801d705637 [ 300.503514][T13849] R13: ffff88801d705620 R14: 1ffff9200096ae47 R15: 0000000000000000 [ 300.521780][T13849] FS: 0000000000000000(0000) GS:ffff8880978ed000(0063) knlGS:00000000f506eb40 [ 300.541510][T13849] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 300.544338][T13849] CR2: 0000000080c16018 CR3: 0000000056313000 CR4: 0000000000352ef0 [ 300.548377][T13849] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 300.599753][T13849] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 300.627736][T13849] Kernel panic - not syncing: Fatal exception [ 300.631112][T13849] Kernel Offset: disabled [ 300.632951][T13849] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:32:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bf5b5 RDI=ffffffff9addebc0 RBP=ffffffff9addeb80 RSP=ffffc90004b56bc0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9addeb80 R15=ffffffff854bf550 RIP=ffffffff854bf5df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977ed000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7320dd0 CR3=0000000056313000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000003ee2b4 RBX=0000000000000001 RCX=ffffffff8b6903e9 RDX=ffffed10056665be RSI=ffffffff8bf46760 RDI=ffffffff81913051 RBP=ffffed1003b56488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed10056665bd R10=ffff88802b332deb R11=ffff88802b23ad20 R12=0000000000000001 R13=ffff88801dab2440 R14=ffffffff90851a10 R15=0000000000000000 RIP=ffffffff8b68ec7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978ed000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080bf3018 CR3=000000005ca8c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000deb3a1c7 RBX=0000000000000010 RCX=ffffc900005386a0 RDX=000000002dcafd5e RSI=000000000000001a RDI=00000000deb3a1c7 RBP=0000000000000001 RSP=ffffc90000538620 R8 =0000000000000005 R9 =00000000ea8c6364 R10=0000000000000000 R11=000000000000001e R12=00000000000a2820 R13=0000000034b50d05 R14=ffffc90000538688 R15=0000000000000010 RIP=ffffffff84ff0eb3 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979ed000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080165018 CR3=00000000706fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffc900033677b0 RCX=ffffc90003368001 RDX=0000000000000000 RSI=ffffffff8bf46760 RDI=ffff888026aa8444 RBP=0000000000000001 RSP=ffffc90003367168 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc900033671e8 R11=0000000000011612 R12=ffffc90003367238 R13=ffffc900033671e8 R14=ffffc900033677b0 R15=ffffc9000336721c RIP=ffffffff81a142df RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f55cd691d00 ffffffff 00c00000 GS =0000 ffff888097aed000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005598a6d48000 CR3=000000004a416000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=dc129e9edc129e9e dc129e9edc129e9e dc129e9edc129e9e dc129e9edc129e9e dc129e9edc129e9e dc129e9edc129e9e dc129e9edc129e9e dc129e9edc129e9e ZMM22=9be550ef9be550ef 9be550ef9be550ef 9be550ef9be550ef 9be550ef9be550ef 9be550ef9be550ef 9be550ef9be550ef 9be550ef9be550ef 9be550ef9be550ef ZMM23=070c15b6070c15b6 070c15b6070c15b6 070c15b6070c15b6 070c15b6070c15b6 070c15b6070c15b6 070c15b6070c15b6 070c15b6070c15b6 070c15b6070c15b6 ZMM24=4fddd3234fddd323 4fddd3234fddd323 4fddd3234fddd323 4fddd3234fddd323 4fddd3234fddd323 4fddd3234fddd323 4fddd3234fddd323 4fddd3234fddd323 ZMM25=ca1a1db0ca1a1db0 ca1a1db0ca1a1db0 ca1a1db0ca1a1db0 ca1a1db0ca1a1db0 ca1a1db0ca1a1db0 ca1a1db0ca1a1db0 ca1a1db0ca1a1db0 ca1a1db0ca1a1db0 ZMM26=dbfb5835dbfb5835 dbfb5835dbfb5835 dbfb5835dbfb5835 dbfb5835dbfb5835 dbfb5835dbfb5835 dbfb5835dbfb5835 dbfb5835dbfb5835 dbfb5835dbfb5835 ZMM27=5fc4682a5fc4682a 5fc4682a5fc4682a 5fc4682a5fc4682a 5fc4682a5fc4682a 5fc4682a5fc4682a 5fc4682a5fc4682a 5fc4682a5fc4682a 5fc4682a5fc4682a ZMM28=000000700000006f 0000006e0000006d 0000006c0000006b 0000006a00000069 0000006800000067 0000006600000065 0000006400000063 0000006200000061 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=d51d0000d51d0000 d51d0000d51d0000 d51d0000d51d0000 d51d0000d51d0000 d51d0000d51d0000 d51d0000d51d0000 d51d0000d51d0000 d51d0000d51d0000