last executing test programs: 6.535341324s ago: executing program 1 (id=2508): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x2f) connect$inet6(r0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) close(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0173704e87c6d8a3df00150000000c000600010000000100000008002a000900"], 0x28}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040), 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001c80), r6) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x14, r7, 0x1}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f00000002c0)=0x10) ioctl$KVM_CAP_HALT_POLL(r4, 0x4068aea3, &(0x7f0000000080)) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') unlink(&(0x7f00000003c0)='./file0\x00') 5.519308502s ago: executing program 1 (id=2515): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x8, &(0x7f00000000c0)={0x10000}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) socket(0x1, 0x80000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="ee3a60f01a6d", 0x6}], 0x1}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$sock(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000bc0), 0x0, 0x122, 0x0) rseq(0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 4.519703464s ago: executing program 2 (id=2519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x8936, &(0x7f0000000000)={@remote, @loopback, @remote, 0xffff6ee7, 0x0, 0x0, 0x0, 0x0, 0x108010}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) prctl$PR_SET_PTRACER(0x59616d61, r2) syz_open_procfs(r2, &(0x7f0000000740)='net/anycast6\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x40, 0x1, 0x2, 0x0, {{0x13, 0x4, 0x1, 0x8, 0x4c, 0x65, 0x0, 0x4, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x44}, {[@generic={0x82, 0x6, "ca138826"}, @timestamp_addr={0x44, 0x1c, 0xe3, 0x1, 0xb, [{@local, 0xffffffff}, {@empty, 0x8eda}, {@multicast2, 0xffffffff}]}, @rr={0x7, 0x13, 0x10, [@dev={0xac, 0x14, 0x14, 0x39}, @multicast1, @multicast2, @local]}, @end]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@newchain={0x2c, 0x64, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfffa, 0x3}, {0x6, 0xffe0}, {0x5, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2810) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000e7000700181100c70000000000000075fbf5b137594c85506724d17edfb0f57248f29ccb4cf895eff830f82d7de399dcb55961555b8e22a460f3a9c4d72acf53c4d22ab05a6e0cde1d32ba58cc76c4abbb2746aa01", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x20) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x8004700b, &(0x7f0000000040)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000000)=0x58, 0x5b) pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x37c, 0xffffffff, 0xc8, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2b4, 0x2b4, 0x2b4, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@loopback, @remote, [0xffffff00, 0x7f000000, 0x1feffffff, 0xff000000], [0x0, 0x0, 0xff, 0xff], 'bond_slave_1\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x32, 0x90, 0x5, 0x42}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0x124, 0x0, {}, [@common=@inet=@ecn={{0x24}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0x0, 0xffffffff, 0xff000000], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x1, 0x2, 0x4, 0x80000000, 0x6}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3d8) 4.407057634s ago: executing program 2 (id=2521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) close_range(0xffffffffffffffff, r1, 0x0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket$inet(0x2, 0x6, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000040)=0x3, 0xffffffffffffffe9) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) write$binfmt_elf64(r4, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) sched_setscheduler(0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) 3.819035181s ago: executing program 3 (id=2523): r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000340)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, r5, 0xe0e0e0e0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffa}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000000c0)={{@my=0x1, 0x4}, @local, 0x0, 0x0, 0x5}) 3.439606238s ago: executing program 2 (id=2525): r0 = syz_open_dev$swradio(&(0x7f0000000100), 0x1, 0x2) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000140)="a8baf2b442ba5df76908ecdedc8bd98555cf8355dc5b735ad97d6e177b7755084a0a4b60da3a77dba9455969dc231791140d56ec061407617e697422ec356d1b0fd159097f0041eb7a088cdc5a1db9ff4918ab80f376366484d15ebee5f7203d483414072bc8402d8d3f68dcc760e2ab2171ae793cce5d1b9ddf795a631a0cb14c4a7a97a07a30d984a9e570324b5d", 0x8f}], 0x1) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x593, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x381b, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r5 = gettid() prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) tkill(r5, 0x34) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x657f, 0x4002, 0x2, 0x0, 0x0, r4}, &(0x7f0000000280), &(0x7f00000004c0)) 3.370563801s ago: executing program 0 (id=2526): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r2}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES32=r2, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES16=r3], 0x48) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa9b00000000000086dd60fca33f00007300fe80000000"], 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="28e5367eaede6e9716b0912eb993f63c43e1047db9689421830a2e43898d7e18949a711feeeb71f73b36c1abc9aa8c6f01aafe39cd3eec5f86a681ce4026ff4a69259f7f2faab61c98ae45205dcf7b9abdf34cad982a61a44f282bad90076b9c0e7dd0db0667d16201fe7480af97068ec557ebc7aea35a0d22deac2bf08b61d66bf44163006e9c8ea3b2eed63d9dada2c386737c2d", 0x95}, {0x0}], 0x2, &(0x7f0000006240)=[{0x58, 0xb653a10639e17d25, 0x3, "8cbd9c4d8ac7f3c5e87f5e1a9ba437cb87aca4d7e791bd7bc6da908377145ba7b66cf4c2e765f36ac6b888c048c92a7ee8b95c75ffd308269f10d96d8a9b3278012fa5fedefc472e2f"}, {0x100c, 0x1, 0x1, "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"}, {0xcc, 0x112, 0x5, "914e0d3f6b7dc350601704ba15c40a242b744a34045b056fc1545a0d26c1071887e195bee66a374a746101307935f7d9065c71948b11da191bd61313eda8361054509a2925ce87cefaad3ca51a8ae331cc26082a05e7fb3621b9242f3117ea164c66260d7d5aefa6721e6f4800913d30c953971aec5940f7815547ead9492d3507513237989dc902c221a7b877667a9d694a3517ba9e298cd6403885b7c28415fef732c7a1242aef50d0f5e5aed9b07fb56ab47693ddc3a2c8fbe3d94d2eed"}, {0xc0, 0x116, 0x4, "7037cdd645c4471bcdf56361b2dd45392c509574b9a280e00230fe0bf47361261e4cd3c381e027bcfa49227e58e94ac0636d211c422c2b0b66380e51ed0d15f6c01d4798a23e6aff396907594b78d7ecc95827023e92b3de969157eae2ba527932043860ba8f4349e2a3217b74980414d212ec2f799578971750a29c5c624f2760f1adb4d44d716aff8e148273603eb1585c6096b6dddc18d0594cd81b9193562fa17641fb90e3161ae97036d889b9961d4a"}], 0x11f0}}, {{&(0x7f0000000b40)=@caif, 0x80, &(0x7f0000001080)=[{&(0x7f0000000bc0)="8e2638783a4091327bd0f7739472f1468bb0547300000000", 0x18}, {&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000000c00)="ddb1cfddaac852b7ad19051a49aacabb0989fbd0952e43ad30dc834233ff894363bca27e1e517b031d4524e67e94532df4f0e14e93eabad942a695957599e71dad625adc080cb2c64a731992ab6328681a140258e810222a4abd71a452b60256af4708a3979608dd8da3f5bf677bf2ab5da456a33351bfdc83da4d2b24e5eaf4df0ba94deb60d3c63321a48a7cce48dce3498d7f5b94719e7c70f2dfc594b3eb10641fbcb46ca2e5d0cec74c0c6444cbb0d07f41827cc9febb97c6", 0xbb}, {&(0x7f00000050c0)="9e3c82a38260fd0027d78bea0d43faf08d3e04e5b264e3b5853fe6b8a12185c41d33ded914d2e56a77f8ac86199444d7d22f0599ee2ac0c7309391fd26cbf60031517d832801aff6956d0f678364678aa74d6dd1442388204f03b6b01907245805e203e4844b4d643b6387233ed93dc08c0999f238c102142eebb03c59ec03c36a9e7a5acf7e7f35863bff67dea73df27579777d", 0x94}, {&(0x7f0000000e00)="c4092facd30a6bdb5218a480e3a0886c8ccc8625f981cc5616f77804d1b40ab01c268be0db9d7bf4b13e5324bed61438ac920677dca406362f049b95322f36ae5355286d266e1b1b999cd245a434df077d1d5e2693c66843b52f974b4c3e082a5c43b0ff04231102350559348b251e5a4a2c7834ce2cfa", 0x77}, {&(0x7f0000000600)="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"/417, 0x1a1}, {&(0x7f0000000f80)="df53f0d59e3339d054f4c38a8cf4e063fe8b2f596f1a26af5382fa50df843bceb707cea81f0c4ec483f88a973aeb9238cd43cdfae36fee292abc888a60359de2e1794b4054206d2075505ce10bb55aec676bf84425db7ae2ebf332bbec2ce5a5a1db78385403b37ae5d226fa1e34ce6aa34958baa074620e4009d37a1307b598dac58ec4f068c5602b53833dc1b4759b9183103b617d7ccdf795ad90828202fdbd2d28c5733200016061badf5ad1f51a256f6ae304b3cc326762b912ac1b871005b2c7019af313c120a082797658e9f34c6d6852e78917d1802bf1c5df7be6", 0xdf}, {&(0x7f00000002c0)="848c9f852e853c8bb3af0c1596c52e378bfa7086b7165c5fb7eb", 0x1a}], 0x8, &(0x7f0000001100)}}, {{&(0x7f00000011c0)=@x25, 0x80, &(0x7f0000001340)=[{&(0x7f0000001240)="0efb5b59062b3b34e45cb1a395661c37cce438b8cf4f974db0198b64bf0c517fd9c707b53b238387b31bad43765eb5ec7fa390211f907e0bdbb45bdd56ba68c10c891bf04e7804d87761f908397ab814fe4fbd8819e3ba12769e52306e8a71f3b70167b9cc1309901f6d0e810019fd8b0b2f3f9e5a8cd7ceaafd11274ecd951cc00f1d81dc1513d142a40c92", 0x8c}, {&(0x7f0000003c40)="a420da1e13fe2069eaacf50a43124b6fac3c1ff521a9d7682562e823ee53f7740d19a7e6fa6db502a731ab68cd503ea88f4bf506b9bd0faaeaff049878b443ad85c8863d7dc5f8765ae83f8f368bc9c8658a72a8022bba6085a0cde106a926eab3cd4a9752fe306abc9b1270da671e4b22368e2fd70855dc13990a5bae963d2a33d566b5fcce69397c3db7d6c5ab4bfff7fd5aa9292194afc2a133564c1834a7e203ea026833b8f07a1c61ab30c6785c731aa86904542092de6d9693b5af4bd48d31776d1fa31bab6c3b3074a523c08abec7c551587b2da4dab3f918c988587dbe6120534e43e3e489bc1032edfde7728a9e90bcde24881214595dac1d3de592c3534c9419ce6cdb877734397829cfb5292cf243c8d0aeeecb8711843a5ad15c204099c1e7e668f11417d2a05eb89bfd97e3b90fedfc8e538e9fbadce9b16f0ea9758972022df2cb96dc12a9c94f711b8b86ec5bb67e930d334b0d0bcfc658b1f7850ce8459afc27841e022cf817b9b56341579d27a453df1bd489de73b53f627280d13ff0bd6e5c5614d7d30b234ec2e2766fbcbf49fd96f080130c02aa2f5b265eab66f56931e420c29c2822496595f936300db9f10560d02f0b9de5d546d3726a9cad0b6682e7763efdf703753fd7e3888cd1744bdf508fc8edd3090c40f857a3ff7e20a7137b55f43e5dd7d5dad7578569d68f71c66a98a46a54a94cb2d3f22d2fb2dc6fa294edc8b53b02d7a5a79f4d6f3ce392d24452e9713d72f2e2e4b479ea7a5cac8bc06569da41f2c5cbc51421a7538dfbeff811812554a178b52609c622586979d45cfd8bb1e12bb6468bceb8930b4f1841c30e3be8a591fcdd163c65a5005ad7e77dba2856511e1b3605ee177a2d911c0321896c41f080ef8cc7cf0a28520bdca7fb10c63d572eb15ecfad68878afc0068595b5bad50874ed0d38a69b4ec82b7bf577e2f104998cc7295e69906ad91b0c9b785eda3a2d14934196344ce820cea5bc1fce39fe5050420680a009a73b6614395808099ab8e419f72ad493e889fdd845b8e469eb27f550c37f6b24c289fb557d61c894a8a750b7dbcdb4188d20a48624087fa509a1a21a826ed9a973306fd028101835c6aeb4eac32d916ba8ee0ff3d3e80835d1660337da0ac79ca42f68a5166745e82a4ca4b428a273475f59671df79b522b4125188ea40c59a83017cf28be9b65b37cf1f11490adf1a4daddabbf3c83a437461ce61b207422ea96ed008c5b305cbac91abef77574588d86214fa0e17395c0da0a91bed23aa881a154f9a30359acaa226089ebf074437db8ab8eeccfe356e04769ff96a5b5a77c46b6a15c5f3a38c3bdf0ff17d6a1bf2824c488ed74dd5871a9bb98bfe975abbe2f5275fc9769686c2129a456693e9dc3f8b3125bd9aaa5854a5cedc0382e91c06fed29d7375dca153a15dafb13396a1184291d0997798b9b16cd4daa177f30b4f42c30fa8336f9297356f60f51a908948a29988e478bffe7b60df2a2690bb66e82edabf50cd076d576723a02cd444abf8eaea0a05a65ab2bb5979a4239a10900b05675cdc781d1f765e5e045cdc6df44c5f711f8679b26b973aa7c4b8e9574e56313fac0046b1ab80e753b14666802ca8061a5cc92a1de00c9f5677b58b79ecdb655d04f31f995fb1af185e42f6eacde0838f23f72ec04caccddd4f298ec0d8422aa2f9b2da3a1e1396737d0fa6c100771e4252937f1bfadd59fa46f66c81952014694caf61ba17789a8b4552cda2830deed2ce5ada3cd4ddf1c4f81413fb70663c8c997e19f557a8dbf49fb08eeb9d0888b592f5f2a5edeaec6dd04597cc9d4eaaf25a871e653c5b83b508f304bbc18d5c2c1ed1a5160f789d3990c9001a2bfdff03dd1e65f959aa09a17f9cd3d9f9ef880c5f1bde14a61fd6bc2fd8228790d4979f41e0222fa43c3165f661fedc9963154dc99d64736eb99080072a49770528525c74a088fc0ed6828854f7920012dd36317deb81ca0fc2e11bd052f2e04a6f9f906bc23d889f84d6ea9901dcc0efe271d73d7da8414e720338029e07906dce5d751a0dae8af81ccbde275909a90e851ce696c2ed1eae7fe2f7268551d46a6e47270706994ac88c8949729d3bf459f8350e7763e9bec8b721b57969fc56bc985c890204f5a5dffae68f8400594bd6fb1e2b5998b488f9ce48d45efb0a05b008739d7b85997fe0ccfaddeb3a60894ee99738caa85da67fd8150eb4a04ebf9eb6b5bbf695672bd92213e2a023b3dc5ab72e24c177c9bd4eff78e5a50185efdff7c12580d4f88067477c856d626ec49fd2656839b979dbe011100c066d54092bdb2624f6fd0df70aa329f17521bbd3c0a7c1db40ec6087786eb5adaee4b2f8e840b7f6814bf3ee2176e68247a5969ed83559aa95111cf043f8fe7a0d33126dccf449ceb3b69bc8b8acd10794df0cfcddcd407cfc94bf1a2232c3909710b157003fc5c9e6dd73999e95d3933e8d057e7d7189a4f13223795667e201fefe1627cfbf56390197fd496f77cf80f76f54c9374027808031c44252acd735b912c1318e019d18dd33d2d29b8f42c6e405bc0b7cce4bc631faa0935c3ac740d457bcf6aa6252e3e82b62751e1a645b608242d1cc8c888416d0d23b09cae60cf6b41f24439643c8a3db6c216629f3189534ed23f867ad531b737ae56a54b54dcb052f0c1349c5c0f0581eb63663c719ff0a291597880745f59c131c6fa7ddbabb763ce7d1bfab9efaa5e6ba318110344982beace8704d1612605f990ef833155a6a2d277270d59b8ab741c12c745df5db0c10abd1e142136b17290982482cd832de5711243029b41d8490cdf0a5bb18872910c334367142b567a7825b7fb0a4e5306d50ed1d01f5662fbac2fe2d527c03dbbf050a419694b6a9d94cbb72afd21fff00c29895b6428d2fbcbd5e1e8afe8fc2bbcfb6abe734dacb5281527e87694b35d92779c4f652ccca44691fe68339de0f4b15eedf70ca47d1ea2a2c40cfddc45cd8ff6a28168b880c76b136ef5a6a0c4ffff51f62c29c60576465efaffe5213a03a9d2c6c0529d9b4f25bb26532a0872b8e7df5aa828f684dfe9e8e4c717bb94ecac8cb4d44fedb5dc8ed3f838a7edd6e53979effe46d16c36334b9aa67b636cf729da4a995cdeb0be0c7e18b7ea178c92fccfad7d80f55049321d23d81646330153c86f8063910790e34adab39a2faedb217b9e60b6aa17d0b093ca65269fc3922f804ec2df38ea856c9f94101f84a7ccf468647c79707831ffebafca860b015498bfa530f4a4a517291f98d7a44b22cfcdd8fd911b2d64c49deef22ae220f411abb0f7b74ce114d64f0162512c5f651b457980369e784ef449bd102e78237f4371bd544197162441a5aa2fcc1c74d1826104092a996bd4d4ec95e0e25137dce818df6bd7a9fd0332a00f53275e257cfabb76b773237237a484f957aa606f8432139e0488e6abbcbc21db8f3a7d2fefc1f965554d15acfad99d1b7268f8032fc93962de2c7884982e4c95eadc2fdea23f26a0552fdb14066f14b1b96d849a6a7d54216bf98c96773baca859956806f8c45acc48e3dfbd624967edc8b66f41937d483d76585051088373d8a4ddb9cecbbe60a6851034053ed4264c22d575c6377a341b65be3524f48444c7318f1846cc0c01a6c3d677b62745bf4da2566ac23093d200db98d2f3767193a83aa3a364b1f044ef280be2a36b9d0bf70c7c9f8f664a1a27499f8cf173fb142c9237fea5df7fa415d6cd9d01b3c91d6cd51cfe0c64ddabea5f6d436c6790aade7e80cb4d6399d3738def1556a23b47c7e7c9bc11830f6257c62caff0168e3683519b3841644590f195112d53ca5f6ef5e88d06b2ed7fc8abf6be05a67455fcfc111919cd032f2b2f9f07f28dfade8d4795dffd69d24c01fd70b7bd66633c1a3b04d375f753525cbec994e011665124916f7150fcf395411fa088c19599e11d501660943636cce7382bbd29bc973bdf0e8f203116b5e588ab4fe1eef4b33b423ef41cfd02592449e198f6a3856e26a1689f47c54b482fc4712727678f471a808a013c8619ad520f70719232fac437056e0d61437706e18083b20744cd38c83ca0172c01374c5aa27ea3b30ff52373e6c3f718430ffa682f4956cb623228dcd8a644796810cc22b6a97b7a9ab820f57facf960b1cf5f0f5acb3adac03a3cf13cba290429212cd888f28e54a4fee4604b46b1d9beb794d5f2f5432c2751a57ff98ec1f4f1d8455e73c1c68029da8b50ebddde6250e6a51bfe96f738f505b0aaddd07ee3f56a549db2c9609429f50ae82571d57542fa3966f06137a030accd983ca3cbdc9130cefd0aa65cb625cc7f270c9fb91e73c40f603fc564a441b1eae3d1c9eaaefed345ec85eddb2b05f553c7ed0b9c78b7577fbd55a5db158d2ac11acefb0df75ebe1f92fc1d5506e4c9d8aef84930608e1986e59f75c8c1f34b7e480fba3bb7200f25679815a3e60c73a15f146f759ce248a18076183cd8e80489683b28430f5f0f0c0c0ef31fde819977d82a7b0caf4b98a4ae3382325e6e1139c4adba509cc563cfa3fe72d72d7e2bc738e84926b8839f6b46ffc2821b4618ea089cdd7eb07f9e2738fbc9b2d02deb1ab2ecce9bbff166a5f138d33f19fc816b262f6a6ea9bfb470789f8c761c9fa730f862b5aa3b058879c6e578e600844073417b871d1db6a73fda6885726503fafc2c9e1520c29f7ea087990154626c9a126c231db8d2db76e33a9fcecd67223c90683b6799d808d12f57d9f6a5889169217e02f1ef02700ab9dc6c1f3acb26f38bf5ac2e6c6ef4525360a29c96269c8ebae60f1eb9d4a6c4d66e2dcb32f28e8a874d469eda6cddd5f4be12e80782dacfaef38e087c629f4b7ceb620f1ee06e462b2ad0ca60185a972ed07d362a875dc8a408522bb782b8e8eab41eb524654922483f22ab1ba403dc555037a08a1bfaa6f403e90f6537ffdfea0dc593859210798cd0cc83e5b1b079f656825295251246c7e3592147f3d0cd996c9ab44dd9c21d86ead328db10791eb3db43da574646cca87da29bc9d35c3250f2c973dd8aff78a0be882d50dbd55b8d32cfabb1a9b6a97af5ab501a22aad4cd24495f917e3ce7fb0e3a018009b97092e1c19707c26cd2e76e48aa5b9f426d6ed2113a9acf7dac4156ffe86721fcb961aa3d93cf7b67f49bb899780afdafb34f5e070f42cbe30bb5b785b82d2d98a6251633926f74b4697e5907213dc93013b28a9bee030d883e879bff1a8123ca1ef8c2913d249c0b3f50ea25eec1ced66a3a1afdc23d0f512677ac51929c35ac3fde8a39d77717b0b76a57f96e623bb33933ed65db96969fabf608635eac4770a1505026027c6d9699d1c7f91f9334c0cc760549922116be9a1ee26e55c0839c756bdceecd02abeafbd224a523c5a08438c2b24e2b07d5720df580b6d9445d62b77940c54b9f13a3e9713d8c06ddd06a0c84790c728bdf84c15c57c447100b9950c605f788698dffa80e2a78a8bb4fce39f9226e47a39779addb5a23f2d55117bc34445af74b2f0fe0edbcee1cf62dc93c83ca3fbff8c376641129ddca4a9a7c404ae85f5b61af660567d8d53e9af8947bd0c4d4f0f981b144d1a9c0a10946aa6f6b9c713166a466b9ac8a9dde2d013e83fb54d1dc085b9f87250d18924db61139caeca783f8c98e0c1c76bb0b67330a82adfc457cda05a23804b0e6c3cb3011a7e756c56d6e71564e9f8410dfc13b82ed8cc26f34e2eab3c1c4b2825937eddbff9ce33b64298eef5292711e25e8796c87397a8", 0x1000}, {&(0x7f0000001300)="bde333b04dfb0d7d97cd988fa52d847028c7601ee902c01442d5cc54ee45aedaf8d30ba3dc", 0x25}], 0x3, &(0x7f0000001380)}}, {{&(0x7f0000001400)=@in={0x2, 0x4e23, @remote}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001480)="cb36664a8a31a442c304bb409317cc71c00e440b800ac72f50019ba903e38e8a15770402b4fce85238fed795087d1ebfa5fdbd533c3a23ee828ffe92f98d18ea4f18e6f10911be2249d0b53d4228334d86ae6afddda8e9ea2039b5a8ba02e0f83d0fe1a14bbea9154281e58061a9aa568737ab5570ee403aa6b84b93b016352092ae313489b246331fc8b02b0c6fec5f96ed6ae827e753d3c7371e58dbcfb4150c884496ef8a35d54a6894ac075aca90cb85638453f231b399fd76", 0xbb}, {&(0x7f0000001540)="cf13d377dab381518e43d6d2134536804ab0ff859a2e2473a4b28e90cc98449574c261408ee2b6cc81f52e80dcf6bc601c0ee70d9393e0389f38636355f7c1ca17ed946958b8c4aa5b5168e6259cbf9ff743d043ff2d70d298d5807f85d9c74023b00d52e74eeb97922c9463e6a6de8e174cdd451451d98cfbe0c3dc448e73d5da9b5d14d1c98e0c9e0bd7bc9e46dd28836a2c330ba51bcfb7b376abf60a3c4ab7cd1905c68686cbba3321f45d0820a07df60854f21c48cef0a394812e2c21eae320", 0xc2}], 0x2, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x2c0}}, {{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000001680)="1f269382a6673ea733f126f4d267db6a877ae7a1eb591f76c4759aac66fc3c5c4ef08beefd41f51202c5d71513d76d6d8308bb516fe298702129917122b731c06061db40da696cd97e9705dcd44992c45d12e2d0aaa3b99deaa9eaff83c2bd36ebca0538f3928973b404368e18de4eccaaffcba58a12cddcfe409869bde2e510d50b19ab8f77", 0x86}, {&(0x7f0000001740)="c4fe6c59646426d06871bc4fbcf9efd7cc269be927e6cf7bba25a120f7162bb1e86d923c6a", 0x25}, {0x0}], 0x3, &(0x7f0000004f40)=[{0x10, 0x10c, 0x2, "c65df0"}], 0x10}}], 0x5, 0x80fe) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x400) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x1f, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @call]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xd6, &(0x7f00000001c0)=""/214, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$HCIINQUIRY(r5, 0x400448e4, &(0x7f00000009c0)={0x1, 0x0, "0db43f"}) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r6, 0x0, 0x0, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) 3.312658349s ago: executing program 1 (id=2527): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff07) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fcntl$setown(r3, 0x8, r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001440), 0x0, 0x4000005) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 2.360715226s ago: executing program 0 (id=2528): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x8936, &(0x7f0000000000)={@remote, @loopback, @remote, 0xffff6ee7, 0x0, 0x0, 0x0, 0x0, 0x108010}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) prctl$PR_SET_PTRACER(0x59616d61, r2) syz_open_procfs(r2, &(0x7f0000000740)='net/anycast6\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x40, 0x1, 0x2, 0x0, {{0x13, 0x4, 0x1, 0x8, 0x4c, 0x65, 0x0, 0x4, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x44}, {[@generic={0x82, 0x6, "ca138826"}, @timestamp_addr={0x44, 0x1c, 0xe3, 0x1, 0xb, [{@local, 0xffffffff}, {@empty, 0x8eda}, {@multicast2, 0xffffffff}]}, @rr={0x7, 0x13, 0x10, [@dev={0xac, 0x14, 0x14, 0x39}, @multicast1, @multicast2, @local]}, @end]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@newchain={0x2c, 0x64, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfffa, 0x3}, {0x6, 0xffe0}, {0x5, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2810) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000e7000700181100c70000000000000075fbf5b137594c85506724d17edfb0f57248f29ccb4cf895eff830f82d7de399dcb55961555b8e22a460f3a9c4d72acf53c4d22ab05a6e0cde1d32ba58cc76c4abbb2746aa01", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x20) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x8004700b, &(0x7f0000000040)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000000)=0x58, 0x5b) pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x37c, 0xffffffff, 0xc8, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2b4, 0x2b4, 0x2b4, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@loopback, @remote, [0xffffff00, 0x7f000000, 0x1feffffff, 0xff000000], [0x0, 0x0, 0xff, 0xff], 'bond_slave_1\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x32, 0x90, 0x5, 0x42}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0x124, 0x0, {}, [@common=@inet=@ecn={{0x24}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0x0, 0xffffffff, 0xff000000], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x1, 0x2, 0x4, 0x80000000, 0x6}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3d8) 2.36046126s ago: executing program 2 (id=2529): syz_emit_vhci(0x0, 0x22) openat$uinput(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x14) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000b80)=""/102386, 0x18ff2}], 0x1, 0x400000, 0x81) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="2d9d7ab861bd4d304d57ab9f4ed1108b1c6e2a9dc73e476201885496d59d8d3692555eb1d760a2048d6477942bf58cc712"], 0xe3) socket$inet6(0xa, 0x6, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRESDEC, @ANYRESOCT=r0], 0x1a) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f00000000c0)=0x1) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x0, 0x10}}}}, 0x11) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f00000001c0)=""/2) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x10, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r3 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) 2.360281406s ago: executing program 3 (id=2530): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00'}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$mouse(0x0, 0x6, 0x181000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x80000000}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close(r2) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendfile(r3, r1, 0x0, 0xffefffff) 2.314184719s ago: executing program 0 (id=2531): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0xd00, &(0x7f0000000240)=[{&(0x7f0000003080)=""/4106, 0x100a}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) munmap(&(0x7f000057d000/0x800000)=nil, 0x800000) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000002c0)={0x64, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x3c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x12, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x10}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x64}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x0, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/158, 0x9e) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000100)={0x0, 0xd, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06464ce, &(0x7f0000000080)={r5, 0x3ff, 0x2, 0x2, 0x1, [], [0x3, 0x74, 0x1ff, 0x5], [0x5, 0x6, 0x7, 0x1ff], [0xffffffff80000001, 0x4, 0x8, 0x2]}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a0, 0x0) syz_emit_vhci(0x0, 0xf) syz_clone3(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpid() 2.120314225s ago: executing program 1 (id=2532): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000400)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2db, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/41, 0x29, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001030090780000000060fd90630000ff010000000000000000000000000001fe8800000000000000000000000000011e520b02c2964e88"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440), 0xc) r4 = syz_io_uring_setup(0x5135, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(r4, 0x4684, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000b80)=[{&(0x7f0000000580)=""/85, 0x69}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x4040844) r7 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) getdents(r7, &(0x7f0000000180)=""/98, 0x62) 1.988336266s ago: executing program 3 (id=2533): socket$kcm(0x10, 0x1, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x68) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_FUNCS(r3, 0x705, &(0x7f0000000240)=0x1d4) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) socket(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff0000000000080001"], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r5}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xe2a4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.9870711s ago: executing program 0 (id=2541): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff07) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fcntl$setown(r3, 0x8, r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001440), 0x0, 0x4000005) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 1.625621316s ago: executing program 1 (id=2534): syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9, 0xa2, 0xfa, 0x40, 0xbb4, 0xa26, 0xbb83, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x6e, 0xbd, 0x25, 0xfe}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_all\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x8, r0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x404a2810}, 0xc, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000040)={[{0x3, 0x0, 0x80, 0x0, 0x1, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, {0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f320f62010f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b8007b68000000000000000f30", 0x59}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.564963647s ago: executing program 3 (id=2535): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x2f) connect$inet6(r0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) close(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0173704e87c6d8a3df00150000000c000600010000000100000008002a000900"], 0x28}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040), 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001c80), r6) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x14, r7, 0x1}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f00000002c0)=0x10) ioctl$KVM_CAP_HALT_POLL(r4, 0x4068aea3, &(0x7f0000000080)) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') unlink(&(0x7f00000003c0)='./file0\x00') 831.294046ms ago: executing program 0 (id=2536): r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000340)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, r5, 0xe0e0e0e0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffa}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000000c0)={{@my=0x1, 0x4}, @local, 0x0, 0x0, 0x5}) 831.049506ms ago: executing program 3 (id=2537): r0 = syz_open_dev$swradio(&(0x7f0000000100), 0x1, 0x2) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000140)="a8baf2b442ba5df76908ecdedc8bd98555cf8355dc5b735ad97d6e177b7755084a0a4b60da3a77dba9455969dc231791140d56ec061407617e697422ec356d1b0fd159097f0041eb7a088cdc5a1db9ff4918ab80f376366484d15ebee5f7203d483414072bc8402d8d3f68dcc760e2ab2171ae793cce5d1b9ddf795a631a0cb14c4a7a97a07a30d984a9e570324b5d", 0x8f}], 0x1) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x593, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x381b, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r5 = gettid() prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) tkill(r5, 0x34) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x657f, 0x4002, 0x2, 0x0, 0x0, r4}, &(0x7f0000000280), &(0x7f00000004c0)) 829.661286ms ago: executing program 2 (id=2545): socket$kcm(0x10, 0x1, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x68) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_FUNCS(r3, 0x705, &(0x7f0000000240)=0x1d4) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) socket(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff0000000000080001"], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r5}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xe2a4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 294.146586ms ago: executing program 2 (id=2538): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) readv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000000)=""/107, 0x6b}], 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f0000001840)=""/4090, 0xffa) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000600)=""/170, 0xaa}], 0x1, 0xffeffffe, 0x0) read$char_usb(r3, &(0x7f0000000240)=""/34, 0x43) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@getspdinfo={0x14, 0x25, 0x1}, 0x14}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) bind$ax25(r4, &(0x7f00000000c0)={{0x3, @null, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 267.434669ms ago: executing program 3 (id=2539): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)=ANY=[]) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000000000000000000000f7"]) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0xffffffa8}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, &(0x7f00000000c0)=""/92, 0x5c, &(0x7f0000000540)={&(0x7f0000000500)={'xxhash64\x00'}}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES16=r5], 0x74}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') unshare(0x4000400) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000200)={&(0x7f0000000180)=[r8], 0x1}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000000040)={{0x3}}) getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x2) 62.390491ms ago: executing program 0 (id=2540): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="500100001a0001000000000002000000020000000000c808ffffffea080006000700000008000400", @ANYRES32=r1, @ANYBLOB="06001c004e21000008000140ac1414"], 0x150}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r3, 0x7ffffb, 0x0) write$vhost_msg(r3, &(0x7f0000000600)={0x1, {0x0, 0x0, 0x0}}, 0x48) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r6, 0x0) 0s ago: executing program 1 (id=2542): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0xd00, &(0x7f0000000240)=[{&(0x7f0000003080)=""/4106, 0x100a}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) munmap(&(0x7f000057d000/0x800000)=nil, 0x800000) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000002c0)={0x64, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x3c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x12, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x10}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x64}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x0, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/158, 0x9e) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000100)={0x0, 0xd, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06464ce, &(0x7f0000000080)={r5, 0x3ff, 0x2, 0x2, 0x1, [], [0x3, 0x74, 0x1ff, 0x5], [0x5, 0x6, 0x7, 0x1ff], [0xffffffff80000001, 0x4, 0x8, 0x2]}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a0, 0x0) syz_emit_vhci(0x0, 0xf) syz_clone3(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpid() kernel console output (not intermixed with test programs): 1452] vivid-000: Standard Aspect Ratio: 4x3 [ 432.388385][T11452] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 432.396962][T11452] vivid-000: DV Timings: 640x480p59 inactive [ 432.400724][T11452] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 432.412374][T11452] vivid-000: Maximum EDID Blocks: 2 [ 432.417252][T11452] vivid-000: Limited RGB Range (16-235): false [ 432.436988][T11452] vivid-000: Rx RGB Quantization Range: Automatic [ 432.438702][T11452] vivid-000: Power Present: 0x00000001 [ 432.440138][T11452] tpg source WxH: 320x180 (R'G'B) [ 432.443848][T11452] tpg field: 1 [ 432.444773][T11452] tpg crop: 320x180@0x0 [ 432.448030][T11452] tpg compose: 320x180@0x0 [ 432.452284][T11452] tpg colorspace: 8 [ 432.454128][T11452] tpg transfer function: 0/0 [ 432.456635][T11452] tpg quantization: 0/0 [ 432.458446][T11452] tpg RGB range: 0/2 [ 432.460093][T11452] vivid-000: ================== END STATUS ================== [ 432.842475][T11463] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1634'. [ 433.757188][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 433.958946][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 433.967363][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 433.973012][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 433.989811][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.999064][T11475] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 434.018634][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.127010][ T5384] usb 6-1: USB disconnect, device number 15 [ 436.810130][T11503] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.818091][ T39] audit: type=1326 audit(1726868420.158:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.1.1646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 436.825256][ T39] audit: type=1326 audit(1726868420.158:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.1.1646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 436.832629][ T39] audit: type=1326 audit(1726868420.158:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.1.1646" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 436.839831][ T39] audit: type=1326 audit(1726868420.158:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.1.1646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 436.846198][T11503] autofs4:pid:11503:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 436.847058][ T5384] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 436.849923][T11501] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.1644'. [ 436.853939][ T39] audit: type=1326 audit(1726868420.158:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.1.1646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 436.863912][ T39] audit: type=1326 audit(1726868420.168:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.1.1646" exe="/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 436.871385][ T39] audit: type=1326 audit(1726868420.168:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.1.1646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 436.878912][ T39] audit: type=1326 audit(1726868420.168:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.1.1646" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 436.886091][ T39] audit: type=1326 audit(1726868420.168:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.1.1646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 436.894635][ T39] audit: type=1326 audit(1726868420.188:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.1.1646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 437.009292][ T5384] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 437.017003][ T5384] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 437.028891][ T5384] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 437.034470][ T5384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.043904][T11500] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 437.050081][ T5384] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 437.062630][T11509] netlink: 'syz.1.1648': attribute type 10 has an invalid length. [ 438.312547][ T35] usb 5-1: USB disconnect, device number 12 [ 439.298751][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.619564][T11540] xt_CT: You must specify a L4 protocol and not use inversions on it [ 439.650836][T11540] autofs4:pid:11540:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 439.778311][T11542] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.1658'. [ 440.835861][T11560] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.1671'. [ 444.011745][T11598] xt_CT: You must specify a L4 protocol and not use inversions on it [ 444.019116][ T39] kauditd_printk_skb: 77 callbacks suppressed [ 444.019124][ T39] audit: type=1326 audit(1726868427.368:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.2.1669" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 444.026500][ T39] audit: type=1326 audit(1726868427.368:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.2.1669" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 444.032707][ T39] audit: type=1326 audit(1726868427.368:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.2.1669" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 444.038956][ T39] audit: type=1326 audit(1726868427.368:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.2.1669" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 444.044522][ T39] audit: type=1326 audit(1726868427.368:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.2.1669" exe="/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 444.052646][ T39] audit: type=1326 audit(1726868427.368:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.2.1669" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 444.058869][ T39] audit: type=1326 audit(1726868427.368:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.2.1669" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 444.064491][ T39] audit: type=1326 audit(1726868427.368:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.2.1669" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 444.073377][ T39] audit: type=1326 audit(1726868427.388:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.2.1669" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 444.080534][ T39] audit: type=1326 audit(1726868427.398:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.2.1669" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 444.187980][T11598] autofs4:pid:11598:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 445.406194][T11618] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.1675'. [ 448.708654][T11674] xt_CT: You must specify a L4 protocol and not use inversions on it [ 448.772389][T11674] autofs4:pid:11674:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 449.887375][T11687] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.1693'. [ 451.423857][ T39] kauditd_printk_skb: 80 callbacks suppressed [ 451.423867][ T39] audit: type=1326 audit(1726868434.768:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11704 comm="syz.0.1701" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 451.521922][T11710] xt_CT: You must specify a L4 protocol and not use inversions on it [ 451.528633][ T39] audit: type=1326 audit(1726868434.878:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 451.540921][ T39] audit: type=1326 audit(1726868434.878:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 451.550895][ T39] audit: type=1326 audit(1726868434.878:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 451.560849][T11710] autofs4:pid:11710:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 451.560903][ T39] audit: type=1326 audit(1726868434.878:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 451.576483][ T39] audit: type=1326 audit(1726868434.878:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 451.594171][ T39] audit: type=1326 audit(1726868434.878:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 451.610507][ T39] audit: type=1326 audit(1726868434.878:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 451.620405][ T39] audit: type=1326 audit(1726868434.878:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 451.627655][ T39] audit: type=1326 audit(1726868434.888:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 451.751059][T11717] netlink: zone id is out of range [ 451.752619][T11717] netlink: zone id is out of range [ 451.756331][T11717] netlink: set zone limit has 4 unknown bytes [ 452.786038][T11735] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.1708'. [ 453.493019][T11745] overlayfs: unescaped trailing colons in lowerdir mount option. [ 455.055917][T11779] netlink: zone id is out of range [ 455.059750][T11779] netlink: zone id is out of range [ 455.063305][T11779] netlink: set zone limit has 4 unknown bytes [ 455.661805][T11792] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.1721'. [ 457.185325][T11806] fuse: Unknown parameter '0x0000000000000004' [ 457.199768][T11806] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 457.259399][T11813] overlayfs: unescaped trailing colons in lowerdir mount option. [ 459.210280][T11846] netlink: zone id is out of range [ 459.217845][T11846] netlink: zone id is out of range [ 459.270083][T11846] netlink: set zone limit has 4 unknown bytes [ 460.286970][T11862] fuse: Unknown parameter '0x0000000000000004' [ 460.331074][T11862] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 460.451201][T11870] overlayfs: unescaped trailing colons in lowerdir mount option. [ 462.197552][T11903] netlink: zone id is out of range [ 462.199197][T11903] netlink: zone id is out of range [ 462.202735][T11903] netlink: set zone limit has 4 unknown bytes [ 463.595977][T11914] fuse: Unknown parameter '0x0000000000000004' [ 463.614782][T11914] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 463.627419][T11915] overlayfs: unescaped trailing colons in lowerdir mount option. [ 463.729351][T11917] blktrace: Concurrent blktraces are not allowed on nullb0 [ 465.221355][ T35] IPVS: starting estimator thread 0... [ 465.327260][T11943] IPVS: using max 35 ests per chain, 84000 per kthread [ 466.230170][T11951] netlink: zone id is out of range [ 466.231660][T11951] netlink: zone id is out of range [ 466.235192][T11951] netlink: set zone limit has 4 unknown bytes [ 466.990996][T11965] fuse: Unknown parameter '0x0000000000000005' [ 467.050196][T11968] overlayfs: unescaped trailing colons in lowerdir mount option. [ 468.679136][T11993] netlink: zone id is out of range [ 468.696103][T11993] netlink: zone id is out of range [ 468.729847][T11993] netlink: set zone limit has 4 unknown bytes [ 469.533165][ T5384] IPVS: starting estimator thread 0... [ 469.638238][T12006] IPVS: using max 34 ests per chain, 81600 per kthread [ 471.414238][T12025] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1783'. [ 471.419770][T12025] gretap0: entered promiscuous mode [ 471.433909][T12025] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1783'. [ 471.436401][T12025] 0ªX¹¦D: renamed from gretap0 [ 471.438645][T12025] 0ªX¹¦D: left promiscuous mode [ 471.439961][T12025] 0ªX¹¦D: entered allmulticast mode [ 471.441952][T12025] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 472.416231][T12050] netlink: zone id is out of range [ 472.429446][T12050] netlink: zone id is out of range [ 472.624530][T12050] netlink: set zone limit has 4 unknown bytes [ 473.965172][ T5404] IPVS: starting estimator thread 0... [ 474.057282][T12068] IPVS: using max 35 ests per chain, 84000 per kthread [ 474.074802][T12073] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1794'. [ 474.077868][T12073] gretap0: left allmulticast mode [ 474.115373][T12073] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1794'. [ 474.118035][T12073] 0ªX¹¦D: renamed from gretap0 [ 474.121700][T12073] 0ªX¹¦D: left promiscuous mode [ 474.123030][T12073] 0ªX¹¦D: entered allmulticast mode [ 474.126082][T12073] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 476.386797][T12105] netlink: zone id is out of range [ 476.393649][T12105] netlink: zone id is out of range [ 476.425085][T12105] netlink: set zone limit has 4 unknown bytes [ 477.323130][T12118] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1804'. [ 477.326281][T12118] gretap0: entered promiscuous mode [ 477.335779][T12118] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1804'. [ 477.338837][T12118] 0ªX¹¦D: renamed from gretap0 [ 477.341534][T12118] 0ªX¹¦D: left promiscuous mode [ 477.342859][T12118] 0ªX¹¦D: entered allmulticast mode [ 477.346504][T12118] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 479.729539][T12148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1814'. [ 479.806168][T12153] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1815'. [ 479.817564][T12153] 0ªX¹¦D: entered promiscuous mode [ 479.825680][T12153] 0ªX¹¦D: left allmulticast mode [ 479.838076][T12153] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1815'. [ 479.840509][T12153] 1ªX¹¦D: renamed from 30ªX¹¦D [ 479.842940][T12153] 1ªX¹¦D: left promiscuous mode [ 479.844250][T12153] 1ªX¹¦D: entered allmulticast mode [ 479.846209][T12153] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 480.340934][T12162] netlink: zone id is out of range [ 480.345462][T12162] netlink: zone id is out of range [ 480.356088][T12162] netlink: set zone limit has 4 unknown bytes [ 482.136607][T12186] [U] ^R [ 482.159788][T12188] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1826'. [ 482.162785][T12188] 1ªX¹¦D: entered promiscuous mode [ 482.164151][T12188] 1ªX¹¦D: left allmulticast mode [ 482.174483][T12188] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1826'. [ 482.179195][T12188] 0ªX¹¦D: renamed from 31ªX¹¦D [ 482.181316][T12188] 0ªX¹¦D: left promiscuous mode [ 482.182716][T12188] 0ªX¹¦D: entered allmulticast mode [ 482.184660][T12188] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 483.819358][T12211] netlink: zone id is out of range [ 483.825904][T12211] netlink: zone id is out of range [ 483.863833][T12211] netlink: set zone limit has 4 unknown bytes [ 484.590266][T12219] random: crng reseeded on system resumption [ 485.056080][T12224] dccp_v4_rcv: dropped packet with invalid checksum [ 485.113031][T12226] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1836'. [ 485.116144][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1836'. [ 485.301623][T12232] kernel profiling enabled (shift: 10) [ 485.451616][ T39] kauditd_printk_skb: 34 callbacks suppressed [ 485.451626][ T39] audit: type=1326 audit(1726868468.798:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.1.1841" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f60579 code=0x0 [ 487.382366][T12265] netlink: zone id is out of range [ 487.385808][T12265] netlink: zone id is out of range [ 487.431386][T12265] netlink: set zone limit has 4 unknown bytes [ 488.029352][T12274] ieee802154 phy0 wpan0: encryption failed: -90 [ 488.080492][T12277] sp0: Synchronizing with TNC [ 488.108647][T12277] netlink: 'syz.2.1848': attribute type 4 has an invalid length. [ 488.110709][T12277] netlink: 'syz.2.1848': attribute type 4 has an invalid length. [ 488.112716][T12277] netlink: 126012 bytes leftover after parsing attributes in process `syz.2.1848'. [ 488.468206][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 488.499211][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'. [ 488.575279][T12289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1853'. [ 488.633331][ T39] audit: type=1326 audit(1726868471.978:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12288 comm="syz.2.1853" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x0 [ 490.264643][T12319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1860'. [ 490.267584][T12319] netlink: 'syz.0.1860': attribute type 30 has an invalid length. [ 490.325507][T12313] netlink: zone id is out of range [ 490.347777][T12313] netlink: zone id is out of range [ 490.410200][T12313] netlink: set zone limit has 4 unknown bytes [ 491.638270][ T5384] libceph: connect (1)[c::]:6789 error -101 [ 491.640389][ T5384] libceph: mon0 (1)[c::]:6789 connect error [ 491.654695][ T5384] libceph: connect (1)[c::]:6789 error -101 [ 491.656334][ T5384] libceph: mon0 (1)[c::]:6789 connect error [ 491.720534][T12335] ceph: No mds server is up or the cluster is laggy [ 493.353404][T12369] netlink: zone id is out of range [ 493.355902][T12369] netlink: zone id is out of range [ 494.194853][T12377] tipc: Enabling of bearer rejected, failed to enable media [ 494.279340][T12369] netlink: set zone limit has 4 unknown bytes [ 494.526950][ T5384] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 494.678146][ T5384] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 494.680451][ T5384] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 494.683067][ T5384] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 494.685369][ T5384] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 494.688709][ T5384] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 494.692731][ T5384] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 494.695083][ T5384] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 494.697294][ T5384] usb 6-1: Product: syz [ 494.698466][ T5384] usb 6-1: Manufacturer: syz [ 494.703390][ T5384] cdc_wdm 6-1:1.0: skipping garbage [ 494.704781][ T5384] cdc_wdm 6-1:1.0: skipping garbage [ 494.706524][ T5384] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 494.709102][ T5384] cdc_wdm 6-1:1.0: Unknown control protocol [ 495.063888][T12386] xt_cgroup: invalid path, errno=-2 [ 495.066142][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 495.066221][ T35] usb 6-1: USB disconnect, device number 16 [ 495.067889][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 495.067899][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 495.068411][T12379] cdc_wdm 6-1:1.0: Tx URB error: -19 [ 495.470152][T12397] block device autoloading is deprecated and will be removed. [ 496.959087][T12422] Invalid option length (1047906) for dns_resolver key [ 498.730366][ T5342] syz-executor (5342) used greatest stack depth: 21344 bytes left [ 498.776489][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.780653][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.795130][T12437] netlink: zone id is out of range [ 498.796780][T12437] netlink: zone id is out of range [ 498.809412][T12437] netlink: set zone limit has 4 unknown bytes [ 498.886778][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.892677][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.912653][ T5345] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 498.917717][ T5345] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 498.927284][ T5345] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 498.959470][ T5345] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 498.962204][ T5345] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 498.964221][ T5345] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 498.974201][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 498.976963][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 498.983216][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 498.986111][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 498.988362][ T65] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 498.990446][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 499.060870][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.063763][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.150478][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 499.152724][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 499.156502][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.159349][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.168677][T12446] chnl_net:caif_netlink_parms(): no params data found [ 499.230881][T12446] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.233926][T12446] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.240740][T12446] bridge_slave_0: entered allmulticast mode [ 499.242883][T12446] bridge_slave_0: entered promiscuous mode [ 499.246644][T12446] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.251423][T12446] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.253429][T12446] bridge_slave_1: entered allmulticast mode [ 499.255504][T12446] bridge_slave_1: entered promiscuous mode [ 499.292491][T12446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.318003][T12446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.356063][T12446] team0: Port device team_slave_0 added [ 499.359088][ T12] team0: left allmulticast mode [ 499.360389][ T12] team_slave_0: left allmulticast mode [ 499.361829][ T12] team_slave_1: left allmulticast mode [ 499.363342][ T12] bridge0: port 3(team0) entered disabled state [ 499.366183][ T12] bridge_slave_1: left allmulticast mode [ 499.372115][ T12] bridge_slave_1: left promiscuous mode [ 499.373641][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.376560][ T12] bridge_slave_0: left allmulticast mode [ 499.379217][ T12] bridge_slave_0: left promiscuous mode [ 499.380733][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.732010][T12466] hub 2-0:1.0: USB hub found [ 499.737313][T12466] hub 2-0:1.0: 2 ports detected [ 499.862182][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.864680][ T12] bond_slave_0: left promiscuous mode [ 499.867554][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.870070][ T12] bond_slave_1: left promiscuous mode [ 499.872371][ T12] bond0 (unregistering): Released all slaves [ 499.876563][ T12] bond1 (unregistering): Released all slaves [ 499.884278][ T12] bond2 (unregistering): Released all slaves [ 499.892243][T12446] team0: Port device team_slave_1 added [ 499.923431][T12446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.925270][T12446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.935748][T12446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.941551][T12446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.943392][T12446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.954036][T12446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.047266][T12446] hsr_slave_0: entered promiscuous mode [ 500.049231][T12446] hsr_slave_1: entered promiscuous mode [ 500.053445][T12446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.055449][T12446] Cannot create hsr debugfs directory [ 500.272796][ T12] hsr_slave_0: left promiscuous mode [ 500.277693][ T12] hsr_slave_1: left promiscuous mode [ 500.279556][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.281603][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.283843][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.285812][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.310391][ T12] veth1_macvtap: left promiscuous mode [ 500.311977][ T12] veth0_macvtap: left promiscuous mode [ 500.313468][ T12] veth1_vlan: left promiscuous mode [ 500.314871][ T12] veth0_vlan: left promiscuous mode [ 500.747304][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.052165][ T12] team_slave_1 (unregistering): left promiscuous mode [ 501.057672][ T5345] Bluetooth: hci1: command tx timeout [ 501.059943][ T12] team0 (unregistering): Port device team_slave_1 removed [ 501.155111][ T12] team_slave_0 (unregistering): left promiscuous mode [ 501.159006][ T12] team0 (unregistering): Port device team_slave_0 removed [ 501.858321][T12492] veth1_vlan: left promiscuous mode [ 501.859948][T12492] macvlan1: entered allmulticast mode [ 501.872349][T12481] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 501.891396][T12481] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 502.224622][T12446] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 502.240901][T12446] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 502.244866][T12446] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 502.268792][T12446] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 502.349130][T12446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.360965][T12446] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.371397][T11030] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.373247][T11030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.388434][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.390368][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.402364][T12529] binder: 12528:12529 ioctl c00c620f 20000340 returned -22 [ 502.421239][T12529] veth0_vlan: entered allmulticast mode [ 502.579458][T12446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.597090][T12544] netlink: 'syz.2.1908': attribute type 1 has an invalid length. [ 502.614215][T12544] bond3: entered promiscuous mode [ 502.639730][T12542] netlink: zone id is out of range [ 502.641252][T12542] netlink: zone id is out of range [ 502.644713][T12542] netlink: set zone limit has 4 unknown bytes [ 502.646181][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1908'. [ 502.649430][T12544] bond3: left promiscuous mode [ 502.651288][T12544] 8021q: adding VLAN 0 to HW filter on device bond3 [ 502.669922][T12446] veth0_vlan: entered promiscuous mode [ 502.673423][T12446] veth1_vlan: entered promiscuous mode [ 502.682252][T12446] veth0_macvtap: entered promiscuous mode [ 502.693278][T12446] veth1_macvtap: entered promiscuous mode [ 502.741328][T12446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.745359][T12446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.759296][T12446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.762366][T12446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.765226][T12446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.769580][T12446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.772409][T12446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.775601][T12446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.792619][T12446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.803100][T12446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.806350][T12446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.810076][T12446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.812885][T12446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.815497][T12446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.819760][T12446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.824402][T12446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.830618][T12446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.841092][T12446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.849297][T12446] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.852693][T12446] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.855215][T12446] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.861041][T12446] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.988198][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.997146][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.035270][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.037711][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.136969][ T5345] Bluetooth: hci1: command tx timeout [ 503.418503][T12555] netlink: zone id is out of range [ 503.422024][T12557] IPv6: Can't replace route, no match found [ 503.422054][T12555] netlink: zone id is out of range [ 503.436267][T12555] netlink: set zone limit has 4 unknown bytes [ 503.901146][ T12] IPVS: stop unused estimator thread 0... [ 503.998373][T12563] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1911'. [ 504.040370][T12563] vlan2: entered promiscuous mode [ 504.041749][T12563] veth3: entered promiscuous mode [ 504.067361][T12563] veth3: left promiscuous mode [ 504.219337][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1912'. [ 504.239542][ T1099] tipc: Subscription rejected, illegal request [ 504.243340][T12568] netlink: 'syz.0.1913': attribute type 10 has an invalid length. [ 504.245404][T12568] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1913'. [ 504.999046][T12583] cgroup: release_agent respecified [ 505.194409][T12588] xt_CT: No such helper "syz0" [ 505.226915][ T5345] Bluetooth: hci1: command tx timeout [ 505.480884][T12594] netlink: zone id is out of range [ 505.488593][T12594] netlink: zone id is out of range [ 505.530875][T12594] netlink: set zone limit has 4 unknown bytes [ 506.011563][T12603] input: syz1 as /devices/virtual/input/input41 [ 507.309795][ T5345] Bluetooth: hci1: command tx timeout [ 507.325127][T12625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1930'. [ 507.344529][T12625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1930'. [ 507.380853][T12625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1930'. [ 508.017698][T12641] netlink: zone id is out of range [ 508.019218][T12641] netlink: zone id is out of range [ 508.022692][T12641] netlink: set zone limit has 4 unknown bytes [ 508.226587][T12650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1937'. [ 508.289308][T12650] vti0: entered allmulticast mode [ 508.331019][T12657] ALSA: mixer_oss: invalid OSS volume '' [ 508.337110][T12657] ALSA: mixer_oss: invalid OSS volume '' [ 508.344369][T12657] ALSA: mixer_oss: invalid OSS volume 'L' [ 508.614000][T12664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1940'. [ 508.937559][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1943'. [ 509.196953][ T5384] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 509.347021][ T5384] usb 5-1: Using ep0 maxpacket: 16 [ 509.352192][ T5384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 509.354746][ T5384] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 509.357400][ T5384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.360690][ T5384] usb 5-1: config 0 descriptor?? [ 509.363380][ T5384] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 509.889213][T12689] netlink: 'syz.3.1947': attribute type 10 has an invalid length. [ 510.242761][T12699] 9p: Unknown Cache mode or invalid value mmapA [ 510.269422][T12676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.272095][T12676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.442932][T12701] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 510.505810][T12701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1952'. [ 510.730608][T12720] netlink: 'syz.2.1955': attribute type 4 has an invalid length. [ 510.732724][T12720] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1955'. [ 510.742024][T12720] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 510.750798][T12720] netlink: 'syz.2.1955': attribute type 33 has an invalid length. [ 510.983580][ T1213] team0: left allmulticast mode [ 510.984934][ T1213] team_slave_0: left allmulticast mode [ 510.986364][ T1213] team_slave_1: left allmulticast mode [ 510.989139][ T1213] bridge0: port 3(team0) entered disabled state [ 511.001585][ T1213] bridge_slave_1: left allmulticast mode [ 511.003069][ T1213] bridge_slave_1: left promiscuous mode [ 511.004584][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.013585][ T1213] bridge_slave_0: left allmulticast mode [ 511.015278][ T1213] bridge_slave_0: left promiscuous mode [ 511.016788][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.557539][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.560106][ T1213] bond_slave_0: left promiscuous mode [ 511.561657][ T1213] bond_slave_0: left allmulticast mode [ 511.565036][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.570492][ T1213] bond_slave_1: left promiscuous mode [ 511.572050][ T1213] bond_slave_1: left allmulticast mode [ 511.574596][ T1213] bond0 (unregistering): Released all slaves [ 511.756960][ T5384] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 511.773321][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1964'. [ 511.779282][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1964'. [ 511.822699][T12771] netlink: 'syz.3.1963': attribute type 10 has an invalid length. [ 511.883587][ T1213] hsr_slave_0: left promiscuous mode [ 511.894363][ T1213] hsr_slave_1: left promiscuous mode [ 511.899938][ T1213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.902566][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.905947][ T1213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.909083][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.912172][ T1213] batman_adv: batadv0: Removing interface: ipvlan1 [ 511.916957][ T5384] usb 6-1: Using ep0 maxpacket: 32 [ 511.923286][ T5384] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 511.925487][ T5384] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.926551][T12773] affs: No valid root block on device nbd2 [ 511.929482][ T5384] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 511.935774][ T5384] usb 6-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 511.943543][ T5384] usb 6-1: config 0 interface 0 has no altsetting 0 [ 511.948695][ T5384] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 511.954079][ T5384] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 511.960894][ T5384] usb 6-1: Product: syz [ 511.962409][ T5384] usb 6-1: Manufacturer: syz [ 511.965213][ T5384] usb 6-1: SerialNumber: syz [ 511.965715][ T1213] veth1_macvtap: left promiscuous mode [ 511.967132][ T1213] veth0_macvtap: left promiscuous mode [ 511.971492][ T1213] veth1_vlan: left promiscuous mode [ 511.972968][ T5384] usb 6-1: config 0 descriptor?? [ 511.974089][ T1213] veth0_vlan: left promiscuous mode [ 511.987045][ T5384] ldusb 6-1:0.0: Interrupt in endpoint not found [ 511.998578][ T8] usb 5-1: USB disconnect, device number 13 [ 512.817012][ T5345] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 512.822768][ T5345] Bluetooth: hci1: Injecting HCI hardware error event [ 512.826719][ T5345] Bluetooth: hci1: hardware error 0x00 [ 513.096441][ T1213] team_slave_1 (unregistering): left promiscuous mode [ 513.106779][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 513.203496][ T1213] team_slave_0 (unregistering): left promiscuous mode [ 513.206354][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 513.883565][ T5384] usb 6-1: USB disconnect, device number 17 [ 514.899212][ T5345] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 515.100693][T12826] binder: 12823:12826 ioctl 541b 0 returned -22 [ 515.124521][ T65] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 515.128586][ T65] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 515.130943][ T65] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 515.133615][ T65] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 515.136048][ T65] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 515.138113][ T65] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 515.270891][T12828] chnl_net:caif_netlink_parms(): no params data found [ 515.585151][T12828] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.587194][T12828] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.589618][T12828] bridge_slave_0: entered allmulticast mode [ 515.591754][T12828] bridge_slave_0: entered promiscuous mode [ 515.595835][T12828] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.598135][T12828] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.600048][T12828] bridge_slave_1: entered allmulticast mode [ 515.602011][T12828] bridge_slave_1: entered promiscuous mode [ 515.657802][T12828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.661329][T12828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.689919][T12828] team0: Port device team_slave_0 added [ 515.692474][T12828] team0: Port device team_slave_1 added [ 515.729680][T12828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.731516][T12828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.744457][T12828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.748200][T12828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.750042][T12828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.757799][T12828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.769562][T12840] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 515.792613][T12828] hsr_slave_0: entered promiscuous mode [ 515.847498][T12828] hsr_slave_1: entered promiscuous mode [ 515.907373][T12840] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1982'. [ 516.062467][T12828] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.065300][T12828] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.145057][ T39] audit: type=1326 audit(1726868499.488:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12847 comm="syz.2.1984" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x0 [ 516.248025][T12828] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.250909][T12828] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.326516][T12828] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.347771][T12828] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.419871][T12828] bond0: (slave netdevsim0): Releasing backup interface [ 516.427115][T12828] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 516.430127][T12828] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.432805][T12828] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.564445][ T77] team0: left allmulticast mode [ 516.565856][ T77] team_slave_0: left allmulticast mode [ 516.567364][ T77] team_slave_1: left allmulticast mode [ 516.568860][ T77] bridge0: port 3(team0) entered disabled state [ 516.571739][ T77] bridge_slave_1: left allmulticast mode [ 516.573237][ T77] bridge_slave_1: left promiscuous mode [ 516.574763][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.577475][ T77] bridge_slave_0: left allmulticast mode [ 516.578977][ T77] bridge_slave_0: left promiscuous mode [ 516.580482][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.167228][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.175973][ T77] bond_slave_0: left promiscuous mode [ 517.186578][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.189440][ T77] bond_slave_1: left promiscuous mode [ 517.197811][ T77] bond0 (unregistering): Released all slaves [ 517.210221][ T77] bond1 (unregistering): Released all slaves [ 517.214075][ T39] audit: type=1326 audit(1726868500.558:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.0.1989" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 517.219745][ T65] Bluetooth: hci3: command tx timeout [ 517.227276][ T39] audit: type=1326 audit(1726868500.558:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.0.1989" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 517.239533][ T39] audit: type=1326 audit(1726868500.568:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.0.1989" exe="/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 517.247776][ T39] audit: type=1326 audit(1726868500.568:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.0.1989" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 517.249682][T12828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 517.257855][ T39] audit: type=1326 audit(1726868500.568:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.0.1989" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 517.263468][ T39] audit: type=1326 audit(1726868500.568:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.0.1989" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 517.269776][T12828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 517.273605][T12828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 517.280293][ T39] audit: type=1326 audit(1726868500.568:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.0.1989" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 517.285983][ T39] audit: type=1326 audit(1726868500.568:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.0.1989" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 517.286037][T12828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 517.291977][ T39] audit: type=1326 audit(1726868500.568:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.0.1989" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 517.386702][T12828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.396395][T12828] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.403183][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.405079][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.409405][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.411355][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.459348][T12828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 517.462856][T12828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 517.482462][T12876] netlink: 'syz.0.1992': attribute type 3 has an invalid length. [ 517.515432][ T77] hsr_slave_0: left promiscuous mode [ 517.517502][ T77] hsr_slave_1: left promiscuous mode [ 517.523658][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.526943][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.532055][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.534115][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.536451][ T77] batman_adv: batadv0: Removing interface: ipvlan1 [ 517.590878][ T77] batadv0: left allmulticast mode [ 517.593148][ T77] batadv0: left promiscuous mode [ 517.595552][ T77] veth1_macvtap: left promiscuous mode [ 517.599224][ T77] veth0_macvtap: left promiscuous mode [ 517.600770][ T77] veth0_vlan: left promiscuous mode [ 517.796945][ T5384] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 517.978599][ T5384] usb 6-1: unable to get BOS descriptor or descriptor too short [ 517.984996][ T5384] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 517.991976][ T5384] usb 6-1: can't read configurations, error -71 [ 518.481137][ T77] team_slave_1 (unregistering): left promiscuous mode [ 518.487529][ T77] team0 (unregistering): Port device team_slave_1 removed [ 518.568211][ T77] team_slave_0 (unregistering): left promiscuous mode [ 518.571534][ T77] team0 (unregistering): Port device team_slave_0 removed [ 518.878942][T12884] Falling back ldisc for ttyS3. [ 519.299491][ T65] Bluetooth: hci3: command tx timeout [ 519.368326][T12828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.398024][T12828] veth0_vlan: entered promiscuous mode [ 519.402592][T12828] veth1_vlan: entered promiscuous mode [ 519.417063][T12828] veth0_macvtap: entered promiscuous mode [ 519.420601][T12828] veth1_macvtap: entered promiscuous mode [ 519.428408][T12828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.431141][T12828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.433694][T12828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.436545][T12828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.446759][T12828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.449849][T12828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.453319][T12828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.467479][T12828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.470284][T12828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.476371][T12828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.479309][T12828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.482166][T12828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.484864][T12828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.488969][T12828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.492093][T12828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.494481][T12828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.496761][T12828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.499626][T12828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.550942][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.556975][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.567787][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.571450][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.702573][T12908] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 520.248151][T12923] netlink: 'syz.1.2002': attribute type 4 has an invalid length. [ 520.582767][T12932] x_tables: duplicate underflow at hook 1 [ 521.015091][T12939] syzkaller0: entered promiscuous mode [ 521.016943][T12939] syzkaller0: entered allmulticast mode [ 521.025333][T12939] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 521.297099][ T77] IPVS: stop unused estimator thread 0... [ 521.386960][ T65] Bluetooth: hci3: command tx timeout [ 521.722844][T12942] team0: Port device virt_wifi0 added [ 522.308026][ T39] kauditd_printk_skb: 36 callbacks suppressed [ 522.308037][ T39] audit: type=1326 audit(1726868505.648:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12953 comm="syz.1.2013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 522.331497][ T39] audit: type=1326 audit(1726868505.648:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12953 comm="syz.1.2013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 522.346921][ T39] audit: type=1326 audit(1726868505.648:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12953 comm="syz.1.2013" exe="/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 522.352388][ T39] audit: type=1326 audit(1726868505.658:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12953 comm="syz.1.2013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 522.361264][ T39] audit: type=1326 audit(1726868505.668:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12953 comm="syz.1.2013" exe="/syz-executor" sig=0 arch=40000003 syscall=442 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 522.366763][ T39] audit: type=1326 audit(1726868505.668:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12953 comm="syz.1.2013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 522.386906][ T39] audit: type=1326 audit(1726868505.668:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12953 comm="syz.1.2013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 522.392370][ T39] audit: type=1326 audit(1726868505.668:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12953 comm="syz.1.2013" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 522.406900][ T39] audit: type=1326 audit(1726868505.668:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12953 comm="syz.1.2013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 522.417197][ T39] audit: type=1326 audit(1726868505.668:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12953 comm="syz.1.2013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 523.456953][ T65] Bluetooth: hci3: command tx timeout [ 523.824028][T12975] lo: entered promiscuous mode [ 523.826952][ T5351] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 523.835229][T12975] lo: left promiscuous mode [ 523.910354][T12978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2019'. [ 523.978154][ T5351] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 523.980896][ T5351] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 523.983223][ T5351] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 523.986016][ T5351] usb 6-1: config 0 interface 0 has no altsetting 0 [ 523.997917][ T5351] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 524.000246][ T5351] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 524.003057][ T5351] usb 6-1: config 0 interface 0 has no altsetting 0 [ 524.007342][ T5351] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 524.009671][ T5351] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 524.012461][ T5351] usb 6-1: config 0 interface 0 has no altsetting 0 [ 524.017665][ T5351] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 524.020090][ T5351] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 524.022940][ T5351] usb 6-1: config 0 interface 0 has no altsetting 0 [ 524.037461][ T5351] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 524.039826][ T5351] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 524.042626][ T5351] usb 6-1: config 0 interface 0 has no altsetting 0 [ 524.045117][ T5351] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 524.047582][ T5351] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 524.057843][ T5351] usb 6-1: config 0 interface 0 has no altsetting 0 [ 524.060755][ T5351] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 524.063190][ T5351] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 524.065995][ T5351] usb 6-1: config 0 interface 0 has no altsetting 0 [ 524.071662][ T5351] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 524.073999][ T5351] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 524.076804][ T5351] usb 6-1: config 0 interface 0 has no altsetting 0 [ 524.081171][ T5351] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 524.083539][ T5351] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 524.085700][ T5351] usb 6-1: Product: syz [ 524.086800][ T5351] usb 6-1: Manufacturer: syz [ 524.088130][ T5351] usb 6-1: SerialNumber: syz [ 524.097870][ T5351] usb 6-1: config 0 descriptor?? [ 524.101209][ T5351] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 524.342233][T12991] pim6reg1: entered allmulticast mode [ 524.367902][T12992] overlayfs: missing 'workdir' [ 524.428038][T12996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.433945][T12996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.439888][T12996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.443167][T12996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.445763][ C3] usb 6-1: yurex_control_callback - control failed: -71 [ 524.445935][ T5404] usb 6-1: USB disconnect, device number 20 [ 524.451783][ T5404] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 525.465743][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 525.542056][T13011] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 525.544551][T13011] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 527.384856][ T39] kauditd_printk_skb: 34 callbacks suppressed [ 527.384867][ T39] audit: type=1326 audit(1726868510.728:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13038 comm="syz.3.2034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 527.392721][ T39] audit: type=1326 audit(1726868510.728:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13038 comm="syz.3.2034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 527.399973][ T39] audit: type=1326 audit(1726868510.728:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13038 comm="syz.3.2034" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 527.405525][ T39] audit: type=1326 audit(1726868510.728:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13038 comm="syz.3.2034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 527.411340][ T39] audit: type=1326 audit(1726868510.728:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13038 comm="syz.3.2034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 527.422483][ T39] audit: type=1326 audit(1726868510.738:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13038 comm="syz.3.2034" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 527.433278][ T39] audit: type=1326 audit(1726868510.738:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13038 comm="syz.3.2034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 527.440550][ T39] audit: type=1326 audit(1726868510.738:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13038 comm="syz.3.2034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 527.446150][ T39] audit: type=1326 audit(1726868510.738:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13038 comm="syz.3.2034" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 527.452195][ T39] audit: type=1326 audit(1726868510.738:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13038 comm="syz.3.2034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 527.707714][T13042] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 527.710032][T13042] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 528.469546][T13051] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2036'. [ 529.211836][T13054] syz.3.2038: attempt to access beyond end of device [ 529.211836][T13054] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 529.215548][T13054] SQUASHFS error: Failed to read block 0x0: -5 [ 529.228160][T13054] unable to read squashfs_super_block [ 531.091445][ T5345] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 531.095530][ T5345] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 531.099174][ T5345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 531.101381][ T5345] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 531.103900][ T5345] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 531.105854][ T5345] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 531.185618][T13060] chnl_net:caif_netlink_parms(): no params data found [ 531.387424][T13060] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.389303][T13060] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.391175][T13060] bridge_slave_0: entered allmulticast mode [ 531.393119][T13060] bridge_slave_0: entered promiscuous mode [ 531.400671][T13060] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.402586][T13060] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.404520][T13060] bridge_slave_1: entered allmulticast mode [ 531.408862][T13060] bridge_slave_1: entered promiscuous mode [ 531.451550][T13060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.455885][T13060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.496016][T13060] team0: Port device team_slave_0 added [ 531.501694][T13060] team0: Port device team_slave_1 added [ 531.531552][T13060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.533416][T13060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.540901][T13060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.545437][T13060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.548771][T13060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.555465][T13060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.913671][T13060] hsr_slave_0: entered promiscuous mode [ 531.915675][T13060] hsr_slave_1: entered promiscuous mode [ 531.918536][T13060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.920507][T13060] Cannot create hsr debugfs directory [ 532.035143][T13060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.041146][T13060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.163729][T13060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.166462][T13060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.272719][T13060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.276374][T13060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.340378][T13060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.344323][T13060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.515066][T13060] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 532.522235][T13060] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 532.528825][T13060] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 532.534807][T13060] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 532.591150][T13060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.623452][T13060] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.631562][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.633446][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.643610][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.645476][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.686815][T13060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 532.875009][T13060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.895777][T13060] veth0_vlan: entered promiscuous mode [ 532.903831][T13060] veth1_vlan: entered promiscuous mode [ 532.919641][T13060] veth0_macvtap: entered promiscuous mode [ 532.923265][T13060] veth1_macvtap: entered promiscuous mode [ 532.939238][T13060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.055649][T13060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.136992][ T65] Bluetooth: hci4: command tx timeout [ 533.309910][T13060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.313751][T13060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.317865][T13060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.321406][T13060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.324694][T13060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.328903][T13060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.333756][T13060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.339404][T13060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.342948][T13060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.346241][T13060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.350230][T13060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.353543][T13060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.357235][T13060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.360663][T13060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.364160][T13060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.368589][T13060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.379461][T13060] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.382500][T13060] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.385406][T13060] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.388499][T13060] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.428051][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.430100][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.440899][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.444568][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.682686][T13093] sctp: [Deprecated]: syz.2.2045 (pid 13093) Use of int in maxseg socket option. [ 534.682686][T13093] Use struct sctp_assoc_value instead [ 535.176299][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.178895][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.181379][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.194802][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.206979][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.208941][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.213523][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.215832][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.221424][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.223382][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.225316][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.226988][ T65] Bluetooth: hci4: command tx timeout [ 535.237045][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.239024][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.242891][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.247826][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.249782][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.256914][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.258845][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.260769][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.266917][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.269346][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.271327][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.277472][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.279401][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.281333][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.283258][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.293820][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.300984][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.302936][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.304846][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.316925][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.319296][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.321192][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 535.329865][ T25] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz0] on syz0 [ 537.298624][ T65] Bluetooth: hci4: command tx timeout [ 537.399315][T13100] syzkaller0: entered promiscuous mode [ 537.400769][T13100] syzkaller0: entered allmulticast mode [ 538.021036][T13112] mkiss: ax0: crc mode is auto. [ 538.382440][ T5345] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 538.397873][ T5345] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 538.400359][ T5345] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 538.402776][ T5345] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 538.407675][ T5345] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 538.410000][ T5345] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 538.594596][T13120] chnl_net:caif_netlink_parms(): no params data found [ 538.796259][T13120] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.798260][T13120] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.800137][T13120] bridge_slave_0: entered allmulticast mode [ 538.802128][T13120] bridge_slave_0: entered promiscuous mode [ 538.804886][T13120] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.806803][T13120] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.808763][T13120] bridge_slave_1: entered allmulticast mode [ 538.810757][T13120] bridge_slave_1: entered promiscuous mode [ 538.856236][T13120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.863599][T13120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.920499][T13120] team0: Port device team_slave_0 added [ 538.927980][T13120] team0: Port device team_slave_1 added [ 539.031370][T13120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.033200][T13120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.041489][T13120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.044945][T13120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.046771][T13120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.053525][T13120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.105002][T13147] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 539.110059][T13120] hsr_slave_0: entered promiscuous mode [ 539.115797][T13120] hsr_slave_1: entered promiscuous mode [ 539.121872][T13120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.124570][T13120] Cannot create hsr debugfs directory [ 539.468840][ T65] Bluetooth: hci4: command tx timeout [ 539.502954][T13120] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.505707][T13120] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.565220][T13120] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.334457][T13120] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.497087][ T65] Bluetooth: hci5: command tx timeout [ 540.647513][T13157] overlayfs: missing 'lowerdir' [ 540.652257][T13120] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.654809][T13120] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.753343][T13120] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.756627][T13120] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.764379][T13159] Cannot find add_set index 0 as target [ 541.014258][T13120] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 541.021507][T13120] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 541.026015][T13120] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 541.047142][T13120] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 541.168008][T13120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.179815][T13120] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.190852][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.193415][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.230032][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.232057][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.276238][T13120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 541.279215][T13120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 541.503086][T13120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.552564][T13120] veth0_vlan: entered promiscuous mode [ 541.563636][T13120] veth1_vlan: entered promiscuous mode [ 541.593713][T13120] veth0_macvtap: entered promiscuous mode [ 541.604221][T13120] veth1_macvtap: entered promiscuous mode [ 541.618076][T13120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.622788][T13120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.625816][T13120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.629634][T13120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.632410][T13120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.635249][T13120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.689212][T13120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.694214][T13120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.696751][T13120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.703719][T13120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.709003][T13120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.718839][T13120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.721735][T13120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.724381][T13120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.727578][T13120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.730138][T13120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.732910][T13120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.735543][T13120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.738544][T13120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.741105][T13120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.743904][T13120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.748762][T13120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.752047][T13120] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.754692][T13120] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.757175][T13120] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.760089][T13120] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.826659][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.828904][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.896681][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.899561][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.014722][T13175] geneve1: entered promiscuous mode [ 542.047162][T13175] geneve1: left promiscuous mode [ 542.587056][ T65] Bluetooth: hci5: command tx timeout [ 542.656966][ T65] Bluetooth: hci4: command 0x0406 tx timeout [ 543.875586][ T11] Bluetooth: Error in BCSP hdr checksum [ 543.909729][T13210] netlink: 'syz.1.2075': attribute type 4 has an invalid length. [ 544.050769][T13206] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 544.111368][T13213] syz.3.2074: attempt to access beyond end of device [ 544.111368][T13213] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 544.118051][T13213] vxfs: unable to read disk superblock at 1 [ 544.119962][T13213] syz.3.2074: attempt to access beyond end of device [ 544.119962][T13213] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 544.123342][T13213] vxfs: unable to read disk superblock at 8 [ 544.124900][T13213] vxfs: can't find superblock. [ 544.656923][ T65] Bluetooth: hci5: command tx timeout [ 545.058802][T13223] hub 2-0:1.0: USB hub found [ 545.073508][T13223] hub 2-0:1.0: 2 ports detected [ 545.936971][ T5345] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 545.937041][ T65] Bluetooth: hci6: command 0x1003 tx timeout [ 546.177727][T13212] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 546.736976][ T5345] Bluetooth: hci5: command tx timeout [ 546.824563][T13237] netlink: 'syz.1.2083': attribute type 1 has an invalid length. [ 547.713545][T13249] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 547.778868][T13252] syz.1.2086: attempt to access beyond end of device [ 547.778868][T13252] loop1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 547.790908][T13252] vxfs: unable to read disk superblock at 1 [ 547.793104][T13252] syz.1.2086: attempt to access beyond end of device [ 547.793104][T13252] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 547.798589][T13252] vxfs: unable to read disk superblock at 8 [ 547.802393][T13252] vxfs: can't find superblock. [ 548.337706][T12448] Bluetooth: hci6: sending frame failed (-49) [ 548.340692][ T5345] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 548.962608][T13267] hub 2-0:1.0: USB hub found [ 548.969280][T13267] hub 2-0:1.0: 2 ports detected [ 549.291620][T13272] block device autoloading is deprecated and will be removed. [ 549.307027][T13270] md: md2 stopped. [ 549.848711][T13283] netlink: 'syz.0.2096': attribute type 1 has an invalid length. [ 550.246969][T13290] Bluetooth: Short BCSP packet [ 550.499825][ T11] Bluetooth: Error in BCSP hdr checksum [ 550.827063][T13260] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 551.530835][T13299] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 551.605621][T13301] syz.2.2100: attempt to access beyond end of device [ 551.605621][T13301] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 551.609928][T13301] vxfs: unable to read disk superblock at 1 [ 551.612121][T13301] syz.2.2100: attempt to access beyond end of device [ 551.612121][T13301] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 551.615590][T13301] vxfs: unable to read disk superblock at 8 [ 551.617989][T13301] vxfs: can't find superblock. [ 552.256998][T12448] Bluetooth: hci6: command 0x1003 tx timeout [ 552.257109][ T5345] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 552.938188][T13326] hub 2-0:1.0: USB hub found [ 552.946382][T13326] hub 2-0:1.0: 2 ports detected [ 554.857598][T13329] netlink: 'syz.3.2109': attribute type 1 has an invalid length. [ 556.976993][T13333] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 559.696976][ T5345] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 559.968317][ T11] Bluetooth: Error in BCSP hdr checksum [ 560.761861][T13369] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 560.820041][T13372] syz.0.2116: attempt to access beyond end of device [ 560.820041][T13372] loop0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 560.823431][T13372] vxfs: unable to read disk superblock at 1 [ 560.825061][T13372] syz.0.2116: attempt to access beyond end of device [ 560.825061][T13372] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 560.828507][T13372] vxfs: unable to read disk superblock at 8 [ 560.830080][T13372] vxfs: can't find superblock. [ 562.017902][T13385] hub 2-0:1.0: USB hub found [ 562.025042][T13385] hub 2-0:1.0: 2 ports detected [ 562.027572][T12448] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 562.028276][ T5345] Bluetooth: hci6: command 0x1003 tx timeout [ 562.178258][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.455420][T13392] netlink: 'syz.2.2121': attribute type 1 has an invalid length. [ 562.481535][T13393] Bluetooth: Short BCSP packet [ 562.721111][ T77] Bluetooth: Error in BCSP hdr checksum [ 564.497124][T13388] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 566.469017][T13396] netlink: 'syz.2.2136': attribute type 1 has an invalid length. [ 566.559605][T13406] hub 2-0:1.0: USB hub found [ 566.562584][T13406] hub 2-0:1.0: 2 ports detected [ 568.867041][T13426] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2132'. [ 568.869514][T13426] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 569.865819][T13447] netlink: 'syz.3.2139': attribute type 1 has an invalid length. [ 570.507248][T13416] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 571.568773][T13466] hub 2-0:1.0: USB hub found [ 571.570255][T13466] hub 2-0:1.0: 2 ports detected [ 572.008561][T13474] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2146'. [ 572.011371][T13474] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 575.526050][T13515] hub 2-0:1.0: USB hub found [ 575.547022][T13492] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 575.557516][T13515] hub 2-0:1.0: 2 ports detected [ 575.805434][T13520] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2158'. [ 575.811698][T13520] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 577.546508][T13540] hub 2-0:1.0: USB hub found [ 577.551668][T13540] hub 2-0:1.0: 2 ports detected [ 578.656935][T13524] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 580.458260][T13564] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2169'. [ 580.460717][T13564] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 581.588644][T13578] loop7: detected capacity change from 0 to 16384 [ 581.996522][T13595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2179'. [ 582.039758][T13591] hub 2-0:1.0: USB hub found [ 582.043031][T13591] hub 2-0:1.0: 2 ports detected [ 584.078603][T13621] hub 2-0:1.0: USB hub found [ 584.083899][T13621] hub 2-0:1.0: 2 ports detected [ 584.908706][T13628] hub 9-0:1.0: USB hub found [ 584.910208][T13628] hub 9-0:1.0: 1 port detected [ 585.787395][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2190'. [ 587.154925][T13657] overlayfs: failed to resolve './file1': -2 [ 588.291239][T13670] hub 2-0:1.0: USB hub found [ 588.295127][T13670] hub 2-0:1.0: 2 ports detected [ 589.499740][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2203'. [ 590.651395][T13714] overlayfs: failed to resolve './file1': -2 [ 590.801101][T13388] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 591.993583][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2215'. [ 592.002971][T13732] sctp: [Deprecated]: syz.3.2217 (pid 13732) Use of struct sctp_assoc_value in delayed_ack socket option. [ 592.002971][T13732] Use struct sctp_sack_info instead [ 593.939285][T13759] overlayfs: failed to resolve './file1': -2 [ 594.828227][T13388] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 594.830559][T13388] Bluetooth: hci4: Injecting HCI hardware error event [ 594.833716][T13388] Bluetooth: hci4: hardware error 0x00 [ 596.143380][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2229'. [ 596.900081][T13388] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 598.292477][T13797] overlayfs: failed to resolve './file1': -2 [ 598.350834][T13800] sctp: [Deprecated]: syz.2.2234 (pid 13800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 598.350834][T13800] Use struct sctp_sack_info instead [ 598.737444][T13388] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 598.739880][T13388] Bluetooth: hci3: Injecting HCI hardware error event [ 598.745692][T13388] Bluetooth: hci3: hardware error 0x00 [ 599.379466][T13818] hub 2-0:1.0: USB hub found [ 599.381091][T13818] hub 2-0:1.0: 2 ports detected [ 600.241121][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2239'. [ 600.819231][T13388] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 600.954244][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'. [ 600.956585][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'. [ 601.186689][T13843] overlayfs: failed to resolve './file1': -2 [ 601.499315][ T8] IPVS: starting estimator thread 0... [ 601.606927][T13848] IPVS: using max 35 ests per chain, 84000 per kthread [ 603.589874][T13864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2251'. [ 603.927202][T13879] sctp: [Deprecated]: syz.1.2252 (pid 13879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 603.927202][T13879] Use struct sctp_sack_info instead [ 603.941132][T13878] hub 2-0:1.0: USB hub found [ 603.942901][T13878] hub 2-0:1.0: 2 ports detected [ 605.602437][T13887] overlayfs: failed to resolve './file1': -2 [ 606.586976][T13388] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 606.589394][T13388] Bluetooth: hci5: Injecting HCI hardware error event [ 606.593166][T13388] Bluetooth: hci5: hardware error 0x00 [ 606.633252][T13894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2258'. [ 607.139373][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2259'. [ 607.141705][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2259'. [ 608.193545][ T25] IPVS: starting estimator thread 0... [ 608.212728][T13909] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 608.273481][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2263'. [ 608.287021][T13910] IPVS: using max 35 ests per chain, 84000 per kthread [ 608.656990][T13388] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 609.628922][T13936] overlayfs: failed to resolve './file1': -2 [ 609.670084][T13929] hub 2-0:1.0: USB hub found [ 609.677213][T13929] hub 2-0:1.0: 2 ports detected [ 610.585852][T13945] sctp: [Deprecated]: syz.0.2268 (pid 13945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 610.585852][T13945] Use struct sctp_sack_info instead [ 610.938023][T13946] hub 2-0:1.0: USB hub found [ 610.969265][T13946] hub 2-0:1.0: 2 ports detected [ 611.436090][T13952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2269'. [ 612.225756][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2271'. [ 612.225827][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2271'. [ 612.641799][ T39] kauditd_printk_skb: 39 callbacks suppressed [ 612.641809][ T39] audit: type=1326 audit(1726868595.988:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 612.676935][ T39] audit: type=1326 audit(1726868595.988:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 612.682475][ T39] audit: type=1326 audit(1726868595.988:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 612.688020][ T39] audit: type=1326 audit(1726868595.988:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 612.693537][ T39] audit: type=1326 audit(1726868595.988:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 612.700364][ T39] audit: type=1326 audit(1726868595.988:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 612.705986][ T39] audit: type=1326 audit(1726868595.988:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 612.711785][ T39] audit: type=1326 audit(1726868595.988:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 612.738488][ T39] audit: type=1326 audit(1726868595.988:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 612.744716][ T39] audit: type=1326 audit(1726868595.988:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 615.420410][T13986] hub 2-0:1.0: USB hub found [ 615.457218][T13986] hub 2-0:1.0: 2 ports detected [ 617.498967][T14008] sctp: [Deprecated]: syz.3.2283 (pid 14008) Use of struct sctp_assoc_value in delayed_ack socket option. [ 617.498967][T14008] Use struct sctp_sack_info instead [ 617.506441][ T5404] IPVS: starting estimator thread 0... [ 617.515584][T14007] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 617.619451][T14009] IPVS: using max 34 ests per chain, 81600 per kthread [ 617.711189][T14014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2282'. [ 621.203130][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 621.203139][ T39] audit: type=1326 audit(1726868604.548:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.1.2285" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 621.256953][ T39] audit: type=1326 audit(1726868604.558:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.1.2285" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 621.256980][ T39] audit: type=1326 audit(1726868604.558:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.1.2285" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 621.256996][ T39] audit: type=1326 audit(1726868604.558:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.1.2285" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 621.257012][ T39] audit: type=1326 audit(1726868604.558:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.1.2285" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 621.257028][ T39] audit: type=1326 audit(1726868604.558:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.1.2285" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 621.257044][ T39] audit: type=1326 audit(1726868604.558:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.1.2285" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 621.257059][ T39] audit: type=1326 audit(1726868604.558:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.1.2285" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 621.257074][ T39] audit: type=1326 audit(1726868604.558:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.1.2285" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 621.257092][ T39] audit: type=1326 audit(1726868604.558:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.1.2285" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 621.330986][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2284'. [ 621.432506][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2284'. [ 622.010095][T14044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2299'. [ 623.400677][T14058] hub 2-0:1.0: USB hub found [ 623.405596][T14058] hub 2-0:1.0: 2 ports detected [ 623.618547][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.075572][T14065] sctp: [Deprecated]: syz.0.2296 (pid 14065) Use of struct sctp_assoc_value in delayed_ack socket option. [ 624.075572][T14065] Use struct sctp_sack_info instead [ 624.381611][T12754] IPVS: starting estimator thread 0... [ 624.393352][T14069] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 624.467022][T14070] IPVS: using max 34 ests per chain, 81600 per kthread [ 627.335403][ T39] kauditd_printk_skb: 15 callbacks suppressed [ 627.335414][ T39] audit: type=1326 audit(1726868610.678:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.0.2300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 627.342598][ T39] audit: type=1326 audit(1726868610.678:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.0.2300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 627.350055][ T39] audit: type=1326 audit(1726868610.698:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.0.2300" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 627.379420][ T39] audit: type=1326 audit(1726868610.698:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.0.2300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 627.409562][ T39] audit: type=1326 audit(1726868610.698:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.0.2300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 627.415194][ T39] audit: type=1326 audit(1726868610.708:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.0.2300" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 627.440818][ T39] audit: type=1326 audit(1726868610.708:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.0.2300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 627.455992][ T39] audit: type=1326 audit(1726868610.708:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.0.2300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 627.488343][ T39] audit: type=1326 audit(1726868610.708:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.0.2300" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 627.509037][ T39] audit: type=1326 audit(1726868610.708:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.0.2300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x7ffc0000 [ 627.591949][T14080] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2301'. [ 627.937651][T14088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.357734][T14106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2313'. [ 631.036123][T14126] netlink: 'syz.0.2310': attribute type 12 has an invalid length. [ 631.036643][T14123] hub 2-0:1.0: USB hub found [ 631.040724][T14123] hub 2-0:1.0: 2 ports detected [ 631.050442][T14126] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.2310'. [ 631.326963][ T5404] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 631.477356][ T5404] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 631.480948][ T5404] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 631.483244][ T5404] usb 5-1: config 0 interface 0 has no altsetting 0 [ 631.486429][ T5404] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 631.490299][ T5404] usb 5-1: config 0 interface 0 has no altsetting 0 [ 631.493604][ T5404] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 631.496744][ T5404] usb 5-1: config 0 interface 0 has no altsetting 0 [ 631.506002][ T5404] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 631.509093][ T5404] usb 5-1: config 0 interface 0 has no altsetting 0 [ 631.514055][ T5404] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 631.520641][ T5404] usb 5-1: config 0 interface 0 has no altsetting 0 [ 631.530402][ T5404] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 631.533747][ T5404] usb 5-1: config 0 interface 0 has no altsetting 0 [ 631.537758][ T5404] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 631.541048][ T5404] usb 5-1: config 0 interface 0 has no altsetting 0 [ 631.544457][ T5404] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 631.547966][ T5404] usb 5-1: config 0 interface 0 has no altsetting 0 [ 631.557515][ T5404] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 631.560732][ T5404] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 631.563706][ T5404] usb 5-1: Product: syz [ 631.567920][ T5404] usb 5-1: Manufacturer: syz [ 631.569783][ T5404] usb 5-1: SerialNumber: syz [ 631.581954][ T5404] usb 5-1: config 0 descriptor?? [ 631.591939][ T5404] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 631.803048][ T5404] usb 5-1: USB disconnect, device number 14 [ 631.805418][ T5404] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 632.465467][T14132] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 634.538923][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 634.538934][ T39] audit: type=1326 audit(1726868617.888:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14138 comm="syz.3.2315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 634.547139][ T39] audit: type=1326 audit(1726868617.888:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14138 comm="syz.3.2315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 634.552460][ T39] audit: type=1326 audit(1726868617.888:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14138 comm="syz.3.2315" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 634.637060][ T39] audit: type=1326 audit(1726868617.888:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14138 comm="syz.3.2315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 634.683434][ T39] audit: type=1326 audit(1726868617.888:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14138 comm="syz.3.2315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 634.695085][ T39] audit: type=1326 audit(1726868617.908:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14138 comm="syz.3.2315" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 634.706945][ T39] audit: type=1326 audit(1726868617.908:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14138 comm="syz.3.2315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 634.717290][ T39] audit: type=1326 audit(1726868617.908:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14138 comm="syz.3.2315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 634.722643][ T39] audit: type=1326 audit(1726868617.918:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14138 comm="syz.3.2315" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 634.741002][ T39] audit: type=1326 audit(1726868617.918:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14138 comm="syz.3.2315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 634.787032][T14141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.399724][T14156] netlink: 'syz.2.2321': attribute type 12 has an invalid length. [ 635.401763][T14156] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.2321'. [ 637.428218][T14176] hub 2-0:1.0: USB hub found [ 637.431732][T14176] hub 2-0:1.0: 2 ports detected [ 638.927173][T14190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.029577][T14208] netlink: 'syz.3.2336': attribute type 12 has an invalid length. [ 640.036911][T14208] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.2336'. [ 640.159623][T14214] cannot load conntrack support for proto=3 [ 644.348025][T14236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.189899][T14254] cannot load conntrack support for proto=3 [ 646.752359][T14269] netlink: 'syz.1.2352': attribute type 12 has an invalid length. [ 646.754547][T14269] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.2352'. [ 647.066925][T12460] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 647.240553][T12460] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 647.245487][T12460] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 647.252450][T12460] usb 6-1: config 0 interface 0 has no altsetting 0 [ 647.258959][T12460] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 647.262789][T12460] usb 6-1: config 0 interface 0 has no altsetting 0 [ 647.270923][T12460] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 647.274675][T12460] usb 6-1: config 0 interface 0 has no altsetting 0 [ 647.280147][T12460] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 647.282521][T12460] usb 6-1: config 0 interface 0 has no altsetting 0 [ 647.285415][T12460] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 647.290490][T12460] usb 6-1: config 0 interface 0 has no altsetting 0 [ 647.293875][T12460] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 647.296361][T12460] usb 6-1: config 0 interface 0 has no altsetting 0 [ 647.300121][T12460] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 647.302691][T12460] usb 6-1: config 0 interface 0 has no altsetting 0 [ 647.305781][T12460] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 647.312379][T12460] usb 6-1: config 0 interface 0 has no altsetting 0 [ 647.316055][T12460] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 647.319643][T12460] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 647.323573][T12460] usb 6-1: Product: syz [ 647.325173][T12460] usb 6-1: Manufacturer: syz [ 647.328398][T12460] usb 6-1: SerialNumber: syz [ 647.333151][T12460] usb 6-1: config 0 descriptor?? [ 647.337859][T12460] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 647.595820][T12460] usb 6-1: USB disconnect, device number 21 [ 647.598423][T12460] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 648.790234][T14278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.371800][T14280] batman_adv: batadv0: Adding interface: wlan1 [ 649.373509][T14280] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.402168][T14280] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 649.492464][T14280] batman_adv: batadv0: Removing interface: wlan1 [ 653.463960][T14312] cannot load conntrack support for proto=3 [ 654.054022][T14315] netlink: 'syz.1.2365': attribute type 12 has an invalid length. [ 654.056110][T14315] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.2365'. [ 654.357409][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 654.518410][ T9] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 654.521314][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.523654][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.526341][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.529639][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.532060][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.534417][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.538569][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.540906][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.543754][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.546082][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.551036][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.553388][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.559166][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.561496][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.564716][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.567553][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.572375][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 654.574719][ T9] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 654.577465][ T9] usb 6-1: Product: syz [ 654.578977][ T9] usb 6-1: Manufacturer: syz [ 654.580401][ T9] usb 6-1: SerialNumber: syz [ 654.582950][ T9] usb 6-1: config 0 descriptor?? [ 654.593957][ T9] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 654.655286][T14322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.810652][ T35] usb 6-1: USB disconnect, device number 22 [ 654.813718][ T35] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 655.394135][T14329] netlink: 'syz.3.2381': attribute type 12 has an invalid length. [ 655.396226][T14329] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.2381'. [ 655.614224][T14336] batman_adv: batadv0: Adding interface: wlan1 [ 655.619284][T14336] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.645162][T14336] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 655.682886][T14336] batman_adv: batadv0: Removing interface: wlan1 [ 658.166779][T14354] cannot load conntrack support for proto=3 [ 658.840042][T14363] veth0_vlan: left promiscuous mode [ 659.058533][T14370] batman_adv: batadv0: Adding interface: wlan1 [ 659.065944][T14370] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.106894][T14370] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 659.173087][T14370] batman_adv: batadv0: Removing interface: wlan1 [ 664.055824][T14405] overlayfs: failed to resolve './file0': -2 [ 664.200052][T14412] netlink: zone id is out of range [ 664.202625][T14412] netlink: zone id is out of range [ 664.204601][T14412] netlink: zone id is out of range [ 664.205959][T14412] netlink: zone id is out of range [ 664.210321][T14412] netlink: zone id is out of range [ 664.211773][T14412] netlink: zone id is out of range [ 664.213765][T14412] netlink: zone id is out of range [ 664.216382][T14412] netlink: zone id is out of range [ 664.226204][T14412] netlink: zone id is out of range [ 664.245551][T14412] netlink: set zone limit has 4 unknown bytes [ 664.273228][T14412] random: crng reseeded on system resumption [ 664.329670][T14413] veth0_vlan: left promiscuous mode [ 664.984347][T14428] batman_adv: batadv0: Adding interface: wlan1 [ 664.986117][T14428] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.995068][T14428] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 665.046282][T14428] batman_adv: batadv0: Removing interface: wlan1 [ 666.541899][T14461] veth0_vlan: left promiscuous mode [ 666.702973][T14463] overlayfs: failed to resolve './file0': -2 [ 666.840304][T14464] random: crng reseeded on system resumption [ 669.230829][T14500] veth0_vlan: left promiscuous mode [ 669.493702][T14517] overlayfs: failed to resolve './file0': -2 [ 669.659934][T14521] net_ratelimit: 10 callbacks suppressed [ 669.665053][T14521] netlink: zone id is out of range [ 669.675164][T14521] netlink: zone id is out of range [ 669.682977][T14521] netlink: zone id is out of range [ 669.684391][T14521] netlink: zone id is out of range [ 669.690649][T14521] netlink: zone id is out of range [ 669.724792][T14521] netlink: zone id is out of range [ 669.754869][T14525] random: crng reseeded on system resumption [ 669.778792][T14521] netlink: zone id is out of range [ 669.783101][T14521] netlink: zone id is out of range [ 669.786149][T14521] netlink: set zone limit has 4 unknown bytes [ 669.808708][T14524] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 669.839813][T14524] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 669.849168][T14524] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 670.553097][T14532] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 673.959557][T14569] overlayfs: failed to resolve './file0': -2 [ 674.012002][T14576] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 674.014545][T14576] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 674.017289][T14576] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 674.149483][T14578] random: crng reseeded on system resumption [ 675.188301][T14599] net_ratelimit: 10 callbacks suppressed [ 675.188356][T14599] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 677.240841][T14627] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2452'. [ 677.611959][T14629] netdevsim netdevsim1: Direct firmware load for # failed with error -2 [ 677.614470][T14629] netdevsim netdevsim1: Falling back to sysfs fallback for: # [ 678.073849][T14635] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 678.076406][T14635] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 678.079477][T14635] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 681.257143][T14679] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2465'. [ 681.521182][T14682] netdevsim netdevsim3: Direct firmware load for # failed with error -2 [ 681.523467][T14682] netdevsim netdevsim3: Falling back to sysfs fallback for: # [ 682.209564][T14691] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 682.212550][T14691] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 682.215408][T14691] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 685.057745][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.066670][T14730] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 688.464211][T14746] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2481'. [ 689.321730][T14757] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 689.323956][T14757] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 689.326563][T14757] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 689.402909][T14751] netdevsim netdevsim2: Direct firmware load for # failed with error -2 [ 689.405393][T14751] netdevsim netdevsim2: Falling back to sysfs fallback for: # [ 690.151790][T14770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2490'. [ 690.246648][T14772] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 693.837381][T14803] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2497'. [ 694.190999][T14809] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 694.193493][T14809] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 694.196518][T14809] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 695.177105][T14816] netdevsim netdevsim0: Direct firmware load for # failed with error -2 [ 695.179365][T14816] netdevsim netdevsim0: Falling back to sysfs fallback for: # [ 695.263362][T14821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2503'. [ 695.286245][T14823] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2511'. [ 695.965715][T14828] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 702.472358][T14836] netlink: 'syz.2.2509': attribute type 6 has an invalid length. [ 702.474408][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2509'. [ 702.476817][T14836] netlink: 'syz.2.2509': attribute type 5 has an invalid length. [ 702.480870][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2509'. [ 702.703828][T14849] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2516'. [ 703.483972][T14864] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 703.486447][T14864] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 703.497967][T14864] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 703.716321][T14867] netdevsim netdevsim3: Direct firmware load for # failed with error -2 [ 703.718632][T14867] netdevsim netdevsim3: Falling back to sysfs fallback for: # [ 704.580622][T14873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2518'. [ 704.580944][T14876] netlink: 'syz.3.2520': attribute type 6 has an invalid length. [ 704.585002][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2520'. [ 704.602903][T14876] netlink: 'syz.3.2520': attribute type 5 has an invalid length. [ 704.604955][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2520'. [ 704.780559][T14882] netlink: 'syz.2.2521': attribute type 4 has an invalid length. [ 705.770775][T14902] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 705.773023][T14902] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 705.793059][T14902] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 706.767107][T14909] netdevsim netdevsim2: Direct firmware load for # failed with error -2 [ 706.769321][T14909] netdevsim netdevsim2: Falling back to sysfs fallback for: # [ 706.817843][T14916] netlink: 'syz.0.2531': attribute type 6 has an invalid length. [ 706.819926][T14916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2531'. [ 706.822275][T14916] netlink: 'syz.0.2531': attribute type 5 has an invalid length. [ 706.824313][T14916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2531'. [ 707.090855][T14925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2533'. [ 707.607473][ T8] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 707.758153][ T8] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 707.767504][ T8] usb 6-1: config 0 has no interface number 0 [ 707.771142][ T8] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a26, bcdDevice=bb.83 [ 707.773521][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.775590][ T8] usb 6-1: Product: syz [ 707.777097][ T8] usb 6-1: Manufacturer: syz [ 707.778744][ T8] usb 6-1: SerialNumber: syz [ 707.787145][ T8] usb 6-1: config 0 descriptor?? [ 708.335490][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2545'. [ 708.388444][ T8] hub 6-1:0.1: bad descriptor, ignoring hub [ 708.390034][ T8] hub 6-1:0.1: probe with driver hub failed with error -5 [ 708.407791][ T8] usb 6-1: USB disconnect, device number 23 [ 708.937752][T14958] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2540'. [ 708.954945][T14960] netlink: 'syz.1.2542': attribute type 6 has an invalid length. [ 708.964727][T14958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x20259 pfn:0x63298 [ 708.967484][T14958] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 708.969384][T14958] raw: 04fff00000000000 ffffea00018c4708 ffffea00018ca988 0000000000000000 [ 708.971612][T14958] raw: 0000000000020259 0000000000000000 00000000ffffffff 0000000000000000 [ 708.980000][T14960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2542'. [ 708.983637][T14958] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 708.989157][T14960] netlink: 'syz.1.2542': attribute type 5 has an invalid length. [ 708.989683][T14958] page_owner tracks the page as freed [ 708.993711][T14958] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 14944, tgid 14936 (syz.0.2536), ts 708269074829, free_ts 708843185854 [ 708.993746][T14960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2542'. [ 709.002445][T14958] post_alloc_hook+0x2d1/0x350 [ 709.005019][T14958] get_page_from_freelist+0x1351/0x2e50 [ 709.008393][T14958] __alloc_pages_noprof+0x22b/0x23f0 [ 709.010359][T14958] alloc_pages_mpol_noprof+0x275/0x610 [ 709.011871][T14958] folio_alloc_mpol_noprof+0x36/0xd0 [ 709.013447][T14958] vma_alloc_folio_noprof+0xee/0x1b0 [ 709.018135][T14958] do_wp_page+0x1a07/0x33e0 [ 709.019606][T14958] __handle_mm_fault+0x2405/0x54d0 [ 709.021366][T14958] handle_mm_fault+0x498/0xa60 [ 709.022948][T14958] do_user_addr_fault+0x7a3/0x13f0 [ 709.024501][T14958] exc_page_fault+0x5c/0xc0 [ 709.025870][T14958] asm_exc_page_fault+0x26/0x30 [ 709.027653][T14958] page last free pid 14944 tgid 14936 stack trace: [ 709.029745][T14958] free_unref_folios+0x9e9/0x1390 [ 709.031197][T14958] folios_put_refs+0x560/0x760 [ 709.032601][T14958] free_pages_and_swap_cache+0x36d/0x510 [ 709.040034][T14958] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 709.045327][T14958] tlb_flush_mmu+0xe9/0x590 [ 709.048193][T14958] unmap_page_range+0x1c74/0x3bf0 [ 709.049726][T14958] unmap_single_vma+0x194/0x2b0 [ 709.051126][T14958] unmap_vmas+0x22f/0x490 [ 709.052352][T14958] exit_mmap+0x1b8/0xb20 [ 709.053648][T14958] __mmput+0x12a/0x480 [ 709.054831][T14958] mmput+0x62/0x70 [ 709.055874][T14958] do_exit+0x9bf/0x2bb0 [ 709.057582][T14958] do_group_exit+0xd3/0x2a0 [ 709.058847][T14958] get_signal+0x2726/0x27a0 [ 709.060106][T14958] arch_do_signal_or_restart+0x90/0x7e0 [ 709.061610][T14958] syscall_exit_to_user_mode+0x150/0x2a0 [ 709.065596][T14958] ------------[ cut here ]------------ [ 709.067137][T14958] kernel BUG at include/linux/mm.h:1462! [ 709.069305][T14958] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 709.071860][T14958] CPU: 1 UID: 0 PID: 14958 Comm: syz.0.2540 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 709.074966][T14958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 709.077737][T14958] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 709.079503][T14958] Code: b0 8b 48 89 df e8 f2 d8 4d fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 02 2e 09 fd 48 c7 c6 60 84 b0 8b 4c 89 e7 e8 d3 d8 4d fd 90 <0f> 0b e8 eb 2d 09 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 709.084486][T14958] RSP: 0018:ffffc90003056e48 EFLAGS: 00010246 [ 709.086059][T14958] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc900032f9000 [ 709.088108][T14958] RDX: 0000000000040000 RSI: ffffffff8483003d RDI: ffff88802ba78444 [ 709.090153][T14958] RBP: ffffea00018ca634 R08: 0000000000000001 R09: fffffbfff2d2bd06 [ 709.092225][T14958] R10: ffffffff9695e837 R11: ffff88802b828a40 R12: ffffea00018ca600 [ 709.094268][T14958] R13: ffff888056385800 R14: 0000000000001000 R15: 0000000000001000 [ 709.096348][T14958] FS: 0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:00000000f5736b40 [ 709.098672][T14958] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 709.100393][T14958] CR2: 00000000f73c4ffc CR3: 000000007237e000 CR4: 0000000000352ef0 [ 709.102454][T14958] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 709.104513][T14958] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 709.106555][T14958] Call Trace: [ 709.107430][T14958] [ 709.108216][T14958] ? die+0x31/0x80 [ 709.109200][T14958] ? do_trap+0x232/0x430 [ 709.110313][T14958] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 709.111908][T14958] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 709.113468][T14958] ? do_error_trap+0xf4/0x230 [ 709.114707][T14958] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 709.116295][T14958] ? handle_invalid_op+0x34/0x40 [ 709.117655][T14958] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 709.119236][T14958] ? exc_invalid_op+0x2e/0x50 [ 709.120476][T14958] ? asm_exc_invalid_op+0x1a/0x20 [ 709.121799][T14958] ? __iov_iter_get_pages_alloc+0x1d1d/0x2240 [ 709.123384][T14958] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 709.124990][T14958] ? __iov_iter_get_pages_alloc+0x1d1d/0x2240 [ 709.126579][T14958] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 709.128195][T14958] ? delete_node+0x207/0x8e0 [ 709.129407][T14958] iov_iter_get_pages_alloc2+0x53/0xf0 [ 709.130828][T14958] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 709.132597][T14958] ? p9pdu_vwritef+0x368/0x21d0 [ 709.133875][T14958] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 709.135776][T14958] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 709.137132][T14958] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 709.138539][T14958] ? p9_tag_alloc+0x4cc/0x870 [ 709.139786][T14958] ? lock_release+0x46/0x6f0 [ 709.141002][T14958] p9_virtio_zc_request+0x1ac/0x1460 [ 709.142386][T14958] ? p9pdu_writef+0xc4/0x100 [ 709.143598][T14958] ? __pfx_p9pdu_writef+0x10/0x10 [ 709.144918][T14958] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 709.146256][T14958] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 709.147749][T14958] ? rcu_is_watching+0x12/0xc0 [ 709.149003][T14958] ? trace_9p_protocol_dump+0x192/0x220 [ 709.150439][T14958] ? rcu_is_watching+0x12/0xc0 [ 709.151711][T14958] ? p9_client_prepare_req+0x111/0x4d0 [ 709.153125][T14958] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 709.154649][T14958] ? hlock_class+0x4e/0x130 [ 709.155849][T14958] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 709.157380][T14958] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 709.159046][T14958] ? __pfx___lock_acquire+0x10/0x10 [ 709.160407][T14958] ? hlock_class+0x4e/0x130 [ 709.161603][T14958] ? mark_lock+0xb5/0xc60 [ 709.162739][T14958] ? __pfx_mark_lock+0x10/0x10 [ 709.164000][T14958] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 709.165477][T14958] p9_client_write+0x447/0x680 [ 709.166735][T14958] ? __pfx_p9_client_write+0x10/0x10 [ 709.168122][T14958] ? mark_held_locks+0x9f/0xe0 [ 709.169375][T14958] v9fs_issue_write+0xe2/0x180 [ 709.170625][T14958] ? __pfx_v9fs_issue_write+0x10/0x10 [ 709.172036][T14958] ? rcu_is_watching+0x12/0xc0 [ 709.173282][T14958] ? trace_netfs_sreq+0x193/0x220 [ 709.174608][T14958] netfs_do_issue_write+0x92/0x110 [ 709.175953][T14958] netfs_advance_write+0x384/0xbd0 [ 709.177292][T14958] ? netfs_buffer_append_folio+0x569/0x750 [ 709.178812][T14958] netfs_write_folio+0xc44/0x18f0 [ 709.180137][T14958] netfs_writepages+0x2ba/0xb90 [ 709.181427][T14958] ? __pfx_netfs_writepages+0x10/0x10 [ 709.182832][T14958] ? __pfx___lock_acquire+0x10/0x10 [ 709.184195][T14958] ? _find_first_zero_bit+0x94/0xb0 [ 709.185553][T14958] ? __pfx_netfs_writepages+0x10/0x10 [ 709.186953][T14958] do_writepages+0x1a3/0x7f0 [ 709.188170][T14958] ? __pfx_do_writepages+0x10/0x10 [ 709.189517][T14958] ? __pfx_lock_acquire+0x10/0x10 [ 709.190830][T14958] ? do_raw_spin_lock+0x12d/0x2c0 [ 709.192162][T14958] ? do_raw_spin_unlock+0x172/0x230 [ 709.193523][T14958] ? _raw_spin_unlock+0x28/0x50 [ 709.194825][T14958] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 709.196400][T14958] filemap_fdatawrite_wbc+0x148/0x1c0 [ 709.197799][T14958] __filemap_fdatawrite_range+0xba/0x100 [ 709.199257][T14958] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 709.200893][T14958] ? find_held_lock+0x2d/0x110 [ 709.202157][T14958] ? v9fs_fid_lookup+0xe9/0xec0 [ 709.203436][T14958] ? current_time+0x7e/0xc0 [ 709.204635][T14958] v9fs_vfs_setattr+0x93a/0xab0 [ 709.205907][T14958] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 709.207307][T14958] ? evm_inode_setattr+0x65/0x680 [ 709.208632][T14958] ? __pfx_make_vfsgid+0x10/0x10 [ 709.209923][T14958] ? __pfx_current_time+0x10/0x10 [ 709.211236][T14958] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 709.212661][T14958] notify_change+0x6a6/0x1230 [ 709.213894][T14958] do_truncate+0x15c/0x220 [ 709.215069][T14958] ? __pfx_do_truncate+0x10/0x10 [ 709.216370][T14958] ? get_current_fs_domain+0x188/0x1f0 [ 709.217792][T14958] vfs_truncate+0x3ef/0x4e0 [ 709.218986][T14958] __ia32_compat_sys_truncate+0x173/0x1e0 [ 709.220480][T14958] ? __pfx___ia32_compat_sys_truncate+0x10/0x10 [ 709.222097][T14958] ? __secure_computing+0x273/0x3f0 [ 709.223451][T14958] __do_fast_syscall_32+0x73/0x120 [ 709.224792][T14958] do_fast_syscall_32+0x32/0x80 [ 709.226066][T14958] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 709.227713][T14958] RIP: 0023:0xf7fb8579 [ 709.228797][T14958] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 709.233753][T14958] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 000000000000005c [ 709.235908][T14958] RAX: ffffffffffffffda RBX: 00000000200000c0 RCX: 0000000000000000 [ 709.237951][T14958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 709.240022][T14958] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 709.242088][T14958] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 709.244155][T14958] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 709.246195][T14958] [ 709.247011][T14958] Modules linked in: [ 709.248352][T14958] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 709.270214][T14958] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 709.272014][T14958] Code: b0 8b 48 89 df e8 f2 d8 4d fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 02 2e 09 fd 48 c7 c6 60 84 b0 8b 4c 89 e7 e8 d3 d8 4d fd 90 <0f> 0b e8 eb 2d 09 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 709.308297][T14958] RSP: 0018:ffffc90003056e48 EFLAGS: 00010246 [ 709.316065][T14958] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc900032f9000 [ 709.328938][T14958] RDX: 0000000000040000 RSI: ffffffff8483003d RDI: ffff88802ba78444 [ 709.355072][T14958] RBP: ffffea00018ca634 R08: 0000000000000001 R09: fffffbfff2d2bd06 [ 709.358206][T14958] R10: ffffffff9695e837 R11: ffff88802b828a40 R12: ffffea00018ca600 [ 709.373683][T14958] R13: ffff888056385800 R14: 0000000000001000 R15: 0000000000001000 [ 709.375797][T14958] FS: 0000000000000000(0000) GS:ffff88802b900000(0063) knlGS:00000000f5736b40 [ 709.379160][T14958] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 709.381195][T14958] CR2: 00000000f73fcdb8 CR3: 000000007237e000 CR4: 0000000000350ef0 [ 709.383520][T14958] Kernel panic - not syncing: Fatal exception [ 709.386691][T14958] Kernel Offset: disabled [ 709.387830][T14958] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:44:52 Registers: info registers vcpu 0 CPU#0 RAX=00000000025d7154 RBX=0000000000000000 RCX=ffffffff8b0cb289 RDX=ffffed10056c7026 RSI=ffffffff8bb0dd40 RDI=ffffffff8163944c RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed10056c7025 R10=ffff88802b63812b R11=ffff88801bec7000 R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff901c0558 R15=0000000000000000 RIP=ffffffff8b0cc66f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005734399c CR3=0000000072ba2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fe6da5 RDI=ffffffff9a60bd60 RBP=ffffffff9a60bd20 RSP=ffffc900030567a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=0000000000000054 R14=ffffffff84fe6d40 R15=0000000000000000 RIP=ffffffff84fe6dcf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73c4ffc CR3=000000007237e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000044000000 Opmask01=00000000fffffffa Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc203b7e20 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000a000a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffea00018c6200 RBX=00000000000009e2 RCX=ffffffff816995d9 RDX=ffff88801edca440 RSI=ffffffff81e243ac RDI=ffff88801edca884 RBP=00000000000009e2 RSP=ffffc900035f7860 R8 =0000000000000000 R9 =fffffbfff20380ab R10=ffffffff901c055f R11=00000000000a2012 R12=ffffea000195fc00 R13=0000000000000000 R14=00000000000009e7 R15=0000000000000003 RIP=ffffffff81e24dbd RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8630facd00 ffffffff 00c00000 GS =0000 ffff88802b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000557f79db4000 CR3=0000000000e1a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=cf8a8b08cf8a8b08 cf8a8b08cf8a8b08 cf8a8b08cf8a8b08 cf8a8b08cf8a8b08 cf8a8b08cf8a8b08 cf8a8b08cf8a8b08 cf8a8b08cf8a8b08 cf8a8b08cf8a8b08 ZMM22=0eed50fd0eed50fd 0eed50fd0eed50fd 0eed50fd0eed50fd 0eed50fd0eed50fd 0eed50fd0eed50fd 0eed50fd0eed50fd 0eed50fd0eed50fd 0eed50fd0eed50fd ZMM23=ee0e83c5ee0e83c5 ee0e83c5ee0e83c5 ee0e83c5ee0e83c5 ee0e83c5ee0e83c5 ee0e83c5ee0e83c5 ee0e83c5ee0e83c5 ee0e83c5ee0e83c5 ee0e83c5ee0e83c5 ZMM24=0a86d2170a86d217 0a86d2170a86d217 0a86d2170a86d217 0a86d2170a86d217 0a86d2170a86d217 0a86d2170a86d217 0a86d2170a86d217 0a86d2170a86d217 ZMM25=71fa841471fa8414 71fa841471fa8414 71fa841471fa8414 71fa841471fa8414 71fa841471fa8414 71fa841471fa8414 71fa841471fa8414 71fa841471fa8414 ZMM26=dfc7a0dbdfc7a0db dfc7a0dbdfc7a0db dfc7a0dbdfc7a0db dfc7a0dbdfc7a0db dfc7a0dbdfc7a0db dfc7a0dbdfc7a0db dfc7a0dbdfc7a0db dfc7a0dbdfc7a0db ZMM27=050531b8050531b8 050531b8050531b8 050531b8050531b8 050531b8050531b8 050531b8050531b8 050531b8050531b8 050531b8050531b8 050531b8050531b8 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5d1a00005d1a0000 5d1a00005d1a0000 5d1a00005d1a0000 5d1a00005d1a0000 5d1a00005d1a0000 5d1a00005d1a0000 5d1a00005d1a0000 5d1a00005d1a0000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffffff8c6b2520 RCX=ffffffff81fc716b RDX=1ffff110052e6006 RSI=ffffffff81fc7179 RDI=ffff888029730030 RBP=0000000020000000 RSP=ffffc90000e7f6e0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000020000000 R11=0000000000000000 R12=ffff888029730000 R13=ffffc90000e7f870 R14=0000000000000002 R15=ffffc90000e7f860 RIP=ffffffff81fc719e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73fcdb8 CR3=000000004e19c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000