last executing test programs: 5.710702728s ago: executing program 1 (id=1496): openat$sequencer(0xffffff9c, &(0x7f0000000100), 0xc8001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) getpid() r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) 3.668246719s ago: executing program 1 (id=1492): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 2.7565031s ago: executing program 0 (id=1499): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x5c5d, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2.149352969s ago: executing program 1 (id=1505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r3 = syz_open_pts(r2, 0x141601) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7fffffd, 0x5, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) 1.852138296s ago: executing program 0 (id=1506): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x2d2}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x39000000, 0x0, 0x0, 0x0) 1.777135654s ago: executing program 0 (id=1507): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 1.776579864s ago: executing program 0 (id=1508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x40101286, &(0x7f0000000240)={0xffffffffffffffff, 0x747}) r1 = socket$alg(0x26, 0x5, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x8382, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000054}, 0xc001) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8800) sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000ff0300000000002000000000000a20000000000a01010000000000000000070000000900010073797a310000000028000000000a010800000000000000000a00000008000240000700010900010073797a30"], 0x98}}, 0x0) 1.489487284s ago: executing program 2 (id=1514): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') chown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x2) r1 = socket(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002580), 0x0, 0x0, 0x0) statfs(&(0x7f0000000880)='./file0\x00', &(0x7f0000000940)=""/109) 1.421009531s ago: executing program 2 (id=1516): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x6}, [], {0x4, 0x4}, [], {0x10, 0x6}, {0x20, 0x7}}, 0x24, 0x3) close(r0) write$cgroup_int(r2, 0x0, 0x0) 1.304215653s ago: executing program 3 (id=1518): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f40)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xb, [@enum64={0x1, 0x4, 0x0, 0x13, 0x0, 0x9, [{0x9, 0x200, 0x37}, {0x5, 0x7, 0x1000}, {0x1, 0x2, 0x101}, {0x1, 0xa382, 0x7}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x2e, 0x30, 0x30, 0x4f, 0x0, 0x61]}}, &(0x7f0000000ec0)=""/69, 0x5f, 0x45, 0x0, 0x1, 0x10000, @value}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x12, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000000000000000003a0c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001"], 0xac}}, 0x0) setresuid(0x0, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000035040000500000001d400200000000006504020000ffffffb4030000000000001d440000000000007a0a00fe000000000f03000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b5264f00000000cd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af2542ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64364f56e24e6d2128c7e0ec82770c8204a1ddeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d3490dd97adab638cca595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8c83c3d8cbfedc038395342846e1b207974e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfcd7ad0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f9212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0000cf70a91c76e8b14de02b884114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6a582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad8508f7550cad7ec93af7fb1b50c75ba1ee7baa19faf67256b56a355b6a686ba99d0a8950f0937f778af083e055f5138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003ebfbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1e1979e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a508460f2d0455cf79a43746979f99f60037e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adde305ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1ecbf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792747588d49df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d943622000000000000000000000000000000000000000000000000000000000000000000000000000000000000f112fc8a4942d7453cf29cbbef3a567ea0a2a8a0561dfb6cfe7f1812405e1a092b382adc0698c377b0a1f49afb6ba26f8e28cf68b0065857b36276931c318cb84f748a26c4d81a0322ce21e7d9c002006cf8ac6402e036cf9344a1cb1b8603276000144268a0aa584a92188f55318dde1d1b09319c00d0de3471ab4243ac0f49516a690c514ba6449f0a804fcac3f30bf4a933d32c889283aa092cca9aa349b624c5ed2b66fa0439f54f83c9ff8be083221609c8696433da46c91ac52e5b1d159daed1af0cda0ee05ae770a7ea467d5602b441e748b7f22496f8453fb6b7cc2dd3a8ce15fd76387fc02d4e2b7b4502a80000000000000000000000000000000000000000e046c0756c0955a81165e4212a1a58334fe51269f228ad32fba2bdae0172278d3bb48c370f6b59c0c7ba9b0aaae317d3f8104fd696bc76268923c396b017003ddcd205c05311dcae277e5b00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.221812719s ago: executing program 3 (id=1519): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) connect$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x2}}, 0x10) accept4(r1, 0x0, 0x0, 0x0) 1.136308466s ago: executing program 2 (id=1521): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 1.079377766s ago: executing program 3 (id=1522): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r3, 0x0, r1}, 0x10) 1.079092989s ago: executing program 1 (id=1523): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0xa, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc", 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x80002, 0x88) socket$inet6_sctp(0xa, 0x801, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x3, 0x20, 0x9, 0x4}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0xfffffffffffffffe, 0x9, 0x5, 0x3, 0x4, 0x20}, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x4a0a, 0x0) 1.078839011s ago: executing program 2 (id=1524): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) setreuid(0x0, 0xee01) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 1.009706765s ago: executing program 3 (id=1525): socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$ttynull(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) dup(r2) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) fcntl$lock(r6, 0x26, &(0x7f0000000080)) 180.814853ms ago: executing program 3 (id=1526): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') chown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x2) r1 = socket(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002580), 0x0, 0x0, 0x0) statfs(&(0x7f0000000880)='./file0\x00', &(0x7f0000000940)=""/109) 179.160263ms ago: executing program 1 (id=1534): memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0xff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0x0, [@remote, @empty, @empty, @multicast1, @remote, @dev, @loopback, @rand_addr]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 178.387322ms ago: executing program 2 (id=1527): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000540)={0x0, 0xffffffff, 0x800, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8, 0x8440000000000000}) close_range(r5, 0xffffffffffffffff, 0x0) 68.538629ms ago: executing program 0 (id=1528): openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x9, 0x4004, @fd, 0x7925, 0x0, 0x0, 0x18, 0x1, {0x3}}) io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x200000000000000, 0x0, 0x0) 63.027751ms ago: executing program 3 (id=1529): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 48.183235ms ago: executing program 0 (id=1530): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) unshare(0x22020600) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mount(0x0, 0x0, 0x0, 0x400080, 0x0) 16.505943ms ago: executing program 2 (id=1531): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0xffdf, {{0x1, [0x8, 0x4, 0x5, 0x0, 0x9, 0xf, 0x4, 0xb, 0xc, 0x5, 0x8, 0x3, 0x4, 0x10, 0x9, 0x7], 0x1, [0x7ff, 0x4, 0x0, 0x1, 0x80, 0x400, 0x4, 0x89, 0x4, 0xa, 0x7, 0xff, 0xfff, 0x9, 0x5, 0x1], [0xda9, 0xc5e, 0x0, 0x68, 0x8, 0x65ae, 0x8, 0xfffc, 0x8, 0x3, 0x2, 0x7, 0x5, 0x7, 0x1000, 0x30]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48801}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x42424d9c6abf4bb4}}}, 0x8c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20050800) getpgid(0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x800, 0x9}, &(0x7f00000000c0)=0x88) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={r5, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000180)=0xc) 0s ago: executing program 1 (id=1532): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x408, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r3, 0x9c3fa077fa966179, 0x70bd25, 0x1000, {{0x7e}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) kernel console output (not intermixed with test programs): 7.386396][ T5935] team0: Port device team_slave_1 added [ 47.490514][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.492733][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.503149][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.559962][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.562259][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.570353][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.621770][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.624971][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.627923][ T5943] bridge_slave_0: entered allmulticast mode [ 47.631808][ T5943] bridge_slave_0: entered promiscuous mode [ 47.646089][ T5939] hsr_slave_0: entered promiscuous mode [ 47.648510][ T5939] hsr_slave_1: entered promiscuous mode [ 47.651258][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.653815][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.656685][ T5943] bridge_slave_1: entered allmulticast mode [ 47.660469][ T5943] bridge_slave_1: entered promiscuous mode [ 47.722622][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.800224][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.803476][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.806369][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.808659][ T5944] bridge_slave_0: entered allmulticast mode [ 47.811281][ T5944] bridge_slave_0: entered promiscuous mode [ 47.814755][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.817529][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.819795][ T5944] bridge_slave_1: entered allmulticast mode [ 47.822363][ T5944] bridge_slave_1: entered promiscuous mode [ 47.828701][ T5935] hsr_slave_0: entered promiscuous mode [ 47.830922][ T5935] hsr_slave_1: entered promiscuous mode [ 47.833743][ T5935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.836236][ T5935] Cannot create hsr debugfs directory [ 47.967309][ T5943] team0: Port device team_slave_0 added [ 47.972511][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.996716][ T5943] team0: Port device team_slave_1 added [ 48.000748][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.081027][ T5944] team0: Port device team_slave_0 added [ 48.101722][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.104369][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.112280][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.117793][ T5944] team0: Port device team_slave_1 added [ 48.137333][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.139515][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.147396][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.198606][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.200840][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.208837][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.213239][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.216107][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.226940][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.368592][ T5944] hsr_slave_0: entered promiscuous mode [ 48.370676][ T5944] hsr_slave_1: entered promiscuous mode [ 48.372547][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.374958][ T5944] Cannot create hsr debugfs directory [ 48.381268][ T5943] hsr_slave_0: entered promiscuous mode [ 48.388618][ T5943] hsr_slave_1: entered promiscuous mode [ 48.391501][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.394799][ T5943] Cannot create hsr debugfs directory [ 48.551253][ T5939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.560982][ T5939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.571319][ T5939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.573962][ T67] Bluetooth: hci1: command tx timeout [ 48.586234][ T5939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.653394][ T67] Bluetooth: hci3: command tx timeout [ 48.653412][ T5938] Bluetooth: hci2: command tx timeout [ 48.663610][ T67] Bluetooth: hci0: command tx timeout [ 48.716057][ T5935] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.720989][ T5935] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.725704][ T5935] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.731067][ T5935] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.775762][ T5943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.782796][ T5943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.789443][ T5943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.796719][ T5943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.855767][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.862499][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.878421][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.889799][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.955784][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.993484][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.013005][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.017444][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.019817][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.029542][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.031765][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.057597][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.067172][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.085256][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.087410][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.108570][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.115468][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.117830][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.126219][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.136098][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.138359][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.146460][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.149301][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.162880][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.179261][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.182400][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.192637][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.194925][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.238155][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.268366][ T5939] veth0_vlan: entered promiscuous mode [ 49.276876][ T5939] veth1_vlan: entered promiscuous mode [ 49.307411][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.312414][ T5939] veth0_macvtap: entered promiscuous mode [ 49.318829][ T5939] veth1_macvtap: entered promiscuous mode [ 49.326417][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.351873][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.365022][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.381637][ T5939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.385824][ T5939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.389307][ T5939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.392676][ T5939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.398619][ T5935] veth0_vlan: entered promiscuous mode [ 49.402374][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.411615][ T5935] veth1_vlan: entered promiscuous mode [ 49.434621][ T5943] veth0_vlan: entered promiscuous mode [ 49.449807][ T5943] veth1_vlan: entered promiscuous mode [ 49.482063][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.485606][ T5935] veth0_macvtap: entered promiscuous mode [ 49.489848][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.505653][ T5935] veth1_macvtap: entered promiscuous mode [ 49.511387][ T5944] veth0_vlan: entered promiscuous mode [ 49.520796][ T5943] veth0_macvtap: entered promiscuous mode [ 49.525363][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.527185][ T5943] veth1_macvtap: entered promiscuous mode [ 49.527806][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.531018][ T5944] veth1_vlan: entered promiscuous mode [ 49.545250][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.548777][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.553967][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.560951][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.564415][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.568205][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.576587][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.580203][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.583361][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.586555][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.590505][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.596737][ T5939] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.597852][ T5935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.605943][ T5935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.608700][ T5935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.611611][ T5935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.616499][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.619768][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.622817][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.626851][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.630616][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.636200][ T5943] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.638978][ T5943] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.641657][ T5943] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.645034][ T5943] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.659930][ T5944] veth0_macvtap: entered promiscuous mode [ 49.665964][ T5944] veth1_macvtap: entered promiscuous mode [ 49.688952][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.694215][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.697762][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.701491][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.706312][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.711407][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.717498][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.737298][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.741744][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.745768][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.748979][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.751996][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.755565][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.771348][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.783459][ T5944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.786889][ T5944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.789567][ T5944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.792226][ T5944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.797204][ T6000] bridge0: port 3(syz_tun) entered blocking state [ 49.800211][ T6000] bridge0: port 3(syz_tun) entered disabled state [ 49.802435][ T6000] syz_tun: entered allmulticast mode [ 49.805471][ T6000] syz_tun: entered promiscuous mode [ 49.807609][ T6000] bridge0: port 3(syz_tun) entered blocking state [ 49.810279][ T6000] bridge0: port 3(syz_tun) entered forwarding state [ 49.819705][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.823409][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.856921][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.859547][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.877409][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.880101][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.891112][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.894722][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.902794][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.908538][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.933298][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.935782][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.990915][ T6013] netlink: 'syz.3.4': attribute type 39 has an invalid length. [ 50.664045][ T67] Bluetooth: hci1: command tx timeout [ 50.733832][ T67] Bluetooth: hci3: command tx timeout [ 50.735221][ T5938] Bluetooth: hci2: command tx timeout [ 50.743122][ T5938] Bluetooth: hci0: command tx timeout [ 50.846293][ T6016] orangefs_mount: mount request failed with -4 [ 51.353024][ T34] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.515798][ T34] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 51.520488][ T34] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 51.524947][ T34] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 51.528862][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.537337][ T6038] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 51.545755][ T34] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 51.739661][ T6042] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.829314][ T6044] kvm: kvm [6043]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0xc2) = 0x1 [ 51.834991][ T6044] kvm: kvm [6043]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0xc1) = 0x1 [ 52.028225][ T5977] usb 6-1: USB disconnect, device number 2 [ 52.131798][ T6058] tipc: Started in network mode [ 52.133964][ T6058] tipc: Node identity 62456a7e1efb, cluster identity 4711 [ 52.136696][ T6058] tipc: Enabled bearer , priority 0 [ 52.141024][ T6056] tipc: Resetting bearer [ 52.744262][ T5938] Bluetooth: hci1: command tx timeout [ 52.761674][ T6056] tipc: Disabling bearer [ 52.813167][ T5938] Bluetooth: hci0: command tx timeout [ 52.813682][ T67] Bluetooth: hci2: command tx timeout [ 52.816186][ T5938] Bluetooth: hci3: command tx timeout [ 53.264787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.267480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.270091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.273078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.275694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.278342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.281635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.285379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 53.289009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.292266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.413938][ T6112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.37'. [ 54.813504][ T5938] Bluetooth: hci1: command tx timeout [ 54.862887][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 54.896459][ T6120] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 54.913048][ T5938] Bluetooth: hci2: command tx timeout [ 54.913308][ T67] Bluetooth: hci3: command tx timeout [ 54.916605][ T5297] Bluetooth: hci0: command tx timeout [ 54.939029][ T6120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.988226][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 54.998947][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.049419][ T6128] bridge_slave_1 (unregistering): left allmulticast mode [ 55.051729][ T6128] bridge_slave_1 (unregistering): left promiscuous mode [ 55.054451][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.289661][ T6139] overlayfs: failed to clone upperpath [ 56.376824][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 56.389317][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.441192][ T6161] bridge_slave_1 (unregistering): left allmulticast mode [ 56.443736][ T6161] bridge_slave_1 (unregistering): left promiscuous mode [ 56.446323][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.719219][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'. [ 56.756814][ T6172] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 56.788449][ T6172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.014614][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 57.040640][ T6181] Zero length message leads to an empty skb [ 57.313078][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 57.463352][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 57.466734][ T29] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 57.471620][ T29] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 57.474518][ T29] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 57.477046][ T29] usb 6-1: Product: syz [ 57.478401][ T29] usb 6-1: Manufacturer: syz [ 57.479881][ T29] usb 6-1: SerialNumber: syz [ 57.483158][ T29] usb 6-1: config 0 descriptor?? [ 57.485438][ T6183] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 57.489340][ T29] hub 6-1:0.0: bad descriptor, ignoring hub [ 57.491374][ T29] hub 6-1:0.0: probe with driver hub failed with error -5 [ 58.340531][ T6202] batman_adv: batadv0: Adding interface: dummy0 [ 58.342575][ T6202] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.351385][ T6202] batman_adv: batadv0: Interface activated: dummy0 [ 58.360344][ T6202] batadv0: mtu less than device minimum [ 58.362611][ T6202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.366285][ T6202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.369833][ T6202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.373389][ T6202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.376970][ T6202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.380515][ T6202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.384240][ T6202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 58.423363][ T6183] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 58.574231][ T6183] usb 6-1: device firmware changed [ 58.576747][ T5964] usb 6-1: USB disconnect, device number 3 [ 58.714080][ T5964] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 58.863032][ T5964] usb 6-1: Using ep0 maxpacket: 32 [ 58.881913][ T5964] usb 6-1: unable to get BOS descriptor or descriptor too short [ 58.886571][ T5964] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 58.890307][ T5964] usb 6-1: can't read configurations, error -71 [ 61.250310][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 61.256124][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 61.675855][ T6265] input: syz0 as /devices/virtual/input/input5 [ 61.986896][ T6271] overlayfs: failed to clone upperpath [ 62.958604][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 62.991304][ T6287] net_ratelimit: 12 callbacks suppressed [ 62.991316][ T6287] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 63.026174][ T6287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.120429][ T6294] overlayfs: failed to clone upperpath [ 64.022680][ T6318] vlan0: entered promiscuous mode [ 64.031843][ T6318] team0: Port device vlan0 added [ 64.040539][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'. [ 64.114719][ T6318] team0 (unregistering): Port device team_slave_0 removed [ 64.122097][ T6318] team0 (unregistering): Port device team_slave_1 removed [ 64.129691][ T6318] team0 (unregistering): Port device vlan0 removed [ 65.193010][ T6342] netlink: 'syz.0.119': attribute type 10 has an invalid length. [ 66.378343][ T6372] Invalid ELF header len 8 [ 67.726861][ T6402] netlink: 'syz.3.138': attribute type 10 has an invalid length. [ 68.051366][ T6416] vlan0: entered promiscuous mode [ 68.057667][ T6416] team0: Port device vlan0 added [ 68.066607][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 68.115258][ T6416] team0 (unregistering): Port device team_slave_0 removed [ 68.119775][ T6416] team0 (unregistering): Port device team_slave_1 removed [ 68.124578][ T6416] team0 (unregistering): Port device vlan0 removed [ 69.585236][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 69.697140][ T6443] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.751499][ T6443] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.813510][ T6443] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.894288][ T6443] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.993580][ T6443] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.000234][ T6443] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.008010][ T6443] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.016578][ T6443] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.758949][ T6480] vlan0: entered promiscuous mode [ 70.765270][ T6480] team0: Port device vlan0 added [ 70.774845][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 70.815406][ T6482] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 70.849169][ T6480] team0 (unregistering): Port device team_slave_0 removed [ 70.853478][ T6480] team0 (unregistering): Port device team_slave_1 removed [ 70.858053][ T6480] team0 (unregistering): Port device vlan0 removed [ 70.896440][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.899299][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.025466][ T6491] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.099647][ T6491] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.182844][ T6491] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.240410][ T6491] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.323074][ T6491] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.329554][ T6491] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.336430][ T6491] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.342851][ T6491] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.416717][ T6497] syz_tun: entered allmulticast mode [ 71.421540][ T6496] syz_tun: left allmulticast mode [ 71.616338][ T6508] overlayfs: failed to clone upperpath [ 72.419117][ T6513] netlink: 'syz.3.174': attribute type 1 has an invalid length. [ 72.466477][ T6513] veth3: entered promiscuous mode [ 72.478211][ T6513] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 72.574504][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'. [ 72.581310][ T6523] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 72.601203][ T6525] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.609807][ T6523] bond1: option mode: unable to set because the bond device is up [ 72.713703][ T6525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.723656][ T6532] syz_tun: entered allmulticast mode [ 72.728422][ T6531] syz_tun: left allmulticast mode [ 72.804814][ T6525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.889490][ T6525] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.974552][ T6525] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.987415][ T6525] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.997298][ T6525] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.007648][ T6525] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.691132][ T6550] netlink: 'syz.1.186': attribute type 1 has an invalid length. [ 73.754669][ T6550] veth3: entered promiscuous mode [ 73.758871][ T6550] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 74.319790][ T6562] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.405835][ T6562] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.415511][ T6561] kvm: pic: single mode not supported [ 74.415593][ T6561] kvm: pic: level sensitive irq not supported [ 74.418059][ T6561] kvm: pic: single mode not supported [ 74.419886][ T6561] kvm: pic: level sensitive irq not supported [ 74.422338][ T6561] kvm: pic: single mode not supported [ 74.424369][ T6561] kvm: pic: level sensitive irq not supported [ 74.426343][ T6561] kvm: pic: single mode not supported [ 74.428287][ T6561] kvm: pic: level sensitive irq not supported [ 74.430286][ T6561] kvm: pic: single mode not supported [ 74.432226][ T6561] kvm: pic: level sensitive irq not supported [ 74.435134][ T6561] kvm: pic: single mode not supported [ 74.437411][ T6561] kvm: pic: level sensitive irq not supported [ 74.439468][ T6561] kvm: pic: single mode not supported [ 74.442049][ T6561] kvm: pic: level sensitive irq not supported [ 74.446381][ T6561] kvm: pic: single mode not supported [ 74.448996][ T6561] kvm: pic: level sensitive irq not supported [ 74.451619][ T6561] kvm: pic: single mode not supported [ 74.454291][ T6561] kvm: pic: level sensitive irq not supported [ 74.457101][ T6561] kvm: pic: single mode not supported [ 74.459161][ T6561] kvm: pic: level sensitive irq not supported [ 74.467448][ T6562] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.557092][ T6562] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.579050][ T6571] netlink: 'syz.1.195': attribute type 4 has an invalid length. [ 74.649826][ T6562] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.657200][ T6562] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.666055][ T6562] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.672287][ T6562] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.275876][ T6607] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.344758][ T6607] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.429404][ T6607] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.545583][ T6607] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.598791][ T6607] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.604783][ T6607] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.611142][ T6607] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.617508][ T6607] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.678308][ T6621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 76.733102][ T67] Bluetooth: hci1: command 0x0406 tx timeout [ 76.874887][ T6640] capability: warning: `syz.2.214' uses deprecated v2 capabilities in a way that may be insecure [ 77.575654][ T6653] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.586372][ T6655] bridge: RTM_NEWNEIGH with invalid ether address [ 77.657077][ T6653] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.743366][ T6653] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.783558][ T6664] netlink: 'syz.3.227': attribute type 11 has an invalid length. [ 77.786002][ T6664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.227'. [ 77.826783][ T6653] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.906928][ T6653] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.917808][ T6653] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.926752][ T6653] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.934493][ T6653] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.023345][ T6676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.233'. [ 78.049236][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 78.357461][ T6682] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 78.929551][ T6701] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.968660][ T6702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.239'. [ 78.989093][ T6701] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.045483][ T6701] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.165857][ T6701] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.882180][ T40] audit: type=1800 audit(1745932917.610:2): pid=6715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.245" name="bus" dev="overlay" ino=331 res=0 errno=0 [ 79.917753][ T40] audit: type=1804 audit(1745932917.650:3): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.247" name="/newroot/53/file0" dev="tmpfs" ino=339 res=1 errno=0 [ 80.443028][ T57] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 80.613840][ T57] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 80.619060][ T57] usb 7-1: config 0 has no interfaces? [ 80.623722][ T57] usb 7-1: config 0 has no interfaces? [ 80.630083][ T57] usb 7-1: config 0 has no interfaces? [ 80.635394][ T57] usb 7-1: config 0 has no interfaces? [ 80.640992][ T57] usb 7-1: config 0 has no interfaces? [ 80.644546][ T57] usb 7-1: config 0 has no interfaces? [ 80.649646][ T57] usb 7-1: config 0 has no interfaces? [ 80.652382][ T57] usb 7-1: config 0 has no interfaces? [ 80.656085][ T57] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 80.658983][ T57] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 80.661614][ T57] usb 7-1: Product: syz [ 80.663053][ T57] usb 7-1: Manufacturer: syz [ 80.664622][ T57] usb 7-1: SerialNumber: syz [ 80.668462][ T57] usb 7-1: config 0 descriptor?? [ 80.935383][ T63] usb 7-1: USB disconnect, device number 2 [ 80.937443][ T6701] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.946182][ T6701] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.953572][ T6701] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.960404][ T6701] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.135155][ T10] cfg80211: failed to load regulatory.db [ 81.307928][ T6730] Set syz1 is full, maxelem 65536 reached [ 82.106907][ T6781] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.304694][ T6781] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.359074][ T6781] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.512572][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 82.521647][ T6781] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.690411][ T6781] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.698253][ T6781] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.709225][ T6781] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.718790][ T6781] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.812565][ T6804] tipc: Started in network mode [ 82.814655][ T6804] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 82.818156][ T6804] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 82.821106][ T6804] tipc: Enabled bearer , priority 10 [ 83.162494][ T6769] Set syz1 is full, maxelem 65536 reached [ 83.758079][ T6812] Cannot find del_set index 320 as target [ 83.956385][ T63] tipc: Node number set to 1 [ 84.196327][ T6827] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.257459][ T6827] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.320723][ T6827] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.353219][ T6007] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 84.376991][ T6827] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.427487][ T6827] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.434055][ T6827] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.440173][ T6827] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.446380][ T6827] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.506764][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.511451][ T6007] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 84.515134][ T6007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.522080][ T6007] usb 6-1: config 0 descriptor?? [ 84.760394][ T6007] usbhid 6-1:0.0: can't add hid device: -71 [ 84.762703][ T6007] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 84.769482][ T6007] usb 6-1: USB disconnect, device number 6 [ 85.055619][ T40] audit: type=1326 audit(1745932922.790:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.0.287" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 85.194594][ T5964] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 85.343175][ T5964] usb 6-1: Using ep0 maxpacket: 32 [ 85.346128][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.349598][ T5964] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 85.352303][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.360446][ T5964] usb 6-1: config 0 descriptor?? [ 85.363712][ T5964] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 85.369430][ T5964] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 86.086882][ T29] usb 6-1: USB disconnect, device number 7 [ 86.100231][ T29] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 86.428640][ T6861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.294'. [ 86.436644][ T5297] Bluetooth: hci3: Malformed LE Event: 0x0d [ 86.547608][ T6863] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.610672][ T6863] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.656022][ T6863] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.658615][ T6840] Set syz1 is full, maxelem 65536 reached [ 86.745992][ T6863] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.021813][ T6871] serio: Serial port pts0 [ 87.116709][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 88.568973][ T6863] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.578692][ T6863] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.592039][ T6863] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.598461][ T6863] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.684786][ T6941] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.727923][ T6941] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.734118][ T6945] netlink: 'syz.1.322': attribute type 10 has an invalid length. [ 88.736652][ T6945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.322'. [ 88.745051][ T6906] Set syz1 is full, maxelem 65536 reached [ 88.749575][ T6945] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 88.752434][ T6945] team0: Failed to send options change via netlink (err -105) [ 88.755045][ T6945] team0: Port device geneve0 added [ 88.780867][ T6941] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.838304][ T6941] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.969339][ T6941] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.976927][ T6941] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.983836][ T6941] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.991347][ T6941] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.088188][ T6956] loop7: detected capacity change from 0 to 16384 [ 89.313987][ T6956] loop7: detected capacity change from 16384 to 0 [ 89.463699][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'. [ 89.902601][ T7000] syz_tun: entered allmulticast mode [ 89.912852][ T6999] syz_tun: left allmulticast mode [ 89.969084][ T7004] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 89.971481][ T7004] overlayfs: failed to set xattr on upper [ 89.973937][ T7004] overlayfs: ...falling back to redirect_dir=nofollow. [ 89.976629][ T7004] overlayfs: ...falling back to index=off. [ 89.978498][ T7004] overlayfs: ...falling back to uuid=null. [ 89.980417][ T7004] overlayfs: failed to clone lowerpath [ 90.635609][ T7082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.355'. [ 90.957106][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 90.960925][ T7097] netlink: 'syz.3.361': attribute type 5 has an invalid length. [ 90.964496][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.361'. [ 90.974591][ T7097] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 90.978266][ T7097] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 90.981831][ T7097] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 90.985280][ T7097] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 90.988565][ T7097] geneve2: entered promiscuous mode [ 90.990687][ T7097] geneve2: entered allmulticast mode [ 91.308736][ T7102] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.367958][ T7102] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.438443][ T7102] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.496329][ T7102] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.833070][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'. [ 91.929410][ T7120] overlayfs: failed to clone upperpath [ 92.000829][ T7130] overlayfs: failed to clone upperpath [ 92.146497][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 92.258726][ T7150] tipc: Enabling of bearer rejected, failed to enable media [ 92.279021][ T7144] mmap: syz.0.379 (7144) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.312587][ T7154] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 92.711320][ T7102] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.726799][ T7102] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.765338][ T7102] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.771664][ T7102] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.376057][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 93.379872][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 93.383166][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 94.014705][ T7204] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.040507][ T7204] batadv0: entered promiscuous mode [ 94.042660][ T7204] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.047713][ T7204] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 94.483849][ T7219] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 94.539641][ T7223] delete_channel: no stack [ 94.571713][ T7229] futex_wake_op: syz.2.414 tries to shift op by -33; fix this program [ 94.651074][ T7239] ======================================================= [ 94.651074][ T7239] WARNING: The mand mount option has been deprecated and [ 94.651074][ T7239] and is ignored by this kernel. Remove the mand [ 94.651074][ T7239] option from the mount to silence this warning. [ 94.651074][ T7239] ======================================================= [ 94.688056][ T7239] netfs: Couldn't get user pages (rc=-14) [ 94.822724][ T7251] 9pnet_virtio: no channels available for device syz [ 95.098018][ T7269] : entered promiscuous mode [ 95.130461][ T7271] overlayfs: failed to clone upperpath [ 95.976122][ T7290] __nla_validate_parse: 1 callbacks suppressed [ 95.976133][ T7290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.440'. [ 96.227706][ T7300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.443'. [ 96.504958][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 96.507776][ T7314] ip6gretap0: entered promiscuous mode [ 97.402894][ T7336] syzkaller0: entered promiscuous mode [ 97.404934][ T7336] syzkaller0: entered allmulticast mode [ 97.477391][ T7341] overlayfs: failed to clone upperpath [ 97.500197][ T7338] Set syz1 is full, maxelem 65536 reached [ 97.546138][ T7346] netlink: 'syz.0.461': attribute type 1 has an invalid length. [ 97.598236][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 97.705849][ T6031] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 97.759668][ T7350] netlink: 'syz.3.462': attribute type 1 has an invalid length. [ 97.867453][ T6031] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 97.870875][ T6031] usb 7-1: config 0 has no interfaces? [ 97.879785][ T6031] usb 7-1: config 0 has no interfaces? [ 97.882336][ T6031] usb 7-1: config 0 has no interfaces? [ 97.884972][ T6031] usb 7-1: config 0 has no interfaces? [ 97.892274][ T6031] usb 7-1: config 0 has no interfaces? [ 97.895970][ T6031] usb 7-1: config 0 has no interfaces? [ 97.898563][ T6031] usb 7-1: config 0 has no interfaces? [ 97.901045][ T6031] usb 7-1: config 0 has no interfaces? [ 97.904474][ T6031] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 97.907624][ T6031] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 97.910477][ T6031] usb 7-1: Product: syz [ 97.911902][ T6031] usb 7-1: Manufacturer: syz [ 97.913571][ T6031] usb 7-1: SerialNumber: syz [ 97.918106][ T6031] usb 7-1: config 0 descriptor?? [ 98.186758][ T29] usb 7-1: USB disconnect, device number 3 [ 98.316023][ T7346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.321350][ T7347] vlan0: entered promiscuous mode [ 98.323040][ T7347] bond3: entered promiscuous mode [ 98.325392][ T7348] dummy0: entered promiscuous mode [ 98.331631][ T7348] bond3: (slave dummy0): making interface the new active one [ 98.335745][ T7348] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 98.359267][ T7351] bond0: entered promiscuous mode [ 98.361466][ T7351] bond_slave_0: entered promiscuous mode [ 98.365837][ T7351] bond_slave_1: entered promiscuous mode [ 98.369423][ T7351] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 98.373261][ T7351] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 98.451585][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 98.509631][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 98.826536][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 99.263870][ T7380] bridge0: port 3(syz_tun) entered disabled state [ 99.280014][ T7380] syz_tun (unregistering): left allmulticast mode [ 99.282793][ T7380] syz_tun (unregistering): left promiscuous mode [ 99.293023][ T7380] bridge0: port 3(syz_tun) entered disabled state [ 99.353800][ T7385] overlayfs: failed to clone upperpath [ 99.613396][ T7393] Set syz1 is full, maxelem 65536 reached [ 100.327598][ T40] audit: type=1326 audit(1745932938.060:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.494" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 100.355971][ T5297] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 100.359434][ T5297] CPU: 1 UID: 0 PID: 5297 Comm: kworker/u33:1 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 100.359449][ T5297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.359456][ T5297] Workqueue: hci2 hci_rx_work [ 100.359488][ T5297] Call Trace: [ 100.359492][ T5297] [ 100.359496][ T5297] dump_stack_lvl+0x16c/0x1f0 [ 100.359511][ T5297] sysfs_warn_dup+0x7f/0xa0 [ 100.359528][ T5297] sysfs_create_dir_ns+0x24b/0x2b0 [ 100.359544][ T5297] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 100.359558][ T5297] ? find_held_lock+0x2b/0x80 [ 100.359571][ T5297] ? do_raw_spin_unlock+0x172/0x230 [ 100.359586][ T5297] kobject_add_internal+0x2c4/0x9b0 [ 100.359602][ T5297] kobject_add+0x16e/0x240 [ 100.359615][ T5297] ? __pfx_kobject_add+0x10/0x10 [ 100.359629][ T5297] ? do_raw_spin_unlock+0x172/0x230 [ 100.359643][ T5297] ? kobject_put+0xab/0x5a0 [ 100.359659][ T5297] device_add+0x288/0x1a70 [ 100.359678][ T5297] ? __pfx_dev_set_name+0x10/0x10 [ 100.359691][ T5297] ? __pfx_device_add+0x10/0x10 [ 100.359704][ T5297] ? mgmt_send_event_skb+0x2fb/0x460 [ 100.359721][ T5297] hci_conn_add_sysfs+0x17e/0x230 [ 100.359737][ T5297] le_conn_complete_evt+0x1075/0x1d70 [ 100.359755][ T5297] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 100.359768][ T5297] ? hci_event_packet+0x43c/0x1190 [ 100.359786][ T5297] hci_le_conn_complete_evt+0x23c/0x370 [ 100.359802][ T5297] hci_le_meta_evt+0x2f3/0x5e0 [ 100.359816][ T5297] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 100.359831][ T5297] hci_event_packet+0x669/0x1190 [ 100.359849][ T5297] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 100.359865][ T5297] ? __pfx_hci_event_packet+0x10/0x10 [ 100.359886][ T5297] ? kcov_remote_start+0x3c9/0x6d0 [ 100.359900][ T5297] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.359914][ T5297] hci_rx_work+0x2c5/0x16b0 [ 100.359928][ T5297] ? rcu_is_watching+0x12/0xc0 [ 100.359939][ T5297] process_one_work+0x9cc/0x1b70 [ 100.359961][ T5297] ? __pfx_process_one_work+0x10/0x10 [ 100.359980][ T5297] ? assign_work+0x1a0/0x250 [ 100.360011][ T5297] worker_thread+0x6c8/0xf10 [ 100.360033][ T5297] ? __pfx_worker_thread+0x10/0x10 [ 100.360048][ T5297] kthread+0x3c2/0x780 [ 100.360063][ T5297] ? __pfx_kthread+0x10/0x10 [ 100.360075][ T5297] ? __pfx_kthread+0x10/0x10 [ 100.360090][ T5297] ? __pfx_kthread+0x10/0x10 [ 100.360103][ T5297] ? __pfx_kthread+0x10/0x10 [ 100.360115][ T5297] ? rcu_is_watching+0x12/0xc0 [ 100.360124][ T5297] ? __pfx_kthread+0x10/0x10 [ 100.360137][ T5297] ret_from_fork+0x45/0x80 [ 100.360152][ T5297] ? __pfx_kthread+0x10/0x10 [ 100.360165][ T5297] ret_from_fork_asm+0x1a/0x30 [ 100.360186][ T5297] [ 100.360217][ T5297] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 100.452880][ T5297] Bluetooth: hci2: failed to register connection device [ 100.631221][ T7445] pim6reg1: entered promiscuous mode [ 100.634801][ T7445] pim6reg1: entered allmulticast mode [ 101.056689][ T7467] syz.1.504 uses obsolete (PF_INET,SOCK_PACKET) [ 101.245000][ T7489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.511'. [ 101.252976][ T7489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.511'. [ 101.258413][ T7489] geneve3: entered allmulticast mode [ 101.288194][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 101.327315][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 101.350163][ T7497] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 101.352504][ T29] IPVS: starting estimator thread 0... [ 101.354343][ T7497] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 101.473264][ T7501] IPVS: using max 48 ests per chain, 115200 per kthread [ 101.607102][ T1166] IPVS: stop unused estimator thread 0... [ 101.637287][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.522'. [ 101.641192][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.522'. [ 103.090212][ T7573] netlink: 'syz.2.541': attribute type 4 has an invalid length. [ 103.224622][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.546'. [ 103.248055][ T7584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.255616][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 103.261039][ T7584] vlan3: entered promiscuous mode [ 103.262661][ T7584] bond2: entered promiscuous mode [ 103.270856][ T7584] dummy0: entered promiscuous mode [ 103.278530][ T7584] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 103.405660][ T7593] netlink: 56 bytes leftover after parsing attributes in process `syz.2.549'. [ 104.356933][ T7628] vlan2: entered allmulticast mode [ 104.358652][ T7628] bond0: entered allmulticast mode [ 104.360313][ T7628] bond_slave_0: entered allmulticast mode [ 104.362201][ T7628] bond_slave_1: entered allmulticast mode [ 104.365953][ T7628] bridge0: port 2(vlan2) entered blocking state [ 104.368055][ T7628] bridge0: port 2(vlan2) entered disabled state [ 104.371864][ T7628] vlan2: entered promiscuous mode [ 104.381368][ T7628] bridge0: port 2(vlan2) entered blocking state [ 104.384600][ T7628] bridge0: port 2(vlan2) entered forwarding state [ 104.464858][ T7636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.566'. [ 104.554519][ T7641] netlink: 'syz.3.568': attribute type 4 has an invalid length. [ 104.605030][ T7641] netlink: 'syz.3.568': attribute type 4 has an invalid length. [ 104.657499][ T7644] tipc: Started in network mode [ 104.660648][ T7644] tipc: Node identity 7f000001, cluster identity 4711 [ 104.668433][ T7644] tipc: Enabled bearer , priority 10 [ 104.679589][ T7644] tipc: Enabling of bearer rejected, failed to enable media [ 105.338443][ T7670] overlayfs: failed to clone upperpath [ 105.793018][ T10] tipc: Node number set to 2130706433 [ 105.921241][ T7701] Bluetooth: MGMT ver 1.23 [ 105.924770][ T7701] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 106.042510][ T7703] netlink: 'syz.2.591': attribute type 33 has an invalid length. [ 106.053058][ T7703] bond2: (slave dummy0): Releasing backup interface [ 106.197140][ T40] audit: type=1326 audit(2000000000.299:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.2.594" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x0 [ 106.253076][ T5297] Bluetooth: hci2: command 0x0406 tx timeout [ 106.274330][ T7713] __nla_validate_parse: 3 callbacks suppressed [ 106.274341][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 106.279453][ C3] vcan0: j1939_session_tx_dat: 0xffff8880690b6000: queue data error: -100 [ 107.074921][ T7737] netlink: 'syz.0.604': attribute type 1 has an invalid length. [ 107.095563][ T7737] 8021q: adding VLAN 0 to HW filter on device bond4 [ 107.140303][ T7737] bond4: (slave veth7): Enslaving as an active interface with a down link [ 107.420741][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'. [ 107.742988][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 107.893019][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 107.895818][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.898367][ T24] usb 6-1: config 0 has no interface number 0 [ 107.910964][ T24] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 107.914027][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.916631][ T24] usb 6-1: Product: syz [ 107.918215][ T24] usb 6-1: Manufacturer: syz [ 107.919734][ T24] usb 6-1: SerialNumber: syz [ 107.922785][ T24] usb 6-1: config 0 descriptor?? [ 107.929558][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.134329][ T6509] usb 6-1: USB disconnect, device number 8 [ 108.243154][ T29] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 108.392988][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 108.396991][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.401048][ T29] usb 7-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 108.404158][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.408048][ T29] usb 7-1: config 0 descriptor?? [ 108.498669][ T7780] syz_tun: entered allmulticast mode [ 108.506514][ T7780] dvmrp1: entered allmulticast mode [ 108.529842][ T7779] syz_tun: left allmulticast mode [ 108.622247][ T29] usbhid 7-1:0.0: can't add hid device: -71 [ 108.625777][ T29] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 108.629354][ T29] usb 7-1: USB disconnect, device number 4 [ 108.763924][ T7789] infiniband syz!: set active [ 108.765909][ T7789] infiniband syz!: added team_slave_0 [ 108.768591][ T7794] warning: `syz.0.626' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.794713][ T7789] RDS/IB: syz!: added [ 108.796379][ T7789] smc: adding ib device syz! with port count 1 [ 108.798530][ T7789] smc: ib device syz! port 1 has pnetid [ 109.156183][ T7805] uprobe: syz.2.629:7805 failed to unregister, leaking uprobe [ 109.754309][ T7831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.639'. [ 109.880302][ T40] audit: type=1326 audit(2000000003.979:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.3.648" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x0 [ 110.234917][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 110.264492][ T67] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 110.267302][ T67] Bluetooth: hci0: Injecting HCI hardware error event [ 110.270215][ T67] Bluetooth: hci0: hardware error 0x00 [ 110.395832][ T7858] bridge_slave_0: left allmulticast mode [ 110.397702][ T7858] bridge_slave_0: left promiscuous mode [ 110.399602][ T7858] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.406495][ T7858] bridge_slave_1: left allmulticast mode [ 110.408305][ T7858] bridge_slave_1: left promiscuous mode [ 110.410250][ T7858] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.416266][ T7858] bond0: (slave bond_slave_0): Releasing backup interface [ 110.421184][ T7858] bond0: (slave bond_slave_1): Releasing backup interface [ 110.425973][ T7858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.428361][ T7858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.435556][ T7858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.440171][ T7858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.516297][ T7863] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 110.518594][ T7863] overlayfs: failed to set xattr on upper [ 110.520459][ T7863] overlayfs: ...falling back to redirect_dir=nofollow. [ 110.522678][ T7863] overlayfs: ...falling back to index=off. [ 110.525088][ T7863] overlayfs: ...falling back to uuid=null. [ 110.532740][ T7865] netlink: 'syz.2.651': attribute type 7 has an invalid length. [ 110.535245][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.651'. [ 110.557519][ T7867] netlink: 'syz.1.652': attribute type 1 has an invalid length. [ 110.570387][ T7867] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.590806][ T7867] ip6erspan0: entered promiscuous mode [ 110.594459][ T7867] bond2: (slave ip6erspan0): making interface the new active one [ 110.598490][ T7867] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 110.622245][ T7872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.654'. [ 110.686115][ T7878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.657'. [ 110.712620][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 110.815644][ T7888] syz_tun: entered promiscuous mode [ 110.817671][ T7888] vlan3: entered promiscuous mode [ 110.930730][ T7898] tipc: Failed to remove unknown binding: 66,1,1/0:2120772607/2120772609 [ 110.934773][ T7898] tipc: Failed to remove unknown binding: 66,1,1/0:2120772607/2120772609 [ 110.937527][ T7898] tipc: Failed to remove unknown binding: 66,1,1/0:2120772607/2120772609 [ 111.035600][ T40] audit: type=1326 audit(2000000005.139:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.2.666" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x0 [ 111.067063][ T7907] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 111.097158][ T7907] tipc: Started in network mode [ 111.099171][ T7907] tipc: Node identity 7f000001, cluster identity 4711 [ 111.102043][ T7907] tipc: Enabled bearer , priority 10 [ 111.381509][ T7919] netlink: 'syz.1.673': attribute type 4 has an invalid length. [ 111.431636][ T40] audit: type=1326 audit(2000000005.529:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.1.674" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x0 [ 112.223216][ T5998] tipc: Node number set to 2130706433 [ 112.334109][ T67] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 112.350659][ T7942] netlink: 'syz.2.682': attribute type 4 has an invalid length. [ 113.235271][ T40] audit: type=1326 audit(2000000007.339:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.1.684" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x0 [ 113.551160][ T7973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.691'. [ 113.815354][ T7978] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 114.122801][ T7990] syz_tun: entered allmulticast mode [ 114.132588][ T7990] dvmrp1: entered allmulticast mode [ 114.159406][ T7989] syz_tun: left allmulticast mode [ 114.814337][ T40] audit: type=1326 audit(2000000008.919:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.1.714" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x0 [ 114.818783][ T8035] overlayfs: failed to clone upperpath [ 114.826823][ T8032] Cannot find del_set index 320 as target [ 115.619998][ T8062] Cannot find del_set index 320 as target [ 115.783866][ T40] audit: type=1326 audit(2000000009.889:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8065 comm="syz.2.739" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x0 [ 116.222972][ T5998] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 116.383024][ T5998] usb 6-1: Using ep0 maxpacket: 16 [ 116.387035][ T5998] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.390078][ T5998] usb 6-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 116.392889][ T5998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.396628][ T5998] usb 6-1: config 0 descriptor?? [ 116.597991][ T8086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.735'. [ 116.621931][ T5998] usbhid 6-1:0.0: can't add hid device: -71 [ 116.627708][ T5998] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 116.641795][ T5998] usb 6-1: USB disconnect, device number 9 [ 116.857567][ T8092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.747'. [ 117.041735][ T8111] overlayfs: failed to clone upperpath [ 117.073851][ T67] Bluetooth: hci2: unexpected event for opcode 0x0c24 [ 118.057046][ T8138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.757'. [ 118.084501][ T8144] overlayfs: failed to clone upperpath [ 118.136222][ T8150] uprobe: syz.0.761:8150 failed to unregister, leaking uprobe [ 118.419594][ T8173] batman_adv: batadv0: Interface deactivated: dummy0 [ 118.421814][ T8173] batman_adv: batadv0: Removing interface: dummy0 [ 118.425806][ T8173] bridge_slave_0: left allmulticast mode [ 118.427549][ T8173] bridge_slave_0: left promiscuous mode [ 118.429328][ T8173] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.435058][ T8173] vlan2: left promiscuous mode [ 118.492075][ T8173] bond0: (slave bond_slave_0): Releasing backup interface [ 118.498930][ T8173] bond_slave_0: left allmulticast mode [ 118.502580][ T8173] bond_slave_0: left promiscuous mode [ 118.543575][ T8173] bond0: (slave bond_slave_1): Releasing backup interface [ 118.614705][ T8173] bond_slave_1: left allmulticast mode [ 118.617617][ T8173] bond_slave_1: left promiscuous mode [ 118.643935][ T8173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.653083][ T8173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.662679][ T8173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.665124][ T8173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.671373][ T8173] bond2: (slave veth3): Releasing backup interface [ 118.676956][ T8173] bond3: (slave macvlan2): Releasing backup interface [ 118.679780][ T8173] bond0: left promiscuous mode [ 118.684532][ T8173] bridge0: port 2(vlan2) entered disabled state [ 118.694390][ T8178] 8021q: VLANs not supported on ip6gre0 [ 118.766037][ T8183] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 118.768229][ T8183] overlayfs: failed to set xattr on upper [ 118.770018][ T8183] overlayfs: ...falling back to redirect_dir=nofollow. [ 118.772138][ T8183] overlayfs: ...falling back to index=off. [ 118.774119][ T8183] overlayfs: ...falling back to uuid=null. [ 118.775979][ T8183] overlayfs: failed to clone lowerpath [ 118.820295][ T40] audit: type=1326 audit(2000000012.919:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8182 comm="syz.0.772" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 118.834147][ T8187] overlayfs: failed to clone upperpath [ 118.904127][ T67] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 118.906950][ T67] Bluetooth: hci3: Injecting HCI hardware error event [ 118.909816][ T67] Bluetooth: hci3: hardware error 0x00 [ 119.352651][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 119.453040][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 119.615277][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.624403][ T29] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.629286][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.633983][ T29] usb 7-1: config 0 descriptor?? [ 119.845524][ T29] usbhid 7-1:0.0: can't add hid device: -71 [ 119.850575][ T29] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 119.863558][ T29] usb 7-1: USB disconnect, device number 5 [ 120.283007][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 120.433181][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 120.436121][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.439487][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 120.442291][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.446529][ T10] usb 7-1: config 0 descriptor?? [ 120.450425][ T10] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 120.455157][ T10] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 120.788158][ T40] audit: type=1326 audit(2000000014.889:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.3.784" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7fc00000 [ 120.792541][ T8215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.791'. [ 120.797752][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.791'. [ 120.893044][ T40] audit: type=1326 audit(2000000014.989:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.3.784" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70fe579 code=0x7fc00000 [ 120.899989][ T40] audit: type=1326 audit(2000000014.989:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.3.784" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70fe5a7 code=0x7fc00000 [ 120.910862][ T40] audit: type=1326 audit(2000000014.989:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.3.784" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf70fe579 code=0x7fc00000 [ 120.973038][ T67] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 121.029167][ T8229] trusted_key: syz.1.789 sent an empty control message without MSG_MORE. [ 121.133037][ T67] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 121.135903][ T67] Bluetooth: hci2: Injecting HCI hardware error event [ 121.138830][ T67] Bluetooth: hci2: hardware error 0x00 [ 121.159155][ T10] usb 7-1: USB disconnect, device number 6 [ 121.167251][ T10] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 121.688971][ T8235] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 121.692062][ T8235] overlayfs: failed to set xattr on upper [ 121.695834][ T8235] overlayfs: ...falling back to redirect_dir=nofollow. [ 121.697999][ T8235] overlayfs: ...falling back to index=off. [ 121.699909][ T8235] overlayfs: ...falling back to uuid=null. [ 122.187461][ T8273] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 123.235279][ T67] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 123.875594][ T8308] overlayfs: failed to clone upperpath [ 123.912188][ T8303] netlink: 'syz.0.816': attribute type 12 has an invalid length. [ 124.127661][ T8322] bridge_slave_0: left allmulticast mode [ 124.129497][ T8322] bridge_slave_0: left promiscuous mode [ 124.131682][ T8322] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.136517][ T8322] bridge_slave_1: left allmulticast mode [ 124.138308][ T8322] bridge_slave_1: left promiscuous mode [ 124.140413][ T8322] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.147642][ T8322] bond0: (slave bond_slave_0): Releasing backup interface [ 124.152155][ T8322] bond0: (slave bond_slave_1): Releasing backup interface [ 124.166643][ T8322] team0: Port device team_slave_0 removed [ 124.173597][ T8322] team0: Port device team_slave_1 removed [ 124.176017][ T8322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.178321][ T8322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.184588][ T8322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.186888][ T8322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.197716][ T8322] team0: Port device geneve0 removed [ 124.201042][ T8322] bond1: (slave veth3): Releasing backup interface [ 124.205918][ T8322] bond0: (slave macvlan2): Releasing backup interface [ 124.234012][ T8322] batadv0: left promiscuous mode [ 124.240076][ T8322] bond2: (slave ip6erspan0): Releasing active interface [ 124.254045][ T10] syz!: Port: 1 Link DOWN [ 124.316592][ T8325] syz.1.823 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 126.563354][ T8379] bond3: (slave dummy0): Releasing active interface [ 126.569602][ T8379] bridge_slave_0: left allmulticast mode [ 126.571407][ T8379] bridge_slave_0: left promiscuous mode [ 126.573602][ T8379] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.579035][ T8379] bond0: (slave bond_slave_0): Releasing backup interface [ 126.586293][ T8379] bond0: (slave bond_slave_1): Releasing backup interface [ 126.592275][ T8379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.595744][ T8379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.599092][ T8379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.602176][ T8379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.613330][ T8379] bond4: (slave veth7): Releasing active interface [ 128.114233][ T8405] syz_tun: entered allmulticast mode [ 128.118202][ T8404] syz_tun: left allmulticast mode [ 129.015663][ T8441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.874'. [ 129.021759][ T8441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.874'. [ 129.873307][ T5998] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 130.054407][ T5998] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 130.057091][ T5998] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.067403][ T5998] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 130.072285][ T5998] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 130.075285][ T5998] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.077793][ T5998] usb 6-1: Product: syz [ 130.079108][ T5998] usb 6-1: Manufacturer: syz [ 132.335927][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.338002][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.623164][ T834] usb 6-1: USB disconnect, device number 10 [ 132.832172][ T8491] 9p: Unknown uid 00000000004294967295 [ 132.945871][ T8505] netlink: 'syz.3.891': attribute type 1 has an invalid length. [ 132.967666][ T8505] 8021q: adding VLAN 0 to HW filter on device bond5 [ 132.991524][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'. [ 133.000121][ T8505] vlan3: entered promiscuous mode [ 133.002398][ T8505] bond5: entered promiscuous mode [ 133.010583][ T8505] dummy0: entered promiscuous mode [ 133.017681][ T8505] bond5: (slave dummy0): making interface the new active one [ 133.022179][ T8505] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 133.118309][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.893'. [ 133.129098][ T8512] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.131990][ T8512] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.134599][ T8512] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.137121][ T8512] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.141032][ T8512] vxlan0: entered promiscuous mode [ 133.959361][ T8527] overlayfs: failed to clone upperpath [ 133.961572][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'. [ 134.887934][ T8543] syz_tun: entered allmulticast mode [ 134.942135][ T8543] dvmrp1: entered allmulticast mode [ 134.977208][ T8542] syz_tun: left allmulticast mode [ 135.105920][ T8555] tipc: Enabling of bearer rejected, failed to enable media [ 135.241694][ T8559] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 138.395107][ T8626] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 138.397504][ T8626] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 139.178298][ T8657] futex_wake_op: syz.0.955 tries to shift op by -33; fix this program [ 139.215235][ T8660] : entered promiscuous mode [ 139.764010][ T8685] delete_channel: no stack [ 139.801542][ T8688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.961'. [ 139.816004][ T8689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.958'. [ 139.819489][ T8689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.958'. [ 139.886617][ T29] IPVS: starting estimator thread 0... [ 139.905565][ T8689] geneve2: entered allmulticast mode [ 139.993026][ T8694] IPVS: using max 48 ests per chain, 115200 per kthread [ 140.063999][ T8696] futex_wake_op: syz.3.962 tries to shift op by -33; fix this program [ 140.585866][ T8712] netfs: Couldn't get user pages (rc=-14) [ 141.064278][ T8722] overlayfs: failed to clone upperpath [ 141.205982][ T8725] block nbd2: NBD_DISCONNECT [ 141.208172][ T8725] block nbd2: Disconnected due to user request. [ 141.211262][ T8725] block nbd2: shutting down sockets [ 141.531634][ T8736] futex_wake_op: syz.1.973 tries to shift op by -33; fix this program [ 141.644106][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 141.654917][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 141.760158][ T8756] Cache volume key already in use (9p,syz,) [ 141.776141][ T8756] netfs: Couldn't get user pages (rc=-14) [ 141.922510][ T8762] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.995630][ T8762] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.057693][ T8762] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.108491][ T8762] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.188105][ T8762] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.194421][ T8762] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.201843][ T8762] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.208656][ T8762] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.865265][ T8783] bond5: (slave dummy0): Releasing active interface [ 142.872784][ T8783] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 143.111195][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 143.167554][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 143.178910][ T8795] veth1_macvtap: left promiscuous mode [ 143.181034][ T8795] macsec0: entered promiscuous mode [ 143.703035][ T5998] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 143.767306][ T8807] overlayfs: failed to clone upperpath [ 143.859012][ T5998] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 143.862654][ T5998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.874562][ T5998] usb 7-1: Product: syz [ 143.876364][ T5998] usb 7-1: Manufacturer: syz [ 143.878341][ T5998] usb 7-1: SerialNumber: syz [ 143.891480][ T5998] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 143.925841][ T5964] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 144.353510][ T40] audit: type=1800 audit(2000000038.449:18): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1008" name="nullb0" dev="tmpfs" ino=1073 res=0 errno=0 [ 144.940744][ T6509] usb 7-1: USB disconnect, device number 7 [ 144.981033][ T5964] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 144.987347][ T5964] ath9k_htc: Failed to initialize the device [ 144.991264][ T6509] usb 7-1: ath9k_htc: USB layer deinitialized [ 145.682709][ T8838] capability: warning: `syz.3.1014' uses 32-bit capabilities (legacy support in use) [ 145.886467][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 145.953263][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 145.969107][ T8844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1016'. [ 145.972466][ T8844] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1016'. [ 145.988213][ T8844] geneve2: entered allmulticast mode [ 146.021570][ T57] IPVS: starting estimator thread 0... [ 146.113065][ T8845] IPVS: using max 48 ests per chain, 115200 per kthread [ 146.747679][ T40] audit: type=1326 audit(2000000040.849:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.1.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 146.755077][ T40] audit: type=1326 audit(2000000040.849:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.1.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 146.761713][ T40] audit: type=1326 audit(2000000040.849:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.1.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 146.768940][ T40] audit: type=1326 audit(2000000040.849:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.1.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 146.775602][ T40] audit: type=1326 audit(2000000040.849:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.1.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 146.782236][ T40] audit: type=1326 audit(2000000040.849:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.1.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 146.789350][ T40] audit: type=1326 audit(2000000040.849:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.1.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 146.796241][ T40] audit: type=1326 audit(2000000040.849:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.1.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 146.802849][ T40] audit: type=1326 audit(2000000040.849:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.1.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 147.451712][ T8885] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1031'. [ 147.662120][ T8895] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.665317][ T8895] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.669436][ T8895] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 147.743855][ T8895] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.746954][ T8895] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.750229][ T8895] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 147.800652][ T8900] vlan4: entered allmulticast mode [ 147.802463][ T8900] bond0: entered allmulticast mode [ 147.804557][ T8900] bridge0: port 1(vlan4) entered blocking state [ 147.806597][ T8900] bridge0: port 1(vlan4) entered disabled state [ 147.818912][ T8895] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.822141][ T8895] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.828663][ T8895] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 147.911519][ T8895] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.915902][ T8895] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.919935][ T8895] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 147.959097][ T8910] overlayfs: failed to clone upperpath [ 148.002815][ T8895] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.007358][ T8895] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 148.010022][ T8895] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 148.017700][ T8895] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.020286][ T8895] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 148.022843][ T8895] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 148.030282][ T8895] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.033643][ T8895] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 148.036855][ T8895] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 148.044071][ T8895] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.047364][ T8895] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 148.050612][ T8895] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 149.349251][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 149.349718][ T8940] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 149.349732][ T8940] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 151.803905][ T8993] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.860257][ T8993] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.925566][ T8993] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.996869][ T8993] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.067041][ T8993] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.073451][ T8993] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.079543][ T8993] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.087699][ T8993] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.232568][ T9010] netlink: 'syz.3.1077': attribute type 1 has an invalid length. [ 152.246596][ T9010] 8021q: adding VLAN 0 to HW filter on device bond6 [ 152.284896][ T9010] bond6: (slave veth11): Enslaving as an active interface with a down link [ 152.378958][ T9018] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 152.383545][ T9018] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 152.386746][ T9018] gretap1: entered promiscuous mode [ 152.387171][ T9020] netlink: 'syz.1.1080': attribute type 1 has an invalid length. [ 152.388862][ T9018] gretap1: entered allmulticast mode [ 152.405725][ T9020] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.433183][ T9020] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.435547][ T9020] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 152.439617][ T9020] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 152.526006][ T9025] tipc: Enabling of bearer rejected, failed to enable media [ 152.531386][ T9025] tipc: Enabled bearer , priority 0 [ 152.570498][ T9028] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.646437][ T9028] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.726369][ T9028] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.786081][ T9028] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.857899][ T9028] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.866464][ T9028] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.874922][ T9028] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.881372][ T9028] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.333255][ T9075] af_packet: tpacket_rcv: packet too big, clamped from 717 to 4294967272. macoff=96 [ 154.490320][ T9085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1103'. [ 154.514418][ T9086] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.1109'. [ 154.517852][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'. [ 155.538362][ T9090] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 155.556216][ T9090] bond7: entered promiscuous mode [ 155.558397][ T9090] bond7: entered allmulticast mode [ 155.569292][ T9090] bond7: (slave erspan1): making interface the new active one [ 155.571758][ T9090] erspan1: entered promiscuous mode [ 155.575346][ T9090] erspan1: entered allmulticast mode [ 155.577528][ T9090] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 155.582803][ T9090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1105'. [ 155.594546][ T9090] bond7: left promiscuous mode [ 155.596162][ T9090] erspan1: left promiscuous mode [ 155.597800][ T9090] bond7: left allmulticast mode [ 155.599336][ T9090] erspan1: left allmulticast mode [ 155.601607][ T9090] 8021q: adding VLAN 0 to HW filter on device bond7 [ 155.791563][ T9112] overlayfs: failed to clone upperpath [ 156.226246][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 156.226262][ T40] audit: type=1326 audit(2000000050.329:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.1.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7fc00000 [ 156.617799][ T40] audit: type=1326 audit(2000000050.719:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.2.1121" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 156.634565][ T40] audit: type=1326 audit(2000000050.719:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.2.1121" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 156.641322][ T40] audit: type=1326 audit(2000000050.729:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.2.1121" exe="/syz-executor" sig=0 arch=40000003 syscall=46 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 156.651543][ T40] audit: type=1326 audit(2000000050.729:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.2.1121" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 156.659751][ T40] audit: type=1326 audit(2000000050.729:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9130 comm="syz.2.1121" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 156.663658][ T9138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1123'. [ 156.679500][ T9138] bond5: entered promiscuous mode [ 156.681799][ T9138] 8021q: adding VLAN 0 to HW filter on device bond5 [ 156.791676][ T9147] netlink: 'syz.0.1125': attribute type 1 has an invalid length. [ 156.802741][ T9147] bond6: entered promiscuous mode [ 156.804822][ T9147] bond6: entered allmulticast mode [ 156.825115][ T9147] bond7: entered allmulticast mode [ 156.827779][ T9147] 8021q: adding VLAN 0 to HW filter on device bond7 [ 156.830960][ T9147] bond6: (slave bond7): Enslaving as an active interface with a down link [ 156.849151][ T9147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1125'. [ 156.853663][ T9147] bond6: left promiscuous mode [ 156.855201][ T9147] bond6: left allmulticast mode [ 156.856916][ T9147] 8021q: adding VLAN 0 to HW filter on device bond6 [ 156.884182][ T9151] batadv_slave_1: entered promiscuous mode [ 156.954104][ T40] audit: type=1326 audit(2000000051.049:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.1.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f81579 code=0x7fc00000 [ 156.965271][ T40] audit: type=1326 audit(2000000051.049:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.1.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7fc00000 [ 156.980405][ T40] audit: type=1326 audit(2000000051.049:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.1.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7fc00000 [ 156.989159][ T40] audit: type=1326 audit(2000000051.049:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.1.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7fc00000 [ 157.029762][ T9165] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 157.032638][ T9165] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 157.118842][ T9156] batadv_slave_1: left promiscuous mode [ 157.200066][ T9169] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1132'. [ 158.708966][ T9197] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.730824][ T9197] evm: overlay not supported [ 158.789899][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 158.794084][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 158.797425][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 159.712048][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.716780][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.074987][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1150'. [ 160.078583][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1150'. [ 160.082375][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1150'. [ 160.420225][ T9234] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1156'. [ 163.363393][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1165'. [ 163.377265][ T9241] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.458134][ T9241] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.513306][ T9241] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.566224][ T9241] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.672035][ T9241] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.736471][ T9241] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.780323][ T9241] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.833270][ T9241] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.073242][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 164.073257][ T40] audit: type=1326 audit(2000000058.169:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.0.1161" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 164.242986][ T57] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 164.392967][ T57] usb 7-1: Using ep0 maxpacket: 32 [ 164.395840][ T57] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 164.398682][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.402779][ T57] usb 7-1: config 0 descriptor?? [ 164.407135][ T57] as10x_usb: device has been detected [ 164.409284][ T57] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 164.418822][ T57] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 164.434362][ T57] as10x_usb: error during firmware upload part1 [ 164.436690][ T57] Registered device nBox DVB-T Dongle [ 164.607589][ T57] usb 7-1: USB disconnect, device number 8 [ 164.624465][ T57] Unregistered device nBox DVB-T Dongle [ 164.625133][ T57] as10x_usb: device has been disconnected [ 164.960591][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1167'. [ 165.073108][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 165.243016][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 165.245957][ T24] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 165.248837][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.255275][ T24] usb 7-1: config 0 descriptor?? [ 165.263433][ T24] as10x_usb: device has been detected [ 165.265415][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 165.282891][ T24] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 165.295107][ T24] as10x_usb: error during firmware upload part1 [ 165.297409][ T24] Registered device nBox DVB-T Dongle [ 165.460787][ T24] usb 7-1: USB disconnect, device number 9 [ 165.482692][ T24] Unregistered device nBox DVB-T Dongle [ 165.494123][ T24] as10x_usb: device has been disconnected [ 165.854860][ T9285] netlink: 'syz.0.1170': attribute type 13 has an invalid length. [ 165.974525][ T9285] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.977210][ T9285] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.979869][ T9285] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.982528][ T9285] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.763784][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 166.767077][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 166.769888][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 168.448266][ T9338] overlayfs: failed to clone upperpath [ 168.586557][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 168.691628][ T9350] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3781544950 (3781544950 ns) > initial count (699260337 ns). Using initial count to start timer. [ 168.817653][ T9357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1195'. [ 170.059349][ T9391] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 170.253011][ T5297] Bluetooth: hci1: command 0x0406 tx timeout [ 170.711597][ T9407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1210'. [ 170.728406][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1210'. [ 170.731070][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1210'. [ 170.874420][ T9417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1214'. [ 170.877504][ T9417] netlink: 'syz.1.1214': attribute type 7 has an invalid length. [ 170.879938][ T9417] netlink: 'syz.1.1214': attribute type 8 has an invalid length. [ 170.884955][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 170.890333][ T9417] bond0: entered promiscuous mode [ 170.892833][ T9417] ip6gretap0: entered promiscuous mode [ 170.896935][ T9417] gretap0: entered promiscuous mode [ 170.898998][ T9417] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 171.031091][ T9429] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 171.033612][ T9429] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 171.204880][ T9441] bridge_slave_0: entered promiscuous mode [ 171.207404][ T9441] bridge_slave_0: left promiscuous mode [ 171.516212][ T40] audit: type=1326 audit(2000000065.619:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9456 comm="syz.3.1228" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x0 [ 172.443694][ T40] audit: type=1326 audit(2000000066.549:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.2.1238" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x0 [ 173.201541][ T9504] bridge4: entered allmulticast mode [ 173.474880][ T9511] __nla_validate_parse: 1 callbacks suppressed [ 173.474891][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1247'. [ 173.483617][ T9517] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 173.788839][ T9539] tipc: Failed to remove unknown binding: 66,1,1/2130706433:1847747724/1847747726 [ 173.817366][ T9539] tipc: Failed to remove unknown binding: 66,1,1/2130706433:1847747724/1847747726 [ 173.822873][ T9539] tipc: Failed to remove unknown binding: 66,1,1/2130706433:1847747724/1847747726 [ 173.948521][ T9548] bridge2: entered allmulticast mode [ 173.986667][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1259'. [ 174.521018][ T40] audit: type=1326 audit(2000000068.619:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9555 comm="syz.0.1272" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 174.773231][ T6509] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 174.923009][ T6509] usb 7-1: Using ep0 maxpacket: 8 [ 174.926840][ T6509] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.930059][ T6509] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 174.932743][ T6509] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.937537][ T6509] usb 7-1: config 0 descriptor?? [ 175.148926][ T9560] process 'syz.2.1265' launched '/dev/fd/5' with NULL argv: empty string added [ 175.266774][ T6509] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 175.271129][ T6509] usb 7-1: USB disconnect, device number 10 [ 175.559677][ T9577] bridge5: entered allmulticast mode [ 175.613172][ T63] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 175.764389][ T63] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 175.767877][ T63] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 175.770787][ T63] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 175.773613][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.779605][ T9575] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 175.783815][ T63] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 175.989974][ T10] usb 6-1: USB disconnect, device number 11 [ 176.767969][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1274'. [ 176.943440][ T9598] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 178.738778][ T9621] ceph: No mds server is up or the cluster is laggy [ 178.821056][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'. [ 178.826987][ T40] audit: type=1326 audit(2000000072.929:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.2.1292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 178.853224][ T40] audit: type=1326 audit(2000000072.929:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.2.1292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 178.877157][ T40] audit: type=1326 audit(2000000072.929:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.2.1292" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 178.888054][ T40] audit: type=1326 audit(2000000072.929:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.2.1292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 178.895569][ T9646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1291'. [ 178.899784][ T40] audit: type=1326 audit(2000000072.929:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.2.1292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 178.900937][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 178.906553][ T40] audit: type=1326 audit(2000000072.929:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.2.1292" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 178.915913][ T40] audit: type=1326 audit(2000000072.929:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.2.1292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 178.922559][ T40] audit: type=1326 audit(2000000072.929:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.2.1292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 178.930367][ T9648] cgroup: Unknown subsys name 'noxattr' [ 178.932195][ T40] audit: type=1326 audit(2000000072.929:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.2.1292" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f78579 code=0x7ffc0000 [ 178.938891][ T40] audit: type=1326 audit(2000000072.929:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.2.1292" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f78598 code=0x7ffc0000 [ 179.001641][ T9649] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.1294'. [ 179.004715][ T9649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1294'. [ 179.012670][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1295'. [ 180.060372][ T9682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1305'. [ 180.064309][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1305'. [ 180.668339][ T9699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.674144][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1312'. [ 180.677602][ T9699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.683487][ T9699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.687274][ T9699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.348319][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 181.493039][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 181.496124][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.501575][ T24] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 181.504634][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.507616][ T24] usb 6-1: Product: syz [ 181.508954][ T24] usb 6-1: Manufacturer: syz [ 181.510424][ T24] usb 6-1: SerialNumber: syz [ 181.513739][ T24] usb 6-1: config 0 descriptor?? [ 181.763560][ T9706] netlink: 'syz.1.1321': attribute type 12 has an invalid length. [ 181.769401][ T24] usb 6-1: Cannot retrieve CPort count: -71 [ 181.771344][ T24] usb 6-1: Cannot retrieve CPort count: -71 [ 181.778255][ T24] es2_ap_driver 6-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 181.785229][ T24] usb 6-1: USB disconnect, device number 12 [ 182.337671][ T9727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1327'. [ 182.921697][ T57] libceph: connect (1)[c::]:6789 error -101 [ 182.924752][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 183.062120][ T9745] ceph: No mds server is up or the cluster is laggy [ 183.284397][ T9758] netlink: 'syz.3.1328': attribute type 12 has an invalid length. [ 184.024689][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 184.183131][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 184.186484][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 184.202636][ T24] usb 7-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 32 [ 184.212987][ T24] usb 7-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023 [ 184.216368][ T24] usb 7-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.220394][ T24] usb 7-1: config 1 interface 0 has no altsetting 0 [ 184.225015][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.227846][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.230319][ T24] usb 7-1: Product: syz [ 184.231706][ T24] usb 7-1: Manufacturer: syz [ 184.233894][ T24] usb 7-1: SerialNumber: syz [ 184.237310][ T9776] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.240235][ T9776] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.405142][ T40] kauditd_printk_skb: 763 callbacks suppressed [ 184.405157][ T40] audit: type=1326 audit(2000000078.509:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.0.1339" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 184.474754][ T24] usb 7-1: bad CDC descriptors [ 184.489697][ T24] usb 7-1: USB disconnect, device number 11 [ 185.885617][ T57] libceph: connect (1)[c::]:6789 error -101 [ 185.887896][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 186.035749][ T9811] ceph: No mds server is up or the cluster is laggy [ 187.223203][ T57] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 187.373498][ T57] usb 7-1: Using ep0 maxpacket: 16 [ 187.376504][ T57] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.381312][ T57] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 187.384328][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.386837][ T57] usb 7-1: Product: syz [ 187.388173][ T57] usb 7-1: Manufacturer: syz [ 187.389604][ T57] usb 7-1: SerialNumber: syz [ 187.392798][ T57] usb 7-1: config 0 descriptor?? [ 187.633341][ T9829] netlink: 'syz.2.1345': attribute type 12 has an invalid length. [ 187.640119][ T57] usb 7-1: Cannot retrieve CPort count: -71 [ 187.642030][ T57] usb 7-1: Cannot retrieve CPort count: -71 [ 187.644081][ T57] es2_ap_driver 7-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 187.648093][ T57] usb 7-1: USB disconnect, device number 12 [ 188.423072][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 188.573032][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 188.577047][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 188.580242][ T10] usb 6-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 32 [ 188.583673][ T10] usb 6-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023 [ 188.586767][ T10] usb 6-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.590746][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 188.594813][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.597693][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.600224][ T10] usb 6-1: Product: syz [ 188.601606][ T10] usb 6-1: Manufacturer: syz [ 188.603227][ T10] usb 6-1: SerialNumber: syz [ 188.608251][ T9843] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.611174][ T9843] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.832812][ T10] usb 6-1: bad CDC descriptors [ 188.838585][ T10] usb 6-1: USB disconnect, device number 13 [ 190.400319][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.402811][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.413569][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.415906][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.418192][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.420578][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.422868][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.426777][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.429237][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.431615][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.434007][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.436294][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.438572][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.440847][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.444487][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.446776][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.449059][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.451350][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.454079][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.456550][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.458721][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.460965][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.463624][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.465848][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.468173][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.470450][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.472735][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.475143][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.477521][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.479881][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.482177][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.484692][ T10] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 190.493236][ T10] hid-generic 0001:0000:0000.0002: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 190.663019][ T5998] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 190.814071][ T29] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 190.826409][ T5998] usb 6-1: config 0 has no interfaces? [ 190.828188][ T5998] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 190.830972][ T5998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.834868][ T5998] usb 6-1: config 0 descriptor?? [ 190.963068][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 190.967079][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 190.972603][ T29] usb 7-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 32 [ 190.977363][ T29] usb 7-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023 [ 190.981681][ T29] usb 7-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.987182][ T29] usb 7-1: config 1 interface 0 has no altsetting 0 [ 190.992099][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.996185][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.999516][ T29] usb 7-1: Product: syz [ 191.000979][ T29] usb 7-1: Manufacturer: syz [ 191.002450][ T29] usb 7-1: SerialNumber: syz [ 191.006008][ T9906] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 191.008357][ T9906] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 191.108977][ T9912] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1380'. [ 191.115562][ T9912] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1380'. [ 191.245571][ T29] usb 7-1: bad CDC descriptors [ 191.249327][ T29] usb 7-1: USB disconnect, device number 13 [ 191.279890][ T5998] usb 6-1: USB disconnect, device number 14 [ 192.218708][ T9936] 9p: Unknown uid 00000000004294967295 [ 192.423020][ T5998] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 192.573001][ T5998] usb 7-1: Using ep0 maxpacket: 8 [ 192.576667][ T5998] usb 7-1: unable to get BOS descriptor or descriptor too short [ 192.581542][ T5998] usb 7-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 32 [ 192.584815][ T5998] usb 7-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023 [ 192.588048][ T5998] usb 7-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.592094][ T5998] usb 7-1: config 1 interface 0 has no altsetting 0 [ 192.596854][ T5998] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.600051][ T5998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.602846][ T5998] usb 7-1: Product: syz [ 192.604677][ T5998] usb 7-1: Manufacturer: syz [ 192.606206][ T5998] usb 7-1: SerialNumber: syz [ 192.609751][ T9938] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 192.612119][ T9938] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 192.830495][ T5998] usb 7-1: bad CDC descriptors [ 192.839662][ T5998] usb 7-1: USB disconnect, device number 14 [ 193.750720][ T9975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1404'. [ 193.776046][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.778073][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.548729][ T9989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.556010][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 194.560352][ T9989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.568486][ T9989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.573561][ T9989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.838777][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1413'. [ 196.444349][T10029] tipc: Enabled bearer , priority 0 [ 196.447200][T10029] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 196.449605][T10029] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 196.673007][ T63] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 196.835519][ T63] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 196.838370][ T63] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.852963][ T63] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 196.857203][ T63] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 196.859965][ T63] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 196.862447][ T63] usb 7-1: Product: syz [ 196.864834][ T63] usb 7-1: Manufacturer: syz [ 198.093637][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1431'. [ 198.322797][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1443'. [ 199.451543][ T5998] usb 7-1: USB disconnect, device number 15 [ 202.976385][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1462'. [ 202.980400][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1462'. [ 203.226160][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1469'. [ 203.731547][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1474'. [ 203.736532][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1474'. [ 205.045146][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1483'. [ 205.049106][T10212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1483'. [ 205.953030][ T40] audit: type=1800 audit(2000000100.049:837): pid=10223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1488" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 206.031076][T10230] batman_adv: batadv0: Adding interface: dummy0 [ 206.035028][T10230] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.042791][T10230] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 208.030235][T10237] veth1_macvtap: left promiscuous mode [ 208.032071][T10237] macsec0: entered promiscuous mode [ 209.019231][ T40] audit: type=1804 audit(2000000103.119:838): pid=10264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1500" name="file0" dev="tmpfs" ino=2231 res=1 errno=0 [ 209.456950][T10277] wireguard0: entered promiscuous mode [ 209.985095][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1509'. [ 210.317695][ T40] audit: type=1326 audit(2000000104.419:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.3.1517" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 210.324400][ T40] audit: type=1326 audit(2000000104.419:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.3.1517" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 210.330936][ T40] audit: type=1326 audit(2000000104.429:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.3.1517" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 210.337813][ T40] audit: type=1326 audit(2000000104.429:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.3.1517" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 210.345360][ T40] audit: type=1326 audit(2000000104.429:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.3.1517" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 210.351987][ T40] audit: type=1326 audit(2000000104.429:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.3.1517" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 210.359893][ T40] audit: type=1326 audit(2000000104.429:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.3.1517" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 210.366411][ T40] audit: type=1326 audit(2000000104.429:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.3.1517" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 210.473550][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1518'. [ 210.624483][T10328] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 210.627194][T10328] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 210.630960][T10328] tipc: Enabled bearer , priority 0 [ 211.686948][T10352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1529'. [ 211.728451][T10354] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN NOPTI [ 211.732355][T10354] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 211.736534][T10354] CPU: 0 UID: 0 PID: 10354 Comm: syz.2.1531 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 211.740660][T10354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 211.744021][T10354] RIP: 0010:find_match+0x136/0x15d0 [ 211.745684][T10354] Code: 48 c1 ea 03 80 3c 02 00 0f 85 ac 11 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 7d 00 49 8d bf c0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 93 11 00 00 4d 8b bf c0 00 00 00 e8 c4 09 50 01 [ 211.751771][T10354] RSP: 0018:ffffc9000758ed40 EFLAGS: 00010206 [ 211.753354][ T57] tipc: Node number set to 2092853886 [ 211.753676][T10354] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: ffffc9000c402000 [ 211.757936][T10354] RDX: 0000000000000018 RSI: ffffffff8a18ac4f RDI: 00000000000000c0 [ 211.760363][T10354] RBP: ffffc9000758ee48 R08: 0000000000000001 R09: 0000000000000000 [ 211.762934][T10354] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880225c8c37 [ 211.765346][T10354] R13: ffff8880225c8c20 R14: 1ffff92000eb1db7 R15: 0000000000000000 [ 211.767799][T10354] FS: 0000000000000000(0000) GS:ffff8880977ef000(0063) knlGS:00000000f5096b40 [ 211.770562][T10354] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 211.772690][T10354] CR2: 000000002ef0effc CR3: 000000006a568000 CR4: 0000000000352ef0 [ 211.775246][T10354] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.777801][T10354] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 211.780295][T10354] Call Trace: [ 211.781389][T10354] [ 211.782337][T10354] ? find_held_lock+0x2b/0x80 [ 211.783838][T10354] ? __pfx_find_match+0x10/0x10 [ 211.785375][T10354] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 211.787286][T10354] ? is_bpf_text_address+0x94/0x1a0 [ 211.788928][T10354] ? kernel_text_address+0x8d/0x100 [ 211.790546][T10354] rt6_nh_find_match+0xfa/0x1a0 [ 211.792112][T10354] nexthop_for_each_fib6_nh+0x165/0x4a0 [ 211.793832][T10354] ? __pfx_rt6_nh_find_match+0x10/0x10 [ 211.795548][T10354] __find_rr_leaf+0x6e5/0xe00 [ 211.797070][T10354] ? __pfx___find_rr_leaf+0x10/0x10 [ 211.798684][T10354] ? fib6_node_lookup+0x12d/0x190 [ 211.800213][T10354] ? __pfx_fib6_node_lookup+0x10/0x10 [ 211.801939][T10354] ? find_held_lock+0x2b/0x80 [ 211.803443][T10354] fib6_table_lookup+0x57c/0xa30 [ 211.805030][T10354] ? __pfx_fib6_table_lookup+0x10/0x10 [ 211.806729][T10354] ip6_pol_route+0x1cc/0x1230 [ 211.808280][T10354] ? __pfx_ip6_pol_route+0x10/0x10 [ 211.810317][T10354] ? __lock_acquire+0x5ca/0x1ba0 [ 211.812063][T10354] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 211.813863][T10354] fib6_rule_lookup+0x386/0x720 [ 211.815400][T10354] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 211.817095][T10354] ? __lock_acquire+0x5ca/0x1ba0 [ 211.818633][T10354] ip6_route_output_flags+0x1d0/0x640 [ 211.820308][T10354] ip6_dst_lookup_tail.constprop.0+0xa52/0x2140 [ 211.822230][T10354] ? is_bpf_text_address+0x94/0x1a0 [ 211.823843][T10354] ? chacha_permute+0x5ae/0x6d0 [ 211.825364][T10354] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 211.827428][T10354] ? __lock_acquire+0x5ca/0x1ba0 [ 211.828974][T10354] ip6_dst_lookup_flow+0x99/0x1d0 [ 211.830533][T10354] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 211.832272][T10354] ? find_held_lock+0x2b/0x80 [ 211.833742][T10354] ? sctp_v6_get_dst+0x65e/0x2050 [ 211.835307][T10354] sctp_v6_get_dst+0x6a2/0x2050 [ 211.836853][T10354] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 211.838536][T10354] ? __pfx_sctp_generate_proto_unreach_event+0x10/0x10 [ 211.840708][T10354] ? lockdep_init_map_type+0x5c/0x280 [ 211.842375][T10354] ? sctp_transport_route+0x12f/0x350 [ 211.844109][T10354] sctp_transport_route+0x12f/0x350 [ 211.845719][T10354] sctp_assoc_add_peer+0x741/0x1550 [ 211.847330][T10354] sctp_connect_new_asoc+0x208/0x790 [ 211.848991][T10354] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 211.850866][T10354] ? __ipv6_addr_type+0x225/0x300 [ 211.852457][T10354] ? __ipv6_addr_type+0x225/0x300 [ 211.854086][T10354] __sctp_connect+0x3f3/0xc60 [ 211.855563][T10354] ? __pfx___sctp_connect+0x10/0x10 [ 211.857228][T10354] ? __might_fault+0x13b/0x190 [ 211.858808][T10354] __sctp_setsockopt_connectx+0xfc/0x170 [ 211.860598][T10354] sctp_getsockopt+0x29d6/0x6b10 [ 211.862133][T10354] ? schedule+0xf1/0x3a0 [ 211.863462][T10354] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 211.865129][T10354] ? futex_wait_queue+0x14c/0x220 [ 211.866696][T10354] ? __pfx_sctp_getsockopt+0x10/0x10 [ 211.868336][T10354] ? __pfx___futex_wait+0x10/0x10 [ 211.869894][T10354] ? __pfx___might_resched+0x10/0x10 [ 211.871526][T10354] ? aa_sk_perm+0x2f4/0xb10 [ 211.872953][T10354] ? __pfx_aa_sk_perm+0x10/0x10 [ 211.874468][T10354] ? percpu_counter_add_batch+0xb8/0x1f0 [ 211.876212][T10354] ? errseq_sample+0x53/0x70 [ 211.877665][T10354] ? sock_common_getsockopt+0x21/0xb0 [ 211.879318][T10354] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 211.881155][T10354] do_sock_getsockopt+0x3fc/0x800 [ 211.882714][T10354] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 211.884417][T10354] ? __fget_files+0x204/0x3c0 [ 211.885876][T10354] __sys_getsockopt+0x123/0x1a0 [ 211.887401][T10354] __ia32_sys_getsockopt+0xbc/0x160 [ 211.889034][T10354] ? syscall_trace_enter+0x5e/0x260 [ 211.890659][T10354] __do_fast_syscall_32+0x73/0x120 [ 211.892255][T10354] do_fast_syscall_32+0x32/0x80 [ 211.893774][T10354] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.895743][T10354] RIP: 0023:0xf7f78579 [ 211.897032][T10354] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 211.902874][T10354] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 211.905618][T10354] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000084 [ 211.908069][T10354] RDX: 000000000000006f RSI: 0000000080000140 RDI: 0000000080000180 [ 211.910484][T10354] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.912903][T10354] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 211.915400][T10354] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.917834][T10354] [ 211.918784][T10354] Modules linked in: [ 211.920710][T10354] ---[ end trace 0000000000000000 ]--- [ 211.923705][T10354] RIP: 0010:find_match+0x136/0x15d0 [ 211.925358][T10354] Code: 48 c1 ea 03 80 3c 02 00 0f 85 ac 11 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 7d 00 49 8d bf c0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 93 11 00 00 4d 8b bf c0 00 00 00 e8 c4 09 50 01 [ 211.931359][T10354] RSP: 0018:ffffc9000758ed40 EFLAGS: 00010206 [ 211.933305][T10354] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: ffffc9000c402000 [ 211.935845][T10354] RDX: 0000000000000018 RSI: ffffffff8a18ac4f RDI: 00000000000000c0 [ 211.938366][T10354] RBP: ffffc9000758ee48 R08: 0000000000000001 R09: 0000000000000000 [ 211.940853][T10354] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880225c8c37 [ 211.943630][T10354] R13: ffff8880225c8c20 R14: 1ffff92000eb1db7 R15: 0000000000000000 [ 211.946164][T10354] FS: 0000000000000000(0000) GS:ffff8880978ef000(0063) knlGS:00000000f5096b40 [ 211.948958][T10354] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 211.951071][T10354] CR2: 000000002effdffc CR3: 000000006a568000 CR4: 0000000000352ef0 [ 211.953956][T10354] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.956570][T10354] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 211.959100][T10354] Kernel panic - not syncing: Fatal exception [ 211.961670][T10354] Kernel Offset: disabled [ 211.963136][T10354] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:24:09 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bf6b5 RDI=ffffffff9addcbc0 RBP=ffffffff9addcb80 RSP=ffffc9000758e740 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9addcb80 R15=ffffffff854bf650 RIP=ffffffff854bf6df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977ef000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002ef0effc CR3=000000006a568000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000011400000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff8214a266 RBX=0000000000000001 RCX=ffffffff91270e60 RDX=dffffc0000000000 RSI=ffffc900005678d0 RDI=ffffc90000567c08 RBP=ffffc900005678d0 RSP=ffffc90000567818 R8 =ffffffff91270e64 R9 =0000000000000000 R10=ffffc90000567888 R11=0000000000011eff R12=ffffc900005678d8 R13=ffffc90000567888 R14=ffffc90000567c10 R15=ffffc900005678bc RIP=ffffffff8169a4c1 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f00eff8 CR3=000000006ef31000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000002232d4 RBX=0000000000000002 RCX=ffffffff8b68c3e9 RDX=ffffed10056865be RSI=ffffffff8bf46760 RDI=ffffffff81913051 RBP=ffffed1003ada910 RSP=ffffc9000047fdf8 R8 =0000000000000000 R9 =ffffed10056865bd R10=ffff88802b432deb R11=0000000000000001 R12=0000000000000002 R13=ffff88801d6d4880 R14=ffffffff90850e10 R15=0000000000000000 RIP=ffffffff8b68ac7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055f0b1451000 CR3=0000000050d50000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7482ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffffff9ad57510 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff9ad57514 RBP=1ffff92000675e8e RSP=ffffc900033af468 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff90850e17 R11=000000000000001e R12=dffffc0000000000 R13=ffff888074d22000 R14=ffffffff9ad57508 R15=0000000000002995 RIP=ffffffff8197f1f1 RFL=00000803 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097aef000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000571c24c0 CR3=000000006488b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000