last executing test programs: 52.228131373s ago: executing program 3 (id=3096): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x0, 0x6000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x0, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0xdddd1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x10000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 42.548840484s ago: executing program 3 (id=3096): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x0, 0x6000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x0, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0xdddd1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x10000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 34.029094674s ago: executing program 3 (id=3096): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x0, 0x6000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x0, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0xdddd1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x10000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 31.650286629s ago: executing program 1 (id=3452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0xf, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80c0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r5, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000280)=0xc) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000027c0)=0x1, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) 30.539189865s ago: executing program 1 (id=3455): memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0xc00, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) mkdir(&(0x7f0000000140)='./file0\x00', 0xd2) ioctl$sock_SIOCGPGRP(r6, 0x8904, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x1bc, 0x2b8, 0x0, 0x1bc, 0xff000000, 0x2a8, 0x3a8, 0x3a8, 0x2a8, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev, @private2, [], [], 'veth1_to_hsr\x00', 'wg2\x00'}, 0x0, 0x154, 0x1bc, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @loopback, @empty, [], [], [], 0x0, 0x6359d960a6776be9}}, @common=@inet=@ecn={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3cc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="000007000000000000000000ffff00bfa200000000000007020000f8ff868cb7030085000000820000009500000000000000569a0105a041f0c2d68cd33282ebfb87fdcf7c9d9f460832052a7bc82b242300a3a415b9b517e8e2e4abfcd9ad2cbd11bd534a67a5873daae038596bee99b8f62cfc3153939dfaecb8455d28ee514644515f077300"/147], &(0x7f00000003c0)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='itimer_expire\x00', r8}, 0x18) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40186f40, &(0x7f00000000c0)=0x1f) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) 29.830239219s ago: executing program 0 (id=3457): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfc, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x9, 0x5, 0x9, 0x10001}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x50}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}}, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000900cdff1e0000009501000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001000200"], 0x7c}}, 0x0) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, 0x0, 0x0, r5) request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000280)='%.\x00', r5) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) 29.490073541s ago: executing program 1 (id=3458): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfc, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x9, 0x5, 0x9, 0x10001}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x50}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}}, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000900cdff1e0000009501000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001000200"], 0x7c}}, 0x0) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f00000008c0)='0', 0x1, r5) request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000280)='%.\x00', r5) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) 28.909736391s ago: executing program 0 (id=3460): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) creat(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x81) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002680)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x1, 0x2, 0x16, 0x1, 0x1, 0x4, {0x5, 0x80, 0x5, 0x0, 0x0, 0x4000000000008, 0x8, 0x800, 0x6, 0x1000, 0x7fffffff, r2, r3, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 28.795022869s ago: executing program 0 (id=3461): memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0xc00, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) mkdir(&(0x7f0000000140)='./file0\x00', 0xd2) ioctl$sock_SIOCGPGRP(r6, 0x8904, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x1bc, 0x2b8, 0x0, 0x1bc, 0xff000000, 0x2a8, 0x3a8, 0x3a8, 0x2a8, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev, @private2, [], [], 'veth1_to_hsr\x00', 'wg2\x00'}, 0x0, 0x154, 0x1bc, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @loopback, @empty, [], [], [], 0x0, 0x6359d960a6776be9}}, @common=@inet=@ecn={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3cc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="000007000000000000000000ffff00bfa200000000000007020000f8ff868cb7030085000000820000009500000000000000569a0105a041f0c2d68cd33282ebfb87fdcf7c9d9f460832052a7bc82b242300a3a415b9b517e8e2e4abfcd9ad2cbd11bd534a67a5873daae038596bee99b8f62cfc3153939dfaecb8455d28ee514644515f077300"/147], &(0x7f00000003c0)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='itimer_expire\x00', r8}, 0x18) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40186f40, &(0x7f00000000c0)=0x1f) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) 28.257442242s ago: executing program 1 (id=3462): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8) 28.251207172s ago: executing program 1 (id=3463): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x10, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff4, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 28.010276684s ago: executing program 1 (id=3466): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) 27.949534819s ago: executing program 32 (id=3466): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) 27.665638358s ago: executing program 0 (id=3468): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x3) 27.625135886s ago: executing program 0 (id=3469): memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0xc00, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) mkdir(&(0x7f0000000140)='./file0\x00', 0xd2) ioctl$sock_SIOCGPGRP(r6, 0x8904, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x1bc, 0x2b8, 0x0, 0x1bc, 0xff000000, 0x2a8, 0x3a8, 0x3a8, 0x2a8, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev, @private2, [], [], 'veth1_to_hsr\x00', 'wg2\x00'}, 0x0, 0x154, 0x1bc, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @loopback, @empty, [], [], [], 0x0, 0x6359d960a6776be9}}, @common=@inet=@ecn={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3cc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="000007000000000000000000ffff00bfa200000000000007020000f8ff868cb7030085000000820000009500000000000000569a0105a041f0c2d68cd33282ebfb87fdcf7c9d9f460832052a7bc82b242300a3a415b9b517e8e2e4abfcd9ad2cbd11bd534a67a5873daae038596bee99b8f62cfc3153939dfaecb8455d28ee514644515f077300"/147], &(0x7f00000003c0)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='itimer_expire\x00', r8}, 0x18) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40186f40, &(0x7f00000000c0)=0x1f) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) 27.040003336s ago: executing program 0 (id=3471): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = dup(r0) write$binfmt_elf64(r1, 0x0, 0x0) 26.917150157s ago: executing program 33 (id=3471): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = dup(r0) write$binfmt_elf64(r1, 0x0, 0x0) 26.722953628s ago: executing program 3 (id=3096): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x0, 0x6000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x0, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0xdddd1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x10000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 16.120428719s ago: executing program 3 (id=3096): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x0, 0x6000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x0, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0xdddd1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x10000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 14.790162333s ago: executing program 5 (id=3493): openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 14.647570638s ago: executing program 5 (id=3497): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000580)=0x281) r1 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2040}}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r4 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2) 14.453144615s ago: executing program 5 (id=3498): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) 14.388416493s ago: executing program 5 (id=3499): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c8000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="debf0100e10000004c0012800b00010062726964676500003c0002800500240001000000050029000100"], 0x6c}}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') migrate_pages(r1, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) r6 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc2c45512, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000c00)=""/21, 0x15}], 0x1, &(0x7f0000000200)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x84}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f00000002c0)}], 0x3}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/179, 0xb3}, {&(0x7f0000000880)=""/204, 0xcc}], 0x2, &(0x7f00000009c0)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xe4}}], 0x3, 0x0, &(0x7f0000000b40)={0x0, 0x3938700}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x20c, 0x2a8, 0x2a8, 0x20c, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xf4, 0x13c, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'ip6gre0\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x5, 0x7, 0x6, 0x1], 0x5, 0x3}, {0x3, [0x2, 0x2, 0x3, 0x6, 0x2, 0x3], 0x2, 0x3}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2fc) syz_emit_ethernet(0x2a, &(0x7f0000000c40)=ANY=[@ANYBLOB="0180c200000050a245d5cde086dd4500001c000000000002907800000000ffffffff1cff49dc958bb45948a35779ee2fb5981200907800000000"], 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10) setfsgid(0xffffffffffffffff) 14.00653033s ago: executing program 5 (id=3501): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x1, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}]}}]}}]}}, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 7.660093164s ago: executing program 4 (id=3523): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000b80)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) 5.753757109s ago: executing program 2 (id=3527): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r5, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) 4.838679523s ago: executing program 4 (id=3528): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.836924172s ago: executing program 2 (id=3529): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000000)="260f01cfbaf80c66b835b9ca8166efbafc0cec66640f32baf80c66b83065cd8966efbafc0c66b88f9b000066efbaf80c66b8a8a86e8866efbafc0c66b80100000066efbaf80c66b8983d448366efbafc0cb000eeea012b5d00660ff96700c4e2bddfdd0f01c2", 0x66}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.836723483s ago: executing program 4 (id=3530): sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}]}, @NL80211_ATTR_IE={0x2d, 0x2a, [@supported_rates={0x1, 0x1, [{0x24}]}, @mic={0x8c, 0x10, {0x1a8, "4522fe4d607a", @short="66feb47c7388a19c"}}, @link_id={0x65, 0x12, {@random="70e5a6d8ca2e", @broadcast, @device_b}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 4.465512416s ago: executing program 3 (id=3096): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x0, 0x6000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x0, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0xdddd1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x10000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 3.043501141s ago: executing program 4 (id=3531): memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0xc00, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) mkdir(&(0x7f0000000140)='./file0\x00', 0xd2) ioctl$sock_SIOCGPGRP(r6, 0x8904, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x1bc, 0x2b8, 0x0, 0x1bc, 0xff000000, 0x2a8, 0x3a8, 0x3a8, 0x2a8, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev, @private2, [], [], 'veth1_to_hsr\x00', 'wg2\x00'}, 0x0, 0x154, 0x1bc, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @loopback, @empty, [], [], [], 0x0, 0x6359d960a6776be9}}, @common=@inet=@ecn={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3cc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="000007000000000000000000ffff00bfa200000000000007020000f8ff868cb7030085000000820000009500000000000000569a0105a041f0c2d68cd33282ebfb87fdcf7c9d9f460832052a7bc82b242300a3a415b9b517e8e2e4abfcd9ad2cbd11bd534a67a5873daae038596bee99b8f62cfc3153939dfaecb8455d28ee514644515f077300"/147], &(0x7f00000003c0)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='itimer_expire\x00', r8}, 0x18) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40186f40, &(0x7f00000000c0)=0x1f) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) 2.865833759s ago: executing program 2 (id=3532): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000780)={{}, {0x1, 0x1}, [], {0x4, 0x5}, [], {}, {0x20, 0x3}}, 0x24, 0x2) 2.859962928s ago: executing program 5 (id=3501): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x1, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}]}}]}}]}}, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 2.336376526s ago: executing program 2 (id=3533): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfc, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x9, 0x5, 0x9, 0x10001}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x50}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}}, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000900cdff1e0000009501000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001000200"], 0x7c}}, 0x0) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f00000008c0)="3080", 0x2, r5) request_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000280)='%.\x00', r5) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) 2.109677698s ago: executing program 4 (id=3534): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfc, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x9, 0x5, 0x9, 0x10001}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x50}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}}, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000900cdff1e0000009501000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001000200"], 0x7c}}, 0x0) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f00000008c0)="3080", 0x2, r5) request_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000280)='%.\x00', r5) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) 1.370056165s ago: executing program 2 (id=3535): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c8000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="debf0100e10000004c0012800b00010062726964676500003c000280050024000100000005002900010000000500250000000000060006000600000008001d0080000000050018000100"], 0x6c}}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') migrate_pages(r1, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) r6 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc2c45512, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000c00)=""/21, 0x15}], 0x1, &(0x7f0000000200)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x84}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f00000002c0)}], 0x3}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/179, 0xb3}, {&(0x7f0000000880)=""/204, 0xcc}], 0x2, &(0x7f00000009c0)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xe4}}], 0x3, 0x0, &(0x7f0000000b40)={0x0, 0x3938700}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x20c, 0x2a8, 0x2a8, 0x20c, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xf4, 0x13c, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'ip6gre0\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x5, 0x7, 0x6, 0x1], 0x5, 0x3}, {0x3, [0x2, 0x2, 0x3, 0x6, 0x2, 0x3], 0x2, 0x3}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2fc) syz_emit_ethernet(0x2a, &(0x7f0000000c40)=ANY=[@ANYBLOB="0180c200000050a245d5cde086dd4500001c000000000002907800000000ffffffff1cff49dc958bb45948a35779ee2fb5981200907800000000"], 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10) setfsgid(0xffffffffffffffff) 307.502µs ago: executing program 2 (id=3536): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x400c000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x15) 0s ago: executing program 4 (id=3537): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): dge_slave_1) entered blocking state [ 625.719111][T19219] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.721514][T19219] bridge_slave_1: entered allmulticast mode [ 625.724575][T19219] bridge_slave_1: entered promiscuous mode [ 625.778216][T19219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.783693][T19237] ip6t_srh: unknown srh invflags 6BE9 [ 625.784012][T19219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.787755][T19237] ubi: mtd0 is already attached to ubi31 [ 625.868468][T19219] team0: Port device team_slave_0 added [ 625.873980][T19219] team0: Port device team_slave_1 added [ 625.911674][T19219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.914375][T19219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.923756][T19219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.928451][T19219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.930818][T19219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.940257][T19219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.992267][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 625.997588][T19219] hsr_slave_0: entered promiscuous mode [ 626.000869][T19219] hsr_slave_1: entered promiscuous mode [ 626.004153][T19219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 626.007456][T19219] Cannot create hsr debugfs directory [ 626.352229][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 626.377869][ T10] usb 5-1: config 0 has an invalid interface number: 114 but max is 0 [ 626.383753][ T10] usb 5-1: config 0 has no interface number 0 [ 626.386633][ T10] usb 5-1: config 0 interface 114 has no altsetting 0 [ 626.392761][ T10] usb 5-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=f2.69 [ 626.397289][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.400841][ T10] usb 5-1: Product: syz [ 626.406912][ T10] usb 5-1: Manufacturer: syz [ 626.411826][ T10] usb 5-1: SerialNumber: syz [ 626.425326][ T10] usb 5-1: config 0 descriptor?? [ 626.649579][ T6166] usb 5-1: USB disconnect, device number 21 [ 626.653624][T19246] Cannot find del_set index 3 as target [ 626.657494][T19246] netlink: 'syz.1.3140': attribute type 11 has an invalid length. [ 626.660840][T19246] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3140'. [ 626.930164][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.023938][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.104517][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.219766][ T12] bridge_slave_1: left allmulticast mode [ 627.221826][ T12] bridge_slave_1: left promiscuous mode [ 627.227335][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.238060][ T12] bridge_slave_0: left allmulticast mode [ 627.240103][ T12] bridge_slave_0: left promiscuous mode [ 627.244572][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.294381][ T5939] Bluetooth: hci1: command tx timeout [ 627.788282][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.801900][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.810296][ T12] bond0 (unregistering): Released all slaves [ 627.925154][T19278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3146'. [ 628.004877][T19280] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3145'. [ 628.649262][ T12] hsr_slave_0: left promiscuous mode [ 628.651553][ T12] hsr_slave_1: left promiscuous mode [ 628.663312][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.666659][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.681051][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.691595][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.745497][ T12] veth1_macvtap: left promiscuous mode [ 628.748444][ T12] veth0_macvtap: left promiscuous mode [ 628.750844][ T12] veth1_vlan: left promiscuous mode [ 628.753251][ T12] veth0_vlan: left promiscuous mode [ 629.372456][ T5939] Bluetooth: hci1: command tx timeout [ 629.981718][T19306] Cannot find del_set index 3 as target [ 629.989098][T19306] netlink: 'syz.2.3151': attribute type 11 has an invalid length. [ 629.993019][T19306] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3151'. [ 630.035230][ T58] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 630.055132][ T12] team0 (unregistering): Port device team_slave_1 removed [ 630.167030][ T12] team0 (unregistering): Port device team_slave_0 removed [ 630.195282][T19126] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 630.214128][ T58] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 630.219308][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 630.224391][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 630.229708][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 630.235695][ T58] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 630.239861][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.246003][ T58] usb 5-1: config 0 descriptor?? [ 630.248619][T19304] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 630.353406][T19126] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 630.356680][T19126] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 12335, setting to 1024 [ 630.359904][T19126] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 630.365790][T19126] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 630.369307][T19126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.375724][T19308] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 630.379767][T19126] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 630.594307][ T5981] kernel write not supported for file /input/mouse0 (pid: 5981 comm: kworker/2:6) [ 630.621081][T17832] usb 6-1: USB disconnect, device number 23 [ 630.675588][ T58] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 630.678909][ T58] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 630.682570][ T58] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 630.689844][ T58] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 630.696158][ T58] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 630.698726][ T58] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 630.702015][ T58] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 630.705389][ T58] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 630.708629][ T58] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 630.711827][ T58] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 630.715249][ T58] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 630.719669][ T58] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 630.722998][ T58] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 630.726177][ T58] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 630.729344][ T58] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 630.734151][ T58] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 630.749653][ T58] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 631.016189][T19219] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 631.050887][T19219] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 631.062609][T19219] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 631.073968][T19219] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 631.177572][T19219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.228311][T19219] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.244216][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.246921][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.253809][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.256158][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.452203][ T5939] Bluetooth: hci1: command tx timeout [ 631.476845][T19219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.516299][T19219] veth0_vlan: entered promiscuous mode [ 631.525907][T19219] veth1_vlan: entered promiscuous mode [ 631.544292][T19219] veth0_macvtap: entered promiscuous mode [ 631.548318][T19219] veth1_macvtap: entered promiscuous mode [ 631.557276][T19219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.575035][T19219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.581181][T19219] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.584693][T19219] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.587630][T19219] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.590509][T19219] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.760744][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.773682][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.838070][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.848742][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.405462][T19328] usb 5-1: string descriptor 0 read error: -2 [ 633.184940][ T58] usb 5-1: USB disconnect, device number 22 [ 633.593889][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.855881][T18156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 633.861538][T18156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 633.866263][T18156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 633.871641][T18156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 633.879230][T18156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 633.919245][T19387] lo speed is unknown, defaulting to 1000 [ 633.924571][T19387] lo speed is unknown, defaulting to 1000 [ 634.197836][T19399] Cannot find del_set index 3 as target [ 634.204287][T19399] netlink: 'syz.2.3170': attribute type 11 has an invalid length. [ 634.207402][T19399] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3170'. [ 634.420587][T19387] chnl_net:caif_netlink_parms(): no params data found [ 634.595931][T19387] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.597067][T19408] ip6t_srh: unknown srh invflags 6BE9 [ 634.599126][T19387] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.604836][T19387] bridge_slave_0: entered allmulticast mode [ 634.608787][T19387] bridge_slave_0: entered promiscuous mode [ 634.608826][T19408] ubi: mtd0 is already attached to ubi31 [ 634.616140][T19387] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.619318][T19387] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.622902][T19387] bridge_slave_1: entered allmulticast mode [ 634.626960][T19387] bridge_slave_1: entered promiscuous mode [ 634.696156][T19387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.703902][T19387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.775446][T19387] team0: Port device team_slave_0 added [ 634.780531][T19387] team0: Port device team_slave_1 added [ 634.847283][T19387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.849780][T19387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.861353][T19387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.866212][T19387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.868459][T19387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.878454][T19387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.956552][T19387] hsr_slave_0: entered promiscuous mode [ 634.960420][T19387] hsr_slave_1: entered promiscuous mode [ 634.963782][T19387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 634.966465][T19387] Cannot create hsr debugfs directory [ 635.237983][T19435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3178'. [ 635.726093][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.818232][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.882455][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.932326][T18156] Bluetooth: hci1: command tx timeout [ 636.010470][ T12] bridge_slave_1: left allmulticast mode [ 636.015753][ T12] bridge_slave_1: left promiscuous mode [ 636.018548][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.028574][ T12] bridge_slave_0: left allmulticast mode [ 636.030490][ T12] bridge_slave_0: left promiscuous mode [ 636.033189][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.333342][T19462] Cannot find del_set index 3 as target [ 636.351823][T19462] netlink: 'syz.2.3182': attribute type 11 has an invalid length. [ 636.354488][T19462] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3182'. [ 636.462081][T19467] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 636.470539][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.486522][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.494373][ T12] bond0 (unregistering): Released all slaves [ 637.047516][T19484] ip6t_srh: unknown srh invflags 6BE9 [ 637.050883][T19484] ubi: mtd0 is already attached to ubi31 [ 637.082359][ T12] hsr_slave_0: left promiscuous mode [ 637.103755][ T12] hsr_slave_1: left promiscuous mode [ 637.113001][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.115534][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.118743][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.121256][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.152738][ T12] veth1_macvtap: left promiscuous mode [ 637.154714][ T12] veth0_macvtap: left promiscuous mode [ 637.157261][ T12] veth1_vlan: left promiscuous mode [ 637.161338][ T12] veth0_vlan: left promiscuous mode [ 638.052226][T18156] Bluetooth: hci1: command tx timeout [ 638.336590][ T12] team0 (unregistering): Port device team_slave_1 removed [ 638.442270][ T12] team0 (unregistering): Port device team_slave_0 removed [ 639.278375][T19521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3196'. [ 639.415358][T19387] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 639.445628][T19387] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 639.467140][T19387] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 639.514461][T19387] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 639.701320][T19387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.720634][T19387] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.730898][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.734151][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.748629][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.751634][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.830266][T19540] ip6t_srh: unknown srh invflags 6BE9 [ 639.834529][T19540] ubi: mtd0 is already attached to ubi31 [ 640.034057][T19387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.092461][T18156] Bluetooth: hci1: command tx timeout [ 640.190413][T19387] veth0_vlan: entered promiscuous mode [ 640.201018][T19387] veth1_vlan: entered promiscuous mode [ 640.445859][T19387] veth0_macvtap: entered promiscuous mode [ 640.460381][T19387] veth1_macvtap: entered promiscuous mode [ 640.470200][T19387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.480172][T19387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.522714][T19387] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.526564][T19387] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.531160][T19387] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.537563][T19387] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.595527][T19565] block nbd0: NBD_DISCONNECT [ 640.604430][T19565] block nbd0: Disconnected due to user request. [ 640.608966][T19565] block nbd0: shutting down sockets [ 640.750711][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.753633][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.791229][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.796248][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.917188][T19581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3206'. [ 641.719813][ T40] audit: type=1804 audit(1747701055.951:785): pid=19593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3209" name="/newroot/803/bus/file0" dev="overlay" ino=4446 res=1 errno=0 [ 642.188747][T19609] ip6t_srh: unknown srh invflags 6BE9 [ 642.192419][T19609] ubi: mtd0 is already attached to ubi31 [ 642.574669][T19617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3216'. [ 643.680578][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 643.701946][ T5939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 643.711635][ T5939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 643.726652][ T5939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 643.730016][ T5939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 644.658023][T19648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3225'. [ 644.739529][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.770076][T19627] lo speed is unknown, defaulting to 1000 [ 644.782963][T19627] lo speed is unknown, defaulting to 1000 [ 644.896392][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.007383][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.045176][T19627] chnl_net:caif_netlink_parms(): no params data found [ 645.082203][T17832] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 645.120582][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.202750][T19627] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.205765][T19627] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.208666][T19627] bridge_slave_0: entered allmulticast mode [ 645.213993][T19627] bridge_slave_0: entered promiscuous mode [ 645.220835][T19627] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.224309][T19627] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.227232][T19627] bridge_slave_1: entered allmulticast mode [ 645.231043][T19627] bridge_slave_1: entered promiscuous mode [ 645.243697][T17832] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 645.246800][T17832] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 645.250164][T17832] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 645.270552][T17832] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 645.278014][T17832] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 645.283424][T17832] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 645.286753][T17832] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 645.289418][T17832] usb 6-1: Product: syz [ 645.290837][T17832] usb 6-1: Manufacturer: syz [ 645.304574][T17832] cdc_wdm 6-1:1.0: skipping garbage [ 645.306403][T17832] cdc_wdm 6-1:1.0: skipping garbage [ 645.308936][T17832] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 645.310900][T17832] cdc_wdm 6-1:1.0: Unknown control protocol [ 645.357614][T19627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.368060][T19627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.428306][T19627] team0: Port device team_slave_0 added [ 645.433595][T19627] team0: Port device team_slave_1 added [ 645.498557][T19627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.500887][T19627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.514955][T19627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.532886][T19627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.542483][T19627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.555596][T19627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.575526][ T46] bridge_slave_1: left allmulticast mode [ 645.577788][ T46] bridge_slave_1: left promiscuous mode [ 645.582620][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.588945][ T46] bridge_slave_0: left allmulticast mode [ 645.591560][ T46] bridge_slave_0: left promiscuous mode [ 645.594877][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.713792][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -EPIPE [ 645.771137][ C3] wdm_int_callback: 83 callbacks suppressed [ 645.771158][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 645.771501][ T1332] usb 6-1: USB disconnect, device number 24 [ 645.773397][ C3] wdm_int_callback: 83 callbacks suppressed [ 645.773409][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 645.773418][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 645.936683][T18156] Bluetooth: hci1: command tx timeout [ 646.064275][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.069200][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.077181][ T46] bond0 (unregistering): Released all slaves [ 646.210296][T19695] block device autoloading is deprecated and will be removed. [ 646.437003][T19708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3234'. [ 647.938314][T19627] hsr_slave_0: entered promiscuous mode [ 647.941781][T19627] hsr_slave_1: entered promiscuous mode [ 647.945154][T19627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 647.948472][T19627] Cannot create hsr debugfs directory [ 648.012439][T18156] Bluetooth: hci1: command tx timeout [ 648.033007][ T40] audit: type=1804 audit(1747701062.261:786): pid=19718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3237" name="/newroot/867/file0" dev="tmpfs" ino=4791 res=1 errno=0 [ 648.318824][ T46] hsr_slave_0: left promiscuous mode [ 648.321223][ T46] hsr_slave_1: left promiscuous mode [ 648.327322][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.329744][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.337713][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.340071][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.374193][ T46] veth1_macvtap: left promiscuous mode [ 648.376092][ T46] veth0_macvtap: left promiscuous mode [ 648.378005][ T46] veth1_vlan: left promiscuous mode [ 648.379766][ T46] veth0_vlan: left promiscuous mode [ 648.389785][T19735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3243'. [ 648.517989][T19739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3244'. [ 648.639308][ C2] vcan0: j1939_tp_rxtimer: 0xffff88807035e800: rx timeout, send abort [ 649.067303][T19742] block device autoloading is deprecated and will be removed. [ 649.072563][T19742] bio_check_eod: 21 callbacks suppressed [ 649.072574][T19742] syz.0.3245: attempt to access beyond end of device [ 649.072574][T19742] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 649.139941][ C2] vcan0: j1939_tp_rxtimer: 0xffff88807035e000: rx timeout, send abort [ 649.143067][ C2] vcan0: j1939_tp_rxtimer: 0xffff88807035e800: abort rx timeout. Force session deactivation [ 649.418038][T19747] Cannot find del_set index 3 as target [ 649.427659][ T46] team0 (unregistering): Port device team_slave_1 removed [ 649.440738][T19747] netlink: 'syz.0.3246': attribute type 11 has an invalid length. [ 649.443685][T19747] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3246'. [ 649.542625][ T46] team0 (unregistering): Port device team_slave_0 removed [ 649.642815][ C2] vcan0: j1939_tp_rxtimer: 0xffff88807035e000: abort rx timeout. Force session deactivation [ 650.102358][T18156] Bluetooth: hci1: command tx timeout [ 650.512646][T19761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3250'. [ 650.643650][T19767] md: md2 stopped. [ 650.691328][T19773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3247'. [ 651.019756][T19627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 651.027343][T19627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 651.034695][T19627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 651.039283][T19627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 651.102511][T19627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.117909][T19627] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.127111][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.130239][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.141958][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.144758][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.313207][T19627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.431522][T19799] Cannot find del_set index 3 as target [ 651.434538][T19799] netlink: 'syz.2.3257': attribute type 11 has an invalid length. [ 651.437108][T19799] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3257'. [ 651.479235][T19627] veth0_vlan: entered promiscuous mode [ 651.485412][T19627] veth1_vlan: entered promiscuous mode [ 651.538646][T19627] veth0_macvtap: entered promiscuous mode [ 651.546047][T19627] veth1_macvtap: entered promiscuous mode [ 651.562942][T19627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.573831][T19627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.584379][T19627] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.588206][T19627] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.591920][T19627] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.596874][T19627] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.706237][T19716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.709486][T19716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.764595][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.768114][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.382637][T19842] Cannot find del_set index 3 as target [ 652.387463][T19842] netlink: 'syz.2.3261': attribute type 11 has an invalid length. [ 652.390828][T19842] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3261'. [ 654.323678][T19863] ip6t_srh: unknown srh invflags 6BE9 [ 654.327761][T19863] ubi: mtd0 is already attached to ubi31 [ 654.577979][ T1148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.755583][T19883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3267'. [ 655.411730][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 655.426213][ T5939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 655.433451][ T5939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 655.445502][ T5939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 655.449683][ T5939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 655.520672][T19914] Cannot find del_set index 3 as target [ 655.526267][T19914] netlink: 'syz.1.3269': attribute type 11 has an invalid length. [ 655.529110][T19914] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3269'. [ 655.589291][ T1148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.651406][T19910] lo speed is unknown, defaulting to 1000 [ 655.662408][T19910] lo speed is unknown, defaulting to 1000 [ 655.703566][ T1148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.817334][ T1148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.025304][T19910] chnl_net:caif_netlink_parms(): no params data found [ 656.109796][ T1148] bridge_slave_1: left allmulticast mode [ 656.112728][ T1148] bridge_slave_1: left promiscuous mode [ 656.118195][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.130448][ T1148] bridge_slave_0: left allmulticast mode [ 656.138459][ T1148] bridge_slave_0: left promiscuous mode [ 656.141048][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.562544][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.573297][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.578935][ T1148] bond0 (unregistering): Released all slaves [ 656.699344][T19910] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.702640][T19910] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.705847][T19910] bridge_slave_0: entered allmulticast mode [ 656.713722][T19910] bridge_slave_0: entered promiscuous mode [ 656.718583][T19910] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.721809][T19910] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.725184][T19910] bridge_slave_1: entered allmulticast mode [ 656.729268][T19910] bridge_slave_1: entered promiscuous mode [ 656.873179][T19953] ip6t_srh: unknown srh invflags 6BE9 [ 656.877458][T19953] ubi: mtd0 is already attached to ubi31 [ 656.889067][T19910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.925632][T19910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.998435][T19910] team0: Port device team_slave_0 added [ 657.021825][T19910] team0: Port device team_slave_1 added [ 657.152989][ T1148] hsr_slave_0: left promiscuous mode [ 657.161731][ T1148] hsr_slave_1: left promiscuous mode [ 657.171187][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.177469][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.181910][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.185039][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.226187][ T1148] veth1_macvtap: left promiscuous mode [ 657.229867][ T1148] veth0_macvtap: left promiscuous mode [ 657.231561][ T1148] veth1_vlan: left promiscuous mode [ 657.233701][ T1148] veth0_vlan: left promiscuous mode [ 657.537315][T18156] Bluetooth: hci1: command tx timeout [ 658.013815][T19974] ip6t_srh: unknown srh invflags 6BE9 [ 658.017515][T19974] ubi: mtd0 is already attached to ubi31 [ 658.054562][T19975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3279'. [ 658.306164][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 658.393528][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 658.922740][T19985] Cannot find del_set index 3 as target [ 658.942021][T19985] netlink: 'syz.0.3280': attribute type 11 has an invalid length. [ 658.944978][T19985] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3280'. [ 659.102301][T19988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3282'. [ 659.379722][T19910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.382558][T19910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.391788][T19910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.434340][T19910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.436722][T19910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.445786][T19910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.546423][T19910] hsr_slave_0: entered promiscuous mode [ 659.549433][T19910] hsr_slave_1: entered promiscuous mode [ 659.552943][T19910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.555932][T19910] Cannot create hsr debugfs directory [ 659.612389][T18156] Bluetooth: hci1: command tx timeout [ 659.854392][T20002] Cannot find del_set index 3 as target [ 659.861470][T20002] netlink: 'syz.2.3283': attribute type 11 has an invalid length. [ 659.864739][T20002] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3283'. [ 660.301314][T19910] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 660.316028][T19910] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 660.322035][T19910] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 660.334180][T19910] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 660.400315][T19910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.456657][T19910] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.486119][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.489237][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.499533][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.502948][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.553709][T19910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 660.702853][T19910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.746764][T19910] veth0_vlan: entered promiscuous mode [ 660.758282][T19910] veth1_vlan: entered promiscuous mode [ 660.797933][T19910] veth0_macvtap: entered promiscuous mode [ 660.814138][T19910] veth1_macvtap: entered promiscuous mode [ 660.828841][T19910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.886273][T20034] ip6t_srh: unknown srh invflags 6BE9 [ 660.888860][T20034] ubi: mtd0 is already attached to ubi31 [ 660.927714][T20035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3288'. [ 660.943074][T19910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.953230][T19910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.967881][T19910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.971689][T19910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.982353][T19910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.127689][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.148338][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.252852][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.263331][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.615810][T20045] sd 0:0:0:0: PR command failed: 1026 [ 661.617628][T20045] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 661.619814][T20045] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 661.944437][T20062] Cannot find del_set index 3 as target [ 661.947159][T20062] netlink: 'syz.1.3296': attribute type 11 has an invalid length. [ 661.950353][T20062] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3296'. [ 661.950377][T20065] Cannot find del_set index 3 as target [ 661.992624][T20065] netlink: 'syz.2.3297': attribute type 11 has an invalid length. [ 661.995923][T20065] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3297'. [ 662.520290][T20085] netfs: Couldn't get user pages (rc=-14) [ 662.612470][T20095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3299'. [ 662.786362][T20104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3300'. [ 663.328017][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.095759][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 664.102015][ T5939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 664.105681][ T5939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 664.116265][ T5939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 664.119147][ T5939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 664.155809][T20146] lo speed is unknown, defaulting to 1000 [ 664.158880][T20146] lo speed is unknown, defaulting to 1000 [ 664.358419][T20146] chnl_net:caif_netlink_parms(): no params data found [ 664.461992][T20146] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.464670][T20146] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.467070][T20146] bridge_slave_0: entered allmulticast mode [ 664.469795][T20146] bridge_slave_0: entered promiscuous mode [ 664.473165][T20146] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.475519][T20146] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.477889][T20146] bridge_slave_1: entered allmulticast mode [ 664.480663][T20146] bridge_slave_1: entered promiscuous mode [ 664.514887][T20146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.519710][T20146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.554722][T20146] team0: Port device team_slave_0 added [ 664.558228][T20146] team0: Port device team_slave_1 added [ 664.588024][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.621690][T20146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.624952][T20146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.636368][T20146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.646144][T20146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.649131][T20146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.660718][T20146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.686361][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.738287][T20146] hsr_slave_0: entered promiscuous mode [ 664.741584][T20146] hsr_slave_1: entered promiscuous mode [ 664.744927][T20146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 664.749722][T20146] Cannot create hsr debugfs directory [ 664.792771][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.945540][T20172] Cannot find del_set index 3 as target [ 664.949750][T20172] netlink: 'syz.2.3308': attribute type 11 has an invalid length. [ 664.952530][T20172] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3308'. [ 665.063274][T20177] Cannot find del_set index 3 as target [ 665.069177][T20177] netlink: 'syz.0.3309': attribute type 11 has an invalid length. [ 665.071867][T20177] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3309'. [ 665.088104][ T13] bridge_slave_1: left allmulticast mode [ 665.090604][ T13] bridge_slave_1: left promiscuous mode [ 665.095355][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.100665][ T13] bridge_slave_0: left allmulticast mode [ 665.103552][ T13] bridge_slave_0: left promiscuous mode [ 665.105658][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.509914][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.517843][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.521820][ T13] bond0 (unregistering): Released all slaves [ 665.792325][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 665.911359][T20205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3316'. [ 665.943066][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 665.943554][T20207] ip6t_srh: unknown srh invflags 6BE9 [ 665.951224][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 665.955912][T20207] ubi: mtd0 is already attached to ubi31 [ 665.962375][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 665.966516][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 665.995967][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 666.000348][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 666.027438][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 666.031444][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.178223][ T13] hsr_slave_0: left promiscuous mode [ 666.180813][ T13] hsr_slave_1: left promiscuous mode [ 666.183453][T18156] Bluetooth: hci1: command tx timeout [ 666.193450][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.196127][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.199636][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.205787][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.257082][ T13] veth1_macvtap: left promiscuous mode [ 666.259149][ T13] veth0_macvtap: left promiscuous mode [ 666.261225][ T13] veth1_vlan: left promiscuous mode [ 666.263908][ T13] veth0_vlan: left promiscuous mode [ 666.273754][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 666.275748][ T10] usbtmc 6-1:16.0: can't read capabilities [ 666.635132][T20182] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 666.636177][T17832] usb 6-1: USB disconnect, device number 25 [ 666.646552][T20220] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -19 [ 666.840403][T20226] Cannot find del_set index 3 as target [ 666.875576][T20226] netlink: 'syz.2.3318': attribute type 11 has an invalid length. [ 666.879034][T20226] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3318'. [ 667.263779][ T13] team0 (unregistering): Port device team_slave_1 removed [ 667.350065][ T13] team0 (unregistering): Port device team_slave_0 removed [ 667.730463][T20236] Cannot find del_set index 3 as target [ 668.262612][T18156] Bluetooth: hci1: command tx timeout [ 668.438927][T20146] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 668.459317][T20146] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 668.469359][T20146] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 668.476330][T20146] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 668.502581][T20236] netlink: 'syz.1.3320': attribute type 11 has an invalid length. [ 668.505236][T20236] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3320'. [ 668.648378][T20146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.664949][T20243] Cannot find del_set index 3 as target [ 668.666268][T20146] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.670691][T20243] netlink: 'syz.0.3323': attribute type 11 has an invalid length. [ 668.674352][T20243] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3323'. [ 668.718508][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.720792][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.726882][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.729250][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.806203][ T40] audit: type=1804 audit(1747701083.041:787): pid=20261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3325" name="/newroot/834/bus/file0" dev="overlay" ino=4630 res=1 errno=0 [ 668.908318][T20146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.012667][T20146] veth0_vlan: entered promiscuous mode [ 669.023668][T20146] veth1_vlan: entered promiscuous mode [ 669.041755][T20146] veth0_macvtap: entered promiscuous mode [ 669.051405][T20146] veth1_macvtap: entered promiscuous mode [ 669.076092][T20146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.084362][T20146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.091984][T20146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.102004][T20146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.108351][T20146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.111411][T20146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.185440][T19716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.202137][T19716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.220043][T19716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.238736][T19716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.050243][T20316] ip6t_srh: unknown srh invflags 6BE9 [ 670.056935][T20316] ubi: mtd0 is already attached to ubi31 [ 670.846068][T20349] Cannot find del_set index 3 as target [ 670.853405][T20343] netlink: 'syz.0.3334': attribute type 11 has an invalid length. [ 670.856995][T20343] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3334'. [ 671.038776][T20354] Cannot find del_set index 3 as target [ 671.041667][T20354] netlink: 'syz.1.3335': attribute type 11 has an invalid length. [ 671.044369][T20354] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3335'. [ 671.149143][T20370] Cannot find del_set index 3 as target [ 671.154949][T20370] netlink: 'syz.2.3336': attribute type 11 has an invalid length. [ 671.157620][T20370] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3336'. [ 672.438648][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.525177][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 673.534100][ T5939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 673.538285][ T5939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 673.541246][T20444] ip6t_srh: unknown srh invflags 6BE9 [ 673.542884][ T5939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 673.545320][T20444] ubi: mtd0 is already attached to ubi31 [ 673.546655][ T5939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 673.708825][T20442] lo speed is unknown, defaulting to 1000 [ 673.725362][T20442] lo speed is unknown, defaulting to 1000 [ 674.016941][T20442] chnl_net:caif_netlink_parms(): no params data found [ 674.133971][T20442] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.137218][T20442] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.140420][T20442] bridge_slave_0: entered allmulticast mode [ 674.144219][T20442] bridge_slave_0: entered promiscuous mode [ 674.148413][T20442] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.151294][T20442] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.154419][T20442] bridge_slave_1: entered allmulticast mode [ 674.157668][T20442] bridge_slave_1: entered promiscuous mode [ 674.219773][T20442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.227142][T20442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.267932][T20442] team0: Port device team_slave_0 added [ 674.274295][T20442] team0: Port device team_slave_1 added [ 674.307270][T20442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.309564][T20442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.318460][T20442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.323036][T20442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.325334][T20442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.335211][T20442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.496980][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.511234][T20442] hsr_slave_0: entered promiscuous mode [ 674.514565][T20442] hsr_slave_1: entered promiscuous mode [ 674.516795][T20442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 674.519275][T20442] Cannot create hsr debugfs directory [ 674.628770][T20477] Cannot find del_set index 3 as target [ 674.633787][T20477] netlink: 'syz.1.3346': attribute type 11 has an invalid length. [ 674.636409][T20477] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3346'. [ 674.646382][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.782527][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.924958][T20484] block device autoloading is deprecated and will be removed. [ 675.031021][T20487] Cannot find del_set index 3 as target [ 675.042798][T20487] netlink: 'syz.2.3348': attribute type 11 has an invalid length. [ 675.045379][T20487] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3348'. [ 675.057675][ T12] bridge_slave_1: left allmulticast mode [ 675.060060][ T12] bridge_slave_1: left promiscuous mode [ 675.064545][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.074716][ T12] bridge_slave_0: left allmulticast mode [ 675.076617][ T12] bridge_slave_0: left promiscuous mode [ 675.078665][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.523332][T20501] ip6t_srh: unknown srh invflags 6BE9 [ 675.527775][T20501] ubi: mtd0 is already attached to ubi31 [ 675.613491][T18156] Bluetooth: hci1: command tx timeout [ 675.658383][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.665246][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.670944][ T12] bond0 (unregistering): Released all slaves [ 676.266103][ T12] hsr_slave_0: left promiscuous mode [ 676.272164][ T12] hsr_slave_1: left promiscuous mode [ 676.274381][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.276885][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.281225][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.283702][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.323165][ T12] veth1_macvtap: left promiscuous mode [ 676.325040][ T12] veth0_macvtap: left promiscuous mode [ 676.327226][ T12] veth1_vlan: left promiscuous mode [ 676.329438][ T12] veth0_vlan: left promiscuous mode [ 677.154661][ T12] team0 (unregistering): Port device team_slave_1 removed [ 677.253837][ T12] team0 (unregistering): Port device team_slave_0 removed [ 677.692305][T18156] Bluetooth: hci1: command tx timeout [ 678.004217][T20442] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 678.009597][T20442] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 678.013764][T20442] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 678.018009][T20442] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 678.067856][T20442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.085238][T20442] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.091353][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.093930][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.104881][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.107480][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.170065][T20442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 678.305234][T20442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.338473][T20442] veth0_vlan: entered promiscuous mode [ 678.344694][T20442] veth1_vlan: entered promiscuous mode [ 678.359315][T20442] veth0_macvtap: entered promiscuous mode [ 678.363165][T20442] veth1_macvtap: entered promiscuous mode [ 678.371805][T20442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.380278][T20442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.385637][T20442] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.388501][T20442] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.391047][T20442] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.394555][T20442] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.404763][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 678.464337][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.471435][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.493459][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.496134][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.552354][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 678.558854][ T10] usb 5-1: config 0 has no interfaces? [ 678.561434][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 678.566099][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.574535][ T10] usb 5-1: config 0 descriptor?? [ 678.791979][ T10] usb 5-1: USB disconnect, device number 23 [ 678.966712][T20608] ip6t_srh: unknown srh invflags 6BE9 [ 678.978375][T20608] ubi: mtd0 is already attached to ubi31 [ 679.568377][T20636] ip6t_srh: unknown srh invflags 6BE9 [ 679.570946][T20636] ubi: mtd0 is already attached to ubi31 [ 680.145356][T20654] Cannot find del_set index 3 as target [ 680.150413][T20654] netlink: 'syz.2.3369': attribute type 11 has an invalid length. [ 680.153127][T20654] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3369'. [ 680.435114][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.464183][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 681.470382][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 681.474817][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 681.479197][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 681.481911][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 681.523042][T20693] lo speed is unknown, defaulting to 1000 [ 681.525663][T20693] lo speed is unknown, defaulting to 1000 [ 681.542194][T17832] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 681.712436][T17832] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 681.715585][T17832] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 681.718681][T17832] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72 [ 681.737201][T17832] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 681.740152][T17832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.743737][T17832] usb 6-1: Product: syz [ 681.745298][T17832] usb 6-1: Manufacturer: syz [ 681.746845][T17832] usb 6-1: SerialNumber: syz [ 681.755526][T20687] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 681.887598][T20693] chnl_net:caif_netlink_parms(): no params data found [ 681.967990][T17832] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 682.023041][T20693] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.025655][T20693] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.028494][T20693] bridge_slave_0: entered allmulticast mode [ 682.031777][T20693] bridge_slave_0: entered promiscuous mode [ 682.037020][T20693] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.039996][T20693] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.043034][T20693] bridge_slave_1: entered allmulticast mode [ 682.046428][T20693] bridge_slave_1: entered promiscuous mode [ 682.129397][T20693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.137167][T20693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.168458][ C3] usblp0: nonzero read bulk status received: -71 [ 682.191331][T20712] Cannot find del_set index 3 as target [ 682.197076][T20712] netlink: 'syz.0.3376': attribute type 11 has an invalid length. [ 682.199900][T20712] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3376'. [ 682.317873][T20693] team0: Port device team_slave_0 added [ 682.333133][T20693] team0: Port device team_slave_1 added [ 682.383894][T20693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.386357][T20693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.396661][T20693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.407661][T20693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.410163][T20693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.421917][T20693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.484657][T20693] hsr_slave_0: entered promiscuous mode [ 682.487088][T20693] hsr_slave_1: entered promiscuous mode [ 682.489449][T20693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 682.494786][T20693] Cannot create hsr debugfs directory [ 682.538244][ T5981] usb 6-1: USB disconnect, device number 26 [ 682.543224][ T5981] usblp0: removed [ 682.975982][T20735] block device autoloading is deprecated and will be removed. [ 683.141706][T20737] binder: 20736:20737 ioctl c0306201 800000c0 returned -14 [ 683.180985][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.237593][T20744] netfs: Couldn't get user pages (rc=-14) [ 683.310704][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.400434][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.542217][ T5948] Bluetooth: hci1: command tx timeout [ 683.573044][ T12] bridge_slave_1: left allmulticast mode [ 683.575418][ T12] bridge_slave_1: left promiscuous mode [ 683.577343][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.581135][ T12] bridge_slave_0: left allmulticast mode [ 683.583727][ T12] bridge_slave_0: left promiscuous mode [ 683.585828][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.825684][T20757] ip6t_srh: unknown srh invflags 6BE9 [ 683.828843][T20757] ubi: mtd0 is already attached to ubi31 [ 683.924652][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.929930][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.935401][ T12] bond0 (unregistering): Released all slaves [ 684.388568][ T12] hsr_slave_0: left promiscuous mode [ 684.391072][ T12] hsr_slave_1: left promiscuous mode [ 684.401572][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.404546][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.488159][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.490659][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.537093][T20789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3389'. [ 685.008216][ T12] veth1_macvtap: left promiscuous mode [ 685.010133][ T12] veth0_macvtap: left promiscuous mode [ 685.011996][ T12] veth1_vlan: left promiscuous mode [ 685.013879][ T12] veth0_vlan: left promiscuous mode [ 685.443597][T20804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3390'. [ 685.622235][ T5948] Bluetooth: hci1: command tx timeout [ 686.021849][ T12] team0 (unregistering): Port device team_slave_1 removed [ 686.129042][ T12] team0 (unregistering): Port device team_slave_0 removed [ 686.843395][T20693] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 686.978955][T20693] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 686.993245][T20693] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 686.999973][T20693] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 687.173136][T20822] ip6t_srh: unknown srh invflags 6BE9 [ 687.177053][T20822] ubi: mtd0 is already attached to ubi31 [ 687.259179][T20693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.272144][T20693] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.277624][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.279892][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.295741][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.298029][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.349845][T20693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 687.353668][T20693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 687.421474][T20845] block device autoloading is deprecated and will be removed. [ 687.495716][T20693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.521469][T20693] veth0_vlan: entered promiscuous mode [ 687.529845][T20693] veth1_vlan: entered promiscuous mode [ 687.550353][T20693] veth0_macvtap: entered promiscuous mode [ 687.557700][T20693] veth1_macvtap: entered promiscuous mode [ 687.567290][T20693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.577217][T20693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.583934][T20693] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.587527][T20693] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.590367][T20693] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.595039][T20693] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.676924][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.679498][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.692443][ T5948] Bluetooth: hci1: command tx timeout [ 687.714297][T19716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.716924][T19716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.920258][T20866] ip6t_srh: unknown srh invflags 6BE9 [ 687.923679][T20866] ubi: mtd0 is already attached to ubi31 [ 688.509567][T20878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3402'. [ 688.863452][T20885] ip6t_srh: unknown srh invflags 6BE9 [ 688.866075][T20885] ubi: mtd0 is already attached to ubi31 [ 689.010155][T20893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3407'. [ 690.078077][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.246261][T20913] block nbd2: shutting down sockets [ 690.277343][T20920] ip6t_srh: unknown srh invflags 6BE9 [ 690.280580][T20920] ubi: mtd0 is already attached to ubi31 [ 691.305046][T18156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 691.314635][T18156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 691.319076][T18156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 691.324229][T18156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 691.328443][T18156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 691.342303][T20944] ip6t_srh: unknown srh invflags 6BE9 [ 691.344965][T20944] ubi: mtd0 is already attached to ubi31 [ 691.359844][T20955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3415'. [ 691.671243][T20950] lo speed is unknown, defaulting to 1000 [ 691.675495][T20950] lo speed is unknown, defaulting to 1000 [ 691.890131][T20950] chnl_net:caif_netlink_parms(): no params data found [ 692.007172][T20950] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.010754][T20950] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.016190][T20950] bridge_slave_0: entered allmulticast mode [ 692.264031][T20950] bridge_slave_0: entered promiscuous mode [ 692.268434][T20950] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.270889][T20950] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.274661][T20950] bridge_slave_1: entered allmulticast mode [ 692.277806][T20950] bridge_slave_1: entered promiscuous mode [ 692.299245][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.388527][T20950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.412008][T20978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3419'. [ 692.418415][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.428582][T20950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.468769][T20950] team0: Port device team_slave_0 added [ 692.474185][T20950] team0: Port device team_slave_1 added [ 692.594153][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.605114][T20950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.608127][T20950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.618593][T20950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.623536][T20950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.625944][T20950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.634659][T20950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.662369][ T29] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 692.708379][T20950] hsr_slave_0: entered promiscuous mode [ 692.710955][T20950] hsr_slave_1: entered promiscuous mode [ 692.715560][T20950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 692.718120][T20950] Cannot create hsr debugfs directory [ 692.862187][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 692.868636][ T29] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 692.871317][ T29] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 692.875036][ T29] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 692.878582][ T29] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 692.878604][ T12] bridge_slave_1: left allmulticast mode [ 692.883358][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 692.887260][ T29] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 692.888736][ T12] bridge_slave_1: left promiscuous mode [ 692.891648][ T29] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 692.891662][ T29] usb 5-1: Product: syz [ 692.891670][ T29] usb 5-1: Manufacturer: syz [ 692.894472][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.897251][ T29] usb 5-1: SerialNumber: syz [ 692.905808][ T29] usb 5-1: config 0 descriptor?? [ 692.922924][ T12] bridge_slave_0: left allmulticast mode [ 692.924030][ T29] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 692.925413][ T12] bridge_slave_0: left promiscuous mode [ 692.929482][ T29] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 692.931028][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.173809][T21002] ip6t_srh: unknown srh invflags 6BE9 [ 693.181413][T21002] ubi: mtd0 is already attached to ubi31 [ 693.369394][T20979] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 693.373379][ T58] usb 5-1: USB disconnect, device number 24 [ 693.373400][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 693.374859][T21007] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 693.380383][ T58] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 693.381102][T18156] Bluetooth: hci1: command tx timeout [ 693.488550][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.494098][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.500380][ T12] bond0 (unregistering): Released all slaves [ 694.132735][ T12] hsr_slave_0: left promiscuous mode [ 694.135404][ T12] hsr_slave_1: left promiscuous mode [ 694.137673][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.140104][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.154208][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.156703][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.198306][ T12] veth1_macvtap: left promiscuous mode [ 694.200370][ T12] veth0_macvtap: left promiscuous mode [ 694.202570][ T12] veth1_vlan: left promiscuous mode [ 694.204494][ T12] veth0_vlan: left promiscuous mode [ 694.765802][T21055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3428'. [ 695.094214][ T12] team0 (unregistering): Port device team_slave_1 removed [ 695.285299][ T12] team0 (unregistering): Port device team_slave_0 removed [ 695.452339][T18156] Bluetooth: hci1: command tx timeout [ 696.061073][T20950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 696.073151][T20950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 696.079344][T20950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 696.089221][T21070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3430'. [ 696.119585][T20950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 696.209138][T20950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.218952][T20950] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.225753][T19716] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.228178][T19716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.236197][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.239088][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.414984][T20950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.468774][T20950] veth0_vlan: entered promiscuous mode [ 696.473967][T20950] veth1_vlan: entered promiscuous mode [ 696.501394][T20950] veth0_macvtap: entered promiscuous mode [ 696.511292][T20950] veth1_macvtap: entered promiscuous mode [ 696.526090][T20950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.534502][T20950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.543745][T20950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.544339][T21088] ip6t_srh: unknown srh invflags 6BE9 [ 696.546570][T20950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.549946][T21088] ubi: mtd0 is already attached to ubi31 [ 696.561334][T20950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.566839][T20950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.712327][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.714809][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.737079][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.739629][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.332420][T21117] Cannot find del_set index 3 as target [ 698.338100][T21117] netlink: 'syz.0.3441': attribute type 11 has an invalid length. [ 698.340660][T21117] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3441'. [ 698.550427][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.871515][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 699.878832][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 699.884015][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 699.887562][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 699.890420][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 699.936806][T21145] lo speed is unknown, defaulting to 1000 [ 699.940706][T21145] lo speed is unknown, defaulting to 1000 [ 700.206705][T21145] chnl_net:caif_netlink_parms(): no params data found [ 700.224601][T21158] ip6t_srh: unknown srh invflags 6BE9 [ 700.228325][T21158] ubi: mtd0 is already attached to ubi31 [ 700.336001][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.362757][T21162] ip6t_srh: unknown srh invflags 6BE9 [ 700.386905][T21145] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.390094][T21145] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.393604][T21145] bridge_slave_0: entered allmulticast mode [ 700.397632][T21145] bridge_slave_0: entered promiscuous mode [ 700.428506][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.436221][T21145] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.438519][T21145] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.440918][T21145] bridge_slave_1: entered allmulticast mode [ 700.445265][T21145] bridge_slave_1: entered promiscuous mode [ 700.476201][T21156] ubi: mtd0 is already attached to ubi31 [ 700.479373][T21145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.495187][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.503710][T21145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.539410][T21145] team0: Port device team_slave_0 added [ 700.543900][T21145] team0: Port device team_slave_1 added [ 700.589680][T21145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.592240][T21145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.600777][T21145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.606686][T21145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.609012][T21145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.617843][T21145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.680738][T21145] hsr_slave_0: entered promiscuous mode [ 700.683979][T21145] hsr_slave_1: entered promiscuous mode [ 700.686194][T21145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.688749][T21145] Cannot create hsr debugfs directory [ 700.815208][ T13] bridge_slave_1: left allmulticast mode [ 700.817107][ T13] bridge_slave_1: left promiscuous mode [ 700.819021][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.822999][ T13] bridge_slave_0: left allmulticast mode [ 700.824982][ T13] bridge_slave_0: left promiscuous mode [ 700.826971][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.022268][ T833] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 701.122030][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.127052][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.131072][ T13] bond0 (unregistering): Released all slaves [ 701.135154][T21178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3453'. [ 701.183588][ T833] usb 7-1: Using ep0 maxpacket: 32 [ 701.191899][ T833] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 701.197715][ T833] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 701.200609][ T833] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 701.206960][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 701.210253][ T833] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 701.214284][ T833] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 701.218553][ T833] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 701.221593][ T833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.237459][ T833] usb 7-1: config 0 descriptor?? [ 701.449081][ T833] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 701.457649][ T833] usb 7-1: USB disconnect, device number 16 [ 701.461088][ T833] usblp0: removed [ 701.563672][ T13] hsr_slave_0: left promiscuous mode [ 701.565922][ T13] hsr_slave_1: left promiscuous mode [ 701.568020][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.570707][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.575972][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.578492][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.631241][ T13] veth1_macvtap: left promiscuous mode [ 701.638146][ T13] veth0_macvtap: left promiscuous mode [ 701.640541][ T13] veth1_vlan: left promiscuous mode [ 701.644614][ T13] veth0_vlan: left promiscuous mode [ 701.956321][ T5948] Bluetooth: hci1: command tx timeout [ 702.245450][ T833] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 702.313777][T21196] ip6t_srh: unknown srh invflags 6BE9 [ 702.326296][T21196] ubi: mtd0 is already attached to ubi31 [ 702.412185][ T833] usb 7-1: Using ep0 maxpacket: 32 [ 702.416759][ T833] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 702.420081][ T833] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 702.423605][ T833] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 702.427701][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 702.430827][ T833] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 702.434433][ T833] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 702.438614][ T833] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 702.442866][ T833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.457191][ T833] usb 7-1: config 0 descriptor?? [ 702.524295][ T13] team0 (unregistering): Port device team_slave_1 removed [ 702.613689][ T13] team0 (unregistering): Port device team_slave_0 removed [ 702.676095][T21198] ip6t_srh: unknown srh invflags 6BE9 [ 702.678536][T21198] ubi: mtd0 is already attached to ubi31 [ 702.874315][ T833] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 703.070831][T17832] usb 7-1: USB disconnect, device number 17 [ 703.086875][T17832] usblp0: removed [ 703.521774][T21145] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 703.527455][T21145] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 703.531523][T21145] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 703.535838][T21145] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 703.593987][T21145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.608299][T21145] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.614013][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.616250][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.622240][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.624643][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.748149][T21145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.770815][T21145] veth0_vlan: entered promiscuous mode [ 703.778534][T21145] veth1_vlan: entered promiscuous mode [ 703.793265][T21226] fuse: root generation should be zero [ 703.798786][T21145] veth0_macvtap: entered promiscuous mode [ 703.812833][T21145] veth1_macvtap: entered promiscuous mode [ 703.827073][T21145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.834119][T21145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.840075][T21145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.843304][T21145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.846076][T21145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.848895][T21145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.902543][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.905238][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.939348][T19716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.942776][T19716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.219588][T21241] ip6t_srh: unknown srh invflags 6BE9 [ 704.224801][T21241] ubi: mtd0 is already attached to ubi31 [ 704.459594][ T8867] bond0: (slave syz_tun): Releasing backup interface [ 704.535452][ T8867] veth0: left promiscuous mode [ 704.540463][ T8867] veth1_to_team: left promiscuous mode [ 704.830935][T18156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 704.836350][T18156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 704.841777][T18156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 704.849539][T18156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 704.854038][T18156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 704.893988][T21252] lo speed is unknown, defaulting to 1000 [ 704.897189][T21252] lo speed is unknown, defaulting to 1000 [ 705.168488][T21252] chnl_net:caif_netlink_parms(): no params data found [ 705.503260][T19716] bond0 (unregistering): Released all slaves [ 705.514944][ T9484] veth0: left promiscuous mode [ 705.516690][ T9484] veth1_to_team: left promiscuous mode [ 705.590813][T19716] tipc: Left network mode [ 705.590939][T21252] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.597958][T21252] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.601023][T21252] bridge_slave_0: entered allmulticast mode [ 705.605242][T21252] bridge_slave_0: entered promiscuous mode [ 705.627270][T21252] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.630120][T21252] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.634867][T21252] bridge_slave_1: entered allmulticast mode [ 705.638376][T21252] bridge_slave_1: entered promiscuous mode [ 705.733394][T21252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.755826][T21252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.844054][T21252] team0: Port device team_slave_0 added [ 705.849345][T21252] team0: Port device team_slave_1 added [ 705.872533][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 705.876171][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 705.879371][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 705.885848][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 705.890093][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 705.973940][T21252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.976441][T21252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.989070][T21252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.997001][T19716] hsr_slave_0: left promiscuous mode [ 705.999297][T19716] hsr_slave_1: left promiscuous mode [ 706.905718][ T5948] Bluetooth: hci1: command tx timeout [ 707.296996][T18156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 707.301458][T18156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 707.309942][T18156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 707.320261][T18156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 707.326489][T18156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 707.572846][T21270] lo speed is unknown, defaulting to 1000 [ 707.581116][T21252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.587401][T21252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.598492][T21252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.621431][T21270] lo speed is unknown, defaulting to 1000 [ 707.631873][T21280] lo speed is unknown, defaulting to 1000 [ 707.674936][T21285] netlink: 'syz.2.3474': attribute type 5 has an invalid length. [ 707.678340][T21285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3474'. [ 707.690320][T21252] hsr_slave_0: entered promiscuous mode [ 707.693034][T21252] hsr_slave_1: entered promiscuous mode [ 707.733859][T21287] input: syz1 as /devices/virtual/input/input47 [ 707.834277][T21280] lo speed is unknown, defaulting to 1000 [ 707.932375][T18156] Bluetooth: hci2: command tx timeout [ 708.049181][T21252] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 708.057306][T21252] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 708.069070][T21252] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 708.073691][T21252] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 708.091396][T21270] chnl_net:caif_netlink_parms(): no params data found [ 708.101762][T19716] IPVS: stop unused estimator thread 0... [ 708.128036][T21301] ip6t_srh: unknown srh invflags 6BE9 [ 708.134853][T21301] ubi: mtd0 is already attached to ubi31 [ 708.331752][T19716] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.372070][T21270] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.374641][T21270] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.377067][T21270] bridge_slave_0: entered allmulticast mode [ 708.379820][T21270] bridge_slave_0: entered promiscuous mode [ 708.388100][T21270] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.390569][T21270] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.394818][T21270] bridge_slave_1: entered allmulticast mode [ 708.397738][T21270] bridge_slave_1: entered promiscuous mode [ 708.454568][T21270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.471962][T19716] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.481355][T21270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.484977][T21280] chnl_net:caif_netlink_parms(): no params data found [ 708.570208][T19716] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.585362][T21270] team0: Port device team_slave_0 added [ 708.591361][T21270] team0: Port device team_slave_1 added [ 708.717938][T19716] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.756263][T21270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.759346][T21270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.771982][T21270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.806113][T21270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.808639][T21270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.819812][T21270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.889874][T21280] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.894614][T21280] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.898307][T21280] bridge_slave_0: entered allmulticast mode [ 708.907374][T21280] bridge_slave_0: entered promiscuous mode [ 708.951911][T21270] hsr_slave_0: entered promiscuous mode [ 708.955395][T21270] hsr_slave_1: entered promiscuous mode [ 708.958629][T21270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 708.961939][T21270] Cannot create hsr debugfs directory [ 708.966754][T21280] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.970072][T21280] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.973333][ T5948] Bluetooth: hci1: command tx timeout [ 708.973856][T21280] bridge_slave_1: entered allmulticast mode [ 708.979822][T21280] bridge_slave_1: entered promiscuous mode [ 708.988613][T21252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.004050][T21252] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.109793][T21280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.188581][T21280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.220550][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.223750][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.308665][T21280] team0: Port device team_slave_0 added [ 709.329498][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.332745][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.361901][T21280] team0: Port device team_slave_1 added [ 709.381764][T19716] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 709.387973][T19716] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 709.452307][ T5948] Bluetooth: hci3: command tx timeout [ 709.489397][T21280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.492854][T21280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.500620][T21280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.507031][T21280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.509599][T21280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.518663][T21280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.527069][T19716] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 709.531090][T19716] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 709.631628][T21252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 709.638745][T21252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 709.660093][T19716] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 709.665468][T19716] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 709.717847][T21280] hsr_slave_0: entered promiscuous mode [ 709.720268][T21280] hsr_slave_1: entered promiscuous mode [ 709.734526][T21280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 709.737056][T21280] Cannot create hsr debugfs directory [ 709.769191][T19716] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 709.772987][T19716] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 709.781884][ T1332] libceph: connect (1)[c::]:6789 error -101 [ 709.785670][ T1332] libceph: mon0 (1)[c::]:6789 connect error [ 709.905369][T21270] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 709.925589][T21337] ceph: No mds server is up or the cluster is laggy [ 709.936063][T21270] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 709.962742][T21270] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 709.981263][T21270] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 710.006799][T21252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.012394][ T5948] Bluetooth: hci2: command tx timeout [ 710.042907][T19716] bridge_slave_1: left allmulticast mode [ 710.045059][T19716] bridge_slave_1: left promiscuous mode [ 710.047491][T19716] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.051329][T19716] bridge_slave_0: left allmulticast mode [ 710.054654][T19716] bridge_slave_0: left promiscuous mode [ 710.056989][T19716] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.593443][T19716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.597843][T19716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.601510][T19716] bond0 (unregistering): Released all slaves [ 710.700623][T19716] bond0 (unregistering): Released all slaves [ 710.928870][T19716] tipc: Left network mode [ 711.012874][T21252] veth0_vlan: entered promiscuous mode [ 711.021948][T21270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.040595][T21252] veth1_vlan: entered promiscuous mode [ 711.052302][ T5948] Bluetooth: hci1: command tx timeout [ 711.054753][T21270] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.080220][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.083890][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.116233][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.119068][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.138366][T21252] veth0_macvtap: entered promiscuous mode [ 711.147777][T21252] veth1_macvtap: entered promiscuous mode [ 711.213637][T21252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.249370][T21252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.279839][T21252] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.283417][T21252] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.286358][T21252] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.289102][T21252] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.297606][T21280] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 711.319760][T21280] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 711.374738][T21280] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 711.383581][T21280] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 711.471636][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.485714][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.543654][ T5948] Bluetooth: hci3: command tx timeout [ 711.546915][T19716] mac80211_hwsim hwsim7 wlan0 (unregistering): left allmulticast mode [ 711.550188][T19716] mac80211_hwsim hwsim7 wlan0 (unregistering): left promiscuous mode [ 711.581860][T21270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.599124][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.601586][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.636347][T21280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.672331][T21280] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.680174][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.682674][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.691284][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.693706][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.880195][T21270] veth0_vlan: entered promiscuous mode [ 711.898874][T21270] veth1_vlan: entered promiscuous mode [ 711.933642][T21280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.961463][T19716] hsr_slave_0: left promiscuous mode [ 711.963938][T19716] hsr_slave_1: left promiscuous mode [ 711.966028][T19716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.968470][T19716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.971275][T19716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.981102][T19716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.986567][T19716] hsr_slave_0: left promiscuous mode [ 711.988711][T19716] hsr_slave_1: left promiscuous mode [ 712.069529][T19716] veth1_macvtap: left promiscuous mode [ 712.071409][T19716] veth0_macvtap: left promiscuous mode [ 712.073480][T19716] veth1_vlan: left promiscuous mode [ 712.075300][T19716] veth0_vlan: left promiscuous mode [ 712.078977][T19716] veth1_macvtap: left promiscuous mode [ 712.081440][T19716] veth0_macvtap: left promiscuous mode [ 712.088004][T19716] veth1_vlan: left promiscuous mode [ 712.102330][ T5948] Bluetooth: hci2: command tx timeout [ 712.300837][T21406] Cannot find del_set index 3 as target [ 712.313139][T21406] netlink: 'syz.2.3485': attribute type 11 has an invalid length. [ 712.315778][T21406] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3485'. [ 712.978958][T19716] team0 (unregistering): Port device team_slave_1 removed [ 713.067167][T19716] team0 (unregistering): Port device team_slave_0 removed [ 713.142299][ T5948] Bluetooth: hci1: command tx timeout [ 713.622439][ T5948] Bluetooth: hci3: command tx timeout [ 714.172440][ T5948] Bluetooth: hci2: command tx timeout [ 715.225493][T21270] veth0_macvtap: entered promiscuous mode [ 715.231807][T21270] veth1_macvtap: entered promiscuous mode [ 715.361529][T21280] veth0_vlan: entered promiscuous mode [ 715.373646][T21270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.406699][T21280] veth1_vlan: entered promiscuous mode [ 715.416717][T21270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.442981][T21270] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.446856][T21270] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.450636][T21270] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.459258][T21270] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.470442][T21280] veth0_macvtap: entered promiscuous mode [ 715.476140][T21280] veth1_macvtap: entered promiscuous mode [ 715.532731][T21280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.537157][T21280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.591880][T21412] Cannot find del_set index 3 as target [ 715.599623][T21280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.603577][T21280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.606411][T21280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.609290][T21280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.623224][T21412] netlink: 'syz.4.3487': attribute type 11 has an invalid length. [ 715.625828][T21412] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3487'. [ 715.631224][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.634949][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.703728][ T5948] Bluetooth: hci3: command tx timeout [ 715.769905][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.777753][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.786562][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.789175][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.876769][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.879341][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.169770][T21441] block device autoloading is deprecated and will be removed. [ 716.279823][T21440] ip6t_srh: unknown srh invflags 6BE9 [ 716.288919][T21440] ubi: mtd0 is already attached to ubi31 [ 716.482766][T19716] IPVS: stop unused estimator thread 0... [ 716.689311][T19716] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.127540][T19716] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.408892][T19716] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.524930][T19716] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.802380][T19716] bridge_slave_1: left allmulticast mode [ 717.804868][T19716] bridge_slave_1: left promiscuous mode [ 717.807792][T19716] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.811717][T19716] bridge_slave_0: left allmulticast mode [ 717.814020][T19716] bridge_slave_0: left promiscuous mode [ 717.815948][T19716] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.019197][T18156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 718.026680][T18156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 718.035946][T18156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 718.038726][T18156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 718.041318][T18156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 718.113158][T21502] Cannot find del_set index 3 as target [ 718.119159][T21502] netlink: 'syz.4.3494': attribute type 11 has an invalid length. [ 718.122179][T21502] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3494'. [ 718.301672][T19716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.307128][T19716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.311144][T19716] bond0 (unregistering): Released all slaves [ 718.406146][T21498] lo speed is unknown, defaulting to 1000 [ 718.408783][T21498] lo speed is unknown, defaulting to 1000 [ 718.416647][T21507] tipc: Enabled bearer , priority 0 [ 718.436379][T21507] syzkaller0: entered promiscuous mode [ 718.438221][T21507] syzkaller0: entered allmulticast mode [ 718.440468][T21507] tipc: Resetting bearer [ 718.472934][T21506] tipc: Resetting bearer [ 718.790326][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 718.806523][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 718.813702][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 718.825042][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 718.830822][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 719.303401][T21522] ip6t_srh: unknown srh invflags 6BE9 [ 719.306461][T21522] ubi: mtd0 is already attached to ubi31 [ 719.923626][T21506] tipc: Disabling bearer [ 720.010934][T21511] lo speed is unknown, defaulting to 1000 [ 720.018420][T21511] lo speed is unknown, defaulting to 1000 [ 720.108136][ T5948] Bluetooth: hci3: command tx timeout [ 720.116984][T21498] chnl_net:caif_netlink_parms(): no params data found [ 720.264279][T21528] ip6t_srh: unknown srh invflags 6BE9 [ 720.266783][T21528] ubi: mtd0 is already attached to ubi31 [ 720.367037][T21498] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.371103][T21498] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.374600][T21498] bridge_slave_0: entered allmulticast mode [ 720.378628][T21498] bridge_slave_0: entered promiscuous mode [ 720.456516][T19716] hsr_slave_0: left promiscuous mode [ 720.458693][T19716] hsr_slave_1: left promiscuous mode [ 720.460811][T19716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.463458][T19716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.466383][T19716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.468789][T19716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.490922][T19716] veth1_macvtap: left promiscuous mode [ 720.493040][T19716] veth0_macvtap: left promiscuous mode [ 720.494943][T19716] veth1_vlan: left promiscuous mode [ 720.496893][T19716] veth0_vlan: left promiscuous mode [ 720.813934][T21551] Cannot find del_set index 3 as target [ 720.820094][T21551] netlink: 'syz.4.3510': attribute type 11 has an invalid length. [ 720.822738][T21551] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3510'. [ 720.984631][ T5948] Bluetooth: hci2: command tx timeout [ 721.353500][T19716] team0 (unregistering): Port device team_slave_1 removed [ 721.444600][T19716] team0 (unregistering): Port device team_slave_0 removed [ 722.118468][ T40] audit: type=1326 audit(1747701136.351:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21557 comm="syz.2.3512" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x0 [ 722.172324][ T5948] Bluetooth: hci3: command tx timeout [ 722.198066][T21498] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.201198][T21498] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.204650][T21498] bridge_slave_1: entered allmulticast mode [ 722.208798][T21498] bridge_slave_1: entered promiscuous mode [ 722.342539][T21498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.351244][T21498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.446463][T21498] team0: Port device team_slave_0 added [ 722.461775][T21498] team0: Port device team_slave_1 added [ 722.513860][T21498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.516174][T21498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.525503][T21498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.530040][T21498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.532438][T21498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.540633][T21498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.573051][T21567] ip6t_srh: unknown srh invflags 6BE9 [ 722.575476][T21567] ubi: mtd0 is already attached to ubi31 [ 722.584941][T21498] hsr_slave_0: entered promiscuous mode [ 722.587535][T21498] hsr_slave_1: entered promiscuous mode [ 722.590146][T21498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 722.592886][T21498] Cannot create hsr debugfs directory [ 722.648823][T21511] chnl_net:caif_netlink_parms(): no params data found [ 722.819281][T21511] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.821629][T21511] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.824806][T21511] bridge_slave_0: entered allmulticast mode [ 722.827959][T21511] bridge_slave_0: entered promiscuous mode [ 722.842937][T21511] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.846122][T21511] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.849368][T21511] bridge_slave_1: entered allmulticast mode [ 722.853883][T21511] bridge_slave_1: entered promiscuous mode [ 722.921252][T21511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.935321][T21511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.031539][T21511] team0: Port device team_slave_0 added [ 723.054679][ T5948] Bluetooth: hci2: command tx timeout [ 723.059771][T21511] team0: Port device team_slave_1 added [ 723.128718][T21511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.131013][T21511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.139961][T21511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.170350][T19716] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.189905][T21511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.192445][T21511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.200797][T21511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.264085][T19716] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.274046][T21511] hsr_slave_0: entered promiscuous mode [ 723.276538][T21511] hsr_slave_1: entered promiscuous mode [ 723.278785][T21511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 723.281716][T21511] Cannot create hsr debugfs directory [ 723.393890][T19716] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.452178][T21498] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 723.458607][T21498] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 723.490313][T19716] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.497574][T21498] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 723.509703][T21498] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 723.565810][T21498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.578131][T21498] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.596397][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.599372][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.605997][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.608981][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.753286][T19716] bridge_slave_1: left allmulticast mode [ 723.755187][T19716] bridge_slave_1: left promiscuous mode [ 723.757156][T19716] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.764915][T19716] bridge_slave_0: left allmulticast mode [ 723.766812][T19716] bridge_slave_0: left promiscuous mode [ 723.768749][T19716] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.136384][T19716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.141829][T19716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.150378][T19716] bond0 (unregistering): Released all slaves [ 724.238867][T21498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.252354][ T5948] Bluetooth: hci3: command tx timeout [ 724.372278][T21498] veth0_vlan: entered promiscuous mode [ 724.378540][T21498] veth1_vlan: entered promiscuous mode [ 724.424927][T21498] veth0_macvtap: entered promiscuous mode [ 724.435242][T21498] veth1_macvtap: entered promiscuous mode [ 724.462622][T21498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.508138][T21498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.519029][T21498] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.522359][T21498] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.525303][T21498] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.528183][T21498] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.694187][T19716] hsr_slave_0: left promiscuous mode [ 724.696944][T19716] hsr_slave_1: left promiscuous mode [ 724.699037][T19716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.701488][T19716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.704443][T19716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.706896][T19716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.737114][T19716] veth1_macvtap: left promiscuous mode [ 724.739100][T19716] veth0_macvtap: left promiscuous mode [ 724.741091][T19716] veth1_vlan: left promiscuous mode [ 724.743418][T19716] veth0_vlan: left promiscuous mode [ 724.846294][T21625] ip6t_srh: unknown srh invflags 6BE9 [ 724.848820][T21625] ubi: mtd0 is already attached to ubi31 [ 725.132321][ T5948] Bluetooth: hci2: command tx timeout [ 725.175797][ T5990] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 725.343579][ T5990] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 725.346512][ T5990] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.350787][ T5990] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 725.354551][ T5990] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.359965][ T5990] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 725.364389][ T5990] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 725.368066][ T5990] usb 9-1: Product: syz [ 725.369977][ T5990] usb 9-1: Manufacturer: syz [ 725.381512][ T5990] cdc_wdm 9-1:1.0: skipping garbage [ 725.383698][ T5990] cdc_wdm 9-1:1.0: skipping garbage [ 725.386628][ T5990] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 725.388634][ T5990] cdc_wdm 9-1:1.0: Unknown control protocol [ 725.581707][ T5981] usb 9-1: USB disconnect, device number 2 [ 725.737183][T19716] team0 (unregistering): Port device team_slave_1 removed [ 725.831391][T19716] team0 (unregistering): Port device team_slave_0 removed [ 726.025401][ T5981] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 726.177045][ T5981] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 726.180623][ T5981] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.184993][ T5981] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 726.189163][ T5981] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.195213][ T5981] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 726.198982][ T5981] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 726.202361][ T5981] usb 9-1: Product: syz [ 726.204157][ T5981] usb 9-1: Manufacturer: syz [ 726.215067][ T5981] cdc_wdm 9-1:1.0: skipping garbage [ 726.217280][ T5981] cdc_wdm 9-1:1.0: skipping garbage [ 726.220757][ T5981] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 726.223467][ T5981] cdc_wdm 9-1:1.0: Unknown control protocol [ 726.332365][ T5948] Bluetooth: hci3: command tx timeout [ 726.558373][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.561314][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.658078][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.660171][T21511] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 726.660859][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.679667][T21511] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 726.695941][T21511] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 726.716286][T21511] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 726.808160][T21511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.822337][T21511] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.827650][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.830057][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.838418][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.840554][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.951778][T21511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.974822][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 726.977063][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 726.980263][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 726.982526][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 726.984558][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 726.990095][T19126] usb 9-1: USB disconnect, device number 3 [ 727.149353][T21511] veth0_vlan: entered promiscuous mode [ 727.158947][T21511] veth1_vlan: entered promiscuous mode [ 727.182375][T21511] veth0_macvtap: entered promiscuous mode [ 727.200361][T21511] veth1_macvtap: entered promiscuous mode [ 727.213239][ T5948] Bluetooth: hci2: command tx timeout [ 727.217990][T21511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.234267][T21511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.242726][T21511] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.245635][T21511] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.248488][T21511] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.251304][T21511] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.337031][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.340147][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.370254][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.374197][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.385798][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.486066][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.554974][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.644223][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.707694][T18156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 729.712367][T18156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 729.716402][T18156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 729.727034][T18156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 729.751092][T18156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 729.761759][T21714] ip6t_srh: unknown srh invflags 6BE9 [ 729.765317][T21714] ubi: mtd0 is already attached to ubi31 [ 729.846096][T21715] lo speed is unknown, defaulting to 1000 [ 729.855154][ T12] bridge_slave_1: left allmulticast mode [ 729.857027][ T12] bridge_slave_1: left promiscuous mode [ 729.858843][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.864377][ T12] bridge_slave_0: left allmulticast mode [ 729.866243][ T12] bridge_slave_0: left promiscuous mode [ 729.868118][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.026747][T18156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 730.031853][T18156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 730.046213][T18156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 730.054427][T18156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 730.057230][T18156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 730.205548][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.214213][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.217997][ T12] bond0 (unregistering): Released all slaves [ 730.241422][T21715] lo speed is unknown, defaulting to 1000 [ 730.277554][T21726] lo speed is unknown, defaulting to 1000 [ 730.407939][T21726] lo speed is unknown, defaulting to 1000 [ 730.617710][T21715] chnl_net:caif_netlink_parms(): no params data found [ 730.810500][ T12] hsr_slave_0: left promiscuous mode [ 730.813450][ T12] hsr_slave_1: left promiscuous mode [ 730.815525][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.817944][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.821223][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.825386][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.848325][ T12] veth1_macvtap: left promiscuous mode [ 730.850193][ T12] veth0_macvtap: left promiscuous mode [ 730.852061][ T12] veth1_vlan: left promiscuous mode [ 730.854093][ T12] veth0_vlan: left promiscuous mode [ 731.472439][T21759] Cannot find del_set index 3 as target [ 731.650281][ T12] team0 (unregistering): Port device team_slave_1 removed [ 731.736706][ T12] team0 (unregistering): Port device team_slave_0 removed [ 731.785152][ T5948] Bluetooth: hci2: command tx timeout [ 732.106131][ T5948] Bluetooth: hci3: command tx timeout [ 732.433627][T21759] netlink: 'syz.2.3535': attribute type 11 has an invalid length. [ 732.437005][T21759] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3535'. [ 732.440259][T21715] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.445842][T21715] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.448261][T21715] bridge_slave_0: entered allmulticast mode [ 732.450926][T21715] bridge_slave_0: entered promiscuous mode [ 732.497802][T21715] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.500179][T21715] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.502825][T21715] bridge_slave_1: entered allmulticast mode [ 732.505554][T21715] bridge_slave_1: entered promiscuous mode [ 732.568760][T21726] chnl_net:caif_netlink_parms(): no params data found [ 732.577016][T21715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.588315][T21715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.638010][T21765] [ 732.639142][T21765] ====================================================== [ 732.641846][T21765] WARNING: possible circular locking dependency detected [ 732.644173][T21765] 6.15.0-rc7-syzkaller #0 Not tainted [ 732.646100][T21765] ------------------------------------------------------ [ 732.649832][T21765] syz.4.3537/21765 is trying to acquire lock: [ 732.651803][T21765] ffff888071e83758 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4d0/0xcc0 [ 732.655491][T21765] [ 732.655491][T21765] but task is already holding lock: [ 732.658294][T21765] ffff888071e824d8 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x378/0x5f0 [ 732.661257][T21765] [ 732.661257][T21765] which lock already depends on the new lock. [ 732.661257][T21765] [ 732.664611][T21765] [ 732.664611][T21765] the existing dependency chain (in reverse order) is: [ 732.667524][T21765] [ 732.667524][T21765] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 732.670052][T21765] lock_sock_nested+0x41/0xf0 [ 732.671792][T21765] smc_listen_out+0x202/0x4a0 [ 732.673536][T21765] smc_listen_work+0x5a3/0x50e0 [ 732.675287][T21765] process_one_work+0x9cf/0x1b70 [ 732.677115][T21765] worker_thread+0x6c8/0xf10 [ 732.678792][T21765] kthread+0x3c2/0x780 [ 732.680336][T21765] ret_from_fork+0x48/0x80 [ 732.681953][T21765] ret_from_fork_asm+0x1a/0x30 [ 732.683702][T21765] [ 732.683702][T21765] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 732.687046][T21765] __lock_acquire+0x1173/0x1ba0 [ 732.688815][T21765] lock_acquire+0x179/0x350 [ 732.690471][T21765] __flush_work+0x4e4/0xcc0 [ 732.692124][T21765] __cancel_work_sync+0x10c/0x130 [ 732.693930][T21765] smc_clcsock_release+0x5f/0xe0 [ 732.695712][T21765] __smc_release+0x5c2/0x880 [ 732.697422][T21765] smc_close_non_accepted+0xda/0x200 [ 732.699319][T21765] smc_close_active+0xc3c/0x1070 [ 732.701091][T21765] __smc_release+0x634/0x880 [ 732.702692][T21765] smc_release+0x1fc/0x5f0 [ 732.704317][T21765] __sock_release+0xb3/0x270 [ 732.705993][T21765] sock_close+0x1c/0x30 [ 732.707568][T21765] __fput+0x402/0xb70 [ 732.709065][T21765] task_work_run+0x150/0x240 [ 732.710745][T21765] syscall_exit_to_user_mode+0x27b/0x2a0 [ 732.712841][T21765] __do_fast_syscall_32+0x80/0x120 [ 732.714724][T21765] do_fast_syscall_32+0x32/0x80 [ 732.716489][T21765] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 732.718846][T21765] [ 732.718846][T21765] other info that might help us debug this: [ 732.718846][T21765] [ 732.722124][T21765] Possible unsafe locking scenario: [ 732.722124][T21765] [ 732.724523][T21765] CPU0 CPU1 [ 732.726343][T21765] ---- ---- [ 732.728085][T21765] lock(sk_lock-AF_SMC/1); [ 732.729638][T21765] lock((work_completion)(&new_smc->smc_listen_work)); [ 732.732673][T21765] lock(sk_lock-AF_SMC/1); [ 732.734988][T21765] lock((work_completion)(&new_smc->smc_listen_work)); [ 732.737304][T21765] [ 732.737304][T21765] *** DEADLOCK *** [ 732.737304][T21765] [ 732.739968][T21765] 3 locks held by syz.4.3537/21765: [ 732.741647][T21765] #0: ffff88804ef8dc08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 732.745480][T21765] #1: ffff888071e824d8 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x378/0x5f0 [ 732.748568][T21765] #2: ffffffff8e3bfa80 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfb/0xcc0 [ 732.751763][T21765] [ 732.751763][T21765] stack backtrace: [ 732.753736][T21765] CPU: 2 UID: 0 PID: 21765 Comm: syz.4.3537 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 732.753751][T21765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 732.753758][T21765] Call Trace: [ 732.753763][T21765] [ 732.753769][T21765] dump_stack_lvl+0x116/0x1f0 [ 732.753787][T21765] print_circular_bug+0x275/0x350 [ 732.753802][T21765] check_noncircular+0x14c/0x170 [ 732.753817][T21765] __lock_acquire+0x1173/0x1ba0 [ 732.753834][T21765] lock_acquire+0x179/0x350 [ 732.753846][T21765] ? __flush_work+0x4d0/0xcc0 [ 732.753857][T21765] ? mark_held_locks+0x49/0x80 [ 732.753869][T21765] ? __flush_work+0x4d0/0xcc0 [ 732.753879][T21765] __flush_work+0x4e4/0xcc0 [ 732.753888][T21765] ? __flush_work+0x4d0/0xcc0 [ 732.753899][T21765] ? __pfx___flush_work+0x10/0x10 [ 732.753909][T21765] ? __lock_acquire+0xaa4/0x1ba0 [ 732.753923][T21765] ? __pfx_wq_barrier_func+0x10/0x10 [ 732.753941][T21765] ? do_raw_spin_lock+0x12c/0x2b0 [ 732.753964][T21765] ? __pfx___might_resched+0x10/0x10 [ 732.753984][T21765] __cancel_work_sync+0x10c/0x130 [ 732.754003][T21765] smc_clcsock_release+0x5f/0xe0 [ 732.754027][T21765] __smc_release+0x5c2/0x880 [ 732.754046][T21765] ? __pfx_sock_def_readable+0x10/0x10 [ 732.754058][T21765] smc_close_non_accepted+0xda/0x200 [ 732.754071][T21765] smc_close_active+0xc3c/0x1070 [ 732.754085][T21765] __smc_release+0x634/0x880 [ 732.754096][T21765] smc_release+0x1fc/0x5f0 [ 732.754108][T21765] __sock_release+0xb3/0x270 [ 732.754122][T21765] ? __pfx_sock_close+0x10/0x10 [ 732.754134][T21765] sock_close+0x1c/0x30 [ 732.754146][T21765] __fput+0x402/0xb70 [ 732.754160][T21765] ? _raw_spin_unlock_irq+0x23/0x50 [ 732.754174][T21765] task_work_run+0x150/0x240 [ 732.754189][T21765] ? __pfx_task_work_run+0x10/0x10 [ 732.754205][T21765] ? __pfx___do_sys_close_range+0x10/0x10 [ 732.754215][T21765] ? rcu_is_watching+0x12/0xc0 [ 732.754226][T21765] syscall_exit_to_user_mode+0x27b/0x2a0 [ 732.754242][T21765] __do_fast_syscall_32+0x80/0x120 [ 732.754264][T21765] do_fast_syscall_32+0x32/0x80 [ 732.754281][T21765] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 732.754295][T21765] RIP: 0023:0xf703e579 [ 732.754305][T21765] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 732.754315][T21765] RSP: 002b:00000000f502e55c EFLAGS: 00000296 ORIG_RAX: 00000000000001b4 [ 732.754326][T21765] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00000000ffffffff [ 732.754332][T21765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 732.754338][T21765] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 732.754344][T21765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.754350][T21765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 732.754358][T21765] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 733.405225][ T8646] veth0: left promiscuous mode [ 733.407404][ T8646] veth1_to_team: left promiscuous mode [ 733.465666][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.517155][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.594729][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.686813][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.758067][ T12] bridge_slave_1: left allmulticast mode [ 733.760008][ T12] bridge_slave_1: left promiscuous mode [ 733.761898][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.765140][ T12] bridge_slave_0: left allmulticast mode [ 733.767006][ T12] bridge_slave_0: left promiscuous mode [ 733.768895][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.772367][ T12] bridge_slave_1: left allmulticast mode [ 733.774388][ T12] bridge_slave_1: left promiscuous mode [ 733.776280][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.779660][ T12] bridge_slave_0: left allmulticast mode [ 733.781549][ T12] bridge_slave_0: left promiscuous mode [ 733.784002][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.063882][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.067767][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.071275][ T12] bond0 (unregistering): Released all slaves [ 734.075112][ T12] bond0 (unregistering): Released all slaves [ 734.081428][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.085658][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.089066][ T12] bond0 (unregistering): Released all slaves [ 734.480415][ T12] hsr_slave_0: left promiscuous mode [ 734.483208][ T12] hsr_slave_1: left promiscuous mode [ 734.485943][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.488844][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.492076][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.494786][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.499296][ T12] veth1_macvtap: left promiscuous mode [ 734.501126][ T12] veth0_macvtap: left promiscuous mode [ 734.504085][ T12] veth1_vlan: left promiscuous mode [ 734.505956][ T12] veth0_vlan: left promiscuous mode [ 734.766764][ T12] team0 (unregistering): Port device team_slave_1 removed [ 734.816018][ T12] team0 (unregistering): Port device team_slave_0 removed [ 735.808089][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 735.811812][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 735.867737][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 735.871349][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 735.925799][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 735.929720][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 735.985390][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 735.989458][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 736.067757][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.116526][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.198564][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.293934][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.417240][ T12] bridge_slave_1: left allmulticast mode [ 736.419548][ T12] bridge_slave_1: left promiscuous mode [ 736.421893][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.425661][ T12] bridge_slave_0: left allmulticast mode [ 736.427551][ T12] bridge_slave_0: left promiscuous mode [ 736.429622][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.723705][ T12] smc: removing net device bond0 with user defined pnetid SYZ2 [ 736.726398][ T12] bond0 (unregistering): Released all slaves [ 736.732174][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.736325][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.739713][ T12] bond0 (unregistering): Released all slaves [ 736.815686][ T12] tipc: Disabling bearer [ 736.818162][ T12] tipc: Left network mode [ 736.853779][ T12] IPVS: stopping master sync thread 14163 ... [ 736.856564][ T12] IPVS: stopping master sync thread 14162 ... [ 736.859328][ T12] IPVS: stopping master sync thread 14161 ... [ 736.862237][ T12] IPVS: stopping master sync thread 14160 ... [ 736.865060][ T12] IPVS: stopping master sync thread 14159 ... [ 736.867761][ T12] IPVS: stopping master sync thread 14158 ... [ 736.870537][ T12] IPVS: stopping master sync thread 14157 ... [ 736.874025][ T12] IPVS: stopping master sync thread 14156 ... [ 736.876799][ T12] IPVS: stopping master sync thread 14155 ... [ 736.879328][ T12] IPVS: stopping master sync thread 14154 ... [ 736.881507][ T12] IPVS: stopping master sync thread 14153 ... [ 736.883768][ T12] IPVS: stopping master sync thread 14152 ... [ 736.885990][ T12] IPVS: stopping master sync thread 14151 ... [ 736.888199][ T12] IPVS: stopping master sync thread 14150 ... [ 736.890308][ T12] IPVS: stopping master sync thread 14149 ... [ 736.893154][ T12] IPVS: stopping master sync thread 14148 ... [ 736.895355][ T12] IPVS: stopping master sync thread 14147 ... [ 736.897598][ T12] IPVS: stopping master sync thread 14146 ... [ 736.899792][ T12] IPVS: stopping master sync thread 14145 ... [ 736.901956][ T12] IPVS: stopping master sync thread 14144 ... [ 736.904037][ T12] IPVS: stopping master sync thread 14143 ... [ 736.906165][ T12] IPVS: stopping master sync thread 14142 ... [ 736.908429][ T12] IPVS: stopping master sync thread 14141 ... [ 736.910550][ T12] IPVS: stopping master sync thread 14140 ... [ 736.913834][ T12] IPVS: stopping master sync thread 14139 ... [ 736.916749][ T12] IPVS: stopping master sync thread 14138 ... [ 736.919477][ T12] IPVS: stopping master sync thread 14137 ... [ 736.922694][ T12] IPVS: stopping master sync thread 14136 ... [ 736.925463][ T12] IPVS: stopping master sync thread 14135 ... [ 736.928180][ T12] IPVS: stopping master sync thread 14134 ... [ 736.930891][ T12] IPVS: stopping master sync thread 14131 ... [ 736.934068][ T12] IPVS: stopping master sync thread 14130 ... [ 736.936259][ T12] IPVS: stopping master sync thread 14129 ... [ 736.938346][ T12] IPVS: stopping master sync thread 14128 ... [ 736.940532][ T12] IPVS: stopping master sync thread 14127 ... [ 736.952355][ T12] IPVS: stopping master sync thread 14126 ... [ 736.954728][ T12] IPVS: stopping master sync thread 14125 ... [ 736.957092][ T12] IPVS: stopping master sync thread 14124 ... [ 736.959258][ T12] IPVS: stopping master sync thread 14123 ... [ 736.961390][ T12] IPVS: stopping master sync thread 14122 ... [ 736.963943][ T12] IPVS: stopping master sync thread 14121 ... [ 736.966207][ T12] IPVS: stopping master sync thread 14120 ... [ 736.968998][ T12] IPVS: stopping master sync thread 14119 ... [ 736.971713][ T12] IPVS: stopping master sync thread 14118 ... [ 736.974497][ T12] IPVS: stopping master sync thread 14117 ... [ 736.977213][ T12] IPVS: stopping master sync thread 14116 ... [ 736.979940][ T12] IPVS: stopping master sync thread 14115 ... [ 736.983070][ T12] IPVS: stopping master sync thread 14114 ... [ 736.985221][ T12] IPVS: stopping master sync thread 14113 ... [ 736.987218][ T12] IPVS: stopping master sync thread 14112 ... [ 736.989614][ T12] IPVS: stopping master sync thread 14111 ... [ 736.991747][ T12] IPVS: stopping master sync thread 14110 ... [ 736.994001][ T12] IPVS: stopping master sync thread 14109 ... [ 736.996019][ T12] IPVS: stopping master sync thread 14108 ... [ 736.998082][ T12] IPVS: stopping master sync thread 14107 ... [ 737.000625][ T12] IPVS: stopping master sync thread 14106 ... [ 737.003124][ T12] IPVS: stopping master sync thread 14105 ... [ 737.005246][ T12] IPVS: stopping master sync thread 14104 ... [ 737.007360][ T12] IPVS: stopping master sync thread 14103 ... [ 737.009439][ T12] IPVS: stopping master sync thread 14102 ... [ 737.011546][ T12] IPVS: stopping master sync thread 14101 ... [ 737.013772][ T12] IPVS: stopping master sync thread 14100 ... [ 737.015791][ T12] IPVS: stopping master sync thread 14099 ... [ 737.017933][ T12] IPVS: stopping master sync thread 14098 ... [ 737.120776][ T12] mac80211_hwsim hwsim6 wlan0 (unregistering): left allmulticast mode [ 737.127070][ T12] mac80211_hwsim hwsim6 wlan0 (unregistering): left promiscuous mode [ 737.400014][ T12] hsr_slave_0: left promiscuous mode [ 737.402879][ T12] hsr_slave_1: left promiscuous mode [ 737.408677][ T12] hsr_slave_0: left promiscuous mode [ 737.411424][ T12] hsr_slave_1: left promiscuous mode [ 737.417983][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.420513][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.433022][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.435497][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.442530][ T12] veth1_macvtap: left promiscuous mode [ 737.444730][ T12] veth0_macvtap: left promiscuous mode [ 737.447117][ T12] veth1_vlan: left promiscuous mode [ 737.454486][ T12] veth1_macvtap: left promiscuous mode [ 737.457536][ T12] veth0_macvtap: left promiscuous mode [ 737.459346][ T12] veth1_vlan: left promiscuous mode [ 737.461053][ T12] veth0_vlan: left promiscuous mode [ 738.144950][ T1185] smc: removing ib device sz1 [ 738.333240][ T12] team0 (unregistering): Port device team_slave_1 removed [ 738.379758][ T12] team0 (unregistering): Port device team_slave_0 removed [ 739.238009][ T12] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 23:31:44 Registers: info registers vcpu 0 CPU#0 RAX=0000000000a00a0c RBX=0000000000000000 RCX=ffffffff8b69a3e9 RDX=ffffed10056465be RSI=ffffffff8bf48ae0 RDI=ffffffff81913731 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90854c10 R15=0000000000000000 RIP=ffffffff8b698c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056ecf4c0 CR3=00000000633c1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000103ad84 RBX=0000000000000001 RCX=ffffffff8b69a3e9 RDX=ffffed10056665be RSI=ffffffff8bf48ae0 RDI=ffffffff81913731 RBP=ffffed1003959488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed10056665bd R10=ffff88802b332deb R11=0000000000000001 R12=0000000000000001 R13=ffff88801caca440 R14=ffffffff90854c10 R15=0000000000000000 RIP=ffffffff8b698c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f10effc CR3=00000000527fd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bd1fe89c9104faee 6d875b4d30b0beca ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff3df72f23bf08d8 acf3b61010cec590 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e9b936a75c22d91c 29bfa6660b6002bb ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 19cd1d310dfd5dfa 49c0cd23be82c1e3 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000008700 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 64748200bcbc54ca 46000001730efc84 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fd7d4000bb77a91e 0001bcbe0001bcbd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8fbb5e00bc9c5e1b 0001bcba0001bcba ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 079ce2009ceba600 0001bcbc0001bcba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5ea439a025d25603 44ed35a9087aadfd ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dc5232fdc6726372 db192a8ded85d6f3 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854c5bf5 RDI=ffffffff9ade4c80 RBP=ffffffff9ade4c40 RSP=ffffc90029c47398 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9ade4c40 R15=ffffffff854c5b90 RIP=ffffffff854c5c1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979e7000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3a1fbd CR3=000000004c47c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffff888022eb7ea8 RBX=0000000000000005 RCX=ffffffff8197f98c RDX=1ffff110045d6fd5 RSI=0000000000000000 RDI=ffff888022eb7ec0 RBP=ffffc9000371f698 RSP=ffffc9000371f570 R8 =0000000000000001 R9 =fffff520006e3e9c R10=0000000000000003 R11=000000000000001e R12=dffffc0000000000 R13=ffff888051600000 R14=0000000000000000 R15=ffff888051800000 RIP=ffffffff84d37fb0 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097ae7000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73d9f2c CR3=000000005df20000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000acfeffe0 Opmask01=0000000000000000 Opmask02=00000000d711000f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbeb5f41b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e2e86e7810 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 06001eac00000002 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373616c632f7379 732f000073656972 61646e6f6365735f 65746f6d6f72702f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 56564449460a565c 560a000056404c57 44414b4a4640565f 40514a484a57550a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 39773b3a3633211c 1a0f0c060379010e 3701013563538263 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 0101910101740050 73f6bf05390a2079 be2f01000100e3ce ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f6d3ff133dd00502 39773b3a3633211c 1a0f0c060379010e 3701013563538263 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000111 0000000100010020 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000