last executing test programs: 44.98129463s ago: executing program 0 (id=220): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xa2) creat(&(0x7f0000000000)='./bus\x00', 0x0) 44.138828866s ago: executing program 0 (id=242): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000ac0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}]}}) 43.998305115s ago: executing program 0 (id=245): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x70bd2b, 0x25dfd9fd, {0x0, 0x0, 0x0, r2, 0x0, 0x10}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x38}}, 0x0) 43.906866918s ago: executing program 0 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 43.906582162s ago: executing program 0 (id=247): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x20800, 0x1, 0x4, 0x7fff, 0x80, 0x0, 0x0, 0x1, 0xfffffffd}}, 0x50) fcntl$lock(r0, 0x6, &(0x7f0000000200)) write$P9_RLCREATE(r0, &(0x7f0000000300)={0x18, 0xf, 0x1, {{0x8, 0x3}, 0x7fffffff}}, 0x18) 40.142113233s ago: executing program 0 (id=285): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000004100)=""/4099, 0x1003}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x18ca02a0, 0x0) 40.038640351s ago: executing program 32 (id=285): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000004100)=""/4099, 0x1003}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x18ca02a0, 0x0) 38.158696299s ago: executing program 1 (id=303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x109001, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2403, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) 37.636569769s ago: executing program 1 (id=308): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) read$FUSE(r1, &(0x7f0000001440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r1, &(0x7f0000000200)={0x60, 0x0, r2, {{0x9, 0x5, 0x5, 0x2, 0x400069a, 0xae, 0x2400000, 0x800}}}, 0xfffffec2) 36.746525034s ago: executing program 1 (id=324): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000880)=""/27, 0x1b}], 0x1}, 0x0) 36.678757364s ago: executing program 1 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) 36.676468712s ago: executing program 1 (id=334): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) 36.397633403s ago: executing program 1 (id=332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x1}) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000071000040"]) 36.334942632s ago: executing program 33 (id=332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x1}) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000071000040"]) 3.29812844s ago: executing program 2 (id=911): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000240), r2) 3.218387072s ago: executing program 2 (id=912): mkdirat(0xffffffffffffff9c, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000008d80)={0x2020}, 0x2020) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043ee306782ca4cb341b694f3562ecd5"], 0xf) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.218212928s ago: executing program 2 (id=913): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xffd1}], 0x11}, 0x800) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="0bba", 0x2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044035) 3.062531928s ago: executing program 2 (id=922): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x20000, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2.982375069s ago: executing program 2 (id=915): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c9"], 0x16) 2.728612393s ago: executing program 2 (id=925): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161942, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x8000080, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r3, 0x0, 0x2, r2}) 2.701596329s ago: executing program 34 (id=925): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161942, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x8000080, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r3, 0x0, 0x2, r2}) 1.717770722s ago: executing program 3 (id=956): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x6bca, 0x0, 0x25, 0x0, 0x14) 1.646630081s ago: executing program 3 (id=958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460403ad03000000000000000002003e"], 0x58) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1.646443737s ago: executing program 3 (id=959): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000600)="001a0000000000", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) 1.53802693s ago: executing program 3 (id=961): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xbdf) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 1.407738299s ago: executing program 3 (id=964): socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000940)=""/32, 0x20, 0x4, 0xffffffff, 0x0, 0x0, 0x3}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x200) close_range(r0, r1, 0x0) 1.176111459s ago: executing program 6 (id=926): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x0, 0x325}, 0x14}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8d04"]) 1.027774945s ago: executing program 6 (id=969): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@uuid_null}]}) 1.01456993s ago: executing program 6 (id=973): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000001c0)="f22e268f426df30fc7f96626dcdf66baf80cb8f426338aef66bafc0c66ed0f79a9b6000000b9800000c00f3235002000000f300f206466bad104b0faee0f01c8b9a80800000f32", 0x47}], 0x1, 0x30, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 675.06188ms ago: executing program 4 (id=978): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x48, r2, 0x1, 0x70bd25, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 618.016423ms ago: executing program 4 (id=979): r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbc02, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000200)={{0x80000000, 0x0, 0x3, [0x6, 0x1]}, {0x80000000, 0x0, 0x3, [0xfffffff7, 0x9]}, 0x2, [0x5, 0x80000000]}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3a}, 0x1, 0x0, 0x0, 0x4}, 0x20000081) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 503.239022ms ago: executing program 4 (id=980): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r1, 0x5460, 0x0) ioctl(r1, 0x5451, 0x0) 502.856953ms ago: executing program 4 (id=981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001e80)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0xa, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x850, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1e0, 0x54, 0x0, 0x3, 0x47e, 0x9, 0x3, 0x8, 0x10, 0x7, 0x0, 0x0, 0x7, 0x40, 0xb081, 0x7, 0x3, 0xd0000000, 0x15, 0x1, 0x5, 0xe0000000, 0xe, 0x0, 0x2, 0x9, 0x1, 0x2, 0x6, 0x7, 0x2, 0x5, 0x7fff, 0x6, 0x8, 0x718, 0x2, 0x2, 0x6, 0xc3, 0x100, 0xfffffffe, 0x1, 0x6, 0xc, 0x2049b29, 0x6, 0x7f, 0xbd, 0x7, 0x5197, 0xfff, 0x6, 0x7, 0x4, 0x88f, 0xffff, 0x8, 0x3ff, 0x7fff, 0x401, 0x4, 0x13, 0x7, 0x8, 0x10, 0xb0d1, 0x7ff, 0x4, 0x80, 0x8, 0x3, 0x1, 0x6454, 0x3, 0xffff, 0x3, 0x7, 0x80000000, 0x9, 0xe, 0x9, 0x10001, 0x40, 0x1, 0x4, 0x6, 0x7, 0x1149, 0x0, 0x3, 0x6, 0x3, 0x7, 0xea2f, 0x7, 0x2fbcbcdf, 0x2, 0x6, 0x9, 0x1, 0x3, 0xffffffff, 0x7, 0x4, 0xb18, 0x1, 0x800, 0x6, 0x9, 0xffffffff, 0xcaf, 0x3ff, 0x7, 0x11, 0x100, 0x2, 0x1, 0x7f, 0xbe, 0xc171, 0xfffffff7, 0x8, 0x0, 0x4a102091, 0xfffff9a7, 0x4, 0x8, 0x1, 0x9, 0x3, 0x91c, 0x329c, 0x3, 0xac, 0x7ff, 0x7, 0x9, 0xd6f, 0x7fffffff, 0x400, 0xef, 0x5, 0x41, 0x1, 0x5, 0x4, 0x9, 0x7, 0x5, 0x2, 0x903, 0xfffffffb, 0x1, 0x6, 0x9, 0x80000001, 0x10, 0x63c, 0xea, 0xe659, 0x10001, 0x101, 0x1, 0xffffffff, 0x1, 0x56, 0xf87, 0x5, 0x6, 0x1, 0x8, 0x5, 0x0, 0x3, 0x5904, 0xffffffda, 0x1, 0x80000000, 0x4, 0x4, 0x9, 0xb48, 0xfffffffa, 0x1ff, 0xc, 0x2, 0x6, 0x88, 0x2, 0x7, 0x5, 0x7, 0x7ff, 0x9, 0x8000, 0x600, 0x0, 0xac, 0xff, 0x6c1794d3, 0x0, 0xc, 0x10001, 0x0, 0x882a, 0x8, 0xe, 0x0, 0x7, 0x1, 0x9, 0x4, 0x431f763e, 0x1, 0x4000002, 0x80, 0x2, 0x4, 0x80000000, 0x5, 0x3, 0x7a2, 0x82c, 0x6a, 0x5, 0x1, 0xf, 0x52000000, 0x3, 0x7db, 0x2, 0x3, 0xffff, 0xfff, 0xfffffffd, 0x6, 0xffffff81, 0x5, 0x9, 0x2, 0x616b8048, 0x8, 0xfffffff2, 0x0, 0x4, 0xfffffffb, 0x9, 0x0, 0x7, 0x7c418a57, 0x73, 0xffff, 0x3, 0x0, 0x2a4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x7, 0x7, 0x7, 0x5, {0x15, 0x2, 0x200, 0x9, 0x7, 0x2}, {0x8, 0x1, 0x7fff, 0x5465, 0x4, 0x5a}, 0x3, 0x8001, 0x81}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe4, 0x1ff, 0x5, 0x8, 0x0, 0x6, 0x0, 0x7, 0x0, 0x8, 0xb3, 0x4, 0x7, 0x2, 0x8, 0x8, 0x3, 0x100, 0x4, 0xd5500, 0xca, 0x331, 0x8, 0x0, 0x7, 0xb091, 0x0, 0x7fff, 0x5, 0x0, 0xe00, 0x11, 0x1000, 0x2, 0xe, 0x4, 0x8, 0x7fff, 0x6, 0x1000, 0x7fffffff, 0x81, 0x6, 0x7, 0x3, 0x4, 0x8, 0x8, 0x1, 0x5bd, 0x3, 0x6, 0x1, 0x7, 0x2, 0x5, 0x3, 0x2, 0x2, 0x3, 0x4, 0x4, 0x33e774c4, 0x40000000, 0x0, 0x0, 0xcb5, 0x12, 0x3, 0x10100, 0x80000000, 0x0, 0x2, 0x9, 0x9, 0x3, 0xfffffffb, 0x4, 0x7, 0x5, 0x6, 0xffffffff, 0x1, 0x9, 0x81, 0x7b58, 0x9, 0x2, 0x1, 0x81, 0xfffffffe, 0xa, 0x0, 0xffffffff, 0x0, 0x9, 0x8b, 0x9, 0x4, 0x7bf, 0x5, 0x5, 0x3, 0x80, 0x9, 0x7fffffff, 0x2, 0x6, 0x4, 0x800, 0xa9a, 0x1, 0x1, 0x79ce, 0x3ff, 0x7ff, 0xffff, 0x1, 0x400, 0x1ff, 0x0, 0x0, 0x7, 0x9, 0x0, 0xb, 0xad, 0x7, 0x1ff, 0x9, 0x808, 0x5, 0x1, 0x8, 0x0, 0x1ff, 0x4, 0xb, 0x8, 0x7, 0x9, 0x6, 0x80, 0x2, 0xd0000000, 0x5, 0x7, 0x7, 0x6, 0x1, 0x4, 0x3, 0x9, 0x6, 0x5, 0x8, 0x80000001, 0x1ff16624, 0x6, 0x0, 0x1, 0x8, 0x3, 0x5, 0xdd3e, 0x3, 0x401, 0x9, 0x9, 0xff, 0x9, 0x609624be, 0x3, 0xa, 0xfffffffe, 0x7ff, 0x42d8, 0x200, 0x2, 0x200, 0x100, 0x5, 0x9, 0xd1f, 0x6, 0x5, 0x9, 0x8000, 0x8000, 0xffffffff, 0x7, 0x3, 0x1, 0x2, 0x200, 0x1, 0x55, 0x2de, 0xc2bb, 0x3, 0x5, 0x4, 0xe, 0x3ff, 0x4, 0x8, 0x105, 0xa0a6, 0xa, 0x8000, 0xffff, 0x8, 0x8, 0x9, 0x2, 0x8, 0x6, 0x858c, 0xb247, 0x6, 0x10000, 0x0, 0x4, 0x2, 0xf96, 0x2, 0x9, 0xd, 0x9, 0x1, 0xffffffff, 0x200, 0x3, 0x1, 0x3, 0x8, 0x4, 0xba44, 0x3, 0xe, 0x17, 0x73, 0x1, 0x7, 0xd, 0x9b, 0x8, 0x53e6, 0x80000001, 0x2, 0xffffffff, 0x6, 0x7, 0x1c, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2c}]}]}}]}, 0x884}}, 0x24004094) 413.793731ms ago: executing program 4 (id=982): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xb) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x60, 0x0) 328.383749ms ago: executing program 4 (id=983): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_io_uring_setup(0x19d1, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x8000000, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r4, 0x3, r0, 0x5}) 257.471669ms ago: executing program 5 (id=984): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x880, 0x0, 0x0) 257.114686ms ago: executing program 5 (id=985): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x9, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="020108dd012918000e3580009f0001140000ff840600ac141414e2000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88940a31f48597e36e039b1c599db6e46674bc2d4c8303a0f7fbdac350c0fbf80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1, 0x0, 0x0, 0x800}, 0x10) 207.646317ms ago: executing program 5 (id=986): bpf$OBJ_GET_MAP(0x6, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 207.303162ms ago: executing program 5 (id=987): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r3, @ANYBLOB="60c000000800000024001280110001006272696467655f736c617665000000000c000580080022"], 0x44}, 0x1, 0x0, 0x0, 0x95}, 0x4) recvfrom$packet(r0, 0x0, 0x0, 0x2020, 0x0, 0x0) 188.790505ms ago: executing program 3 (id=988): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 146.211672ms ago: executing program 5 (id=989): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.271759ms ago: executing program 6 (id=990): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49e2, 0x0, 0x0, 0xbfef, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x44) 0s ago: executing program 5 (id=998): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:31424' (ED25519) to the list of known hosts. [ 42.755541][ T5885] cgroup: Unknown subsys name 'net' [ 42.908663][ T5885] cgroup: Unknown subsys name 'cpuset' [ 42.912821][ T5885] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.922069][ T5885] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.381192][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.383913][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.386562][ T5956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.387846][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.389256][ T5956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.391436][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.393432][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.395469][ T5957] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.398043][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.400055][ T5957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.402647][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.404691][ T5957] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.405399][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.406205][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.406885][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.409081][ T5957] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.413368][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.416744][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.418912][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.420267][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.701373][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 47.753678][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 47.797717][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 47.906638][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.909543][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.912644][ T5953] bridge_slave_0: entered allmulticast mode [ 47.916569][ T5953] bridge_slave_0: entered promiscuous mode [ 47.923834][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.926411][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.929074][ T5953] bridge_slave_1: entered allmulticast mode [ 47.932565][ T5953] bridge_slave_1: entered promiscuous mode [ 48.036324][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.038571][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.040975][ T5949] bridge_slave_0: entered allmulticast mode [ 48.043576][ T5949] bridge_slave_0: entered promiscuous mode [ 48.047191][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.049504][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.051701][ T5949] bridge_slave_1: entered allmulticast mode [ 48.054195][ T5949] bridge_slave_1: entered promiscuous mode [ 48.064228][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.069302][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.085758][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 48.209972][ T5953] team0: Port device team_slave_0 added [ 48.215038][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.221768][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.224310][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.227055][ T5944] bridge_slave_0: entered allmulticast mode [ 48.229573][ T5944] bridge_slave_0: entered promiscuous mode [ 48.232911][ T5953] team0: Port device team_slave_1 added [ 48.237321][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.264143][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.266466][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.268655][ T5944] bridge_slave_1: entered allmulticast mode [ 48.271236][ T5944] bridge_slave_1: entered promiscuous mode [ 48.395174][ T5949] team0: Port device team_slave_0 added [ 48.400279][ T5949] team0: Port device team_slave_1 added [ 48.402262][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.404628][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.408153][ T5942] bridge_slave_0: entered allmulticast mode [ 48.410650][ T5942] bridge_slave_0: entered promiscuous mode [ 48.415105][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.418966][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.421034][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.429135][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.446732][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.448932][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.451228][ T5942] bridge_slave_1: entered allmulticast mode [ 48.454045][ T5942] bridge_slave_1: entered promiscuous mode [ 48.458341][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.461433][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.463604][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.471651][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.521618][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.524003][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.533468][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.537933][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.540112][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.548176][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.580943][ T5944] team0: Port device team_slave_0 added [ 48.590404][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.594413][ T5944] team0: Port device team_slave_1 added [ 48.628090][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.668284][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.670437][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.678227][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.740696][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.742898][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.750719][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.774148][ T5953] hsr_slave_0: entered promiscuous mode [ 48.776676][ T5953] hsr_slave_1: entered promiscuous mode [ 48.781566][ T5949] hsr_slave_0: entered promiscuous mode [ 48.784383][ T5949] hsr_slave_1: entered promiscuous mode [ 48.788521][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.790909][ T5949] Cannot create hsr debugfs directory [ 48.797272][ T5942] team0: Port device team_slave_0 added [ 48.800574][ T5942] team0: Port device team_slave_1 added [ 48.832805][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.835063][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.842859][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.847409][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.849574][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.858104][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.937075][ T5944] hsr_slave_0: entered promiscuous mode [ 48.939227][ T5944] hsr_slave_1: entered promiscuous mode [ 48.941291][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.943581][ T5944] Cannot create hsr debugfs directory [ 49.047636][ T5942] hsr_slave_0: entered promiscuous mode [ 49.050679][ T5942] hsr_slave_1: entered promiscuous mode [ 49.053548][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.056940][ T5942] Cannot create hsr debugfs directory [ 49.369577][ T5949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.375690][ T5949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.381568][ T5949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.385762][ T5949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.415576][ T5953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.419812][ T5953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.424956][ T5953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.437348][ T5953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.456767][ T5958] Bluetooth: hci2: command tx timeout [ 49.457149][ T5297] Bluetooth: hci1: command tx timeout [ 49.457176][ T5959] Bluetooth: hci3: command tx timeout [ 49.458551][ T67] Bluetooth: hci0: command tx timeout [ 49.481004][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.487130][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.508750][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.520961][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.549265][ T5942] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.553333][ T5942] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.567040][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.569654][ T5942] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.574734][ T5942] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.610783][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.623032][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.640246][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.644191][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.646592][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.659104][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.661740][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.665092][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.667398][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.685709][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.688223][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.704695][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.735876][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.750565][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.770751][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.773562][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.784435][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.786669][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.791496][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.805041][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.807965][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.818976][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.821866][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.889252][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.900130][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.931942][ T5949] veth0_vlan: entered promiscuous mode [ 49.949841][ T5949] veth1_vlan: entered promiscuous mode [ 49.954164][ T5953] veth0_vlan: entered promiscuous mode [ 49.960245][ T5953] veth1_vlan: entered promiscuous mode [ 49.980956][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.998221][ T5949] veth0_macvtap: entered promiscuous mode [ 50.005746][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.016530][ T5949] veth1_macvtap: entered promiscuous mode [ 50.028963][ T5953] veth0_macvtap: entered promiscuous mode [ 50.039364][ T5944] veth0_vlan: entered promiscuous mode [ 50.043620][ T5953] veth1_macvtap: entered promiscuous mode [ 50.052042][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.065214][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.075856][ T5949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.079306][ T5949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.082091][ T5949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.084922][ T5949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.088973][ T5944] veth1_vlan: entered promiscuous mode [ 50.096554][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.100676][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.105519][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.112088][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.120340][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.124449][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.139425][ T5953] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.142681][ T5953] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.145510][ T5953] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.149047][ T5953] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.159235][ T5944] veth0_macvtap: entered promiscuous mode [ 50.164697][ T5942] veth0_vlan: entered promiscuous mode [ 50.174113][ T5944] veth1_macvtap: entered promiscuous mode [ 50.200015][ T5942] veth1_vlan: entered promiscuous mode [ 50.205869][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.209554][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.212874][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.216373][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.220378][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.238748][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.242246][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.245556][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.249499][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.255815][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.277356][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.277454][ T5944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.280549][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.283216][ T5944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.289530][ T5944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.292472][ T5944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.307620][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.310241][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.324112][ T5942] veth0_macvtap: entered promiscuous mode [ 50.330514][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.333207][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.337336][ T5942] veth1_macvtap: entered promiscuous mode [ 50.355838][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.357955][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.358953][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.362103][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.367754][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.370808][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.373702][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.377487][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.381396][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.385288][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.389337][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.392334][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.395590][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.398894][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.402073][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.406655][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.411266][ T5942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.414035][ T5942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.415438][ T5949] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.417118][ T5942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.425168][ T5942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.466182][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.469393][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.528528][ T6010] netlink: 'syz.2.5': attribute type 1 has an invalid length. [ 50.531767][ T6010] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5'. [ 50.595741][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.603488][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.606871][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 50.619975][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.622672][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.645680][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.650670][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.536612][ T5297] Bluetooth: hci3: command tx timeout [ 51.536705][ T5958] Bluetooth: hci2: command tx timeout [ 51.537882][ T67] Bluetooth: hci0: command tx timeout [ 51.546267][ T5958] Bluetooth: hci1: command tx timeout [ 51.616070][ T6035] serio: Serial port ttynull [ 51.836057][ T5984] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 51.839298][ T6039] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.986510][ T5984] usb 8-1: Using ep0 maxpacket: 8 [ 51.990719][ T6039] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 51.994371][ T6039] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 51.998876][ T6039] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 52.002555][ T5984] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 52.005465][ T5984] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 52.009042][ T6039] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 52.012898][ T6039] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.016491][ T5984] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 52.020166][ T5984] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 52.024673][ T5984] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 52.028478][ T6039] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.033613][ T5984] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 52.039038][ T6039] usb 5-1: config 0 descriptor?? [ 52.041004][ T5984] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 52.044135][ T5984] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.044726][ T6036] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 52.257361][ T5984] usb 8-1: GET_CAPABILITIES returned 0 [ 52.259243][ T5984] usbtmc 8-1:16.0: can't read capabilities [ 52.461088][ T6008] usb 8-1: USB disconnect, device number 2 [ 52.463162][ T6039] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.465821][ T6039] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.468828][ T6039] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.471117][ T6039] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.473391][ T6039] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.475691][ T6039] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.478327][ T6039] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.480627][ T6039] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.482912][ T6039] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.485220][ T6039] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.487860][ T6039] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.490142][ T6039] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.492423][ T6039] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.494722][ T6039] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.498449][ T6039] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.501243][ T6039] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 52.509355][ T6039] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 52.727947][ T5987] usb 5-1: USB disconnect, device number 2 [ 52.971393][ T6058] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 53.129390][ T6065] kvm: Disabled LAPIC found during irq injection [ 53.258742][ T40] audit: type=1326 audit(1746924758.731:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6066 comm="syz.1.23" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x0 [ 53.284175][ T6074] Zero length message leads to an empty skb [ 53.617278][ T5958] Bluetooth: hci0: command tx timeout [ 53.618224][ T5297] Bluetooth: hci1: command tx timeout [ 53.619755][ T67] Bluetooth: hci2: command tx timeout [ 53.619767][ T5959] Bluetooth: hci3: command tx timeout [ 53.711211][ T6093] kernel read not supported for file /eth0 (pid: 6093 comm: syz.2.33) [ 53.714619][ T40] audit: type=1800 audit(1746924759.181:3): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.33" name="eth0" dev="mqueue" ino=10384 res=0 errno=0 [ 53.781236][ T64] kernel read not supported for file /eth0 (pid: 64 comm: kworker/3:1) [ 54.223706][ T6122] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 54.507441][ T92] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.588956][ T92] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.665881][ T92] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.696153][ T5958] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.699358][ T5958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.702227][ T5958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.705468][ T5958] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.708355][ T5958] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.802879][ T92] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.858780][ T6147] chnl_net:caif_netlink_parms(): no params data found [ 54.960689][ T92] bridge_slave_1: left allmulticast mode [ 54.962538][ T92] bridge_slave_1: left promiscuous mode [ 54.964946][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.970480][ T92] bridge_slave_0: left allmulticast mode [ 54.972264][ T92] bridge_slave_0: left promiscuous mode [ 54.974067][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.286036][ T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.291899][ T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.298284][ T92] bond0 (unregistering): Released all slaves [ 55.319416][ T6162] warning: `syz.2.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.330415][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.332690][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.335837][ T6147] bridge_slave_0: entered allmulticast mode [ 55.342748][ T6147] bridge_slave_0: entered promiscuous mode [ 55.345862][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.350503][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.353184][ T6147] bridge_slave_1: entered allmulticast mode [ 55.359861][ T6147] bridge_slave_1: entered promiscuous mode [ 55.383038][ T836] IPVS: starting estimator thread 0... [ 55.452261][ T6147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.466024][ T6174] IPVS: using max 45 ests per chain, 108000 per kthread [ 55.549165][ T6147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.610151][ T6171] syz.2.62 (6171): drop_caches: 2 [ 55.612586][ T6171] syz.2.62 (6171): drop_caches: 2 [ 55.622259][ T6147] team0: Port device team_slave_0 added [ 55.634784][ T6147] team0: Port device team_slave_1 added [ 55.696568][ T67] Bluetooth: hci2: command tx timeout [ 55.696589][ T5958] Bluetooth: hci0: command tx timeout [ 55.697570][ T5297] Bluetooth: hci3: command tx timeout [ 55.705873][ T6147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.709626][ T6147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.717746][ T6147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.722068][ T6147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.724265][ T6147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.733762][ T6147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.810580][ T6147] hsr_slave_0: entered promiscuous mode [ 55.812909][ T6147] hsr_slave_1: entered promiscuous mode [ 55.815008][ T6147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.817649][ T6147] Cannot create hsr debugfs directory [ 55.822497][ T92] hsr_slave_0: left promiscuous mode [ 55.825071][ T92] hsr_slave_1: left promiscuous mode [ 55.829840][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.832373][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.835907][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.839067][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.854390][ T92] veth1_macvtap: left promiscuous mode [ 55.856967][ T92] veth0_macvtap: left promiscuous mode [ 55.858876][ T92] veth1_vlan: left promiscuous mode [ 55.860588][ T92] veth0_vlan: left promiscuous mode [ 55.936146][ T6017] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.099429][ T6017] usb 8-1: Using ep0 maxpacket: 32 [ 56.104050][ T6017] usb 8-1: unable to get BOS descriptor or descriptor too short [ 56.108778][ T6017] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 56.111719][ T6017] usb 8-1: can't read configurations, error -71 [ 56.311134][ T92] team0 (unregistering): Port device team_slave_1 removed [ 56.362291][ T92] team0 (unregistering): Port device team_slave_0 removed [ 56.419310][ T6187] syz.1.66 (6187) used greatest stack depth: 20872 bytes left [ 56.669562][ T6208] ======================================================= [ 56.669562][ T6208] WARNING: The mand mount option has been deprecated and [ 56.669562][ T6208] and is ignored by this kernel. Remove the mand [ 56.669562][ T6208] option from the mount to silence this warning. [ 56.669562][ T6208] ======================================================= [ 56.746287][ T5958] Bluetooth: hci1: command tx timeout [ 57.587994][ T6147] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.591928][ T6147] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.601295][ T6147] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.605557][ T6147] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.645851][ T6147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.655306][ T6147] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.661695][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.665148][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.674321][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.676527][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.736636][ T6260] netlink: 'syz.1.92': attribute type 1 has an invalid length. [ 57.762967][ T6260] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 57.766216][ T6260] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 57.769555][ T6260] bond1: (slave gre1): Opening slave failed [ 57.861261][ T6147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.889222][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 57.898919][ T6147] veth0_vlan: entered promiscuous mode [ 57.911197][ T6147] veth1_vlan: entered promiscuous mode [ 57.938193][ T6147] veth0_macvtap: entered promiscuous mode [ 57.943873][ T6147] veth1_macvtap: entered promiscuous mode [ 57.958705][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.963758][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.967229][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.970383][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.973360][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.977738][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.983211][ T6147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.990829][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.995151][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.999498][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.003653][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.008008][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.012111][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.017382][ T6147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.023234][ T6147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.026265][ T6147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.028944][ T6147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.031611][ T6147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.036034][ T6017] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 58.071535][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.074016][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.090536][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.093015][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.187385][ T6017] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 58.191361][ T6017] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 58.194881][ T6017] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 58.199038][ T6017] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.205312][ T6269] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.212059][ T6017] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 58.415366][ T5984] usb 8-1: USB disconnect, device number 5 [ 58.826164][ T5958] Bluetooth: hci1: command tx timeout [ 58.978780][ T6315] capability: warning: `syz.1.99' uses 32-bit capabilities (legacy support in use) [ 59.148636][ T6323] syz.0.102 uses obsolete (PF_INET,SOCK_PACKET) [ 59.540978][ T40] audit: type=1326 audit(1746924765.011:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.2.95" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7fc00000 [ 60.127113][ T6350] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.175454][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.114'. [ 60.211417][ T6357] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 60.536081][ T1978] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 60.706062][ T1978] usb 8-1: Using ep0 maxpacket: 8 [ 60.709710][ T1978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 60.714056][ T1978] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 60.718316][ T1978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.730506][ T1978] usb 8-1: config 0 descriptor?? [ 60.896111][ T5958] Bluetooth: hci1: command tx timeout [ 60.939837][ T1978] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 61.327141][ T1978] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 61.355757][ T6017] usb 8-1: USB disconnect, device number 6 [ 61.486658][ T1978] usb 6-1: Using ep0 maxpacket: 8 [ 61.489828][ T1978] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 61.493070][ T1978] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 61.496689][ T1978] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 61.500266][ T1978] usb 6-1: config 250 has no interface number 0 [ 61.502718][ T1978] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 61.508281][ T1978] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 61.512906][ T1978] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 61.517623][ T1978] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 61.522068][ T1978] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 61.528956][ T1978] usb 6-1: config 250 interface 228 has no altsetting 0 [ 61.533947][ T1978] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 61.537560][ T1978] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 61.540762][ T1978] usb 6-1: Product: syz [ 61.542383][ T1978] usb 6-1: SerialNumber: syz [ 61.548939][ T1978] hub 6-1:250.228: bad descriptor, ignoring hub [ 61.551372][ T1978] hub 6-1:250.228: probe with driver hub failed with error -5 [ 61.604714][ T6388] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.614689][ T6388] wireguard0: entered promiscuous mode [ 61.617005][ T6388] wireguard0: entered allmulticast mode [ 61.754244][ T1978] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 61.911069][ T6397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.129'. [ 61.954023][ T6401] serio: Serial port ptm0 [ 62.006610][ T6404] vivid-007: ================= START STATUS ================= [ 62.009102][ T6404] vivid-007: Enable Output Cropping: true grabbed [ 62.016195][ T6404] vivid-007: Enable Output Composing: true grabbed [ 62.018245][ T6404] vivid-007: Enable Output Scaler: true grabbed [ 62.020161][ T6404] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 62.022293][ T6404] vivid-007: Transmit Mode: HDMI grabbed [ 62.034385][ T6404] vivid-007: Hotplug Present: 0x00000000 [ 62.036306][ T6404] vivid-007: RxSense Present: 0x00000000 [ 62.038050][ T6404] vivid-007: EDID Present: 0x00000000 [ 62.039709][ T6404] vivid-007: ================== END STATUS ================== [ 62.357624][ T6380] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 62.361438][ T6380] usb 6-1: device reset changed ep0 maxpacket size! [ 62.365037][ T1978] usb 6-1: USB disconnect, device number 2 [ 62.369071][ T1978] usblp0: removed [ 62.516234][ T1978] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.666364][ T1978] usb 6-1: Using ep0 maxpacket: 32 [ 62.669246][ T1978] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.672797][ T1978] usb 6-1: config 0 has no interfaces? [ 62.674503][ T1978] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 62.678272][ T1978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.681826][ T1978] usb 6-1: config 0 descriptor?? [ 62.887285][ T1978] usb 6-1: USB disconnect, device number 3 [ 62.976141][ T5958] Bluetooth: hci1: command tx timeout [ 63.389788][ T6424] netlink: 56 bytes leftover after parsing attributes in process `syz.0.139'. [ 63.426213][ T836] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 63.514608][ T6432] trusted_key: syz.1.142 sent an empty control message without MSG_MORE. [ 63.596340][ T836] usb 7-1: Using ep0 maxpacket: 8 [ 63.606901][ T836] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 63.611708][ T836] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 63.615888][ T836] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 63.620159][ T836] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.625420][ T836] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 63.629666][ T836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.672912][ T6451] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 63.678668][ T6451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 63.837568][ T836] usb 7-1: GET_CAPABILITIES returned 0 [ 63.841163][ T836] usbtmc 7-1:16.0: can't read capabilities [ 64.050146][ T836] usb 7-1: USB disconnect, device number 2 [ 64.559861][ T6491] overlayfs: invalid origin (0000007900ffffffffaaaaaaaaaabb0800450000300000000000011a0ee0000001ac1414aa0c003d270009000045f00006006700070b670002ffffffff640101) [ 64.595415][ T6495] capability: warning: `syz.1.165' uses deprecated v2 capabilities in a way that may be insecure [ 64.677395][ T6512] binder: 6511:6512 ioctl c0306201 80000540 returned -14 [ 64.883869][ T6532] Bluetooth: MGMT ver 1.23 [ 64.993067][ T6287] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.146044][ T6287] usb 5-1: Using ep0 maxpacket: 16 [ 65.158813][ T6287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.163250][ T6287] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 65.177553][ T6287] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 65.177845][ T6558] input: syz0 as /devices/virtual/input/input5 [ 65.181507][ T6287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.201606][ T6287] usb 5-1: config 0 descriptor?? [ 65.265626][ T6568] syz.2.193 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 65.386056][ T6008] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 65.418451][ T6582] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 65.421975][ T6582] overlayfs: failed to clone lowerpath [ 65.547743][ T6008] usb 6-1: config 0 has no interfaces? [ 65.549452][ T6008] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.552280][ T6008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.555993][ T6008] usb 6-1: config 0 descriptor?? [ 65.644503][ T6287] HID 045e:07da: Invalid code 65791 type 1 [ 65.650430][ T6287] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input6 [ 65.678187][ T6287] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 65.761040][ T6008] usb 6-1: USB disconnect, device number 4 [ 65.922393][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'. [ 66.429445][ T1978] usb 5-1: USB disconnect, device number 3 [ 66.576292][ T6629] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 66.846481][ T6644] netlink: 68 bytes leftover after parsing attributes in process `syz.1.213'. [ 66.859159][ T40] audit: type=1326 audit(1746924772.331:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.3.214" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 66.867749][ T40] audit: type=1326 audit(1746924772.331:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.3.214" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 66.877062][ T40] audit: type=1326 audit(1746924772.331:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.3.214" exe="/syz-executor" sig=0 arch=40000003 syscall=448 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 66.890912][ T40] audit: type=1326 audit(1746924772.331:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.3.214" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 66.920266][ T6650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.216'. [ 67.298528][ T5958] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.299458][ T58] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 67.302663][ T58] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 67.746066][ T1978] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 67.898399][ T1978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.899865][ T6717] vivid-000: ================= START STATUS ================= [ 67.902952][ T1978] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 67.906256][ T6717] vivid-000: Generate PTS: [ 67.910056][ T1978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.910784][ T6717] true [ 67.913929][ T1978] usb 8-1: config 0 descriptor?? [ 67.914831][ T6717] [ 67.918999][ T6717] vivid-000: Generate SCR: true [ 67.921118][ T6717] tpg source WxH: 640x360 (Y'CbCr) [ 67.923160][ T6717] tpg field: 1 [ 67.924537][ T6717] tpg crop: (0,0)/640x360 [ 67.928949][ T6717] tpg compose: (0,0)/640x360 [ 67.930902][ T6717] tpg colorspace: 8 [ 67.932492][ T6717] tpg transfer function: 0/0 [ 67.934417][ T6717] tpg Y'CbCr encoding: 0/0 [ 67.936712][ T6717] tpg quantization: 0/0 [ 67.938273][ T6717] tpg RGB range: 0/2 [ 67.939511][ T6717] vivid-000: ================== END STATUS ================== [ 68.124426][ T1978] usbhid 8-1:0.0: can't add hid device: -71 [ 68.126524][ T1978] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 68.130133][ T1978] usb 8-1: USB disconnect, device number 7 [ 68.566052][ T5984] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 68.685380][ T40] audit: type=1326 audit(1746924774.151:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.2.252" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x0 [ 68.726079][ T5984] usb 8-1: Using ep0 maxpacket: 32 [ 68.730358][ T5984] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.734181][ T5984] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 68.737541][ T5984] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.742186][ T5984] usb 8-1: config 0 descriptor?? [ 68.745623][ T5984] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 68.751974][ T5984] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 69.376070][ T58] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 69.376110][ T5958] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.379382][ T58] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 69.406461][ T5984] usb 8-1: USB disconnect, device number 8 [ 69.410616][ T5984] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 69.816117][ T5984] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 69.965571][ T6759] netlink: 88 bytes leftover after parsing attributes in process `syz.3.262'. [ 69.971001][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 69.976508][ T5984] usb 7-1: Using ep0 maxpacket: 8 [ 69.980507][ T5984] usb 7-1: config 0 has no interfaces? [ 69.982286][ T5984] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 69.986009][ T5984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.990301][ T5984] usb 7-1: config 0 descriptor?? [ 70.015898][ T6761] syz_tun: entered allmulticast mode [ 70.048735][ T6760] syz_tun: left allmulticast mode [ 70.199841][ T64] usb 7-1: USB disconnect, device number 3 [ 70.376333][ T5987] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 70.536063][ T5987] usb 8-1: Using ep0 maxpacket: 8 [ 70.540684][ T5987] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 70.544285][ T5987] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 70.548106][ T5987] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 70.551861][ T5987] usb 8-1: config 250 has no interface number 0 [ 70.554536][ T5987] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 70.559804][ T5987] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 70.564087][ T5987] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 70.568584][ T5987] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 70.572796][ T5987] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 70.578644][ T5987] usb 8-1: config 250 interface 228 has no altsetting 0 [ 70.583058][ T5987] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 70.587134][ T5987] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 70.590541][ T5987] usb 8-1: Product: syz [ 70.591865][ T5987] usb 8-1: SerialNumber: syz [ 70.597013][ T5987] hub 8-1:250.228: bad descriptor, ignoring hub [ 70.598998][ T5987] hub 8-1:250.228: probe with driver hub failed with error -5 [ 70.798874][ T5987] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 70.898896][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.901173][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.456047][ T58] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 71.456133][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.458731][ T58] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 71.857423][ T92] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.901470][ T6811] usb usb1: usbfs: process 6811 (syz.2.286) did not claim interface 0 before use [ 71.978986][ T92] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.006206][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 72.048314][ T92] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.132221][ T92] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.186210][ T67] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.190371][ T67] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.194232][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.200395][ T67] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.203971][ T67] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.213614][ T5958] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.216799][ T5958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.219668][ T5958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.223162][ T5958] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.227273][ T5958] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.370682][ T92] bridge_slave_1: left allmulticast mode [ 72.372464][ T92] bridge_slave_1: left promiscuous mode [ 72.374397][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.378458][ T92] bridge_slave_0: left allmulticast mode [ 72.381817][ T92] bridge_slave_0: left promiscuous mode [ 72.384057][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.632065][ T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.636069][ T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.640167][ T92] bond0 (unregistering): Released all slaves [ 72.661629][ T6816] chnl_net:caif_netlink_parms(): no params data found [ 72.790145][ T6816] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.792815][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.795577][ T6816] bridge_slave_0: entered allmulticast mode [ 72.798287][ T6816] bridge_slave_0: entered promiscuous mode [ 72.822654][ T6816] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.825070][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.829062][ T6816] bridge_slave_1: entered allmulticast mode [ 72.831984][ T6816] bridge_slave_1: entered promiscuous mode [ 72.875126][ T6816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.881002][ T6816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.939547][ T6816] team0: Port device team_slave_0 added [ 72.943816][ T6816] team0: Port device team_slave_1 added [ 73.000941][ T6868] Invalid ELF header magic: != ELF [ 73.013948][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.022479][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.030582][ T6816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.045447][ T92] hsr_slave_0: left promiscuous mode [ 73.048371][ T92] hsr_slave_1: left promiscuous mode [ 73.051357][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.054363][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.061865][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.064925][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.085140][ T92] veth1_macvtap: left promiscuous mode [ 73.087124][ T92] veth0_macvtap: left promiscuous mode [ 73.088877][ T92] veth1_vlan: left promiscuous mode [ 73.090535][ T92] veth0_vlan: left promiscuous mode [ 73.116208][ T837] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 73.283403][ T837] usb 6-1: unable to get BOS descriptor or descriptor too short [ 73.287086][ T837] usb 6-1: no configurations [ 73.289143][ T837] usb 6-1: can't read configurations, error -22 [ 73.594167][ T92] team0 (unregistering): Port device team_slave_1 removed [ 73.642224][ T92] team0 (unregistering): Port device team_slave_0 removed [ 74.051930][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.054657][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.065010][ T6816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.142629][ T6816] hsr_slave_0: entered promiscuous mode [ 74.144931][ T6816] hsr_slave_1: entered promiscuous mode [ 74.147968][ T6816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.150365][ T6816] Cannot create hsr debugfs directory [ 74.270015][ T67] Bluetooth: hci1: command tx timeout [ 74.318225][ T5987] usb 8-1: USB disconnect, device number 9 [ 74.324146][ T5987] usblp0: removed [ 74.350326][ T6816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.366190][ T6816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.370764][ T6816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.375241][ T6816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.474247][ T6816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.488331][ T6816] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.499744][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.502591][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.514932][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.517429][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.634602][ T6816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.871347][ T6816] veth0_vlan: entered promiscuous mode [ 74.892308][ T6816] veth1_vlan: entered promiscuous mode [ 74.915075][ T6816] veth0_macvtap: entered promiscuous mode [ 74.921195][ T6816] veth1_macvtap: entered promiscuous mode [ 74.941125][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.944736][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.948842][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.953133][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.958513][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.962737][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.967085][ T6816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.978540][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.981841][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.985241][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.989193][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.992826][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.997145][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.001090][ T6816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.006464][ T6816] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.012302][ T6816] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.015218][ T6816] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.018350][ T6816] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.068642][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.072124][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.084136][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.087168][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.130880][ T6955] netlink: 'syz.4.287': attribute type 1 has an invalid length. [ 75.133315][ T6955] netlink: 'syz.4.287': attribute type 4 has an invalid length. [ 75.135808][ T6955] netlink: 15363 bytes leftover after parsing attributes in process `syz.4.287'. [ 75.590496][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.723960][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.795168][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.833389][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.841964][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.846235][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.851206][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.854987][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.888441][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.999497][ T7015] chnl_net:caif_netlink_parms(): no params data found [ 76.093505][ T13] bridge_slave_1: left allmulticast mode [ 76.095903][ T13] bridge_slave_1: left promiscuous mode [ 76.098763][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.103839][ T13] bridge_slave_0: left allmulticast mode [ 76.107893][ T13] bridge_slave_0: left promiscuous mode [ 76.110356][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.338201][ T5958] Bluetooth: hci1: command tx timeout [ 76.356953][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.366744][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.371650][ T13] bond0 (unregistering): Released all slaves [ 76.388267][ T13] bond1 (unregistering): Released all slaves [ 76.448853][ T7015] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.451145][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.453926][ T7015] bridge_slave_0: entered allmulticast mode [ 76.456833][ T7015] bridge_slave_0: entered promiscuous mode [ 76.459863][ T7015] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.462169][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.464480][ T7015] bridge_slave_1: entered allmulticast mode [ 76.468536][ T7015] bridge_slave_1: entered promiscuous mode [ 76.536058][ T7015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.542708][ T7015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.588988][ T7015] team0: Port device team_slave_0 added [ 76.599701][ T7015] team0: Port device team_slave_1 added [ 76.635689][ T7015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.638984][ T7015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.647454][ T7015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.651865][ T7015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.654037][ T7015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.663053][ T7015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.683042][ T13] hsr_slave_0: left promiscuous mode [ 76.685044][ T13] hsr_slave_1: left promiscuous mode [ 76.687357][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.689501][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.693046][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.695204][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.711386][ T13] veth1_macvtap: left promiscuous mode [ 76.713452][ T13] veth0_macvtap: left promiscuous mode [ 76.715280][ T13] veth1_vlan: left promiscuous mode [ 76.717874][ T13] veth0_vlan: left promiscuous mode [ 77.194992][ T13] team0 (unregistering): Port device team_slave_1 removed [ 77.243981][ T13] team0 (unregistering): Port device team_slave_0 removed [ 77.722995][ T7015] hsr_slave_0: entered promiscuous mode [ 77.725706][ T7015] hsr_slave_1: entered promiscuous mode [ 77.728773][ T7015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.731139][ T7015] Cannot create hsr debugfs directory [ 77.863464][ T7015] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 77.871837][ T7015] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 77.876340][ T7015] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 77.880317][ T7015] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 77.934605][ T7015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.940914][ T5958] Bluetooth: hci2: command tx timeout [ 77.946837][ T7015] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.951902][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.954533][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.962402][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.964823][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.095197][ T7015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.241574][ T7015] veth0_vlan: entered promiscuous mode [ 78.249449][ T7015] veth1_vlan: entered promiscuous mode [ 78.269978][ T7015] veth0_macvtap: entered promiscuous mode [ 78.273883][ T7015] veth1_macvtap: entered promiscuous mode [ 78.293010][ T7015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.297072][ T7015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.300113][ T7015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.303311][ T7015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.306640][ T7015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.310591][ T7015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.314393][ T7015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.322101][ T7015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.325345][ T7015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.328930][ T7015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.332768][ T7015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.336509][ T7015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.340018][ T7015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.345036][ T7015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.350854][ T7015] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.354409][ T7015] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.358235][ T7015] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.361826][ T7015] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.407062][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.410266][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.416096][ T5958] Bluetooth: hci1: command tx timeout [ 78.436556][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.439820][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.495684][ T7092] input: syz0 as /devices/virtual/input/input7 [ 78.979302][ T7145] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 78.997707][ T7145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.008050][ T7145] bond1: (slave ip6gretap1): making interface the new active one [ 79.010897][ T7145] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 79.013490][ T7145] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 79.017380][ T7145] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 79.037587][ T1237] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 79.041517][ T7153] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.056156][ T6287] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 79.098644][ T6287] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 79.366815][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 80.030220][ T67] Bluetooth: hci2: command tx timeout [ 80.147333][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 80.199217][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.202533][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.206767][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.209986][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.213230][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.216912][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.220043][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.223225][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.226881][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.230050][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.233206][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.236616][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.239714][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.242838][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.246558][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.249662][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.252785][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.256721][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.259912][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.263386][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.267358][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.270579][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.273754][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.277385][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.280617][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.283780][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.287473][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.290724][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.294042][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.297637][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.300896][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.304132][ T9] hid-generic 0004:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 80.312655][ T9] hid-generic 0004:FFFFFFFF:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 80.340492][ T7243] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 80.342813][ T7243] overlayfs: failed to set xattr on upper [ 80.344630][ T7243] overlayfs: ...falling back to redirect_dir=nofollow. [ 80.347715][ T7243] overlayfs: ...falling back to index=off. [ 80.349513][ T7243] overlayfs: maximum fs stacking depth exceeded [ 80.417537][ T1237] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 80.421185][ T1237] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 80.446622][ T6045] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 80.496323][ T67] Bluetooth: hci1: command tx timeout [ 80.608649][ T6045] usb 10-1: config 0 has no interfaces? [ 80.610996][ T6045] usb 10-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 80.614968][ T6045] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.623223][ T6045] usb 10-1: config 0 descriptor?? [ 80.816139][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 80.831446][ T6045] usb 10-1: USB disconnect, device number 2 [ 81.002458][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 81.019081][ T9] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 81.022438][ T9] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 81.025641][ T9] usb 8-1: Product: syz [ 81.028230][ T9] usb 8-1: Manufacturer: syz [ 81.030186][ T9] usb 8-1: SerialNumber: syz [ 81.037190][ T9] usb 8-1: config 0 descriptor?? [ 81.136554][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 81.138225][ T67] Bluetooth: hci4: command 0x1003 tx timeout [ 81.151966][ T2033] cfg80211: failed to load regulatory.db [ 81.247534][ T1978] usb 8-1: USB disconnect, device number 10 [ 81.276725][ T65] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 81.415833][ T7296] netlink: 'syz.5.405': attribute type 1 has an invalid length. [ 81.886942][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 81.997233][ T2033] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 82.038213][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 82.043485][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 82.047796][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.050982][ T9] usb 7-1: Product: syz [ 82.052626][ T9] usb 7-1: Manufacturer: syz [ 82.054492][ T9] usb 7-1: SerialNumber: syz [ 82.106138][ T5958] Bluetooth: hci2: command tx timeout [ 82.146038][ T2033] usb 10-1: Using ep0 maxpacket: 8 [ 82.155345][ T2033] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 82.159972][ T2033] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 82.164150][ T2033] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.174444][ T2033] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.179542][ T2033] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.182451][ T2033] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.392573][ T2033] usb 10-1: GET_CAPABILITIES returned 0 [ 82.394578][ T2033] usbtmc 10-1:16.0: can't read capabilities [ 82.600725][ T5987] usb 10-1: USB disconnect, device number 3 [ 82.669963][ T9] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 83.615203][ T2033] libceph: connect (1)[c::]:6789 error -101 [ 83.620694][ T2033] libceph: mon0 (1)[c::]:6789 connect error [ 83.674538][ T2033] libceph: connect (1)[b::]:6789 error -101 [ 83.677354][ T2033] libceph: mon0 (1)[b::]:6789 connect error [ 83.899899][ T2033] libceph: connect (1)[c::]:6789 error -101 [ 83.902614][ T2033] libceph: mon0 (1)[c::]:6789 connect error [ 83.937879][ T2033] libceph: connect (1)[b::]:6789 error -101 [ 83.940704][ T2033] libceph: mon0 (1)[b::]:6789 connect error [ 84.058612][ T7386] wg2: entered promiscuous mode [ 84.060850][ T7386] wg2: entered allmulticast mode [ 84.176734][ T5958] Bluetooth: hci2: command tx timeout [ 84.406284][ T2033] libceph: connect (1)[c::]:6789 error -101 [ 84.408433][ T2033] libceph: mon0 (1)[c::]:6789 connect error [ 84.433649][ T7368] ceph: No mds server is up or the cluster is laggy [ 84.437839][ T7371] ceph: No mds server is up or the cluster is laggy [ 84.446538][ T1978] libceph: connect (1)[b::]:6789 error -101 [ 84.448599][ T1978] libceph: mon0 (1)[b::]:6789 connect error [ 84.656100][ C2] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 84.656119][ C2] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 84.667429][ T1138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 84.683751][ T1978] usb 7-1: USB disconnect, device number 4 [ 84.696877][ T1978] usblp0: removed [ 84.815628][ T7431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.956734][ T7431] bond1 (unregistering): Released all slaves [ 85.276563][ T40] audit: type=1326 audit(1746924790.751:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.5.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 85.786156][ T1237] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 85.899009][ T40] audit: type=1326 audit(1746924791.371:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.5.458" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de579 code=0x7fc00000 [ 85.906313][ T7480] nbd: device at index 4 is going down [ 85.933965][ T7487] syz_tun: entered allmulticast mode [ 85.936235][ T7483] ALSA: seq fatal error: cannot create timer (-16) [ 85.939537][ T7486] syz_tun: left allmulticast mode [ 86.417434][ T7554] netlink: 'syz.4.485': attribute type 13 has an invalid length. [ 86.495533][ T7554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.606157][ T6045] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 86.770563][ T7582] input: syz1 as /devices/virtual/input/input8 [ 86.779636][ T6045] usb 8-1: Using ep0 maxpacket: 32 [ 86.784810][ T6045] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 86.793384][ T6045] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 86.797472][ T6045] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 86.802918][ T6045] usb 8-1: Product: syz [ 86.804266][ T6045] usb 8-1: Manufacturer: syz [ 86.805734][ T6045] usb 8-1: SerialNumber: syz [ 86.812089][ T6045] usb 8-1: config 0 descriptor?? [ 86.816978][ T7548] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.846564][ T7589] usb 2-1: USB disconnect, device number 2 [ 86.886458][ T7589] hub 2-0:1.0: USB hub found [ 86.888111][ T7589] hub 2-0:1.0: 6 ports detected [ 86.937126][ T97] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 87.046596][ T1978] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 87.066165][ T64] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 87.084330][ T2033] usb 8-1: USB disconnect, device number 11 [ 87.230450][ T1978] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 87.234119][ T1978] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 87.237615][ T64] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.237700][ T1978] usb 2-1: Product: QEMU USB Tablet [ 87.242033][ T64] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 87.242067][ T64] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.242084][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.249587][ T7585] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 87.255026][ T1978] usb 2-1: Manufacturer: QEMU [ 87.259766][ T64] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 87.260739][ T1978] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 87.302743][ T1978] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0005/input/input9 [ 87.371567][ T1978] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 87.377491][ T6017] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 87.521940][ T6008] usb 7-1: USB disconnect, device number 5 [ 87.526030][ T6017] usb 10-1: Using ep0 maxpacket: 16 [ 87.541876][ T6017] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 87.552767][ T6017] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 87.558159][ T6017] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.560957][ T6017] usb 10-1: Product: syz [ 87.562758][ T6017] usb 10-1: Manufacturer: syz [ 87.564665][ T6017] usb 10-1: SerialNumber: syz [ 87.569185][ T6017] usb 10-1: config 0 descriptor?? [ 87.571991][ T6017] hub 10-1:0.0: bad descriptor, ignoring hub [ 87.574069][ T6017] hub 10-1:0.0: probe with driver hub failed with error -5 [ 87.579775][ T6017] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input10 [ 87.656320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.709032][ T7618] loop6: detected capacity change from 0 to 524287999 [ 88.067212][ T9] usb 10-1: USB disconnect, device number 4 [ 88.070578][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 88.290419][ T7640] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.334659][ T7645] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.454719][ T7650] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 88.494227][ T7652] input: syz0 as /devices/virtual/input/input11 [ 88.569590][ T40] audit: type=1804 audit(1746924794.041:12): pid=7657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.511" name="/newroot/124/file0/file0" dev="9p" ino=36701449 res=1 errno=0 [ 88.768439][ T7677] mmap: syz.5.514 (7677) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.979310][ T7687] netlink: 96 bytes leftover after parsing attributes in process `syz.4.522'. [ 89.056691][ T6008] libceph: connect (1)[c::]:6789 error -101 [ 89.059220][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 89.196786][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 89.316375][ T6008] libceph: connect (1)[c::]:6789 error -101 [ 89.318806][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 89.826375][ T6008] libceph: connect (1)[c::]:6789 error -101 [ 89.828975][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 89.883451][ T7698] ceph: No mds server is up or the cluster is laggy [ 90.099259][ T6008] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 90.257661][ T6008] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.263003][ T6008] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 90.266691][ T6008] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 90.270281][ T7757] kvm: Disabled LAPIC found during irq injection [ 90.271302][ T6008] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.277594][ T6008] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.280385][ T6008] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.283969][ T6008] usb 8-1: config 0 descriptor?? [ 90.288329][ T7724] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 90.326240][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 90.700150][ T6008] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 90.702508][ T6008] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 90.704945][ T6008] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 90.707379][ T6008] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 90.709684][ T6008] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 90.711987][ T6008] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 90.714335][ T6008] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 90.716855][ T6008] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 90.719132][ T6008] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 90.721423][ T6008] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 90.723703][ T6008] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 90.726163][ T6008] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 90.728449][ T6008] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 90.731288][ T6008] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 90.733634][ T6008] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 90.737078][ T6008] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 90.742025][ T6008] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 90.784667][ T7795] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 90.810604][ T7795] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 90.816039][ T7795] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 90.819396][ T7795] bond2: (slave gre1): Opening slave failed [ 90.957623][ T6287] usb 8-1: USB disconnect, device number 12 [ 91.436469][ T1237] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 91.688329][ T7843] netlink: 'syz.4.562': attribute type 1 has an invalid length. [ 91.690854][ T7843] netlink: 224 bytes leftover after parsing attributes in process `syz.4.562'. [ 92.180617][ T58] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 92.536573][ T65] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 93.296138][ C2] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 93.516247][ T7902] ptrace attach of ""[7903] was attempted by "/syz-executor exec"[7902] [ 93.656779][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 93.836333][ T7942] netlink: 'syz.3.606': attribute type 39 has an invalid length. [ 93.908959][ T7947] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 93.916340][ T1237] Bluetooth: hci4: Frame reassembly failed (-84) [ 94.130064][ T7950] fuse: root generation should be zero [ 94.359306][ T40] audit: type=1326 audit(1746924799.831:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.3.613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 94.776541][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 95.036648][ T40] audit: type=1326 audit(1746924800.511:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.3.613" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 95.334554][ T8000] netlink: 'syz.3.627': attribute type 1 has an invalid length. [ 95.371472][ T8002] input: syz0 as /devices/virtual/input/input12 [ 95.417530][ T8004] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.906019][ T6045] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 95.926676][ T1237] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 95.946180][ T67] Bluetooth: hci4: command 0x1003 tx timeout [ 95.946718][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 95.986481][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 96.066043][ T6045] usb 9-1: Using ep0 maxpacket: 8 [ 96.070063][ T6045] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.073890][ T6045] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 96.077259][ T6045] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.081282][ T6045] usb 9-1: config 0 descriptor?? [ 96.148985][ T9] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 96.151720][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.154009][ T9] usb 8-1: Product: syz [ 96.155264][ T9] usb 8-1: Manufacturer: syz [ 96.165972][ T9] usb 8-1: SerialNumber: syz [ 96.169843][ T9] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 96.197795][ T9] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 96.288324][ T6045] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 96.355796][ T8037] nvme_fabrics: missing parameter 'transport=%s' [ 96.358169][ T8037] nvme_fabrics: missing parameter 'nqn=%s' [ 96.410854][ T10] usb 8-1: USB disconnect, device number 13 [ 96.492593][ T5987] usb 9-1: USB disconnect, device number 2 [ 96.649965][ T8060] process 'syz.2.651' launched './file0' with NULL argv: empty string added [ 96.815582][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.655'. [ 96.852763][ T8070] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 96.855519][ T8070] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.861166][ T8070] vhci_hcd vhci_hcd.0: Device attached [ 97.046116][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 97.096050][ T6287] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 97.106311][ T6045] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 97.217541][ T9] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 97.221464][ T9] ath9k_htc: Failed to initialize the device [ 97.224814][ T10] usb 8-1: ath9k_htc: USB layer deinitialized [ 97.258705][ T6045] usb 7-1: config 0 has no interfaces? [ 97.260551][ T6045] usb 7-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 97.263567][ T6045] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.268643][ T6045] usb 7-1: config 0 descriptor?? [ 97.473400][ T6045] usb 7-1: USB disconnect, device number 6 [ 97.476078][ T8071] vhci_hcd: connection closed [ 97.478239][ T13] vhci_hcd: stop threads [ 97.482582][ T13] vhci_hcd: release socket [ 97.485218][ T13] vhci_hcd: disconnect device [ 97.536252][ T6287] vhci_hcd: vhci_device speed not set [ 97.563796][ T8102] netlink: 88 bytes leftover after parsing attributes in process `syz.4.670'. [ 97.568529][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'. [ 97.601902][ T40] audit: type=1326 audit(1746924803.071:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.672" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x0 [ 97.916034][ T5985] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 98.077136][ T5985] usb 9-1: config 0 has no interfaces? [ 98.079465][ T5985] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.083130][ T5985] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.097804][ T5985] usb 9-1: config 0 descriptor?? [ 98.156032][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 98.306272][ T5985] usb 9-1: USB disconnect, device number 3 [ 98.457941][ T8121] hsr0: entered promiscuous mode [ 98.460731][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'. [ 98.465217][ T8121] hsr_slave_0: left promiscuous mode [ 98.468554][ T8121] hsr_slave_1: left promiscuous mode [ 98.485147][ T8121] hsr0 (unregistering): left promiscuous mode [ 98.644049][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 98.826068][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 98.849209][ T8141] tls_set_device_offload: netdev not found [ 98.997613][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.002410][ T10] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 99.006500][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.011879][ T10] usb 7-1: config 0 descriptor?? [ 99.237240][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 99.239212][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 99.249142][ T10] usb 7-1: USB disconnect, device number 7 [ 99.256039][ T97] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 99.676317][ T6045] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 99.826148][ T6045] usb 7-1: Using ep0 maxpacket: 32 [ 99.840382][ T6045] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.843670][ T6045] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 99.847020][ T6045] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.851088][ T6045] usb 7-1: config 0 descriptor?? [ 99.854511][ T6045] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 99.858566][ T6045] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 100.026001][ T58] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 100.178728][ T58] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.182072][ T58] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.185236][ T58] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.188187][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.192214][ T8171] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 100.196084][ T58] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.386363][ T65] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 100.412819][ T58] usb 9-1: USB disconnect, device number 4 [ 100.460560][ T6008] usb 7-1: USB disconnect, device number 8 [ 100.465772][ T6008] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 100.876245][ T58] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 100.894328][ T8203] Invalid ELF header magic: != ELF [ 101.066864][ T58] usb 10-1: unable to get BOS descriptor or descriptor too short [ 101.069375][ T58] usb 10-1: no configurations [ 101.070935][ T58] usb 10-1: can't read configurations, error -22 [ 101.235625][ T8231] Driver unsupported XDP return value 0 on prog (id 105) dev N/A, expect packet loss! [ 101.486219][ T97] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 101.801080][ T8256] all: renamed from lo (while UP) [ 102.268339][ T8292] netlink: 84 bytes leftover after parsing attributes in process `syz.4.753'. [ 102.626075][ T1138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 102.903176][ T8344] hub 9-0:1.0: USB hub found [ 102.905241][ T8344] hub 9-0:1.0: 1 port detected [ 103.379519][ T8364] tipc: Started in network mode [ 103.381184][ T8364] tipc: Node identity 6, cluster identity 4711 [ 103.383223][ T8364] tipc: Node number set to 6 [ 103.736748][ T1237] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 103.851191][ T8402] netlink: 24 bytes leftover after parsing attributes in process `syz.5.803'. [ 103.917223][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 103.980311][ T8414] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 104.094298][ T8431] netlink: 35 bytes leftover after parsing attributes in process `syz.2.816'. [ 104.095899][ T9] usb 9-1: config 0 has no interfaces? [ 104.098972][ T9] usb 9-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice= d.7b [ 104.107053][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.114870][ T9] usb 9-1: config 0 descriptor?? [ 104.328631][ T6287] usb 9-1: USB disconnect, device number 5 [ 104.676025][ T5985] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 104.836004][ T5985] usb 7-1: Using ep0 maxpacket: 8 [ 104.839552][ T5985] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 104.843014][ T5985] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 104.846823][ T5985] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 104.850459][ T5985] usb 7-1: config 250 has no interface number 0 [ 104.853047][ T5985] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 104.857732][ T5985] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 104.862294][ T5985] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 256 [ 104.866821][ T1138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 104.867251][ T5985] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 104.875368][ T5985] usb 7-1: config 250 interface 228 has no altsetting 0 [ 104.879803][ T5985] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 104.883379][ T5985] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 104.886857][ T5985] usb 7-1: Product: syz [ 104.888651][ T5985] usb 7-1: SerialNumber: syz [ 104.894298][ T5985] hub 7-1:250.228: bad descriptor, ignoring hub [ 104.897066][ T5985] hub 7-1:250.228: probe with driver hub failed with error -5 [ 105.102126][ T5985] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 105.149923][ T8470] usb usb1: usbfs: process 8470 (syz.4.832) did not claim interface 0 before use [ 105.406171][ T5985] usb 7-1: USB disconnect, device number 9 [ 105.409843][ T5985] usblp0: removed [ 105.463561][ T8483] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 105.729250][ T8507] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 105.746996][ T5985] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 105.897521][ T5985] usb 7-1: Using ep0 maxpacket: 8 [ 105.901464][ T5985] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 105.904612][ T5985] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 105.909544][ T5985] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 105.912176][ T5985] usb 7-1: config 250 has no interface number 0 [ 105.914249][ T5985] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 105.917749][ T5985] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 105.920669][ T5985] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 256 [ 105.923662][ T5985] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 105.928683][ T5985] usb 7-1: config 250 interface 228 has no altsetting 0 [ 105.931928][ T5985] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 105.934896][ T5985] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 105.937706][ T5985] usb 7-1: Product: syz [ 105.939002][ T5985] usb 7-1: SerialNumber: syz [ 105.943172][ T5985] hub 7-1:250.228: bad descriptor, ignoring hub [ 105.945033][ T5985] hub 7-1:250.228: probe with driver hub failed with error -5 [ 106.007297][ T65] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 106.152635][ T5985] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 106.186318][ T5985] usb 7-1: USB disconnect, device number 10 [ 106.189530][ T5985] usblp0: removed [ 107.029919][ T8554] overlayfs: failed to clone upperpath [ 107.060643][ T8557] overlayfs: failed to clone upperpath [ 107.148059][ T1138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 107.637944][ T8572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.641367][ T8572] batadv_slave_0: entered promiscuous mode [ 108.058870][ T8607] "syz.5.890" (8607) uses obsolete ecb(arc4) skcipher [ 108.196699][ T8624] overlayfs: failed to clone upperpath [ 108.227010][ T8626] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 108.298221][ T65] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 109.184629][ T8680] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.187737][ T8680] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.281088][ T8680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.292365][ T8680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.377195][ T8680] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.380080][ T8680] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.382885][ T8680] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.388591][ T8680] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.406065][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 109.449346][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.452222][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.455367][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.461597][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.464361][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.584398][ T8693] chnl_net:caif_netlink_parms(): no params data found [ 109.673065][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.675514][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.678623][ T8693] bridge_slave_0: entered allmulticast mode [ 109.681507][ T8693] bridge_slave_0: entered promiscuous mode [ 109.687748][ T8693] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.690338][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.692731][ T8693] bridge_slave_1: entered allmulticast mode [ 109.695611][ T8693] bridge_slave_1: entered promiscuous mode [ 109.764215][ T8693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.770287][ T8693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.807114][ T8723] netlink: 'syz.4.939': attribute type 1 has an invalid length. [ 109.828665][ T8723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.835145][ T8693] team0: Port device team_slave_0 added [ 109.846427][ T8723] bond1: (slave gretap1): making interface the new active one [ 109.850562][ T8723] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 109.855007][ T8693] team0: Port device team_slave_1 added [ 109.903425][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.905809][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.915506][ T8693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.920899][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.923072][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.931156][ T8693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.946044][ C2] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 109.989435][ T8693] hsr_slave_0: entered promiscuous mode [ 109.992672][ T8693] hsr_slave_1: entered promiscuous mode [ 110.059237][ T40] audit: type=1800 audit(1746924815.531:16): pid=8739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.945" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 110.092890][ T8741] overlayfs: failed to clone upperpath [ 110.141527][ T8693] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 110.145527][ T8693] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 110.158659][ T8693] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 110.163781][ T8693] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 110.232887][ T8693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.242616][ T8693] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.249247][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.251560][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.264865][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.267382][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.406356][ T8693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.560392][ T65] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 110.568251][ T8796] block nbd3: shutting down sockets [ 110.569336][ T8693] veth0_vlan: entered promiscuous mode [ 110.585798][ T8693] veth1_vlan: entered promiscuous mode [ 110.612225][ T8693] veth0_macvtap: entered promiscuous mode [ 110.624264][ T8693] veth1_macvtap: entered promiscuous mode [ 110.632715][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.633915][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.638177][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.639390][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.642210][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.642219][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.643038][ T8693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.657838][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.658278][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.660872][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.664033][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.669831][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.670021][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.676344][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.676707][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.682195][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.682728][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.685422][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.691166][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.692841][ T8693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.694393][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.701392][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.701505][ T8693] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.704383][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.707246][ T8693] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.712230][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.712632][ T8693] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.715577][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.721816][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.724937][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.725985][ T8693] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.728237][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.746103][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.749135][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.752295][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.755315][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.760145][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.763242][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.766543][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.769510][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.772590][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.775704][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.779379][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.781322][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.782358][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.784836][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.788977][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.793399][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.796490][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.799557][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 110.801624][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.805103][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.805702][ T6045] hid-generic 0004:FFFFFFFF:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz0 [ 110.906066][ T5985] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 110.969505][ T8814] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 110.971959][ T8814] overlayfs: failed to set xattr on upper [ 110.974023][ T8814] overlayfs: ...falling back to redirect_dir=nofollow. [ 110.976942][ T8814] overlayfs: ...falling back to index=off. [ 110.978801][ T8814] overlayfs: maximum fs stacking depth exceeded [ 111.078169][ T5985] usb 8-1: config 0 has no interfaces? [ 111.079978][ T5985] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 111.082963][ T5985] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.087009][ T5985] usb 8-1: config 0 descriptor?? [ 111.294330][ T6008] usb 8-1: USB disconnect, device number 14 [ 111.546100][ T5958] Bluetooth: hci3: command tx timeout [ 111.676085][ T1237] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 111.951726][ T65] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.016783][ C3] ================================================================== [ 112.019253][ C3] BUG: KASAN: global-out-of-bounds in __find_rr_leaf+0xbcb/0xe00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 112.021596][ C3] Read of size 4 at addr ffffffff9af80c04 by task kworker/u32:0/12 [ 112.025942][ C3] [ 112.027003][ C3] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 112.027028][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.027041][ C3] Workqueue: ipv6_addrconf addrconf_dad_work [ 112.027067][ C3] Call Trace: [ 112.027074][ C3] [ 112.027081][ C3] dump_stack_lvl+0x116/0x1f0 [ 112.027104][ C3] print_report+0xc3/0x670 [ 112.027125][ C3] ? __virt_addr_valid+0x5e/0x590 [ 112.027146][ C3] ? __phys_addr+0xc6/0x150 [ 112.027166][ C3] ? __find_rr_leaf+0xbcb/0xe00 [ 112.027187][ C3] kasan_report+0xe0/0x110 [ 112.027208][ C3] ? __find_rr_leaf+0xbcb/0xe00 [ 112.027232][ C3] __find_rr_leaf+0xbcb/0xe00 [ 112.027270][ C3] ? __pfx___find_rr_leaf+0x10/0x10 [ 112.027292][ C3] ? __pfx___find_rr_leaf+0x10/0x10 [ 112.027314][ C3] ? fib6_node_lookup+0x12d/0x190 [ 112.027333][ C3] ? __pfx_fib6_node_lookup+0x10/0x10 [ 112.027357][ C3] fib6_table_lookup+0x7b3/0xa30 [ 112.027384][ C3] ? __pfx_fib6_table_lookup+0x10/0x10 [ 112.027413][ C3] ? batadv_send_skb_packet+0x58e/0x780 [ 112.027444][ C3] ip6_pol_route+0x1cc/0x1230 [ 112.027467][ C3] ? __pfx_ip6_pol_route+0x10/0x10 [ 112.027494][ C3] ? __local_bh_enable_ip+0xa4/0x120 [ 112.027515][ C3] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 112.027538][ C3] fib6_rule_lookup+0x536/0x720 [ 112.027560][ C3] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 112.027581][ C3] ? nf_nat_ipv6_fn+0xff/0x2e0 [ 112.027606][ C3] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 112.027631][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.027656][ C3] ip6_route_input+0x662/0xc00 [ 112.027680][ C3] ? __pfx_ip6_route_input+0x10/0x10 [ 112.027703][ C3] ? lock_acquire+0x179/0x350 [ 112.027731][ C3] ? sock_wfree+0x46a/0x880 [ 112.027751][ C3] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 112.027777][ C3] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 112.027803][ C3] ipv6_rcv+0x1e8/0x680 [ 112.027826][ C3] ? __pfx_ipv6_rcv+0x10/0x10 [ 112.027848][ C3] __netif_receive_skb_one_core+0x12d/0x1e0 [ 112.027867][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 112.027886][ C3] ? lock_acquire+0x179/0x350 [ 112.027911][ C3] ? process_backlog+0x3f0/0x15e0 [ 112.027927][ C3] __netif_receive_skb+0x1d/0x160 [ 112.027945][ C3] process_backlog+0x442/0x15e0 [ 112.027966][ C3] __napi_poll.constprop.0+0xb7/0x550 [ 112.027986][ C3] net_rx_action+0xa97/0x1010 [ 112.028005][ C3] ? find_held_lock+0x2b/0x80 [ 112.028023][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 112.028041][ C3] ? sched_balance_domains+0x283/0xee0 [ 112.028062][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 112.028084][ C3] ? sched_clock+0x38/0x60 [ 112.028108][ C3] ? sched_clock_cpu+0x6c/0x530 [ 112.028134][ C3] ? mark_held_locks+0x49/0x80 [ 112.028156][ C3] handle_softirqs+0x216/0x8e0 [ 112.028178][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 112.028198][ C3] ? __dev_queue_xmit+0x896/0x43e0 [ 112.028215][ C3] do_softirq+0xb2/0xf0 [ 112.028234][ C3] [ 112.028239][ C3] [ 112.028245][ C3] __local_bh_enable_ip+0x100/0x120 [ 112.028265][ C3] ? __dev_queue_xmit+0x896/0x43e0 [ 112.028281][ C3] __dev_queue_xmit+0x8ab/0x43e0 [ 112.028301][ C3] ? ip6mr_fib_lookup+0x136/0x1a0 [ 112.028322][ C3] ? __pfx___dev_queue_xmit+0x10/0x10 [ 112.028350][ C3] ? __lock_acquire+0x5ca/0x1ba0 [ 112.028373][ C3] ? __lock_acquire+0xaa4/0x1ba0 [ 112.028408][ C3] ip6_finish_output2+0xe98/0x2020 [ 112.028435][ C3] ip6_finish_output+0x3f9/0x1360 [ 112.028459][ C3] ip6_output+0x1f9/0x540 [ 112.028482][ C3] mld_sendpack+0x9e9/0x1220 [ 112.028510][ C3] ? __pfx_mld_sendpack+0x10/0x10 [ 112.028539][ C3] mld_send_initial_cr.part.0+0x1a1/0x260 [ 112.028564][ C3] ipv6_mc_dad_complete+0x22c/0x2b0 [ 112.028590][ C3] addrconf_dad_completed+0xd8a/0x10d0 [ 112.028611][ C3] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 112.028633][ C3] ? addrconf_dad_work+0x84d/0x14e0 [ 112.028652][ C3] addrconf_dad_work+0x84d/0x14e0 [ 112.028671][ C3] ? __pfx_addrconf_dad_work+0x10/0x10 [ 112.028693][ C3] ? rcu_is_watching+0x12/0xc0 [ 112.028711][ C3] process_one_work+0x9cc/0x1b70 [ 112.028740][ C3] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 112.028766][ C3] ? __pfx_process_one_work+0x10/0x10 [ 112.028792][ C3] ? assign_work+0x1a0/0x250 [ 112.028816][ C3] worker_thread+0x6c8/0xf10 [ 112.028845][ C3] ? __pfx_worker_thread+0x10/0x10 [ 112.028869][ C3] kthread+0x3c2/0x780 [ 112.028893][ C3] ? __pfx_kthread+0x10/0x10 [ 112.028913][ C3] ? __pfx_kthread+0x10/0x10 [ 112.028933][ C3] ? __pfx_kthread+0x10/0x10 [ 112.028954][ C3] ? __pfx_kthread+0x10/0x10 [ 112.028976][ C3] ? rcu_is_watching+0x12/0xc0 [ 112.028992][ C3] ? __pfx_kthread+0x10/0x10 [ 112.029015][ C3] ret_from_fork+0x45/0x80 [ 112.029030][ C3] ? __pfx_kthread+0x10/0x10 [ 112.029052][ C3] ret_from_fork_asm+0x1a/0x30 [ 112.029082][ C3] [ 112.029088][ C3] [ 112.202600][ C3] The buggy address belongs to the variable: [ 112.204903][ C3] binder_deferred_list+0x24/0x40 [ 112.206875][ C3] [ 112.207836][ C3] The buggy address belongs to the physical page: [ 112.210291][ C3] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1af80 [ 112.213555][ C3] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 112.216591][ C3] raw: 00fff00000002000 ffffea00006be008 ffffea00006be008 0000000000000000 [ 112.219841][ C3] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 112.223066][ C3] page dumped because: kasan: bad access detected [ 112.225555][ C3] page_owner info is not present (never set?) [ 112.227898][ C3] [ 112.228826][ C3] Memory state around the buggy address: [ 112.230947][ C3] ffffffff9af80b00: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 112.233975][ C3] ffffffff9af80b80: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 112.237068][ C3] >ffffffff9af80c00: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 112.240059][ C3] ^ [ 112.241591][ C3] ffffffff9af80c80: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 112.244595][ C3] ffffffff9af80d00: 00 00 00 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 112.247660][ C3] ================================================================== [ 112.250902][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 112.253672][ C3] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 112.258085][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.262161][ C3] Workqueue: ipv6_addrconf addrconf_dad_work [ 112.264532][ C3] Call Trace: [ 112.265857][ C3] [ 112.267020][ C3] dump_stack_lvl+0x3d/0x1f0 [ 112.268805][ C3] panic+0x71c/0x800 [ 112.270327][ C3] ? __pfx_panic+0x10/0x10 [ 112.272171][ C3] ? irqentry_exit+0x3b/0x90 [ 112.273647][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.275263][ C3] ? __find_rr_leaf+0xbcb/0xe00 [ 112.276744][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 112.278339][ C3] ? __find_rr_leaf+0xbcb/0xe00 [ 112.279852][ C3] check_panic_on_warn+0xab/0xb0 [ 112.281400][ C3] end_report+0x107/0x170 [ 112.282984][ C3] kasan_report+0xee/0x110 [ 112.284844][ C3] ? __find_rr_leaf+0xbcb/0xe00 [ 112.286923][ C3] __find_rr_leaf+0xbcb/0xe00 [ 112.288876][ C3] ? __pfx___find_rr_leaf+0x10/0x10 [ 112.291016][ C3] ? __pfx___find_rr_leaf+0x10/0x10 [ 112.293194][ C3] ? fib6_node_lookup+0x12d/0x190 [ 112.295262][ C3] ? __pfx_fib6_node_lookup+0x10/0x10 [ 112.297474][ C3] fib6_table_lookup+0x7b3/0xa30 [ 112.299596][ C3] ? __pfx_fib6_table_lookup+0x10/0x10 [ 112.301847][ C3] ? batadv_send_skb_packet+0x58e/0x780 [ 112.304072][ C3] ip6_pol_route+0x1cc/0x1230 [ 112.305951][ C3] ? __pfx_ip6_pol_route+0x10/0x10 [ 112.307978][ C3] ? __local_bh_enable_ip+0xa4/0x120 [ 112.310111][ C3] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 112.312368][ C3] fib6_rule_lookup+0x536/0x720 [ 112.314356][ C3] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 112.316474][ C3] ? nf_nat_ipv6_fn+0xff/0x2e0 [ 112.317935][ C3] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 112.319482][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.321230][ C3] ip6_route_input+0x662/0xc00 [ 112.322678][ C3] ? __pfx_ip6_route_input+0x10/0x10 [ 112.324428][ C3] ? lock_acquire+0x179/0x350 [ 112.325815][ C3] ? sock_wfree+0x46a/0x880 [ 112.327236][ C3] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 112.328764][ C3] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 112.330565][ C3] ipv6_rcv+0x1e8/0x680 [ 112.331832][ C3] ? __pfx_ipv6_rcv+0x10/0x10 [ 112.333210][ C3] __netif_receive_skb_one_core+0x12d/0x1e0 [ 112.334974][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 112.336868][ C3] ? lock_acquire+0x179/0x350 [ 112.338708][ C3] ? process_backlog+0x3f0/0x15e0 [ 112.340229][ C3] __netif_receive_skb+0x1d/0x160 [ 112.341720][ C3] process_backlog+0x442/0x15e0 [ 112.343232][ C3] __napi_poll.constprop.0+0xb7/0x550 [ 112.345320][ C3] net_rx_action+0xa97/0x1010 [ 112.347253][ C3] ? find_held_lock+0x2b/0x80 [ 112.349192][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 112.351338][ C3] ? sched_balance_domains+0x283/0xee0 [ 112.353523][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 112.355720][ C3] ? sched_clock+0x38/0x60 [ 112.357572][ C3] ? sched_clock_cpu+0x6c/0x530 [ 112.359619][ C3] ? mark_held_locks+0x49/0x80 [ 112.361630][ C3] handle_softirqs+0x216/0x8e0 [ 112.363696][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 112.365902][ C3] ? __dev_queue_xmit+0x896/0x43e0 [ 112.368068][ C3] do_softirq+0xb2/0xf0 [ 112.369842][ C3] [ 112.371061][ C3] [ 112.371970][ C3] __local_bh_enable_ip+0x100/0x120 [ 112.373538][ C3] ? __dev_queue_xmit+0x896/0x43e0 [ 112.375118][ C3] __dev_queue_xmit+0x8ab/0x43e0 [ 112.376605][ C3] ? ip6mr_fib_lookup+0x136/0x1a0 [ 112.378198][ C3] ? __pfx___dev_queue_xmit+0x10/0x10 [ 112.379876][ C3] ? __lock_acquire+0x5ca/0x1ba0 [ 112.381423][ C3] ? __lock_acquire+0xaa4/0x1ba0 [ 112.382916][ C3] ip6_finish_output2+0xe98/0x2020 [ 112.384525][ C3] ip6_finish_output+0x3f9/0x1360 [ 112.386082][ C3] ip6_output+0x1f9/0x540 [ 112.387411][ C3] mld_sendpack+0x9e9/0x1220 [ 112.388836][ C3] ? __pfx_mld_sendpack+0x10/0x10 [ 112.390363][ C3] mld_send_initial_cr.part.0+0x1a1/0x260 [ 112.392078][ C3] ipv6_mc_dad_complete+0x22c/0x2b0 [ 112.393665][ C3] addrconf_dad_completed+0xd8a/0x10d0 [ 112.395313][ C3] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 112.397134][ C3] ? addrconf_dad_work+0x84d/0x14e0 [ 112.398779][ C3] addrconf_dad_work+0x84d/0x14e0 [ 112.400334][ C3] ? __pfx_addrconf_dad_work+0x10/0x10 [ 112.401925][ C3] ? rcu_is_watching+0x12/0xc0 [ 112.403750][ C3] process_one_work+0x9cc/0x1b70 [ 112.405767][ C3] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 112.408756][ C3] ? __pfx_process_one_work+0x10/0x10 [ 112.410873][ C3] ? assign_work+0x1a0/0x250 [ 112.412778][ C3] worker_thread+0x6c8/0xf10 [ 112.414726][ C3] ? __pfx_worker_thread+0x10/0x10 [ 112.416763][ C3] kthread+0x3c2/0x780 [ 112.418487][ C3] ? __pfx_kthread+0x10/0x10 [ 112.420392][ C3] ? __pfx_kthread+0x10/0x10 [ 112.422361][ C3] ? __pfx_kthread+0x10/0x10 [ 112.424323][ C3] ? __pfx_kthread+0x10/0x10 [ 112.426261][ C3] ? rcu_is_watching+0x12/0xc0 [ 112.428202][ C3] ? __pfx_kthread+0x10/0x10 [ 112.430157][ C3] ret_from_fork+0x45/0x80 [ 112.432037][ C3] ? __pfx_kthread+0x10/0x10 [ 112.433971][ C3] ret_from_fork_asm+0x1a/0x30 [ 112.435997][ C3] [ 112.437657][ C3] Kernel Offset: disabled [ 112.439396][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:53:37 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=0000000001767700 RCX=ffffffff822a92ec RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000007 RBP=ffffea0001767700 RSP=ffffc90003597758 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffea0001760748 R13=0000000000000001 R14=0000000000000000 R15=000000000000000a RIP=ffffffff81ba9663 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f36e40 CR3=00000000453e2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73d2ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff8880201ed290 RCX=ffffffff93c30ec0 RDX=00000000ffffffff RSI=0000000000000004 RDI=ffff8880201ed290 RBP=1ffff92000da2e99 RSP=ffffc90006d174b8 R8 =d48d5b6938f11bf9 R9 =0000000000000001 R10=0000000000000008 R11=0000000000000000 R12=ffff8880201ed298 R13=ffff8880201ed2a0 R14=ffff8880201ec880 R15=0000000000000003 RIP=ffffffff821f2850 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7476188 CR3=000000004b2ae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a800000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff88801b4a8000 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff88801b4a8002 RBP=dffffc0000000000 RSP=ffffc9000107fac8 R8 =0000000000000001 R9 =ffff88802b43ae54 R10=ffff88801b4a8003 R11=0000000000000000 R12=0000000000007f59 R13=0000000000000000 R14=ffff88802b43ae40 R15=ffffed1003695000 RIP=ffffffff8b6c0348 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71e3820 CR3=0000000076918000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854c23b5 RDI=ffffffff9addfc00 RBP=ffffffff9addfbc0 RSP=ffffc900005e7f48 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3966666666666666 R12=0000000000000000 R13=000000000000000a R14=ffffffff9addfbc0 R15=ffffffff854c2350 RIP=ffffffff854c23df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097aec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033206ffc CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff85ff459d ffffffff85ff507b ffffffff8a9e8550 ffffffff85ff05ac ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff85ff56eb ffffffff84c8fac8 ffffffff821f6fe6 ffffffff8724b152 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff85ff34d0 ffffffff81a86151 ffffffff85ff5e5b ffffffff85ff5f99 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff87244b0f ffffffff824fb240 ffffffff89cf99fa ffffffff85ff574e ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff87244e7a ffffffff85ff3c8f 0000001c00000004 0000000600040008 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff85ff519d ffffffff893fa5cf ffffffff8724b596 ffffffff85ff356c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff823df8f2 ffffffff8168ed5e ffffffff816cac3c ffffffff8724b031 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff824fbba5 ffffffff8485c1fd ffffffff85ff459d ffffffff85ff507b ZMM25=ecd6738decd6738d ecd6738decd6738d ecd6738decd6738d ecd6738decd6738d ecd6738decd6738d ecd6738decd6738d ecd6738decd6738d ecd6738decd6738d ZMM26=5a8ac07c5a8ac07c 5a8ac07c5a8ac07c 5a8ac07c5a8ac07c 5a8ac07c5a8ac07c 5a8ac07c5a8ac07c 5a8ac07c5a8ac07c 5a8ac07c5a8ac07c 5a8ac07c5a8ac07c ZMM27=5ecf7c185ecf7c18 5ecf7c185ecf7c18 5ecf7c185ecf7c18 5ecf7c185ecf7c18 5ecf7c185ecf7c18 5ecf7c185ecf7c18 5ecf7c185ecf7c18 5ecf7c185ecf7c18 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7206000072060000 7206000072060000 7206000072060000 7206000072060000 7206000072060000 7206000072060000 7206000072060000 7206000072060000