last executing test programs: 7.099130185s ago: executing program 0 (id=998): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 6.73137238s ago: executing program 0 (id=999): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000080)=0x6, 0x8) 6.578848866s ago: executing program 0 (id=1000): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) 6.360132855s ago: executing program 0 (id=1001): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x24, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@eol, @timestamp={0x8, 0xa, 0x9, 0x6}, @window={0x3, 0x3, 0x62}]}}}}}}}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, 0x0, 0x8000) openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400006fae41ec02d930d800000b49e2", @ANYRES32=0x0, @ANYBLOB="2b030000000000001c0012800b000100697036746e6c00000c00028006000f0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) keyctl$clear(0x5, 0xffffffffffffffff) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f) 3.049316948s ago: executing program 1 (id=1005): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002300)="c25fe92f8abc969bed99d08f79b0419fc38464bde58fcd9ff2c66ee27597c3302dd9e543b48869a354ccac79c0a5f4c87c5051767e7b9494776086c67bdc10c1fc971bebab8cc66ad73bb04cfbda45ea7a49bcaf3178fa928268b9695b66e8368e4cc9c370a8cef624d1cf11171d4dc8f3ecf4189c03e9b21b40188b0110deca65acdc619e3c4a2c8b27755043cc59f366954e4b4dbc4b0c2f9753ad4ede00020b236bbd1890422f79da954873348832de23b031c13ecb9a793569982fdb7e7fe342f24564ad61a14215255ace0f509d958e05877fe4ed09519d85992b0cd58af95dfc3b4454869373ea7d8b53f1105d942e4b718f90d42354e7808098cb01e7189bbe69a0429bfb14ef0621b933ec890c020cdf916271d8d2cc5c8ba1c038fb4c272acfeb7c28d8bfdd9c2505bd2e9fd4b65769d28be67d983f08a094a42b3556e02bbfdc8474d4217fafa45d511601dff25446492cc6dce7f2e51de49de941b0e6572c50142c63bc132927a3f3a617172e8cca42435ddce7a39bed678dedaf79c33db5d28b6a27a83f55bcb7d3219e2dfbb632b5bf23adc6619f18fa6d3738dcb3bed93f9a4f28001781e2c101bd193b6394520a6525c3c1af17c5490e3498e14dbc2b3250be1af54d57047ded6efb0f934496612544922e0be0d7da4f9622756b6fff60a6de549a379ed4e2804ca8dd78e053e66ca2b04f0a780d655cd152133c6e6e002b0717541b96bc6a817cf847423038733367710ea72f195d59a18a5dd74c01a7fa7a88444a18c00bceeeac0482f2476eb38f6114c971d0eef126d2b19a1aa5ec61d61610c590ae30fcb13c8967c55a41cfd5138d98282be1b32dd961c821de02e0c8b475b8825ecd263cacc514a33cbc1db31f2a2af59fbe6624d4f1fc714053abe7b2a8941d5b925c556a00ca39bb306720e2872e06d098c8951e3649e762be7c2afae976ad9bf33f58b1819862f052392dd190ba80dd49a9384c65042604fbd85c4a9591c12fe296d62785d565592e1b02da5a0dd858145bb7d3a8ebf4e3d3ac51d0baa35b24a43343fcb7c3b7bdbcacb20eeceee5ecb2e28258cb4936f9e4289b1c8ae453ec42ed8faf75c46d2fadcbc5804cbeb4c598e9005f3b398794e6d5d4aa873301fd29aef63619635fcbe59503cc26cae343cce058e70a00bd379cf547024b9155c5c2fe4eba01fd0ba936c1852afe9046297a32e3c9d747d1659cddcaea0394b9e15ece3c3adb6da8b24174b99a80d243231e062188d4efe48fb8e4f673fcc650fb5cec06f88b486643cc392980f1b134b1ffbe91ab4b2b891540a53c416136d26421afca75108a8f318e845812edce949138dc800897d9c5b3047f9de9e4bae123d0f0c14f7af2cf684859b443ed307e28bcd0454febc38b38e49943ab19b0ca902c36f9e4ce5e1eaaa3f65a173159bc5592db6c1faf769df6570bd4b3256dd1a6ee6ffcbdbb5f9b405f09ec5dcba2a99cfa768670fd31ef9f806be5bacea3c231b206e410f27fd0e9b92b6802b5680bdc4dbfd06ca18863c071c3ea9e03c49ec5c318883660eb54a3a33fa5960dc49fba22935062f76f6b0cd43dd8d945944db0aaf62b2a0c07804598044fd89133ad173bff589a12276e50acbcfdfde498924ff20cb3260bc637524248450a3d6e973eec83bfb792a5ee52a4a2503a45825f65aeb0fa1a131085cbe516b8c9da8a62b4174f892b3e316992115639ceca6f2d62b77489451c3b1581d0b89ec713da59a08af5c4b34ceb3222142f0b5dd70b8c1185123a4619247fbca0057bcbda20806359c254302db6c1dd26cdf1438edff4af95ea8dedb81266f03084dd646ea54a1b4f26bb62c2e1649719bb5481ef8dd28c0500000000000000bb834540c8a7fcd78c69d98cfce662a3950bfc22a6118caf0f90bb88305945206c24d1d68de9b151a84670547f96e538cc3f5b307a60b0e1a8b143c627659f19d79abe2597fa5ae59aab556664939c671a6daed60c9330d7c6323671fe71f354e6b08823c7c8dc5e2f4af4be26c8fdd4478a4a919c9233593d3b3ec0b49e4f25132acc4eca8bacda98927ad262e57622a8af00bb5e936bc08254896499e7e4aa06caf1b9a00e924c69d8fd5e3500cace65c72c9a8e64d5b68c91ed50fcb22ffe5b3eaffc0e0cbc8bcf16be8571a33abf61dc47dd02ac84a213243764babde850627fdfde1222702c8c15f324c77ec56b6fcd6dc11f50c91b0b11763554914aacf0cdfe41b26eb68f5d781f89cfd19c6fb7fe2e5ff19238290e864ea8eb1a900599ef222e7c62671f8a7bb06bfece509d2c40d8f7445e8fa0c0a4042cb41bd74442b99d27d224fcaa582f2240f816051f84bd548dc95a2b0ceb7ebc48e6357c56938270633e176f7e96969ed8fa61316518d04e8ce8668ea077b88155a97b6ca114ed2058553c4c56ec8d9e353020aa2462ec0312e3183c56d1c3bd86d9e32a0f27f78892ee0baba6c0dbef9c8c0837916604c8d652335d84581cfe08246d530d16abd2690825a2c2394c4880f5ea05d4a1ac78f47f6e716a3cca31d296f76e1fd519a6216764619cf29c4f76962450f9a79b4eaa4d3f8528a1155b1060dcff96240d95819c78f05310d0c4c22187b35fdcfb2bd64d3e7f3ba197be39ae4e8d3c7533ca087f71f691eb63b67c5facf7b7d38b33b00d7011fc0a1769687d65be802209a5469c8f7adec77c07c60e18b2f0ff963a8cb4a4b02f7bf63b69a48334c0a3cafe1d34c532b876c50ab82f48d812618fa51675cbc77f0e521fcf3140819d89e9a6dc759ab736e6e80c00ec8eb439e16f1d9bb8061ef4082f54c59ad03982be21119b0c3dfdd602272a211a764a447cd5ce94251fe371d8f74ded0d805c1d41ef27909f2e918dcf4dda25d122419b97613d6efb3c7edffe770dfd1e440f19fe6dfa43802b490afcb79c93b70c1a17cfd6d404b5d325e4f17c01e95d7acf57c49854efb8e08bee019f7390112bab655d50a723e5722e7de5fe20c07550860f9d8bf83ae209c94f515f1d30dde80eee19bc10ccb5041409b522c8713a47fc5936b36946d37d9d9d11fd3c31e642d02d4d90cbc49665aa86f03db25b5858c5a2befed8edfa6a340da89b800a3a40f3ecbfd129efb06cee403ec46df6d3c04e720284bd2178dcea52fbbebd1d9d81ddaede61e1ea3a043a78dbea14c01cc3d2f6f27e96efbfb5b076232a704cdc9ff0be4013aedaf6384ae954be6f105696cdddc7ec390dac959d790877cf474e3ee574ee907b0ff62dce094550a283a13ec45588b8b992ab48926b6d9cad3d1ec96972060280de5bbc821acdba3d7677e11b410f5768c3106079e6c0e0188ef1940b365b8d6fa6221665e40a00a898fe6538c2102fb9af48883468c92e7e16ab7b2527bb158077a9547406198231b4284c07e308c0dd783016a006a605985e968a41a4f4855db68559a53fb36c0e9d0de6d9f43be212673d87b9bb57b400d4e20cb8a19de9d4252b7aa6d5a566d52e59c87d681f8adaa961a6fed9a3f541cda3ca7721fd3534ca928ad8f46965273a825c0100b784a87d79b5e301f5e2b122d9ceb3d28d2d0a4b9470e52b6d5f9414d0116093893e30e2a028f0c1ae5f769e592fa92e6d6d03aed87314abcb27460087d0dc6e5e946cf1a9ae63b5f151518f125578a5c5a6537298c93c9a9ac262470d584b2793179d8c1c59938441f7db57ecc1269816ddec8de2f3d252dd0dcd250e4eb24d25821e0ed5b3a33432e5257abb4000d0234e9eb5ebc76833e0d62b9d5bba942395b65800a3f25e71bdb616e9c14264d6b9ddc4924b55fb9182a7eff5d865e1053c497416971147a6de27fd1fc8b94b3644e205f7d96c049fb977757525681c552c9524b72ff5c9f835c397b21767b7972430568fad75b0b4fc6b677b14a024aed4667b08483028e9f2a6960e7d53894f9083483fe3243bd33fa83e0a7b9e7171d0651a05b6c97e8dc7ee6acf55c3fd2064b22ee04f8f692e861c56495ea7a1abb22b8f7c8ac3c50f6a8945e481657fbad03f7fa7f5e4273fa005126d52e54b6a235c961328494060c50b0e3ee7fe168b3a41f294c46742e843b10732eeba9fed8550eb99227f6ddacaac551c64f3c3a0dda192153ba4bce885d569c6b87f968988dde04afd7e32d6d08d144a66c42d9a251595b3bc260c2c2bfa2c8dcadc83732e21a0d5f3c43bbb719a35e18ae49b3c93acf0962cfcf652a786c0fc84007b5c66fe924e800ed4cecd378e20f04a90d76aac0dcd0ba4fbe37a6777bfff1e4bc05701a886a64e7b56ba95cafd0555441933321d0161ee6fdc560043a4f45647c531a2ea86c69ddf92883f7c211633400e5ba58b457f5c9e23f49c1dc397d32b1daa3f5b8f874d690c24c7e9f914d6c99fe1e7f5220663b82f7492c3c7408365363e79bdf95cd9e61c215128eb3c06b7d8972da72b830d75aec05920df4f48919fc96b2493bcb528f147b94f606297e80d5b88ffc40d372b380211acdded406222354a923cc39f59ae3ad7647b1b30245b30dc5079133a18cd9832d422a2b1ecc0b2c3a2b10d50aa4e230752194ff1759a511baf82c8c51718c83fbf442f3d31c1beb1bac54acf312837cc007b3c85d09faa04b47e16e841b4a5f9d4eadb856d258ec3adb1c06a16b8999150380163f5049d1c94f3dca1dffefda98ba363e65b8162a848b413a9954e0354200c5d408d8ca7379ac4f2cb3c990afdb4a18a32896da47f5cba3a4954d4e78b4e342a4f6a4f4d01ce0905370265788b42fe9939859e055df03e522f4dabd60aa0411bcad2f6ba87b8a11e97ad25c4605ba48aad77883eb1325df4019a3c9c2a2875a24d69f652f84c732226e3af0e9e03ae0804439b38ea058988d34696c247f52e426cfb3262b5f18820eadef9b34d44b660679b48b7c6ef78c3549bded8a771bc20b93c2602a55767184f38eeff2b3a41d3efdffaeb3cb4d20236a0e2c51e5c2337f3de0f6351c6f66906b8b7fea093b9fbd20f597d8b4fb2fc48be1241b9433aae081f933a23766ad7cd9642b3c61f1b1585d624263df187b8185d5198338a1587fe23ee2d533e74b10afb3cd5c450a50cd99df38b3a861ad2c79a0ad1981da5ec1a0af41ab14d685f362ccf3b5f4a4e52750fc151f6877557818dbcfa42884753de52b9d0235f512cc20ba3ab1aaf9598628f0498a40e7f3ffe2a3564418171d8cbbbd32dc9f7b2ba92258ed8baedc048cd6a1435ae88d3c18b330876f8971885d1a324832e0c0ced4003bb28860f35b2a8a33aac1faf4e610707004bdc3980bc183f33765ff1738638025b37f986c005b15906922738141c414180a74f8c9dd9bcfc3a83ea01c2092d6fa2f371fb496499151359f58d8a95c3b4f38e621bafea202d3f35cd0562ed1516574416dbe5ec9ac9d256dcd584ba821bba4a06df6e0c8a20283fd6bfba4cd03126915877ba52b9c0e2a0e8188844e2333309d6408c2add7947f840b99c03147c3f03a682f82a5a3f99b7c7630dd275eec6608c974cb1487aacdde5ea6417367f8b6585e5eb2eae5fb56119d772fac2110ff8cc260cd525ef373b3368004b7b97343219e30ca4613860538a8332fb0f660c1a27ee1810b21db81504b78d0bc3f1ab93b9f631510a70a982736c5e3b3aebd9c6c8c72a00849e5dc164c1cde60f2ccc60a681c32d34a07de5a9bde57420759f85606e280d6ea7abfede9a5b3a00f0501eabfe95a11c5735248874899550c431eae8a03eb65fcc77c94b7eae7574bc6841d3197c168568e5052546c8b788f3effeb5d3fb9e28c1cc78ae44eed4f2701be68447b25eeb850b64f4a8c1f0ecb2f644ed7cafad30c8233366df828ffd9931d39c903b5e3a37f6d347f2b6e5c126bef846e131014aed7abc2e313ada69b7a28c80a7add2876ca1e9cf6da27c748817bff09b6dea519c8d089f8d897df6fee6d3497133e673187b71c14e3bc8e58668cd4fbfcf26af555212a1f2e36828dea26b6575418e1f746fae9c790e0e9980ecee1c01490fa3c340cce1c5992146de97f4755e5f8d8f893702cfe400cb1044910de1185a8ee908ce47dc5b77789aaf4d597320b7f67882dd5a86b25ce76d086748b5c383674441db63309461c9980becb7f91e52e659997897789ae0b57c7407457a54d69456b9de44f798cc00b9e42be88476d8acf82f53f3b0c260301572186a7322206f5b2508f665b6b1ef5f8fa5674037e048c3442219c1f1754544f02893ef4b7a5b8c796cc4d8aadfcbfb186ad4d42ccdccca1d435792b2ecbcf62402a86ceeb438f3b0ac77a989ba72ad9a197036aaee26ab333d752127d26bb02907bc14d59b115fba11bb2b5e514f4424890e5048e92966480d1a75aec55857ee3f2e03b2268909cc5255990191458d24e572d4082ff86e59245aa454c05b3256d6641a8234857dc7c46a6ad02f7c634576abf1eebdbbc7495c58cb0f5687dfa7ca75478b316a133097e11114be1fd8199c203fe6148ed7eec44ed08fcf9bb572d1b57e241fd785b75bdd594680efe249d4aec73e820b35d49e8702dc0ded75596a8b57ad834654a32e328e0cfd60206590c36808c33dc7904a906aee4b01b390798e087eed3f153a0e6e976f66e902ad31fbad6c6200c4717f920ba06168bfea1720a8d0caf68d9695f19b8086de2d110a86f01f4d9fbdff14a11f6b79a725a3df07ece5571fefcf67a355a3b7cf05e1fda44c4f34d648558e59aee1441375021dcfef82493317e0053b4baf892f10fa7bbfd6b184aef6aab621c23b7d06cea5e4d50e42f38195fb61c4e72dd1b65a182a1fd54d68a79ef83886b8a5981402cb13c66ac1146c11195bfd4bae777e6581122fea891a50df83df345b2022579fc407b82189f5b85118bba51469b116794d664713deb1ae60bcb92bc2591291337357b6c721cc6b13031b7ae27954a79dc3b2ddac0ea3fbc932fdb5e5eaf36a6988ae4687ec6f087ea2f37b25ccb8e40da04772ad5a6547d98ed286097725e35d0af2ac508300b8b9a2b6762ad7a11b4dead39c96807dc225e18945b4fbb09c51457b7ea8108ea8c5c5f57a57d15bd936cb0b1f3ecc2e1a6412e82895cae9fbbf2e75edf0c7abc050b51a66038dac3f2ce0d7f1fbbd4e13515a3897ed386c7f5312a2e8ae8ae9775ea32160aa7dae2aa0e7151a7ffc689eb5d27182ebb99981e062d53ef5715fc762afb364e509f5dd398bda630f53eb7bb41f34d0ab1107cf6da5b016e11113231d31d87835ed66b07c8537dcc05181641176725ffad4c5e36c50b180c948632e75252724fbf1d675d7aa1e48a484dd94b56f5ce6893900344e6738fa69dd79b72c60130fc9a30acb8405a8ed2d9c7a47f642f1c30af4676e56df55c697cc32eafe346c2ccd8a66072c31b9baead28e358d572ab85337c51775b7762a491ac6d16653141752b15cd101e209e4866c4d55380f566069a3d30f69af59139d2b0c445572817f98fbb3eba8f12a225952c76f32cf47250765f66c2a43007fc2c6b3dcaae64cd318731699905e999307fb2aa776734441cb2424d4ce80ef0100d71c586d1d76c626a3899f63dd06228e2947a71df0086145291d6adf565bcae55887025bba5a8080344018c9e96487c766c009cdd3529ab4b3f33455605b451eb3d3175f733a5a8dcb8a20fc976f87ce32ef0126aeacdfc99406d841ea708809b9f0efae116ca79501b866b561972384842e583b0b956f2fecfaaa908bbeca772254cb5fb1e8052dbc0be1bbbc2669a4497b92a7b7602e85df1b9a7a83e780dbb73ea139a8d20c32a8df62db28952239ed1590036409f902451cc65ab02890d0f674ccf82c8a7b2c2288e0afb122076e0372e6d328f98af7bddf10f69b9d7aa5590b8112e94671fda9814356fedf96ff3f89d9be332c00cfc90f68de0cdc42a396a4ef6c6cee9c1226fd5a9fd99f2dce2ff1806b55450b900f9e48cdd8caf6ea3aea975c37570ceff169494ab6485687336cd85d935148b8ecb4942b6cd11311b1de1eadef33fd1763de931c6b7bdb42875288e9d1f52614274d6a82d2d565f82dfa52b1da1391e9bf723f631b4d7fdcf434a50ee2e218b89cd1250b6678783497a74b8a1384cb5c959c7730c7687f1bf8876642d211e2d9f3a078316d3df0b10877f1b8cedb5c205b54f24499cc8c04b84bf411958f5c4633dc2eca1422fe00b3a541f11774d29d0c10a0cb029e552d4a3d6b0fe9f095709490debf0577bad4a0ed711b3f54c6145ec50c42af56874c338f98d93ca19aa9c2c1f6fbcc2829b0c610f02dd24b7eb22b9a114ae7f063aff1ecddffc3cc583fe635670af8ed3d58da7447f3edd5de0744fb473af8fa2349b2aa1d67a35d5f72e65d948d4b360a1d3b1016bea9676abbcf8544f2c4ffd90f3c585592f130ff213c37ac140b6d7cb25ee0bfa65f971bc99dc7b04789f5648f40d51742b93b58bb07295196bfe633d863f6905f6862624df9b49b0e70ed40dff4a1751fdcae387e4fcaf2d78b0d8633ef0fe7d97c2c9fae64139c0fa1f40c22a1099ea064aea5f1273495ddb522d545f5a7f9057e3d245efe9a92906137a6832e0ce04d8686a3be98b7a12c89cd157881169d1df8ef1e517b754c9be66e1c034f3295287b6edaa530f83f8f2a2f313e8bd5c941ab49d44289259c1e90ef6117c656145436cc4dc3cef1f4c27378c15923bee50a8a3ef87ac8c7e5192d005b40cbc0476fec78cd9be654f1e3d8729f7d5433bc06ae145a09f32ab4926de13549a714ce4aebaa3633cb376450cf07a36fb32cc5c1818d43261f97d686b3383baca4de4b15eb6b282b68e69488127fdf9e79d7314f9ac62b4a24507408df166e67453c5424b1b01a4f018ddf08e084fff1bd134e6453dac69b5ce3e65d53664f0e8577f9b8cfa240c6fbce956fe506ed3a1cf3ba79b3f59864636698b12b35feca799ab5dbe797f6c12f24a5f808da6c3e2a7a96f3d152e3395b0fe7699409e90effe8586f2fdac811f1f4a7bad8d620247b41ea6304d78f36fa233dd95cb634e9897fe75ed1088f071fb7f0b0418fef15bd08472cc8086a5ad46ebdf760c9a50b978fcdcffa20af8c0ba686ea90e7d4fb2e3cdc87c4b38d2b60f297a13960bfd30ded0cf9a848be1dcaea2581bb9692fc5a9741a095695c62cedd824b4132b6945c912c888ed9cd295b87a1cf74f0911620ebd139ebc9726c26b0208d8235c99148973fd4acf93811a7b9ddbf3eea33a9775bfbfd8b1b6ce9d44680a408b9933b4a12a63f9552fb02d209f7f1cacf19adee451d5950ea6cde8dac161e6449952d0f343674b50bb09f8eb5fd57975e0d62c109fa1e3d4ae4ef75cb3316e648b961dfa09973a209d033034de772761b3cd81ee6c1d59cce892d248e0349aee5f8c12e1ae24f12aac8b66a9000f2fb31fb29908384669bf6668ea1b14851e8e8121e219e55ceb36cc70211759a47c47641272234adc5be19722a0258426d59adea242ec36557f69e59bd24a082c1d06b9e4aa9d62eb8437d8b47426708b6711dae59526fec776de32c2a54c3a0f5c4028bda53419bb6c7875495f141a0cfcfcf315dd7685bbeb1b86558c11894f8ff22b31ec5059eede907030c3b5c4b4aa07433dabe45a6e6a7c14f382038964fabab2947680fd427cdd9781b99a890ab2a067bbd8c3a5b09c47816d4c42234289e44e70f044084d03be055d5f002bddc6d05c5539e152dabce5799e67d55d3139be53a77742d05ec4d68a52d16eaab3ad9c529c250179f9078dd9585fbbafee84f9b1f15b5e9939644aa0f2c1d02412b28f9fc75c3465e6cfd92b796b247aa502c55263d98b791272096a62212f8de2e50ae84410f7ba4dca0872a631faa121b437ad1656619276a2e85d553e1627ade77045428c9913500c0d285abff32184a4560326b619a9bb580d73d019811bb01bf690e226a201095d67614603c772b31b7a4cb5f9ab3ef1f713ee4c64b58b9ce58bef6c00bd2ff4735a724cd1661de06e133708e72ffe63c4f04241d16a384d781624085d8949862019a03d4a23b78049cbb1c9ca95e7346d337e53c84e4afb75e67d530a7441531ca73f2fd8ecdc1fcc6a1ae3cae9913b9c73b406e2cfef9dbcc2e2185891b6c9a3f496a77370edb760af27317076e71ef7be4bb233112d86232e5c92f49eb5d48a1f54a9de11a5ad88a365bbd7fbe649bb7e2812d61e65e9099e5b605de312b3431f1c9aa70f96b55498d86a228d15140ab2ab44ff222f3c1003c3bff8048683914f73c3fe3e1557510732ee5ab4ef7d1f62761265c47840032587e5309b7694e2247da4f76335980770191305717e6ceaf48a116b87ee585dea2c8fa22ff0ae6becafb0967cd198939f709a0973a8a42c4c1ee67341f174f238f8dc3fd5e77531f7c2e78e1b69949da0d3d93c6734a60e95530f415420b47d4cd18f304041c24ff3990a75419ddafda12869b364531fe38cda02d5ada186271fa7c6d81557fbb7a167361a7c34ea587f67689955e423974b8640420c7b9057c86b0ff526377366892b97f46663b77a71af5ce70cdbb9929f7cb3a9f9ff6c8de4f89f9d2ad6933f351c9ff8235f9f976d45d2b32e31e789cd61ee0941b34441b734fd6bac762c91d41afb009f00b435c2052f0e913deade323235942250d7d6e0ce9f22c0abbf463aebd146e0798b0555896160b9bdf89e5c86aec475561aa2efb42a0acfbf48756daacc0c0ca9929ffb0072e14496a396b931edd6be1ab918e8e20d331cd3a4b15496ced994d695daf55fbef5e9913f72b5d7dc78a9cb758b2e830a7b4d60921d7fdb66c6c4173c2eca02cb2a6f4238d63e4ffdb000ee7366ed1d2916d358d67a65c9bb68f38e1fa95e188ee6c6891cfbf9f348a042b9bd007c87b4e1e2dc043d4778d063f98cc55c19922595dc5a94b6d4dce3e64f61e99df7d4a9c1285fe860d1bf55a07609bbd698d8b3893e666316e34bff6fd7b11c6289759e6469f7e5ec1064e56ee70923f378e8b56442bb6deadd865e1c2e2533d28254f9cdc465b80a32dc104739dfd97b3cac968b090a673d7e5db1ffacd9832960c5e744836cf107aae73dae6b3abab37b49e6b72fd3ca0b10a299fe3b38c9a663bb087777d837e31a7d201bfc156bc05bc74cc22289e31727670c9351e4d9bb62ea904a6c7e7363f05acf4fae31c2f59441887bf9ba5b86a78146eeb51c65264b49b4fb2b1dae1585fed67a91a97202e77716acbf877512894c3d0d5a687048923a5864de4bcb14cee1715419d7475dd445b42c2698eaa99046ba3484ae0a122da8c275d7aeaa984fef5235742a6f9ac651881e243843753ad48503420c30db7e5fa0d8d13a1e047e29566b94b2198bc9e21ee4489d9f216250a6e1da8760fc5e78eddbabc611e706758ac48fd5afa571ef3bf6a97e085786f6760a36a65dbe73cc49c151ac399c4a0e45d54f4c60e06f337915766ae6be7998f08f61bf7c61f868a5832d4c65ae261ba3390eff7e8bbb82b999b552a67a254001526cc3ec5c8eeafa0d6dd1d02df308bdfd0cdcfa3f44c45b4a08651ccfea9f2f44a5c8d4a2a9ce4c583b322fb921639d539857ac6026ce3af991c", 0x2000, 0x0) r0 = socket(0x1e, 0x80004, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 2.22804379s ago: executing program 1 (id=1006): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32], 0x50) 2.031454808s ago: executing program 1 (id=1007): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x4040) 1.765210139s ago: executing program 1 (id=1008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 1.26088878s ago: executing program 1 (id=1009): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000002000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d5f47f000000000000010000000000020000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000002"], 0xf}, 0x0) 535.408899ms ago: executing program 0 (id=1010): unshare(0x8040480) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) capset(0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x48804) 240.93283ms ago: executing program 0 (id=1011): socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/card3/oss_mixer\x00', 0x52200, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 1 (id=1012): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r0, 0xd3) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:45420' (ED25519) to the list of known hosts. syzkaller login: [ 115.775888][ T3307] cgroup: Unknown subsys name 'net' [ 116.017682][ T3307] cgroup: Unknown subsys name 'cpuset' [ 116.062379][ T3307] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 116.748417][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 130.086467][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.127516][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.429899][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.459318][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.027826][ T3312] hsr_slave_0: entered promiscuous mode [ 132.033502][ T3312] hsr_slave_1: entered promiscuous mode [ 132.436657][ T3313] hsr_slave_0: entered promiscuous mode [ 132.446604][ T3313] hsr_slave_1: entered promiscuous mode [ 132.455695][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 132.458913][ T3313] Cannot create hsr debugfs directory [ 133.673221][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 133.723702][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 133.754419][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 133.804865][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.049528][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 134.110047][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 134.141386][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 134.160113][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 135.548432][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.646043][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.969970][ T3313] veth0_vlan: entered promiscuous mode [ 140.040091][ T3313] veth1_vlan: entered promiscuous mode [ 140.239437][ T3313] veth0_macvtap: entered promiscuous mode [ 140.279769][ T3313] veth1_macvtap: entered promiscuous mode [ 140.523157][ T796] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.524391][ T796] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.524830][ T796] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.525226][ T796] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.719659][ T3312] veth0_vlan: entered promiscuous mode [ 140.837020][ T3312] veth1_vlan: entered promiscuous mode [ 141.038576][ T3312] veth0_macvtap: entered promiscuous mode [ 141.070654][ T3312] veth1_macvtap: entered promiscuous mode [ 141.167614][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 141.361200][ T791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.364683][ T791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.365225][ T791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.365549][ T791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.709372][ T3460] infiniband syz1: set active [ 143.712101][ T3460] infiniband syz1: added syz_tun [ 143.948893][ T3460] RDS/IB: syz1: added [ 143.963739][ T3460] smc: adding ib device syz1 with port count 1 [ 143.964610][ T3460] smc: ib device syz1 port 1 has pnetid [ 149.847707][ T3544] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 154.445800][ T3592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.457803][ T3592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.304839][ T3629] netlink: 56 bytes leftover after parsing attributes in process `syz.0.44'. [ 158.787764][ T3637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.48'. [ 158.796094][ T3637] netlink: 'syz.1.48': attribute type 3 has an invalid length. [ 160.562279][ T3661] syzkaller0: entered promiscuous mode [ 160.562692][ T3661] syzkaller0: entered allmulticast mode [ 161.238502][ T3671] netlink: 44 bytes leftover after parsing attributes in process `syz.0.59'. [ 161.266575][ T3671] Zero length message leads to an empty skb [ 162.146952][ T3682] Illegal XDP return value 4294967294 on prog (id 9) dev N/A, expect packet loss! [ 167.377933][ T3752] syzkaller1: entered promiscuous mode [ 167.379670][ T3752] syzkaller1: entered allmulticast mode [ 167.442523][ T3747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'. [ 171.336077][ T3774] syzkaller0: entered promiscuous mode [ 171.338842][ T3774] syzkaller0: entered allmulticast mode [ 171.346149][ C1] vcan0: j1939_tp_rxtimer: 0x00000000eda15db6: rx timeout, send abort [ 171.543912][ T3778] netlink: 'syz.0.100': attribute type 3 has an invalid length. [ 171.545953][ T3778] netlink: 666 bytes leftover after parsing attributes in process `syz.0.100'. [ 171.847354][ C1] vcan0: j1939_tp_rxtimer: 0x00000000eda15db6: abort rx timeout. Force session deactivation [ 171.849341][ C1] vcan0: j1939_tp_rxtimer: 0x000000004d83346c: rx timeout, send abort [ 172.350741][ C1] vcan0: j1939_tp_rxtimer: 0x000000004d83346c: abort rx timeout. Force session deactivation [ 178.512618][ T3844] syzkaller0: entered promiscuous mode [ 178.512958][ T3844] syzkaller0: entered allmulticast mode [ 183.155810][ T30] audit: type=1326 audit(182.940:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3861 comm="syz.0.134" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d5c0a8 code=0x7fc00000 [ 185.933447][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 186.136444][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 186.233422][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.333197][ T24] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 186.333869][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.334447][ T24] usb 1-1: Product: syz [ 186.334848][ T24] usb 1-1: Manufacturer: syz [ 186.335160][ T24] usb 1-1: SerialNumber: syz [ 186.376916][ T24] usb 1-1: config 0 descriptor?? [ 186.469073][ T24] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22 [ 186.478001][ T24] sr9700 1-1:0.0: probe with driver sr9700 failed with error -22 [ 186.722335][ T3898] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 186.723174][ T3898] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 196.705256][ T11] usb 1-1: USB disconnect, device number 2 [ 198.289027][ T3947] ALSA: mixer_oss: invalid OSS volume 'VOLU' [ 198.537364][ T3951] ALSA: mixer_oss: invalid OSS volume '' [ 198.727633][ T3953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.174'. [ 201.876266][ T3967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.878768][ T3967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.833087][ T3993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.190'. [ 209.070155][ T3993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.190'. [ 209.378053][ T3993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.190'. [ 216.695149][ T4037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'. [ 220.128284][ T4047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.135816][ T4047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.316472][ T4061] netlink: 'syz.1.212': attribute type 12 has an invalid length. [ 228.771922][ T4075] netlink: 40 bytes leftover after parsing attributes in process `syz.0.218'. [ 229.031942][ T4079] netlink: 104 bytes leftover after parsing attributes in process `syz.0.220'. [ 230.528245][ T4093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.226'. [ 238.695067][ T4116] infiniband syz2: set down [ 238.696085][ T4116] infiniband syz2: added ipvlan0 [ 238.818149][ T4116] RDS/IB: syz2: added [ 238.818863][ T4116] smc: adding ib device syz2 with port count 1 [ 238.818962][ T4116] smc: ib device syz2 port 1 has pnetid [ 240.406488][ T4120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.237'. [ 240.410022][ T4120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.237'. [ 240.695928][ T4124] Trying to write to read-only block-device nullb0 [ 241.871305][ T4128] binder: 4127:4128 tried to acquire reference to desc 0, got 1 instead [ 241.879551][ T4128] binder: 4127:4128 got transaction with out-of-order buffer fixup [ 241.897780][ T4128] binder: 4128:4127 failed to fixup parent [ 241.904631][ T4128] binder: 4127:4128 transaction call to 4127:0 failed 5/29201/-22, code 0 size 120-24 line 3644 [ 241.908208][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 245.043329][ T4141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.049143][ T4141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.512511][ T3842] atkbd serio1: keyboard reset failed on [ 247.516133][ T4161] vxcan1: entered allmulticast mode [ 249.926314][ T4187] syz.1.267 uses obsolete (PF_INET,SOCK_PACKET) [ 251.116167][ T30] audit: type=1326 audit(250.900:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4190 comm="syz.1.269" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5c0a8 code=0x0 [ 266.625017][ T4282] input: syz0 as /devices/virtual/input/input3 [ 266.919381][ T4287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.929264][ T4287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.236973][ T4291] block nbd1: shutting down sockets [ 267.451066][ T4295] netem: incorrect ge model size [ 267.454174][ T4295] netem: change failed [ 268.686409][ T4310] atomic_op 0000000048a23fdc conn xmit_atomic 0000000000000000 [ 269.018611][ T30] audit: type=1326 audit(268.810:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4315 comm="syz.1.322" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5c0a8 code=0x0 [ 274.608659][ T4325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.325'. [ 275.254413][ T4333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.267321][ T4333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.450015][ T4335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.457560][ T4335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.667547][ T4348] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.676764][ T4348] IPv6: Can't replace route, no match found [ 280.397914][ T4362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.401901][ T4362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.822100][ T4371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.824608][ T4371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.704368][ T4422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.712347][ T4422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.363286][ T4475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.383537][ T4475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.488456][ T4498] bond_slave_0: entered promiscuous mode [ 307.488909][ T4498] bond_slave_1: entered promiscuous mode [ 307.489472][ T4498] macvlan2: entered allmulticast mode [ 307.489710][ T4498] bond0: entered allmulticast mode [ 307.489888][ T4498] bond_slave_0: entered allmulticast mode [ 307.490047][ T4498] bond_slave_1: entered allmulticast mode [ 307.508243][ T4498] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 307.516339][ T4498] bond0: left allmulticast mode [ 307.518755][ T4498] bond_slave_0: left allmulticast mode [ 307.518992][ T4498] bond_slave_1: left allmulticast mode [ 307.519433][ T4498] bond_slave_0: left promiscuous mode [ 307.519651][ T4498] bond_slave_1: left promiscuous mode [ 307.725306][ T4502] netlink: 31 bytes leftover after parsing attributes in process `syz.1.400'. [ 307.936367][ T4504] binder: 4503:4504 tried to acquire reference to desc 0, got 1 instead [ 308.449525][ T4506] binder: 4503:4506 got transaction with invalid data ptr [ 308.451937][ T4506] binder: 4503:4506 transaction call to 4503:0 failed 11/29201/-14, code 0 size 0-24 line 3438 [ 310.407170][ T3401] binder: release 4503:4504 transaction 10 out, still active [ 310.407888][ T3401] binder: undelivered TRANSACTION_COMPLETE [ 310.408725][ T3401] binder: undelivered TRANSACTION_ERROR: 29201 [ 310.436094][ T3401] binder: send failed reply for transaction 10, target dead [ 312.719175][ T4529] capability: warning: `syz.1.411' uses deprecated v2 capabilities in a way that may be insecure [ 313.366121][ T4535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.368045][ T4535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.708477][ T4550] netlink: 100 bytes leftover after parsing attributes in process `syz.1.420'. [ 315.976873][ T4553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.005248][ T4553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.564744][ T4605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'. [ 329.609866][ T4612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.614031][ T4612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.767773][ T4614] binder: BINDER_SET_CONTEXT_MGR already set [ 329.768294][ T4614] binder: 4613:4614 ioctl 4018620d 20000040 returned -16 [ 329.776368][ T4614] binder: 4613:4614 got transaction to invalid handle, 1 [ 329.776763][ T4614] binder: 4613:4614 cannot find target node [ 329.776947][ T4614] binder: 4613:4614 transaction async to 0:0 failed 13/29201/-22, code 0 size 0-24 line 3151 [ 329.847963][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 329.995906][ T4617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.446'. [ 329.997805][ T4617] 8021q: VLANs not supported on gre0 [ 338.013910][ T4649] vlan2: entered promiscuous mode [ 341.267908][ T4672] netlink: 40 bytes leftover after parsing attributes in process `syz.0.466'. [ 344.292791][ T4685] veth1_to_bond: entered allmulticast mode [ 344.313762][ T4685] veth1_to_bond: left allmulticast mode [ 344.922673][ T4691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.474'. [ 346.853216][ T4701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.479'. [ 350.211488][ T4717] mmap: syz.1.485 (4717) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 350.256325][ T4722] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 350.761008][ T4726] binder: 4725:4726 tried to acquire reference to desc 0, got 1 instead [ 350.788560][ T11] binder: undelivered TRANSACTION_COMPLETE [ 350.816971][ T11] binder: undelivered transaction 18, process died. [ 350.946748][ T4728] netlink: 56 bytes leftover after parsing attributes in process `syz.0.490'. [ 351.597994][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 351.822311][ T4739] netlink: 36 bytes leftover after parsing attributes in process `syz.1.495'. [ 352.069737][ T4743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'. [ 352.414450][ T4745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.416979][ T4745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.681957][ T4745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.684199][ T4745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.401861][ T4808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.663084][ T4827] netlink: 20 bytes leftover after parsing attributes in process `syz.1.531'. [ 372.946603][ T4830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.949117][ T4830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.043244][ T4840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.045407][ T4840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.336302][ T4842] syz.1.538 (4842): drop_caches: 2 [ 380.319312][ T4856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.342966][ T4856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.378239][ T4856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.542'. [ 390.343300][ T4876] block nbd0: Attempted send on invalid socket [ 390.344147][ T4876] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 394.572667][ T4888] netlink: 2 bytes leftover after parsing attributes in process `syz.0.553'. [ 394.585262][ T4888] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 396.998987][ T4895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.005009][ T4895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.024592][ T4895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.026798][ T4895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.939148][ T4909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.918066][ T4968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 419.072970][ T4968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.579'. [ 429.662625][ T4981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.665316][ T4981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.822652][ T5021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.825187][ T5021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.494812][ T5026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'. [ 442.482085][ T5030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.484671][ T5030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.709026][ T5030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.716714][ T5030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.078216][ T5075] netlink: 44 bytes leftover after parsing attributes in process `syz.1.618'. [ 455.318951][ T5077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.335946][ T5077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.598168][ T5095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.612781][ T5095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.628421][ T5095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.622'. [ 458.766538][ T5096] input: syz1 as /devices/virtual/input/input4 [ 460.328677][ T5096] netlink: 'syz.0.621': attribute type 1 has an invalid length. [ 461.097705][ T5097] gretap1: entered allmulticast mode [ 461.204567][ T5097] bond1: (slave gretap1): making interface the new active one [ 461.217930][ T5097] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 469.024932][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.633065][ T5120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.644382][ T5120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.138866][ T5125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.145642][ T5125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.389533][ T5125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.393324][ T5125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.633982][ T5129] IPv6: NLM_F_CREATE should be specified when creating new route [ 505.907873][ T5164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 506.048499][ T5168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.054653][ T5168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.907363][ T5247] process 'syz.0.668' launched './file0' with NULL argv: empty string added [ 561.848672][ T5293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.855695][ T5293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.146602][ T30] audit: type=1326 audit(561.940:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5297 comm="syz.1.684" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 562.150117][ T30] audit: type=1326 audit(561.940:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5297 comm="syz.1.684" exe="/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 562.154508][ T30] audit: type=1326 audit(561.940:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5297 comm="syz.1.684" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 562.154848][ T30] audit: type=1326 audit(561.940:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5297 comm="syz.1.684" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 562.158789][ T30] audit: type=1326 audit(561.950:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5297 comm="syz.1.684" exe="/syz-executor" sig=0 arch=c00000b7 syscall=444 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 562.162331][ T30] audit: type=1326 audit(561.950:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5297 comm="syz.1.684" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 562.164740][ T30] audit: type=1326 audit(561.950:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5297 comm="syz.1.684" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 580.729492][ T5320] binder: 5315:5320 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 580.730848][ T5320] binder: 5320 RLIMIT_NICE not set [ 584.472586][ T5332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 584.574145][ T5334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.583107][ T5334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.633072][ T5351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.643240][ T5351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.560856][ T30] audit: type=1326 audit(608.350:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5407 comm="syz.0.718" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d5c0a8 code=0x7ffc0000 [ 608.567146][ T30] audit: type=1326 audit(608.360:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5407 comm="syz.0.718" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb8c22818 code=0x7ffc0000 [ 608.576247][ T30] audit: type=1326 audit(608.360:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5407 comm="syz.0.718" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb8c22818 code=0x7ffc0000 [ 608.583234][ T30] audit: type=1326 audit(608.360:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5407 comm="syz.0.718" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb8c22818 code=0x7ffc0000 [ 608.588752][ T30] audit: type=1326 audit(608.360:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5407 comm="syz.0.718" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb8c22818 code=0x7ffc0000 [ 608.597321][ T30] audit: type=1326 audit(608.360:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5407 comm="syz.0.718" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb8c22818 code=0x7ffc0000 [ 608.604224][ T30] audit: type=1326 audit(608.370:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5407 comm="syz.0.718" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb8c22818 code=0x7ffc0000 [ 608.604780][ T30] audit: type=1326 audit(608.370:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5407 comm="syz.0.718" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb8c22818 code=0x7ffc0000 [ 608.605005][ T30] audit: type=1326 audit(608.370:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5407 comm="syz.0.718" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb8c22818 code=0x7ffc0000 [ 608.605238][ T30] audit: type=1326 audit(608.370:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5407 comm="syz.0.718" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb8c22818 code=0x7ffc0000 [ 615.569542][ T5442] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 628.098468][ T5494] block device autoloading is deprecated and will be removed. [ 633.482179][ T5500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.509357][ T5500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.796769][ T5532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.803146][ T5532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.355446][ T5559] netlink: 40 bytes leftover after parsing attributes in process `syz.0.766'. [ 655.596527][ T5563] netlink: 'syz.0.767': attribute type 27 has an invalid length. [ 659.366614][ T5569] input: syz1 as /devices/virtual/input/input5 [ 660.375301][ T5569] input: syz1 as /devices/virtual/input/input6 [ 688.909515][ T5620] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 721.798077][ T5686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.802368][ T5686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.156794][ T5728] netlink: 'syz.1.810': attribute type 21 has an invalid length. [ 745.354241][ T5728] netlink: 'syz.1.810': attribute type 21 has an invalid length. [ 751.276657][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 751.277505][ T30] audit: type=1326 audit(751.070:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5738 comm="syz.1.813" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 751.288763][ T30] audit: type=1326 audit(751.080:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5738 comm="syz.1.813" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 751.289532][ T30] audit: type=1326 audit(751.080:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5738 comm="syz.1.813" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 751.289878][ T30] audit: type=1326 audit(751.080:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5738 comm="syz.1.813" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 751.290225][ T30] audit: type=1326 audit(751.080:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5738 comm="syz.1.813" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 751.304964][ T30] audit: type=1326 audit(751.080:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5738 comm="syz.1.813" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 751.315183][ T30] audit: type=1326 audit(751.080:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5738 comm="syz.1.813" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 751.315833][ T30] audit: type=1326 audit(751.100:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5738 comm="syz.1.813" exe="/syz-executor" sig=0 arch=c00000b7 syscall=134 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 751.316170][ T30] audit: type=1326 audit(751.100:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5738 comm="syz.1.813" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 751.316452][ T30] audit: type=1326 audit(751.110:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5738 comm="syz.1.813" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 751.391230][ T5741] fuse: Bad value for 'fd' [ 751.741480][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.818'. [ 751.742342][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.818'. [ 752.095195][ T5755] fuse: Bad value for 'fd' [ 752.240130][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 772.393578][ T5814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.398808][ T5814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.505693][ T5817] input: syz1 as /devices/virtual/input/input7 [ 779.382601][ T5835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.384938][ T5835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.214406][ T5838] netlink: 'syz.1.849': attribute type 4 has an invalid length. [ 805.855766][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 808.518859][ T30] audit: type=1326 audit(808.310:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5900 comm="syz.1.866" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 808.526419][ T30] audit: type=1326 audit(808.310:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5900 comm="syz.1.866" exe="/syz-executor" sig=0 arch=c00000b7 syscall=437 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 808.548212][ T30] audit: type=1326 audit(808.320:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5900 comm="syz.1.866" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 808.549003][ T30] audit: type=1326 audit(808.330:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5900 comm="syz.1.866" exe="/syz-executor" sig=0 arch=c00000b7 syscall=233 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 808.549343][ T30] audit: type=1326 audit(808.330:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5900 comm="syz.1.866" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 808.549678][ T30] audit: type=1326 audit(808.330:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5900 comm="syz.1.866" exe="/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 808.549958][ T30] audit: type=1326 audit(808.340:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5900 comm="syz.1.866" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 808.559081][ T30] audit: type=1326 audit(808.340:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5900 comm="syz.1.866" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 808.559509][ T30] audit: type=1326 audit(808.340:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5900 comm="syz.1.866" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 808.559790][ T30] audit: type=1326 audit(808.340:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5900 comm="syz.1.866" exe="/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffbaf5c0a8 code=0x7ffc0000 [ 808.956666][ T5903] pim6reg: entered allmulticast mode [ 809.078285][ T5903] pim6reg: left allmulticast mode [ 813.647374][ T5924] syz_tun: entered allmulticast mode [ 817.438368][ T5948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.439844][ T5948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.682980][ T6006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.904'. [ 834.865909][ T6008] ubi31: attaching mtd0 [ 836.406728][ T6008] ubi31: scanning is finished [ 836.419732][ T6008] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 836.673186][ T6008] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 839.177775][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.184629][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.195739][ T6028] netlink: 20 bytes leftover after parsing attributes in process `syz.0.910'. [ 841.669130][ T6032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.912'. [ 843.898446][ T6034] ubi31: attaching mtd0 [ 844.397998][ T6034] ubi31: scanning is finished [ 844.412673][ T6034] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 844.985187][ T6034] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 853.451833][ T6049] ubi31: attaching mtd0 [ 853.556826][ T6049] ubi31: scanning is finished [ 853.558578][ T6049] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 853.622400][ T6049] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 854.842437][ T6064] ubi31: attaching mtd0 [ 855.000081][ T6064] ubi31: scanning is finished [ 855.003858][ T6064] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 855.114274][ T6064] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 861.147923][ T6087] ubi31: attaching mtd0 [ 861.269285][ T6087] ubi31: scanning is finished [ 861.279776][ T6087] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 861.364205][ T6087] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 861.529788][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 862.494396][ T6095] netlink: 256 bytes leftover after parsing attributes in process `syz.1.932'. [ 862.594966][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.933'. [ 864.689510][ T6103] ubi31: attaching mtd0 [ 864.890957][ T6103] ubi31: scanning is finished [ 864.891386][ T6103] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 864.939390][ T6102] binder: 6101:6102 tried to acquire reference to desc 0, got 1 instead [ 864.946693][ T6102] binder: 6101:6102 got new transaction with bad transaction stack, transaction 31 has target 6101:0 [ 864.952384][ T6102] binder: 6101:6102 transaction call to 6101:0 failed 32/29201/-71, code 0 size 12288-24 line 3211 [ 864.961996][ T5621] binder: release 6101:6102 transaction 31 out, still active [ 864.962355][ T5621] binder: undelivered TRANSACTION_COMPLETE [ 864.962605][ T5621] binder: undelivered TRANSACTION_ERROR: 29201 [ 864.983579][ T5621] binder: send failed reply for transaction 31, target dead [ 865.056436][ T6103] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 870.663378][ T6124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.943'. [ 872.592891][ T6126] ubi31: attaching mtd0 [ 873.061738][ T6126] ubi31: scanning is finished [ 873.064087][ T6126] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 873.335591][ T6126] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 877.335364][ T6131] netlink: 'syz.0.945': attribute type 1 has an invalid length. [ 877.558583][ T6131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.945'. [ 877.705521][ T6131] bond2: (slave veth3): Enslaving as an active interface with a down link [ 878.253852][ T6141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.949'. [ 880.407204][ T6150] ubi31: attaching mtd0 [ 880.774660][ T6150] ubi31: scanning is finished [ 880.775631][ T6150] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 881.924890][ T6150] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 901.536450][ T6221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 929.589407][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1001'. [ 936.694450][ T5044] syz_tun (unregistering): left allmulticast mode [ 936.719080][ T3539] smc: removing ib device syz1 [ 936.743637][ T5621] syz1: Port: 1 Link DOWN [ 939.033270][ T1992] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.155821][ T1992] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.287609][ T1992] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.408096][ T1992] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.907758][ T1992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.949022][ T1992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.015165][ T1992] bond0 (unregistering): Released all slaves [ 941.054984][ T1992] bond1 (unregistering): Released all slaves [ 942.206633][ T1992] hsr_slave_0: left promiscuous mode [ 942.221898][ T1992] hsr_slave_1: left promiscuous mode [ 942.262779][ T1992] veth1_macvtap: left promiscuous mode [ 942.263126][ T1992] veth0_macvtap: left promiscuous mode [ 942.263896][ T1992] veth1_vlan: left promiscuous mode [ 942.264566][ T1992] veth0_vlan: left promiscuous mode [ 942.805697][ T3539] smc: removing ib device syz2 [ 943.611515][ T11] ================================================================== [ 943.616445][ T11] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x20/0xb4 [ 943.618850][ T11] Read at addr fcf000000ab472e8 by task kworker/0:1/11 [ 943.619436][ T11] Pointer tag: [fc], memory tag: [fe] [ 943.619591][ T11] [ 943.620494][ T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT [ 943.621058][ T11] Hardware name: linux,dummy-virt (DT) [ 943.621561][ T11] Workqueue: events smc_ib_port_event_work [ 943.622828][ T11] Call trace: [ 943.623171][ T11] show_stack+0x18/0x24 (C) [ 943.623644][ T11] dump_stack_lvl+0x78/0x90 [ 943.623924][ T11] print_report+0x108/0x61c [ 943.624141][ T11] kasan_report+0x88/0xac [ 943.624357][ T11] __do_kernel_fault+0x170/0x1c8 [ 943.624559][ T11] do_bad_area+0x68/0x78 [ 943.624775][ T11] do_tag_check_fault+0x34/0x44 [ 943.625000][ T11] do_mem_abort+0x44/0x94 [ 943.625203][ T11] el1_abort+0x40/0x60 [ 943.625404][ T11] el1h_64_sync_handler+0x50/0xac [ 943.625641][ T11] el1h_64_sync+0x6c/0x70 [ 943.625969][ T11] __ethtool_get_link_ksettings+0x20/0xb4 (P) [ 943.626189][ T11] ipvlan_ethtool_get_link_ksettings+0x14/0x20 [ 943.626398][ T11] __ethtool_get_link_ksettings+0x5c/0xb4 [ 943.626597][ T11] ib_get_eth_speed+0x84/0x354 [ 943.626816][ T11] rxe_query_port+0xf8/0x1b4 [ 943.627028][ T11] ib_query_port+0x150/0x200 [ 943.627242][ T11] smc_ib_port_event_work+0x98/0x3cc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 943.627452][ T11] process_one_work+0x178/0x2cc [ 943.627663][ T11] worker_thread+0x250/0x358 [ 943.627876][ T11] kthread+0x130/0x1fc [ 943.628085][ T11] ret_from_fork+0x10/0x20 [ 943.628511][ T11] [ 943.628636][ T11] Freed by task 1992: [ 943.628991][ T11] kasan_save_stack+0x3c/0x64 [ 943.629338][ T11] save_stack_info+0x40/0x158 [ 943.629488][ T11] kasan_save_free_info+0x18/0x24 [ 943.629669][ T11] __kasan_slab_free+0x7c/0x8c [ 943.629857][ T11] kfree+0xfc/0x30c [ 943.630025][ T11] kvfree+0x3c/0x4c [ 943.630226][ T11] netdev_release+0x30/0x44 [ 943.630407][ T11] device_release+0x34/0x90 [ 943.630546][ T11] kobject_put+0xa4/0x114 [ 943.630684][ T11] netdev_run_todo+0x1f0/0x5a4 [ 943.630838][ T11] rtnl_unlock+0x10/0x1c [ 943.630973][ T11] default_device_exit_batch+0x320/0x394 [ 943.631108][ T11] ops_undo_list+0x10c/0x23c [ 943.631245][ T11] cleanup_net+0x1f4/0x3cc [ 943.631388][ T11] process_one_work+0x178/0x2cc [ 943.631529][ T11] worker_thread+0x250/0x358 [ 943.631676][ T11] kthread+0x130/0x1fc [ 943.631828][ T11] ret_from_fork+0x10/0x20 [ 943.632047][ T11] [ 943.632156][ T11] The buggy address belongs to the object at fff000000ab47000 [ 943.632156][ T11] which belongs to the cache kmalloc-cg-4k of size 4096 [ 943.632419][ T11] The buggy address is located 744 bytes inside of [ 943.632419][ T11] 4096-byte region [fff000000ab47000, fff000000ab48000) [ 943.632602][ T11] [ 943.632921][ T11] The buggy address belongs to the physical page: [ 943.633472][ T11] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xfcf000000ab47000 pfn:0x4ab40 [ 943.633937][ T11] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 943.634223][ T11] flags: 0x1ffc00000000240(workingset|head|node=0|zone=0|lastcpupid=0x7ff|kasantag=0x0) [ 943.634935][ T11] page_type: f5(slab) [ 943.635631][ T11] raw: 01ffc00000000240 f1f0000003008000 ffffc1ffc0297010 ffffc1ffc0291e10 [ 943.635841][ T11] raw: fcf000000ab47000 0000000000080003 00000000f5000000 0000000000000000 [ 943.636089][ T11] head: 01ffc00000000240 f1f0000003008000 ffffc1ffc0297010 ffffc1ffc0291e10 [ 943.636270][ T11] head: fcf000000ab47000 0000000000080003 00000000f5000000 0000000000000000 [ 943.636449][ T11] head: 01ffc00000000003 ffffc1ffc02ad001 00000000ffffffff 00000000ffffffff [ 943.636628][ T11] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 943.636798][ T11] page dumped because: kasan: bad access detected [ 943.636904][ T11] [ 943.636986][ T11] Memory state around the buggy address: [ 943.637299][ T11] fff000000ab47000: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 943.637495][ T11] fff000000ab47100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 943.637699][ T11] >fff000000ab47200: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 943.637849][ T11] ^ [ 943.638032][ T11] fff000000ab47300: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 943.638160][ T11] fff000000ab47400: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 943.638313][ T11] ================================================================== [ 943.639763][ T11] Disabling lock debugging due to kernel taint [ 946.229753][ T1992] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.365056][ T1992] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.464187][ T1992] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.553552][ T1992] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.893802][ T1992] bond1 (unregistering): (slave gretap1): Releasing active interface [ 948.033136][ T1992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.092266][ T1992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.143755][ T1992] bond0 (unregistering): Released all slaves [ 948.184502][ T1992] bond1 (unregistering): Released all slaves [ 948.237876][ T1992] bond2 (unregistering): (slave veth3): Releasing active interface [ 948.271991][ T1992] bond2 (unregistering): Released all slaves [ 948.376078][ T1992] bond0 (unregistering): Released all slaves [ 948.572692][ T1992] hsr_slave_0: left promiscuous mode [ 948.578009][ T1992] hsr_slave_1: left promiscuous mode [ 948.601899][ T1992] veth1_macvtap: left promiscuous mode [ 948.603955][ T1992] veth0_macvtap: left promiscuous mode [ 948.607618][ T1992] veth1_vlan: left promiscuous mode VM DIAGNOSIS: 07:21:08 Registers: info registers vcpu 0 CPU#0 PC=ffff8000808edd08 X00=0000000000000002 X01=0000000000000018 X02=ffff800082ce5018 X03=ffff800082aaf170 X04=fdf00000030dd880 X05=0000000000000031 X06=0000000000000031 X07=0000000000000000 X08=7f7f7f7f7f7f7f7f X09=ffff800082aaf1a0 X10=0000000000000001 X11=ffff8000830bbe10 X12=ffff8000829ef238 X13=ffff8000830bbb7d X14=ffff8000830bbb88 X15=ffff8000830bb9f0 X16=00000000264be98b X17=00000000863aaf83 X18=00000000ffffffff X19=fbf0000003043014 X20=ffff8000808eddb8 X21=fdf00000030dd880 X22=fbf0000003043014 X23=ffff8000808eddb8 X24=000000000000004c X25=0000000000000001 X26=f6f00000032b3780 X27=0000000000000000 X28=0000000000000000 X29=ffff8000830bbc90 X30=ffff8000808edde0 SP=ffff8000830bbc90 PSTATE=804020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000006d616574 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffffff00000000:ffffffff00000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffff0000ffff0000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa49aff98:0000ffffa49b2558 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa49af268 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa49affa8:0000ffffa49b2520 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa49b2510:0000ffffa49b2508 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa49b2520:0000ffffa49b2518 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffe6e9d860:0000ffffe6e9d860 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffe6e9d830 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff8000803a36a0 X00=000000000000000a X01=f0f0000005d79280 X02=0000000000000000 X03=0000000000000000 X04=fbffff3fffffffff X05=0000000000000002 X06=ffff80008293d7f0 X07=0000000000000004 X08=f0f0000005d7a478 X09=2cba062cbc086b06 X10=9f687ec8c3021242 X11=00000000000000c0 X12=ffff800082911258 X13=0000000000000000 X14=00000000000002dc X15=ffff800081b63cd0 X16=ffff800080008000 X17=fff07ffffcffa000 X18=0000000000000000 X19=ffff800089083b18 X20=f0f000000668f000 X21=f2f0000003458d00 X22=0000000000000000 X23=ffff800082067518 X24=00000000000027ff X25=f0f000000668f000 X26=f0f000000668f000 X27=0000000000000019 X28=ffff800089083a24 X29=ffff8000890838f0 X30=b0ef800081658f10 SP=ffff800089083930 PSTATE=81402009 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2525252525252525:2525252525252525 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000756c6c2570:6f6f6c2f7665642f Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000f0000000f0 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff000000ff00:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:fff000f000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bb448243222c92da:e3914ed4e87380b0 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffeff57ab0:0000ffffeff57ab0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffeff57a80 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000