last executing test programs: 1m22.121422439s ago: executing program 2 (id=261): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r3, 0x0, r1}, 0x10) 1m21.866382845s ago: executing program 2 (id=262): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r1, 0x30b}, 0x14}}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast1, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@hopopts_2292={{0x14, 0x29, 0x36, {0x3c}}}, @hopopts={{0x14, 0x29, 0x36, {0x84}}}], 0x28}}], 0x1, 0x1) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000000)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x2}]}, 0x14}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000000104050000000700000000000700000305000100010000000a0002"], 0x48}, 0x1, 0x0, 0x0, 0x20040024}, 0x0) r5 = signalfd(r4, &(0x7f0000000080)={[0x4, 0x6]}, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r6, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m21.849236508s ago: executing program 2 (id=263): syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106d040cc50000000000010902"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) inotify_init1(0x800) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x1d9}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x800, 0x100000, 0x2, 0x0, r0}, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\a'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE) io_uring_enter(r0, 0x2d3c, 0x0, 0x0, 0x0, 0x0) 1m20.605965121s ago: executing program 2 (id=272): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffce3, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m20.570392948s ago: executing program 2 (id=273): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioperm(0x0, 0x8, 0x5) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0xfffffffffffffc91) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffd, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x54, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m20.327944494s ago: executing program 2 (id=274): openat$iommufd(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) syz_open_dev$loop(&(0x7f00000013c0), 0x3, 0x10b242) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000030a01080000002000000000010000000900030073797a32000000000900010073797a30000000001c0008800c000140000000000000000c0c000240000000000000000614000000110001"], 0x70}}, 0x0) 1m20.28766691s ago: executing program 32 (id=274): openat$iommufd(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) syz_open_dev$loop(&(0x7f00000013c0), 0x3, 0x10b242) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000030a01080000002000000000010000000900030073797a32000000000900010073797a30000000001c0008800c000140000000000000000c0c000240000000000000000614000000110001"], 0x70}}, 0x0) 4.736862678s ago: executing program 1 (id=774): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r5, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}], 0x1, 0x40000) 4.31537471s ago: executing program 3 (id=777): io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket(0x28, 0x1, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x7ff, 0x5e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580), 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) 4.314881619s ago: executing program 3 (id=778): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x6}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r0], 0x1000f) 4.190425801s ago: executing program 3 (id=780): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = dup(r0) getpid() r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080), &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0x8, 0xd}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xca72}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x68000) 4.066301749s ago: executing program 1 (id=781): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000711217000000000095000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0xeb2, 0x4}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f010000000000000000000905810320000000000905820208"], 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 3.641855661s ago: executing program 3 (id=782): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000280001801400040007000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 3.17980359s ago: executing program 4 (id=784): socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000002d00010026bd7000fcdbdf250400000005000b0000000000fc5b855198f6558503eadba80718bbfe2994f5b9940a7d843ab035174ba7ac50a12b4204b23063301aadf99260a832e7dd7084ef7ac52842b99afe2fef5e31bfb2a8f8fea896"], 0x1c}}, 0x20000080) 3.176112292s ago: executing program 0 (id=792): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20002) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x0, 'client1\x00', 0xffffffff80000007, "b409383e4c752631", "a78560d99f00", 0x800000}) ioperm(0x200, 0x8, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc) getsockopt$netlink(r4, 0x10e, 0x9, 0xfffffffffffffffe, &(0x7f0000000040)) 2.914042691s ago: executing program 1 (id=785): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.881297656s ago: executing program 4 (id=786): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000805}, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x50) r2 = syz_io_uring_setup(0x749e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x1005c23, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x3}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.73766086s ago: executing program 3 (id=787): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioperm(0x0, 0x8, 0x5) write(0xffffffffffffffff, &(0x7f0000000000)="3f0000000100", 0x6) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0xfffffffffffffc91) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 2.236449926s ago: executing program 0 (id=788): socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "b76d98cfd6265d76", "c7ac569685c5a40c4fe6a15f4500edfc", "be6e5710", "76a2fbfc06079d9d"}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(r1, 0x10f, 0x3, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30c6d1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f40e2ab1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c81106db988096bba7772e6acc5956344eaa64fea7c6319a37312ad57490dd2ebcb9bdf2815aae851bbd55317b4fcdaa8b06d30ed3db8a117424fed41f68979ac996e7fcd4549daf29bff6a2643e184580eb0b0bf81046975ea8d5e06e7124790dfca059217a34f4120feb2bb", 0x14d}, {&(0x7f0000000280)="5b4ea80f20d7212327afde5e7a457cde2dff9073f71979", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000080)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc78a12ad1a30e4f7038336f1af1d61b0409988f1755e9b3ba9919b2a4952ceda920f5f0e22dd247d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870691200e428d5dcae697fa5a1e48df472ebb098aeb32e4049eba9f92be1ef1b6609f2b91c449dca240f", 0x95}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="96cb9dfd0c61d5ed863c5a35109d427201da53416c37631f95451a170fdb734214157996b04630903a7ad20aca669b5120871c47c6ef4e5975222b9676223895144ae5c2898ba0e94642e43e374bf9515c7e840e62021f25181401bda4c4d2d77867390c0a05af019adabfe896d7824f0dcb1724c64da40478808059ea83fa60145e108809ca25edf6ab820f23a5ce2b1779aa8c037a26d99df56f39ff5beca1c1e0cbfd69e415971a02f5115f6da0ba6da9be9772efa870aa6b62774ce009e7bcca4b4a7a910aab97e7f3da899eaaf573ac8a926a7be9b5875b3bb707ae9124ead39e70948bcf654b6b4342043f756323494e4ec559866c5a480c3b156c0427f1cc1d373b77424ea38e3697e36dcefd261575e5516bfcedc7baa8cbebed0ce49dd27e6291dd6f968eaf37f13313ba0bd22b6a63496be04a42df10fef87386434103b5ef819a969e8792a7765dc52c310fbe89851eaf8b2eabcf27bd487f817d48a54b0c7e8b151f0941a6f4adcf6a4486f96f8d18a2928829db333ec08bffe029f4840fdc0433d75157e80b33c3041f193e5c3fb1b7c13d1d7d7a8fe3122ddef181a6534232731c8f91dae42d9a66b9c2e0c6de6da74c24752b53d344b3c9a48ed62705c3e93f7e346c0379a6ec672b3a73dcfc159a79a77bd7b9edd013e3e9832d4dca6f9f973d63d5d235c7e22822e012e4181e102e68b03bdec323db739968061a7ba6fcf9589bd2975520fe9f1b44e52489bf5f5b0125b14bc894f4ff1ad2ba817dad6ab1654a2cacce1cc5160ea4bf3d7011cbf16ad0389b6511448c4186da0a7a55be54031a6d2773ac33aab5d533e7bb213309193f2ca3970e8fffc2fdacbc96e6f49c116b0505385a8bf282589be6b844e2aaaa652459b5d021127f59009020d34932cd03fbe5fea45bdc1f68463c4afe2b5ea8f97dee5e2e6b58196aff00e5ca51a0087f02bcb1dbdd638a5c7590095561578c30904f7ea80072de21fcedd0e41da8e7fe3514eaabc603d770a6fbed5367edb7feb5c5edfda04c7b8a4bfce5c73b876f52fde7dc929f3ffa632eb9514596793533d20fd191b484e902ab104dfc34a8486ba64d3e31c495e043279d8d6b4e6ca3c3fd4ae43529e55be690309e1bc90af2e9188cd5673eea73c75d4decf8972039c086e4b47caee900e1422fd2fbe0303dd5147a9fa487a7b08ad529d0d3db2bae4b26a83de0b15b9b82f26b23336481aca875c48605dc8d25d872920d01e2e163cc13d1f026666f8f54d6fe7895b47939599d168dc98a2de4aac463d98cb39375ac13fadd722b9f1e221d35bde594c9e53aa0f34b235a9d68d8f4841f9455804cd8a7bf05315c5bab2fa8820e956a8161cdd685fc4e1344f9d89189057376a5d1c23273d475aaa72ccbf4b5d8f2863f3f0fe7c0f8b001c065bae68aad9d8878a5edcd8dcbeec07d317c0a81fc84b8b208c60db73c6cf86d46cac98a7df449581d74be7991f1fa6924b76a2d6077aacca10fc777f0d09c5420cfc38c4638957086c9a2065ce94a286da01527bd8b8fd5830f93bcab97a4d0ca13c55b4ee32a49e078b4d79e7b17200fb6a550cfcccd33c681e37bc83c7fcda081a67c2a828e65a75df33e587a05f75fe05aef4078b3482c9078e2edb63c74134f92461044871e4a71f40228d156cbb3beb53eb898e0b6ade2d486a7111ce074510ad957f0eeae0812dd3802db231d9a15948a6b133167eb51dde0199023dfb3471661c7f13f14e786278c551d60929ef969b15d4ea544a9cda830183052ca1072083fb304502f38bcfd46ef64091a2a64bacc55ff3e91f8a7a97f69a9524bdaa60c14d75ddb44e399158c603cded78f42b79a6e9b9c30575289a92558f4d1d9cbb35780c86462cb56d5b474901c17df6ccba95481c004c384b17f99fb29458c9c59666c5305c508561e654d5f1b8ed375231358828b73b487c5f3096211f863375333bb1d3970f7c4cbc7b0f122dbb330b24498f38d804ec0e9c8a5976578bfbc2e46e8d898ec08b3742d5f9ba03d56567f6541f075c4f45eec94a6af78065689e8851294c48f02d48b1266586db86266bd2d0cbb729b567ed7643edf6849f50ca7a28b4ef59433ff22ce0680ffb3348a458ff77b6a796e849cb456df4b443d625d423d10e21bf0bcc785a243cf70ed2ea7c52548cd366ad9af486a4a0171f21ee9d961aa808a69a066aeb0c605fe7a83291ba942df3d11ba1e12da7381d7af20ccbd0de5416ef389c65d1fd0ff209dce808c490707a371b317ce65765082d1c5f67846ddfa65f291117d6e5a795ac2961d56eb24060d8b160d5bd146cd61589c00a108a1dba9e8730157e403cc35b0cd64b3aa66eada80be3bbb974d4642aa76bdf87c2d63134af1c646b1f0bfd218d4e4ebd277ad1cfc9b6f20c4036c6a511cb1ce486c3a563ca9368b10bed088bcfcdab752e0c78a10e550544ee6250d3908e3e7b09b2119f94abc2fdf43d7c82a4ffce81a3f962124ace1108443f41202c6d055d37e99b4eb6287c485acabff03f3a115db1ec790fdc5436e97bf2443c2f707ffb513f6d6494812b2238d679c8787a854ec92126bdc4681803ed4a5b84590e4f00ce956c6c3394773303b0620d118d2290cb229ea3b9bb9de8d719a0f92a50d34909a363f5f6ff906326f917be78c914c78846ef30c9b107b26c0a55401ceabf5b3c669eaa7a1a36d97b01d5da410366e3da5d232fb711d26afd9d4a5016425e47c0ec9b6305673af4cb46526af752011793c322797fb706042da364b6e723b513fd73db6721b00bd80e0923fe075300951d4dfefdd029c3fed21b734bf102f96d58b50bf4edcad014670c2d93eeb4d7bda3d1b70d9e21262c644bb96855895e4c0b32c9ed599d940ac24814b69812c124648428e13d7f72d74feb30288eb78b4a99fadc96589d8a9c7047787aa802514ba28af4d5520ac50928cd75ca92e2934a2e126456bfe1587003e87d9428b1fdb6b7662c44a5fee9d537b7f43822e5b103aeece1aa603215c215de2873e3a6b327c5ed0a0190fb7645034e1839ad165f3f7f80fd793734ac1412bbe20d82aea543792047ba5c5b37ee11988cd7e71cd43547e13c6bbc1ce3cf6aff9727381f06feb83b23b694724d9259d3736eba6ee66ee73a224b8a978debbbc35f8e28cc8267646e5c8cd8076d2044d41eadce01738ab2c7dc763de5a8042b957680223c4d9fdbf65d17e8998444e8db36c50fbe3c9a83e506661a029c4538617d46b6a43675c6dcf283a45b99e44188fd2681a50747e819e7f37496207ec448670fe62a3cb94712abeafb5dd2690ec12b18f8d67d5b0db41a897124f8b94695501aba517447338034bf14d0f99cbf5518aa013e1f35a052b4d27d1247349ff7a83362444372f017fcbdfe972b91c46a0a57f4639204673341ae92bc2dbf2b8d1680b432552850964eb1e14f38995e7e404b1bd1bf63d8d58c7b4ec38e3b9e73959e6509ad9f67d684f62759f5cae90bf8c1781b5800922c312aa634e5748b6181fc37df267eb5c66afc0c9249f9f601136c78d817beddf308c6970ee0e8221abe6fa124f55de7e5e78398004095a175f58cc270840e8c6759627f139e4f9b3b362e2700c5d06da66e862d1016c9f89d18646a6bb823f992342433b03397ed7586f489824a1495d707c81d3885029a47845802ef97856e530789a5cb7239752c6509cdd094212cb4b1b8baa7416cf5000db59418ad7f7a0d7d8e4cb8ebbbe4c40ba0ccc25283b9c933e251fff9871fc01026fafd8eed7ddcbe454b79339be93cd4b25a55af449f5c0893a957c5468c9147a973478c834ac4ecfea339cf3", 0xa9b}], 0x7}}], 0x4000000000001f4, 0x81) 1.909505557s ago: executing program 3 (id=789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x40101286, &(0x7f0000000240)={0xffffffffffffffff, 0x747}) r1 = socket$alg(0x26, 0x5, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x8382, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000054}, 0xc001) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8800) sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000ff0300000000002000000000000a20000000000a01010000000000000000070000000900010073797a310000000028000000000a010800000000000000000a00000008000240000700010900010073797a30"], 0x98}}, 0x0) 1.816317885s ago: executing program 1 (id=790): socket$inet(0x2b, 0x801, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) r2 = syz_io_uring_setup(0x413, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x126}, &(0x7f0000000bc0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.630825462s ago: executing program 4 (id=791): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x20000078, &(0x7f0000000440)=ANY=[@ANYRES16], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2001c000}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r3}) 1.305033735s ago: executing program 0 (id=793): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x2d2}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x39000000, 0x0, 0x0, 0x0) 1.05528881s ago: executing program 1 (id=794): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x74, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x60, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x55, 0x4, "67860e25ed2ac7e428414262f162e9838c6349a97658614dacb21d084d5b57347cda08770e701f274273c99872afcc497548cf967b4ae21b7a842670975efa8ce8e59b733b393b05a28b87c38b088bdb63"}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000044) r1 = dup(r0) r2 = syz_open_dev$dri(0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) syz_clone3(&(0x7f0000000480)={0x42000200, 0x0, 0x0, 0x0, {0x19}, &(0x7f0000000340)=""/157, 0x9d, 0x0, 0x0}, 0x58) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.046668922s ago: executing program 0 (id=802): socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc4}]}, 0x18, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 654.074639ms ago: executing program 4 (id=795): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0xfe, [0x8, 0x4, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x400, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x26f}]}]}]}}]}, 0xac}}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd74) write$sndseq(r4, &(0x7f0000000280)=[{0x8, 0x2, 0xf, 0xa6, @tick=0xfffffffa, {0x4, 0x1a}, {0xc4, 0x10}, @control={0x3, 0x3, 0xc22}}, {0x5, 0x80, 0x7, 0x8, @tick=0xc222, {0x41, 0xf8}, {0x4}, @raw8={"af51a71406359958359747bf"}}, {0x6, 0x7, 0x9, 0x6, @tick=0x40, {0x3, 0xa}, {0x9, 0x5d}, @addr={0xf, 0x9}}, {0x36, 0x5, 0xf5, 0xf8, @time={0x3ff, 0xffffffdb}, {0x8, 0x8}, {0x6, 0x4}, @raw8={"730e412bb5749480080f0487"}}, {0x7, 0x3, 0x8d, 0xe, @time={0x9, 0xbc7}, {0x2, 0x2}, {0x9, 0x6}, @control={0x70, 0x8, 0x694}}, {0x98, 0xfe, 0x4, 0x4, @tick=0x9, {0x3, 0x3}, {0x6, 0xff}, @addr={0x4, 0x8}}, {0x9, 0x9, 0x3, 0x80, @tick, {0x7, 0x4}, {0x8, 0x40}, @raw8={"19eca21c9743fd725669b31e"}}, {0xb, 0x2, 0x0, 0x8, @tick=0xd66, {0x5, 0x5}, {0x7, 0x5}, @connect={{0x1, 0x20}, {0xfe, 0x3}}}], 0xe0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched_retired(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=@newtclass={0xe60, 0x28, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x10, 0xa}, {0x2, 0x8015}, {0x0, 0xb}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xd6}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x6}}}, @c_cbq={{0x8}, {0x5c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x2e, 0x0, 0xd, 0x9, 0x7ff, 0x8, 0xf, 0xb}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x14, 0x3, 0x2, 0xc3, 0x5, 0x8000, 0x91f2, 0x80}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x1, 0x2, 0xa, 0x7, 0x6, 0x6, 0x3, 0x4}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x2, 0x7fff, 0x5, 0xc1, 0x3}}]}}, @c_atm={{0x8}, {0x70, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfffc, 0xe}}, @TCA_ATM_HDR={0x17, 0x3, "dd13164d060af926dd970d965f891fb7dee311"}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_HDR={0x2c, 0x3, "d730192a060f3a35e6f381a2abf98bdc8a62221398deaacc4df01020487fbbe99c4e6ece589e5d86"}, @TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_EXCESS={0x8, 0x4, {0xf, 0x3}}]}}, @c_atm={{0x8}, {0x70, 0x2, [@TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_HDR={0x5, 0x3, "97"}, @TCA_ATM_HDR={0xe, 0x3, "c46431a16a61354eddc5"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0xfff2}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffff, 0xb}}, @TCA_ATM_HDR={0x31, 0x3, "56f2e810fa894c0bed4924142add681945b10064984c68a9a27145aa5d49dc47138ed06db851ea496ff835e663"}, @TCA_ATM_FD={0x8, 0x1, r4}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xb}}}, @c_cbq={{0x8}, {0x440, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x17, 0x0, 0x1d, 0x6, 0x7f, 0x80000, 0x1, 0x2}}, @TCA_CBQ_RATE={0x10, 0x5, {0x8, 0x1, 0xc, 0x1, 0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x8, 0x0, 0x4, 0x9, 0x3, 0x5}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x9, 0x9, 0x80004, 0xfffffffb, 0x745, 0x1, 0xffffffff, 0x1, 0x2, 0x1, 0x4, 0x4, 0x6, 0x40, 0x8, 0x20a7, 0x1, 0xa0d9, 0x9, 0x9, 0x1, 0x9, 0x8, 0x6, 0x4d, 0x9, 0x1, 0x5, 0xfffffffe, 0x1, 0x7903, 0x3, 0x0, 0x401, 0x1, 0x75, 0x3, 0x5, 0xffff, 0x1000, 0x76, 0x2, 0x1, 0x3, 0xfffffff8, 0x21, 0x8, 0x3, 0x448a, 0x6, 0x7fff, 0xffffffd7, 0x0, 0x188d, 0x7, 0x40, 0x72, 0x40, 0x8e, 0x7fff, 0x6, 0xfffffffe, 0x8, 0x7, 0x0, 0x0, 0x5, 0x1209, 0x100, 0x8, 0x10001, 0x35c3, 0x3ff, 0x100, 0x3, 0xb0d, 0x3, 0x1, 0x2, 0x4f, 0x5, 0x2, 0x5, 0x9533, 0x5977909f, 0x4b, 0x1000, 0x6, 0x401, 0xffffffff, 0x80, 0x6, 0x5, 0x7, 0x2, 0x3, 0x2, 0x24000000, 0x10001, 0x3, 0x5, 0x8000, 0x6, 0x4, 0x63f, 0xfffffffe, 0x42, 0xffcc, 0x0, 0xffff, 0x2, 0x1ff, 0x45526718, 0x1c, 0x2, 0xc, 0x7f, 0x3e, 0x8001, 0x2, 0x8, 0x735, 0x6, 0x3, 0x1, 0x0, 0x2, 0x4, 0x0, 0x0, 0xb, 0xfe000000, 0x0, 0x40, 0x5, 0x3deb, 0x7, 0x200, 0x4, 0x7fff, 0x9, 0x7ff, 0x31c, 0x8000, 0xfffffffe, 0x7, 0x0, 0xf, 0xfffffff9, 0x2, 0x5, 0x6, 0x2, 0x8, 0x800, 0xfffffffd, 0x1, 0x7, 0xe, 0x7, 0x7, 0x3, 0x10, 0x2, 0xa, 0x44, 0x11d5, 0xfffffe01, 0x493, 0x1, 0x5f8c1289, 0xc5e3, 0xa, 0x100, 0x1, 0x5, 0x4, 0x0, 0x4, 0xda, 0x8, 0x400, 0x9, 0xf, 0x1, 0x9, 0x7, 0x1, 0x8, 0x601, 0x101, 0x1, 0x80000001, 0x9, 0x5bd7e04f, 0x4, 0x10, 0x7f, 0x7, 0x6, 0x8000, 0x8, 0x4, 0xff, 0x975c, 0x8, 0x7f, 0x3, 0x5, 0x81, 0x7, 0xffffffff, 0x2, 0xfffff7b1, 0x80000001, 0x6, 0x4, 0x8, 0x8, 0xc6, 0x1, 0x400, 0xfffffffe, 0x7fff, 0x3, 0x6, 0x1, 0x0, 0x4, 0xda, 0xd000000, 0xade8, 0x81, 0x3, 0x9, 0x1, 0x8, 0x3ff, 0xd, 0x8000, 0x8, 0x7, 0x0, 0x0, 0x8, 0x0, 0x9, 0x2, 0x3, 0x3, 0x400, 0x379, 0x7, 0x0, 0xfffffff9]}]}}, @c_cbq={{0x8}, {0x440, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x29, 0x3, 0x1b, 0x4, 0xe0000, 0x7fff, 0x8, 0x7f}}, @TCA_CBQ_RATE={0x10, 0x5, {0xa, 0x1, 0x2, 0x2, 0x3, 0xf}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xdff, 0x6, 0x80, 0x80000001, 0x1, 0x0, 0x4, 0x4, 0x80, 0xb85a, 0xff, 0x3ff, 0x6, 0x8000, 0x1, 0x0, 0xffffffff, 0x9, 0x4, 0x7f7695be, 0x81, 0x9, 0x8, 0x8, 0x7, 0x5, 0xf75, 0x8, 0x5, 0xc, 0x4, 0xffffff5d, 0x1, 0x7, 0x7fffffff, 0x1ff, 0x1, 0x4, 0x2, 0x6, 0x8, 0x7, 0x4, 0x4, 0x8, 0x0, 0x0, 0x4, 0xd57d, 0xffffff50, 0x1, 0x2, 0x8, 0x38c94d85, 0x6, 0x6, 0x1b, 0x5, 0x0, 0x5, 0x4, 0x10001, 0x0, 0x2, 0x1, 0x6, 0x8, 0x1ff, 0x7f, 0x101, 0x7fff, 0x1, 0x4, 0xd, 0x3, 0xc, 0x2, 0xd, 0x2, 0x80000000, 0x4000001, 0x7, 0x6, 0x10, 0x7fff, 0xfffffffb, 0x9e, 0x9, 0xde, 0x6, 0x1b88b58d, 0x23, 0x89ac, 0x4, 0x5, 0x7, 0x7, 0x9, 0x9, 0x9, 0x1, 0x40, 0x7, 0x3, 0x0, 0xb39, 0x0, 0x1, 0x6, 0xff, 0x321, 0x5, 0xde, 0xfffffffc, 0x3ca, 0x0, 0x0, 0x9, 0xfffffffd, 0x7793, 0x3, 0x4, 0xc42, 0xffffff40, 0x80000000, 0xc, 0x3, 0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x5, 0x3e2d, 0x34, 0x4, 0x1, 0x800, 0x7, 0x7, 0x98, 0x0, 0x7, 0x8b, 0x7, 0x4, 0x313a, 0x1, 0x1, 0x3ff, 0x2, 0xfffffffe, 0x8, 0x81, 0xa0, 0x4, 0x371b, 0xfffffe01, 0x101, 0x0, 0x2, 0xfffffffc, 0x2, 0x4, 0x9, 0x9, 0x0, 0x45, 0x3, 0x437b, 0x4f4f5294, 0x4, 0x1, 0x94a, 0x706e464, 0x6427, 0x9642, 0xc7, 0xb, 0x6, 0x101, 0x4, 0x3, 0x9, 0x235, 0x6, 0x0, 0xb, 0x3, 0x5, 0x7, 0x5, 0x1000, 0x3, 0x4, 0x3, 0x2, 0xe7f, 0x9, 0x7ff, 0x9, 0x3, 0xe, 0x3ff, 0xfffffffe, 0x41c, 0x0, 0x9, 0x8000, 0x9, 0x4, 0x508, 0x89c5, 0x8b8, 0x3ff, 0x9, 0xfffffff7, 0x36ee, 0x7f, 0xfffffff9, 0x81, 0x1, 0x3ff, 0x7, 0x0, 0x0, 0x4, 0x7, 0x0, 0x1, 0x2, 0x3, 0x88d, 0x3, 0x149, 0x3, 0xe, 0x0, 0x3, 0xa, 0x4, 0x7fffffff, 0x0, 0x6, 0x10000, 0x125, 0x3c021542, 0x4, 0xb439, 0x6, 0x8000, 0x0, 0x3, 0x2d43, 0x9]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xd, 0xa}, 0x9, 0x1}}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0x2, 0x5, 0x6, 0x3, 0x82, 0x4, 0xfe000000, 0x1, 0xfff, 0x4, 0x8, 0xfffffff9, 0x0, 0xfffffffd, 0x7, 0x2, 0x9, 0x4, 0x7, 0x5, 0x3, 0x4, 0x4d27, 0x3, 0x40, 0x55a3, 0x2, 0xfffffff7, 0xb5, 0x5eb0f206, 0x6, 0xffffffff, 0x3e5, 0x0, 0x7, 0x6, 0x81, 0xfea5, 0x8, 0x5, 0x4, 0x5, 0x7, 0x5, 0x2811, 0x8, 0x9, 0x8, 0x8, 0x200, 0x80000001, 0x5, 0x7fff, 0x5, 0x8, 0x3, 0x1, 0x8, 0x0, 0xd, 0x5, 0x6, 0xfffffffd, 0x10, 0x200, 0x10, 0x9, 0xfffffffc, 0x0, 0x9, 0xf, 0x9, 0x4d9d, 0x6c2b, 0x5, 0x0, 0x140, 0x6, 0xffff, 0xffff, 0x8, 0x2, 0x1, 0x4, 0x7c, 0x7c2, 0x1ff, 0x1ff, 0x9, 0x76, 0x80000000, 0x2, 0x8, 0x6, 0x1, 0x0, 0x5, 0x5, 0x79, 0xb45e, 0x4, 0x7, 0x3e, 0x9, 0x5, 0x7, 0x6, 0x7, 0x40, 0xc, 0x2, 0x40, 0x6, 0x10000, 0x2cbc, 0x70b, 0xd9d5, 0x80000000, 0x81, 0x101, 0x5, 0x1, 0x7, 0x5, 0x72, 0x3, 0x8000, 0xfffffffc, 0x10001, 0x4, 0xb, 0xa4a0, 0x400, 0x3, 0x9, 0x8, 0x7, 0xdbf, 0x5, 0x3, 0x5, 0xff, 0xff, 0x8000, 0x3, 0x5, 0x2, 0x2, 0x1, 0x40, 0x7, 0x8, 0x4, 0x60, 0x1fb, 0x0, 0x9, 0x7f, 0x200, 0x6, 0x2, 0x7, 0x2, 0x2, 0xffff8001, 0x83, 0x10001, 0x8, 0x8, 0x103, 0xb1, 0x2, 0xffffff00, 0x5, 0x3, 0x80, 0x2, 0x3, 0x7fff, 0x5, 0x8, 0x101, 0xc1, 0xffff8461, 0xf624, 0x8, 0x7fffffff, 0x1, 0x6, 0xc, 0x9d, 0x7fff, 0x7, 0x1ff, 0xe, 0xfb50, 0x8, 0xf, 0x0, 0x400003, 0x4, 0x8, 0x6, 0x3, 0x200, 0xffffffff, 0x7, 0x5, 0x1, 0x8, 0x9b1, 0xf3, 0x10, 0x8, 0x0, 0x76c, 0x3, 0x1ff, 0x100, 0x5, 0x4, 0xa, 0xffffffff, 0x81, 0x7, 0x2, 0x4, 0x514d, 0x5, 0x200, 0x5, 0x1, 0x7, 0xeb, 0x0, 0x2, 0x3, 0x6, 0x800, 0x1000, 0x7ff, 0x5, 0x1, 0x200, 0x0, 0x6, 0x400, 0x8, 0x2, 0x3f9, 0xe, 0x0, 0x5, 0x6, 0x6]}]}}]}, 0xe60}}, 0x4000000) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="32153f2a8d4346a19ede082a925e2ad86a7d13033bf0c7653843f98d9e1a9b40ff311724d8cec5e832d15752d137824e4094e48e98", 0x35, 0x40005, &(0x7f0000000080)={0x11, 0x1b, r1, 0x1, 0x2, 0x6, @random="980ba3e03c02"}, 0x14) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xbb1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x80}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 645.995501ms ago: executing program 0 (id=804): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x101}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x20004808) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r2, &(0x7f0000000740), 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xfffb) fcntl$addseals(r2, 0x409, 0x8) ftruncate(r2, 0x0) lseek(r2, 0x0, 0x4) 167.161507ms ago: executing program 4 (id=796): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 135.766419ms ago: executing program 0 (id=797): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone3(0x0, 0x0) rt_sigqueueinfo(0x0, 0x3f, 0x0) gettid() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r2, &(0x7f00000004c0)='W', 0x1, 0x20000080, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) 82.978245ms ago: executing program 4 (id=798): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=799): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x200000100000011, 0x803, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:28059' (ED25519) to the list of known hosts. [ 41.898899][ T5923] cgroup: Unknown subsys name 'net' [ 42.085240][ T5923] cgroup: Unknown subsys name 'cpuset' [ 42.088897][ T5923] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.912006][ T5923] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.920354][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.923388][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.926024][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.929077][ T5942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.933616][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.936584][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.948713][ T67] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.952069][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.958299][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.961085][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.964013][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.967015][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.969044][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.969962][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.972121][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.976319][ T67] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.978431][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.979187][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.980923][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.983779][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.180733][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 46.243402][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 46.297396][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 46.323481][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.325735][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.328022][ T5939] bridge_slave_0: entered allmulticast mode [ 46.330585][ T5939] bridge_slave_0: entered promiscuous mode [ 46.337573][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.339819][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.342046][ T5939] bridge_slave_1: entered allmulticast mode [ 46.344687][ T5939] bridge_slave_1: entered promiscuous mode [ 46.402080][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 46.448143][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.471980][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.474404][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.476710][ T5950] bridge_slave_0: entered allmulticast mode [ 46.479308][ T5950] bridge_slave_0: entered promiscuous mode [ 46.509191][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.538849][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.541123][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.543503][ T5950] bridge_slave_1: entered allmulticast mode [ 46.546135][ T5950] bridge_slave_1: entered promiscuous mode [ 46.608060][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.630785][ T5939] team0: Port device team_slave_0 added [ 46.633506][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.635880][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.638070][ T5944] bridge_slave_0: entered allmulticast mode [ 46.640628][ T5944] bridge_slave_0: entered promiscuous mode [ 46.643611][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.645914][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.648182][ T5944] bridge_slave_1: entered allmulticast mode [ 46.650692][ T5944] bridge_slave_1: entered promiscuous mode [ 46.683161][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.687770][ T5939] team0: Port device team_slave_1 added [ 46.718890][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.721247][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.723714][ T5943] bridge_slave_0: entered allmulticast mode [ 46.726418][ T5943] bridge_slave_0: entered promiscuous mode [ 46.773221][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.776236][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.778466][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.780697][ T5943] bridge_slave_1: entered allmulticast mode [ 46.783520][ T5943] bridge_slave_1: entered promiscuous mode [ 46.801122][ T5950] team0: Port device team_slave_0 added [ 46.804810][ T5950] team0: Port device team_slave_1 added [ 46.821562][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.863095][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.865635][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.873897][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.892066][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.908396][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.910565][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.918454][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.922188][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.924491][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.932546][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.938073][ T5944] team0: Port device team_slave_0 added [ 46.941240][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.958158][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.960319][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.969332][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.980908][ T5944] team0: Port device team_slave_1 added [ 47.001775][ T5943] team0: Port device team_slave_0 added [ 47.007456][ T5943] team0: Port device team_slave_1 added [ 47.035831][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.038027][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.046267][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.089676][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.091838][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.100061][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.161948][ T5939] hsr_slave_0: entered promiscuous mode [ 47.164427][ T5939] hsr_slave_1: entered promiscuous mode [ 47.167379][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.170151][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.180014][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.186780][ T5950] hsr_slave_0: entered promiscuous mode [ 47.189000][ T5950] hsr_slave_1: entered promiscuous mode [ 47.191097][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.193805][ T5950] Cannot create hsr debugfs directory [ 47.220859][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.225498][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.236096][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.276588][ T5944] hsr_slave_0: entered promiscuous mode [ 47.278822][ T5944] hsr_slave_1: entered promiscuous mode [ 47.281019][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.283476][ T5944] Cannot create hsr debugfs directory [ 47.376132][ T5943] hsr_slave_0: entered promiscuous mode [ 47.378331][ T5943] hsr_slave_1: entered promiscuous mode [ 47.380414][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.383016][ T5943] Cannot create hsr debugfs directory [ 47.636745][ T5950] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.641975][ T5950] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.645924][ T5950] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.654178][ T5950] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.676918][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.681121][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.686561][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.691982][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.723787][ T5943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.728041][ T5943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.734099][ T5943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.738465][ T5943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.783784][ T5944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.788010][ T5944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.793272][ T5944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.808023][ T5944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.833430][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.846035][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.859378][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.870847][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.873208][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.886506][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.888747][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.896406][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.901661][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.908931][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.911179][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.924401][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.926829][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.941644][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.950911][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.953460][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.962230][ T5950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.966206][ T5950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.974864][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.977152][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.999021][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.023766][ T5946] Bluetooth: hci2: command tx timeout [ 48.023773][ T5953] Bluetooth: hci3: command tx timeout [ 48.024833][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.033226][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.033288][ T5946] Bluetooth: hci1: command tx timeout [ 48.033336][ T5953] Bluetooth: hci0: command tx timeout [ 48.035547][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.059275][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.061554][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.099460][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.112968][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.137927][ T5950] veth0_vlan: entered promiscuous mode [ 48.150588][ T5939] veth0_vlan: entered promiscuous mode [ 48.155551][ T5950] veth1_vlan: entered promiscuous mode [ 48.163808][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.166624][ T5939] veth1_vlan: entered promiscuous mode [ 48.181200][ T5950] veth0_macvtap: entered promiscuous mode [ 48.190266][ T5950] veth1_macvtap: entered promiscuous mode [ 48.197204][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.202594][ T5939] veth0_macvtap: entered promiscuous mode [ 48.211370][ T5939] veth1_macvtap: entered promiscuous mode [ 48.220321][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.225007][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.228309][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.232015][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.240083][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.243462][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.246618][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.250361][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.256223][ T5950] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.259005][ T5950] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.261705][ T5950] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.264867][ T5950] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.271361][ T5939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.275347][ T5939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.278688][ T5939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.282052][ T5939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.296500][ T5943] veth0_vlan: entered promiscuous mode [ 48.309270][ T5943] veth1_vlan: entered promiscuous mode [ 48.325602][ T5944] veth0_vlan: entered promiscuous mode [ 48.333748][ T5944] veth1_vlan: entered promiscuous mode [ 48.349945][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.353765][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.373709][ T5943] veth0_macvtap: entered promiscuous mode [ 48.378425][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.380927][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.384362][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.387239][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.391897][ T5944] veth0_macvtap: entered promiscuous mode [ 48.394889][ T5943] veth1_macvtap: entered promiscuous mode [ 48.407300][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.409733][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.413487][ T5944] veth1_macvtap: entered promiscuous mode [ 48.419647][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.423437][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.426436][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.429618][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.433795][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.440723][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.445082][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.448084][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.451237][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.454305][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.457632][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.461401][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.467924][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.469910][ T5950] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.471195][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.479268][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.484696][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.489936][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.495038][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.499087][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.503726][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.507861][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.511842][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.516187][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.521442][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.537937][ T5943] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.541308][ T5943] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.544043][ T5943] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.547467][ T5943] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.556590][ T5944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.559317][ T5944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.561973][ T5944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.564734][ T5944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.569113][ T6004] Zero length message leads to an empty skb [ 48.617033][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.620159][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.645988][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.648452][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.661770][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.665579][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.666551][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.670654][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.759824][ T6017] veth1_macvtap: left promiscuous mode [ 48.761586][ T6017] macsec0: entered promiscuous mode [ 48.793430][ T6021] netlink: 'syz.3.7': attribute type 1 has an invalid length. [ 48.804976][ T6021] bond1: entered allmulticast mode [ 48.808964][ T6021] bond1 (unregistering): Released all slaves [ 48.849291][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7'. [ 49.030652][ T6025] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 49.088661][ T6030] overlayfs: upper fs does not support file handles, falling back to index=off. [ 49.095216][ T6030] evm: overlay not supported [ 49.826829][ T6042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13'. [ 49.838168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.840901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.929304][ T40] audit: type=1326 audit(1745667367.613:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.1.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7fc00000 [ 50.036260][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 50.041124][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 50.044954][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 50.102744][ T5946] Bluetooth: hci1: command tx timeout [ 50.104168][ T5953] Bluetooth: hci2: command tx timeout [ 50.104621][ T5946] Bluetooth: hci0: command tx timeout [ 50.106278][ T5953] Bluetooth: hci3: command tx timeout [ 50.196773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.199741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.211836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.215998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.218730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.221448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.347436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 50.350387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.576542][ T40] audit: type=1326 audit(1745667368.263:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.1.12" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f04579 code=0x7fc00000 [ 50.617191][ T6075] netlink: zone id is out of range [ 50.619176][ T6075] netlink: zone id is out of range [ 50.621091][ T6075] netlink: zone id is out of range [ 50.624235][ T6075] netlink: zone id is out of range [ 50.625950][ T6075] netlink: zone id is out of range [ 50.627652][ T6075] netlink: zone id is out of range [ 50.629330][ T6075] netlink: zone id is out of range [ 50.631039][ T6075] netlink: zone id is out of range [ 50.633888][ T6075] netlink: zone id is out of range [ 50.635561][ T6075] netlink: zone id is out of range [ 50.902392][ T6082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23'. [ 50.916850][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'. [ 51.027288][ T6086] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.527262][ T6102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30'. [ 51.530115][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 51.932554][ T3227] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.102776][ T3227] usb 6-1: Using ep0 maxpacket: 8 [ 52.108200][ T3227] usb 6-1: unable to get BOS descriptor or descriptor too short [ 52.112055][ T3227] usb 6-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 32 [ 52.115402][ T3227] usb 6-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023 [ 52.118572][ T3227] usb 6-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 52.125510][ T3227] usb 6-1: config 1 interface 0 has no altsetting 0 [ 52.130561][ T3227] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.133601][ T3227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.137354][ T3227] usb 6-1: Product: syz [ 52.138779][ T3227] usb 6-1: Manufacturer: syz [ 52.140349][ T3227] usb 6-1: SerialNumber: syz [ 52.149150][ T6108] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 52.151696][ T6108] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 52.182595][ T5942] Bluetooth: hci3: command tx timeout [ 52.193160][ T5942] Bluetooth: hci0: command tx timeout [ 52.195158][ T5942] Bluetooth: hci2: command tx timeout [ 52.196982][ T5942] Bluetooth: hci1: command tx timeout [ 52.370266][ T3227] usb 6-1: bad CDC descriptors [ 52.380346][ T3227] usb 6-1: USB disconnect, device number 2 [ 52.958572][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 53.069846][ T6141] capability: warning: `syz.1.44' uses deprecated v2 capabilities in a way that may be insecure [ 53.982242][ T6169] __nla_validate_parse: 1 callbacks suppressed [ 53.982252][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 54.234454][ T29] cfg80211: failed to load regulatory.db [ 54.283440][ T5946] Bluetooth: hci1: command tx timeout [ 54.285215][ T5946] Bluetooth: hci2: command tx timeout [ 54.286944][ T5946] Bluetooth: hci0: command tx timeout [ 54.288648][ T5946] Bluetooth: hci3: command tx timeout [ 54.910641][ T6187] netlink: 'syz.1.55': attribute type 1 has an invalid length. [ 54.913290][ T6187] netlink: 208 bytes leftover after parsing attributes in process `syz.1.55'. [ 55.203072][ T6203] batadv_slave_1: entered promiscuous mode [ 55.343011][ T835] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.389991][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 55.394178][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 55.428944][ T40] audit: type=1326 audit(1745667374.106:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.66" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 55.435908][ T40] audit: type=1326 audit(1745667374.106:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.66" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 55.439888][ T6207] batadv_slave_1: left promiscuous mode [ 55.443617][ T40] audit: type=1326 audit(1745667374.106:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.66" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 55.451796][ T40] audit: type=1326 audit(1745667374.106:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.66" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 55.458761][ T40] audit: type=1326 audit(1745667374.106:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.66" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 55.468606][ T40] audit: type=1326 audit(1745667374.106:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.66" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 55.476136][ T40] audit: type=1326 audit(1745667374.106:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.66" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 55.483884][ T40] audit: type=1326 audit(1745667374.106:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.66" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 55.490517][ T40] audit: type=1326 audit(1745667374.106:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.66" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 55.495358][ T835] usb 7-1: config 0 has no interfaces? [ 55.497218][ T40] audit: type=1326 audit(1745667374.106:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.66" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 55.500417][ T835] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 55.508706][ T835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.513668][ T835] usb 7-1: Product: syz [ 55.514996][ T835] usb 7-1: Manufacturer: syz [ 55.516432][ T835] usb 7-1: SerialNumber: syz [ 55.526373][ T835] usb 7-1: config 0 descriptor?? [ 55.746923][ T835] usb 7-1: USB disconnect, device number 2 [ 56.166098][ T6240] netlink: 'syz.0.72': attribute type 1 has an invalid length. [ 56.225756][ T6241] ip6erspan0: entered promiscuous mode [ 56.285265][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 57.439833][ T6283] Bluetooth: MGMT ver 1.23 [ 57.441912][ T6283] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 57.765266][ T6289] syzkaller0: entered promiscuous mode [ 57.767681][ T6289] syzkaller0: entered allmulticast mode [ 58.076154][ T6304] syz.2.94 uses obsolete (PF_INET,SOCK_PACKET) [ 58.535316][ T6314] netlink: 16 bytes leftover after parsing attributes in process `syz.3.96'. [ 58.538346][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.96'. [ 58.595617][ T10] IPVS: starting estimator thread 0... [ 58.597952][ C1] net_ratelimit: 352 callbacks suppressed [ 58.597962][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 58.609638][ T6304] bridge_slave_0: left allmulticast mode [ 58.611668][ T6304] bridge_slave_0: left promiscuous mode [ 58.616205][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.621159][ T6304] bridge_slave_1: left allmulticast mode [ 58.623196][ T6304] bridge_slave_1: left promiscuous mode [ 58.625204][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.630832][ T6304] bond0: (slave bond_slave_0): Releasing backup interface [ 58.639103][ T6304] bond0: (slave bond_slave_1): Releasing backup interface [ 58.648541][ T6304] team0: Port device team_slave_0 removed [ 58.653250][ T6304] team0: Port device team_slave_1 removed [ 58.656250][ T6304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.658670][ T6304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.662170][ T6304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.668351][ T6304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.682618][ T6316] IPVS: using max 44 ests per chain, 105600 per kthread [ 58.693630][ T6314] geneve2: entered allmulticast mode [ 58.756897][ T6322] netlink: 'syz.2.98': attribute type 4 has an invalid length. [ 58.767952][ T6322] netlink: 'syz.2.98': attribute type 4 has an invalid length. [ 58.877144][ T6329] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 59.697547][ T6351] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 60.177139][ T6362] netlink: 'syz.1.113': attribute type 4 has an invalid length. [ 60.205861][ T6362] netlink: 'syz.1.113': attribute type 4 has an invalid length. [ 60.319513][ T6368] bridge_slave_0: left allmulticast mode [ 60.321946][ T6368] bridge_slave_0: left promiscuous mode [ 60.325237][ T6368] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.346025][ T6368] bridge_slave_1: left allmulticast mode [ 60.348301][ T6368] bridge_slave_1: left promiscuous mode [ 60.350432][ T6368] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.362514][ T6368] bond0: (slave bond_slave_0): Releasing backup interface [ 60.369492][ T6368] bond0: (slave bond_slave_1): Releasing backup interface [ 60.384138][ T6368] team0: Port device team_slave_0 removed [ 60.390391][ T6368] team0: Port device team_slave_1 removed [ 60.396426][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.399683][ T6368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.418092][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.429725][ T6368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.540572][ T6374] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 60.545308][ T6374] netlink: 208 bytes leftover after parsing attributes in process `syz.3.115'. [ 62.300212][ T6409] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 62.489513][ T6412] bridge_slave_0: left allmulticast mode [ 62.491324][ T6412] bridge_slave_0: left promiscuous mode [ 62.493488][ T6412] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.498153][ T6412] bridge_slave_1: left allmulticast mode [ 62.499986][ T6412] bridge_slave_1: left promiscuous mode [ 62.501726][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.510625][ T6412] bond0: (slave bond_slave_0): Releasing backup interface [ 62.516042][ T6412] bond0: (slave bond_slave_1): Releasing backup interface [ 62.543319][ T6412] team0: Port device team_slave_0 removed [ 62.549588][ T6412] team0: Port device team_slave_1 removed [ 62.551821][ T6412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.554653][ T6412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.557696][ T6412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.560024][ T6412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.697387][ T6420] netlink: 'syz.0.127': attribute type 1 has an invalid length. [ 62.700740][ T6420] netlink: 208 bytes leftover after parsing attributes in process `syz.0.127'. [ 63.680804][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 64.995081][ T6458] bridge_slave_0: left allmulticast mode [ 64.996875][ T6458] bridge_slave_0: left promiscuous mode [ 64.998698][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.004403][ T6458] bridge_slave_1: left allmulticast mode [ 65.006220][ T6458] bridge_slave_1: left promiscuous mode [ 65.008101][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.017737][ T6458] bond0: (slave bond_slave_0): Releasing backup interface [ 65.025272][ T6458] bond0: (slave bond_slave_1): Releasing backup interface [ 65.042732][ T6458] team0: Port device team_slave_0 removed [ 65.047544][ T6458] team0: Port device team_slave_1 removed [ 65.049784][ T6458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.054982][ T6458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.058070][ T6458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.060419][ T6458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.338875][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 66.377611][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 68.535505][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'. [ 69.337505][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 69.381510][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 69.509887][ T6555] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 70.094384][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.164'. [ 70.097266][ T6558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.164'. [ 70.118500][ T6558] geneve2: entered allmulticast mode [ 70.195994][ T835] IPVS: starting estimator thread 0... [ 70.295130][ T6569] IPVS: using max 44 ests per chain, 105600 per kthread [ 70.434816][ T6576] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 70.437851][ T6576] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 70.592540][ T835] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 70.752607][ T835] usb 7-1: Using ep0 maxpacket: 8 [ 70.755919][ T835] usb 7-1: unable to get BOS descriptor or descriptor too short [ 70.759395][ T835] usb 7-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 32 [ 70.762976][ T835] usb 7-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023 [ 70.766186][ T835] usb 7-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.770273][ T835] usb 7-1: config 1 interface 0 has no altsetting 0 [ 70.775350][ T835] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.778244][ T835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.780770][ T835] usb 7-1: Product: syz [ 70.782219][ T835] usb 7-1: Manufacturer: syz [ 70.783912][ T835] usb 7-1: SerialNumber: syz [ 70.787919][ T6572] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 70.790194][ T6572] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 70.827743][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.012162][ T835] usb 7-1: bad CDC descriptors [ 71.018333][ T835] usb 7-1: USB disconnect, device number 3 [ 71.291951][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 71.647768][ T6599] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 71.656402][ T6598] netlink: 40 bytes leftover after parsing attributes in process `syz.3.187'. [ 71.683388][ T6598] netlink: 40 bytes leftover after parsing attributes in process `syz.3.187'. [ 72.179164][ T6612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.180'. [ 72.182711][ T6612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.180'. [ 72.189179][ T6612] geneve0: entered allmulticast mode [ 72.199503][ T34] IPVS: starting estimator thread 0... [ 72.293182][ T6617] IPVS: using max 44 ests per chain, 105600 per kthread [ 72.867945][ T76] IPVS: stop unused estimator thread 0... [ 73.092323][ T6628] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 73.095751][ T6628] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 73.314871][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'. [ 73.689723][ T6643] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 75.098436][ T6679] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.271640][ T6689] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 76.892523][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 77.042570][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 77.046511][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 77.049634][ T24] usb 8-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 32 [ 77.052824][ T24] usb 8-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023 [ 77.055907][ T24] usb 8-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.059902][ T24] usb 8-1: config 1 interface 0 has no altsetting 0 [ 77.064182][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.066959][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.069392][ T24] usb 8-1: Product: syz [ 77.070702][ T24] usb 8-1: Manufacturer: syz [ 77.072149][ T24] usb 8-1: SerialNumber: syz [ 77.075756][ T6719] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.078143][ T6719] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.300590][ T24] usb 8-1: bad CDC descriptors [ 77.304111][ T24] usb 8-1: USB disconnect, device number 2 [ 77.534545][ T6732] netlink: 'syz.0.221': attribute type 1 has an invalid length. [ 77.549664][ T6732] warning: `syz.0.221' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.762339][ T6743] af_packet: tpacket_rcv: packet too big, clamped from 717 to 4294967272. macoff=96 [ 81.090976][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 81.109759][ T6813] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.184571][ T6813] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.256417][ T6813] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.371412][ T6813] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.437685][ T6813] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.445655][ T6813] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.455271][ T6813] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.462163][ T6813] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.118126][ T6835] netlink: 'syz.2.254': attribute type 1 has an invalid length. [ 82.132864][ T6828] netlink: 'syz.1.250': attribute type 4 has an invalid length. [ 83.031723][ T6865] netlink: 32 bytes leftover after parsing attributes in process `syz.2.262'. [ 83.334162][ T1323] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 83.492604][ T1323] usb 7-1: Using ep0 maxpacket: 16 [ 83.500285][ T1323] usb 7-1: config 0 has no interfaces? [ 83.500323][ T6878] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.266'. [ 83.502328][ T1323] usb 7-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 83.506593][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 83.518489][ T1323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.524169][ T1323] usb 7-1: config 0 descriptor?? [ 83.753225][ T835] usb 7-1: USB disconnect, device number 4 [ 83.937622][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.269'. [ 84.558228][ T76] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.644365][ T76] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.731171][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.731783][ T76] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.734290][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.739890][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.744030][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.746747][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.792355][ T76] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.845944][ T6900] chnl_net:caif_netlink_parms(): no params data found [ 84.965294][ T6900] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.968392][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.971644][ T6900] bridge_slave_0: entered allmulticast mode [ 84.974890][ T6900] bridge_slave_0: entered promiscuous mode [ 84.978420][ T6900] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.980673][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.983189][ T6900] bridge_slave_1: entered allmulticast mode [ 84.985826][ T6900] bridge_slave_1: entered promiscuous mode [ 85.036984][ T6900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.295913][ T76] bond0 (unregistering): Released all slaves [ 85.303351][ T6900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.335528][ T6900] team0: Port device team_slave_0 added [ 85.339304][ T6900] team0: Port device team_slave_1 added [ 85.376228][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.378634][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.386846][ T6900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.391057][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.393420][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.401338][ T6900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.450556][ T6900] hsr_slave_0: entered promiscuous mode [ 85.452921][ T6900] hsr_slave_1: entered promiscuous mode [ 85.454969][ T6900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.457317][ T6900] Cannot create hsr debugfs directory [ 85.596868][ T6900] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.604369][ T6900] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.612093][ T76] hsr_slave_0: left promiscuous mode [ 85.615353][ T76] hsr_slave_1: left promiscuous mode [ 85.629986][ T76] veth1_macvtap: left promiscuous mode [ 85.632319][ T76] veth0_macvtap: left promiscuous mode [ 85.634640][ T76] veth1_vlan: left promiscuous mode [ 85.636760][ T76] veth0_vlan: left promiscuous mode [ 86.446157][ T6900] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.457967][ T6900] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.515121][ T6900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.525501][ T6900] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.537373][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.539715][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.543504][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.545745][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.668299][ T6900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.740081][ T76] IPVS: stop unused estimator thread 0... [ 86.772904][ T6900] veth0_vlan: entered promiscuous mode [ 86.777491][ T6900] veth1_vlan: entered promiscuous mode [ 86.791958][ T6900] veth0_macvtap: entered promiscuous mode [ 86.795638][ T6900] veth1_macvtap: entered promiscuous mode [ 86.804228][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.810539][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.814798][ T6900] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.817406][ T6900] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.820010][ T6900] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.822953][ T6900] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.832832][ T5946] Bluetooth: hci0: command tx timeout [ 86.851155][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.854467][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.866737][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.869110][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.303587][ T5978] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 87.564592][ T5978] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.568528][ T5978] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 87.582206][ T5978] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.593691][ T5978] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 87.597329][ T5978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 87.600475][ T5978] usb 8-1: SerialNumber: syz [ 87.626475][ T5978] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 87.630059][ T5978] usb-storage 8-1:1.0: USB Mass Storage device detected [ 87.655014][ T5978] usb-storage 8-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 87.829711][ T3227] usb 8-1: USB disconnect, device number 3 [ 88.902617][ T5946] Bluetooth: hci0: command tx timeout [ 89.626403][ T7038] syz_tun: entered allmulticast mode [ 89.628991][ T7038] lo: entered allmulticast mode [ 89.665003][ T7037] syz_tun: left allmulticast mode [ 89.666688][ T7037] lo: left allmulticast mode [ 89.701833][ T7041] netlink: 'syz.0.298': attribute type 13 has an invalid length. [ 90.282010][ T7041] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.285379][ T7041] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.287878][ T7041] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.290386][ T7041] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.992647][ T5946] Bluetooth: hci0: command tx timeout [ 93.062736][ T5946] Bluetooth: hci0: command tx timeout [ 94.958135][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 94.999283][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.314'. [ 95.037061][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 95.039939][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 96.896014][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.328'. [ 96.905114][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'. [ 97.359887][ T7276] cgroup: Unknown subsys name 'noxattr' [ 97.416434][ T7277] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.332'. [ 97.419354][ T7277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.332'. [ 98.528967][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 98.670539][ T7305] input: syz0 as /devices/virtual/input/input5 [ 98.813523][ T7305] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.815554][ T7305] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.823524][ T7305] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.828002][ T7305] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.830952][ T7305] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.846114][ T7305] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.850013][ T7305] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.852075][ T7305] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.914296][ T7305] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.937471][ T7305] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.951061][ T7305] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.984103][ T7305] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.134828][ T7320] netlink: 'syz.4.346': attribute type 10 has an invalid length. [ 99.137547][ T7320] netlink: 40 bytes leftover after parsing attributes in process `syz.4.346'. [ 99.140851][ T7320] batadv0: entered promiscuous mode [ 99.143141][ T7320] batadv0: entered allmulticast mode [ 99.145165][ T7320] bridge0: port 3(batadv0) entered blocking state [ 99.147366][ T7320] bridge0: port 3(batadv0) entered disabled state [ 99.150677][ T7320] bridge0: port 3(batadv0) entered blocking state [ 99.152825][ T7320] bridge0: port 3(batadv0) entered forwarding state [ 99.164001][ T7320] batman_adv: batadv0: Adding interface: dummy0 [ 99.166148][ T7320] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.174382][ T7320] batman_adv: batadv0: Interface activated: dummy0 [ 99.184680][ T7320] batadv0: mtu less than device minimum [ 99.187147][ T7320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.191640][ T7320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.195406][ T7320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.199110][ T7320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.202857][ T7320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.206545][ T7320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.210219][ T7320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.213926][ T7320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.218037][ T7320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.277205][ T7326] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 99.280001][ T7326] macsec1: entered promiscuous mode [ 99.283124][ T7326] macsec1: entered allmulticast mode [ 99.288670][ T7326] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 99.344394][ T7135] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 99.347513][ T7135] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 99.821021][ T7342] netlink: 'syz.1.353': attribute type 10 has an invalid length. [ 99.831007][ T7342] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 100.192634][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.363945][ T34] usb 5-1: config 252 has an invalid interface number: 186 but max is 0 [ 100.367954][ T34] usb 5-1: config 252 has no interface number 0 [ 100.373393][ T34] usb 5-1: New USB device found, idVendor=0403, idProduct=bcd8, bcdDevice=27.67 [ 100.378560][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.382843][ T34] usb 5-1: Product: syz [ 100.385499][ T34] usb 5-1: Manufacturer: syz [ 100.387977][ T34] usb 5-1: SerialNumber: syz [ 100.408546][ T34] ftdi_sio 5-1:252.186: FTDI USB Serial Device converter detected [ 100.415270][ T34] ftdi_sio ttyUSB0: unknown device type: 0x2767 [ 100.629832][ T5980] usb 5-1: USB disconnect, device number 2 [ 100.647477][ T5980] ftdi_sio 5-1:252.186: device disconnected [ 100.832558][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.903133][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.903788][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.992610][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.053283][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 101.056214][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 101.058953][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 101.072858][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 101.075977][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 102.392539][ T3227] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 102.572575][ T3227] usb 6-1: Using ep0 maxpacket: 32 [ 102.576969][ T3227] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 102.580741][ T3227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.592861][ T3227] usb 6-1: config 0 descriptor?? [ 102.613669][ T3227] as10x_usb: device has been detected [ 102.617374][ T3227] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 102.641307][ T3227] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 102.666055][ T3227] as10x_usb: error during firmware upload part1 [ 102.668312][ T3227] Registered device nBox DVB-T Dongle [ 102.805404][ T5317] usb 6-1: USB disconnect, device number 3 [ 102.829940][ T5317] Unregistered device nBox DVB-T Dongle [ 102.830854][ T5317] as10x_usb: device has been disconnected [ 102.912629][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.982599][ T5946] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.992656][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.072572][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.352694][ T5317] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 103.532527][ T5317] usb 6-1: Using ep0 maxpacket: 32 [ 103.535587][ T5317] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 103.538477][ T5317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.544228][ T5317] usb 6-1: config 0 descriptor?? [ 103.549224][ T5317] as10x_usb: device has been detected [ 103.551977][ T5317] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 103.567295][ T5317] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 103.572991][ T5317] as10x_usb: error during firmware upload part1 [ 103.575288][ T5317] Registered device nBox DVB-T Dongle [ 103.750396][ T5317] usb 6-1: USB disconnect, device number 4 [ 103.762283][ T5317] Unregistered device nBox DVB-T Dongle [ 103.765231][ T5317] as10x_usb: device has been disconnected [ 104.237589][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.380'. [ 104.992536][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.072604][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.072619][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.142648][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.772792][ T5942] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 105.813525][ T7463] kvm: kvm [7462]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 106.362864][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 106.384050][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 106.394337][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 107.455191][ T7494] netfs: Couldn't get user pages (rc=-14) [ 107.708052][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 107.711032][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 107.714039][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 107.833879][ T7510] syz.0.401 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 108.050672][ T7523] Bluetooth: MGMT ver 1.23 [ 108.930316][ T7534] kvm: pic: level sensitive irq not supported [ 109.281201][ T7548] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 109.426737][ T7548] /dev/sr0: Can't open blockdev [ 109.533904][ T7551] /dev/sr0: Can't open blockdev [ 109.593283][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 112.242657][ T34] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 112.402659][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 112.405505][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.408852][ T34] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 112.411653][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.416290][ T34] usb 6-1: config 0 descriptor?? [ 112.623380][ T7624] process 'syz.1.436' launched '/dev/fd/5' with NULL argv: empty string added [ 112.753379][ T34] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 112.759824][ T34] usb 6-1: USB disconnect, device number 5 [ 112.963081][ T29] libceph: connect (1)[c::]:6789 error -101 [ 112.966617][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 113.086571][ T7641] ceph: No mds server is up or the cluster is laggy [ 113.150203][ T7648] bridge2: entered allmulticast mode [ 113.316888][ T7655] netlink: 24 bytes leftover after parsing attributes in process `syz.4.445'. [ 114.450559][ T7686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.455'. [ 114.510831][ T7690] input: syz0 as /devices/virtual/input/input6 [ 114.526626][ T835] libceph: connect (1)[c::]:6789 error -101 [ 114.529203][ T835] libceph: mon0 (1)[c::]:6789 connect error [ 114.563633][ T7678] ceph: No mds server is up or the cluster is laggy [ 115.050324][ T7702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.459'. [ 115.633060][ C3] net_ratelimit: 12 callbacks suppressed [ 115.633071][ C3] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 116.692811][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 116.704966][ T7754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.474'. [ 116.708071][ T7754] netlink: 'syz.3.474': attribute type 7 has an invalid length. [ 116.711340][ T7754] netlink: 'syz.3.474': attribute type 8 has an invalid length. [ 116.714052][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 116.719479][ T7754] bond0: entered promiscuous mode [ 116.722018][ T7754] ip6gretap0: entered promiscuous mode [ 116.724574][ T7754] gretap0: entered promiscuous mode [ 116.727030][ T7754] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 116.845438][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.850901][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.853943][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.857309][ T10] usb 6-1: Product: syz [ 116.859106][ T10] usb 6-1: Manufacturer: syz [ 116.860691][ T10] usb 6-1: SerialNumber: syz [ 116.902764][ C2] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 117.078287][ T10] cdc_ncm 6-1:1.0: bind() failure [ 117.081796][ T10] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 117.084241][ T10] cdc_ncm 6-1:1.1: bind() failure [ 117.090214][ T10] usb 6-1: USB disconnect, device number 6 [ 117.673324][ T7775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.479'. [ 118.182584][ C2] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 118.569092][ T5942] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 119.175663][ T7813] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 119.388010][ T7819] infiniband syz2: set down [ 119.390112][ T7819] infiniband syz2: added ipvlan1 [ 119.419932][ T7819] RDS/IB: syz2: added [ 119.421572][ T7819] smc: adding ib device syz2 with port count 1 [ 119.423923][ T7819] smc: ib device syz2 port 1 has pnetid [ 119.840606][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.495'. [ 120.014675][ T7837] netlink: 'syz.0.499': attribute type 1 has an invalid length. [ 120.051524][ T7837] bond1: (slave gretap1): making interface the new active one [ 120.058931][ T7837] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 120.065961][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'. [ 120.266883][ T7837] bond1 (unregistering): (slave gretap1): Releasing active interface [ 120.282329][ T7837] bond1 (unregistering): Released all slaves [ 120.637833][ T7847] wireguard0: entered promiscuous mode [ 123.192519][ T6780] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 123.354886][ T6780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.365135][ T6780] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 123.368878][ T6780] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.399233][ T6780] usb 6-1: config 0 descriptor?? [ 123.498058][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'. [ 123.606810][ T6780] usbhid 6-1:0.0: can't add hid device: -71 [ 123.608752][ T6780] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 123.615170][ T6780] usb 6-1: USB disconnect, device number 7 [ 123.890830][ T5942] Bluetooth: hci3: unexpected event for opcode 0x203d [ 123.929129][ T7933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.526'. [ 124.026634][ T7937] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.528' sets config #255 [ 124.069133][ T7941] vlan3: entered promiscuous mode [ 124.112527][ T6780] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 124.262536][ T6780] usb 6-1: Using ep0 maxpacket: 32 [ 124.266145][ T6780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.270587][ T6780] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 124.274695][ T6780] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.281613][ T6780] usb 6-1: config 0 descriptor?? [ 124.286737][ T6780] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 124.291775][ T6780] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 124.808871][ T835] usb 6-1: USB disconnect, device number 8 [ 124.813876][ T835] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 125.054425][ T7960] lo: entered promiscuous mode [ 125.058310][ T7960] tunl0: entered promiscuous mode [ 125.061528][ T7960] gre0: entered promiscuous mode [ 125.064966][ T7960] gretap0: entered promiscuous mode [ 125.067525][ T7960] erspan0: entered promiscuous mode [ 125.069972][ T7960] ip_vti0: entered promiscuous mode [ 125.072222][ T7960] ip6_vti0: entered promiscuous mode [ 125.075008][ T7960] sit0: entered promiscuous mode [ 125.079009][ T7960] ip6tnl0: entered promiscuous mode [ 125.081341][ T7960] ip6gre0: entered promiscuous mode [ 125.086073][ T7960] syz_tun: entered promiscuous mode [ 125.088778][ T7960] ip6gretap0: entered promiscuous mode [ 125.091487][ T7960] bridge0: entered promiscuous mode [ 125.093855][ T7960] vcan0: entered promiscuous mode [ 125.095780][ T7960] bond0: entered promiscuous mode [ 125.097694][ T7960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.100322][ T7960] team0: entered promiscuous mode [ 125.102395][ T7960] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.104990][ T7960] dummy0: entered promiscuous mode [ 125.108339][ T7960] nlmon0: entered promiscuous mode [ 125.111649][ T7960] caif0: entered promiscuous mode [ 125.113641][ T7960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.571604][ T7974] syz.1.538 (7974): drop_caches: 2 [ 125.577112][ T7974] syz.1.538 (7974): drop_caches: 2 [ 125.933592][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.543'. [ 125.947089][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.543'. [ 127.914471][ T8009] kexec: Could not allocate control_code_buffer [ 127.944069][ T5942] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 127.947681][ T5942] Bluetooth: hci3: Injecting HCI hardware error event [ 127.951265][ T5942] Bluetooth: hci3: hardware error 0x00 [ 128.317593][ T8049] netlink: 'syz.1.560': attribute type 10 has an invalid length. [ 128.338939][ T8049] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 129.018515][ T8087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.564'. [ 129.065871][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.566'. [ 129.072781][ T8093] ipvlan1: entered promiscuous mode [ 129.075295][ T8093] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 129.082012][ T8093] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 129.113682][ T8096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.567'. [ 129.525274][ T8106] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 129.530170][ T5946] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 129.533269][ T8106] mmap: syz.1.570 (8106) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 130.033038][ T5942] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 131.017678][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 131.377376][ T8136] [ 131.676097][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.582'. [ 132.265639][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.800378][ T8166] delete_channel: no stack [ 132.808165][ T8165] delete_channel: no stack [ 133.362553][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 133.514909][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.518847][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.521996][ T34] usb 8-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 133.525040][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.529534][ T34] usb 8-1: config 0 descriptor?? [ 133.761877][ T34] usbhid 8-1:0.0: can't add hid device: -71 [ 133.763854][ T34] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 133.768869][ T34] usb 8-1: USB disconnect, device number 4 [ 133.886722][ T8184] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.888764][ T8184] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.890761][ T8184] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 133.931431][ T5942] Bluetooth: hci0: unexpected event for opcode 0x0035 [ 134.000791][ T5942] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 134.308410][ T8209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.311652][ T8209] IPv6: NLM_F_CREATE should be set when creating new route [ 134.316404][ T8209] lo: entered allmulticast mode [ 134.323267][ T8209] tunl0: entered allmulticast mode [ 134.328257][ T8209] gre0: entered allmulticast mode [ 134.343118][ T8209] gretap0: entered allmulticast mode [ 134.350395][ T8209] erspan0: entered allmulticast mode [ 134.357894][ T8209] ip_vti0: entered allmulticast mode [ 134.362048][ T8209] ip6_vti0: entered allmulticast mode [ 134.365558][ T8209] sit0: entered allmulticast mode [ 134.373805][ T8209] ip6tnl0: entered allmulticast mode [ 134.383350][ T8209] ip6gre0: entered allmulticast mode [ 134.391047][ T8209] syz_tun: entered allmulticast mode [ 134.397957][ T8209] ip6gretap0: entered allmulticast mode [ 134.405703][ T8209] bridge0: entered allmulticast mode [ 134.410238][ T8209] vcan0: entered allmulticast mode [ 134.413460][ T8209] bond0: entered allmulticast mode [ 134.419877][ T8209] team0: entered allmulticast mode [ 134.425639][ T8209] dummy0: entered allmulticast mode [ 134.431461][ T8209] nlmon0: entered allmulticast mode [ 134.436658][ T8209] caif0: entered allmulticast mode [ 134.439281][ T8209] batadv0: entered allmulticast mode [ 134.446081][ T8209] vxcan0: entered allmulticast mode [ 134.448294][ T8209] vxcan1: entered allmulticast mode [ 134.451056][ T8209] veth0: entered allmulticast mode [ 134.457933][ T8209] veth1: entered allmulticast mode [ 134.464279][ T8209] wg0: entered allmulticast mode [ 134.470270][ T8209] wg1: entered allmulticast mode [ 134.474864][ T8209] wg2: entered allmulticast mode [ 134.480105][ T8209] veth0_to_bridge: entered allmulticast mode [ 134.486798][ T8209] bridge_slave_0: entered allmulticast mode [ 134.490965][ T8209] veth1_to_bridge: entered allmulticast mode [ 134.498855][ T8209] bridge_slave_1: entered allmulticast mode [ 134.502793][ T8209] veth0_to_bond: entered allmulticast mode [ 134.509423][ T8209] bond_slave_0: entered allmulticast mode [ 134.513301][ T8209] veth1_to_bond: entered allmulticast mode [ 134.519770][ T8209] bond_slave_1: entered allmulticast mode [ 134.523374][ T8209] veth0_to_team: entered allmulticast mode [ 134.528956][ T8209] team_slave_0: entered allmulticast mode [ 134.533659][ T8209] veth1_to_team: entered allmulticast mode [ 134.538988][ T8209] team_slave_1: entered allmulticast mode [ 134.544649][ T8209] veth0_to_batadv: entered allmulticast mode [ 134.551315][ T8209] batadv_slave_0: entered allmulticast mode [ 134.559625][ T8209] veth1_to_batadv: entered allmulticast mode [ 134.565448][ T8209] batadv_slave_1: entered allmulticast mode [ 134.573403][ T8209] xfrm0: entered allmulticast mode [ 134.581683][ T8209] veth0_to_hsr: entered allmulticast mode [ 134.589087][ T8209] hsr_slave_0: entered allmulticast mode [ 134.593986][ T8209] veth1_to_hsr: entered allmulticast mode [ 134.597389][ T8209] hsr_slave_1: entered allmulticast mode [ 134.608778][ T8209] hsr0: entered allmulticast mode [ 134.617921][ T8209] veth1_virt_wifi: entered allmulticast mode [ 134.625347][ T8209] veth0_virt_wifi: entered allmulticast mode [ 134.633730][ T8209] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 134.637093][ T8209] veth1_vlan: entered allmulticast mode [ 134.642043][ T8209] veth0_vlan: entered allmulticast mode [ 134.652098][ T8209] vlan0: entered allmulticast mode [ 134.656498][ T8209] vlan1: entered allmulticast mode [ 134.658653][ T8209] macvlan0: entered allmulticast mode [ 134.664771][ T8209] macvlan1: entered allmulticast mode [ 134.667426][ T8209] ipvlan0: entered allmulticast mode [ 134.669257][ T8209] ipvlan1: entered allmulticast mode [ 134.671819][ T8209] veth1_macvtap: entered allmulticast mode [ 134.680687][ T8209] veth0_macvtap: entered allmulticast mode [ 134.687545][ T8209] macvtap0: entered allmulticast mode [ 134.695285][ T8209] macsec0: left promiscuous mode [ 134.697396][ T8209] macsec0: entered allmulticast mode [ 134.699927][ T8209] geneve0: entered allmulticast mode [ 134.706257][ T8209] geneve1: entered allmulticast mode [ 134.711008][ T8209] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 134.720208][ T8209] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 134.725839][ T8209] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 134.730195][ T8209] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 134.739858][ T8209] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 134.747758][ T8209] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 134.752093][ T8209] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.758837][ T8209] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.761565][ T8209] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.764519][ T8209] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.768605][ T8209] vlan2: entered allmulticast mode [ 134.770917][ T8209] bridge1: entered allmulticast mode [ 134.775762][ T8209] syztnl1: entered allmulticast mode [ 134.777493][ T8209] bridge_slave_0.: entered allmulticast mode [ 134.779895][ T8209] hsr1: entered allmulticast mode [ 134.785266][ T8209] vlan3: entered allmulticast mode [ 135.081511][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 135.234856][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.485891][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 135.485901][ T40] audit: type=1326 audit(1745667454.166:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.3.614" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 135.513874][ T40] audit: type=1326 audit(1745667454.176:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.3.614" exe="/syz-executor" sig=0 arch=40000003 syscall=271 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 135.520497][ T40] audit: type=1326 audit(1745667454.176:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.3.614" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 135.529646][ T40] audit: type=1326 audit(1745667454.176:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.3.614" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 135.536603][ T40] audit: type=1326 audit(1745667454.176:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.3.614" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 135.543909][ T40] audit: type=1326 audit(1745667454.176:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.3.614" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 135.550963][ T40] audit: type=1326 audit(1745667454.176:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.3.614" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 135.557972][ T40] audit: type=1326 audit(1745667454.176:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.3.614" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 135.565534][ T40] audit: type=1326 audit(1745667454.176:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.3.614" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 135.565954][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 135.572761][ T40] audit: type=1326 audit(1745667454.176:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.3.614" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 135.578178][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 135.593804][ T8243] syz.0.615: attempt to access beyond end of device [ 135.593804][ T8243] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 135.597845][ T8243] qnx6: unable to read the first superblock [ 135.599822][ T8243] syz.0.615: attempt to access beyond end of device [ 135.599822][ T8243] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 135.604533][ T8243] qnx6: unable to read the first superblock [ 135.606432][ T8243] qnx6: unable to read the first superblock [ 135.685538][ T8254] trusted_key: syz.0.619 sent an empty control message without MSG_MORE. [ 135.708872][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.620'. [ 135.952638][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.055658][ T8277] netlink: 'syz.1.625': attribute type 1 has an invalid length. [ 136.072181][ T8277] bond1: entered promiscuous mode [ 136.076058][ T8277] bond1: entered allmulticast mode [ 136.094986][ T8277] bond2: entered allmulticast mode [ 136.097509][ T8277] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.101362][ T8277] bond1: (slave bond2): Enslaving as an active interface with a down link [ 136.118363][ T8277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.625'. [ 136.121669][ T8277] bond1: left promiscuous mode [ 136.125631][ T8277] bond1: left allmulticast mode [ 136.127466][ T8277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.978887][ T8290] overlayfs: upper fs does not support file handles, falling back to index=off. [ 137.052282][ T8292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.630'. [ 137.087426][ T8292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.630'. [ 137.942912][ T5942] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 137.947342][ T5942] Bluetooth: hci0: Injecting HCI hardware error event [ 137.950859][ T5942] Bluetooth: hci0: hardware error 0x00 [ 137.955218][ T8316] netlink: 'syz.4.635': attribute type 1 has an invalid length. [ 137.966655][ T8316] bond1: entered promiscuous mode [ 137.968355][ T8316] bond1: entered allmulticast mode [ 137.988374][ T8316] bond2: entered allmulticast mode [ 137.991371][ T8316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.995187][ T8316] bond1: (slave bond2): Enslaving as an active interface with a down link [ 138.012956][ T8316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.635'. [ 138.018040][ T8316] bond1: left promiscuous mode [ 138.019727][ T8316] bond1: left allmulticast mode [ 138.021507][ T8316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.230026][ T8333] ALSA: mixer_oss: invalid OSS volume 'PHONEIÎ' [ 138.232186][ T8333] ALSA: mixer_oss: invalid OSS volume '¢¢ð½ñL²Îýþ‰XTp0þ¥œý¦' [ 138.263927][ T8337] syzkaller0: entered allmulticast mode [ 138.267645][ T8337] syzkaller0: entered promiscuous mode [ 138.269349][ T8337] syzkaller0: left allmulticast mode [ 138.272406][ T8337] syzkaller0: entered allmulticast mode [ 138.780775][ T8342] netlink: zone id is out of range [ 138.782567][ T8342] netlink: zone id is out of range [ 138.784218][ T8342] netlink: zone id is out of range [ 138.785879][ T8342] netlink: zone id is out of range [ 138.787525][ T8342] netlink: zone id is out of range [ 138.789181][ T8342] netlink: zone id is out of range [ 138.790853][ T8342] netlink: zone id is out of range [ 138.792742][ T8342] netlink: zone id is out of range [ 138.794458][ T8342] netlink: zone id is out of range [ 138.796108][ T8342] netlink: zone id is out of range [ 138.946751][ T8350] netlink: 'syz.0.649': attribute type 1 has an invalid length. [ 138.988206][ T8350] bond1: entered promiscuous mode [ 138.990635][ T8350] bond1: entered allmulticast mode [ 139.040228][ T8355] bond2: entered allmulticast mode [ 139.043928][ T8355] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.047192][ T8355] bond1: (slave bond2): Enslaving as an active interface with a down link [ 139.079157][ T8350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.649'. [ 139.084227][ T8350] bond1: left promiscuous mode [ 139.085788][ T8350] bond1: left allmulticast mode [ 139.087522][ T8350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.291850][ T8366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.652'. [ 139.939290][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'. [ 139.945249][ T8375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.656'. [ 139.969114][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'. [ 140.032701][ T5942] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 140.373966][ T8381] netlink: 'syz.4.657': attribute type 1 has an invalid length. [ 140.376636][ T8381] netlink: 224 bytes leftover after parsing attributes in process `syz.4.657'. [ 141.065011][ T8393] netlink: 'syz.1.661': attribute type 1 has an invalid length. [ 141.076100][ T8393] bond3: entered promiscuous mode [ 141.077684][ T8393] bond3: entered allmulticast mode [ 141.111563][ T8393] bond4: entered allmulticast mode [ 141.121467][ T8393] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.124665][ T8393] bond3: (slave bond4): Enslaving as an active interface with a down link [ 141.143451][ T8393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.661'. [ 141.148935][ T8393] bond3: left promiscuous mode [ 141.150513][ T8393] bond3: left allmulticast mode [ 141.152673][ T8393] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.358577][ T8398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.662'. [ 141.361326][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.662'. [ 142.636343][ T8430] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 142.649017][ T8430] 8021q: adding VLAN 0 to HW filter on device bond5 [ 142.695290][ T8430] 8021q: adding VLAN 0 to HW filter on device bond5 [ 142.697581][ T8430] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 142.701433][ T8430] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 142.728076][ T8433] ip6erspan0: entered promiscuous mode [ 142.735816][ T8433] bond5: (slave ip6erspan0): making interface the new active one [ 142.739770][ T8433] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 144.415277][ T8459] netlink: 'syz.4.680': attribute type 1 has an invalid length. [ 144.461909][ T8459] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.486757][ T8459] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.489133][ T8459] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 144.493478][ T8459] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 144.540774][ T8463] ip6erspan0: entered promiscuous mode [ 144.545615][ T8463] bond3: (slave ip6erspan0): making interface the new active one [ 144.548438][ T8463] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 144.691585][ T8466] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 144.733760][ T8466] kvm: MWAIT instruction emulated as NOP! [ 145.953985][ T8496] tipc: Started in network mode [ 145.955924][ T8496] tipc: Node identity 8000008, cluster identity 4711 [ 145.958547][ T8496] tipc: Node number set to 134217736 [ 146.146182][ T8502] netlink: 'syz.3.692': attribute type 1 has an invalid length. [ 146.173622][ T8504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.691'. [ 146.174499][ T8502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.196716][ T8504] netlink: 'syz.1.691': attribute type 39 has an invalid length. [ 146.244660][ T8502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.246892][ T8502] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 146.250802][ T8502] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 146.268515][ T8509] ip6erspan0: entered promiscuous mode [ 146.271732][ T8509] bond1: (slave ip6erspan0): making interface the new active one [ 146.275296][ T8509] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 147.159212][ T8520] netlink: 'syz.3.703': attribute type 1 has an invalid length. [ 147.182041][ T8520] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.210600][ T8520] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.222779][ T8520] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 147.228259][ T8520] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 149.184788][ T8558] netlink: 'syz.1.708': attribute type 1 has an invalid length. [ 149.199573][ T8558] 8021q: adding VLAN 0 to HW filter on device bond6 [ 149.231126][ T8558] 8021q: adding VLAN 0 to HW filter on device bond6 [ 149.354175][ T8558] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 149.358057][ T8558] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 151.060799][ T8616] netlink: 'syz.0.719': attribute type 1 has an invalid length. [ 151.073836][ T8616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.094687][ T8616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.096954][ T8616] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 151.100945][ T8616] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 151.143613][ T8619] ip6erspan0: entered promiscuous mode [ 151.151178][ T8619] bond3: (slave ip6erspan0): making interface the new active one [ 151.154916][ T8619] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 152.437835][ T8643] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 153.112146][ T8656] netlink: 'syz.3.730': attribute type 1 has an invalid length. [ 153.127694][ T8656] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.149564][ T8656] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.152025][ T8656] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 153.157474][ T8656] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 153.341103][ T8662] bond1: (slave bond2): Releasing active interface [ 153.345421][ T8662] bond3: (slave ip6erspan0): Releasing active interface [ 153.357385][ T8662] vlan2: entered allmulticast mode [ 153.359219][ T8662] bond0: entered allmulticast mode [ 153.361416][ T8662] bridge0: port 1(vlan2) entered blocking state [ 153.364749][ T8662] bridge0: port 1(vlan2) entered disabled state [ 153.368045][ T8662] vlan2: entered promiscuous mode [ 154.602900][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 154.602911][ T40] audit: type=1326 audit(1745667474.284:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8705 comm="syz.1.745" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x0 [ 155.706350][ T8722] nftables ruleset with unbound chain [ 156.012649][ T5998] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 156.166745][ T5998] usb 8-1: config 0 has an invalid interface number: 29 but max is 0 [ 156.169796][ T5998] usb 8-1: config 0 has no interface number 0 [ 156.171947][ T5998] usb 8-1: config 0 interface 29 has no altsetting 0 [ 156.185357][ T5998] usb 8-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 156.188472][ T5998] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.191207][ T5998] usb 8-1: Product: syz [ 156.193154][ T5998] usb 8-1: Manufacturer: syz [ 156.194762][ T5998] usb 8-1: SerialNumber: syz [ 156.211514][ T5998] usb 8-1: config 0 descriptor?? [ 156.478005][ T8724] vlan4: entered promiscuous mode [ 156.503259][ T8724] vlan4: entered allmulticast mode [ 156.627408][ T5998] peak_usb 8-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 156.630598][ T5998] peak_usb 8-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 156.713238][ T5998] peak_usb 8-1:0.29: probe with driver peak_usb failed with error -71 [ 156.719332][ T5998] usb 8-1: USB disconnect, device number 5 [ 157.275208][ T8755] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.760'. [ 158.538310][ T8774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.540633][ T8774] IPv6: NLM_F_CREATE should be set when creating new route [ 158.549732][ T8774] lo: left promiscuous mode [ 158.551751][ T8774] lo: entered allmulticast mode [ 158.562728][ T8774] tunl0: left promiscuous mode [ 158.564934][ T8774] tunl0: entered allmulticast mode [ 158.606921][ T8774] gre0: left promiscuous mode [ 158.617238][ T8774] gre0: entered allmulticast mode [ 158.647622][ T8774] gretap0: left promiscuous mode [ 158.653460][ T8774] gretap0: entered allmulticast mode [ 158.669019][ T8774] erspan0: left promiscuous mode [ 158.684651][ T8774] erspan0: entered allmulticast mode [ 158.695805][ T8774] ip_vti0: left promiscuous mode [ 158.751673][ T8774] ip_vti0: entered allmulticast mode [ 158.787151][ T8774] ip6_vti0: left promiscuous mode [ 158.792366][ T8774] ip6_vti0: entered allmulticast mode [ 158.808223][ T8774] sit0: left promiscuous mode [ 158.813597][ T8774] sit0: entered allmulticast mode [ 158.834396][ T8774] ip6tnl0: left promiscuous mode [ 158.836104][ T8774] ip6tnl0: entered allmulticast mode [ 158.854734][ T8774] ip6gre0: left promiscuous mode [ 158.856581][ T8774] ip6gre0: entered allmulticast mode [ 158.867890][ T8774] syz_tun: left promiscuous mode [ 158.869722][ T8774] syz_tun: entered allmulticast mode [ 158.876758][ T8774] ip6gretap0: left promiscuous mode [ 158.878410][ T8774] ip6gretap0: entered allmulticast mode [ 158.892376][ T8774] bridge0: left promiscuous mode [ 158.894948][ T8774] bridge0: entered allmulticast mode [ 158.904204][ T8774] vcan0: left promiscuous mode [ 158.911271][ T8774] vcan0: entered allmulticast mode [ 158.925495][ T8774] team0: left promiscuous mode [ 158.931745][ T8774] team0: entered allmulticast mode [ 158.936633][ T8774] dummy0: left promiscuous mode [ 158.938385][ T8774] dummy0: entered allmulticast mode [ 158.943025][ T8774] nlmon0: left promiscuous mode [ 158.947648][ T8774] nlmon0: entered allmulticast mode [ 158.955185][ T8774] caif0: left promiscuous mode [ 158.959651][ T8774] caif0: entered allmulticast mode [ 158.966963][ T8774] batadv0: entered allmulticast mode [ 158.971250][ T8774] vxcan0: entered allmulticast mode [ 158.977255][ T8774] vxcan1: entered allmulticast mode [ 158.982809][ T8774] veth0: entered allmulticast mode [ 158.987058][ T8774] veth1: entered allmulticast mode [ 158.991288][ T8774] wg0: entered allmulticast mode [ 158.995379][ T8774] wg2: entered allmulticast mode [ 158.999312][ T8774] veth0_to_bridge: entered allmulticast mode [ 159.005074][ T8774] bridge_slave_0: entered allmulticast mode [ 159.009401][ T8774] veth1_to_bridge: entered allmulticast mode [ 159.013913][ T8774] bridge_slave_1: entered allmulticast mode [ 159.018284][ T8774] veth0_to_bond: entered allmulticast mode [ 159.023133][ T8774] bond_slave_0: entered allmulticast mode [ 159.029382][ T8774] veth1_to_bond: entered allmulticast mode [ 159.035417][ T8774] bond_slave_1: entered allmulticast mode [ 159.039688][ T8774] veth0_to_team: entered allmulticast mode [ 159.042797][ T8774] team_slave_0: entered allmulticast mode [ 159.064793][ T8774] veth1_to_team: entered allmulticast mode [ 159.105564][ T8774] team_slave_1: entered allmulticast mode [ 159.108698][ T8774] veth0_to_batadv: entered allmulticast mode [ 159.123983][ T8774] batadv_slave_0: entered allmulticast mode [ 159.137699][ T8774] veth1_to_batadv: entered allmulticast mode [ 159.143123][ T8774] batadv_slave_1: entered allmulticast mode [ 159.145496][ T8774] xfrm0: entered allmulticast mode [ 159.147427][ T8774] veth0_to_hsr: entered allmulticast mode [ 159.149371][ T8774] hsr_slave_0: entered allmulticast mode [ 159.151727][ T8774] veth1_to_hsr: entered allmulticast mode [ 159.154436][ T8774] hsr_slave_1: entered allmulticast mode [ 159.157520][ T8774] hsr0: entered allmulticast mode [ 159.159989][ T8774] veth1_virt_wifi: entered allmulticast mode [ 159.164046][ T8774] veth0_virt_wifi: entered allmulticast mode [ 159.166989][ T8774] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 159.170261][ T8774] veth1_vlan: entered allmulticast mode [ 159.173679][ T8774] veth0_vlan: entered allmulticast mode [ 159.176467][ T8774] vlan0: entered allmulticast mode [ 159.179026][ T8774] vlan1: entered allmulticast mode [ 159.181469][ T8774] macvlan0: entered allmulticast mode [ 159.184111][ T8774] macvlan1: entered allmulticast mode [ 159.186099][ T8774] ipvlan0: entered allmulticast mode [ 159.188227][ T8774] ipvlan1: entered allmulticast mode [ 159.190189][ T8774] veth1_macvtap: entered allmulticast mode [ 159.193144][ T8774] veth0_macvtap: entered allmulticast mode [ 159.195459][ T8774] macvtap0: entered allmulticast mode [ 159.197401][ T8774] macsec0: entered allmulticast mode [ 159.199350][ T8774] geneve0: entered allmulticast mode [ 159.201573][ T8774] geneve1: entered allmulticast mode [ 159.204231][ T8774] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 159.206745][ T8774] netdevsim netdevsim0 eth0: entered allmulticast mode [ 159.210246][ T8774] netdevsim netdevsim0 eth1: entered allmulticast mode [ 159.213184][ T8774] netdevsim netdevsim0 eth2: entered allmulticast mode [ 159.215676][ T8774] netdevsim netdevsim0 eth3: entered allmulticast mode [ 159.219752][ T8774] bridge1: entered allmulticast mode [ 159.229362][ T8774] veth2: entered allmulticast mode [ 159.231512][ T8774] veth3: entered allmulticast mode [ 159.243069][ T8774] gretap1: entered allmulticast mode [ 159.247157][ T8774] wireguard0: left promiscuous mode [ 159.248994][ T8774] wireguard0: entered allmulticast mode [ 159.251793][ T8774] veth4: entered allmulticast mode [ 159.254170][ T8774] veth5: entered allmulticast mode [ 159.256051][ T8774] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 159.258549][ T8774] veth6: entered allmulticast mode [ 159.260605][ T8774] veth7: entered allmulticast mode [ 159.263873][ T8774] bond1: entered allmulticast mode [ 159.266476][ T8774] bond3: entered allmulticast mode [ 159.268527][ T8774] ip6erspan0: left promiscuous mode [ 159.270370][ T8774] ip6erspan0: entered allmulticast mode [ 159.331064][ T8784] netlink: 'syz.0.768': attribute type 39 has an invalid length. [ 161.052872][ T5998] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 161.204577][ T5998] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.207828][ T5998] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 161.209472][ T8782] syz.4.767 (8782) used greatest stack depth: 20888 bytes left [ 161.211141][ T5998] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.219608][ T5998] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 161.222423][ T5998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 161.225283][ T5998] usb 6-1: SerialNumber: syz [ 161.237631][ T5998] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 161.241041][ T5998] usb-storage 6-1:1.0: USB Mass Storage device detected [ 161.253536][ T5998] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 161.289592][ T8832] netlink: 'syz.4.783': attribute type 13 has an invalid length. [ 161.396516][ T8832] bridge0: port 3(batadv0) entered disabled state [ 161.398798][ T8832] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.401108][ T8832] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.415154][ T8832] batman_adv: batadv0: Interface deactivated: dummy0 [ 161.450171][ T5998] usb 6-1: USB disconnect, device number 9 [ 161.481463][ T8832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.492062][ T8832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.569609][ T8832] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.572988][ T8832] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.575984][ T8832] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.578918][ T8832] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.932757][ T8895] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN NOPTI [ 164.936531][ T8895] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 164.941024][ T8895] CPU: 1 UID: 0 PID: 8895 Comm: syz.1.799 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 164.944950][ T8895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.948499][ T8895] RIP: 0010:find_match+0x136/0x15d0 [ 164.950175][ T8895] Code: 48 c1 ea 03 80 3c 02 00 0f 85 ac 11 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 7d 00 49 8d bf c0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 93 11 00 00 4d 8b bf c0 00 00 00 e8 04 0d 50 01 [ 164.956284][ T8895] RSP: 0018:ffffc90003576d40 EFLAGS: 00010206 [ 164.958189][ T8895] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: ffffc9000c402000 [ 164.960636][ T8895] RDX: 0000000000000018 RSI: ffffffff8a18a90f RDI: 00000000000000c0 [ 164.963100][ T8895] RBP: ffffc90003576e48 R08: 0000000000000001 R09: 0000000000000000 [ 164.965775][ T8895] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888052ecdb37 [ 164.968724][ T8895] R13: ffff888052ecdb20 R14: 1ffff920006aedb7 R15: 0000000000000000 [ 164.971196][ T8895] FS: 0000000000000000(0000) GS:ffff8880978ef000(0063) knlGS:00000000f5026b40 [ 164.974407][ T8895] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 164.976463][ T8895] CR2: 00000000800001c0 CR3: 00000000121a0000 CR4: 0000000000352ef0 [ 164.979033][ T8895] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 164.981456][ T8895] DR3: 00000000000032e7 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 164.984048][ T8895] Call Trace: [ 164.985163][ T8895] [ 164.986121][ T8895] ? __pfx_find_match+0x10/0x10 [ 164.987651][ T8895] rt6_nh_find_match+0xfa/0x1a0 [ 164.989175][ T8895] nexthop_for_each_fib6_nh+0x165/0x4a0 [ 164.990918][ T8895] ? __pfx_rt6_nh_find_match+0x10/0x10 [ 164.992760][ T8895] __find_rr_leaf+0x6e5/0xe00 [ 164.994303][ T8895] ? __pfx___find_rr_leaf+0x10/0x10 [ 164.995926][ T8895] ? fib6_node_lookup+0x12d/0x190 [ 164.997731][ T8895] ? __pfx_fib6_node_lookup+0x10/0x10 [ 164.999599][ T8895] fib6_table_lookup+0x57c/0xa30 [ 165.001175][ T8895] ? __pfx_fib6_table_lookup+0x10/0x10 [ 165.003079][ T8895] ip6_pol_route+0x1cc/0x1230 [ 165.004728][ T8895] ? __pfx_ip6_pol_route+0x10/0x10 [ 165.006338][ T8895] ? __lock_acquire+0x5ca/0x1ba0 [ 165.007891][ T8895] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 165.009625][ T8895] fib6_rule_lookup+0x386/0x720 [ 165.011119][ T8895] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 165.012738][ T8895] ? __lock_acquire+0x5ca/0x1ba0 [ 165.014278][ T8895] ip6_route_output_flags+0x1d0/0x640 [ 165.015926][ T8895] ip6_dst_lookup_tail.constprop.0+0xa52/0x2140 [ 165.017830][ T8895] ? is_bpf_text_address+0x94/0x1a0 [ 165.019429][ T8895] ? chacha_permute+0x5ae/0x6d0 [ 165.020992][ T8895] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 165.023090][ T8895] ? __lock_acquire+0x5ca/0x1ba0 [ 165.024691][ T8895] ip6_dst_lookup_flow+0x99/0x1d0 [ 165.026278][ T8895] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 165.028089][ T8895] ? find_held_lock+0x2b/0x80 [ 165.029656][ T8895] ? sctp_v6_get_dst+0x65e/0x2050 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 165.031334][ T8895] sctp_v6_get_dst+0x6a2/0x2050 [ 165.032842][ T8895] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 165.034513][ T8895] ? __pfx_sctp_generate_proto_unreach_event+0x10/0x10 [ 165.036549][ T8895] ? lockdep_init_map_type+0x5c/0x280 [ 165.038229][ T8895] ? sctp_transport_route+0x12f/0x350 [ 165.039886][ T8895] sctp_transport_route+0x12f/0x350 [ 165.041469][ T8895] sctp_assoc_add_peer+0x741/0x1550 [ 165.043308][ T8895] sctp_connect_new_asoc+0x208/0x790 [ 165.044979][ T8895] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 165.046814][ T8895] ? __ipv6_addr_type+0x225/0x300 [ 165.048394][ T8895] ? __ipv6_addr_type+0x225/0x300 [ 165.049984][ T8895] __sctp_connect+0x3f3/0xc60 [ 165.051469][ T8895] ? __pfx___sctp_connect+0x10/0x10 [ 165.053085][ T8895] ? __might_fault+0x13b/0x190 [ 165.054613][ T8895] __sctp_setsockopt_connectx+0xfc/0x170 [ 165.056438][ T8895] sctp_getsockopt+0x29d6/0x6b10 [ 165.057999][ T8895] ? schedule+0xf1/0x3a0 [ 165.059335][ T8895] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 165.060985][ T8895] ? futex_wait_queue+0x14c/0x220 [ 165.062582][ T8895] ? __pfx_sctp_getsockopt+0x10/0x10 [ 165.064331][ T8895] ? __pfx___futex_wait+0x10/0x10 [ 165.065989][ T8895] ? __pfx___might_resched+0x10/0x10 [ 165.067624][ T8895] ? aa_sk_perm+0x2f4/0xb10 [ 165.069067][ T8895] ? __pfx_aa_sk_perm+0x10/0x10 [ 165.070696][ T8895] ? percpu_counter_add_batch+0xb8/0x1f0 [ 165.072554][ T8895] ? errseq_sample+0x53/0x70 [ 165.074117][ T8895] ? sock_common_getsockopt+0x21/0xb0 [ 165.075881][ T8895] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 165.077786][ T8895] do_sock_getsockopt+0x3fc/0x800 [ 165.079460][ T8895] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 165.081168][ T8895] ? __fget_files+0x204/0x3c0 [ 165.082662][ T8895] __sys_getsockopt+0x123/0x1a0 [ 165.084110][ T8895] __ia32_sys_getsockopt+0xbc/0x160 [ 165.085919][ T8895] ? lockdep_hardirqs_on+0x7c/0x110 [ 165.087605][ T8895] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 165.089659][ T8895] __do_fast_syscall_32+0x73/0x120 [ 165.091332][ T8895] do_fast_syscall_32+0x32/0x80 [ 165.092806][ T8895] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.094817][ T8895] RIP: 0023:0xf7f04579 [ 165.096066][ T8895] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 165.101926][ T8895] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 165.104538][ T8895] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 165.107026][ T8895] RDX: 000000000000006f RSI: 0000000080001100 RDI: 0000000080000140 [ 165.109570][ T8895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.112041][ T8895] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 165.114529][ T8895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.116971][ T8895] [ 165.117964][ T8895] Modules linked in: [ 165.119386][ T8895] ---[ end trace 0000000000000000 ]--- [ 165.121801][ T8895] RIP: 0010:find_match+0x136/0x15d0 [ 165.123956][ T8895] Code: 48 c1 ea 03 80 3c 02 00 0f 85 ac 11 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 7d 00 49 8d bf c0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 93 11 00 00 4d 8b bf c0 00 00 00 e8 04 0d 50 01 [ 165.146813][ T8895] RSP: 0018:ffffc90003576d40 EFLAGS: 00010206 [ 165.149976][ T8895] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: ffffc9000c402000 [ 165.175039][ T8895] RDX: 0000000000000018 RSI: ffffffff8a18a90f RDI: 00000000000000c0 [ 165.178421][ T8895] RBP: ffffc90003576e48 R08: 0000000000000001 R09: 0000000000000000 [ 165.181635][ T8895] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888052ecdb37 [ 165.185608][ T8895] R13: ffff888052ecdb20 R14: 1ffff920006aedb7 R15: 0000000000000000 [ 165.188971][ T8895] FS: 0000000000000000(0000) GS:ffff888097aef000(0063) knlGS:00000000f5026b40 [ 165.192889][ T8895] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 165.195777][ T8895] CR2: 00007fc2d59434a0 CR3: 00000000121a0000 CR4: 0000000000352ef0 [ 165.199106][ T8895] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.202367][ T8895] DR3: 00000000000032e7 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 165.206156][ T8895] Kernel panic - not syncing: Fatal exception [ 165.209272][ T8895] Kernel Offset: disabled [ 165.210986][ T8895] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:38:02 Registers: info registers vcpu 0 CPU#0 RAX=000000000041475c RBX=0000000000000000 RCX=ffffffff8b68c3e9 RDX=ffffed10056465be RSI=ffffffff8bf46720 RDI=ffffffff819130b1 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90850e10 R15=0000000000000000 RIP=ffffffff8b68ac7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080089018 CR3=000000001270a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bf3f5 RDI=ffffffff9addcb80 RBP=ffffffff9addcb40 RSP=ffffc90003576740 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9addcb40 R15=ffffffff854bf390 RIP=ffffffff854bf41f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978ef000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800001c0 CR3=00000000121a0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b43b100 RCX=ffffffff81aec23e RDX=ffff88801daa4880 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffc9000044fd10 RSP=ffffc9000044fc38 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c7944e R12=1ffff92000089f8c R13=0000000000000003 R14=0000000000000001 R15=ffffed1005687621 RIP=ffffffff81baa502 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000561fe7d42000 CR3=000000004e30a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffc9000369e8d0 RDX=0000000000000000 RSI=ffffffff81a68e7e RDI=ffff8880245b2884 RBP=ffff8880245b2440 RSP=ffffc9000369e7b8 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc9000369e838 R11=00000000000060b9 R12=ffffffff81a68af0 R13=ffffc9000369e838 R14=0000000000000000 R15=ffff8880245b2440 RIP=ffffffff81a05d56 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097aef000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff80f295bc4 CR3=000000000b74e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000