last executing test programs: 1m23.434595113s ago: executing program 2 (id=4477): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x3, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000f3d, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)='/', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10040, 0x0) 1m18.634719195s ago: executing program 2 (id=4477): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x3, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000f3d, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)='/', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10040, 0x0) 1m12.165763837s ago: executing program 2 (id=4477): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x3, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000f3d, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)='/', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10040, 0x0) 1m3.745551731s ago: executing program 2 (id=4477): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x3, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000f3d, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)='/', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10040, 0x0) 54.675023932s ago: executing program 2 (id=4477): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x3, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000f3d, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)='/', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10040, 0x0) 46.124335522s ago: executing program 2 (id=4477): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x3, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000f3d, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)='/', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10040, 0x0) 5.439864367s ago: executing program 3 (id=4918): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r2, 0x0, r3, 0x0, 0x10000000000016, 0x0) 4.632987414s ago: executing program 3 (id=4924): r0 = socket$inet6(0xa, 0x6, 0x0) get_mempolicy(0x0, 0x0, 0x400010, &(0x7f0000394000/0x3000)=nil, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) setsockopt(r3, 0x800000000010d, 0x8000000011, &(0x7f0000000740)="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", 0xfe) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0xd3f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x220}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmmsg(r3, &(0x7f0000002980), 0x400000000000239, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000ac0)=ANY=[@ANYBLOB='\b\x00\x00\x00']) socket$isdn_base(0x22, 0x3, 0x0) ptrace(0x10, r5) ptrace$peek(0x2, r5, 0x0) 3.69974828s ago: executing program 3 (id=4931): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {0x0, 0x1, 0xfffffffc}, {0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x2}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nmem0(0xffffff9c, &(0x7f0000000000), 0xa083, 0x0) socket$inet6(0xa, 0x3, 0x8047) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfd9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x100, 0xe000000, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x28000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000140)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r8, 0x400c4150, &(0x7f0000000080)={0x0, &(0x7f0000000000)="b8", 0x1}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0684113, &(0x7f0000000200)={0x1, 0xa, 0xfffffffe, 0x1003, 0x8000, 0x1, 0x80, 0xb, 0x8, 0x2, 0x800001, 0x1}) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000001600)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4bfb352467a7c010f4cedb8a782c66e8b2eba4985d69819ed6fcf2c535cc4dba73658cb7248f5e144ff527a9017896edbd8188c5f8f0abdd1207d3cad42e69e5653405c9da9a4166d2d40906a28030e4ee8e59ef9e1785cdb59a8c64ab91b639731de01b7fad761c40867b3ac9211ad72519844ab75a73f8fd069f96ce685bfd526e1f5716de3ce9283ffb0167d41f32db1add9b86936063b4c6a2d71e7cfc6bcf089ae3b80711999d2b4d283edc61ec168be64bc1cb8d476568140a83c934ee8d8656ce1d2918080db8013c7672ade73c325cf8a6c60196e03d41399c49e4b401ef2888089e0884", @ANYBLOB="6baa1e0a02fefa644099bf4c7e883434c94c4847454d0ca0acef435e5532d5b2b8ed0dc40690be36360b2621bafbd60201ed8db737b10ffb50e228c10a2152926d5ceb8ab7ba68c953a2b2249b9ec826fa7b8d75b0b7a6494fc002e762d4155fbc98c5628229c0a611850b2d8079a645385c5bb61150308b827badca07bc102012452983cb5859f01511d75ea9ad323fde58246b85bfc7f8f881bfbfc23d3a10938c904b80e965fd57ad1df5838962f5141371414ff15d17ed2922a76df4cc4ab5806e04952bd2528f7b6eab714e"], 0x24}, 0x1, 0x0, 0x0, 0x83}, 0x20040040) 2.799995154s ago: executing program 3 (id=4934): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) connect$unix(r5, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', &(0x7f00000003c0)='\x00', 0x0) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x6c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x79}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000054) 2.160044542s ago: executing program 1 (id=4935): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='fscache_volume\x00', r1, 0x0, 0x7}, 0x18) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000240)={0x4eac, r1}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') 2.159679919s ago: executing program 1 (id=4936): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x0, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, "0300"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.036282725s ago: executing program 1 (id=4937): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xd01c4813, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x2, 0xfffffffd, 0x1}) 1.970007845s ago: executing program 0 (id=4938): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) write$P9_RGETLOCK(r3, 0x0, 0x0) statx(r3, &(0x7f0000000540)='./bus\x00', 0x2000, 0x8, 0x0) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000f80)={&(0x7f0000000240)={0x50, 0x0, 0x3, {0x7, 0x29, 0x4, 0x45000020, 0x2, 0xc, 0x7fff, 0x818b, 0x0, 0x0, 0x40, 0x6}}, 0x0, &(0x7f0000000300)={0x18, 0x0, 0x80000000, {0xf}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x18, 0x0, 0xf, {0x6}}, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x9, {0x0, 0x1}}, 0x0, &(0x7f0000000b40)={0x90, 0x0, 0x49f9aed5, {0x2, 0x1, 0x0, 0x1, 0xa, 0x8, {0x5, 0x1000000, 0x65, 0x3, 0xffffffffffffffff, 0x7423, 0x81, 0x2, 0x0, 0xa000, 0x20000, r2, 0x0, 0x401}}}, 0x0, &(0x7f0000000cc0)={0x10, 0x0, 0x5}, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240), 0x0, 0x7c00, 0x0, 0x3) 1.969620324s ago: executing program 0 (id=4939): r0 = socket$inet6(0xa, 0x6, 0x0) get_mempolicy(0x0, 0x0, 0x400010, &(0x7f0000394000/0x3000)=nil, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) setsockopt(r3, 0x800000000010d, 0x8000000011, &(0x7f0000000740)="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", 0xfe) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0xd3f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x220}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmmsg(r3, &(0x7f0000002980), 0x400000000000239, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000ac0)=ANY=[@ANYBLOB='\b\x00\x00\x00']) socket$isdn_base(0x22, 0x3, 0x0) ptrace(0x10, r5) ptrace$peek(0x2, r5, 0x0) 1.899946704s ago: executing program 3 (id=4940): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fef000/0x1000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x8, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x3f6, 0x0, 0x32, 0xfffffffc}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000340)="1e8894605bcf4929ad4d4bb68458e70aa760a4c8c52508873fd3fcce6c105e4b945441825f55cfd28dd97fa8132dbac89342537b4a1d2d386a0c1e938afc249caaefba2dceb80fac024ce63ad6f25a4a41cd7fff8b6b636822415583035975cfca931aa8a02fb769cb8723ff2ba163326893d524304d5e18161fc34b0f6d355dc0df9cf6f9363680377451", 0x8b, 0x0, &(0x7f0000000400)={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00'}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b4000000190001000000000000000000ffffffff000000000000000000000000fc0100000000000000000000000000000000000a00000000000000bd868911d12a35449b4f8d7aa73f4ddd5c448d218bfaca92f590490c9d35931bbd3b312751a14f7ec23afd8eb24599a118cf172233dfc645ef12ee070ceba73e722d6390945bbdabed4ca709864d8bcf15a6cb75aefc510796c06708e5bcbf21e0b69d4e39fc50738fd5c9cb1894ba03c7d69c822f88ba0000000000", @ANYRES32=0x0, @ANYBLOB="f5be610f7a9d32deb2b4e715259007550ac1b5feee59771d515c67ee7b922af42d8af8dd49734ca21a451378ea260197b05a9cd390e782d5a69faef1365f62a89a8205ba39e77e258da38be9dc5f0adaf6674edca9fb", @ANYBLOB='\x00'/102], 0xb4}}, 0x24000090) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000640)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xffffffff, @empty, 0x2}, {0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0xc3}, 0x1}, r6, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r6, 0x0, 0x2, 0x4}}, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000100), 0x120a060, &(0x7f0000000300)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 1.060067586s ago: executing program 0 (id=4941): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3ffe, @dev}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x1, 0x11e41e7a, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x400}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000580)=[{{0x3, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x1, 0x1}, {0x1}}], 0x10) close(r5) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r1, 0x1) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/150, 0x96}], 0x1}, 0x84}], 0x1, 0x20, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) 919.631634ms ago: executing program 3 (id=4942): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {0x0, 0x1, 0xfffffffc}, {0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x2}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nmem0(0xffffff9c, &(0x7f0000000000), 0xa083, 0x0) socket$inet6(0xa, 0x3, 0x8047) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfd9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x100, 0xe000000, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x28000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000140)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r8, 0x400c4150, &(0x7f0000000080)={0x0, &(0x7f0000000000)="b8", 0x1}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0684113, &(0x7f0000000200)={0x1, 0xa, 0xfffffffe, 0x1003, 0x8000, 0x1, 0x80, 0xb, 0x8, 0x2, 0x800001, 0x1}) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000001600)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4bfb352467a7c010f4cedb8a782c66e8b2eba4985d69819ed6fcf2c535cc4dba73658cb7248f5e144ff527a9017896edbd8188c5f8f0abdd1207d3cad42e69e5653405c9da9a4166d2d40906a28030e4ee8e59ef9e1785cdb59a8c64ab91b639731de01b7fad761c40867b3ac9211ad72519844ab75a73f8fd069f96ce685bfd526e1f5716de3ce9283ffb0167d41f32db1add9b86936063b4c6a2d71e7cfc6bcf089ae3b80711999d2b4d283edc61ec168be64bc1cb8d476568140a83c934ee8d8656ce1d2918080db8013c7672ade73c325cf8a6c60196e03d41399c49e4b401ef2888089e0884", @ANYBLOB="6baa1e0a02fefa644099bf4c7e883434c94c4847454d0ca0acef435e5532d5b2b8ed0dc40690be36360b2621bafbd60201ed8db737b10ffb50e228c10a2152926d5ceb8ab7ba68c953a2b2249b9ec826fa7b8d75b0b7a6494fc002e762d4155fbc98c5628229c0a611850b2d8079a645385c5bb61150308b827badca07bc102012452983cb5859f01511d75ea9ad323fde58246b85bfc7f8f881bfbfc23d3a10938c904b80e965fd57ad1df5838962f5141371414ff15d17ed2922a76df4cc4ab5806e04952bd2528f7b6eab714e"], 0x24}, 0x1, 0x0, 0x0, 0x83}, 0x20040040) 359.093425ms ago: executing program 1 (id=4943): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r2, 0x8b1a, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x8) 358.437003ms ago: executing program 1 (id=4944): open(0x0, 0x145142, 0x0) r0 = syz_clone(0x89030800, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000280), 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000200001800400028008000300fdffffff0e0001006574683a766c616e30"], 0x68}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) 299.78999ms ago: executing program 1 (id=4945): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3ffe, @dev}, 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x80000001, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x1, 0x11e41e7a, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x400}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000580)=[{{0x3, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x1, 0x1}, {0x1}}], 0x10) close(r5) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r1, 0x1) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/150, 0x96}], 0x1}, 0x84}], 0x1, 0x20, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) 150.084432ms ago: executing program 0 (id=4946): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) ftruncate(r2, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 336.112µs ago: executing program 0 (id=4947): syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_snmp6\x00') openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) eventfd2(0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 0s ago: executing program 0 (id=4948): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x401}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x3ff}}}]}, 0x3c}}, 0x0) sendto$inet(r0, &(0x7f00000001c0)="8e77ca3389787867582dd0b9999e5e7ce579fc6b2977bf71ab517f68a8ddb58b93c91675a4b5dde502242a66491162f75f9b28f59cd9746ff7140fde3923b99bcc4c2cc72443169b2ab2f90a0f03dd842adba400500327de779dc6", 0x5b, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x0 [ 1207.671496][T22481] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1208.211732][ T73] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1208.343577][T22484] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1208.346305][T22484] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1208.946022][T22514] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1208.948761][T22514] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1209.834423][T22530] IPVS: Error connecting to the multicast addr [ 1215.393651][T22566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3473'. [ 1215.993446][T22568] sp0: Synchronizing with TNC [ 1216.020243][T22568] lo speed is unknown, defaulting to 1000 [ 1216.023001][T22568] »»»»»» speed is unknown, defaulting to 1000 [ 1216.081314][T22568] »»»»»» speed is unknown, defaulting to 1000 [ 1216.489321][ T40] audit: type=1326 audit(2000000154.928:7502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1216.499480][ T40] audit: type=1326 audit(2000000154.928:7503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1216.508071][ T40] audit: type=1326 audit(2000000154.938:7504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1216.516434][ T40] audit: type=1326 audit(2000000154.938:7505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1216.524709][ T40] audit: type=1326 audit(2000000154.938:7506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1216.532906][ T40] audit: type=1326 audit(2000000154.938:7507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1216.541376][ T40] audit: type=1326 audit(2000000154.938:7508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1216.549812][ T40] audit: type=1326 audit(2000000154.938:7509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1216.557996][ T40] audit: type=1326 audit(2000000154.938:7510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1216.566449][ T40] audit: type=1326 audit(2000000154.938:7511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.3.3474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1217.052149][T22589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3475'. [ 1217.064784][T22589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3475'. [ 1218.819198][T22613] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1218.822915][T22613] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1220.520260][T22632] sp0: Synchronizing with TNC [ 1220.576194][T22632] lo speed is unknown, defaulting to 1000 [ 1220.580178][T22632] »»»»»» speed is unknown, defaulting to 1000 [ 1220.772107][T22632] »»»»»» speed is unknown, defaulting to 1000 [ 1221.430623][T22641] sp0: Synchronizing with TNC [ 1221.591304][T22646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3489'. [ 1222.152899][T22639] [U] è [ 1222.781240][T22670] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1222.783942][T22670] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1223.471910][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 1223.471922][ T40] audit: type=1326 audit(2000000162.039:7531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22673 comm="syz.0.3494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1223.481948][ T40] audit: type=1326 audit(2000000162.039:7532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22673 comm="syz.0.3494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1223.488216][ T40] audit: type=1326 audit(2000000162.039:7533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22673 comm="syz.0.3494" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1223.494282][ T40] audit: type=1326 audit(2000000162.039:7534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22673 comm="syz.0.3494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1223.500226][ T40] audit: type=1326 audit(2000000162.039:7535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22673 comm="syz.0.3494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1223.506190][ T40] audit: type=1326 audit(2000000162.039:7536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22673 comm="syz.0.3494" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1223.512184][ T40] audit: type=1326 audit(2000000162.039:7537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22673 comm="syz.0.3494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1223.518102][ T40] audit: type=1326 audit(2000000162.039:7538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22673 comm="syz.0.3494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1223.524034][ T40] audit: type=1326 audit(2000000162.039:7539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22673 comm="syz.0.3494" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1223.529957][ T40] audit: type=1326 audit(2000000162.039:7540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22673 comm="syz.0.3494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1224.684118][T22690] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1224.687902][T22690] overlayfs: overlapping lowerdir path [ 1224.841148][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 1225.667333][T22704] lo speed is unknown, defaulting to 1000 [ 1225.671428][T22704] »»»»»» speed is unknown, defaulting to 1000 [ 1225.834526][T22704] »»»»»» speed is unknown, defaulting to 1000 [ 1226.012515][T22708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3500'. [ 1228.792539][T22729] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1228.795172][T22729] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1229.252146][T22738] ubi31: attaching mtd0 [ 1229.255420][T22738] ubi31: scanning is finished [ 1229.256945][T22738] ubi31: empty MTD device detected [ 1229.568852][T22738] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1229.572465][T22738] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1229.575534][T22738] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1229.578330][T22738] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1229.581146][T22738] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1229.583765][T22738] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1229.586919][T22738] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3575634140 [ 1229.591008][T22738] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1229.596750][T22741] ubi31: background thread "ubi_bgt31d" started, PID 22741 [ 1231.072521][T22774] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1231.075908][T22774] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1231.522439][T22784] overlayfs: failed to clone upperpath [ 1231.819341][T22792] wireguard0: entered promiscuous mode [ 1231.831042][T22792] wireguard0: entered allmulticast mode [ 1232.514643][T22803] xt_CT: No such helper "pptp" [ 1232.914710][T22809] netlink: 'syz.0.3521': attribute type 7 has an invalid length. [ 1234.969382][T22841] overlayfs: failed to clone lowerpath [ 1235.537227][T22852] xt_CT: No such helper "pptp" [ 1235.553746][ T73] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1236.017230][T22866] xt_CT: No such helper "pptp" [ 1236.329767][T22877] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1236.333370][T22877] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1236.588840][T22883] ip6gretap0: entered promiscuous mode [ 1237.025756][T22894] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3541'. [ 1238.129538][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.349891][T22917] xt_CT: No such helper "pptp" [ 1240.593199][T22963] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1240.692613][T22964] xt_CT: No such helper "pptp" [ 1240.788344][ T73] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1243.338071][T23020] wireguard0: entered promiscuous mode [ 1243.340397][T23020] wireguard0: entered allmulticast mode [ 1250.961170][T23041] tipc: Enabling of bearer rejected, failed to enable media [ 1252.367775][T23051] /dev/sr0: Can't open blockdev [ 1252.425692][T23061] xt_CT: No such helper "pptp" [ 1255.640422][T23106] wireguard0: entered promiscuous mode [ 1255.642163][T23106] wireguard0: entered allmulticast mode [ 1255.813532][T23118] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1256.749874][T23133] xt_CT: No such helper "pptp" [ 1257.670517][T23147] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1257.673416][T23147] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1258.272732][T23155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3592'. [ 1258.622675][T23165] overlayfs: failed to clone upperpath [ 1258.989595][T23168] lo speed is unknown, defaulting to 1000 [ 1258.992132][T23168] »»»»»» speed is unknown, defaulting to 1000 [ 1259.077865][T23168] »»»»»» speed is unknown, defaulting to 1000 [ 1260.320395][T23189] xt_hashlimit: overflow, rate too high: 0 [ 1261.415332][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 1261.415349][ T40] audit: type=1326 audit(2000000199.981:7554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1261.423629][ T40] audit: type=1326 audit(2000000199.981:7555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1261.732784][ T40] audit: type=1326 audit(2000000199.991:7556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1261.738689][ T40] audit: type=1326 audit(2000000199.991:7557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1261.744632][ T40] audit: type=1326 audit(2000000199.991:7558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1261.750596][ T40] audit: type=1326 audit(2000000200.001:7559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1261.756468][ T40] audit: type=1326 audit(2000000200.001:7560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1261.762336][ T40] audit: type=1326 audit(2000000200.001:7561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1261.768741][ T40] audit: type=1326 audit(2000000200.001:7562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1261.774804][ T40] audit: type=1326 audit(2000000200.001:7563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 1262.059194][T23204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3604'. [ 1262.583057][T23217] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1262.585930][T23217] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1263.062712][T23227] random: crng reseeded on system resumption [ 1263.317192][T21344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1264.336707][T23266] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1264.340386][T23266] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1265.104169][T23268] wireguard0: entered promiscuous mode [ 1265.105902][T23268] wireguard0: entered allmulticast mode [ 1265.516388][T23270] xt_hashlimit: overflow, rate too high: 0 [ 1265.818529][T23281] overlay: Unknown parameter 'uid<00000000000000000000' [ 1272.855814][T23346] tipc: Enabling of bearer rejected, failed to enable media [ 1273.658506][T23355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3627'. [ 1274.029083][T23366] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1274.032050][T23366] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1274.925421][T23387] openvswitch: netlink: Actions may not be safe on all matching packets [ 1275.807663][T23398] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1275.812274][T23398] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1277.192804][T23416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3640'. [ 1277.641045][T23429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3641'. [ 1277.653854][T23429] wireguard0: entered promiscuous mode [ 1280.095558][T23451] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1280.098596][T23451] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1280.101908][T23451] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1280.105165][T23451] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1280.108609][T23451] geneve3: entered promiscuous mode [ 1280.111325][T23455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3649'. [ 1280.452995][T23476] tipc: Enabled bearer , priority 0 [ 1283.591200][T23511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3661'. [ 1283.776571][T23516] input: syz0 as /devices/virtual/input/input9 [ 1283.778565][T23516] input: failed to attach handler leds to device input9, error: -6 [ 1283.965611][T12968] libceph: connect (1)[c::]:6789 error -101 [ 1283.967365][T12968] libceph: mon0 (1)[c::]:6789 connect error [ 1284.186936][T23516] ceph: No mds server is up or the cluster is laggy [ 1284.226133][T12968] libceph: connect (1)[c::]:6789 error -101 [ 1284.228279][T12968] libceph: mon0 (1)[c::]:6789 connect error [ 1284.835987][T23532] xt_CT: No such helper "pptp" [ 1284.875751][T23540] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3664'. [ 1286.984969][T23572] xt_CT: No such helper "pptp" [ 1287.016584][T21344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1287.917035][T23604] xt_CT: No such helper "pptp" [ 1287.925718][T21344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1299.556675][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.886368][T23637] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1300.907439][T23637] block device autoloading is deprecated and will be removed. [ 1301.321698][T23649] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1301.366451][T23641] xt_CT: No such helper "pptp" [ 1301.598027][T23652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3688'. [ 1302.227893][T23664] xt_CT: No such helper "pptp" [ 1303.612466][T23685] xt_CT: No such helper "pptp" [ 1304.152526][T23692] overlayfs: failed to clone upperpath [ 1305.479705][T23698] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1305.524413][T23701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3700'. [ 1305.533895][T23701] wireguard0: entered promiscuous mode [ 1306.492808][T23714] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1306.495912][T23714] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1306.498590][T23714] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1306.500962][T23714] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1306.503948][T23714] geneve3: entered promiscuous mode [ 1308.232463][T23738] xt_CT: No such helper "pptp" [ 1309.784141][T23758] wireguard1: entered promiscuous mode [ 1309.788191][T23758] wireguard1: entered allmulticast mode [ 1310.674513][T23745] xt_CT: No such helper "pptp" [ 1310.754775][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3715'. [ 1311.190679][T23769] wireguard0: entered promiscuous mode [ 1312.290844][T23792] overlayfs: failed to clone upperpath [ 1312.597364][T23798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3723'. [ 1312.741890][T23800] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1312.744661][T23800] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1312.982464][T18196] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 1313.439883][T23815] netlink: 'syz.2.3727': attribute type 1 has an invalid length. [ 1313.465236][T23815] bond6: (slave gretap1): making interface the new active one [ 1313.467824][T23815] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1313.491022][T23815] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1313.605184][T23825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3730'. [ 1314.061944][T23828] overlayfs: failed to clone upperpath [ 1314.076864][T23828] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1315.179839][T23843] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1315.182519][T23843] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1315.697562][T22028] libceph: connect (1)[c::]:6789 error -101 [ 1315.699368][T22028] libceph: mon0 (1)[c::]:6789 connect error [ 1315.751213][T23849] ceph: No mds server is up or the cluster is laggy [ 1315.754745][T23852] xt_bpf: check failed: parse error [ 1315.773852][T23852] No such timeout policy "syz1" [ 1315.905099][T23854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3736'. [ 1318.287649][T23891] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1318.290300][T23891] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1319.038355][T23904] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1319.041266][T23904] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1319.452360][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 1319.452374][ T40] audit: type=1400 audit(2000000257.804:7586): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1321.914062][T23963] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1323.625410][T24009] netlink: 'syz.3.3772': attribute type 9 has an invalid length. [ 1323.795812][T24011] loop6: detected capacity change from 0 to 524287999 [ 1323.799425][ C3] blk_print_req_error: 7 callbacks suppressed [ 1323.799435][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1323.803676][ C3] buffer_io_error: 7 callbacks suppressed [ 1323.803683][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 1323.808798][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1323.812373][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 1323.815588][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1323.818154][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 1323.822466][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1323.825091][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 1323.827359][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1323.830295][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 1323.833728][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1323.836399][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 1323.840660][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1323.844025][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1323.847219][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1323.850590][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1323.852960][T24011] ldm_validate_partition_table(): Disk read failed. [ 1323.855058][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1323.857788][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 1323.860135][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1323.862948][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 1323.866730][T24011] Dev loop6: unable to read RDB block 0 [ 1323.870488][T24011] loop6: unable to read partition table [ 1323.872315][T24011] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1324.173720][T24012] loop6: detected capacity change from 524287999 to 524288000 [ 1327.344192][T24059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3791'. [ 1327.477017][T24070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3783'. [ 1327.491204][T24070] wireguard0: entered promiscuous mode [ 1328.501261][T24082] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 1328.503778][T24082] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1328.507197][T24082] vhci_hcd vhci_hcd.0: Device attached [ 1328.784523][T19045] vhci_hcd: vhci_device speed not set [ 1329.053159][T19045] usb 39-1: new full-speed USB device number 10 using vhci_hcd [ 1329.224704][T24090] overlayfs: failed to clone upperpath [ 1329.471924][T24099] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1329.798767][T24083] vhci_hcd: connection reset by peer [ 1329.800797][ T1141] vhci_hcd: stop threads [ 1329.802154][ T1141] vhci_hcd: release socket [ 1329.803632][ T1141] vhci_hcd: disconnect device [ 1329.971018][T24104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3792'. [ 1330.328049][ T40] audit: type=1326 audit(2000000268.895:7587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.2.3794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1330.351134][ T40] audit: type=1326 audit(2000000268.895:7588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.2.3794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1330.368507][ T40] audit: type=1326 audit(2000000268.895:7589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.2.3794" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1330.384253][ T40] audit: type=1326 audit(2000000268.895:7590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.2.3794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1330.660526][ T40] audit: type=1326 audit(2000000268.895:7591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.2.3794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1330.667296][ T40] audit: type=1326 audit(2000000268.895:7592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.2.3794" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1330.675365][ T40] audit: type=1326 audit(2000000268.895:7593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.2.3794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1330.683573][ T40] audit: type=1326 audit(2000000268.895:7594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.2.3794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1330.685701][T24113] overlayfs: failed to clone lowerpath [ 1330.691427][ T40] audit: type=1326 audit(2000000268.895:7595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.2.3794" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1330.699709][ T40] audit: type=1326 audit(2000000268.895:7596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24109 comm="syz.2.3794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 1330.709216][T24113] overlayfs: missing 'lowerdir' [ 1330.927083][T24121] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1330.929873][T24121] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1331.391734][T24131] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 1331.393795][T24131] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1331.398831][T24131] vhci_hcd vhci_hcd.0: Device attached [ 1331.672823][T24085] vhci_hcd: vhci_device speed not set [ 1331.732835][T24085] usb 41-1: new full-speed USB device number 12 using vhci_hcd [ 1331.988284][T24140] xt_CT: No such helper "pptp" [ 1332.645997][T24148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1332.753465][T24148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1332.829724][T24148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1333.155209][T24148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1333.163433][T24132] vhci_hcd: connection reset by peer [ 1333.165214][ T1141] vhci_hcd: stop threads [ 1333.166580][ T1141] vhci_hcd: release socket [ 1333.168031][ T1141] vhci_hcd: disconnect device [ 1333.283490][T24148] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1333.290050][T24148] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1333.301916][T24148] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1333.309629][T24148] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1333.457092][T24163] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3807'. [ 1334.192770][T19045] vhci_hcd: vhci_device speed not set [ 1335.030899][T24197] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1335.033611][T24197] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1335.067676][T24199] overlayfs: failed to resolve './file1': -2 [ 1335.606631][T24209] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3816'. [ 1335.609431][T24209] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3816'. [ 1335.620708][T24209] netlink: 'syz.3.3816': attribute type 10 has an invalid length. [ 1335.763004][T21344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1335.810538][T24211] xt_CT: No such helper "pptp" [ 1336.518346][T21344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1336.547897][T24238] xt_CT: No such helper "pptp" [ 1336.982636][T24085] vhci_hcd: vhci_device speed not set [ 1337.435953][T24253] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1337.438590][T24253] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1338.732357][T24266] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3825'. [ 1338.793250][T24249] wireguard1: entered promiscuous mode [ 1338.800463][T24249] wireguard1: entered allmulticast mode [ 1343.123262][T24298] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1343.125964][T24298] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1343.322575][T24297] xt_CT: No such helper "pptp" [ 1344.050473][T24317] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1344.053189][T24317] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1344.074736][T24318] xt_CT: No such helper "pptp" [ 1344.076636][T21344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1344.328563][T24333] IPVS: Unknown mcast interface: lo [ 1345.062141][T24347] wireguard1: entered promiscuous mode [ 1345.063819][T24347] wireguard1: entered allmulticast mode [ 1345.136024][T18196] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 1346.208704][T24366] xt_CT: No such helper "pptp" [ 1349.154019][T18196] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1349.157210][T18196] Bluetooth: hci2: Injecting HCI hardware error event [ 1349.162476][ T5955] Bluetooth: hci2: hardware error 0x00 [ 1351.231899][ T5955] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1354.667377][T24405] xt_CT: No such helper "pptp" [ 1354.740376][T24409] bio_check_eod: 3 callbacks suppressed [ 1354.740388][T24409] syz.2.3844: attempt to access beyond end of device [ 1354.740388][T24409] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1354.748841][T24409] SQUASHFS error: Failed to read block 0x0: -5 [ 1354.750827][T24409] unable to read squashfs_super_block [ 1355.957890][T24422] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1355.960667][T24422] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1356.541579][T24431] xt_CT: No such helper "pptp" [ 1357.724628][T24452] lo speed is unknown, defaulting to 1000 [ 1357.732081][T24452] »»»»»» speed is unknown, defaulting to 1000 [ 1357.977461][T24452] »»»»»» speed is unknown, defaulting to 1000 [ 1358.260326][T24461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3857'. [ 1358.547429][T24463] lo speed is unknown, defaulting to 1000 [ 1358.550416][T24463] »»»»»» speed is unknown, defaulting to 1000 [ 1358.619273][T24463] »»»»»» speed is unknown, defaulting to 1000 [ 1358.851434][T12968] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1358.894381][T24470] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3858'. [ 1358.897228][T24470] 0·: renamed from hsr0 [ 1358.905423][T24470] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1358.909276][T24470] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1358.914065][T24470] 0·: entered allmulticast mode [ 1358.915963][T24470] hsr_slave_0: entered allmulticast mode [ 1358.918129][T24470] hsr_slave_1: entered allmulticast mode [ 1358.922539][T24470] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1359.001294][T12968] usb 6-1: Using ep0 maxpacket: 32 [ 1359.004692][T12968] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.008564][T12968] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.013627][T12968] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1359.016917][T12968] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1359.020061][T12968] usb 6-1: Product: syz [ 1359.021680][T12968] usb 6-1: Manufacturer: syz [ 1359.073589][T12968] hub 6-1:4.0: USB hub found [ 1359.242892][T24474] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1359.245732][T24474] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1359.351318][T12968] hub 6-1:4.0: 2 ports detected [ 1359.798100][T24484] xt_CT: No such helper "pptp" [ 1360.993701][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.273360][ T57] usb 6-1: USB disconnect, device number 11 [ 1361.281242][T12968] hub 6-1:4.0: hub_ext_port_status failed (err = -71) [ 1362.547486][T24529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3871'. [ 1362.639825][T24526] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1362.642570][T24526] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1363.793173][T24499] Set syz1 is full, maxelem 65536 reached [ 1364.178283][T24555] xt_CT: No such helper "pptp" [ 1366.685004][T24593] lo speed is unknown, defaulting to 1000 [ 1366.712469][T24593] »»»»»» speed is unknown, defaulting to 1000 [ 1366.971081][T24593] »»»»»» speed is unknown, defaulting to 1000 [ 1367.472262][T24604] netlink: 'syz.2.3886': attribute type 1 has an invalid length. [ 1367.492589][T24604] bond7: entered promiscuous mode [ 1367.494762][T24604] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1369.109021][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 1369.109037][ T40] audit: type=1326 audit(2000000307.677:7619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.0.3893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1369.543080][ T40] audit: type=1326 audit(2000000307.677:7620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.0.3893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1369.550611][ T40] audit: type=1326 audit(2000000307.687:7621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.0.3893" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1369.558101][ T40] audit: type=1326 audit(2000000307.687:7622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.0.3893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1369.570724][ T40] audit: type=1326 audit(2000000307.687:7623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.0.3893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1369.578521][ T40] audit: type=1326 audit(2000000307.687:7624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.0.3893" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1369.590782][ T40] audit: type=1326 audit(2000000307.687:7625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.0.3893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1369.598983][ T40] audit: type=1326 audit(2000000307.687:7626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.0.3893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1369.610245][ T40] audit: type=1326 audit(2000000307.687:7627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.0.3893" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1369.616349][ T40] audit: type=1326 audit(2000000307.687:7628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.0.3893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 1369.957029][T24643] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1369.959698][T24643] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1370.182191][T24648] wireguard1: entered promiscuous mode [ 1370.186527][T24648] wireguard1: entered allmulticast mode [ 1370.671860][T24650] lo speed is unknown, defaulting to 1000 [ 1370.673878][T24650] »»»»»» speed is unknown, defaulting to 1000 [ 1370.710950][T24650] »»»»»» speed is unknown, defaulting to 1000 [ 1370.911051][T21344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1371.249365][T24658] xt_CT: No such helper "pptp" [ 1371.611174][T24682] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1371.613839][T24682] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1371.798287][T24686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3901'. [ 1372.539073][T24705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3903'. [ 1378.145768][T24738] netlink: 'syz.3.3911': attribute type 1 has an invalid length. [ 1379.118813][T24760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3915'. [ 1379.269623][T24765] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1379.272358][T24765] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1380.344460][T24793] xt_CT: No such helper "pptp" [ 1380.475712][T24796] wireguard1: entered promiscuous mode [ 1380.477465][T24796] wireguard1: entered allmulticast mode [ 1382.085931][T24816] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1382.088540][T24816] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1382.179075][T24827] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1383.861484][T24855] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1383.864212][T24855] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1385.516902][T24881] lo speed is unknown, defaulting to 1000 [ 1385.520181][T24881] »»»»»» speed is unknown, defaulting to 1000 [ 1385.696762][T24881] »»»»»» speed is unknown, defaulting to 1000 [ 1387.267958][T24909] random: crng reseeded on system resumption [ 1387.314807][T24909] lo speed is unknown, defaulting to 1000 [ 1387.318472][T24909] »»»»»» speed is unknown, defaulting to 1000 [ 1387.506332][T24909] »»»»»» speed is unknown, defaulting to 1000 [ 1388.640697][T24923] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1388.646835][T24923] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1388.962004][T24941] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1388.965244][T24941] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1389.075191][T21344] libceph: connect (1)[c::]:6789 error -101 [ 1389.076994][T21344] libceph: mon0 (1)[c::]:6789 connect error [ 1389.079921][T21344] libceph: connect (1)[c::]:6789 error -101 [ 1389.083571][T21344] libceph: mon0 (1)[c::]:6789 connect error [ 1389.200960][T24948] ceph: No mds server is up or the cluster is laggy [ 1390.347508][T24960] wireguard1: entered promiscuous mode [ 1390.889761][T24985] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1390.892429][T24985] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1391.838088][T25001] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1391.846094][T25001] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1394.876327][T25031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3973'. [ 1394.879325][T25031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3973'. [ 1395.586366][T25041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3976'. [ 1395.604691][T25043] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3975'. [ 1395.608121][T25043] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3975'. [ 1395.669231][T25044] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1395.674870][T25044] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1396.398371][T25059] ufs: You didn't specify the type of your ufs filesystem [ 1396.398371][T25059] [ 1396.398371][T25059] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1396.398371][T25059] [ 1396.398371][T25059] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1396.411041][T25059] ufs: ufstype=old is supported read-only [ 1396.415124][T25059] syz.3.3979: attempt to access beyond end of device [ 1396.415124][T25059] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1398.445989][T25093] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1398.448672][T25093] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1399.473251][T25105] lo speed is unknown, defaulting to 1000 [ 1399.475262][T25105] »»»»»» speed is unknown, defaulting to 1000 [ 1399.545214][T25105] »»»»»» speed is unknown, defaulting to 1000 [ 1399.555001][T25106] trusted_key: encrypted_key: master key parameter 'defuser:syz' is invalid [ 1400.933791][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 1400.959103][ T40] audit: type=1326 audit(2000000339.489:7680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25146 comm="syz.0.4000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7fc00000 [ 1401.285120][ T40] audit: type=1326 audit(2000000339.859:7681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25146 comm="syz.0.4000" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f72579 code=0x7fc00000 [ 1401.476220][T25172] trusted_key: encrypted_key: insufficient parameters specified [ 1401.479334][T25172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4001'. [ 1401.849008][T21344] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1402.008990][T21344] usb 6-1: Using ep0 maxpacket: 16 [ 1402.011629][T21344] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1402.013782][T21344] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1402.017248][T21344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.021841][T21344] usb 6-1: config 0 descriptor?? [ 1402.453179][T21344] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5013.0004/input/input11 [ 1402.474934][T21344] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5013.0004/input/input12 [ 1402.549228][T21344] kye 0003:0458:5013.0004: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 1402.989314][T21344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1403.054422][T25189] xt_CT: No such helper "pptp" [ 1403.137175][T25194] netlink: 'syz.1.4003': attribute type 12 has an invalid length. [ 1403.538219][T25219] wireguard1: entered promiscuous mode [ 1403.540034][T25219] wireguard1: entered allmulticast mode [ 1403.960101][T25225] wireguard1: entered promiscuous mode [ 1403.976322][T25225] wireguard1: entered allmulticast mode [ 1405.530898][ T57] usb 6-1: USB disconnect, device number 12 [ 1405.805758][T25254] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1405.809628][T25254] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1410.196016][T21344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1410.214254][T25274] xt_CT: No such helper "pptp" [ 1410.717288][T25301] netlink: 'syz.0.4022': attribute type 1 has an invalid length. [ 1410.746179][T25301] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1410.755392][T25301] bond6: (slave ip6gretap1): making interface the new active one [ 1410.758222][T25301] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1410.766140][T25301] /dev/nbd0: Can't lookup blockdev [ 1410.768173][T25301] afs: Unknown parameter 'smackfsroot' [ 1412.045400][T25319] wireguard2: entered promiscuous mode [ 1412.047031][T25319] wireguard2: entered allmulticast mode [ 1412.372615][T25329] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1412.375287][T25329] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1420.459579][T25350] IPVS: Error connecting to the multicast addr [ 1420.592942][T25356] rdma_rxe: rxe_newlink: failed to add ip6gre0 [ 1421.234690][T25368] xt_CT: No such helper "pptp" [ 1421.463082][T25372] overlayfs: failed to clone lowerpath [ 1421.478611][ T40] audit: type=1326 audit(2000000360.060:7682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25348 comm="syz.2.4030" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb0579 code=0x0 [ 1422.428980][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.479840][T25380] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1422.660425][T25391] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1422.663343][T25391] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1423.595711][T25406] wireguard1: entered promiscuous mode [ 1423.661497][T25408] netlink: 'syz.1.4042': attribute type 1 has an invalid length. [ 1423.663752][T25408] netlink: 'syz.1.4042': attribute type 1 has an invalid length. [ 1423.789199][T25406] wireguard1: entered allmulticast mode [ 1424.659347][T25426] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4043'. [ 1425.175573][T25432] xt_CT: No such helper "pptp" [ 1426.242179][T25442] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1426.715312][T25453] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1426.734255][T25453] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1428.641175][T25492] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1428.791465][T25493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4059'. [ 1428.794635][T25493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4059'. [ 1428.800387][T25493] bridge0: port 3(vlan0) entered blocking state [ 1428.802659][T25493] bridge0: port 3(vlan0) entered disabled state [ 1428.804702][T25493] vlan0: entered allmulticast mode [ 1428.807456][T25493] vlan0: left allmulticast mode [ 1430.719875][T25527] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1430.722846][T25527] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1431.405170][T25536] fuse: Unknown parameter 'f`' [ 1431.977651][T21344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1432.016529][T25547] xt_CT: No such helper "pptp" [ 1433.511292][ T40] audit: type=1800 audit(2000000372.090:7683): pid=25583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4075" name="bus" dev="9p" ino=37879859 res=0 errno=0 [ 1433.963789][T25590] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1433.966445][T25590] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1434.554002][ T40] audit: type=1326 audit(2000000373.130:7684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25596 comm="syz.2.4079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7fc00000 [ 1434.561532][ T40] audit: type=1326 audit(2000000373.140:7685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25596 comm="syz.2.4079" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb0579 code=0x7fc00000 [ 1435.337276][ T40] audit: type=1326 audit(2000000373.910:7686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25596 comm="syz.2.4079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7fc00000 [ 1435.343077][ T40] audit: type=1326 audit(2000000373.920:7687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25596 comm="syz.2.4079" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fb0579 code=0x7fc00000 [ 1435.349488][ T40] audit: type=1326 audit(2000000373.920:7688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25596 comm="syz.2.4079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7fc00000 [ 1442.005514][T25629] bond1: (slave bond2): Releasing backup interface [ 1442.007513][T25629] bond2: left promiscuous mode [ 1442.010089][T25629] bond0: (slave ip6gre1): Releasing backup interface [ 1442.012003][T25629] ip6gre1: left promiscuous mode [ 1442.013922][T25629] batman_adv: batadv0: Removing interface: gretap1 [ 1442.071491][T19045] libceph: connect (1)[c::]:6789 error -101 [ 1442.073256][T19045] libceph: mon0 (1)[c::]:6789 connect error [ 1442.092779][T25618] ceph: No mds server is up or the cluster is laggy [ 1442.118119][T25629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4086'. [ 1442.499444][T25645] xt_CT: No such helper "pptp" [ 1443.429055][T25644] /dev/sr0: Can't open blockdev [ 1444.661774][T25678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4095'. [ 1444.734845][T25683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4097'. [ 1444.738903][T25683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4097'. [ 1445.492227][T25711] xt_CT: No such helper "pptp" [ 1445.661615][T21344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1452.556994][T25778] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.4122'. [ 1452.559607][T25778] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.4122'. [ 1453.225351][T25792] xt_CT: No such helper "pptp" [ 1453.904291][T25816] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.908416][T25816] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.911437][T25816] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.914392][T25816] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.917462][T25816] geneve4: entered promiscuous mode [ 1453.919406][T25816] geneve4: entered allmulticast mode [ 1453.922995][T25816] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.926138][T25816] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.929308][T25816] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.932386][T25816] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.222566][T25847] usb usb8: usbfs: process 25847 (syz.1.4141) did not claim interface 0 before use [ 1456.626450][T25887] netlink: 'syz.3.4156': attribute type 21 has an invalid length. [ 1456.917961][T25895] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1456.920712][T25895] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1458.137696][T25915] wireguard1: entered promiscuous mode [ 1458.139876][T25915] wireguard1: entered allmulticast mode [ 1459.798260][T25979] wireguard2: entered promiscuous mode [ 1459.800068][T25979] wireguard2: entered allmulticast mode [ 1460.336927][T25997] netlink: 'syz.2.4194': attribute type 10 has an invalid length. [ 1461.659156][T26025] IPVS: ip_vs_add_dest(): server weight less than zero [ 1462.544743][T26061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4217'. [ 1462.547267][T26062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4218'. [ 1463.876477][T26100] /dev/sr0: Can't open blockdev [ 1464.049124][T26119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4239'. [ 1464.051615][T26119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4239'. [ 1464.442685][T26135] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1464.453508][T26135] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1464.585892][T21344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1471.570635][T26196] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1471.573351][T26196] team0: Device ipvlan0 is already an upper device of the team interface [ 1471.578786][T26202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4256'. [ 1471.582104][T26202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4256'. [ 1471.805049][T21344] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1471.888359][T26215] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1471.891056][T26215] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1472.230025][T21344] usb 6-1: Using ep0 maxpacket: 32 [ 1472.233896][T21344] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1472.239113][T21344] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1472.242547][T21344] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1472.245714][T21344] usb 6-1: Product: syz [ 1472.247262][T21344] usb 6-1: Manufacturer: syz [ 1472.248548][T21344] usb 6-1: SerialNumber: syz [ 1472.251202][T21344] usb 6-1: config 0 descriptor?? [ 1472.253012][T26198] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1472.255767][T21344] hub 6-1:0.0: bad descriptor, ignoring hub [ 1472.257586][T21344] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1472.575129][T21344] usb 6-1: USB disconnect, device number 13 [ 1473.009280][T26237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4266'. [ 1473.013519][T26237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4266'. [ 1476.533289][T26327] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1476.535984][T26327] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1478.442935][T26371] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1478.445546][T26371] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1482.400327][T26453] Cannot find set identified by id 0 to match [ 1483.009724][T21344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1483.865688][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.165349][ T40] audit: type=1326 audit(2000000422.743:7689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26511 comm="syz.1.4344" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7fc00000 [ 1484.176143][ T40] audit: type=1326 audit(2000000422.743:7690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26511 comm="syz.1.4344" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f03579 code=0x7fc00000 [ 1484.194439][ T40] audit: type=1326 audit(2000000422.743:7691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26511 comm="syz.1.4344" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7fc00000 [ 1484.202597][ T40] audit: type=1326 audit(2000000422.743:7692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26511 comm="syz.1.4344" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7fc00000 [ 1484.209710][ T40] audit: type=1326 audit(2000000422.743:7693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26511 comm="syz.1.4344" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7fc00000 [ 1484.215783][ T40] audit: type=1326 audit(2000000422.743:7694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26511 comm="syz.1.4344" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7fc00000 [ 1484.221823][ T40] audit: type=1326 audit(2000000422.743:7695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26511 comm="syz.1.4344" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7fc00000 [ 1484.227745][ T40] audit: type=1326 audit(2000000422.743:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26511 comm="syz.1.4344" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7fc00000 [ 1484.236789][ T40] audit: type=1326 audit(2000000422.743:7697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26511 comm="syz.1.4344" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7fc00000 [ 1484.242732][ T40] audit: type=1326 audit(2000000422.743:7698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26511 comm="syz.1.4344" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7fc00000 [ 1490.534839][T21344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1500.479304][T26631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4368'. [ 1500.873713][T21344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1501.321312][T26653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1504.324601][T26702] xt_CT: No such helper "pptp" [ 1504.440079][T21344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1504.611047][T26727] netlink: 'syz.0.4391': attribute type 8 has an invalid length. [ 1505.162225][T26745] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1505.165316][T26745] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1511.205424][T26779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4404'. [ 1511.679395][T26794] xt_CT: No such helper "pptp" [ 1511.755161][T26796] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1511.758266][T26796] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1511.958950][T21344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1512.501668][T26824] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1513.602800][T19045] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1513.754114][T19045] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1513.757573][T19045] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1513.760439][T19045] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1513.764134][T19045] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1513.766697][T19045] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.774911][T19045] usb 6-1: config 0 descriptor?? [ 1514.190283][T19045] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1514.192438][T19045] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1514.194550][T19045] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1514.196651][T19045] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1514.198752][T19045] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1514.200872][T19045] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1514.203013][T19045] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1514.205112][T19045] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1514.207191][T19045] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1514.209289][T19045] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1514.211450][T19045] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1514.213587][T19045] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1514.215721][T19045] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1514.217846][T19045] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1514.219950][T19045] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1514.222298][T19045] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 1514.232623][T19045] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1514.446443][T21344] usb 6-1: USB disconnect, device number 14 [ 1519.502734][T21344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1519.541558][T26883] xt_CT: No such helper "pptp" [ 1519.633180][T26882] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1519.640275][T26882] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1537.725567][T26981] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1537.728169][T26981] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1539.861262][ T1487] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1539.906646][T27031] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1539.909194][T27031] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1540.011498][ T1487] usb 7-1: Using ep0 maxpacket: 8 [ 1540.014132][ T1487] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1540.016456][ T1487] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1540.019137][ T1487] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1540.021876][ T1487] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1540.024766][ T1487] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1540.028438][ T1487] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1540.031848][ T1487] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.243851][ T1487] usb 7-1: usb_control_msg returned -32 [ 1540.245458][ T1487] usbtmc 7-1:16.0: can't read capabilities [ 1540.353775][T27045] xt_CT: No such helper "pptp" [ 1542.125300][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 1542.125311][ T40] audit: type=1326 audit(2000000480.706:7756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27069 comm="syz.1.4469" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x0 [ 1542.582769][T21344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1542.594419][T21344] usb 7-1: USB disconnect, device number 11 [ 1542.605427][T27081] xt_CT: No such helper "pptp" [ 1543.161954][T18196] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1543.167002][T18196] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1543.172156][T18196] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1543.174721][T18196] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1543.177097][T18196] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1543.179227][T18196] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1543.197318][T27112] lo speed is unknown, defaulting to 1000 [ 1543.199361][T27112] »»»»»» speed is unknown, defaulting to 1000 [ 1543.235466][T27112] »»»»»» speed is unknown, defaulting to 1000 [ 1543.287444][T27112] chnl_net:caif_netlink_parms(): no params data found [ 1543.348177][T27112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.350197][T27112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.354049][T27112] bridge_slave_0: entered allmulticast mode [ 1543.356206][T27112] bridge_slave_0: entered promiscuous mode [ 1543.358807][T27112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.360813][T27112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.363300][T27112] bridge_slave_1: entered allmulticast mode [ 1543.365383][T27112] bridge_slave_1: entered promiscuous mode [ 1543.421764][T27112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1543.425606][T27112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1543.456678][T27112] team0: Port device team_slave_0 added [ 1543.459650][T27112] team0: Port device team_slave_1 added [ 1543.479787][T27112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1543.482660][T27112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1543.489709][T27112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1543.495561][T27112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1543.497524][T27112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1543.504934][T27112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1543.532471][T27112] hsr_slave_0: entered promiscuous mode [ 1543.534534][T27112] hsr_slave_1: entered promiscuous mode [ 1543.536348][T27112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1543.538497][T27112] Cannot create hsr debugfs directory [ 1543.622979][T27112] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1543.702566][T27112] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1543.758339][T27112] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1543.814760][T27112] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1543.926888][T27112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1543.930613][T27112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1543.953409][T27112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1543.956674][T27112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1543.984493][T27112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.992270][T27112] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.996077][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.998136][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1544.003934][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.005892][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1544.094033][T27112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1544.113117][T27112] veth0_vlan: entered promiscuous mode [ 1544.116985][T27112] veth1_vlan: entered promiscuous mode [ 1544.130037][T27112] veth0_macvtap: entered promiscuous mode [ 1544.134797][T27112] veth1_macvtap: entered promiscuous mode [ 1544.142759][T27112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1544.148098][T27112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1544.153286][T27112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.155692][T27112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.158037][T27112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.160414][T27112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.194766][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1544.197291][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1544.218545][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1544.220739][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1545.301965][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.540106][ T1135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.710890][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1546.714871][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1546.718040][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1546.724201][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1546.726771][ T5955] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1546.729584][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1546.751212][T27142] lo speed is unknown, defaulting to 1000 [ 1546.753323][T27142] »»»»»» speed is unknown, defaulting to 1000 [ 1546.788515][T27142] »»»»»» speed is unknown, defaulting to 1000 [ 1546.852845][T27142] chnl_net:caif_netlink_parms(): no params data found [ 1546.918072][T27142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.920655][T27142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.923544][T27142] bridge_slave_0: entered allmulticast mode [ 1546.926597][T27142] bridge_slave_0: entered promiscuous mode [ 1546.930280][T27142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.932449][T27142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.934565][T27142] bridge_slave_1: entered allmulticast mode [ 1546.936698][T27142] bridge_slave_1: entered promiscuous mode [ 1546.968616][T27142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1546.973182][T27142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1547.000962][T27142] team0: Port device team_slave_0 added [ 1547.005198][T27142] team0: Port device team_slave_1 added [ 1547.031554][T27142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1547.033586][T27142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1547.042736][T27142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1547.048537][T27142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1547.051430][T27142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1547.058627][T27142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1547.091578][T27142] hsr_slave_0: entered promiscuous mode [ 1547.093660][T27142] hsr_slave_1: entered promiscuous mode [ 1547.095444][T27142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1547.097561][T27142] Cannot create hsr debugfs directory [ 1548.041611][ T1135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.117218][ T1135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.219747][ T1135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.308403][ T1135] bridge_slave_1: left allmulticast mode [ 1548.314638][ T1135] bridge_slave_1: left promiscuous mode [ 1548.317536][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.323312][ T1135] bridge_slave_0: left allmulticast mode [ 1548.324904][ T1135] bridge_slave_0: left promiscuous mode [ 1548.326564][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.638210][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1548.645071][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1548.649163][ T1135] bond0 (unregistering): Released all slaves [ 1548.743454][T18196] Bluetooth: hci0: command tx timeout [ 1549.038869][ T1135] hsr_slave_0: left promiscuous mode [ 1549.040775][ T1135] hsr_slave_1: left promiscuous mode [ 1549.042566][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1549.044629][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1549.047192][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1549.049278][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1549.098094][ T1135] veth1_macvtap: left promiscuous mode [ 1549.100043][ T1135] veth0_macvtap: left promiscuous mode [ 1549.102320][ T1135] veth1_vlan: left promiscuous mode [ 1549.103944][ T1135] veth0_vlan: left promiscuous mode [ 1549.414040][ T40] audit: type=1326 audit(2000000487.997:7757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27176 comm="syz.0.4480" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x0 [ 1549.446606][T27183] input: syz0 as /devices/virtual/input/input13 [ 1550.406456][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 1550.506504][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 1550.821294][T18196] Bluetooth: hci0: command tx timeout [ 1551.099351][T27200] xt_CT: No such helper "pptp" [ 1551.315404][T27142] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1551.322914][T27142] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1551.328202][T27142] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1551.340217][T27142] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1551.375633][T27142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.383301][T27142] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.387827][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.389873][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1551.395984][T10854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.398004][T10854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1551.568062][T27142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1551.582829][T27142] veth0_vlan: entered promiscuous mode [ 1551.586828][T27142] veth1_vlan: entered promiscuous mode [ 1551.596742][T27142] veth0_macvtap: entered promiscuous mode [ 1551.601875][T27142] veth1_macvtap: entered promiscuous mode [ 1551.609418][T27142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1551.613380][T27142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1551.617269][T27142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.619747][T27142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.622300][T27142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.624712][T27142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.661387][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.663667][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.675777][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.678095][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.795272][T27222] overlayfs: failed to clone upperpath [ 1552.282824][T27231] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1552.303784][T27231] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1553.348291][T27250] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1553.351064][T27250] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1554.133561][T27267] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1554.242113][ T105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.405470][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1554.409628][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1554.412460][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1554.415170][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1554.417621][ T5955] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1554.419827][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1554.454314][T27274] lo speed is unknown, defaulting to 1000 [ 1554.457201][T27274] »»»»»» speed is unknown, defaulting to 1000 [ 1554.495848][T27274] »»»»»» speed is unknown, defaulting to 1000 [ 1554.557007][T27274] chnl_net:caif_netlink_parms(): no params data found [ 1554.619969][T27274] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.623499][T27274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.629164][T27274] bridge_slave_0: entered allmulticast mode [ 1554.636734][T27274] bridge_slave_0: entered promiscuous mode [ 1554.643707][T27274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.645698][T27274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.647775][T27274] bridge_slave_1: entered allmulticast mode [ 1554.650615][T27274] bridge_slave_1: entered promiscuous mode [ 1554.680329][T27274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1554.684092][T27274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1554.710006][T27274] team0: Port device team_slave_0 added [ 1554.715728][T27274] team0: Port device team_slave_1 added [ 1554.740190][T27274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1554.742910][T27274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1554.751816][T27274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1554.755549][T27274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1554.757629][T27274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1554.766106][T27274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1554.891789][T27274] hsr_slave_0: entered promiscuous mode [ 1554.893828][T27274] hsr_slave_1: entered promiscuous mode [ 1554.895645][T27274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1554.897918][T27274] Cannot create hsr debugfs directory [ 1555.463437][T27299] netlink: 'syz.0.4511': attribute type 1 has an invalid length. [ 1555.492426][T27299] bond7: (slave gretap1): making interface the new active one [ 1555.495807][T27299] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 1555.859279][ T105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.926296][ T105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.080069][ T105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.186581][ T105] bridge_slave_1: left allmulticast mode [ 1556.188369][ T105] bridge_slave_1: left promiscuous mode [ 1556.190342][ T105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.195059][ T105] bridge_slave_0: left allmulticast mode [ 1556.196762][ T105] bridge_slave_0: left promiscuous mode [ 1556.198741][ T105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.505135][ T5955] Bluetooth: hci0: command tx timeout [ 1556.548201][ T105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1556.552530][ T105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1556.556313][ T105] bond0 (unregistering): Released all slaves [ 1556.875628][T27274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1556.879903][T27274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1556.896264][T27274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1556.903879][T27274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1556.967588][ T105] hsr_slave_0: left promiscuous mode [ 1556.976643][ T105] hsr_slave_1: left promiscuous mode [ 1556.978653][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1556.982898][ T105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1556.985931][T27354] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4525'. [ 1556.988951][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1556.991300][ T105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1556.993367][T27354] openvswitch: netlink: Message has 44053 unknown bytes. [ 1557.031670][ T105] veth1_macvtap: left promiscuous mode [ 1557.033234][ T105] veth0_macvtap: left promiscuous mode [ 1557.034958][ T105] veth1_vlan: left promiscuous mode [ 1557.036487][ T105] veth0_vlan: left promiscuous mode [ 1557.054253][T27360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4526'. [ 1558.082038][ T105] team0 (unregistering): Port device team_slave_1 removed [ 1558.176514][ T105] team0 (unregistering): Port device team_slave_0 removed [ 1558.218252][T27389] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1558.583262][ T5955] Bluetooth: hci0: command tx timeout [ 1558.903842][T27274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1558.919023][T27274] 8021q: adding VLAN 0 to HW filter on device team0 [ 1558.923829][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.926331][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1558.933201][T19730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.936023][T19730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1559.055849][T27274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1559.090870][T27274] veth0_vlan: entered promiscuous mode [ 1559.094829][T27274] veth1_vlan: entered promiscuous mode [ 1559.107387][T27274] veth0_macvtap: entered promiscuous mode [ 1559.113331][T27274] veth1_macvtap: entered promiscuous mode [ 1559.119425][T27274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1559.125004][T27274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1559.128880][T27274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.131828][T27274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.134245][T27274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.136633][T27274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.237936][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.240378][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.264829][T19730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.267239][T19730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.569282][T27413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4537'. [ 1559.600875][T27415] netlink: 'syz.1.4538': attribute type 1 has an invalid length. [ 1559.614745][T27415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1559.640646][T27415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1559.643784][T27415] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1559.647998][T27415] bond2: (slave wireguard1): Error -95 calling set_mac_address [ 1560.692813][ T1135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.302163][T18196] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1561.312241][T18196] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1561.315000][T18196] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1561.319024][T18196] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1561.321831][T18196] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1561.324057][T18196] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1561.341099][T27449] lo speed is unknown, defaulting to 1000 [ 1561.343106][T27449] »»»»»» speed is unknown, defaulting to 1000 [ 1561.387166][T27449] »»»»»» speed is unknown, defaulting to 1000 [ 1561.461244][T27449] chnl_net:caif_netlink_parms(): no params data found [ 1561.536881][ T1135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.605668][T27449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1561.608332][T27449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.614891][T27449] bridge_slave_0: entered allmulticast mode [ 1561.617894][T27449] bridge_slave_0: entered promiscuous mode [ 1561.621936][T27449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1561.624532][T27449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.627310][T27449] bridge_slave_1: entered allmulticast mode [ 1561.634353][T27449] bridge_slave_1: entered promiscuous mode [ 1561.705411][T27449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1561.715192][T27449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1561.763198][T27449] team0: Port device team_slave_0 added [ 1561.767362][T27449] team0: Port device team_slave_1 added [ 1561.807569][T27449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1561.809559][T27449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1561.818766][T27449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1561.823393][T27449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1561.825312][T27449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1561.834502][T27449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1561.868954][T27464] xt_CT: No such helper "pptp" [ 1561.893771][T27449] hsr_slave_0: entered promiscuous mode [ 1561.895823][T27449] hsr_slave_1: entered promiscuous mode [ 1561.897702][T27449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1561.900416][T27449] Cannot create hsr debugfs directory [ 1562.438834][ T1135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.535301][ T1135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.634978][T27478] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1562.637667][T27478] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1562.718062][ T1135] bridge_slave_1: left allmulticast mode [ 1562.719758][ T1135] bridge_slave_1: left promiscuous mode [ 1562.729983][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.733058][ T1135] bridge_slave_0: left allmulticast mode [ 1562.734659][ T1135] bridge_slave_0: left promiscuous mode [ 1562.736307][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.086833][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1563.090814][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1563.096279][ T1135] bond0 (unregistering): Released all slaves [ 1563.380070][T18196] Bluetooth: hci0: command tx timeout [ 1563.490222][ T1135] hsr_slave_0: left promiscuous mode [ 1563.495101][ T1135] hsr_slave_1: left promiscuous mode [ 1563.496926][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1563.508116][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1563.517592][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1563.519750][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1563.561149][ T1135] veth1_macvtap: left promiscuous mode [ 1563.562732][ T1135] veth0_macvtap: left promiscuous mode [ 1563.564296][ T1135] veth1_vlan: left promiscuous mode [ 1563.565734][ T1135] veth0_vlan: left promiscuous mode [ 1564.586898][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 1564.727753][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 1565.459829][T18196] Bluetooth: hci0: command tx timeout [ 1565.505237][T27449] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1565.521916][T27449] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1565.534363][T27449] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1565.556011][T27449] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1565.634701][T27449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1565.641975][T27449] 8021q: adding VLAN 0 to HW filter on device team0 [ 1565.647010][T24892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.649041][T24892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1565.656040][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.658275][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1565.772180][T27449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1565.794680][T27449] veth0_vlan: entered promiscuous mode [ 1565.799379][T27449] veth1_vlan: entered promiscuous mode [ 1565.815498][T27449] veth0_macvtap: entered promiscuous mode [ 1565.819786][T27449] veth1_macvtap: entered promiscuous mode [ 1565.832309][T27449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1565.837429][T27561] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1565.839023][T27449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1565.842727][T27561] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1565.844696][T27449] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.847592][T27449] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.850240][T27449] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.852728][T27449] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.005734][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1566.007919][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.023401][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1566.025657][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.655150][T27573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4571'. [ 1567.001918][T27581] overlayfs: failed to clone upperpath [ 1567.251041][T27589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4575'. [ 1567.959374][T27604] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1567.962151][T27604] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1569.202317][ T105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.729759][T27629] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4584'. [ 1569.856282][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1569.862815][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1569.872670][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1569.879841][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1569.883317][ T5955] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1569.884672][T27627] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1569.887949][T27627] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1569.893495][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1569.914921][T27635] lo speed is unknown, defaulting to 1000 [ 1569.917429][T27635] »»»»»» speed is unknown, defaulting to 1000 [ 1569.965060][T27635] »»»»»» speed is unknown, defaulting to 1000 [ 1570.037387][T27635] chnl_net:caif_netlink_parms(): no params data found [ 1570.104694][T27635] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.106811][T27635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.109031][T27635] bridge_slave_0: entered allmulticast mode [ 1570.111910][T27635] bridge_slave_0: entered promiscuous mode [ 1570.114601][T27635] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.116717][T27635] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.118842][T27635] bridge_slave_1: entered allmulticast mode [ 1570.121093][T27635] bridge_slave_1: entered promiscuous mode [ 1570.144364][T27635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1570.148412][T27635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1570.189274][T27635] team0: Port device team_slave_0 added [ 1570.197463][T27635] team0: Port device team_slave_1 added [ 1570.216880][T27635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1570.218847][T27635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1570.226046][T27635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1570.241345][T27635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1570.243419][T27635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1570.252596][T27635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1570.283112][T27635] hsr_slave_0: entered promiscuous mode [ 1570.285155][T27635] hsr_slave_1: entered promiscuous mode [ 1570.287102][T27635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1570.289198][T27635] Cannot create hsr debugfs directory [ 1571.575877][ T105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.663264][ T105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.863451][ T105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.944091][T18196] Bluetooth: hci0: command tx timeout [ 1571.971902][ T105] bridge_slave_1: left allmulticast mode [ 1571.973649][ T105] bridge_slave_1: left promiscuous mode [ 1571.975612][ T105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.978850][ T105] bridge_slave_0: left allmulticast mode [ 1571.983509][ T105] bridge_slave_0: left promiscuous mode [ 1571.985120][ T105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.287554][ T105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1572.291605][ T105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1572.295205][ T105] bond0 (unregistering): Released all slaves [ 1572.722475][T27714] overlayfs: failed to clone upperpath [ 1572.916474][ T105] hsr_slave_0: left promiscuous mode [ 1572.932635][ T105] hsr_slave_1: left promiscuous mode [ 1572.999472][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1573.002231][ T105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1573.005348][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1573.008180][ T105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1573.060141][ T105] veth1_macvtap: left promiscuous mode [ 1573.062319][ T105] veth0_macvtap: left promiscuous mode [ 1573.064509][ T105] veth1_vlan: left promiscuous mode [ 1573.066557][ T105] veth0_vlan: left promiscuous mode [ 1574.020157][T18196] Bluetooth: hci0: command tx timeout [ 1574.063150][ T105] team0 (unregistering): Port device team_slave_1 removed [ 1574.163676][ T105] team0 (unregistering): Port device team_slave_0 removed [ 1575.048215][T27635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1575.052949][T27635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1575.056868][T27635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1575.072959][T27635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1575.140270][T27635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1575.150831][T27635] 8021q: adding VLAN 0 to HW filter on device team0 [ 1575.155888][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.158748][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1575.166760][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.169567][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1575.324890][T27635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1575.338849][T27635] veth0_vlan: entered promiscuous mode [ 1575.348888][T27635] veth1_vlan: entered promiscuous mode [ 1575.391928][T27635] veth0_macvtap: entered promiscuous mode [ 1575.395144][T27635] veth1_macvtap: entered promiscuous mode [ 1575.401439][T27635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1575.405812][T27635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1575.406538][T27760] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 1575.408689][T27635] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.409494][T27760] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1575.413754][T27635] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.415928][T27635] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.418084][T27635] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.425078][T27760] vhci_hcd vhci_hcd.0: Device attached [ 1575.470149][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1575.472105][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1575.474215][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1575.476222][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1575.694265][T24134] vhci_hcd: vhci_device speed not set [ 1575.705071][T27766] xt_CT: No such helper "pptp" [ 1575.749328][T24134] usb 39-1: new full-speed USB device number 11 using vhci_hcd [ 1576.520856][T27768] vhci_hcd: connection reset by peer [ 1576.526829][ T1141] vhci_hcd: stop threads [ 1576.537929][ T1141] vhci_hcd: release socket [ 1576.539891][ T1141] vhci_hcd: disconnect device [ 1577.226745][T27805] xt_CT: No such helper "pptp" [ 1578.188737][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.980850][T27838] netlink: 'syz.0.4638': attribute type 1 has an invalid length. [ 1579.000293][T27838] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1579.023566][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1579.025818][T27838] bond8: (slave gretap2): making interface the new active one [ 1579.029846][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1579.031120][T27838] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 1579.034132][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1579.045398][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1579.048755][ T5955] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1579.051814][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1579.080156][T27840] lo speed is unknown, defaulting to 1000 [ 1579.083084][T27840] »»»»»» speed is unknown, defaulting to 1000 [ 1579.125880][T27840] »»»»»» speed is unknown, defaulting to 1000 [ 1579.201668][T27848] overlayfs: failed to clone upperpath [ 1579.230786][T27840] chnl_net:caif_netlink_parms(): no params data found [ 1579.300814][T27840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.303573][T27840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.306347][T27840] bridge_slave_0: entered allmulticast mode [ 1579.309478][T27840] bridge_slave_0: entered promiscuous mode [ 1579.313253][T27840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.315999][T27840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.318744][T27840] bridge_slave_1: entered allmulticast mode [ 1579.322823][T27840] bridge_slave_1: entered promiscuous mode [ 1579.356312][T27840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1579.361911][T27840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1579.397619][T27840] team0: Port device team_slave_0 added [ 1579.402217][T27840] team0: Port device team_slave_1 added [ 1579.433696][T27840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1579.436342][T27840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1579.447104][T27840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1579.452528][T27840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1579.455175][T27840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1579.465752][T27840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1579.488445][T27840] hsr_slave_0: entered promiscuous mode [ 1579.490782][T27840] hsr_slave_1: entered promiscuous mode [ 1579.492561][T27840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1579.494668][T27840] Cannot create hsr debugfs directory [ 1580.223276][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.306502][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.384204][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.464580][ T46] bridge_slave_1: left allmulticast mode [ 1580.466304][ T46] bridge_slave_1: left promiscuous mode [ 1580.467943][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.474761][ T46] bridge_slave_0: left allmulticast mode [ 1580.476384][ T46] bridge_slave_0: left promiscuous mode [ 1580.478053][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.852855][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1580.858230][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1580.862536][ T46] bond0 (unregistering): Released all slaves [ 1580.889274][T24134] vhci_hcd: vhci_device speed not set [ 1581.144277][T18196] Bluetooth: hci0: command tx timeout [ 1581.312852][ T46] hsr_slave_0: left promiscuous mode [ 1581.315245][ T46] hsr_slave_1: left promiscuous mode [ 1581.316965][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1581.322722][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1581.325944][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1581.328186][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1581.385547][ T46] veth1_macvtap: left promiscuous mode [ 1581.387243][ T46] veth0_macvtap: left promiscuous mode [ 1581.388893][ T46] veth1_vlan: left promiscuous mode [ 1581.390765][ T46] veth0_vlan: left promiscuous mode [ 1582.421649][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1582.523864][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1583.229107][T18196] Bluetooth: hci0: command tx timeout [ 1583.335530][T27840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1583.340119][T27840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1583.350342][T27840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1583.355229][T27840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1583.461245][T27840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1583.470312][T27840] 8021q: adding VLAN 0 to HW filter on device team0 [ 1583.476091][T10854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.478228][T10854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1583.487672][T24892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.489672][T24892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1583.610833][T27840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1583.628077][T27840] veth0_vlan: entered promiscuous mode [ 1583.654584][T27840] veth1_vlan: entered promiscuous mode [ 1583.668488][T27840] veth0_macvtap: entered promiscuous mode [ 1583.673857][T27840] veth1_macvtap: entered promiscuous mode [ 1583.680482][T27840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1583.686184][T27840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1583.691671][T27840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.694257][T27840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.696742][T27840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.699251][T27840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.706255][T27936] sd 0:0:0:0: PR command failed: 1026 [ 1583.707851][T27936] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 1583.710186][T27936] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 1583.729567][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.731881][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.745655][T10854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.748618][T10854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.950999][T27940] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 1583.952903][T27940] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1583.957413][T27940] vhci_hcd vhci_hcd.0: Device attached [ 1584.148813][T12968] vhci_hcd: vhci_device speed not set [ 1584.218707][T12968] usb 39-1: new full-speed USB device number 12 using vhci_hcd [ 1584.937525][T27942] vhci_hcd: connection reset by peer [ 1584.942803][T24892] vhci_hcd: stop threads [ 1584.944498][T24892] vhci_hcd: release socket [ 1584.946312][T24892] vhci_hcd: disconnect device [ 1585.448035][T27964] tipc: Enabled bearer , priority 0 [ 1586.733807][T24892] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.516517][T27991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4676'. [ 1587.519191][T27991] netlink: 'syz.0.4676': attribute type 7 has an invalid length. [ 1587.521344][T27991] netlink: 'syz.0.4676': attribute type 8 has an invalid length. [ 1587.523512][T27991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4676'. [ 1587.527082][T27991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4676'. [ 1587.529625][T27991] netlink: 'syz.0.4676': attribute type 7 has an invalid length. [ 1587.531719][T27991] netlink: 'syz.0.4676': attribute type 8 has an invalid length. [ 1587.533965][T27991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4676'. [ 1587.602560][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1587.606604][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1587.609739][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1587.614499][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1587.620724][ T5955] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1587.622830][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1587.647751][T27995] lo speed is unknown, defaulting to 1000 [ 1587.650240][T27995] »»»»»» speed is unknown, defaulting to 1000 [ 1587.689808][T27995] »»»»»» speed is unknown, defaulting to 1000 [ 1587.764433][T27995] chnl_net:caif_netlink_parms(): no params data found [ 1587.812129][T27995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.814482][T27995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.816722][T27995] bridge_slave_0: entered allmulticast mode [ 1587.819239][T27995] bridge_slave_0: entered promiscuous mode [ 1587.824377][T27995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.827053][T27995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.830942][T27995] bridge_slave_1: entered allmulticast mode [ 1587.838975][T27995] bridge_slave_1: entered promiscuous mode [ 1587.903780][T27995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1587.907513][T27995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1587.935433][T27995] team0: Port device team_slave_0 added [ 1587.939497][T27995] team0: Port device team_slave_1 added [ 1587.980667][T27995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1587.983261][T27995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1587.993587][T27995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1587.998921][T27995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1588.001469][T27995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1588.011306][T27995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1588.036096][T27995] hsr_slave_0: entered promiscuous mode [ 1588.038090][T27995] hsr_slave_1: entered promiscuous mode [ 1588.039946][T27995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1588.043319][T27995] Cannot create hsr debugfs directory [ 1588.761788][T24892] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.767390][T28025] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1588.770723][T28025] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1588.855552][T24892] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.972811][T24892] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.123099][T24892] bridge_slave_1: left allmulticast mode [ 1589.125400][T24892] bridge_slave_1: left promiscuous mode [ 1589.128428][T24892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.136852][T24892] bridge_slave_0: left allmulticast mode [ 1589.143541][T24892] bridge_slave_0: left promiscuous mode [ 1589.146309][T24892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.448451][T12968] vhci_hcd: vhci_device speed not set [ 1589.512287][T24892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1589.516727][T24892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1589.520671][T24892] bond0 (unregistering): Released all slaves [ 1589.708369][T28051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4691'. [ 1589.708676][T18196] Bluetooth: hci0: command tx timeout [ 1590.002821][T24892] hsr_slave_0: left promiscuous mode [ 1590.005518][T24892] hsr_slave_1: left promiscuous mode [ 1590.008006][T24892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1590.011057][T24892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1590.014598][T24892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1590.017584][T24892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1590.082994][T24892] veth1_macvtap: left promiscuous mode [ 1590.084583][T24892] veth0_macvtap: left promiscuous mode [ 1590.086334][T24892] veth1_vlan: left promiscuous mode [ 1590.087854][T24892] veth0_vlan: left promiscuous mode [ 1591.154576][T24892] team0 (unregistering): Port device team_slave_1 removed [ 1591.278014][T24892] team0 (unregistering): Port device team_slave_0 removed [ 1591.778274][T18196] Bluetooth: hci0: command tx timeout [ 1592.267426][T28099] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1592.270893][T28099] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1592.327588][T27995] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1592.341609][T27995] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1592.351954][T27995] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1592.355601][T27995] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1592.390944][T27995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1592.401473][T27995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1592.409390][T10854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1592.411410][T10854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1592.426928][T19730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1592.430300][T19730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1592.569385][T27995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1592.586556][T27995] veth0_vlan: entered promiscuous mode [ 1592.592400][T27995] veth1_vlan: entered promiscuous mode [ 1592.607742][T27995] veth0_macvtap: entered promiscuous mode [ 1592.614709][T27995] veth1_macvtap: entered promiscuous mode [ 1592.621814][T27995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1592.627198][T27995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1592.632986][T27995] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.635527][T27995] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.637941][T27995] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.641115][T27995] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.709648][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1592.712244][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1592.736882][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1592.739236][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.596594][T28131] 9pnet_fd: Insufficient options for proto=fd [ 1593.727757][T28135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4710'. [ 1593.731636][T28135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4710'. [ 1593.858207][ T5955] Bluetooth: hci0: command tx timeout [ 1593.878753][T28139] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1593.882265][T28139] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1595.669260][T28234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4722'. [ 1595.916054][T28241] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1595.918743][T28241] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1599.156092][T28293] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1600.744507][T28314] netlink: 'syz.3.4748': attribute type 10 has an invalid length. [ 1600.746997][T28314] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4748'. [ 1600.749933][T28314] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1601.070891][T28328] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1601.074012][T28328] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1601.112063][T28332] overlayfs: failed to clone upperpath [ 1603.259833][T28377] tipc: Enabling of bearer rejected, already enabled [ 1603.322169][T27140] Process accounting resumed [ 1603.392568][T28385] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1603.448901][ T40] audit: type=1800 audit(2000000542.040:7758): pid=28391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4772" name="nullb0" dev="tmpfs" ino=4320 res=0 errno=0 [ 1604.028375][T28398] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1604.031036][T28398] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1604.738875][T28424] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1604.742326][T28424] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1604.826752][T28423] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1605.154297][T28432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4784'. [ 1606.738588][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.778986][T28202] bridge_slave_1: left allmulticast mode [ 1606.780669][T28202] bridge_slave_1: left promiscuous mode [ 1606.782372][T28202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.785488][T28202] bridge_slave_0: left allmulticast mode [ 1606.787267][T28202] bridge_slave_0: left promiscuous mode [ 1606.789148][T28202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.862404][T28202] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 1606.874287][T28202] ip6gre1 (unregistering): left promiscuous mode [ 1606.935915][T28202] bond6 (unregistering): (slave gretap1): Releasing active interface [ 1607.267096][T28202] bond1 (unregistering): Released all slaves [ 1607.271576][T28202] bond2 (unregistering): Released all slaves [ 1607.362109][T28202] bond3 (unregistering): Released all slaves [ 1607.450020][T28202] bond0 (unregistering): Released all slaves [ 1607.541050][T28202] bond4 (unregistering): Released all slaves [ 1607.631048][T28202] bond5 (unregistering): Released all slaves [ 1607.635401][T28202] bond6 (unregistering): Released all slaves [ 1607.726086][T28202] bond7 (unregistering): Released all slaves [ 1607.730664][T28202] bond8 (unregistering): Released all slaves [ 1607.735765][T28477] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1607.857318][T28202] tipc: Disabling bearer [ 1607.860181][T28202] tipc: Left network mode [ 1608.167824][T28202] hsr_slave_0: left promiscuous mode [ 1608.169887][T28202] hsr_slave_1: left promiscuous mode [ 1608.353073][T28202] net veth1_virt_wifi virt_wifi0 (unregistering): left allmulticast mode [ 1609.789339][T28491] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1609.792221][T28491] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1609.836779][T28499] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1609.839589][T28499] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1610.190008][T28202] IPVS: stop unused estimator thread 0... [ 1610.576714][ T40] audit: type=1804 audit(2000000549.160:7759): pid=28523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4812" name="/newroot/1152/file0" dev="tmpfs" ino=6343 res=1 errno=0 [ 1610.583597][T28523] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1 [ 1610.586797][T28523] ref_ctr increment failed for inode: 0x18c7 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880129e4600 [ 1611.042612][T28539] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1611.045377][T28539] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1611.833132][T28550] overlayfs: failed to clone upperpath [ 1615.003912][T28621] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1615.006529][T28621] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1615.708251][ T40] audit: type=1326 audit(2000000554.301:7760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28640 comm="syz.0.4847" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x0 [ 1617.088407][T28666] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1617.091034][T28666] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1617.968111][T28690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4861'. [ 1618.341748][T28708] lo speed is unknown, defaulting to 1000 [ 1618.343845][T28708] »»»»»» speed is unknown, defaulting to 1000 [ 1618.390832][T28708] »»»»»» speed is unknown, defaulting to 1000 [ 1618.723553][T28722] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1618.727022][T28722] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1619.236276][T28727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4870'. [ 1619.348123][T28731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4871'. [ 1619.360310][T28731] bond3: entered promiscuous mode [ 1619.362322][T28731] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1620.121194][T28747] overlayfs: failed to clone upperpath [ 1621.019266][T28762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4880'. [ 1621.029766][T28762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4880'. [ 1621.267732][T28769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4883'. [ 1623.594959][T28800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4892'. [ 1624.552475][T28815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4896'. [ 1624.900580][T28824] overlayfs: failed to clone upperpath [ 1624.990702][T28829] netlink: 'syz.0.4901': attribute type 1 has an invalid length. [ 1625.002496][T28829] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1625.007832][T28829] vlan0: entered promiscuous mode [ 1625.009777][T28829] bond9: entered promiscuous mode [ 1625.013012][T28829] bond9: left promiscuous mode [ 1625.389983][T28842] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1625.392657][T28842] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1627.351024][T28887] overlayfs: failed to clone upperpath [ 1628.222498][T28903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4924'. [ 1630.296919][T28935] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1630.299597][T28935] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1630.758149][T28941] netlink: 'syz.1.4936': attribute type 9 has an invalid length. [ 1630.760424][T28941] netlink: 'syz.1.4936': attribute type 7 has an invalid length. [ 1630.762794][T28941] netlink: 'syz.1.4936': attribute type 8 has an invalid length. [ 1630.770291][T28941] netlink: 'syz.1.4936': attribute type 4 has an invalid length. [ 1630.878540][T28947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4939'. [ 1631.056358][T19045] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1631.207421][T19045] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.211349][T19045] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1631.214827][T19045] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1631.219563][T19045] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1631.222797][T19045] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.227601][T19045] usb 6-1: config 0 descriptor?? [ 1631.639719][T19045] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 1631.644563][T19045] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 1631.649337][T19045] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1631.897510][T19045] usb 6-1: USB disconnect, device number 15 [ 1632.462456][T28969] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4944'. [ 1632.465104][T28969] tipc: Enabling of bearer rejected, failed to enable media [ 1632.992009][ T57] ================================================================== [ 1632.994276][ T57] BUG: KASAN: slab-use-after-free in __mutex_lock+0x9eb/0xb10 [ 1632.996411][ T57] Read of size 8 at addr ffff888073ec2320 by task kworker/1:1/57 [ 1632.999298][ T57] [ 1633.000926][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/1:1 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 1633.000940][ T57] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1633.000948][ T57] Workqueue: events l2cap_chan_timeout [ 1633.000963][ T57] Call Trace: [ 1633.000967][ T57] [ 1633.000971][ T57] dump_stack_lvl+0x116/0x1f0 [ 1633.000988][ T57] print_report+0xc3/0x670 [ 1633.000998][ T57] ? __virt_addr_valid+0x5e/0x590 [ 1633.001009][ T57] ? __phys_addr+0xc6/0x150 [ 1633.001020][ T57] kasan_report+0xd9/0x110 [ 1633.001029][ T57] ? __mutex_lock+0x9eb/0xb10 [ 1633.001044][ T57] ? __mutex_lock+0x9eb/0xb10 [ 1633.001061][ T57] __mutex_lock+0x9eb/0xb10 [ 1633.001076][ T57] ? l2cap_chan_timeout+0x6d/0x310 [ 1633.001087][ T57] ? __pfx___mutex_lock+0x10/0x10 [ 1633.001104][ T57] ? rcu_is_watching+0x12/0xc0 [ 1633.001115][ T57] ? trace_lock_acquire+0x14e/0x1f0 [ 1633.001128][ T57] ? l2cap_chan_timeout+0x6d/0x310 [ 1633.001138][ T57] l2cap_chan_timeout+0x6d/0x310 [ 1633.001149][ T57] process_one_work+0x9c5/0x1ba0 [ 1633.001165][ T57] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1633.001180][ T57] ? __pfx_process_one_work+0x10/0x10 [ 1633.001196][ T57] ? assign_work+0x1a0/0x250 [ 1633.001209][ T57] worker_thread+0x6c8/0xf00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1633.001225][ T57] ? __pfx_worker_thread+0x10/0x10 [ 1633.001239][ T57] kthread+0x3af/0x750 [ 1633.001252][ T57] ? __pfx_kthread+0x10/0x10 [ 1633.001264][ T57] ? lock_acquire+0x2f/0xb0 [ 1633.001279][ T57] ? __pfx_kthread+0x10/0x10 [ 1633.001291][ T57] ret_from_fork+0x45/0x80 [ 1633.001305][ T57] ? __pfx_kthread+0x10/0x10 [ 1633.001317][ T57] ret_from_fork_asm+0x1a/0x30 [ 1633.001332][ T57] [ 1633.001335][ T57] [ 1633.048398][ T57] Allocated by task 28114: [ 1633.049659][ T57] kasan_save_stack+0x33/0x60 [ 1633.050989][ T57] kasan_save_track+0x14/0x30 [ 1633.052314][ T57] __kasan_kmalloc+0xaa/0xb0 [ 1633.053615][ T57] l2cap_conn_add.part.0+0x60/0xa60 [ 1633.055088][ T57] l2cap_chan_connect+0x15e8/0x2010 [ 1633.056531][ T57] lowpan_control_write+0x3dc/0x730 [ 1633.057992][ T57] full_proxy_write+0x13c/0x200 [ 1633.059486][ T57] vfs_write+0x24c/0x1150 [ 1633.060739][ T57] ksys_write+0x12b/0x250 [ 1633.062240][ T57] __do_fast_syscall_32+0x73/0x120 [ 1633.064085][ T57] do_fast_syscall_32+0x32/0x80 [ 1633.065748][ T57] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1633.067511][ T57] [ 1633.068201][ T57] Freed by task 27995: [ 1633.069353][ T57] kasan_save_stack+0x33/0x60 [ 1633.070683][ T57] kasan_save_track+0x14/0x30 [ 1633.072342][ T57] kasan_save_free_info+0x3b/0x60 [ 1633.074026][ T57] __kasan_slab_free+0x51/0x70 [ 1633.075407][ T57] kfree+0x2c4/0x4d0 [ 1633.076532][ T57] l2cap_conn_del+0x5a0/0x730 [ 1633.077883][ T57] hci_conn_hash_flush+0x44a/0x790 [ 1633.079312][ T57] hci_dev_close_sync+0x603/0x11a0 [ 1633.080746][ T57] hci_dev_do_close+0x2e/0x90 [ 1633.082058][ T57] hci_unregister_dev+0x213/0x620 [ 1633.083462][ T57] vhci_release+0x79/0xf0 [ 1633.084701][ T57] __fput+0x3ff/0xb70 [ 1633.085838][ T57] task_work_run+0x14e/0x250 [ 1633.087141][ T57] do_exit+0xad8/0x2d70 [ 1633.088304][ T57] do_group_exit+0xd3/0x2a0 [ 1633.089580][ T57] __ia32_sys_exit_group+0x3e/0x50 [ 1633.091000][ T57] ia32_sys_call+0x1b1c/0x1c20 [ 1633.092329][ T57] __do_fast_syscall_32+0x73/0x120 [ 1633.093763][ T57] do_fast_syscall_32+0x32/0x80 [ 1633.095134][ T57] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1633.096895][ T57] [ 1633.097592][ T57] The buggy address belongs to the object at ffff888073ec2000 [ 1633.097592][ T57] which belongs to the cache kmalloc-1k of size 1024 [ 1633.101404][ T57] The buggy address is located 800 bytes inside of [ 1633.101404][ T57] freed 1024-byte region [ffff888073ec2000, ffff888073ec2400) [ 1633.105178][ T57] [ 1633.105869][ T57] The buggy address belongs to the physical page: [ 1633.107648][ T57] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888073ec6800 pfn:0x73ec0 [ 1633.110406][ T57] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1633.112742][ T57] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 1633.115135][ T57] page_type: f5(slab) [ 1633.116262][ T57] raw: 04fff00000000240 ffff88801b042dc0 ffffea00015d9610 ffffea000130f010 [ 1633.118645][ T57] raw: ffff888073ec6800 0000000000100004 00000000f5000000 0000000000000000 [ 1633.121015][ T57] head: 04fff00000000240 ffff88801b042dc0 ffffea00015d9610 ffffea000130f010 [ 1633.123402][ T57] head: ffff888073ec6800 0000000000100004 00000000f5000000 0000000000000000 [ 1633.125811][ T57] head: 04fff00000000003 ffffea0001cfb001 ffffffffffffffff 0000000000000000 [ 1633.128194][ T57] head: ffff888000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1633.130578][ T57] page dumped because: kasan: bad access detected [ 1633.132350][ T57] page_owner tracks the page as allocated [ 1633.133941][ T57] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 27635, tgid 27635 (syz-executor), ts 1570343762504, free_ts 1569112358701 [ 1633.139256][ T57] post_alloc_hook+0x181/0x1b0 [ 1633.140601][ T57] get_page_from_freelist+0xfce/0x2f80 [ 1633.142123][ T57] __alloc_frozen_pages_noprof+0x221/0x2470 [ 1633.143774][ T57] alloc_pages_mpol+0x1fc/0x540 [ 1633.145160][ T57] new_slab+0x23d/0x330 [ 1633.146323][ T57] ___slab_alloc+0xc5d/0x1720 [ 1633.147639][ T57] __slab_alloc.constprop.0+0x56/0xb0 [ 1633.149136][ T57] __kmalloc_cache_noprof+0xfa/0x410 [ 1633.150604][ T57] batadv_hard_if_event+0xb94/0x1640 [ 1633.152070][ T57] notifier_call_chain+0xb7/0x410 [ 1633.153485][ T57] call_netdevice_notifiers_info+0xbe/0x140 [ 1633.155149][ T57] register_netdevice+0x17c2/0x1eb0 [ 1633.156599][ T57] ipvlan_link_new+0x353/0xbf0 [ 1633.157958][ T57] rtnl_newlink+0xb95/0x1d60 [ 1633.159254][ T57] rtnetlink_rcv_msg+0x95b/0xea0 [ 1633.160631][ T57] netlink_rcv_skb+0x16b/0x440 [ 1633.161980][ T57] page last free pid 27444 tgid 27444 stack trace: [ 1633.163766][ T57] free_frozen_pages+0x6db/0xfb0 [ 1633.165168][ T57] vfree+0x174/0x950 [ 1633.166278][ T57] kcov_put+0x2a/0x40 [ 1633.167403][ T57] kcov_close+0xd/0x20 [ 1633.168560][ T57] __fput+0x3ff/0xb70 [ 1633.169694][ T57] task_work_run+0x14e/0x250 [ 1633.170980][ T57] do_exit+0xad8/0x2d70 [ 1633.172059][ T57] do_group_exit+0xd3/0x2a0 [ 1633.173172][ T57] __ia32_sys_exit_group+0x3e/0x50 [ 1633.174486][ T57] ia32_sys_call+0x1b1c/0x1c20 [ 1633.175856][ T57] __do_fast_syscall_32+0x73/0x120 [ 1633.177292][ T57] do_fast_syscall_32+0x32/0x80 [ 1633.178686][ T57] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1633.180453][ T57] [ 1633.181148][ T57] Memory state around the buggy address: [ 1633.182706][ T57] ffff888073ec2200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1633.184931][ T57] ffff888073ec2280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1633.187142][ T57] >ffff888073ec2300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1633.189350][ T57] ^ [ 1633.190781][ T57] ffff888073ec2380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1633.192989][ T57] ffff888073ec2400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1633.195217][ T57] ================================================================== [ 1633.197612][ T57] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1633.199594][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/1:1 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 1633.202474][ T57] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1633.205408][ T57] Workqueue: events l2cap_chan_timeout [ 1633.206946][ T57] Call Trace: [ 1633.207887][ T57] [ 1633.208729][ T57] dump_stack_lvl+0x3d/0x1f0 [ 1633.210026][ T57] panic+0x71d/0x800 [ 1633.211125][ T57] ? mark_held_locks+0x9f/0xe0 [ 1633.212460][ T57] ? __pfx_panic+0x10/0x10 [ 1633.213737][ T57] ? irqentry_exit+0x3b/0x90 [ 1633.215042][ T57] ? lockdep_hardirqs_on+0x7c/0x110 [ 1633.216497][ T57] ? check_panic_on_warn+0x1f/0xb0 [ 1633.217958][ T57] check_panic_on_warn+0xab/0xb0 [ 1633.219336][ T57] end_report+0x117/0x180 [ 1633.220543][ T57] kasan_report+0xe9/0x110 [ 1633.221792][ T57] ? __mutex_lock+0x9eb/0xb10 [ 1633.223106][ T57] ? __mutex_lock+0x9eb/0xb10 [ 1633.224431][ T57] __mutex_lock+0x9eb/0xb10 [ 1633.225739][ T57] ? l2cap_chan_timeout+0x6d/0x310 [ 1633.227161][ T57] ? __pfx___mutex_lock+0x10/0x10 [ 1633.228566][ T57] ? rcu_is_watching+0x12/0xc0 [ 1633.229898][ T57] ? trace_lock_acquire+0x14e/0x1f0 [ 1633.231334][ T57] ? l2cap_chan_timeout+0x6d/0x310 [ 1633.232771][ T57] l2cap_chan_timeout+0x6d/0x310 [ 1633.234154][ T57] process_one_work+0x9c5/0x1ba0 [ 1633.235378][ T57] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1633.236943][ T57] ? __pfx_process_one_work+0x10/0x10 [ 1633.238442][ T57] ? assign_work+0x1a0/0x250 [ 1633.239960][ T57] worker_thread+0x6c8/0xf00 [ 1633.241278][ T57] ? __pfx_worker_thread+0x10/0x10 [ 1633.242703][ T57] kthread+0x3af/0x750 [ 1633.243847][ T57] ? __pfx_kthread+0x10/0x10 [ 1633.245169][ T57] ? lock_acquire+0x2f/0xb0 [ 1633.246443][ T57] ? __pfx_kthread+0x10/0x10 [ 1633.247738][ T57] ret_from_fork+0x45/0x80 [ 1633.248992][ T57] ? __pfx_kthread+0x10/0x10 [ 1633.250283][ T57] ret_from_fork_asm+0x1a/0x30 [ 1633.251626][ T57] [ 1633.253036][ T57] Kernel Offset: disabled [ 1633.254255][ T57] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:57:57 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b43ff40 RCX=ffffffff81adfcd4 RDX=ffff88801d682440 RSI=ffffffff81adfcaf RDI=0000000000000005 RBP=ffffc9000046fd10 RSP=ffffc9000046fc40 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c38fd6 R12=1ffff9200008df8c R13=0000000000000001 R14=0000000000000003 R15=ffffed1005687fe9 RIP=ffffffff81adfcb5 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f60fffc CR3=0000000073142000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff853e96b0 RDI=ffffffff9ab72ea0 RBP=ffffffff9ab72e60 RSP=ffffc90000787538 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=ffffffff9ab72eb0 R14=ffffffff9ab72e60 R15=0000000000000000 RIP=ffffffff853e96d7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7321114 CR3=0000000051718000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000f05833 RBX=0000000000000002 RCX=ffffffff8b55b469 RDX=0000000000000000 RSI=ffffffff8b6cfc80 RDI=ffffffff8bd359e0 RBP=ffffed1003ad3488 RSP=ffffc9000049fe08 R8 =0000000000000001 R9 =ffffed10056c6f85 R10=ffff88802b637c2b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d69a440 R14=ffffffff90629110 R15=0000000000000000 RIP=ffffffff8b55c84f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f510042c CR3=000000004bfa4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000007 RBX=00000000000000f1 RCX=ffffffff84c82e2c RDX=ffff88801dc9a440 RSI=0000000000000000 RDI=0000000000000007 RBP=ffff8880400c9137 RSP=ffffc9000355f2e0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000ec9 R11=0000000000000002 R12=0000000000000ec9 R13=dffffc0000000000 R14=00000000797542be R15=0000000000000000 RIP=ffffffff81b9e991 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0009933d00 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056426af3f000 CR3=000000004c40a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=ffca1105ffca1105 ffca1105ffca1105 ffca1105ffca1105 ffca1105ffca1105 ffca1105ffca1105 ffca1105ffca1105 ffca1105ffca1105 ffca1105ffca1105 ZMM22=6d9e05b36d9e05b3 6d9e05b36d9e05b3 6d9e05b36d9e05b3 6d9e05b36d9e05b3 6d9e05b36d9e05b3 6d9e05b36d9e05b3 6d9e05b36d9e05b3 6d9e05b36d9e05b3 ZMM23=fffe420dfffe420d fffe420dfffe420d fffe420dfffe420d fffe420dfffe420d fffe420dfffe420d fffe420dfffe420d fffe420dfffe420d fffe420dfffe420d ZMM24=cfabff17cfabff17 cfabff17cfabff17 cfabff17cfabff17 cfabff17cfabff17 cfabff17cfabff17 cfabff17cfabff17 cfabff17cfabff17 cfabff17cfabff17 ZMM25=3576637c3576637c 3576637c3576637c 3576637c3576637c 3576637c3576637c 3576637c3576637c 3576637c3576637c 3576637c3576637c 3576637c3576637c ZMM26=189733a8189733a8 189733a8189733a8 189733a8189733a8 189733a8189733a8 189733a8189733a8 189733a8189733a8 189733a8189733a8 189733a8189733a8 ZMM27=43cea04243cea042 43cea04243cea042 43cea04243cea042 43cea04243cea042 43cea04243cea042 43cea04243cea042 43cea04243cea042 43cea04243cea042 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=1a2e00001a2e0000 1a2e00001a2e0000 1a2e00001a2e0000 1a2e00001a2e0000 1a2e00001a2e0000 1a2e00001a2e0000 1a2e00001a2e0000 1a2e00001a2e0000