last executing test programs: 5.914556175s ago: executing program 2 (id=1555): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = gettid() sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x1, 0x4}, 0x3}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000580)}], 0x1, 0x0, 0x0, 0x1051}, 0x804) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) 5.051863112s ago: executing program 2 (id=1558): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) setpgid(0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x801, 0xdddd1000, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0xffff1000, 0x1a000, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_tcp_int(r3, 0x6, 0x18, 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) 5.000291848s ago: executing program 3 (id=1559): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x4c, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x10, 0xfc, 0x0, 0x1, [@typed={0xc, 0x5, 0x0, 0x0, @u64=0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="c4139b78"]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 4.260813716s ago: executing program 0 (id=1563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x25dfdbfd, {0x0, 0x0, 0x74, r4, {0xe, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.055219664s ago: executing program 0 (id=1565): syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 4.0387952s ago: executing program 3 (id=1566): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r1 = socket$netlink(0x10, 0x3, 0x15) fcntl$setownex(r1, 0xf, &(0x7f00000001c0)={0x2, r0}) 3.958008367s ago: executing program 2 (id=1567): syz_emit_ethernet(0xfb2, &(0x7f00000025c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@mpls_uc={0x8847, {[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x9, 0xfa4, 0x64, 0x0, 0x8, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010102}, {{0x4e23, 0x4e22, 0x4, 0x1, 0xd, 0x0, 0x0, 0x8, 0x1, "9bdd9d", 0x8, "e8fb01"}, "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"}}}}}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'pimreg0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) getrlimit(0x8, 0x0) getpid() ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004000000"], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 3.573636527s ago: executing program 2 (id=1568): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3.4570093s ago: executing program 3 (id=1570): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000280), 0x2, &(0x7f00000004c0)={'trans=virtio,', {[{@access_user}]}}) 3.117020018s ago: executing program 0 (id=1571): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') inotify_init() syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.609344842s ago: executing program 2 (id=1572): prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1a22, &(0x7f0000000740)={0x0, 0xf350, 0x400, 0x0, 0x20e}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000000c0)=0x6f) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000001400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001380)={0x1c, 0x0, 0x208, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000040) syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0xfffffffffffffffe, 0x4000000) 2.571172039s ago: executing program 3 (id=1573): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80, r3, 0x0, 0x7}, 0x38) 2.54329947s ago: executing program 1 (id=1574): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x25dfdbfd, {0x0, 0x0, 0x74, r4, {0xe, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.202487848s ago: executing program 1 (id=1575): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000000000000000000000000003d28000000"]) r3 = socket(0x2, 0x3, 0xff) shutdown(r3, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0xd, 0x0, 0x456}, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r5) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r7}, 0x10) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) 2.152525786s ago: executing program 1 (id=1576): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) 1.962581012s ago: executing program 0 (id=1577): socket$kcm(0x10, 0x2, 0x0) fsopen(&(0x7f0000001680)='nilfs2\x00', 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) socket$isdn(0x22, 0x2, 0x26) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, 0x0}, 0x108) r1 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, 0x0}) io_uring_enter(r1, 0x2d3c, 0x0, 0x0, 0x0, 0x0) 1.881849843s ago: executing program 0 (id=1578): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r2, 0x6e2, 0x620, 0x1, 0x0, 0x0) 1.612342573s ago: executing program 3 (id=1579): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfffffd0a, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3fff, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000003c0)=""/4096, 0x1000) 1.006163668s ago: executing program 1 (id=1580): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="180000003c000bab956cb06f8c7d94f90324fc602f000000", 0x18}, {0x0}, {&(0x7f0000000240)="27ac9cef3f15d3e76a667a4a7bda11a31f30d2c4868e93bec6b60fb026f8d609f777bd2e6b658e0534cc95558c7e817aef0256a8651d991ab355979d8dc77eea943818161d613ed8349bd8c291f9962536", 0x51}], 0x3}, 0x4044) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x10000, 0x42) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000180)=0x100, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r4 = openat$userio(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) close_range(r3, r4, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x7, [@union={0x3, 0x2, 0x0, 0x5, 0x0, 0x7, [{0x2, 0x1, 0x6}, {0x10, 0x5, 0x2}]}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x53, 0x0, 0x6a, 0x3}, @ptr={0xc, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x2e, 0x2e, 0x61, 0x61, 0x30]}}, &(0x7f00000004c0)=""/67, 0x5f, 0x43, 0x1, 0xa9}, 0x28) openat$sequencer(0xffffff9c, &(0x7f0000000400), 0x101000, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000020a0f420000000000010000"], 0x48}}, 0x0) 946.519966ms ago: executing program 1 (id=1581): socket$inet_smc(0x2b, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) fanotify_init(0x200, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) 4.050806ms ago: executing program 1 (id=1582): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000280), 0x2, &(0x7f00000004c0)={'trans=virtio,', {[{@access_user}]}}) 3.806209ms ago: executing program 2 (id=1583): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt(r3, 0x5, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 3.616506ms ago: executing program 3 (id=1584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x25dfdbfd, {0x0, 0x0, 0x74, r4, {0xe, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 0s ago: executing program 0 (id=1590): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x2ca}, 0x18) gettid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) kernel console output (not intermixed with test programs): oo short [ 89.133327][ T61] usb 8-1: config 4 interface 0 has no altsetting 0 [ 89.138201][ T61] usb 8-1: string descriptor 0 read error: -22 [ 89.140229][ T61] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 89.143029][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.150079][ T61] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 89.156485][ T61] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 89.159838][ T61] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 89.162207][ T61] usb 8-1: media controller created [ 89.172555][ T61] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 89.306653][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 89.330179][ T7220] syz_tun: entered allmulticast mode [ 89.336635][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'. [ 89.345298][ T7220] syz_tun (unregistering): left allmulticast mode [ 89.381607][ T61] zl10353_read_register: readreg error (reg=127, ret==0) [ 89.401109][ T61] usb 8-1: USB disconnect, device number 3 [ 89.455533][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 89.463742][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 89.473222][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 89.476665][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 89.479972][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 89.483528][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 89.487583][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 89.491789][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 89.494854][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.502070][ T10] usb 6-1: config 0 descriptor?? [ 89.726220][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 89.926331][ T5982] usb 6-1: USB disconnect, device number 3 [ 89.932036][ T5982] usblp0: removed [ 90.444953][ T7254] tipc: Started in network mode [ 90.447530][ T7254] tipc: Node identity 4, cluster identity 4711 [ 90.449817][ T7254] tipc: Node number set to 4 [ 90.480811][ T7256] binder: 7255:7256 ioctl c0306201 80000680 returned -14 [ 91.580098][ T7296] ptrace attach of "/syz-executor exec"[5976] was attempted by "/syz-executor exec"[7296] [ 91.662559][ T7299] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 91.861909][ T7309] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 91.870493][ T7309] kvm: pic: non byte read [ 91.873374][ T7309] kvm: pic: level sensitive irq not supported [ 91.873655][ T7309] kvm: pic: non byte read [ 91.881217][ T7309] kvm: pic: level sensitive irq not supported [ 91.881494][ T7309] kvm: pic: non byte read [ 91.886592][ T7309] kvm: pic: level sensitive irq not supported [ 91.886872][ T7309] kvm: pic: non byte read [ 92.798527][ T7319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.368'. [ 92.874139][ T7323] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 92.876912][ T7323] overlayfs: failed to set xattr on upper [ 92.878904][ T7323] overlayfs: ...falling back to redirect_dir=nofollow. [ 92.882297][ T7323] overlayfs: ...falling back to index=off. [ 92.884175][ T7323] overlayfs: ...falling back to uuid=null. [ 93.202977][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.373'. [ 93.245263][ T7336] lo speed is unknown, defaulting to 1000 [ 93.272449][ T7333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 93.285590][ T7333] bond2: (slave bond3): Enslaving as an active interface with an up link [ 93.309643][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 93.346410][ T7333] bond2 (unregistering): (slave bond3): Releasing backup interface [ 93.353366][ T7333] bond2 (unregistering): Released all slaves [ 93.375005][ T7342] netlink: 72 bytes leftover after parsing attributes in process `syz.3.375'. [ 93.514405][ T59] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 93.677160][ T59] usb 7-1: config 0 has no interfaces? [ 93.682220][ T59] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 93.684983][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.688979][ T59] usb 7-1: Product: syz [ 93.690410][ T59] usb 7-1: Manufacturer: syz [ 93.692040][ T59] usb 7-1: SerialNumber: syz [ 93.695074][ T59] usb 7-1: config 0 descriptor?? [ 93.989547][ T59] usb 7-1: USB disconnect, device number 2 [ 94.437645][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.440594][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.443368][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.446476][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.606890][ T6062] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.766050][ T6062] usb 5-1: Using ep0 maxpacket: 8 [ 94.922180][ T6062] usb 5-1: unable to get BOS descriptor or descriptor too short [ 94.986644][ T6062] usb 5-1: config 4 interface 0 has no altsetting 0 [ 94.997682][ T6062] usb 5-1: string descriptor 0 read error: -22 [ 94.999735][ T6062] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 95.002663][ T6062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.027389][ T6062] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 95.037569][ T6062] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 95.041377][ T6062] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 95.043798][ T6062] usb 5-1: media controller created [ 95.053018][ T6062] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.261272][ T6062] zl10353_read_register: readreg error (reg=127, ret==0) [ 95.281848][ T6062] usb 5-1: USB disconnect, device number 2 [ 95.586692][ T63] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 95.589434][ T63] Bluetooth: hci0: Injecting HCI hardware error event [ 95.592455][ T5992] Bluetooth: hci0: hardware error 0x00 [ 96.012635][ T7390] binder: 7389:7390 ioctl c0306201 80000080 returned -14 [ 96.136172][ T7405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.394'. [ 96.742196][ T7423] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 96.744849][ T7423] netlink: 'syz.0.401': attribute type 4 has an invalid length. [ 96.747385][ T7423] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.401'. [ 96.837096][ T7428] bridge_slave_0: left allmulticast mode [ 96.839046][ T7428] bridge_slave_0: left promiscuous mode [ 96.841051][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.846183][ T7428] bridge_slave_1: left allmulticast mode [ 96.848057][ T7428] bridge_slave_1: left promiscuous mode [ 96.850006][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.857222][ T7428] bond0: (slave bond_slave_0): Releasing backup interface [ 96.862490][ T7428] bond0: (slave bond_slave_1): Releasing backup interface [ 96.870616][ T7428] team0: Port device team_slave_0 removed [ 96.875190][ T7428] team0: Port device team_slave_1 removed [ 96.878984][ T7428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.881607][ T7428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.883728][ T7429] netlink: 'syz.2.403': attribute type 10 has an invalid length. [ 96.887696][ T7428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.890142][ T7428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.899639][ T7428] bond0: (slave wlan1): Releasing backup interface [ 96.938063][ T7429] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 97.675498][ T5992] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 100.157079][ T7526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.433'. [ 100.225158][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 100.560172][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 100.566574][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 100.569183][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 100.571499][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 100.573919][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 100.577146][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 100.579482][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 100.581831][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 100.584222][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 100.587382][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 100.590078][ T61] hid-generic 0000:0000:0000.0003: reserved main item tag 0xd [ 100.596788][ T61] hid-generic 0000:0000:0000.0003: hidraw1: HID v8.00 Device [syz0] on syz0 [ 100.660116][ T7537] fido_id[7537]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.272747][ T7546] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 101.483663][ T7550] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.626998][ T7561] lo speed is unknown, defaulting to 1000 [ 101.905453][ T6062] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.067548][ T6062] usb 5-1: config 0 has no interfaces? [ 102.070805][ T6062] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 102.073609][ T6062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.076495][ T6062] usb 5-1: Product: syz [ 102.077830][ T6062] usb 5-1: Manufacturer: syz [ 102.079336][ T6062] usb 5-1: SerialNumber: syz [ 102.082952][ T6062] usb 5-1: config 0 descriptor?? [ 102.398059][ T6062] usb 5-1: USB disconnect, device number 3 [ 103.913975][ T7601] binder: 7600:7601 ioctl c0306201 80000680 returned -14 [ 104.713479][ T1150] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.719653][ T1150] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.723227][ T1150] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.725603][ T59] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 104.730999][ T1150] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.885457][ T59] usb 7-1: Using ep0 maxpacket: 8 [ 104.889602][ T59] usb 7-1: unable to get BOS descriptor or descriptor too short [ 104.893836][ T59] usb 7-1: config 4 interface 0 has no altsetting 0 [ 104.899328][ T59] usb 7-1: string descriptor 0 read error: -22 [ 104.902075][ T59] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 104.905861][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.915200][ T59] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 104.920262][ T59] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 104.924714][ T59] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 104.927642][ T59] usb 7-1: media controller created [ 104.942838][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.148232][ T59] zl10353_read_register: readreg error (reg=127, ret==0) [ 105.188031][ T59] usb 7-1: USB disconnect, device number 3 [ 105.966983][ T7652] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 108.787269][ T7708] netlink: 'syz.2.496': attribute type 27 has an invalid length. [ 108.791047][ T7708] wg2: left promiscuous mode [ 108.792537][ T7708] wg2: left allmulticast mode [ 108.849050][ T7708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.853084][ T7708] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.861601][ T7708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.507048][ T7743] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 110.510476][ T7743] overlayfs: failed to set xattr on upper [ 110.512650][ T7743] overlayfs: ...falling back to redirect_dir=nofollow. [ 110.515627][ T7743] overlayfs: ...falling back to index=off. [ 110.517774][ T7743] overlayfs: ...falling back to uuid=null. [ 112.139489][ T7786] Bluetooth: MGMT ver 1.23 [ 112.330748][ T7798] netlink: 'syz.3.525': attribute type 3 has an invalid length. [ 112.334030][ T7798] netlink: 'syz.3.525': attribute type 3 has an invalid length. [ 112.726032][ T7822] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 112.739810][ T7822] evm: overlay not supported [ 112.739870][ T40] audit: type=1800 audit(1756813000.622:72): pid=7822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.533" name="file0" dev="overlay" ino=35913864 res=0 errno=0 [ 112.909873][ T7835] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 112.913084][ T7835] block device autoloading is deprecated and will be removed. [ 112.971940][ T7835] md: md2 stopped. [ 112.977519][ T7831] md2: using deprecated bitmap file support [ 112.979903][ T7831] md2: error: bitmap file must be a regular file [ 113.856521][ T7855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.551'. [ 115.237736][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'. [ 116.467955][ T10] libceph: connect (1)[c::]:6789 error -101 [ 116.470529][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 116.604077][ T7915] ceph: No mds server is up or the cluster is laggy [ 116.866313][ T5992] Bluetooth: hci2: command 0x0406 tx timeout [ 116.936840][ T7943] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 116.940742][ T7943] block device autoloading is deprecated and will be removed. [ 117.015812][ T7941] md2: using deprecated bitmap file support [ 117.018525][ T7941] md2: error: bitmap file must open for write [ 117.505517][ T6725] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 117.646548][ T7965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.577'. [ 117.677463][ T6725] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.687086][ T6725] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 117.690173][ T6725] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 117.693816][ T6725] usb 7-1: Product: syz [ 117.695473][ T6725] usb 7-1: Manufacturer: syz [ 117.697138][ T6725] usb 7-1: SerialNumber: syz [ 117.907330][ T6725] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 119.671635][ C0] usblp0: nonzero write bulk status received: -71 [ 119.674837][ T6725] usb 7-1: USB disconnect, device number 4 [ 119.835401][ T6725] usblp0: removed [ 120.528990][ T8000] netlink: 'syz.1.588': attribute type 14 has an invalid length. [ 120.532048][ T8000] netlink: 'syz.1.588': attribute type 4 has an invalid length. [ 120.536459][ T8000] netlink: 'syz.1.588': attribute type 4 has an invalid length. [ 120.547170][ T8002] capability: warning: `syz.2.589' uses deprecated v2 capabilities in a way that may be insecure [ 120.754914][ T40] audit: type=1326 audit(1756813008.632:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.1.595" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 120.764228][ T8017] netlink: 180 bytes leftover after parsing attributes in process `syz.1.595'. [ 120.768304][ T8019] overlayfs: statfs failed on './file0' [ 120.768830][ T40] audit: type=1326 audit(1756813008.642:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.1.595" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 120.773358][ T8017] netlink: 180 bytes leftover after parsing attributes in process `syz.1.595'. [ 120.780723][ T40] audit: type=1326 audit(1756813008.642:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.1.595" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 120.795401][ T40] audit: type=1326 audit(1756813008.642:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.1.595" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 120.797606][ T8017] netlink: 180 bytes leftover after parsing attributes in process `syz.1.595'. [ 120.805107][ T40] audit: type=1326 audit(1756813008.642:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.1.595" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 120.817971][ T40] audit: type=1326 audit(1756813008.642:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.1.595" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 120.828326][ T40] audit: type=1326 audit(1756813008.642:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.1.595" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 120.835330][ T40] audit: type=1326 audit(1756813008.642:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.1.595" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 120.843231][ T40] audit: type=1326 audit(1756813008.652:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.1.595" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 120.853043][ T40] audit: type=1326 audit(1756813008.652:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.1.595" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 121.073546][ T8028] lo speed is unknown, defaulting to 1000 [ 121.158079][ T8031] netlink: 'syz.3.601': attribute type 1 has an invalid length. [ 121.313172][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 121.318317][ T8039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.601'. [ 121.323092][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 121.328171][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 121.331806][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 121.340255][ T8031] bond1: entered promiscuous mode [ 121.341868][ T8031] bond1: entered allmulticast mode [ 121.351498][ T8036] bond1: (slave erspan1): making interface the new active one [ 121.354375][ T8036] erspan1: entered promiscuous mode [ 121.356614][ T8036] erspan1: entered allmulticast mode [ 121.358836][ T8036] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 121.362702][ T8039] bond1: left promiscuous mode [ 121.364769][ T8039] erspan1: left promiscuous mode [ 121.367241][ T8039] bond1: left allmulticast mode [ 121.373088][ T8039] erspan1: left allmulticast mode [ 121.375824][ T8039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.599681][ T8048] syz_tun: entered allmulticast mode [ 121.622859][ T8044] dvmrp1: entered allmulticast mode [ 121.639121][ T8043] syz_tun: left allmulticast mode [ 121.795719][ T6725] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 121.814303][ T8068] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 121.819972][ T8068] block device autoloading is deprecated and will be removed. [ 121.875918][ T8063] md2: using deprecated bitmap file support [ 121.878668][ T8063] md2: error: bitmap file must open for write [ 121.936780][ T8073] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 121.939559][ T8073] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 121.944214][ T8073] vhci_hcd vhci_hcd.0: Device attached [ 121.947111][ T6725] usb 6-1: Using ep0 maxpacket: 32 [ 121.954928][ T8073] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 121.956562][ T6725] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 121.957061][ T8073] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.963184][ T6725] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 121.965537][ T8073] vhci_hcd vhci_hcd.0: Device attached [ 121.966818][ T6725] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 121.972757][ T6725] usb 6-1: Product: syz [ 121.974202][ T6725] usb 6-1: Manufacturer: syz [ 121.975957][ T6725] usb 6-1: SerialNumber: syz [ 121.980176][ T6725] usb 6-1: config 0 descriptor?? [ 121.983641][ T8076] vhci_hcd: connection closed [ 121.983911][ T60] vhci_hcd: stop threads [ 121.984060][ T8074] vhci_hcd: connection closed [ 121.986173][ T60] vhci_hcd: release socket [ 121.991286][ T60] vhci_hcd: disconnect device [ 121.995273][ T8050] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.997467][ T60] vhci_hcd: stop threads [ 122.000602][ T60] vhci_hcd: release socket [ 122.002511][ T60] vhci_hcd: disconnect device [ 122.315809][ T24] usb 6-1: USB disconnect, device number 4 [ 122.515686][ T8081] netlink: 'syz.0.615': attribute type 1 has an invalid length. [ 122.518164][ T8081] netlink: 132 bytes leftover after parsing attributes in process `syz.0.615'. [ 122.521195][ T8081] netlink: 'syz.0.615': attribute type 2 has an invalid length. [ 122.523809][ T8081] netlink: 'syz.0.615': attribute type 1 has an invalid length. [ 122.526361][ T8081] netlink: 2 bytes leftover after parsing attributes in process `syz.0.615'. [ 122.540159][ T8081] lo speed is unknown, defaulting to 1000 [ 122.715004][ T8092] netlink: 'syz.3.619': attribute type 14 has an invalid length. [ 122.725741][ T8092] netlink: 'syz.3.619': attribute type 4 has an invalid length. [ 122.731389][ T8092] netlink: 'syz.3.619': attribute type 4 has an invalid length. [ 122.735261][ T59] lo speed is unknown, defaulting to 1000 [ 122.739656][ T59] syz0: Port: 1 Link ACTIVE [ 122.771032][ T8094] bridge_slave_0: left allmulticast mode [ 122.773161][ T8094] bridge_slave_0: left promiscuous mode [ 122.775103][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.781907][ T8094] bridge_slave_1: left allmulticast mode [ 122.783833][ T8094] bridge_slave_1: left promiscuous mode [ 122.787730][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.877066][ T8094] bond0: (slave bond_slave_0): Releasing backup interface [ 122.882750][ T8094] bond0: (slave bond_slave_1): Releasing backup interface [ 122.886208][ T8094] team0: Port device team_slave_0 removed [ 122.888961][ T8094] team0: Port device team_slave_1 removed [ 122.890934][ T8094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.893753][ T8094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.897539][ T8094] bond0: (slave wlan1): Releasing backup interface [ 122.901488][ T8094] bond1: (slave erspan1): Releasing active interface [ 122.906384][ T8095] team0: Mode changed to "random" [ 122.908707][ T8096] vlan0: entered promiscuous mode [ 122.938922][ T8094] tipc: Enabled bearer , priority 0 [ 122.956051][ T61] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.085917][ T6725] libceph: connect (1)[c::]:6789 error -101 [ 123.090334][ T6725] libceph: mon0 (1)[c::]:6789 connect error [ 123.105698][ T61] usb 5-1: Using ep0 maxpacket: 16 [ 123.110494][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 123.115127][ T61] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 123.118305][ T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.120712][ T61] usb 5-1: Product: syz [ 123.122465][ T61] usb 5-1: Manufacturer: syz [ 123.123998][ T61] usb 5-1: SerialNumber: syz [ 123.127180][ T61] usb 5-1: config 0 descriptor?? [ 123.133253][ T61] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 123.136595][ T61] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 123.232400][ T8100] ceph: No mds server is up or the cluster is laggy [ 123.740712][ T61] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 124.082714][ T8123] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 124.158823][ T61] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 124.161789][ T61] em28xx 5-1:0.0: board has no eeprom [ 125.186561][ T8090] em28xx 5-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 125.245487][ T61] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 125.248788][ T61] em28xx 5-1:0.0: dvb set to bulk mode. [ 125.252076][ T6725] em28xx 5-1:0.0: Binding DVB extension [ 125.266113][ T61] usb 5-1: USB disconnect, device number 4 [ 125.269608][ T61] em28xx 5-1:0.0: Disconnecting em28xx [ 125.295942][ T6725] em28xx 5-1:0.0: Registering input extension [ 125.298592][ T61] em28xx 5-1:0.0: Closing input extension [ 125.312545][ T61] em28xx 5-1:0.0: Freeing device [ 126.840756][ T8163] validate_nla: 4 callbacks suppressed [ 126.840767][ T8163] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 126.858666][ T8163] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.883544][ T8163] bond2: (slave veth9): Enslaving as an active interface with a down link [ 126.894787][ T8163] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 126.902877][ T8163] vlan3: entered allmulticast mode [ 126.904529][ T8163] bond2: entered allmulticast mode [ 126.907099][ T8163] bond2: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 127.305154][ T8172] bond2: (slave veth0_to_bond): Releasing active interface [ 127.311839][ T8172] bond2: (slave veth9): Releasing active interface [ 127.327239][ T8172] netlink: 'syz.0.643': attribute type 10 has an invalid length. [ 127.568592][ T8179] netfs: Couldn't get user pages (rc=-14) [ 128.203945][ T8185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.648'. [ 128.297834][ T8189] ======================================================= [ 128.297834][ T8189] WARNING: The mand mount option has been deprecated and [ 128.297834][ T8189] and is ignored by this kernel. Remove the mand [ 128.297834][ T8189] option from the mount to silence this warning. [ 128.297834][ T8189] ======================================================= [ 128.605457][ T6062] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 128.778956][ T6062] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 128.783058][ T6062] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.789260][ T6062] usb 6-1: Product: syz [ 128.791455][ T6062] usb 6-1: Manufacturer: syz [ 128.803897][ T6062] usb 6-1: SerialNumber: syz [ 128.842849][ T8201] lo speed is unknown, defaulting to 1000 [ 128.979782][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 128.983287][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 128.986789][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 128.989489][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 129.253761][ T6062] rtl8150 6-1:1.0: couldn't reset the device [ 129.257524][ T6062] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 129.269397][ T6062] usb 6-1: USB disconnect, device number 5 [ 129.284723][ T8214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.659'. [ 129.365499][ T6725] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 129.517664][ T6725] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.520718][ T6725] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.524012][ T6725] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.533291][ T6725] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 129.536486][ T6725] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.540436][ T6725] usb 8-1: Product: syz [ 129.541944][ T6725] usb 8-1: Manufacturer: syz [ 129.543648][ T6725] usb 8-1: SerialNumber: syz [ 129.551714][ T6725] hub 8-1:1.0: bad descriptor, ignoring hub [ 129.554259][ T6725] hub 8-1:1.0: probe with driver hub failed with error -5 [ 129.759366][ T6725] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 129.771993][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 129.772003][ T40] audit: type=1804 audit(1756813017.652:95): pid=8222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.661" name="bus" dev="ramfs" ino=20394 res=1 errno=0 [ 129.781447][ T40] audit: type=1804 audit(1756813017.662:96): pid=8222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.661" name="bus" dev="ramfs" ino=20394 res=1 errno=0 [ 130.287755][ T8229] bridge1: entered allmulticast mode [ 130.800081][ T10] usb 8-1: USB disconnect, device number 4 [ 130.805819][ T10] usblp0: removed [ 130.910729][ T8243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.668'. [ 131.465500][ T8252] input: syz1 as /devices/virtual/input/input9 [ 131.635579][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'. [ 132.308675][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.826294][ T8274] netlink: 'syz.3.678': attribute type 1 has an invalid length. [ 132.829715][ T8274] netlink: 132 bytes leftover after parsing attributes in process `syz.3.678'. [ 132.833317][ T8274] netlink: 'syz.3.678': attribute type 2 has an invalid length. [ 132.836570][ T8274] netlink: 'syz.3.678': attribute type 1 has an invalid length. [ 132.839682][ T8274] netlink: 2 bytes leftover after parsing attributes in process `syz.3.678'. [ 132.856370][ T8274] lo speed is unknown, defaulting to 1000 [ 133.556068][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 133.715476][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 133.718951][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 133.721545][ T10] usb 5-1: config 0 has no interface number 0 [ 133.723572][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 133.727321][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 133.731319][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.734739][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.738916][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 133.741854][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.746495][ T10] usb 5-1: config 0 descriptor?? [ 133.751993][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 133.938184][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.684'. [ 134.504371][ T59] usb 5-1: USB disconnect, device number 5 [ 134.512051][ T59] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 135.295430][ T6062] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.459669][ T6062] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 135.462558][ T6062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.465293][ T6062] usb 5-1: Product: syz [ 135.467585][ T6062] usb 5-1: Manufacturer: syz [ 135.470424][ T6062] usb 5-1: SerialNumber: syz [ 135.666434][ T40] audit: type=1804 audit(1756813023.552:97): pid=8326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.696" name="bus" dev="ramfs" ino=22142 res=1 errno=0 [ 135.675076][ T40] audit: type=1804 audit(1756813023.552:98): pid=8326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.696" name="bus" dev="ramfs" ino=22142 res=1 errno=0 [ 135.917419][ T6062] rtl8150 5-1:1.0: couldn't reset the device [ 135.919667][ T6062] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 135.925724][ T6062] usb 5-1: USB disconnect, device number 6 [ 135.948029][ T8333] ubi0: attaching mtd0 [ 137.265551][ T61] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 137.415421][ T61] usb 7-1: Using ep0 maxpacket: 32 [ 137.419274][ T61] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 137.424157][ T61] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 137.428085][ T61] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 137.430610][ T61] usb 7-1: Product: syz [ 137.431923][ T61] usb 7-1: Manufacturer: syz [ 137.433368][ T61] usb 7-1: SerialNumber: syz [ 137.437257][ T61] usb 7-1: config 0 descriptor?? [ 137.439821][ T8364] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.756640][ T59] usb 7-1: USB disconnect, device number 5 [ 138.455318][ T8388] netlink: 'syz.1.714': attribute type 1 has an invalid length. [ 138.470651][ T8388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.553690][ T8388] bond1: (slave veth5): Enslaving as an active interface with a down link [ 138.565688][ T8391] bond1: (slave veth0_to_bond): making interface the new active one [ 138.568870][ T8391] veth0_to_bond: entered promiscuous mode [ 138.570865][ T8391] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 138.652212][ T8388] vlan2: entered allmulticast mode [ 138.654355][ T8388] bond1: entered allmulticast mode [ 138.656441][ T8388] veth0_to_bond: entered allmulticast mode [ 138.672494][ T8388] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 138.723582][ T40] audit: type=1804 audit(1756813026.602:99): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.715" name="/newroot/118/file1" dev="fuse" ino=1 res=1 errno=0 [ 138.732744][ T40] audit: type=1800 audit(1756813026.602:100): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.715" name="/" dev="fuse" ino=1 res=0 errno=0 [ 138.742971][ T40] audit: type=1800 audit(1756813026.602:101): pid=8393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.715" name="/" dev="fuse" ino=1 res=0 errno=0 [ 138.847905][ T40] audit: type=1804 audit(1756813026.732:102): pid=8402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.718" name="/newroot/170/file0" dev="tmpfs" ino=966 res=1 errno=0 [ 138.859867][ T40] audit: type=1326 audit(1756813026.732:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.1.718" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x0 [ 139.840324][ T8428] netlink: 'syz.0.727': attribute type 4 has an invalid length. [ 139.845298][ T8428] netlink: 'syz.0.727': attribute type 4 has an invalid length. [ 140.582329][ T40] audit: type=1804 audit(1756813028.462:104): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.732" name="bus" dev="ramfs" ino=23742 res=1 errno=0 [ 140.591974][ T40] audit: type=1804 audit(1756813028.472:105): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.732" name="bus" dev="ramfs" ino=23742 res=1 errno=0 [ 140.830552][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 141.043163][ T8464] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 141.049126][ T8464] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 141.092602][ T8466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.737'. [ 141.119962][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'. [ 141.462020][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'. [ 141.468611][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.742'. [ 141.832173][ T8485] netlink: 'syz.0.745': attribute type 1 has an invalid length. [ 141.846762][ T8485] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.863404][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.745'. [ 142.611541][ T40] audit: type=1804 audit(1756813030.492:106): pid=8507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.754" name="bus" dev="ramfs" ino=21186 res=1 errno=0 [ 142.619333][ T40] audit: type=1804 audit(1756813030.502:107): pid=8507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.754" name="bus" dev="ramfs" ino=21186 res=1 errno=0 [ 142.958583][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.755'. [ 143.042656][ T40] audit: type=1326 audit(1756813030.922:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz.3.756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 143.056702][ T40] audit: type=1326 audit(1756813030.922:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz.3.756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 143.063892][ T40] audit: type=1326 audit(1756813030.922:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz.3.756" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 143.071903][ T40] audit: type=1326 audit(1756813030.922:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz.3.756" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 143.079073][ T40] audit: type=1326 audit(1756813030.922:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz.3.756" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 143.086338][ T40] audit: type=1326 audit(1756813030.932:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz.3.756" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 143.093215][ T40] audit: type=1326 audit(1756813030.932:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz.3.756" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 143.150793][ T40] audit: type=1326 audit(1756813031.032:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz.3.756" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 143.275451][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 143.435575][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 143.448708][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 143.454434][ T10] usb 8-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 143.458485][ T10] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 597 [ 143.462035][ T10] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.473160][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.476367][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.479113][ T10] usb 8-1: Product: syz [ 143.480819][ T10] usb 8-1: Manufacturer: syz [ 143.482474][ T10] usb 8-1: SerialNumber: syz [ 143.894112][ T10] cdc_ncm 8-1:1.0: bind() failure [ 143.907710][ T10] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 143.909847][ T10] cdc_ncm 8-1:1.1: bind() failure [ 143.918953][ T10] usb 8-1: USB disconnect, device number 5 [ 144.093186][ T8526] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.168391][ T8526] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.242033][ T8526] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.372364][ T8526] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.534724][ T70] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.544199][ T1140] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.553725][ T70] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.563416][ T70] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.630911][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'. [ 146.241346][ T8578] netlink: 'syz.3.777': attribute type 1 has an invalid length. [ 146.280113][ T8578] bond3: (slave veth7): Enslaving as an active interface with a down link [ 146.300699][ T8578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.777'. [ 146.305297][ T8578] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.475455][ T5992] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 146.478974][ T5992] Bluetooth: hci3: Injecting HCI hardware error event [ 146.482092][ T5992] Bluetooth: hci3: hardware error 0x00 [ 147.024886][ T8595] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.781'. [ 147.028172][ T8595] netlink: zone id is out of range [ 147.030144][ T8595] netlink: zone id is out of range [ 147.031778][ T8595] netlink: zone id is out of range [ 148.545952][ T5992] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 148.988108][ T59] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 149.165729][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 149.168660][ T59] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 149.171309][ T59] usb 6-1: config 0 has no interface number 0 [ 149.173638][ T59] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 149.178001][ T59] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 149.182478][ T59] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 149.186548][ T59] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 149.190660][ T59] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 149.193525][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.197629][ T59] usb 6-1: config 0 descriptor?? [ 149.206423][ T59] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 149.865907][ T12] veth0_to_bond: left promiscuous mode [ 149.938353][ T8655] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 149.940433][ T8655] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 149.943798][ T8655] vhci_hcd vhci_hcd.0: Device attached [ 149.949104][ T8656] vhci_hcd: connection closed [ 149.949259][ T12] vhci_hcd: stop threads [ 149.952748][ T12] vhci_hcd: release socket [ 149.954324][ T12] vhci_hcd: disconnect device [ 150.287407][ T40] kauditd_printk_skb: 93 callbacks suppressed [ 150.287422][ T40] audit: type=1800 audit(1756813038.172:209): pid=8668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.801" name="file1" dev="tmpfs" ino=1237 res=0 errno=0 [ 150.436833][ T59] usb 6-1: USB disconnect, device number 6 [ 150.442077][ T59] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 150.445455][ T1471] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 150.599493][ T1471] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 150.602231][ T1471] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 150.605804][ T1471] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 150.608620][ T1471] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 150.612486][ T1471] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 150.618089][ T1471] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 150.621941][ T1471] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 150.625334][ T1471] usb 7-1: Product: syz [ 150.627296][ T1471] usb 7-1: Manufacturer: syz [ 150.636705][ T1471] cdc_wdm 7-1:1.0: skipping garbage [ 150.638969][ T1471] cdc_wdm 7-1:1.0: skipping garbage [ 150.642679][ T1471] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 150.645175][ T1471] cdc_wdm 7-1:1.0: Unknown control protocol [ 150.844488][ T6725] usb 7-1: USB disconnect, device number 6 [ 150.973292][ T8678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.804'. [ 151.054422][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.805'. [ 151.122009][ T8680] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 151.127024][ T8680] team0 (unregistering): Port device team_slave_0 removed [ 151.132835][ T8680] team0 (unregistering): Failed to send options change via netlink (err -105) [ 151.136709][ T8680] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 151.140411][ T8680] team0 (unregistering): Port device team_slave_1 removed [ 151.422893][ T40] audit: type=1804 audit(1756813039.302:210): pid=8697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.811" name="/newroot/187/file1" dev="fuse" ino=1 res=1 errno=0 [ 151.431927][ T40] audit: type=1800 audit(1756813039.302:211): pid=8697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.811" name="/" dev="fuse" ino=1 res=0 errno=0 [ 151.472141][ T8699] tipc: Invalid UDP bearer configuration [ 151.472171][ T8699] tipc: Enabling of bearer rejected, failed to enable media [ 151.505452][ T6725] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 151.669584][ T6725] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 151.673210][ T6725] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 151.682295][ T6725] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 151.702306][ T6725] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 151.707924][ T6725] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 151.714818][ T6725] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 151.717975][ T6725] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 151.720454][ T6725] usb 7-1: Product: syz [ 151.721780][ T6725] usb 7-1: Manufacturer: syz [ 151.738745][ T6725] cdc_wdm 7-1:1.0: skipping garbage [ 151.740458][ T6725] cdc_wdm 7-1:1.0: skipping garbage [ 151.749216][ T6725] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 151.751086][ T6725] cdc_wdm 7-1:1.0: Unknown control protocol [ 151.945156][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.947109][ C3] cdc_wdm 7-1:1.0: Cannot schedule work [ 151.949408][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.951404][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.953412][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.955398][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.957549][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.959832][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.962002][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.963951][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.965983][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.968241][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.970324][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.972110][ C3] cdc_wdm 7-1:1.0: Cannot schedule work [ 151.974001][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.976624][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.978905][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.981199][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.983127][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.985055][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.987214][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.989327][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.991314][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.993090][ C3] cdc_wdm 7-1:1.0: Cannot schedule work [ 151.995003][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.997049][ C3] cdc_wdm 7-1:1.0: Stall on int endpoint [ 151.999229][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 152.003051][ T59] usb 7-1: USB disconnect, device number 7 [ 152.975440][ T10] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 153.137043][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.140219][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 153.144710][ T10] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 153.147776][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 153.150290][ T10] usb 5-1: Product: syz [ 153.151618][ T10] usb 5-1: Manufacturer: syz [ 153.153373][ T10] usb 5-1: SerialNumber: syz [ 153.156263][ T10] usb 5-1: config 0 descriptor?? [ 153.386681][ T6725] usb 5-1: USB disconnect, device number 7 [ 153.427489][ T8757] syzkaller0: entered promiscuous mode [ 153.429319][ T8757] syzkaller0: entered allmulticast mode [ 154.054680][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 154.546650][ T8791] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 154.554689][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.845'. [ 155.950114][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.854'. [ 156.000924][ T8819] kvm: pic: level sensitive irq not supported [ 156.009397][ T8819] kvm: pic: single mode not supported [ 156.011459][ T8819] kvm: pic: level sensitive irq not supported [ 156.014803][ T8819] kvm: pic: level sensitive irq not supported [ 156.022619][ T8819] kvm: pic: single mode not supported [ 156.028865][ T8819] kvm: pic: single mode not supported [ 156.030602][ T8819] kvm: pic: level sensitive irq not supported [ 156.036872][ T8817] tipc: Disabling bearer [ 156.202453][ T8838] : entered promiscuous mode [ 156.203545][ T8839] overlayfs: failed to clone upperpath [ 156.209609][ T8838] : left promiscuous mode [ 157.203368][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.872'. [ 158.409775][ T8893] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 159.801947][ T8924] bridge0: port 1(vxlan0) entered blocking state [ 159.804119][ T8924] bridge0: port 1(vxlan0) entered disabled state [ 159.806731][ T8924] vxlan0: entered allmulticast mode [ 159.809154][ T8924] vxlan0: entered promiscuous mode [ 160.465847][ T63] Bluetooth: hci2: command 0x0406 tx timeout [ 160.901870][ T8963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.903'. [ 160.912802][ T46] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.915690][ T46] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.935968][ T1471] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.515710][ T1471] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.665577][ T1471] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.910190][ T8984] netlink: 'syz.0.910': attribute type 12 has an invalid length. [ 162.479697][ T40] audit: type=1800 audit(1756813050.362:212): pid=8994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.913" name="file1" dev="tmpfs" ino=1458 res=0 errno=0 [ 164.341382][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.927'. [ 164.432581][ T9036] ptrace attach of "/syz-executor exec"[5976] was attempted by "/syz-executor exec"[9036] [ 164.802865][ T40] audit: type=1326 audit(1756813052.682:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 164.809763][ T40] audit: type=1326 audit(1756813052.682:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 164.816501][ T40] audit: type=1326 audit(1756813052.682:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.933" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 164.823779][ T40] audit: type=1326 audit(1756813052.682:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 164.830718][ T40] audit: type=1326 audit(1756813052.682:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 164.840011][ T40] audit: type=1326 audit(1756813052.682:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.933" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 164.848246][ T40] audit: type=1326 audit(1756813052.682:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 164.859832][ T40] audit: type=1326 audit(1756813052.682:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 164.868852][ T40] audit: type=1326 audit(1756813052.682:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.933" exe="/syz-executor" sig=0 arch=40000003 syscall=220 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 165.105681][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.287912][ T1471] libceph: connect (1)[c::]:6789 error -101 [ 165.290145][ T1471] libceph: mon0 (1)[c::]:6789 connect error [ 165.547948][ T1471] libceph: connect (1)[c::]:6789 error -101 [ 165.550647][ T1471] libceph: mon0 (1)[c::]:6789 connect error [ 165.786881][ T9065] overlayfs: failed to clone upperpath [ 166.056373][ T1471] libceph: connect (1)[c::]:6789 error -101 [ 166.058383][ T1471] libceph: mon0 (1)[c::]:6789 connect error [ 166.060430][ T9058] ceph: No mds server is up or the cluster is laggy [ 166.467773][ T9084] lo speed is unknown, defaulting to 1000 [ 166.470158][ T9084] lo speed is unknown, defaulting to 1000 [ 166.480544][ T9084] lo speed is unknown, defaulting to 1000 [ 166.600029][ T9084] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 166.733159][ T9084] lo speed is unknown, defaulting to 1000 [ 166.780756][ T9084] lo speed is unknown, defaulting to 1000 [ 166.833968][ T9084] lo speed is unknown, defaulting to 1000 [ 166.853990][ T9084] lo speed is unknown, defaulting to 1000 [ 167.268514][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'. [ 167.580353][ T9105] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 168.161591][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 168.161603][ T40] audit: type=1326 audit(1756813056.042:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.956" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 168.178487][ T40] audit: type=1326 audit(1756813056.042:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.956" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 168.187708][ T40] audit: type=1326 audit(1756813056.042:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.956" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 168.199939][ T40] audit: type=1326 audit(1756813056.042:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.956" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 168.223285][ T40] audit: type=1326 audit(1756813056.042:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.956" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 168.256458][ T40] audit: type=1326 audit(1756813056.052:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.956" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 168.265243][ T40] audit: type=1326 audit(1756813056.052:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.956" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 168.275710][ T40] audit: type=1326 audit(1756813056.052:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.956" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 168.285032][ T40] audit: type=1326 audit(1756813056.052:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.956" exe="/syz-executor" sig=0 arch=40000003 syscall=220 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 168.294861][ T9130] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 168.297665][ T9130] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 168.301110][ T9130] vhci_hcd vhci_hcd.0: Device attached [ 168.312341][ T40] audit: type=1326 audit(1756813056.052:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9123 comm="syz.1.956" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 168.323662][ T9130] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 168.326474][ T9130] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 168.331676][ T9130] vhci_hcd vhci_hcd.0: Device attached [ 168.333457][ T9134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.958'. [ 168.337942][ T9130] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 168.367691][ T9137] vhci_hcd: connection closed [ 168.367894][ T1140] vhci_hcd: stop threads [ 168.370925][ T9133] vhci_hcd: connection closed [ 168.371041][ T1140] vhci_hcd: release socket [ 168.374028][ T1140] vhci_hcd: disconnect device [ 168.375902][ T1140] vhci_hcd: stop threads [ 168.377270][ T1140] vhci_hcd: release socket [ 168.378720][ T1140] vhci_hcd: disconnect device [ 168.529685][ T9150] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 169.126592][ T9227] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 169.158308][ T9227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.216505][ T9227] bond1: (slave geneve2): making interface the new active one [ 169.221671][ T9227] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 169.230352][ T9187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.233195][ T9173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.238174][ T9173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.241867][ T9173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.346011][ T9169] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.357805][ T9169] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.377112][ T1471] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.455849][ T1471] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.696976][ T9239] netlink: 'syz.3.969': attribute type 10 has an invalid length. [ 169.701761][ T9239] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 169.876967][ T1471] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.877714][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.971'. [ 170.235565][ T63] Bluetooth: hci1: command 0x0406 tx timeout [ 173.105597][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 173.605448][ T1471] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 173.770906][ T1471] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 173.773572][ T1471] usb 7-1: config 0 has no interface number 0 [ 173.777135][ T1471] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 173.779918][ T1471] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.782388][ T1471] usb 7-1: Product: syz [ 173.783928][ T1471] usb 7-1: Manufacturer: syz [ 173.786007][ T1471] usb 7-1: SerialNumber: syz [ 173.790177][ T1471] usb 7-1: config 0 descriptor?? [ 173.794936][ T1471] usb-storage 7-1:0.20: USB Mass Storage device detected [ 173.803073][ T1471] usb-storage 7-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 173.905666][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.000381][ T61] usb 7-1: USB disconnect, device number 8 [ 175.954069][ T9304] loop7: detected capacity change from 0 to 16384 [ 176.423106][ T9320] netlink: 'syz.1.993': attribute type 1 has an invalid length. [ 176.464125][ T9320] bond2: (slave gretap1): making interface the new active one [ 176.468408][ T9320] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 176.484932][ T9320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.993'. [ 176.491376][ T9320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.565528][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 176.717354][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 176.720805][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.724585][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 176.728606][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 176.731212][ T24] usb 5-1: Product: syz [ 176.732767][ T24] usb 5-1: Manufacturer: syz [ 176.734513][ T24] usb 5-1: SerialNumber: syz [ 176.738242][ T24] usb 5-1: config 0 descriptor?? [ 176.744133][ T24] usb 5-1: selecting invalid altsetting 0 [ 177.091509][ T6725] usb 5-1: USB disconnect, device number 8 [ 177.228771][ T9337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.998'. [ 180.029808][ T9396] bridge_slave_0: entered promiscuous mode [ 180.112878][ T9401] syzkaller0: entered promiscuous mode [ 180.115014][ T9401] syzkaller0: entered allmulticast mode [ 180.305663][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.219906][ T9412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.303426][ T9418] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 181.306240][ T9418] overlayfs: failed to set xattr on upper [ 181.308517][ T9418] overlayfs: ...falling back to redirect_dir=nofollow. [ 181.310651][ T9418] overlayfs: ...falling back to index=off. [ 181.312824][ T9418] overlayfs: ...falling back to uuid=null. [ 185.423815][ T40] audit: type=1326 audit(1756813073.302:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9482 comm="syz.1.1036" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x0 [ 187.959678][ T9556] netlink: 'syz.0.1057': attribute type 10 has an invalid length. [ 188.262537][ T9564] lo: entered allmulticast mode [ 188.268069][ T9564] tunl0: entered allmulticast mode [ 188.272147][ T9564] gre0: entered allmulticast mode [ 188.274517][ T9564] gretap0: entered allmulticast mode [ 188.278756][ T9564] erspan0: entered allmulticast mode [ 188.281273][ T9564] ip_vti0: entered allmulticast mode [ 188.283893][ T9564] ip6_vti0: entered allmulticast mode [ 188.286592][ T9564] sit0: entered allmulticast mode [ 188.288926][ T9564] ip6tnl0: entered allmulticast mode [ 188.291432][ T9564] ip6gre0: entered allmulticast mode [ 188.293896][ T9564] syz_tun: entered allmulticast mode [ 188.296401][ T9564] ip6gretap0: entered allmulticast mode [ 188.298966][ T9564] bridge0: entered allmulticast mode [ 188.301464][ T9564] bond0: entered allmulticast mode [ 188.303727][ T9564] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 188.307779][ T9564] dummy0: entered allmulticast mode [ 188.310711][ T9564] nlmon0: entered allmulticast mode [ 188.313145][ T9564] caif0: entered allmulticast mode [ 188.315809][ T9564] batadv0: entered allmulticast mode [ 188.318214][ T9564] vxcan0: entered allmulticast mode [ 188.320271][ T9564] vxcan1: entered allmulticast mode [ 188.322525][ T9564] veth0: entered allmulticast mode [ 188.324838][ T9564] veth1: entered allmulticast mode [ 188.327172][ T9564] wg0: entered allmulticast mode [ 188.329366][ T9564] wg1: entered allmulticast mode [ 188.332222][ T9564] wg2: entered allmulticast mode [ 188.334480][ T9564] veth0_to_bridge: entered allmulticast mode [ 188.337398][ T9564] bridge_slave_0: entered allmulticast mode [ 188.340025][ T9564] veth1_to_bridge: entered allmulticast mode [ 188.342771][ T9564] bridge_slave_1: entered allmulticast mode [ 188.345593][ T9564] veth0_to_bond: entered allmulticast mode [ 188.348221][ T9564] bond_slave_0: entered allmulticast mode [ 188.350721][ T9564] veth1_to_bond: entered allmulticast mode [ 188.353300][ T9564] bond_slave_1: entered allmulticast mode [ 188.355837][ T9564] veth0_to_team: entered allmulticast mode [ 188.358425][ T9564] team_slave_0: entered allmulticast mode [ 188.360619][ T9564] veth1_to_team: entered allmulticast mode [ 188.362691][ T9564] team_slave_1: entered allmulticast mode [ 188.364705][ T9564] veth0_to_batadv: entered allmulticast mode [ 188.367064][ T9564] batadv_slave_0: entered allmulticast mode [ 188.369194][ T9564] veth1_to_batadv: entered allmulticast mode [ 188.371289][ T9564] batadv_slave_1: entered allmulticast mode [ 188.373323][ T9564] xfrm0: entered allmulticast mode [ 188.375115][ T9564] veth0_to_hsr: entered allmulticast mode [ 188.377833][ T9564] hsr_slave_0: entered allmulticast mode [ 188.379859][ T9564] veth1_to_hsr: entered allmulticast mode [ 188.381932][ T9564] hsr_slave_1: entered allmulticast mode [ 188.383896][ T9564] hsr0: entered allmulticast mode [ 188.386240][ T9564] veth1_virt_wifi: entered allmulticast mode [ 188.388800][ T9564] veth0_virt_wifi: entered allmulticast mode [ 188.391045][ T9564] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 188.393511][ T9564] veth1_vlan: entered allmulticast mode [ 188.395608][ T9564] veth0_vlan: entered allmulticast mode [ 188.397626][ T9564] vlan0: left promiscuous mode [ 188.399458][ T9564] vlan0: entered allmulticast mode [ 188.401258][ T9564] vlan1: entered allmulticast mode [ 188.403097][ T9564] macvlan0: entered allmulticast mode [ 188.404955][ T9564] macvlan1: entered allmulticast mode [ 188.407124][ T9564] ipvlan0: entered allmulticast mode [ 188.409248][ T9564] ipvlan1: entered allmulticast mode [ 188.411181][ T9564] veth1_macvtap: entered allmulticast mode [ 188.413197][ T9564] veth0_macvtap: entered allmulticast mode [ 188.415236][ T9564] macvtap0: entered allmulticast mode [ 188.417506][ T9564] macsec0: entered allmulticast mode [ 188.419709][ T9564] geneve0: entered allmulticast mode [ 188.421531][ T9564] geneve1: entered allmulticast mode [ 188.423372][ T9564] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 188.426127][ T9564] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 188.428755][ T9564] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 188.431335][ T9564] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 188.433888][ T9564] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 188.438165][ T9564] ieee802154 phy1 wpan1: entered allmulticast mode [ 188.440310][ T9564] veth2: entered allmulticast mode [ 188.442109][ T9564] veth3: entered allmulticast mode [ 188.443815][ T9564] macsec1: entered allmulticast mode [ 188.450269][ T9564] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 188.453182][ T9564] bond2: entered allmulticast mode [ 188.454955][ T9564] batadv1: entered allmulticast mode [ 188.458129][ T9564] bond1: entered allmulticast mode [ 188.461363][ T9564] erspan1: entered allmulticast mode [ 188.464248][ T9564] veth4: entered allmulticast mode [ 188.466565][ T9564] veth5: entered allmulticast mode [ 188.473145][ T9564] geneve2: entered allmulticast mode [ 188.479596][ T9564] bridge1: entered allmulticast mode [ 188.484834][ T9564] bond3: entered allmulticast mode [ 188.487736][ T9564] veth6: entered allmulticast mode [ 188.491203][ T9564] veth7: entered allmulticast mode [ 188.494009][ T9564] bridge2: entered allmulticast mode [ 188.499334][ T9564] bridge3: entered allmulticast mode [ 188.502284][ T9220] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 188.506177][ T9220] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 188.509773][ T9220] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 188.513441][ T9220] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 189.615115][ T9589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1069'. [ 189.647955][ T9589] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 190.184981][ T9596] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 191.185524][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.294311][ T9609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1076'. [ 191.324995][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'. [ 191.332775][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 191.535457][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 191.715643][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 191.722825][ T24] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 191.725801][ T24] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 191.728497][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 191.731326][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 191.736871][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 191.739849][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 191.743798][ T24] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 191.746857][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.768827][ T24] usb 7-1: config 0 descriptor?? [ 191.983642][ T24] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 192.070134][ T9592] Set syz1 is full, maxelem 65536 reached [ 192.150344][ T9622] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 192.257211][ T1471] usb 7-1: USB disconnect, device number 9 [ 192.266255][ T1471] usblp0: removed [ 193.688267][ T9650] macsec1: entered promiscuous mode [ 193.690589][ T9650] macsec1: entered allmulticast mode [ 193.758418][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.329546][ T9664] bond4: entered allmulticast mode [ 194.332083][ T9664] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.025453][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 195.643176][ T9703] Set syz1 is full, maxelem 65536 reached [ 196.049438][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1117'. [ 196.093622][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'. [ 196.552557][ T9724] syzkaller0: entered promiscuous mode [ 196.554772][ T9724] syzkaller0: entered allmulticast mode [ 196.688188][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 196.840957][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.844584][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.848398][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.852731][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.856471][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.860286][ T10] usb 7-1: config 0 descriptor?? [ 197.281733][ T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 197.644676][ C1] plantronics 0003:047F:FFFF.0004: hid_field_extract() called with n (132) > 32! (syz.1.1114) [ 198.605563][ T10] usb 7-1: reset high-speed USB device number 10 using dummy_hcd [ 199.477072][ T40] audit: type=1326 audit(1756813087.362:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9750 comm="syz.1.1120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 199.489301][ T40] audit: type=1326 audit(1756813087.362:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9750 comm="syz.1.1120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 199.497201][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 199.498937][ T40] audit: type=1326 audit(1756813087.362:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9750 comm="syz.1.1120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 199.515749][ T40] audit: type=1326 audit(1756813087.362:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9750 comm="syz.1.1120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 199.522935][ T40] audit: type=1326 audit(1756813087.362:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9750 comm="syz.1.1120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 199.537825][ T40] audit: type=1326 audit(1756813087.362:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9750 comm="syz.1.1120" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 199.545413][ T40] audit: type=1326 audit(1756813087.362:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9750 comm="syz.1.1120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 199.552499][ T40] audit: type=1326 audit(1756813087.362:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9750 comm="syz.1.1120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 199.565428][ T40] audit: type=1326 audit(1756813087.362:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9750 comm="syz.1.1120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 199.573301][ T40] audit: type=1326 audit(1756813087.362:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9750 comm="syz.1.1120" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 199.868506][ T9769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1125'. [ 200.268878][ T6048] usb 7-1: USB disconnect, device number 10 [ 200.558514][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1132'. [ 200.864593][ T9795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1135'. [ 200.956928][ T9793] fuse: Unknown parameter '%uG'uq]mj/Sk#ѳuZpSj3kS}ǂ m~'~C)ⴣ6~@6L7jۜkҽ#ePv<6l$"jM~Ysi_#r8(M-}f({T' [ 202.285442][ T6725] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 202.436685][ T6725] usb 5-1: config 0 has no interfaces? [ 202.439171][ T6725] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 202.442098][ T6725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.452430][ T6725] usb 5-1: config 0 descriptor?? [ 202.694178][ T6725] usb 5-1: USB disconnect, device number 9 [ 203.108595][ T9835] xfrm0: entered promiscuous mode [ 203.112315][ T9835] xfrm0: entered allmulticast mode [ 203.533647][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1149'. [ 203.540568][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1149'. [ 204.025878][ T9176] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.028688][ T9176] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.031528][ T9176] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.034318][ T9176] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.573870][ T9864] nbd: must specify a device to reconfigure [ 204.635977][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1156'. [ 204.660250][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1156'. [ 205.156957][ T9882] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1163'. [ 205.159865][ T9882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1163'. [ 205.162630][ T9882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1163'. [ 205.165907][ T9882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1163'. [ 205.168755][ T9882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1163'. [ 205.177200][ T9882] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1163'. [ 208.545441][ T5992] Bluetooth: hci2: command 0x0406 tx timeout [ 209.104680][ T9958] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.138400][ T9958] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 209.142644][ T9958] bond5: (slave macvlan2): Enslaving as a backup interface with an up link [ 209.206546][ T1189] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 209.316341][ T46] bond5: (slave macvlan2): link status up again after 0 ms [ 209.320508][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 209.323001][ T46] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 209.425686][ T1189] bond5: (slave macvlan2): failed to get link speed/duplex [ 209.545561][ T1189] bond5: (slave macvlan2): failed to get link speed/duplex [ 209.665518][ T1189] bond5: (slave macvlan2): failed to get link speed/duplex [ 209.775458][ T9220] bond5: (slave macvlan2): failed to get link speed/duplex [ 209.885549][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 209.992802][ T9969] netlink: 'syz.2.1189': attribute type 4 has an invalid length. [ 210.025578][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 211.296344][ T9984] netlink: 'syz.1.1193': attribute type 1 has an invalid length. [ 211.310410][ T9984] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.326173][ T9984] bond3: (slave geneve2): making interface the new active one [ 211.330440][ T9984] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 213.197181][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1202'. [ 213.210628][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1202'. [ 213.357903][T10023] No buffer was provided with the request [ 214.285757][ T46] net_ratelimit: 37 callbacks suppressed [ 214.285769][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 214.296625][T10029] input: syz1 as /devices/virtual/input/input11 [ 214.297404][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1208'. [ 214.395729][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 214.505532][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 214.512607][ T1471] libceph: connect (1)[c::]:6789 error -22 [ 214.514555][ T1471] libceph: mon0 (1)[c::]:6789 connect error [ 214.615614][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 214.725528][ T9176] bond5: (slave macvlan2): failed to get link speed/duplex [ 214.736260][T10037] ceph: No mds server is up or the cluster is laggy [ 214.775922][ T1471] libceph: connect (1)[c::]:6789 error -22 [ 214.780431][ T1471] libceph: mon0 (1)[c::]:6789 connect error [ 214.845754][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 214.955534][ T1189] bond5: (slave macvlan2): failed to get link speed/duplex [ 215.065475][ T9176] bond5: (slave macvlan2): failed to get link speed/duplex [ 215.175536][ T9176] bond5: (slave macvlan2): failed to get link speed/duplex [ 215.286884][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 215.559916][T10062] netlink: 'syz.2.1219': attribute type 5 has an invalid length. [ 216.699565][T10086] MPI: mpi too large (124808 bits) [ 216.738925][T10090] xfrm0: entered promiscuous mode [ 216.741150][T10090] xfrm0: entered allmulticast mode [ 216.876204][T10095] netlink: 'syz.2.1228': attribute type 1 has an invalid length. [ 216.878608][T10095] netlink: 'syz.2.1228': attribute type 4 has an invalid length. [ 216.881319][T10095] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.1228'. [ 218.847380][T10130] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1239'. [ 219.058323][T10137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1241'. [ 219.355491][ T9176] net_ratelimit: 34 callbacks suppressed [ 219.355513][ T9176] bond5: (slave macvlan2): failed to get link speed/duplex [ 219.485679][ T1189] bond5: (slave macvlan2): failed to get link speed/duplex [ 219.595459][ T9176] bond5: (slave macvlan2): failed to get link speed/duplex [ 219.705580][ T1189] bond5: (slave macvlan2): failed to get link speed/duplex [ 219.815610][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 219.925425][ T9176] bond5: (slave macvlan2): failed to get link speed/duplex [ 220.035798][ T9176] bond5: (slave macvlan2): failed to get link speed/duplex [ 220.045433][T10141] syz.1.1242 (10141) used greatest stack depth: 17272 bytes left [ 220.155457][ T9176] bond5: (slave macvlan2): failed to get link speed/duplex [ 220.265648][ T9176] bond5: (slave macvlan2): failed to get link speed/duplex [ 220.385802][ T1140] bond5: (slave macvlan2): failed to get link speed/duplex [ 220.742496][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 220.742513][ T40] audit: type=1804 audit(1756813108.622:297): pid=10163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1248" name="file0" dev="ramfs" ino=28203 res=1 errno=0 [ 221.403322][T10172] netlink: 'syz.1.1252': attribute type 1 has an invalid length. [ 221.420708][T10172] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.446354][T10172] bond4: entered promiscuous mode [ 221.668039][T10184] siw: device registration error -23 [ 221.707169][T10186] netlink: 'syz.1.1257': attribute type 39 has an invalid length. [ 221.780568][T10186] veth0_macvtap: left promiscuous mode [ 221.927697][T10191] lo speed is unknown, defaulting to 1000 [ 222.411914][T10201] ubi31: attaching mtd0 [ 222.417608][T10201] ubi31: scanning is finished [ 222.419927][T10201] ubi31: empty MTD device detected [ 222.594036][T10201] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 222.596763][T10201] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 222.599466][T10201] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 222.602396][T10201] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 222.605173][T10201] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 222.607749][T10201] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 222.610845][T10201] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3096548591 [ 222.614575][T10201] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 222.621030][T10205] ubi31: background thread "ubi_bgt31d" started, PID 10205 [ 223.083365][T10214] bridge: RTM_NEWNEIGH with invalid ether address [ 223.565549][ T1471] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 223.746958][ T1471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.750303][ T1471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.753293][ T1471] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.757678][ T1471] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.760446][ T1471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.764901][ T1471] usb 5-1: config 0 descriptor?? [ 223.818645][T10227] netlink: 'syz.2.1269': attribute type 1 has an invalid length. [ 223.838098][T10227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.863756][T10227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.867108][T10227] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 223.872525][T10227] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 223.922113][T10229] veth9: entered promiscuous mode [ 223.925903][T10229] bond2: (slave veth9): Enslaving as an active interface with a down link [ 223.948128][T10229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1269'. [ 223.951373][T10229] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.183783][ T1471] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 224.460222][ T6048] usb 5-1: USB disconnect, device number 10 [ 224.465707][ T1189] net_ratelimit: 33 callbacks suppressed [ 224.465752][ T1189] bond5: (slave macvlan2): failed to get link speed/duplex [ 224.466253][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.585767][ T1140] bond5: (slave macvlan2): failed to get link speed/duplex [ 224.705586][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 224.815497][ T1140] bond5: (slave macvlan2): failed to get link speed/duplex [ 224.936944][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 225.045498][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 225.105717][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.155743][ T1140] bond5: (slave macvlan2): failed to get link speed/duplex [ 225.265495][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 225.375629][ T1189] bond5: (slave macvlan2): failed to get link speed/duplex [ 225.496053][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 225.669523][T10242] netlink: 'syz.3.1273': attribute type 1 has an invalid length. [ 225.698424][T10242] 8021q: adding VLAN 0 to HW filter on device bond5 [ 225.714560][T10247] lo speed is unknown, defaulting to 1000 [ 225.757696][T10242] bond5: (slave geneve3): making interface the new active one [ 225.794209][T10242] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 225.838442][ T9204] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.843606][ T9204] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.872928][T10251] bond5: entered promiscuous mode [ 225.875304][T10251] geneve3: entered promiscuous mode [ 225.949551][ T9204] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.952511][ T9204] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.081240][T10257] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 226.105067][T10257] 8021q: adding VLAN 0 to HW filter on device bond6 [ 226.171036][T10257] vlan2: entered promiscuous mode [ 226.172810][T10257] bond6: entered promiscuous mode [ 226.174530][T10257] vlan2: entered allmulticast mode [ 226.176971][T10257] bond6: entered allmulticast mode [ 226.216506][T10257] bond6: (slave gretap1): making interface the new active one [ 226.219035][T10257] gretap1: entered promiscuous mode [ 226.228625][T10257] gretap1: entered allmulticast mode [ 226.236684][T10257] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 226.287235][T10249] netlink: 'syz.0.1280': attribute type 13 has an invalid length. [ 226.573969][T10249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.625143][ T53] lo speed is unknown, defaulting to 1000 [ 226.627082][ T53] syz2: Port: 1 Link ACTIVE [ 226.639005][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 226.681694][T10267] lo speed is unknown, defaulting to 1000 [ 226.782007][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 227.761422][T10291] trusted_key: syz.1.1285 sent an empty control message without MSG_MORE. [ 228.037596][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'. [ 228.048889][T10300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1288'. [ 228.415578][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 228.568514][ T10] usb 6-1: config 9 has an invalid interface number: 170 but max is 2 [ 228.572170][ T10] usb 6-1: config 9 has an invalid interface number: 35 but max is 2 [ 228.576051][ T10] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 228.580346][ T10] usb 6-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 228.583936][ T10] usb 6-1: config 9 has no interface number 0 [ 228.587978][ T10] usb 6-1: config 9 has no interface number 1 [ 228.590236][ T10] usb 6-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 228.594780][ T10] usb 6-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 228.598422][ T10] usb 6-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 228.602612][ T10] usb 6-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 228.607056][ T10] usb 6-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 228.610450][ T10] usb 6-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 228.614321][ T10] usb 6-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.618600][ T10] usb 6-1: config 9 interface 170 has no altsetting 0 [ 228.620728][ T10] usb 6-1: config 9 interface 35 has no altsetting 0 [ 228.624507][ T10] usb 6-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 228.627636][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.630269][ T10] usb 6-1: Product: Ј [ 228.631635][ T10] usb 6-1: Manufacturer: 䰊 [ 228.633170][ T10] usb 6-1: SerialNumber: syz [ 228.643486][T10302] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 228.864574][T10302] cgroup: noprefix used incorrectly [ 228.877535][ T10] ftdi_sio 6-1:9.170: FTDI USB Serial Device converter detected [ 228.883715][ T10] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 228.891470][ T10] ftdi_sio 6-1:9.35: FTDI USB Serial Device converter detected [ 228.894538][ T10] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 228.899685][ T10] usb 6-1: USB disconnect, device number 7 [ 228.903783][ T10] ftdi_sio 6-1:9.170: device disconnected [ 228.907812][ T10] ftdi_sio 6-1:9.35: device disconnected [ 229.483469][ T40] audit: type=1804 audit(1756813117.362:298): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1291" name="/newroot/292/file1" dev="fuse" ino=1 res=1 errno=0 [ 229.498097][ T40] audit: type=1800 audit(1756813117.362:299): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1291" name="/" dev="fuse" ino=1 res=0 errno=0 [ 229.518201][ T9220] net_ratelimit: 26 callbacks suppressed [ 229.518219][ T9220] bond5: (slave macvlan2): failed to get link speed/duplex [ 229.646965][ T9176] bond5: (slave macvlan2): failed to get link speed/duplex [ 229.757623][ T9220] bond5: (slave macvlan2): failed to get link speed/duplex [ 229.876844][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 229.985758][ T9176] bond5: (slave macvlan2): failed to get link speed/duplex [ 230.095553][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 230.215520][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 230.326127][ T9176] bond5: (slave macvlan2): failed to get link speed/duplex [ 230.469999][ T1140] bond5: (slave macvlan2): failed to get link speed/duplex [ 230.576891][ T9176] bond5: (slave macvlan2): failed to get link speed/duplex [ 233.787996][ T40] audit: type=1804 audit(1756813121.602:300): pid=10387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1312" name="file0" dev="ramfs" ino=27618 res=1 errno=0 [ 234.537236][ T9204] net_ratelimit: 34 callbacks suppressed [ 234.537248][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 234.547833][T10397] netlink: 'syz.0.1315': attribute type 1 has an invalid length. [ 234.572111][T10397] 8021q: adding VLAN 0 to HW filter on device bond6 [ 234.594115][T10397] 8021q: adding VLAN 0 to HW filter on device bond6 [ 234.598218][T10397] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 234.605592][T10397] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 234.645569][ T9220] bond5: (slave macvlan2): failed to get link speed/duplex [ 234.782808][T10397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1315'. [ 234.802522][T10399] veth11: entered promiscuous mode [ 234.807989][T10399] bond6: (slave veth11): Enslaving as an active interface with a down link [ 234.811438][T10397] 8021q: adding VLAN 0 to HW filter on device bond6 [ 234.815802][ T9220] bond5: (slave macvlan2): failed to get link speed/duplex [ 234.926041][ T9217] bond5: (slave macvlan2): failed to get link speed/duplex [ 235.035471][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 235.145499][ T9176] bond5: (slave macvlan2): failed to get link speed/duplex [ 235.255553][ T1140] bond5: (slave macvlan2): failed to get link speed/duplex [ 235.365462][ T1140] bond5: (slave macvlan2): failed to get link speed/duplex [ 235.400051][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 235.480634][ T9176] bond5: (slave macvlan2): failed to get link speed/duplex [ 235.615627][ T9220] bond5: (slave macvlan2): failed to get link speed/duplex [ 236.737925][T10427] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1324'. [ 237.505141][T10439] netlink: 'syz.3.1329': attribute type 1 has an invalid length. [ 237.550769][T10439] 8021q: adding VLAN 0 to HW filter on device bond7 [ 237.578729][T10441] 8021q: adding VLAN 0 to HW filter on device bond7 [ 237.581113][T10441] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 237.586849][T10441] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 237.661670][T10439] veth11: entered promiscuous mode [ 237.667208][T10439] bond7: (slave veth11): Enslaving as an active interface with a down link [ 237.733535][T10439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1329'. [ 237.737815][T10439] 8021q: adding VLAN 0 to HW filter on device bond7 [ 238.064305][T10451] lo speed is unknown, defaulting to 1000 [ 238.173421][T10451] lo speed is unknown, defaulting to 1000 [ 239.006976][T10466] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 239.009085][T10466] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 239.011660][T10466] vhci_hcd vhci_hcd.0: Device attached [ 239.098047][T10468] vhci_hcd: connection closed [ 239.121176][ T9217] vhci_hcd: stop threads [ 239.124434][ T9217] vhci_hcd: release socket [ 239.139275][ T9217] vhci_hcd: disconnect device [ 239.616840][ T1140] net_ratelimit: 29 callbacks suppressed [ 239.617311][ T1140] bond5: (slave macvlan2): failed to get link speed/duplex [ 239.737613][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 239.845592][ T1140] bond5: (slave macvlan2): failed to get link speed/duplex [ 239.956574][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 240.066137][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 240.175831][ T9165] bond5: (slave macvlan2): failed to get link speed/duplex [ 240.286766][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 240.337447][T10479] netlink: 'syz.1.1340': attribute type 1 has an invalid length. [ 240.360157][T10479] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.387329][T10479] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.390693][T10479] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 240.395742][T10479] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 240.415702][ T1140] bond5: (slave macvlan2): failed to get link speed/duplex [ 240.460911][T10486] veth7: entered promiscuous mode [ 240.465266][T10486] bond5: (slave veth7): Enslaving as an active interface with a down link [ 240.505284][T10486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1340'. [ 240.509109][T10486] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.535578][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 240.645594][ T9165] bond5: (slave macvlan2): failed to get link speed/duplex [ 241.590323][ T6048] libceph: connect (1)[c::]:6789 error -101 [ 241.592704][ T6048] libceph: mon0 (1)[c::]:6789 connect error [ 241.596337][ T6048] libceph: connect (1)[c::]:6789 error -101 [ 241.598405][ T6048] libceph: mon0 (1)[c::]:6789 connect error [ 241.617512][T10518] ceph: No mds server is up or the cluster is laggy [ 241.841190][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1354'. [ 241.844833][T10525] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1354'. [ 241.868979][T10525] vlan3: entered allmulticast mode [ 242.212195][T10530] netlink: 'syz.1.1364': attribute type 1 has an invalid length. [ 242.290628][T10530] bond6: (slave bridge3): making interface the new active one [ 242.295308][T10530] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 243.417030][T10547] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 243.431416][T10547] kvm: pic: non byte read [ 243.436732][T10547] kvm: pic: level sensitive irq not supported [ 243.437074][T10547] kvm: pic: non byte read [ 243.473721][T10547] kvm: pic: level sensitive irq not supported [ 243.478219][T10547] kvm: pic: non byte read [ 243.483665][T10547] kvm: pic: level sensitive irq not supported [ 243.484313][T10547] kvm: pic: non byte read [ 243.514994][T10547] kvm: pic: level sensitive irq not supported [ 243.515538][T10547] kvm: pic: non byte read [ 243.525132][T10547] kvm: pic: level sensitive irq not supported [ 243.525541][T10547] kvm: pic: non byte read [ 243.547145][ T53] libceph: connect (1)[c::]:6789 error -22 [ 243.549506][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 243.599127][T10557] ceph: No mds server is up or the cluster is laggy [ 244.186259][T10575] overlayfs: failed to clone upperpath [ 244.735850][ T1140] net_ratelimit: 35 callbacks suppressed [ 244.735953][ T1140] bond5: (slave macvlan2): failed to get link speed/duplex [ 244.795533][ T6048] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 244.865920][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 244.948885][ T6048] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 244.956019][ T6048] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 244.960583][ T6048] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 244.964833][ T6048] usb 5-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.972744][ T6048] usb 5-1: config 1 interface 0 has no altsetting 0 [ 244.976362][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 244.984147][ T6048] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 244.990409][ T6048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.993570][ T6048] usb 5-1: Product: syz [ 244.995064][ T6048] usb 5-1: Manufacturer: syz [ 244.997037][ T6048] usb 5-1: SerialNumber: syz [ 245.001014][T10585] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 245.003379][T10585] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 245.085867][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 245.195639][ T1140] bond5: (slave macvlan2): failed to get link speed/duplex [ 245.229759][ T6048] rtl8150 5-1:1.0: couldn't find required endpoints [ 245.232830][ T6048] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 245.258640][ T6048] usb 5-1: USB disconnect, device number 11 [ 245.305575][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 245.425811][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 245.535946][ T9217] bond5: (slave macvlan2): failed to get link speed/duplex [ 245.655641][ T9217] bond5: (slave macvlan2): failed to get link speed/duplex [ 245.814782][ T9217] bond5: (slave macvlan2): failed to get link speed/duplex [ 247.144877][T10632] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 247.156304][T10632] kvm: pic: non byte read [ 247.160086][T10632] kvm: pic: level sensitive irq not supported [ 247.161036][T10632] kvm: pic: non byte read [ 247.168845][T10632] kvm: pic: level sensitive irq not supported [ 247.169433][T10632] kvm: pic: non byte read [ 247.177679][T10632] kvm: pic: level sensitive irq not supported [ 247.178636][T10632] kvm: pic: non byte read [ 247.186642][T10632] kvm: pic: level sensitive irq not supported [ 247.190323][T10632] kvm: pic: level sensitive irq not supported [ 248.440284][T10656] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.462305][T10658] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1394'. [ 248.511936][T10656] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.587963][T10656] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.659413][T10656] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.723856][ T9217] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.732691][ T9220] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.740675][ T9220] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.750185][ T9220] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.138309][T10675] netlink: 'syz.2.1400': attribute type 1 has an invalid length. [ 249.775505][ T9204] net_ratelimit: 32 callbacks suppressed [ 249.775522][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 249.807129][T10688] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 249.885561][ T9217] bond5: (slave macvlan2): failed to get link speed/duplex [ 249.927815][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1405'. [ 249.942125][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1405'. [ 250.067561][T10691] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.070211][T10691] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.171807][T10691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.187688][T10691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.560103][ T9220] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.564296][ T9220] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.567058][ T9220] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.570246][ T9220] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.575527][ T9217] bond5: (slave macvlan2): failed to get link speed/duplex [ 250.685481][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 250.795612][ T9217] bond5: (slave macvlan2): failed to get link speed/duplex [ 250.926862][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 251.282480][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 251.415539][ T9217] bond5: (slave macvlan2): failed to get link speed/duplex [ 251.524191][T10717] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 251.525559][ T9217] bond5: (slave macvlan2): failed to get link speed/duplex [ 251.635537][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 251.998153][T10731] wireguard0: entered promiscuous mode [ 251.999940][T10731] wireguard0: entered allmulticast mode [ 254.866770][ T46] net_ratelimit: 24 callbacks suppressed [ 254.866790][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 255.005532][ T1140] bond5: (slave macvlan2): failed to get link speed/duplex [ 255.115419][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 255.198996][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.235572][ T1140] bond5: (slave macvlan2): failed to get link speed/duplex [ 255.345633][ T9217] bond5: (slave macvlan2): failed to get link speed/duplex [ 255.455740][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 255.578772][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 255.695571][ T9220] bond5: (slave macvlan2): failed to get link speed/duplex [ 255.805513][ T46] bond5: (slave macvlan2): failed to get link speed/duplex [ 255.915564][ T1140] bond5: (slave macvlan2): failed to get link speed/duplex [ 256.908072][T10826] wireguard0: entered promiscuous mode [ 256.910651][T10826] wireguard0: entered allmulticast mode [ 256.987733][T10827] bridge2: entered promiscuous mode [ 256.990277][T10827] bridge2: entered allmulticast mode [ 257.421981][T10830] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1444'. [ 257.518455][T10830] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 257.523173][T10830] bond0 (unregistering): Released all slaves [ 257.543045][T10836] netlink: 'syz.1.1445': attribute type 298 has an invalid length. [ 258.001265][T10855] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.174232][T10855] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.254644][T10855] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.323783][T10855] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.467280][ T9220] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.510434][ T1140] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.526752][ T1140] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.540194][ T1140] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.109072][T10884] netlink: 'syz.0.1466': attribute type 1 has an invalid length. [ 259.137680][T10884] 8021q: adding VLAN 0 to HW filter on device bond7 [ 259.168961][T10884] 8021q: adding VLAN 0 to HW filter on device bond7 [ 259.172224][T10884] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 259.177861][T10884] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 259.234496][T10887] bond8: entered promiscuous mode [ 259.239886][T10887] 8021q: adding VLAN 0 to HW filter on device bond8 [ 259.243727][T10887] bond7: (slave bond8): Enslaving as an active interface with a down link [ 259.304114][T10884] macvlan3: entered promiscuous mode [ 259.305974][T10884] macvlan3: entered allmulticast mode [ 259.308013][T10884] bond7: entered promiscuous mode [ 259.310525][T10884] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 259.314805][T10884] bond7: left promiscuous mode [ 259.981299][ T9220] net_ratelimit: 29 callbacks suppressed [ 259.981319][ T9220] bond5: (slave macvlan2): failed to get link speed/duplex [ 260.027236][ T40] audit: type=1326 audit(1756813147.912:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.0.1476" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa4598 code=0x7ffc0000 [ 260.036275][ T40] audit: type=1326 audit(1756813147.912:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.0.1476" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa4598 code=0x7ffc0000 [ 260.045145][ T40] audit: type=1326 audit(1756813147.912:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.0.1476" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa4598 code=0x7ffc0000 [ 260.054424][ T40] audit: type=1326 audit(1756813147.912:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.0.1476" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa4598 code=0x7ffc0000 [ 260.062667][ T40] audit: type=1326 audit(1756813147.912:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.0.1476" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa4598 code=0x7ffc0000 [ 260.071849][ T40] audit: type=1326 audit(1756813147.912:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.0.1476" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa4598 code=0x7ffc0000 [ 260.081059][ T40] audit: type=1326 audit(1756813147.912:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.0.1476" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa4598 code=0x7ffc0000 [ 260.090390][ T40] audit: type=1326 audit(1756813147.912:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.0.1476" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa4598 code=0x7ffc0000 [ 260.101176][ T40] audit: type=1326 audit(1756813147.912:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.0.1476" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa4598 code=0x7ffc0000 [ 260.110377][ T40] audit: type=1326 audit(1756813147.912:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.0.1476" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa4598 code=0x7ffc0000 [ 260.337910][T10900] bond0: (slave netdevsim0): Releasing backup interface [ 260.368440][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 260.515545][ T9217] bond5: (slave macvlan2): failed to get link speed/duplex [ 260.626062][ T9217] bond5: (slave macvlan2): failed to get link speed/duplex [ 260.735485][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 260.845552][ T1140] bond5: (slave macvlan2): failed to get link speed/duplex [ 260.961043][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 261.065531][ T9204] bond5: (slave macvlan2): failed to get link speed/duplex [ 261.185493][ T9165] bond5: (slave macvlan2): failed to get link speed/duplex [ 261.295590][ T9165] bond5: (slave macvlan2): failed to get link speed/duplex [ 262.167710][T10938] lo speed is unknown, defaulting to 1000 [ 262.202698][T10939] lo speed is unknown, defaulting to 1000 [ 263.188397][T10961] netlink: 'syz.1.1486': attribute type 13 has an invalid length. [ 263.191896][T10961] netlink: 'syz.1.1486': attribute type 17 has an invalid length. [ 263.329401][T10961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.796478][T10967] fuse: Unknown parameter '18446744073709551615' [ 263.811894][T10965] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1495'. [ 264.009335][T10965] bond5: (slave macvlan2): Removing an active aggregator [ 264.028653][T10965] bond5: (slave macvlan2): Releasing backup interface [ 264.054575][T10965] bond0 (unregistering): Released all slaves [ 264.738274][T10987] netlink: 'syz.2.1496': attribute type 298 has an invalid length. [ 265.115121][T10999] : renamed from hsr0 [ 266.869471][ T34] Process accounting resumed [ 266.946783][T11034] netlink: 'syz.1.1508': attribute type 1 has an invalid length. [ 266.971271][T11034] 8021q: adding VLAN 0 to HW filter on device bond7 [ 267.028831][T11034] 8021q: adding VLAN 0 to HW filter on device bond7 [ 267.031804][T11034] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 267.040371][T11034] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 267.057064][T11038] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1509'. [ 267.124936][T11039] bond8: entered promiscuous mode [ 267.129029][T11039] 8021q: adding VLAN 0 to HW filter on device bond8 [ 267.133440][T11039] bond7: (slave bond8): Enslaving as an active interface with a down link [ 267.175297][T11034] macvlan0: entered promiscuous mode [ 267.178018][T11034] macvlan0: entered allmulticast mode [ 267.180823][T11034] bond7: entered promiscuous mode [ 267.184693][T11034] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 267.189934][T11034] bond7: left promiscuous mode [ 267.222271][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1510'. [ 267.226452][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1510'. [ 267.515776][T11046] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1512'. [ 267.639097][T11058] netlink: 'syz.1.1515': attribute type 10 has an invalid length. [ 267.645666][T11058] syz_tun: entered promiscuous mode [ 267.662220][T11058] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 268.489776][T11073] delete_channel: no stack [ 270.260835][T11097] lo: left allmulticast mode [ 270.262502][T11097] tunl0: left allmulticast mode [ 270.264147][T11097] gre0: left allmulticast mode [ 270.265938][T11097] gretap0: left allmulticast mode [ 270.267955][T11097] erspan0: left allmulticast mode [ 270.270347][T11097] ip_vti0: left allmulticast mode [ 270.272661][T11097] ip6_vti0: left allmulticast mode [ 270.274736][T11097] sit0: left allmulticast mode [ 270.277366][T11097] ip6tnl0: left allmulticast mode [ 270.279195][T11097] ip6gre0: left allmulticast mode [ 270.281376][T11097] ip6gretap0: left allmulticast mode [ 270.283417][T11097] bridge0: left allmulticast mode [ 270.285262][T11097] dummy0: left allmulticast mode [ 270.287231][T11097] nlmon0: left allmulticast mode [ 270.288984][T11097] caif0: left allmulticast mode [ 270.290662][T11097] batadv0: left allmulticast mode [ 270.292433][T11097] vxcan0: left allmulticast mode [ 270.294281][T11097] vxcan1: left allmulticast mode [ 270.296073][T11097] veth0: left allmulticast mode [ 270.297881][T11097] veth1: left allmulticast mode [ 270.299567][T11097] wg0: left allmulticast mode [ 270.301254][T11097] wg1: left allmulticast mode [ 270.303116][T11097] wg2: left allmulticast mode [ 270.305050][T11097] veth0_to_bridge: left allmulticast mode [ 270.307229][T11097] bridge_slave_0: left allmulticast mode [ 270.309141][T11097] veth1_to_bridge: left allmulticast mode [ 270.311103][T11097] bridge_slave_1: left allmulticast mode [ 270.313365][T11097] veth0_to_bond: left allmulticast mode [ 270.315593][T11097] bond_slave_0: left allmulticast mode [ 270.317363][T11097] veth1_to_bond: left allmulticast mode [ 270.319229][T11097] bond_slave_1: left allmulticast mode [ 270.320981][T11097] veth0_to_team: left allmulticast mode [ 270.322738][T11097] team_slave_0: left allmulticast mode [ 270.324452][T11097] veth1_to_team: left allmulticast mode [ 270.326366][T11097] team_slave_1: left allmulticast mode [ 270.328152][T11097] veth0_to_batadv: left allmulticast mode [ 270.330018][T11097] batadv_slave_0: left allmulticast mode [ 270.332029][T11097] veth1_to_batadv: left allmulticast mode [ 270.334027][T11097] batadv_slave_1: left allmulticast mode [ 270.335935][T11097] xfrm0: left allmulticast mode [ 270.337537][T11097] veth0_to_hsr: left allmulticast mode [ 270.339440][T11097] veth1_to_hsr: left allmulticast mode [ 270.341411][T11097] veth1_virt_wifi: left allmulticast mode [ 270.343369][T11097] veth0_virt_wifi: left allmulticast mode [ 270.345283][T11097] veth1_macvtap: left allmulticast mode [ 270.347335][T11097] veth0_macvtap: left allmulticast mode [ 270.349264][T11097] macvtap0: left allmulticast mode [ 270.351215][T11097] macsec0: left allmulticast mode [ 270.353451][T11097] geneve0: left allmulticast mode [ 270.355504][T11097] geneve1: left allmulticast mode [ 270.357309][T11097] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 270.359610][T11097] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 270.361900][T11097] ieee802154 phy1 wpan1: left allmulticast mode [ 270.363990][T11097] veth2: left allmulticast mode [ 270.365818][T11097] veth3: left allmulticast mode [ 270.367481][T11097] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 270.369910][T11097] bond2: left allmulticast mode [ 270.371755][T11097] batadv1: left allmulticast mode [ 270.373506][T11097] bond1: left allmulticast mode [ 270.375162][T11097] erspan1: left allmulticast mode [ 270.378778][T11097] veth4: left allmulticast mode [ 270.380461][T11097] veth5: left allmulticast mode [ 270.382126][T11097] geneve2: left allmulticast mode [ 270.383856][T11097] bridge1: left allmulticast mode [ 270.385672][T11097] bond3: left allmulticast mode [ 270.387342][T11097] veth6: left allmulticast mode [ 270.389007][T11097] veth7: left allmulticast mode [ 270.390744][T11097] bridge2: left allmulticast mode [ 270.392491][T11097] bridge3: left allmulticast mode [ 270.394962][T11097] bond4: left allmulticast mode [ 270.397150][T11097] bond5: left promiscuous mode [ 270.398846][T11097] geneve3: left promiscuous mode [ 270.404667][T11097] vlan2: left promiscuous mode [ 270.406342][T11097] bond6: left promiscuous mode [ 270.407979][T11097] gretap1: left promiscuous mode [ 270.409827][T11097] vlan2: left allmulticast mode [ 270.411413][T11097] bond6: left allmulticast mode [ 270.413005][T11097] gretap1: left allmulticast mode [ 270.417247][T11097] veth11: left promiscuous mode [ 270.420344][T11097] vlan3: left allmulticast mode [ 270.422443][T11097] : left allmulticast mode [ 270.424388][T11097] hsr_slave_0: left allmulticast mode [ 270.426727][T11097] hsr_slave_1: left allmulticast mode [ 270.435891][T11097] wireguard0: left promiscuous mode [ 270.438078][T11097] wireguard0: left allmulticast mode [ 270.442765][ T46] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.450418][ T46] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.453043][ T46] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.460568][ T46] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.685435][ T40] kauditd_printk_skb: 2737 callbacks suppressed [ 271.685448][ T40] audit: type=1326 audit(1756813159.562:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.1.1538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 271.700782][ T40] audit: type=1326 audit(1756813159.562:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.1.1538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 271.709998][ T40] audit: type=1326 audit(1756813159.562:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.1.1538" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 271.719268][ T40] audit: type=1326 audit(1756813159.562:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.1.1538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 271.729079][ T40] audit: type=1326 audit(1756813159.572:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.1.1538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 271.738080][ T40] audit: type=1326 audit(1756813159.572:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.1.1538" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 271.745613][ T40] audit: type=1326 audit(1756813159.572:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.1.1538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 271.752963][ T40] audit: type=1326 audit(1756813159.572:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.1.1538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 271.761619][ T40] audit: type=1326 audit(1756813159.572:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.1.1538" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 271.768456][ T40] audit: type=1326 audit(1756813159.572:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.1.1538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 272.946856][T11162] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 272.949000][T11162] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 272.951507][T11162] vhci_hcd vhci_hcd.0: Device attached [ 273.014054][T11163] vhci_hcd: connection closed [ 273.015804][ T9204] vhci_hcd: stop threads [ 273.018670][ T9204] vhci_hcd: release socket [ 273.020123][ T9204] vhci_hcd: disconnect device [ 274.935046][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1557'. [ 274.945180][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1557'. [ 275.542054][T11213] netlink: 'syz.3.1559': attribute type 5 has an invalid length. [ 275.544655][T11213] netlink: 'syz.3.1559': attribute type 7 has an invalid length. [ 275.567321][T11213] : entered promiscuous mode [ 275.742762][T11215] netlink: 'syz.0.1560': attribute type 13 has an invalid length. [ 275.746379][T11215] netlink: 'syz.0.1560': attribute type 17 has an invalid length. [ 275.753511][T11215] net_ratelimit: 12 callbacks suppressed [ 275.753517][T11215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.088021][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1563'. [ 276.616192][T11236] netlink: 'syz.2.1567': attribute type 16 has an invalid length. [ 276.618777][T11236] netlink: 'syz.2.1567': attribute type 17 has an invalid length. [ 276.637645][T11236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.641028][T11236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.944233][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1570'. [ 276.948218][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1570'. [ 277.803552][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1574'. [ 277.807625][T11260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.811454][T11260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.135736][ T5982] IPVS: starting estimator thread 0... [ 278.141031][T11264] tipc: Started in network mode [ 278.142942][T11264] tipc: Node identity ac1414aa, cluster identity 4711 [ 278.146672][T11264] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.148935][T11264] tipc: Enabled bearer , priority 10 [ 278.225674][T11265] IPVS: using max 46 ests per chain, 110400 per kthread [ 278.285706][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.394032][T11269] delete_channel: no stack [ 278.425592][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.565518][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.705721][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.845470][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.985453][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 279.125415][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 279.267964][ T5982] tipc: Node number set to 2886997162 [ 279.330578][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1580'. [ 280.325684][T11288] BUG: sleeping function called from invalid context at mm/vmalloc.c:3409 [ 280.329229][T11288] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11288, name: syz-executor [ 280.334458][T11288] preempt_count: 1, expected: 0 [ 280.336135][T11288] RCU nest depth: 0, expected: 0 [ 280.337724][T11288] no locks held by syz-executor/11288. [ 280.339401][T11288] Preemption disabled at: [ 280.339407][T11288] [] refill_stock+0x35/0x5b0 [ 280.343191][T11288] CPU: 0 UID: 0 PID: 11288 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 280.343205][T11288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 280.343212][T11288] Call Trace: [ 280.343215][T11288] [ 280.343220][T11288] dump_stack_lvl+0x16c/0x1f0 [ 280.343248][T11288] __might_resched+0x3c0/0x5e0 [ 280.343260][T11288] ? __pfx___might_resched+0x10/0x10 [ 280.343270][T11288] ? pcpu_block_update+0x562/0x660 [ 280.343286][T11288] ? find_held_lock+0x2b/0x80 [ 280.343298][T11288] vfree+0x75/0xb50 [ 280.343313][T11288] ? rcu_is_watching+0x12/0xc0 [ 280.343324][T11288] ? kfree+0x24f/0x4d0 [ 280.343333][T11288] ? free_percpu+0x6db/0x13c0 [ 280.343346][T11288] futex_hash_free+0x98/0xc0 [ 280.343360][T11288] __mmdrop+0x33f/0x580 [ 280.343371][T11288] ? rcu_is_watching+0x12/0xc0 [ 280.343382][T11288] finish_task_switch.isra.0+0x7a4/0xc10 [ 280.343396][T11288] schedule_tail+0xe/0xe0 [ 280.343409][T11288] ret_from_fork+0x25/0x6f0 [ 280.343425][T11288] ret_from_fork_asm+0x1a/0x30 [ 280.343444][T11288] [ 280.389575][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1582'. [ 280.393529][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1582'. [ 280.420081][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1584'. [ 281.275519][ C2] net_ratelimit: 3 callbacks suppressed [ 281.275538][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 282.306051][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 283.345465][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 284.385459][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 285.425587][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 286.465436][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 287.505532][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 288.545592][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 289.585558][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available VM DIAGNOSIS: 11:39:28 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856170b5 RDI=ffffffff9b0fc700 RBP=ffffffff9b0fc6c0 RSP=ffffc900034ff898 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b0fc6c0 R15=ffffffff85617050 RIP=ffffffff856170df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53f56a3 CR3=00000000678c1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 78725b4a7b2ea0ab ad68f8244f55a948 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a215a4fa8698859b 1d3e0cf937b80a88 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 84b972ec7e0cfd95 a23c22cdd07819bd ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f316e8315f8f3097 0fb3701d3ecae934 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001b00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000054500aad449 ebdd00007a2a0000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00aad44400000615 00aae14d00000242 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011b625660000 6bea000077c00000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0037000061680000 00aae037e8bd0000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e50d48ab4460ab02 6f9161439601fea6 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f8fa77b4bd3e3f9 78e659d2c89533f8 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000003 RBX=ffff8880409d7d58 RCX=dffffc0000000000 RDX=0000000000000000 RSI=0000000000000004 RDI=ffff8880409d7d58 RBP=0000000000000000 RSP=ffffc9000393f578 R8 =0000000000000000 R9 =ffffed100813afab R10=ffff8880409d7d5b R11=0000000000000000 R12=ffff8880409d7d10 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff822c30a6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f955c0 CR3=0000000065fc1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff8880712b4000 RCX=0000000000000880 RDX=fffffbfff1bea090 RSI=fffffbfff1bea08e RDI=ffff8880712b4780 RBP=ffffea0001c4ad00 RSP=ffffc90002f6f1e8 R8 =0000000000040001 R9 =0000000000000000 R10=ffffed100e256800 R11=dffffc0000000000 R12=0000000000440dc0 R13=ffffea0001c4ad40 R14=0000000000000000 R15=ffffea0001c4ad00 RIP=ffffffff8b8fa4bb RFL=00010246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fc55c0 CR3=0000000069ab3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000005234c3 RBX=0000000000000003 RCX=ffffffff8b90dbf9 RDX=0000000000000000 RSI=ffffffff8de4d2e1 RDI=ffffffff8c162e00 RBP=ffffed1003867000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801c338000 R14=ffffffff90ab8890 R15=0000000000000000 RIP=ffffffff8b90c75f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005738f4c0 CR3=00000000661df000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000