last executing test programs: 1m36.428825948s ago: executing program 0 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f0000000040)='./bus\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[@ANYBLOB="04138a"], 0x16, 0x0) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x0) 1m36.362847823s ago: executing program 0 (id=15): syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') r0 = socket$can_raw(0x1d, 0x3, 0x1) dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m36.31285232s ago: executing program 0 (id=16): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) link(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x2800, 0x0) socket(0x1d, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfc}, {0xeeee8000, 0x2000}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x5000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0x3}, {0x0, 0xeeee0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0xe4}, {0x25999ffbd32df201, 0xeeee8000, 0x3}, {0x0, 0x0, 0x3, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x3}, {}, 0x9df8ffcb, 0x0, 0x0, 0x140030, 0x0, 0x4500}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000080)) 1m36.19292108s ago: executing program 0 (id=21): timerfd_gettime(0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) 1m35.641231021s ago: executing program 0 (id=25): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r1}, './file0\x00'}) 1m35.602933456s ago: executing program 0 (id=26): ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r0}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) lseek(r2, 0x4, 0x0) readv(r2, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) 1m20.275038314s ago: executing program 32 (id=26): ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r0}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) lseek(r2, 0x4, 0x0) readv(r2, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) 1m15.568454099s ago: executing program 4 (id=239): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb96c"], 0xfdef) 1m14.919015594s ago: executing program 4 (id=246): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x0, 0x104) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m11.089948525s ago: executing program 4 (id=246): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x0, 0x104) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m11.008715902s ago: executing program 4 (id=271): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0xc00}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) 1m10.698676552s ago: executing program 4 (id=273): mkdir(&(0x7f0000000400)='./file1\x00', 0xa2) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2b) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 1m10.69682224s ago: executing program 4 (id=274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x63) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x0, 0x1}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000009c0)={0x0, 0x0, @pic={0x0, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x4, 0x1, 0x0, 0x1, 0x3, 0x0, 0x40, 0x0, 0x1}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x2c0710}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 54.096111234s ago: executing program 33 (id=274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x63) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x0, 0x1}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000009c0)={0x0, 0x0, @pic={0x0, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x4, 0x1, 0x0, 0x1, 0x3, 0x0, 0x40, 0x0, 0x1}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x2c0710}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.013696074s ago: executing program 2 (id=564): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_vlan\x00', 0x0}) unshare(0x62040200) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0xc, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) 21.672915203s ago: executing program 2 (id=569): epoll_create1(0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x381b, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000001c0)=0x2001) r5 = fcntl$dupfd(r4, 0x0, r4) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 20.625817385s ago: executing program 2 (id=573): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000180)='./bus\x00', 0x90000818) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001100)="b2", 0x7fffefff}, {&(0x7f0000001140)='K', 0x1}], 0x2, 0x0, 0x0, 0x8dff}}], 0x1, 0x0) 20.057618424s ago: executing program 2 (id=576): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 20.015361604s ago: executing program 2 (id=577): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) unshare(0x22020400) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x2}, 0x0, 0x0) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 19.243668605s ago: executing program 2 (id=584): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x4], [0x0, 0x0, 0x0, 0xffffffff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000200)={r3, 0xffffffff, 0x0, 0x0, 0x3, [0x0], [0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x6, 0x8], [0x0, 0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000004c0)={r6}) 19.136728685s ago: executing program 34 (id=584): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x4], [0x0, 0x0, 0x0, 0xffffffff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000200)={r3, 0xffffffff, 0x0, 0x0, 0x3, [0x0], [0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x6, 0x8], [0x0, 0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000004c0)={r6}) 4.162026413s ago: executing program 1 (id=700): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_PROPBIT(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f00000005c0), 0x200005d8) 2.757396848s ago: executing program 6 (id=710): sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x14) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000380)={0x2, 0x4e24, @remote}, 0x10) 2.757157197s ago: executing program 3 (id=711): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='.\x02\x00') unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) 2.667865301s ago: executing program 6 (id=713): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000003000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) chmod(&(0x7f00000004c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000180)="cd", 0x1, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 2.666498421s ago: executing program 6 (id=714): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x63, 0x0, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000003277fbac141416e000030a89079f03b180004408050300845013f2325f009402050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa00734611196", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000001c0)=r3) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c98012887634086d3ff702c1ffe80000000000000"], 0xffdd) 2.609409898s ago: executing program 3 (id=715): r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000002c0)=""/87, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x8, 0x7ffc0000}]}) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) clock_gettime(0x5, 0x0) sched_getscheduler(r0) 2.468943852s ago: executing program 3 (id=716): r0 = io_uring_setup(0x1229, &(0x7f0000000180)={0x0, 0x10000002, 0x800}) r1 = io_uring_setup(0x257c, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x1b, 0x0, 0x1) socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x401, 0xc, 0x5, 0xb, 0x2}, 0x14) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x10, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 2.386362665s ago: executing program 3 (id=717): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$radio(0x0, 0x3, 0x2) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, 0x0, 0x0, 0x16, 0x0, "cf930c7d768de6aec56973af386759ceedbe6d045d68fb52a4de698c04646fbb617870ab64d0a331e5b240dcca5647406c0a592549802e556113a84dfc497c3f6d3172e31dd141197ccabc4fe2bbac03"}, 0xd8) syz_usb_disconnect(0xffffffffffffffff) r4 = semget$private(0x0, 0x2, 0x110) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000000)=""/207) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/206, 0xce}], 0x1, 0x0, 0x0) 2.195652066s ago: executing program 1 (id=718): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0xfffff11a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='o']) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000540)={&(0x7f00000004c0)={0xfffffffffffffc65, 0x0, 0x0, {0x7, 0x27, 0x0, 0x4a5a1aa33e4f1aec, 0x6, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.08648754s ago: executing program 1 (id=719): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x5) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000280)=0x5010c02) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00!', 0x2}], 0x1, 0x20000002, 0x100000) 1.016574965s ago: executing program 3 (id=725): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x11000) vmsplice(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="a5c3942d4184df8fcc0c85", 0xb}], 0x1, 0x0) 952.483848ms ago: executing program 6 (id=726): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') 885.217658ms ago: executing program 1 (id=727): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r1, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 881.428568ms ago: executing program 6 (id=728): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "ff3f66fa733f1b33e356d25b90c98fe587b88a"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x0, "1f00000800"}) r2 = dup3(r1, r0, 0x0) read$rfkill(r2, &(0x7f00000002c0), 0x8) read$FUSE(r2, &(0x7f0000001480)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000005500)={0x2020}, 0x2020) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)) 748.663628ms ago: executing program 1 (id=730): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000080)=""/255, 0xff}], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004200)=ANY=[@ANYBLOB="1400000003010101"], 0x14}}, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, 0x0, 0x0) 604.95781ms ago: executing program 1 (id=733): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x5b03, 0x0) read$char_usb(r1, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x5450, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) 603.569342ms ago: executing program 5 (id=734): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42b02, 0x0) r2 = syz_io_uring_setup(0x6b2f, &(0x7f0000000200)={0x0, 0x0, 0x10010}, &(0x7f00000000c0), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x618b, 0x0, 0x402}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x9, 0x0, 0x0, 0x8}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000002c0)=0xa0000) r6 = dup(r5) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f0000000200)={&(0x7f0000000300)={{@host}, {}, 0x400, "1a0b5dbeaad6e12581edfd3e937bb049a5b6150777cdfc3f662aaa33c62804d786b79e9434331a65305e1ca8b12f2ef78b51d868fcacb8c1ce634287005fa21eae9125b9b5f78afe5816253c1d8179a25109c92aca81cbefee8bfee6e64f7d09541b3b54b464b08cd356e1cb5c49e7deaccfce3d06dbdf2318dfb309890458cb7a7b2a21743cec8f1ad4a7cbea7ea1ed37d1bab65c1bf52f9b1559ea51ed0e07f0184f39018109c38b561e132a99d1248964ca540bf022b6977bfaca7f9fc8e1b6826807127484d9835b5a1b710478b2a67c3f68d4d065d59140309232f0b5884f1d1dc6a575f990d0685a0cd095f6b4b79d0cffdb57b0bac719e4a9f39ccdc79fa6aeafa3a71ed3f46987cc1fda18e3bc34e56a441eb3e7f47476c52a400597b01eaf894da3428b4027a6ce2657b267932e83053be08f450510a0df068e3907290e7d104a8f79838bdc762cfe081260ff54b6b2fb4670b89be06c40b3c4ba8387586f5b84d2547d75125356f478523b8604452d0898c94f6d0bc75d9a34f063c979d519e0379eec57aa7a48d2120ae28682229213017a2215e0755c3b71e56ebaf2c928d6cf53dbc0190864d0b6ea928e933474e58a193c880bd90bb39d3291142687e8f9a10c60887898a931e34dac504220200401a7b26973590621222a74aa843becaec07a70456dad98ab32c225872a699f7aa849a035b8d513c97198d5a790b85a14375bc00f0635db6eaf0741fb9ab5bfb72dde3c1992b0157a1a34933caf5fa679435f34a756e0366a4f7d604958e6ede55883ca9f11e388306612489528887a45d7f67588bae91ec6f4b28ac26ccdae64cc82948fe99b2002df2d93236faacccc629f41a6981fffbb640e60399c5fe7288112bba82046197ef850d9f225987a6022fef9ad89b4798dc92b7cb5a1e1d2c698f86c4f99317ba87530b874ac3bd7899dffd2393a1d93ddb5143678831d94aaa2bf4267bfffefb44ec03fadcae8e8d89617ed926ad635559a7cdf61e2638dc3d8c424403c8121ad89aec8277a64955cf090c187113f4484c30f6246643a0600000015869e58fe86ba3ab33ed7646b21846bd4f754ccffac9a96223971e4c44a36eef33c09d1b57a3790bec363a2c7333b07629874ad2119f2ccda107b183477df18f175d7e9132720d7cd7e671f8b62dee95433fa1db34dfb1bcae6a22863d1f592be8f6c64dcbb93bc5131711c7156829f77fe17b5bbfb1ac2eac809daeeeb804994b61c5e4a40c1fcbe7ee925ac8a6b0c52e24eee6d713060e407752ad35aef68040a4e68ba07c6d0548b32b12b62401c8349c6c53084bad6300d2b5e371efa569bb3a67ad15797389b8fe8dfa267fe203555bb15f36807894643f3f7f081a1e584f959c7716a46fe455837fc44c561c41ccebb845434b86b354b4a0c7796d713a500"}, 0x418}) io_uring_enter(r2, 0xb14, 0x0, 0x0, 0x0, 0x0) getsockopt$ax25_int(r0, 0x101, 0x8, &(0x7f0000000080), &(0x7f0000000000)=0x1b) 538.569611ms ago: executing program 5 (id=735): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) 538.377304ms ago: executing program 5 (id=736): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0a010e04"], 0xd) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) mknod(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 468.768525ms ago: executing program 5 (id=737): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/105, 0x69) 468.54504ms ago: executing program 5 (id=738): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0xe5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) linkat(r1, &(0x7f0000000040)='./file1\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', 0x0, 0x0, 0x0) 378.499056ms ago: executing program 5 (id=739): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) capset(0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) 1.069064ms ago: executing program 6 (id=740): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="12", 0x1}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x40000002) 0s ago: executing program 3 (id=741): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000029c0)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:29927' (ED25519) to the list of known hosts. [ 34.242133][ T5863] cgroup: Unknown subsys name 'net' [ 34.348956][ T5863] cgroup: Unknown subsys name 'cpuset' [ 34.352975][ T5863] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.219478][ T5863] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.961018][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.964329][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.967148][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.970145][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.972068][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.974981][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.975114][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.977974][ T5946] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.978916][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.979923][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.981451][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.984318][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.985623][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.991349][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.993289][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.993912][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.994348][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.994469][ T5955] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.994640][ T5955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.006017][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.006177][ T5309] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.008502][ T5948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.010978][ T5309] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.011765][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.189087][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 37.198040][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 37.240416][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 37.243512][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 37.344340][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.347274][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.349665][ T5942] bridge_slave_0: entered allmulticast mode [ 37.351635][ T5942] bridge_slave_0: entered promiscuous mode [ 37.354872][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.356796][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.359170][ T5942] bridge_slave_1: entered allmulticast mode [ 37.361774][ T5942] bridge_slave_1: entered promiscuous mode [ 37.372165][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.374020][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.375879][ T5939] bridge_slave_0: entered allmulticast mode [ 37.378227][ T5939] bridge_slave_0: entered promiscuous mode [ 37.430135][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.431947][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.433804][ T5939] bridge_slave_1: entered allmulticast mode [ 37.435722][ T5939] bridge_slave_1: entered promiscuous mode [ 37.470578][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.472446][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.474261][ T5950] bridge_slave_0: entered allmulticast mode [ 37.477268][ T5950] bridge_slave_0: entered promiscuous mode [ 37.480750][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.493766][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.495665][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.497635][ T5945] bridge_slave_0: entered allmulticast mode [ 37.499950][ T5945] bridge_slave_0: entered promiscuous mode [ 37.502153][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.504003][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.505858][ T5950] bridge_slave_1: entered allmulticast mode [ 37.507956][ T5950] bridge_slave_1: entered promiscuous mode [ 37.520262][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.523589][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.526180][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.528068][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.529840][ T5945] bridge_slave_1: entered allmulticast mode [ 37.531783][ T5945] bridge_slave_1: entered promiscuous mode [ 37.558831][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.574076][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.602370][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.605602][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.618511][ T5942] team0: Port device team_slave_0 added [ 37.623475][ T5939] team0: Port device team_slave_0 added [ 37.626692][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.644930][ T5942] team0: Port device team_slave_1 added [ 37.662805][ T5939] team0: Port device team_slave_1 added [ 37.678441][ T5945] team0: Port device team_slave_0 added [ 37.682194][ T5950] team0: Port device team_slave_0 added [ 37.701355][ T5945] team0: Port device team_slave_1 added [ 37.703955][ T5950] team0: Port device team_slave_1 added [ 37.705991][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.708923][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.718088][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.746230][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.748666][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.756289][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.760876][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.762476][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.769860][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.792047][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.794289][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.802363][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.805293][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.807168][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.813468][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.817512][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.819698][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.825910][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.833662][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.835452][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.841922][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.845143][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.846854][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.852725][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.918190][ T5939] hsr_slave_0: entered promiscuous mode [ 37.920577][ T5939] hsr_slave_1: entered promiscuous mode [ 37.924876][ T5942] hsr_slave_0: entered promiscuous mode [ 37.927195][ T5942] hsr_slave_1: entered promiscuous mode [ 37.929560][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.931612][ T5942] Cannot create hsr debugfs directory [ 37.934405][ T5950] hsr_slave_0: entered promiscuous mode [ 37.936469][ T5950] hsr_slave_1: entered promiscuous mode [ 37.938129][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.939875][ T5950] Cannot create hsr debugfs directory [ 37.952618][ T5945] hsr_slave_0: entered promiscuous mode [ 37.954748][ T5945] hsr_slave_1: entered promiscuous mode [ 37.957487][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.959565][ T5945] Cannot create hsr debugfs directory [ 38.146690][ T5939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.152143][ T5939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.155027][ T5939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.161165][ T5939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.175024][ T5942] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.180105][ T5942] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.184131][ T5942] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.188704][ T5942] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.199190][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.201054][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.203163][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.204929][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.209915][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.212392][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.240276][ T5945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.248709][ T5945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.251583][ T5945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.254765][ T5945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.277241][ T5950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.284840][ T5950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.289307][ T5950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.292480][ T5950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.305207][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.322712][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.335017][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.337125][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.347690][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.349575][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.368274][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.380717][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.389242][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.394306][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.402115][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.403996][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.408522][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.413414][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.416480][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.418354][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.423841][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.425671][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.434287][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.436871][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.443339][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.445413][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.458609][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.460529][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.499166][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.523224][ T5939] veth0_vlan: entered promiscuous mode [ 38.528113][ T5939] veth1_vlan: entered promiscuous mode [ 38.539870][ T5939] veth0_macvtap: entered promiscuous mode [ 38.542821][ T5939] veth1_macvtap: entered promiscuous mode [ 38.553951][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.560628][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.564316][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.569427][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.571720][ T5939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.573995][ T5939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.577080][ T5939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.579252][ T5939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.598923][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.616834][ T5945] veth0_vlan: entered promiscuous mode [ 38.625866][ T5942] veth0_vlan: entered promiscuous mode [ 38.634576][ T5945] veth1_vlan: entered promiscuous mode [ 38.641387][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.643527][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.653833][ T5945] veth0_macvtap: entered promiscuous mode [ 38.657121][ T5942] veth1_vlan: entered promiscuous mode [ 38.665720][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.667103][ T5945] veth1_macvtap: entered promiscuous mode [ 38.668455][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.674513][ T5950] veth0_vlan: entered promiscuous mode [ 38.679361][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.682121][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.685546][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.690619][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.693267][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.696831][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.701370][ T5945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.703578][ T5945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.705664][ T5945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.708052][ T5945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.712091][ T5950] veth1_vlan: entered promiscuous mode [ 38.716855][ T5939] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.719330][ T5942] veth0_macvtap: entered promiscuous mode [ 38.732114][ T5942] veth1_macvtap: entered promiscuous mode [ 38.741966][ T5950] veth0_macvtap: entered promiscuous mode [ 38.756110][ T5950] veth1_macvtap: entered promiscuous mode [ 38.759359][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.763085][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.765914][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.769160][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.772785][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.783642][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.787328][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.789830][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.792493][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.796021][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.799749][ T5942] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.802077][ T5942] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.802773][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.804869][ T5942] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.810805][ T5942] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.814186][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.822338][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.825020][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.827800][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.830421][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.832786][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.835389][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.839052][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.845852][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.849348][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.851850][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.854406][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.856935][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.859891][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.862857][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.873298][ T5950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.875530][ T5950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.878089][ T5950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.880326][ T5950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.885876][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.889256][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.936415][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.938476][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.949061][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.951141][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.951976][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.955029][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.963738][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.965739][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.997041][ T5309] Bluetooth: hci0: command tx timeout [ 39.077573][ T5309] Bluetooth: hci2: command tx timeout [ 39.077588][ T5948] Bluetooth: hci1: command tx timeout [ 39.086438][ T5948] Bluetooth: hci3: command tx timeout [ 39.236457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.258918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 39.601381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.672639][ T39] audit: type=1804 audit(1732940518.800:2): pid=6034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.13" name="/newroot/5/bus/bus" dev="overlay" ino=59 res=1 errno=0 [ 39.674176][ T6034] evm: overlay not supported [ 39.686079][ T6034] Invalid ELF header magic: != ELF [ 39.771020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 39.778349][ T6040] can: request_module (can-proto-0) failed. [ 39.959324][ T6060] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 39.965523][ T68] Bluetooth: hci4: Frame reassembly failed (-84) [ 40.549519][ T6070] netlink: 'syz.2.28': attribute type 1 has an invalid length. [ 40.563262][ T6070] team0: Port device veth3 added [ 40.564902][ T6070] Zero length message leads to an empty skb [ 40.765866][ T6082] syz.2.34 uses obsolete (PF_INET,SOCK_PACKET) [ 40.827523][ T6084] binder: 6083:6084 ioctl c0306201 20000380 returned -14 [ 41.076693][ T5309] Bluetooth: hci0: command tx timeout [ 41.156414][ T5949] Bluetooth: hci1: command tx timeout [ 41.157915][ T5309] Bluetooth: hci3: command tx timeout [ 41.166878][ T5309] Bluetooth: hci2: command tx timeout [ 41.197291][ T6105] netlink: 'syz.1.43': attribute type 4 has an invalid length. [ 41.214966][ T6105] syz.1.43 (6105) used greatest stack depth: 21120 bytes left [ 41.235662][ T6107] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.247118][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.276017][ T8] kernel write not supported for file /cpu/0/msr (pid: 8 comm: kworker/0:0) [ 41.470449][ T6122] kvm: pic: non byte read [ 41.481448][ T6125] Process accounting resumed [ 41.839945][ T6139] bridge0: port 3(syz_tun) entered blocking state [ 41.841767][ T6139] bridge0: port 3(syz_tun) entered disabled state [ 41.844135][ T6139] syz_tun: entered allmulticast mode [ 41.846493][ T6139] syz_tun: entered promiscuous mode [ 41.848920][ T6139] bridge0: port 3(syz_tun) entered blocking state [ 41.851001][ T6139] bridge0: port 3(syz_tun) entered forwarding state [ 42.046684][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 42.046949][ T5309] Bluetooth: hci4: command 0x1003 tx timeout [ 42.075786][ T6148] hub 1-0:1.0: USB hub found [ 42.078235][ T6148] hub 1-0:1.0: 2 ports detected [ 42.085101][ T6150] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 42.129763][ T6154] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 42.137106][ T39] audit: type=1800 audit(1732940521.270:3): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.63" name="file0" dev="overlay" ino=10580 res=0 errno=0 [ 43.045562][ T6178] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 43.161851][ T5948] Bluetooth: hci0: command tx timeout [ 43.174203][ T6187] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 43.236364][ T5948] Bluetooth: hci2: command tx timeout [ 43.247569][ T5948] Bluetooth: hci3: command tx timeout [ 43.249288][ T5948] Bluetooth: hci1: command tx timeout [ 44.008536][ T2295] kernel read not supported for file /dsp (pid: 2295 comm: kworker/2:2) [ 44.472558][ T6236] dccp_close: ABORT with 32 bytes unread [ 44.629736][ T39] audit: type=1800 audit(1732940523.760:4): pid=6240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.92" name="/" dev="fuse" ino=1 res=0 errno=0 [ 44.984113][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 44.986224][ T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 44.991586][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 44.995669][ T6261] netlink: 104 bytes leftover after parsing attributes in process `syz.1.101'. [ 44.998189][ T6261] netlink: 104 bytes leftover after parsing attributes in process `syz.1.101'. [ 45.081589][ T39] audit: type=1800 audit(1732940524.210:5): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.103" name="file2" dev="overlay" ino=203 res=0 errno=0 [ 45.136315][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 45.143914][ T8] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 45.146014][ T8] usb 7-1: config 0 has no interface number 0 [ 45.147815][ T8] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 45.151423][ T8] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 45.155108][ T8] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 45.158565][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.163551][ T8] usb 7-1: config 0 descriptor?? [ 45.167773][ T6252] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 45.177153][ T8] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 45.236320][ T5309] Bluetooth: hci0: command tx timeout [ 45.316325][ T5309] Bluetooth: hci2: command tx timeout [ 45.326316][ T5309] Bluetooth: hci1: command tx timeout [ 45.326353][ T5948] Bluetooth: hci3: command tx timeout [ 45.438937][ T5980] usb 7-1: USB disconnect, device number 2 [ 45.438991][ C0] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 46.249928][ T6278] veth0_to_team: entered promiscuous mode [ 46.252174][ T6278] veth0_to_team: entered allmulticast mode [ 46.331127][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'. [ 46.361990][ T6280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.108'. [ 46.365955][ T6280] sit1: entered promiscuous mode [ 46.367839][ T6280] sit1: entered allmulticast mode [ 46.514094][ T6289] binder: 6288:6289 ioctl c0306201 20000680 returned -14 [ 46.557597][ T6291] binder: 6290:6291 ioctl c0306201 20000c80 returned -14 [ 46.587948][ T6295] binder: 6294:6295 ioctl c0306201 200002c0 returned -14 [ 46.946273][ T63] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 47.096316][ T63] usb 6-1: Using ep0 maxpacket: 8 [ 47.099258][ T63] usb 6-1: config index 0 descriptor too short (expected 28277, got 45) [ 47.101978][ T63] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.104883][ T63] usb 6-1: config 0 has no interfaces? [ 47.106964][ T63] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 47.110134][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.115226][ T63] usb 6-1: config 0 descriptor?? [ 47.373475][ T63] usb 6-1: USB disconnect, device number 2 [ 47.474523][ T6310] ALSA: seq fatal error: cannot create timer (-22) [ 47.519946][ T6312] binder: 6311:6312 unknown command 0 [ 47.521397][ T6312] binder: 6311:6312 ioctl c0306201 20000480 returned -22 [ 48.670089][ T39] audit: type=1804 audit(1732940527.800:6): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.131" name="/newroot/44/bus/bus" dev="overlay" ino=307 res=1 errno=0 [ 48.671773][ T6333] Invalid ELF header magic: != ELF [ 48.926505][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 48.958660][ T6341] binder_alloc: 6340: binder_alloc_buf, no vma [ 48.969273][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 49.015241][ T6348] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 49.025286][ T6348] kvm: pic: level sensitive irq not supported [ 49.025978][ T6348] kvm: pic: non byte read [ 49.032972][ T6348] kvm: pic: level sensitive irq not supported [ 49.033716][ T6348] kvm: pic: non byte read [ 49.040381][ T6348] kvm: pic: level sensitive irq not supported [ 49.041311][ T6348] kvm: pic: non byte read [ 50.200436][ T6376] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 50.853989][ T6395] binder: 6394:6395 ioctl c0306201 20000680 returned -14 [ 50.987666][ T6405] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 51.109638][ T6415] binder_alloc: 6414: binder_install_single_page failed to insert page at offset 0 with -14 [ 51.172823][ T6418] binder: 6417:6418 ioctl c0306201 20000680 returned -14 [ 51.383509][ T6426] syz.2.167 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 51.441415][ T6428] binder: 6427:6428 ioctl c0306201 20000680 returned -22 [ 52.130142][ T6459] input: syz0 as /devices/virtual/input/input5 [ 52.468499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.471035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.473712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.478142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.156345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 55.896531][ T6508] kvm: pic: level sensitive irq not supported [ 55.898365][ T6508] kvm: pic: single mode not supported [ 55.907554][ T6508] kvm: pic: level sensitive irq not supported [ 55.928859][ T5309] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.934142][ T5309] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.938775][ T5309] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.942328][ T5309] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.945494][ T5309] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.948405][ T5309] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.014798][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 56.019692][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'. [ 56.023587][ T6515] block nbd0: Unsupported socket: shutdown callout must be supported. [ 56.036393][ T6510] chnl_net:caif_netlink_parms(): no params data found [ 56.124234][ T105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.130659][ T6510] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.133177][ T6510] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.135977][ T6510] bridge_slave_0: entered allmulticast mode [ 56.138980][ T6510] bridge_slave_0: entered promiscuous mode [ 56.142224][ T6510] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.144127][ T6510] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.146077][ T6510] bridge_slave_1: entered allmulticast mode [ 56.148173][ T6510] bridge_slave_1: entered promiscuous mode [ 56.167136][ T6510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.171777][ T6510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.207952][ T6510] team0: Port device team_slave_0 added [ 56.217047][ T105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.223163][ T6510] team0: Port device team_slave_1 added [ 56.240505][ T6510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.242425][ T6510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.249477][ T6510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.253044][ T6510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.254843][ T6510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.261512][ T6510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.294435][ T105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.303036][ T6510] hsr_slave_0: entered promiscuous mode [ 56.305086][ T6510] hsr_slave_1: entered promiscuous mode [ 56.306926][ T6510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.308916][ T6510] Cannot create hsr debugfs directory [ 56.338122][ T5980] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 56.369059][ T105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.417093][ T6510] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.420359][ T6510] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.423400][ T6510] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.427276][ T6510] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.436041][ T6510] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.438794][ T6510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.440789][ T6510] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.442641][ T6510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.454732][ T39] audit: type=1800 audit(1732940535.580:7): pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.200" name="/" dev="fuse" ino=1 res=0 errno=0 [ 56.485654][ T105] bridge_slave_1: left allmulticast mode [ 56.487778][ T105] bridge_slave_1: left promiscuous mode [ 56.488866][ T5980] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 56.490202][ T105] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.491431][ T5980] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 56.491443][ T5980] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 56.491460][ T5980] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 56.502226][ T5980] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 56.505690][ T105] bridge_slave_0: left allmulticast mode [ 56.506516][ T5980] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 56.507706][ T105] bridge_slave_0: left promiscuous mode [ 56.509678][ T5980] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 56.511285][ T105] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.513250][ T5980] usb 6-1: Product: syz [ 56.516404][ T5980] usb 6-1: Manufacturer: syz [ 56.523133][ T5980] cdc_wdm 6-1:1.0: skipping garbage [ 56.524556][ T5980] cdc_wdm 6-1:1.0: skipping garbage [ 56.529234][ T5980] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 56.530802][ T5980] cdc_wdm 6-1:1.0: Unknown control protocol [ 56.643285][ T5948] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 56.759289][ T105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.763408][ T105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.768753][ T105] bond0 (unregistering): Released all slaves [ 56.784296][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.787371][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.805034][ T6510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.812956][ T6510] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.832333][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.834208][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.848847][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.850717][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.859369][ T6510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.862147][ T6510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.931196][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 56.931288][ T57] usb 6-1: USB disconnect, device number 3 [ 56.933058][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 56.936073][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 56.939106][ T6539] cdc_wdm 6-1:1.0: Tx URB error: -19 [ 56.957858][ T6510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.053780][ T105] hsr_slave_0: left promiscuous mode [ 57.057618][ T105] hsr_slave_1: left promiscuous mode [ 57.060717][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.063465][ T105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.068965][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.074338][ T105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.106850][ T105] veth1_macvtap: left promiscuous mode [ 57.108773][ T105] veth0_macvtap: left promiscuous mode [ 57.110516][ T105] veth1_vlan: left promiscuous mode [ 57.111995][ T105] veth0_vlan: left promiscuous mode [ 57.849417][ T105] team0 (unregistering): Port device team_slave_1 removed [ 57.917869][ T105] team0 (unregistering): Port device team_slave_0 removed [ 58.036462][ T5948] Bluetooth: hci1: command tx timeout [ 58.386404][ T6510] veth0_vlan: entered promiscuous mode [ 58.390721][ T6510] veth1_vlan: entered promiscuous mode [ 58.400482][ T6510] veth0_macvtap: entered promiscuous mode [ 58.403763][ T6510] veth1_macvtap: entered promiscuous mode [ 58.412983][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.415664][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.419155][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.421824][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.424321][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.427550][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.430607][ T6510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.437117][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.439844][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.442334][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.445022][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.448739][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.451551][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.454695][ T6510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.459554][ T6510] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.461863][ T6510] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.464124][ T6510] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.466963][ T6510] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.520967][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.523045][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.535241][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.539872][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.599964][ T6601] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 58.626453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.245202][ T6634] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 59.337329][ T6641] warning: `syz.3.217' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.569031][ T6666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.221'. [ 59.816964][ T6682] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 60.026642][ T6682] syz.4.226 (6682): drop_caches: 2 [ 60.116392][ T5948] Bluetooth: hci1: command tx timeout [ 60.331003][ T6702] capability: warning: `syz.4.232' uses 32-bit capabilities (legacy support in use) [ 60.456339][ T6713] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 60.460599][ T6713] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -1 [ 60.571702][ T6724] lo: entered promiscuous mode [ 60.573521][ T6723] lo: left promiscuous mode [ 60.657935][ T6720] ceph: No mds server is up or the cluster is laggy [ 61.032438][ T6744] syzkaller0: entered promiscuous mode [ 61.035680][ T6744] syzkaller0: entered allmulticast mode [ 61.328898][ T5309] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.343187][ T5309] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.351655][ T5309] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.355803][ T5309] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.359231][ T5309] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.361636][ T5309] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.414245][ T6754] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 61.419227][ T6754] PKCS7: Only support pkcs7_signedData type [ 61.755083][ T6759] random: crng reseeded on system resumption [ 62.188997][ T1228] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.265599][ T1228] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.308578][ T6750] chnl_net:caif_netlink_parms(): no params data found [ 62.391411][ T1228] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.398374][ T6750] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.400459][ T6750] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.402425][ T6750] bridge_slave_0: entered allmulticast mode [ 62.404524][ T6750] bridge_slave_0: entered promiscuous mode [ 62.408205][ T6750] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.410423][ T6750] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.413041][ T6750] bridge_slave_1: entered allmulticast mode [ 62.415186][ T6750] bridge_slave_1: entered promiscuous mode [ 62.439113][ T6750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.442525][ T6750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.465631][ T6750] team0: Port device team_slave_0 added [ 62.468335][ T6750] team0: Port device team_slave_1 added [ 62.500653][ T1228] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.505265][ T6750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.510326][ T6750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.518594][ T6750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.522190][ T6750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.524027][ T6750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.532817][ T6750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.564808][ T6750] hsr_slave_0: entered promiscuous mode [ 62.568805][ T6750] hsr_slave_1: entered promiscuous mode [ 62.571348][ T6750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.573699][ T6750] Cannot create hsr debugfs directory [ 62.632324][ T1228] bridge_slave_1: left allmulticast mode [ 62.633863][ T1228] bridge_slave_1: left promiscuous mode [ 62.636202][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.645595][ T1228] bridge_slave_0: left allmulticast mode [ 62.648124][ T1228] bridge_slave_0: left promiscuous mode [ 62.650395][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.898864][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.902387][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.905697][ T1228] bond0 (unregistering): Released all slaves [ 62.937461][ T39] audit: type=1326 audit(1732940542.070:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.1.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 62.943553][ T39] audit: type=1326 audit(1732940542.070:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.1.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 62.949196][ T39] audit: type=1326 audit(1732940542.070:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.1.256" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 62.954762][ T39] audit: type=1326 audit(1732940542.070:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.1.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 62.960329][ T39] audit: type=1326 audit(1732940542.070:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.1.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 62.966515][ T39] audit: type=1326 audit(1732940542.080:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.1.256" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 62.971970][ T39] audit: type=1326 audit(1732940542.090:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.1.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 62.977911][ T39] audit: type=1326 audit(1732940542.090:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.1.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 62.986348][ T39] audit: type=1326 audit(1732940542.120:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.1.256" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 62.991810][ T39] audit: type=1326 audit(1732940542.120:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.1.256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 63.201907][ T1228] hsr_slave_0: left promiscuous mode [ 63.203734][ T1228] hsr_slave_1: left promiscuous mode [ 63.206757][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.209004][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.213689][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.215645][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.231605][ T1228] veth1_macvtap: left promiscuous mode [ 63.233092][ T1228] veth0_macvtap: left promiscuous mode [ 63.234529][ T1228] veth1_vlan: left promiscuous mode [ 63.235921][ T1228] veth0_vlan: left promiscuous mode [ 63.398162][ T5309] Bluetooth: hci1: command tx timeout [ 63.812086][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 63.870161][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 64.316357][ T6846] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 64.457046][ T6750] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.464165][ T6750] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.468819][ T6750] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.487782][ T6750] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.529926][ T6750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.539950][ T6750] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.543847][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.546250][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.554424][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.556897][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.648779][ T6750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.671722][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'. [ 64.680031][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'. [ 64.682236][ T6890] syz_tun: left allmulticast mode [ 64.683512][ T6890] syz_tun: left promiscuous mode [ 64.684783][ T6890] bridge0: port 3(syz_tun) entered disabled state [ 64.688740][ T6890] bridge_slave_1: left allmulticast mode [ 64.690178][ T6890] bridge_slave_1: left promiscuous mode [ 64.691667][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.695230][ T6890] bridge_slave_0: left allmulticast mode [ 64.697406][ T6890] bridge_slave_0: left promiscuous mode [ 64.698859][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.824621][ T6750] veth0_vlan: entered promiscuous mode [ 64.830012][ T6750] veth1_vlan: entered promiscuous mode [ 64.841691][ T6750] veth0_macvtap: entered promiscuous mode [ 64.844879][ T6750] veth1_macvtap: entered promiscuous mode [ 64.852490][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.855759][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.859161][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.864204][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.869114][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.872509][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.876621][ T6750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.881634][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.884813][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.888211][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.891632][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.894859][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.898416][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.902200][ T6750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.913847][ T6750] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.917483][ T6750] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.920470][ T6750] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.923410][ T6750] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.945087][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.947341][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.957715][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.959855][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.476307][ T5309] Bluetooth: hci1: command tx timeout [ 65.877852][ T6920] Invalid ELF header magic: != ELF [ 65.919069][ T6922] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 65.921454][ T6922] overlayfs: failed to set xattr on upper [ 65.923381][ T6922] overlayfs: ...falling back to redirect_dir=nofollow. [ 65.925656][ T6922] overlayfs: ...falling back to index=off. [ 65.928373][ T6922] overlayfs: ...falling back to uuid=null. [ 65.975074][ T6925] binder: 6924:6925 ioctl c0306201 20000680 returned -22 [ 66.079789][ T6929] input: syz0 as /devices/virtual/input/input6 [ 66.171768][ T6931] syzkaller0: entered promiscuous mode [ 66.173430][ T6931] syzkaller0: entered allmulticast mode [ 67.006864][ T105] Bluetooth: hci4: Frame reassembly failed (-84) [ 67.013687][ T1137] Bluetooth: hci4: Frame reassembly failed (-84) [ 67.556234][ T5948] Bluetooth: hci1: command tx timeout [ 67.653908][ T6941] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.750928][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 67.753517][ T6944] netlink: 'syz.2.284': attribute type 25 has an invalid length. [ 67.757994][ T6944] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.758031][ T6944] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.758046][ T6944] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.758061][ T6944] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.758718][ T6944] vxlan0: entered promiscuous mode [ 67.886904][ T6952] syzkaller0: entered allmulticast mode [ 68.957230][ T6984] netlink: 'syz.2.301': attribute type 2 has an invalid length. [ 68.996216][ T5309] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 69.033859][ T6990] netlink: 'syz.3.304': attribute type 4 has an invalid length. [ 69.040371][ T6990] netlink: 'syz.3.304': attribute type 4 has an invalid length. [ 69.045033][ T6990] syz.3.304 (6990) used greatest stack depth: 21088 bytes left [ 69.276280][ T2295] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 69.437685][ T2295] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 69.440072][ T2295] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.446615][ T2295] usb 7-1: config 0 descriptor?? [ 69.450357][ T2295] cp210x 7-1:0.0: cp210x converter detected [ 69.636449][ T5309] Bluetooth: hci1: command tx timeout [ 69.658323][ T2295] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 69.660302][ T2295] cp210x 7-1:0.0: querying part number failed [ 69.665608][ T2295] usb 7-1: cp210x converter now attached to ttyUSB0 [ 69.670258][ T2295] usb 7-1: USB disconnect, device number 3 [ 69.674556][ T2295] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 69.677069][ T2295] cp210x 7-1:0.0: device disconnected [ 70.679550][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.681410][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.988229][ T2295] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 71.083509][ T7072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.313'. [ 72.111000][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'. [ 72.119445][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 72.121686][ T7098] bridge_slave_1: left allmulticast mode [ 72.123137][ T7098] bridge_slave_1: left promiscuous mode [ 72.124587][ T7098] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.130049][ T7098] bridge_slave_0: left allmulticast mode [ 72.131557][ T7098] bridge_slave_0: left promiscuous mode [ 72.133020][ T7098] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.802444][ T25] cfg80211: failed to load regulatory.db [ 80.841588][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.931970][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.015935][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.085530][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.194614][ T12] bridge_slave_1: left allmulticast mode [ 81.196170][ T12] bridge_slave_1: left promiscuous mode [ 81.197680][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.201318][ T12] bridge_slave_0: left allmulticast mode [ 81.203347][ T12] bridge_slave_0: left promiscuous mode [ 81.205395][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.459140][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.462659][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.465792][ T12] bond0 (unregistering): Released all slaves [ 81.727022][ T12] hsr_slave_0: left promiscuous mode [ 81.729047][ T12] hsr_slave_1: left promiscuous mode [ 81.730817][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.732719][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.734955][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.737937][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.753157][ T12] veth1_macvtap: left promiscuous mode [ 81.754623][ T12] veth0_macvtap: left promiscuous mode [ 81.756957][ T12] veth1_vlan: left promiscuous mode [ 81.758410][ T12] veth0_vlan: left promiscuous mode [ 82.023799][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.031666][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.044136][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.047387][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.049214][ T5948] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.050935][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.550661][ T12] team0 (unregistering): Port device team_slave_1 removed [ 82.625836][ T12] team0 (unregistering): Port device team_slave_0 removed [ 83.157457][ T7160] chnl_net:caif_netlink_parms(): no params data found [ 83.209749][ T7160] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.211617][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.213569][ T7160] bridge_slave_0: entered allmulticast mode [ 83.215536][ T7160] bridge_slave_0: entered promiscuous mode [ 83.219300][ T7160] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.221214][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.223090][ T7160] bridge_slave_1: entered allmulticast mode [ 83.225052][ T7160] bridge_slave_1: entered promiscuous mode [ 83.256416][ T7160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.266396][ T7160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.298718][ T7160] team0: Port device team_slave_0 added [ 83.301483][ T7160] team0: Port device team_slave_1 added [ 83.320076][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.321869][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.328391][ T7160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.332167][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.333927][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.340613][ T7160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.364362][ T7160] hsr_slave_0: entered promiscuous mode [ 83.366554][ T7160] hsr_slave_1: entered promiscuous mode [ 83.368397][ T7160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.370464][ T7160] Cannot create hsr debugfs directory [ 83.453952][ T7160] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.457354][ T7160] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.460833][ T7160] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.463798][ T7160] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.472675][ T7160] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.474554][ T7160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.476587][ T7160] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.478460][ T7160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.503211][ T7160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.516633][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.520644][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.534955][ T7160] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.544430][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.547170][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.550642][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.553245][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.652617][ T7160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.783896][ T7160] veth0_vlan: entered promiscuous mode [ 83.788198][ T7160] veth1_vlan: entered promiscuous mode [ 83.801358][ T7160] veth0_macvtap: entered promiscuous mode [ 83.806533][ T7160] veth1_macvtap: entered promiscuous mode [ 83.813281][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.816091][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.818782][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.822403][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.825948][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.829402][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.832831][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.842317][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.846067][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.849442][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.852237][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.854636][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.857793][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.861761][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.867758][ T7160] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.870348][ T7160] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.872446][ T7160] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.874690][ T7160] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.906391][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.909232][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.920319][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.922561][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.974636][ T7232] netlink: 96 bytes leftover after parsing attributes in process `syz.3.336'. [ 84.054895][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.328'. [ 84.064760][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.328'. [ 84.067195][ T7240] bridge_slave_1: left allmulticast mode [ 84.068736][ T7240] bridge_slave_1: left promiscuous mode [ 84.070372][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.073777][ T7240] bridge_slave_0: left allmulticast mode [ 84.075308][ T7240] bridge_slave_0: left promiscuous mode [ 84.077520][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.116641][ T5948] Bluetooth: hci1: command tx timeout [ 85.124650][ T7266] syzkaller0: entered promiscuous mode [ 85.126488][ T7266] syzkaller0: entered allmulticast mode [ 85.481090][ T7278] random: crng reseeded on system resumption [ 85.618834][ T5943] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 85.780232][ T5943] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 85.782389][ T5943] usb 6-1: config 0 has no interface number 0 [ 85.784049][ T5943] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 85.786934][ T5943] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 85.790073][ T5943] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 85.793027][ T5943] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 85.795855][ T5943] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 85.799316][ T5943] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 85.801718][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.804740][ T5943] usb 6-1: config 0 descriptor?? [ 85.806818][ T7273] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.810433][ T5943] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 86.085801][ T1328] usb 6-1: USB disconnect, device number 4 [ 86.108654][ T1328] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 86.196429][ T5948] Bluetooth: hci1: command tx timeout [ 86.669422][ T7325] netlink: 'syz.1.342': attribute type 4 has an invalid length. [ 86.672991][ T7325] netlink: 'syz.1.342': attribute type 4 has an invalid length. [ 87.324336][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 87.324348][ T39] audit: type=1326 audit(1732940566.450:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz.5.357" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x0 [ 87.655185][ T7386] ata3.00: invalid multi_count 1 ignored [ 87.664310][ T1228] Bluetooth: hci4: Frame reassembly failed (-84) [ 87.666069][ T1228] Bluetooth: hci4: Frame reassembly failed (-84) [ 87.668511][ T105] Bluetooth: hci4: Frame reassembly failed (-84) [ 87.670706][ T105] Bluetooth: hci4: Frame reassembly failed (-84) [ 87.672412][ T105] Bluetooth: hci4: Frame reassembly failed (-84) [ 87.955553][ T7399] pim6reg1: entered promiscuous mode [ 87.959802][ T7399] pim6reg1: entered allmulticast mode [ 88.237465][ T7404] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 88.276244][ T5309] Bluetooth: hci1: command tx timeout [ 88.961676][ T7407] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.964863][ T7407] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.966879][ T7407] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.972868][ T7407] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.975103][ T7407] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.976824][ T7407] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.978955][ T7407] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.981299][ T7407] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.982930][ T7407] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.985048][ T7407] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.716288][ T5309] Bluetooth: hci4: command 0x1003 tx timeout [ 89.716493][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 90.403004][ T7455] binder: 7450:7455 ioctl c0306201 20000580 returned -14 [ 90.996291][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.998480][ T5309] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.000535][ T5949] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.076770][ T5309] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.078427][ T5309] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.080050][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.287326][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.303494][ T7525] batadv_slave_0: entered promiscuous mode [ 93.539448][ T7528] Process accounting resumed [ 94.062734][ T39] audit: type=1804 audit(1732940573.190:33): pid=7553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.411" name="/newroot/138/bus/bus" dev="overlay" ino=852 res=1 errno=0 [ 94.070369][ T7553] Invalid ELF header magic: != ELF [ 94.093787][ T5948] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 94.319336][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 94.357200][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 94.359594][ T7567] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 94.361628][ T7567] nbd: error processing sock list [ 94.807834][ T7550] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 94.809615][ T7550] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 94.826542][ T7550] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 94.828124][ T7550] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 94.832908][ T7550] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 94.834487][ T7550] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 94.892487][ T7550] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 94.894435][ T7550] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 96.273288][ T7691] syz.5.430[7691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.273337][ T7691] syz.5.430[7691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.277211][ T7691] syz.5.430[7691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.815173][ T39] audit: type=1326 audit(1732940575.940:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.5.433" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73de579 code=0x0 [ 98.138961][ T7735] random: crng reseeded on system resumption [ 98.154258][ T39] audit: type=1326 audit(1732940577.280:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.1.441" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x0 [ 98.610944][ T7766] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 99.049685][ T39] audit: type=1800 audit(1732940578.180:36): pid=7787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.448" name="/" dev="fuse" ino=1 res=0 errno=0 [ 99.306244][ T63] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 99.457443][ T63] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 99.460052][ T63] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 99.462867][ T63] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 99.465301][ T63] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 99.468394][ T63] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 99.472681][ T63] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 99.475136][ T63] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 99.477891][ T63] usb 10-1: Product: syz [ 99.479037][ T63] usb 10-1: Manufacturer: syz [ 99.482941][ T63] cdc_wdm 10-1:1.0: skipping garbage [ 99.484732][ T63] cdc_wdm 10-1:1.0: skipping garbage [ 99.488111][ T63] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 99.489651][ T63] cdc_wdm 10-1:1.0: Unknown control protocol [ 99.744717][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 99.744820][ T63] usb 10-1: USB disconnect, device number 2 [ 99.746580][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 99.746592][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 102.074476][ T7840] syz.1.461[7840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.074553][ T7840] syz.1.461[7840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.077738][ T7840] syz.1.461[7840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.349829][ T7855] random: crng reseeded on system resumption [ 103.866250][ T5943] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 104.049199][ T5943] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 104.051615][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.053679][ T5943] usb 6-1: Product: syz [ 104.054766][ T5943] usb 6-1: Manufacturer: syz [ 104.055997][ T5943] usb 6-1: SerialNumber: syz [ 104.059584][ T5943] usb 6-1: config 0 descriptor?? [ 104.266741][ T9] usb 6-1: USB disconnect, device number 5 [ 104.429251][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.436478][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.480'. [ 104.438818][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.480'. [ 105.286309][ T63] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 105.338104][ T7953] syz.3.488: attempt to access beyond end of device [ 105.338104][ T7953] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 105.342213][ T7953] syz.3.488: attempt to access beyond end of device [ 105.342213][ T7953] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 105.346016][ T7953] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 105.348824][ T7953] syz.3.488: attempt to access beyond end of device [ 105.348824][ T7953] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 105.352195][ T7953] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 105.354646][ T7953] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 105.356747][ T7953] UDF-fs: Scanning with blocksize 512 failed [ 105.359105][ T7953] syz.3.488: attempt to access beyond end of device [ 105.359105][ T7953] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 105.362502][ T7953] syz.3.488: attempt to access beyond end of device [ 105.362502][ T7953] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 105.365976][ T7953] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 105.370189][ T7953] syz.3.488: attempt to access beyond end of device [ 105.370189][ T7953] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 105.374098][ T7953] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 105.376631][ T7953] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 105.378606][ T7953] UDF-fs: Scanning with blocksize 1024 failed [ 105.380691][ T7953] syz.3.488: attempt to access beyond end of device [ 105.380691][ T7953] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 105.384063][ T7953] syz.3.488: attempt to access beyond end of device [ 105.384063][ T7953] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 105.387997][ T7953] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 105.390569][ T7953] syz.3.488: attempt to access beyond end of device [ 105.390569][ T7953] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 105.394569][ T7953] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 105.397409][ T7953] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 105.399388][ T7953] UDF-fs: Scanning with blocksize 2048 failed [ 105.401210][ T7953] syz.3.488: attempt to access beyond end of device [ 105.401210][ T7953] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 105.404532][ T7953] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 105.407439][ T7953] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 105.409932][ T7953] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 105.411988][ T7953] UDF-fs: Scanning with blocksize 4096 failed [ 105.413587][ T7953] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 105.442442][ T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.446454][ T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.449916][ T63] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 105.453238][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.457620][ T63] usb 6-1: config 0 descriptor?? [ 105.927305][ T63] usbhid 6-1:0.0: can't add hid device: -71 [ 105.929086][ T63] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 105.932270][ T63] usb 6-1: USB disconnect, device number 6 [ 107.190393][ T7981] binder_alloc: 7980: binder_alloc_buf, no vma [ 107.260156][ T7986] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 107.648521][ T7996] veth1_vlan: left promiscuous mode [ 107.722860][ T8000] netlink: 'syz.1.502': attribute type 2 has an invalid length. [ 109.002842][ T8042] overlayfs: failed to get inode (-116) [ 109.005190][ T8042] overlayfs: failed to get inode (-116) [ 109.012627][ T8042] overlayfs: failed to get inode (-116) [ 109.014782][ T8042] overlayfs: failed to get inode (-116) [ 109.018774][ T8040] syz.2.512 (8040): drop_caches: 2 [ 109.185020][ T45] tipc: Subscription rejected, illegal request [ 109.603637][ T5943] kernel write not supported for file /vcs (pid: 5943 comm: kworker/1:2) [ 110.627853][ T8083] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 110.663879][ T8083] kvm: emulating exchange as write [ 111.004459][ T8113] binder_alloc: 8112: binder_alloc_buf size -624 failed, no address space [ 111.007391][ T8113] binder_alloc: allocated: 16 (num: 2 largest: 8), free: 8176 (num: 1 largest: 8176) [ 111.391280][ T8138] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 111.393719][ T8138] overlayfs: failed to set xattr on upper [ 111.395716][ T8138] overlayfs: ...falling back to redirect_dir=nofollow. [ 111.399070][ T8138] overlayfs: ...falling back to index=off. [ 111.401226][ T8138] overlayfs: ...falling back to uuid=null. [ 111.703506][ T1137] tipc: Subscription rejected, illegal request [ 111.848339][ T8158] syzkaller0: entered promiscuous mode [ 111.850378][ T8158] syzkaller0: entered allmulticast mode [ 112.606817][ T57] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 112.762617][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 112.766772][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 112.770615][ T57] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.775379][ T57] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.778957][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.789655][ T57] usb 7-1: config 0 descriptor?? [ 112.791457][ T8169] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.217270][ T57] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 113.229506][ T57] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 113.259300][ T57] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 113.520303][ T57] usb 7-1: USB disconnect, device number 4 [ 114.258174][ T8216] veth1_vlan: left promiscuous mode [ 114.303713][ T8216] netlink: 'syz.2.564': attribute type 2 has an invalid length. [ 115.264741][ T8248] binder: BINDER_SET_CONTEXT_MGR already set [ 115.273944][ T8248] binder: 8247:8248 ioctl 4018620d 200001c0 returned -16 [ 116.444045][ T8269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.066385][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.072370][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.077012][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.080041][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.082425][ T5949] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 117.084494][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.099391][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.101679][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.104258][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.107460][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.110526][ T5948] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 117.114112][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.202886][ T8293] chnl_net:caif_netlink_parms(): no params data found [ 117.277676][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.279660][ T8293] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.281593][ T8293] bridge_slave_0: entered allmulticast mode [ 117.283670][ T8293] bridge_slave_0: entered promiscuous mode [ 117.286941][ T8293] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.288888][ T8293] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.290835][ T8293] bridge_slave_1: entered allmulticast mode [ 117.292895][ T8293] bridge_slave_1: entered promiscuous mode [ 117.314758][ T8293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.318594][ T8293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.360215][ T8293] team0: Port device team_slave_0 added [ 117.363541][ T8293] team0: Port device team_slave_1 added [ 117.390296][ T8293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.393269][ T8293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.401357][ T8293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.405082][ T8293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.407799][ T8293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.414382][ T8293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.459831][ T8307] Bluetooth: Checksum failed: computed cf63 received 007e [ 117.465318][ T8293] hsr_slave_0: entered promiscuous mode [ 117.467894][ T8293] hsr_slave_1: entered promiscuous mode [ 117.471302][ T8293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.473593][ T8293] Cannot create hsr debugfs directory [ 117.544013][ T8293] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 117.549953][ T8293] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 117.554348][ T8293] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 117.571018][ T8293] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 117.585466][ T8293] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.587623][ T8293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.589610][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.591469][ T8293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.613599][ T8293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.621774][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.625939][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.628638][ T57] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 117.646330][ T8293] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.652432][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.654344][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.659557][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.661473][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.675836][ T8293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 117.679006][ T8293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.751535][ T8293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.788931][ T57] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.792349][ T57] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.794916][ T57] usb 10-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 117.798208][ T57] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.802589][ T57] usb 10-1: config 0 descriptor?? [ 117.855861][ T8293] veth0_vlan: entered promiscuous mode [ 117.860583][ T8293] veth1_vlan: entered promiscuous mode [ 117.869363][ T8293] veth0_macvtap: entered promiscuous mode [ 117.873178][ T8293] veth1_macvtap: entered promiscuous mode [ 117.880480][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.883212][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.885707][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.889663][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.892231][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.894940][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.898755][ T8293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.904964][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.908436][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.910935][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.913601][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.916089][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.918839][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.921240][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.923901][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.927021][ T8293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.934072][ T8293] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.936487][ T8293] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.938766][ T8293] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.941117][ T8293] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.984307][ T1228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.988013][ T1228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.001202][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.003644][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.374017][ T57] usbhid 10-1:0.0: can't add hid device: -71 [ 118.376715][ T57] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 118.384623][ T57] usb 10-1: USB disconnect, device number 3 [ 118.561734][ T8340] syzkaller0: entered promiscuous mode [ 118.563162][ T8340] syzkaller0: entered allmulticast mode [ 119.158981][ T5949] Bluetooth: hci2: command tx timeout [ 119.228171][ T8350] loop7: detected capacity change from 0 to 16384 [ 119.298537][ T8350] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.302124][ T8350] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.305415][ T8351] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.309490][ T8350] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.312118][ T8350] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.314301][ T8350] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.318701][ T8350] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.320894][ T8350] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.323311][ T8350] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.325424][ T8350] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.333964][ T8350] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.336938][ T8350] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.339329][ T8350] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.341410][ T8350] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.343889][ T8350] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.346030][ T8350] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.348641][ T8350] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.350673][ T8350] ldm_validate_partition_table(): Disk read failed. [ 119.354683][ T8350] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.357546][ T8350] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.359689][ T8350] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.361896][ T8350] Dev loop7: unable to read RDB block 0 [ 119.377899][ T8350] loop7: unable to read partition table [ 119.379616][ T8350] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 119.486533][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 119.488699][ T5949] Bluetooth: hci4: command 0x1003 tx timeout [ 120.456304][ T57] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 120.608804][ T57] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.612016][ T57] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.614552][ T57] usb 11-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 120.617144][ T57] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.621240][ T57] usb 11-1: config 0 descriptor?? [ 120.632198][ T8361] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.633950][ T8361] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 121.273740][ T57] usbhid 11-1:0.0: can't add hid device: -71 [ 121.275464][ T57] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 121.286700][ T57] usb 11-1: USB disconnect, device number 2 [ 121.446317][ T833] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 121.599321][ T833] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 121.601502][ T833] usb 10-1: config 0 has no interface number 0 [ 121.603450][ T833] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 121.607183][ T833] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 121.610264][ T833] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 121.614089][ T833] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 121.617580][ T833] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 121.621858][ T833] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 121.624725][ T833] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.628937][ T833] usb 10-1: config 0 descriptor?? [ 121.631444][ T8381] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 121.637671][ T833] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 121.897477][ C1] ldusb 10-1:0.55: usb_submit_urb failed (-1) [ 121.903031][ T8330] usb 10-1: USB disconnect, device number 4 [ 121.905578][ T8330] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 121.987161][ T105] tipc: Subscription rejected, illegal request [ 122.855685][ T39] audit: type=1326 audit(1732940601.980:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.1.619" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x0 [ 123.582968][ T8430] kvm: pic: non byte read [ 123.905334][ T8465] input: syz0 as /devices/virtual/input/input7 [ 124.800389][ T8486] loop7: detected capacity change from 0 to 16384 [ 124.858828][ T8486] blk_print_req_error: 7 callbacks suppressed [ 124.858840][ T8486] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.860436][ T8488] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 124.860571][ T8486] buffer_io_error: 21 callbacks suppressed [ 124.860579][ T8486] Buffer I/O error on dev loop7, logical block 1, async page read [ 124.863684][ T8488] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 124.866814][ T8486] Dev loop7: unable to read RDB block 8 [ 124.874337][ T8486] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.877765][ T8486] Buffer I/O error on dev loop7, logical block 3, async page read [ 124.880637][ T8486] loop7: unable to read partition table [ 124.882764][ T8486] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 124.941234][ T8486] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 124.944320][ T8486] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 124.946657][ T8486] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 124.949059][ T8486] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 124.951370][ T8486] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 124.953583][ T8486] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 124.955846][ T8486] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 124.958179][ T8486] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 125.738543][ T12] tipc: Subscription rejected, illegal request [ 126.054899][ T8508] netlink: 'syz.5.635': attribute type 4 has an invalid length. [ 126.068459][ T8508] netlink: 'syz.5.635': attribute type 4 has an invalid length. [ 126.178234][ T39] audit: type=1804 audit(1732940605.300:38): pid=8511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.637" name="/newroot/77/file1" dev="fuse" ino=1 res=1 errno=0 [ 126.183551][ T39] audit: type=1800 audit(1732940605.300:39): pid=8511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.637" name="/" dev="fuse" ino=1 res=0 errno=0 [ 126.751299][ T8530] binder: 8529:8530 ioctl c0306201 20000140 returned -14 [ 127.237590][ T8556] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 127.255576][ T8556] kvm: pic: non byte read [ 127.258892][ T8556] kvm: pic: non byte read [ 127.262387][ T8556] kvm: pic: non byte read [ 127.265540][ T8556] kvm: pic: non byte read [ 127.277875][ T8556] kvm: pic: non byte read [ 127.280066][ T8556] kvm: pic: non byte read [ 127.282369][ T8556] kvm: pic: non byte read [ 127.284330][ T8556] kvm: pic: non byte read [ 127.286710][ T8556] kvm: pic: non byte read [ 127.289655][ T8556] kvm: pic: single mode not supported [ 127.289664][ T8556] kvm: pic: level sensitive irq not supported [ 128.279253][ T8577] netlink: 1272 bytes leftover after parsing attributes in process `syz.5.658'. [ 128.280376][ T8582] netlink: 'syz.3.661': attribute type 4 has an invalid length. [ 128.290516][ T8582] netlink: 'syz.3.661': attribute type 4 has an invalid length. [ 128.323665][ T8580] process 'syz.1.660' launched './file0' with NULL argv: empty string added [ 128.379509][ T39] audit: type=1800 audit(1732940607.510:40): pid=8584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.662" name="/" dev="fuse" ino=1 res=0 errno=0 [ 130.027834][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.6.675'. [ 130.092482][ T39] audit: type=1326 audit(1732940609.220:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.6.677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 130.098277][ T39] audit: type=1326 audit(1732940609.220:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.6.677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 130.103776][ T39] audit: type=1326 audit(1732940609.220:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.6.677" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 130.109281][ T39] audit: type=1326 audit(1732940609.220:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.6.677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 130.117658][ T39] audit: type=1326 audit(1732940609.220:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.6.677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 130.124267][ T39] audit: type=1326 audit(1732940609.220:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.6.677" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 130.129777][ T39] audit: type=1326 audit(1732940609.220:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.6.677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 130.133864][ T8635] netlink: 28 bytes leftover after parsing attributes in process `syz.6.678'. [ 130.135165][ T39] audit: type=1326 audit(1732940609.220:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.6.677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 130.138177][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.678'. [ 130.143007][ T39] audit: type=1326 audit(1732940609.220:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.6.677" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 130.268393][ T8645] loop7: detected capacity change from 0 to 16384 [ 130.279385][ T8646] overlayfs: failed to get inode (-116) [ 130.280949][ T8646] overlayfs: failed to get inode (-116) [ 130.318929][ T8645] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 130.321475][ T8645] buffer_io_error: 9 callbacks suppressed [ 130.321482][ T8645] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 130.379337][ T8653] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 130.382429][ T8653] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 130.385190][ T8653] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 130.387895][ T8653] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 130.390073][ T8653] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 130.392273][ T8653] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 130.394451][ T8653] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 130.396869][ T8653] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 130.399050][ T8653] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 130.402731][ T8653] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 130.408300][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.686'. [ 130.559552][ T8] IPVS: starting estimator thread 0... [ 130.658290][ T8667] IPVS: using max 39 ests per chain, 93600 per kthread [ 131.683721][ T8664] tipc: Started in network mode [ 131.685081][ T8664] tipc: Node identity ac1414aa, cluster identity 4711 [ 131.687598][ T8664] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 131.689458][ T8664] tipc: Enabled bearer , priority 10 [ 131.827572][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 131.876770][ T8681] ceph: No mds server is up or the cluster is laggy [ 131.966268][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 131.970544][ T8709] input: syz0 as /devices/virtual/input/input8 [ 132.106691][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.117694][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.119850][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.246277][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.386203][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.526215][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.666232][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.722978][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.6.701'. [ 132.807911][ T2295] tipc: Node number set to 2886997162 [ 132.946291][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 133.216331][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 133.320823][ T8733] Process accounting resumed [ 133.454699][ T8743] syzkaller0: entered promiscuous mode [ 133.459868][ T8743] syzkaller0: entered allmulticast mode [ 133.470064][ T39] kauditd_printk_skb: 55 callbacks suppressed [ 133.470073][ T39] audit: type=1326 audit(1732940612.600:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 133.499810][ T39] audit: type=1326 audit(1732940612.600:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 133.515475][ T39] audit: type=1326 audit(1732940612.610:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.715" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 133.522911][ T39] audit: type=1326 audit(1732940612.610:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 133.543311][ T39] audit: type=1326 audit(1732940612.610:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 133.554788][ T39] audit: type=1326 audit(1732940612.610:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.715" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 133.562495][ T39] audit: type=1326 audit(1732940612.610:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 133.578197][ T39] audit: type=1326 audit(1732940612.610:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 133.583655][ T39] audit: type=1326 audit(1732940612.610:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.715" exe="/syz-executor" sig=0 arch=40000003 syscall=157 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 133.596251][ T39] audit: type=1326 audit(1732940612.610:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 134.654966][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.5.723'. [ 134.669948][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.5.723'. [ 134.812245][ T8782] kvm: kvm [8781]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0xffff45f600000003 [ 134.834309][ T8782] kvm: kvm [8781]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0xffff45f600000003 [ 134.842265][ T8782] kvm: kvm [8781]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0xffff45f600000003 [ 134.867770][ T8782] kvm_intel: kvm [8781]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0xffff45f600000003 [ 135.140903][ T8790] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 135.142749][ T8790] overlayfs: failed to set xattr on upper [ 135.144224][ T8790] overlayfs: ...falling back to redirect_dir=nofollow. [ 135.145980][ T8790] overlayfs: ...falling back to index=off. [ 135.148041][ T8790] overlayfs: ...falling back to uuid=null. [ 135.354392][ T8807] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 135.611559][ T8825] overlayfs: failed to get inode (-116) [ 135.613274][ T8825] overlayfs: failed to get inode (-116) [ 135.676244][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 135.826254][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 135.832417][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 135.836891][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.840351][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.843737][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.847235][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.851590][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.854641][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.072428][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 136.073961][ T9] usbtmc 6-1:16.0: can't read capabilities [ 136.232907][ T8838] [ 136.233606][ T8838] ============================= [ 136.234867][ T8838] [ BUG: Invalid wait context ] [ 136.236127][ T8838] 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 Not tainted [ 136.237992][ T8838] ----------------------------- [ 136.240548][ T8838] iou-wrk-8835/8838 is trying to lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 136.242333][ T8838] ffff88802430c0d8 (&sighand->siglock){-.-.}-{3:3}, at: __lock_task_sighand+0xc2/0x340 [ 136.245053][ T8838] other info that might help us debug this: [ 136.246665][ T8838] context-{5:5} [ 136.247584][ T8838] 3 locks held by iou-wrk-8835/8838: [ 136.249034][ T8838] #0: ffff888069bc1928 (&acct->lock){+.+.}-{2:2}, at: io_wq_worker+0x34c/0xdf0 [ 136.251385][ T8838] #1: ffffffff8ddbaf80 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1c2/0x590 [ 136.253837][ T8838] #2: ffffffff8ddbaf80 (rcu_read_lock){....}-{1:3}, at: __lock_task_sighand+0x3f/0x340 [ 136.256385][ T8838] stack backtrace: [ 136.257442][ T8838] CPU: 0 UID: 0 PID: 8838 Comm: iou-wrk-8835 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 136.260135][ T8838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.263065][ T8838] Call Trace: [ 136.263943][ T8838] [ 136.264724][ T8838] dump_stack_lvl+0x116/0x1f0 [ 136.266010][ T8838] __lock_acquire+0x878/0x3c40 [ 136.267370][ T8838] ? __pfx___lock_acquire+0x10/0x10 [ 136.269032][ T8838] ? __pfx___lock_acquire+0x10/0x10 [ 136.270610][ T8838] lock_acquire.part.0+0x11b/0x380 [ 136.271993][ T8838] ? __lock_task_sighand+0xc2/0x340 [ 136.273483][ T8838] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 136.275068][ T8838] ? rcu_is_watching+0x12/0xc0 [ 136.276330][ T8838] ? trace_lock_acquire+0x14e/0x1f0 [ 136.277717][ T8838] ? trace_lock_acquire+0x14e/0x1f0 [ 136.279121][ T8838] ? __lock_task_sighand+0xc2/0x340 [ 136.280469][ T8838] ? lock_acquire+0x2f/0xb0 [ 136.281663][ T8838] ? __lock_task_sighand+0xc2/0x340 [ 136.283032][ T8838] _raw_spin_lock_irqsave+0x3a/0x60 [ 136.284417][ T8838] ? __lock_task_sighand+0xc2/0x340 [ 136.285777][ T8838] __lock_task_sighand+0xc2/0x340 [ 136.287118][ T8838] group_send_sig_info+0x290/0x300 [ 136.288444][ T8838] ? __pfx_group_send_sig_info+0x10/0x10 [ 136.289892][ T8838] ? __pfx___lock_acquire+0x10/0x10 [ 136.291248][ T8838] bpf_send_signal_common+0x415/0x520 [ 136.292643][ T8838] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 136.294177][ T8838] ? trace_lock_acquire+0x14e/0x1f0 [ 136.295534][ T8838] ? __lock_acquire+0x15a9/0x3c40 [ 136.296837][ T8838] ? bpf_trace_run2+0x1c2/0x590 [ 136.298134][ T8838] bpf_send_signal+0x1d/0x30 [ 136.299359][ T8838] bpf_prog_631417f49dd64198+0x25/0x48 [ 136.300776][ T8838] bpf_trace_run2+0x231/0x590 [ 136.302144][ T8838] ? __pfx_bpf_trace_run2+0x10/0x10 [ 136.303642][ T8838] ? hlock_class+0x4e/0x130 [ 136.304848][ T8838] trace_contention_end.constprop.0+0xf0/0x170 [ 136.306463][ T8838] __pv_queued_spin_lock_slowpath+0x27e/0xc90 [ 136.308203][ T8838] ? __io_uaddr_map+0x160/0x260 [ 136.309483][ T8838] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 136.311208][ T8838] ? lock_acquire.part.0+0x11b/0x380 [ 136.312602][ T8838] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 136.314068][ T8838] do_raw_spin_lock+0x210/0x2c0 [ 136.315362][ T8838] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 136.316800][ T8838] ? lock_acquire+0x2f/0xb0 [ 136.318005][ T8838] ? io_wq_worker+0x34c/0xdf0 [ 136.319259][ T8838] io_wq_worker+0x34c/0xdf0 [ 136.320464][ T8838] ? __pfx_io_wq_worker+0x10/0x10 [ 136.321786][ T8838] ? ret_from_fork+0x23/0x80 [ 136.323036][ T8838] ? __pfx_lock_release+0x10/0x10 [ 136.324352][ T8838] ? do_raw_spin_lock+0x12d/0x2c0 [ 136.325665][ T8838] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 136.327077][ T8838] ? __pfx_io_wq_worker+0x10/0x10 [ 136.328388][ T8838] ret_from_fork+0x45/0x80 [ 136.329551][ T8838] ? __pfx_io_wq_worker+0x10/0x10 [ 136.330867][ T8838] ret_from_fork_asm+0x1a/0x30 [ 136.332121][ T8838] [ 136.716623][ T5981] usb 6-1: USB disconnect, device number 7 [ 136.740442][ T1228] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.791527][ T1228] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.878463][ T1228] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.949061][ T1228] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.011610][ T1228] bridge_slave_1: left allmulticast mode [ 137.013093][ T1228] bridge_slave_1: left promiscuous mode [ 137.014527][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.017518][ T1228] bridge_slave_0: left allmulticast mode [ 137.018975][ T1228] bridge_slave_0: left promiscuous mode [ 137.020380][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.130279][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.133367][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.136734][ T1228] bond0 (unregistering): Released all slaves [ 137.365338][ T1228] hsr_slave_0: left promiscuous mode [ 137.368081][ T1228] hsr_slave_1: left promiscuous mode [ 137.369867][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.371827][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.373957][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.376001][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.379675][ T1228] veth1_macvtap: left promiscuous mode [ 137.381118][ T1228] veth0_macvtap: left promiscuous mode [ 137.382564][ T1228] veth1_vlan: left promiscuous mode [ 137.383945][ T1228] veth0_vlan: left promiscuous mode [ 137.540160][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 137.577651][ T1228] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 04:23:35 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8509d1e5 RDI=ffffffff9a66c280 RBP=ffffffff9a66c240 RSP=ffffc90003227230 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000039 R14=ffffffff8509d180 R15=0000000000000000 RIP=ffffffff8509d20f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000205c5000 CR3=0000000025928000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=00000000207d2000 RCX=ffffffff81dd83ad RDX=ffff888020ba2440 RSI=ffffffff81dd83bb RDI=0000000000000007 RBP=00000000679f9067 RSP=ffffc90003577628 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000067 R13=ffff8880268d6818 R14=0000000000000000 R15=000ffffffffff000 RIP=ffffffff818dffd6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000207d2000 CR3=0000000025928000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000001 RBX=0000000000000001 RCX=1ffffffff3476f14 RDX=0000000000000000 RSI=ffffffff8bb167a0 RDI=0000000000000001 RBP=0000000000000286 RSP=ffffc90003777840 R8 =0000000000000000 R9 =fffffbfff203a2ca R10=ffffffff901d1657 R11=00000000000a201e R12=ffffffff9a564970 R13=0000000000000cb2 R14=0000000000000000 R15=ffff888049fa2110 RIP=ffffffff815cd2e2 RFL=00000013 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f96e40 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 005858585858582e 7a7973d0000000e4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ff0f0e0d0c0b0a09 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=1ffffffff203a92a RDX=ffff8880223a4880 RSI=ffffffff813d0a34 RDI=ffffffff813d0a21 RBP=ffff888069bc1910 RSP=ffffc900034d7be8 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff901d1657 R11=0000000000000001 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b73fc40 R15=ffffed100d378322 RIP=ffffffff813d0a36 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020502000 CR3=0000000025928000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000