last executing test programs: 2.313331236s ago: executing program 3 (id=2588): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xe, 0xb}, {0xffe0}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) 2.252321474s ago: executing program 3 (id=2590): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x4c, 0x30, 0x1, 0x8000000, 0xfffffffd, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x240400c0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c9420343758864450000280022000000069078ac"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2.185113437s ago: executing program 0 (id=2593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x1, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000020000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x15) 2.184000829s ago: executing program 1 (id=2594): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ftruncate(r0, 0x80000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r6) sendmsg$NFC_CMD_DEV_DOWN(r6, 0x0, 0x4004c044) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r7, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x1b}}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r7, &(0x7f0000000980)=[{{0x0, 0x1b, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb31}], 0x1, 0x40002102, 0x0) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0xfffffffffffffd3f, &(0x7f0000000c40)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}], 0x18, 0x40000}], 0x1, 0x8000) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfaffffff}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.11265399s ago: executing program 3 (id=2596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0xfff2}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x0, 0x4, 0x2, 0x9, 0x7, 0x7, 0x1, 0x3, 0x98, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2", 0x1}], 0x1}, 0x20004014) 2.11241471s ago: executing program 0 (id=2597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0xb2}, 0x1, 0x0, 0x0, 0x240448d1}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.277263676s ago: executing program 1 (id=2601): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) close(0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) 472.334666ms ago: executing program 0 (id=2602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010601000000000000000200000a0900010073797a30000000004c000000030a010602000000000000000200000a0900010073797a30000000000900030073797a30000000000b00070066696c7465720000140004800800014000000003080002"], 0x100}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f00000000c0)=@in={0x2, 0x270f, @rand_addr=0x64010101}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f000000000000"], 0x6a) 409.969959ms ago: executing program 3 (id=2605): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0x600}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) io_uring_setup(0x3fa5, &(0x7f0000000000)={0x0, 0x6cae, 0x100, 0x1, 0x5a}) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x4007, @fd=r1, 0x3f1, 0x0, 0x0, 0x15, 0x0, {0x2, 0x0, 0xf2, '\x00', 0x0, 0x7c}}) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) 362.407604ms ago: executing program 3 (id=2607): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd0c, &(0x7f0000000000)="0400000000000000000000003801") 362.20991ms ago: executing program 3 (id=2608): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='file drivers/md/raid5.c +p', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='4096', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1:0', 0x3) write(r5, &(0x7f00000004c0)='1:1', 0x3) write(r5, &(0x7f0000000500)='1:2', 0x3) write(r5, &(0x7f0000000540)='1:3', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='0', 0x1) r7 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r7, &(0x7f0000000640)='1', 0x1) write(0xffffffffffffffff, &(0x7f00000006c0)='2', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f00000007c0)='active', 0x6) 353.718135ms ago: executing program 1 (id=2609): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x8}}, './proc\x00'}) 288.313045ms ago: executing program 0 (id=2611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0xb2}, 0x1, 0x0, 0x0, 0x240448d1}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 282.453306ms ago: executing program 2 (id=2612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x7, 0xb, 0x3}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00", 0xa}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9", 0x24}], 0x2}, 0x8000) 279.938409ms ago: executing program 1 (id=2613): mkdirat(0xffffffffffffff9c, 0x0, 0x43) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x121003, 0x1ac) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 201.612191ms ago: executing program 2 (id=2614): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="0b7705", 0x3}], 0x1) 201.226878ms ago: executing program 1 (id=2615): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 200.801665ms ago: executing program 0 (id=2616): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0x600}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) io_uring_setup(0x3fa5, &(0x7f0000000000)={0x0, 0x6cae, 0x100, 0x1, 0x5a}) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x4007, @fd=r1, 0x3f1, 0x0, 0x0, 0x15, 0x0, {0x2, 0x0, 0xf2, '\x00', 0x0, 0x7c}}) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) 200.638924ms ago: executing program 2 (id=2617): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd0c, &(0x7f0000000000)="0400000000000000000000003801") 143.666477ms ago: executing program 1 (id=2618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0xc400941b, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) 143.394605ms ago: executing program 0 (id=2619): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) close(0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) 143.072956ms ago: executing program 2 (id=2620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010601000000000000000200000a0900010073797a30000000004c000000030a010602000000000000000200000a0900010073797a30000000000900030073797a30000000000b00070066696c7465720000140004800800014000000003080002"], 0x100}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f00000000c0)=@in={0x2, 0x270f, @rand_addr=0x64010101}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f000000000000"], 0x6a) 839.56µs ago: executing program 2 (id=2621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 0s ago: executing program 2 (id=2622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x1, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000020000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x15) kernel console output (not intermixed with test programs): 7417][ T5759] Bluetooth: hci3: command tx timeout [ 55.774847][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 55.836379][ T5759] Bluetooth: hci1: command tx timeout [ 55.836391][ T5103] Bluetooth: hci2: command tx timeout [ 55.871692][ T5836] IPVS: starting estimator thread 0... [ 55.926452][ T10] usb 7-1: device descriptor read/64, error -71 [ 55.964496][ T6016] IPVS: using max 24 ests per chain, 57600 per kthread [ 55.978034][ T6019] fuse: Bad value for 'fd' [ 56.035662][ T10] usb usb7-port1: attempt power cycle [ 56.344087][ T6024] jffs2: notice: (6024) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 56.395168][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 56.426689][ T10] usb 7-1: device descriptor read/8, error -71 [ 56.469966][ T6028] FAULT_INJECTION: forcing a failure. [ 56.469966][ T6028] name failslab, interval 1, probability 0, space 0, times 1 [ 56.476251][ T6028] CPU: 2 UID: 0 PID: 6028 Comm: syz.1.31 Not tainted syzkaller #0 PREEMPT(full) [ 56.476276][ T6028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.476286][ T6028] Call Trace: [ 56.476291][ T6028] [ 56.476298][ T6028] dump_stack_lvl+0x100/0x190 [ 56.476324][ T6028] should_fail_ex.cold+0x5/0xa [ 56.476343][ T6028] should_failslab+0xc2/0x120 [ 56.476366][ T6028] __kmalloc_noprof+0xfc/0x820 [ 56.476385][ T6028] ? rcu_is_watching+0x12/0xc0 [ 56.476404][ T6028] ? tomoyo_realpath_from_path+0xb6/0x690 [ 56.476457][ T6028] tomoyo_realpath_from_path+0xb6/0x690 [ 56.476485][ T6028] tomoyo_path_number_perm+0x23c/0x580 [ 56.476505][ T6028] ? tomoyo_path_number_perm+0x22e/0x580 [ 56.476526][ T6028] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 56.476547][ T6028] ? get_pid_task+0x106/0x250 [ 56.476585][ T6028] ? find_held_lock+0x2b/0x80 [ 56.476610][ T6028] ? __fget_files+0x215/0x3d0 [ 56.476624][ T6028] ? hook_file_ioctl_common+0x140/0x440 [ 56.476646][ T6028] ? __fget_files+0x215/0x3d0 [ 56.476664][ T6028] ? __fget_files+0x21f/0x3d0 [ 56.476682][ T6028] security_file_ioctl_compat+0xd3/0x230 [ 56.476705][ T6028] __ia32_compat_sys_ioctl+0xc2/0x360 [ 56.476731][ T6028] __do_fast_syscall_32+0xe7/0x970 [ 56.476753][ T6028] ? lockdep_hardirqs_on+0x78/0x100 [ 56.476775][ T6028] do_fast_syscall_32+0x32/0x70 [ 56.476797][ T6028] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.476817][ T6028] RIP: 0023:0xf708efec [ 56.476851][ T6028] Code: Unable to access opcode bytes at 0xf708efc2. [ 56.476860][ T6028] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 56.476877][ T6028] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000004601 [ 56.476887][ T6028] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.476897][ T6028] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.476905][ T6028] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 56.476915][ T6028] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.476935][ T6028] [ 56.477100][ T6028] ERROR: Out of memory at tomoyo_realpath_from_path. [ 56.675002][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 56.706106][ T10] usb 7-1: device descriptor read/8, error -71 [ 56.814946][ T10] usb usb7-port1: unable to enumerate USB device [ 56.871453][ T6033] ubi16: attaching mtd0 [ 56.878682][ T6033] ubi16: scanning is finished [ 56.880891][ T6033] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 57.017280][ T6033] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 57.372862][ T6042] UDC core: g1: couldn't find an available UDC or it's busy [ 57.394036][ T6042] batadv0: entered promiscuous mode [ 57.397645][ T6042] macsec1: entered promiscuous mode [ 57.400601][ T6042] macsec1: entered allmulticast mode [ 57.402891][ T6042] batadv0: entered allmulticast mode [ 57.410668][ T6042] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 57.415908][ T6042] batadv0: left allmulticast mode [ 57.418735][ T6042] batadv0: left promiscuous mode [ 58.162226][ T34] legousbtower 5-1:14.57: interrupt endpoints not found [ 58.171854][ T34] legousbtower 5-1:14.228: interrupt endpoints not found [ 58.183358][ T34] usb 5-1: USB disconnect, device number 2 [ 58.574494][ T34] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 58.594889][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 58.734424][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 58.743406][ T34] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 58.749538][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 58.754494][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 58.757441][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 58.757509][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 58.760670][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 58.763721][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.763752][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 58.763764][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.777232][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 58.797951][ T10] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 58.804487][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.808001][ T10] usb 7-1: Product: syz [ 58.809774][ T10] usb 7-1: Manufacturer: syz [ 58.813259][ T10] usb 7-1: SerialNumber: syz [ 58.824122][ T10] usb 7-1: config 0 descriptor?? [ 58.969138][ T34] usb 5-1: GET_CAPABILITIES returned 0 [ 58.971602][ T34] usbtmc 5-1:16.0: can't read capabilities [ 58.989437][ T34] usb 5-1: USB disconnect, device number 3 [ 59.031088][ T10] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 59.061143][ T6067] netlink: 68 bytes leftover after parsing attributes in process `syz.0.42'. [ 59.287785][ T1489] usb 7-1: USB disconnect, device number 6 [ 59.955590][ T6079] Zero length message leads to an empty skb [ 60.002824][ T6081] xt_CT: No such helper "pptp" [ 60.007734][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 60.012641][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 61.827568][ T6106] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 61.834846][ T6106] device-mapper: ioctl: error adding target to table [ 61.943302][ T6108] overlayfs: failed lookup in lower (newroot/17, name='file0', err=-40): overlapping layers [ 62.138319][ T5836] IPVS: starting estimator thread 0... [ 62.148580][ T6126] netlink: 68 bytes leftover after parsing attributes in process `syz.3.55'. [ 62.272375][ T6125] IPVS: using max 43 ests per chain, 103200 per kthread [ 62.348375][ T42] kauditd_printk_skb: 287 callbacks suppressed [ 62.348414][ T42] audit: type=1326 audit(1785963427.205:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.2.56" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 62.357480][ T42] audit: type=1326 audit(1785963427.215:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.2.56" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 62.368472][ T42] audit: type=1326 audit(1785963427.225:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.2.56" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 62.381543][ T42] audit: type=1326 audit(1785963427.225:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.2.56" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 62.393535][ T42] audit: type=1326 audit(1785963427.225:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.2.56" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 62.405871][ T42] audit: type=1326 audit(1785963427.225:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.2.56" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 62.419151][ T42] audit: type=1326 audit(1785963427.225:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.2.56" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 62.431341][ T42] audit: type=1326 audit(1785963427.235:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.2.56" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 62.443283][ T42] audit: type=1326 audit(1785963427.235:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.2.56" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 62.454896][ T42] audit: type=1326 audit(1785963427.235:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6129 comm="syz.2.56" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 63.071079][ T6138] netlink: 32 bytes leftover after parsing attributes in process `syz.0.58'. [ 63.078907][ T6138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.58'. [ 63.675865][ T6152] ubi16: attaching mtd0 [ 63.700461][ T6152] ubi16: scanning is finished [ 63.703087][ T6152] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 63.981769][ T6160] gretap1: entered allmulticast mode [ 63.987705][ T5894] IPVS: starting estimator thread 0... [ 64.084507][ T6163] IPVS: using max 42 ests per chain, 100800 per kthread [ 64.129086][ T6166] netlink: 68 bytes leftover after parsing attributes in process `syz.1.67'. [ 64.189869][ T6152] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 66.574590][ T41] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 66.677614][ T6192] netlink: 68 bytes leftover after parsing attributes in process `syz.3.75'. [ 66.753710][ T41] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 66.757714][ T41] usb 7-1: config 0 interface 0 has no altsetting 0 [ 66.762696][ T41] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 66.769022][ T41] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 66.775218][ T41] usb 7-1: Product: syz [ 66.776696][ T41] usb 7-1: Manufacturer: syz [ 66.790169][ T41] usb 7-1: SerialNumber: syz [ 66.809617][ T6196] ubi16: attaching mtd0 [ 66.813921][ T6196] ubi16: scanning is finished [ 66.816455][ T6196] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 66.890844][ T41] usb 7-1: config 0 descriptor?? [ 66.901428][ T6194] input: syz0 as /devices/virtual/input/input6 [ 66.919589][ T41] usb 7-1: selecting invalid altsetting 0 [ 67.066380][ T6196] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 67.146300][ T6205] netlink: 68 bytes leftover after parsing attributes in process `syz.0.78'. [ 67.404916][ T5894] usb 7-1: USB disconnect, device number 7 [ 67.405334][ C1] usb 7-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 67.410951][ T6208] usb 7-1: cannot submit urb 0, error -19: no device [ 67.414232][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 67.551114][ T6217] jffs2: notice: (6217) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 67.597119][ T6221] jffs2: notice: (6221) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 67.675632][ T6228] process 'syz.1.82' launched '/dev/fd/6' with NULL argv: empty string added [ 67.697391][ T6228] syz.1.82 uses obsolete (PF_INET,SOCK_PACKET) [ 67.773296][ T6238] jffs2: notice: (6238) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 67.859789][ T6243] jffs2: notice: (6243) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 68.029044][ T6255] jffs2: notice: (6255) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 68.107759][ T6264] netlink: 68 bytes leftover after parsing attributes in process `syz.0.90'. [ 68.628999][ T6300] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 68.674588][ T6302] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 69.069068][ T6302] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 69.738459][ T6310] 8021q: adding VLAN 0 to HW filter on device eth0 [ 69.742012][ T6310] 8021q: adding VLAN 0 to HW filter on device eth1 [ 69.745309][ T6312] netlink: 32 bytes leftover after parsing attributes in process `syz.0.101'. [ 69.745751][ T6310] 8021q: adding VLAN 0 to HW filter on device eth2 [ 69.751846][ T6310] 8021q: adding VLAN 0 to HW filter on device eth3 [ 69.755572][ T6312] veth0: entered promiscuous mode [ 69.759084][ T6311] veth0: left promiscuous mode [ 69.812187][ T6315] netlink: 68 bytes leftover after parsing attributes in process `syz.1.102'. [ 70.103534][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 70.103548][ T42] audit: type=1326 audit(1785963434.955:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.0.108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 70.125500][ T42] audit: type=1326 audit(1785963434.955:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.0.108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 70.132524][ T42] audit: type=1326 audit(1785963434.975:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.0.108" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 70.139530][ T42] audit: type=1326 audit(1785963434.975:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.0.108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 70.148258][ T42] audit: type=1326 audit(1785963434.975:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.0.108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 70.156845][ T42] audit: type=1326 audit(1785963434.975:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.0.108" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 70.165891][ T42] audit: type=1326 audit(1785963434.975:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.0.108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 70.173233][ T42] audit: type=1326 audit(1785963434.975:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.0.108" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 70.182108][ T42] audit: type=1326 audit(1785963434.975:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.0.108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 70.190939][ T42] audit: type=1326 audit(1785963434.975:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.0.108" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 70.373571][ T6331] netlink: 'syz.3.109': attribute type 13 has an invalid length. [ 70.376274][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 70.401739][ T6331] random: crng reseeded on system resumption [ 70.632864][ T6338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.110'. [ 71.094150][ T6346] warning: `syz.2.112' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.259399][ T6350] FAULT_INJECTION: forcing a failure. [ 71.259399][ T6350] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 71.268451][ T6350] CPU: 1 UID: 0 PID: 6350 Comm: syz.3.114 Not tainted syzkaller #0 PREEMPT(full) [ 71.268492][ T6350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.268502][ T6350] Call Trace: [ 71.268508][ T6350] [ 71.268516][ T6350] dump_stack_lvl+0x100/0x190 [ 71.268542][ T6350] should_fail_ex.cold+0x5/0xa [ 71.268561][ T6350] ? prepare_alloc_pages+0x16d/0x5f0 [ 71.268589][ T6350] should_fail_alloc_page+0xeb/0x140 [ 71.268614][ T6350] prepare_alloc_pages+0x1f0/0x5f0 [ 71.268638][ T6350] ? process_measurement+0x4c8/0x2350 [ 71.268664][ T6350] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 71.268685][ T6350] ? up_write+0x2e5/0x5c0 [ 71.268707][ T6350] ? process_measurement+0x1f4/0x2350 [ 71.268732][ T6350] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 71.268756][ T6350] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 71.268780][ T6350] ? __lock_acquire+0x49f/0x1a40 [ 71.268810][ T6350] ? __lock_acquire+0x49f/0x1a40 [ 71.268845][ T6350] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.268872][ T6350] ? policy_nodemask+0xed/0x4f0 [ 71.268898][ T6350] alloc_pages_mpol+0x1fb/0x540 [ 71.268923][ T6350] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 71.268948][ T6350] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 71.268982][ T6350] alloc_pages_noprof+0x1a/0x160 [ 71.268999][ T6350] pte_alloc_one+0x1c/0x3d0 [ 71.269026][ T6350] do_fault+0x86c/0x1750 [ 71.269054][ T6350] __handle_mm_fault+0x187d/0x2a00 [ 71.269076][ T6350] ? mt_find+0x45e/0x8e0 [ 71.269104][ T6350] ? __pfx___handle_mm_fault+0x10/0x10 [ 71.269119][ T6350] ? __pfx_mt_find+0x10/0x10 [ 71.269157][ T6350] ? find_vma+0xbf/0x140 [ 71.269177][ T6350] ? __pfx_find_vma+0x10/0x10 [ 71.269202][ T6350] handle_mm_fault+0x37b/0xa30 [ 71.269230][ T6350] do_user_addr_fault+0x74c/0x12f0 [ 71.269259][ T6350] exc_page_fault+0x6f/0xd0 [ 71.269283][ T6350] asm_exc_page_fault+0x26/0x30 [ 71.269301][ T6350] RIP: 0010:__get_user_4+0x14/0x30 [ 71.269319][ T6350] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 71.269335][ T6350] RSP: 0018:ffffc9002559fdc8 EFLAGS: 00050287 [ 71.269350][ T6350] RAX: 00000000f53bc000 RBX: ffff888029cf8000 RCX: ffffc9002559fd6c [ 71.269362][ T6350] RDX: 00007ffffffff000 RSI: ffffffff825c19b1 RDI: ffffffff8c400a80 [ 71.269373][ T6350] RBP: 00000000f53bc000 R08: 0000000000000001 R09: 00000000000001d6 [ 71.269383][ T6350] R10: 0000000000000200 R11: 0000000000000000 R12: dffffc0000000000 [ 71.269394][ T6350] R13: ffff8880255b4c80 R14: 0000000000000000 R15: 0000000000000000 [ 71.269411][ T6350] ? __might_fault+0x111/0x140 [ 71.269433][ T6350] lookup_ioctx+0x5c/0x820 [ 71.269456][ T6350] __ia32_sys_io_destroy+0x85/0x1f0 [ 71.269477][ T6350] ? __pfx___ia32_sys_io_destroy+0x10/0x10 [ 71.269498][ T6350] ? fput+0x79/0x100 [ 71.269519][ T6350] ? ksys_write+0x1ac/0x250 [ 71.269536][ T6350] ? __pfx_ksys_write+0x10/0x10 [ 71.269557][ T6350] __do_fast_syscall_32+0xe7/0x970 [ 71.269581][ T6350] ? lockdep_hardirqs_on+0x78/0x100 [ 71.269603][ T6350] do_fast_syscall_32+0x32/0x70 [ 71.269626][ T6350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.269641][ T6350] RIP: 0023:0xf706efec [ 71.269655][ T6350] Code: Unable to access opcode bytes at 0xf706efc2. [ 71.269660][ T6350] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f6 [ 71.269670][ T6350] RAX: ffffffffffffffda RBX: 00000000f53bc000 RCX: 0000000000000000 [ 71.269676][ T6350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.269682][ T6350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.269689][ T6350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.269695][ T6350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.269710][ T6350] [ 71.405940][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.408828][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.467918][ T6355] raw_sendmsg: syz.0.116 forgot to set AF_INET. Fix it! [ 71.532802][ T6366] ubi16: attaching mtd0 [ 71.541908][ T6366] ubi16: scanning is finished [ 71.543990][ T6366] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 71.650435][ T6373] FAULT_INJECTION: forcing a failure. [ 71.650435][ T6373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.662190][ T6369] overlayfs: failed to resolve './file0': -2 [ 71.673660][ T6373] CPU: 2 UID: 0 PID: 6373 Comm: syz.2.121 Not tainted syzkaller #0 PREEMPT(full) [ 71.673686][ T6373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.673697][ T6373] Call Trace: [ 71.673703][ T6373] [ 71.673710][ T6373] dump_stack_lvl+0x100/0x190 [ 71.673737][ T6373] should_fail_ex.cold+0x5/0xa [ 71.673759][ T6373] _copy_to_user+0x32/0xd0 [ 71.673790][ T6373] simple_read_from_buffer+0xcb/0x170 [ 71.673822][ T6373] proc_fail_nth_read+0x1af/0x230 [ 71.673849][ T6373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.673874][ T6373] ? rw_verify_area+0xce/0x6d0 [ 71.673900][ T6373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.673923][ T6373] vfs_read+0x1e4/0xb40 [ 71.673943][ T6373] ? __pfx_vfs_read+0x10/0x10 [ 71.673958][ T6373] ? find_held_lock+0x2b/0x80 [ 71.673980][ T6373] ? __fget_files+0x215/0x3d0 [ 71.674001][ T6373] ? __fget_files+0x21f/0x3d0 [ 71.674025][ T6373] ksys_read+0x12a/0x250 [ 71.674041][ T6373] ? __pfx_ksys_read+0x10/0x10 [ 71.674065][ T6373] do_int80_emulation+0x14b/0x720 [ 71.674094][ T6373] asm_int80_emulation+0x1a/0x20 [ 71.674112][ T6373] RIP: 0023:0xf71474eb [ 71.674127][ T6373] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 71.674143][ T6373] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 71.674162][ T6373] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54065d0 [ 71.674172][ T6373] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 71.674182][ T6373] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.674192][ T6373] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 71.674201][ T6373] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.674229][ T6373] [ 71.807799][ T6366] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 72.303423][ T6389] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 72.310152][ T6389] netlink: 'syz.1.125': attribute type 1 has an invalid length. [ 72.319230][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'. [ 72.419999][ T6395] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 72.430080][ T6395] netlink: 'syz.2.129': attribute type 1 has an invalid length. [ 72.440721][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 72.576367][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 72.671064][ T6359] ALSA: mixer_oss: invalid OSS volume 'P' [ 73.181076][ T6416] jffs2: notice: (6416) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 73.369073][ T6421] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 74.103895][ T6438] jffs2: notice: (6438) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 74.195397][ T6444] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 74.198185][ T6436] IPVS: stopping master sync thread 6444 ... [ 74.203379][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 74.235978][ T6441] Config c/1 of g1 needs at least one function. [ 74.242547][ T6441] udc dummy_udc.0: failed to start g1: -22 [ 74.245533][ T6441] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 74.249827][ T6441] UDC core: g1: couldn't find an available UDC or it's busy [ 74.272783][ T6441] batadv0: entered promiscuous mode [ 74.284480][ T6441] macsec1: entered promiscuous mode [ 74.286257][ T6441] macsec1: entered allmulticast mode [ 74.288021][ T6441] batadv0: entered allmulticast mode [ 74.290974][ T6441] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 74.299412][ T6441] batadv0: left allmulticast mode [ 74.303735][ T6441] batadv0: left promiscuous mode [ 74.516457][ T5829] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 74.664450][ T5829] usb 8-1: Using ep0 maxpacket: 32 [ 74.669597][ T5829] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 74.673199][ T5829] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 74.677939][ T5829] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 74.682537][ T5829] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 74.687909][ T5829] usb 8-1: config 0 interface 0 has no altsetting 0 [ 74.692649][ T5829] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 74.696243][ T5829] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 74.699467][ T5829] usb 8-1: Product: syz [ 74.702324][ T5829] usb 8-1: Manufacturer: syz [ 74.704605][ T5829] usb 8-1: SerialNumber: syz [ 74.711100][ T5829] usb 8-1: config 0 descriptor?? [ 74.724564][ T5829] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 74.733090][ T5829] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 74.910779][ T6464] FAULT_INJECTION: forcing a failure. [ 74.910779][ T6464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.915028][ T6464] CPU: 2 UID: 0 PID: 6464 Comm: syz.2.153 Not tainted syzkaller #0 PREEMPT(full) [ 74.915044][ T6464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.915050][ T6464] Call Trace: [ 74.915055][ T6464] [ 74.915059][ T6464] dump_stack_lvl+0x100/0x190 [ 74.915082][ T6464] should_fail_ex.cold+0x5/0xa [ 74.915095][ T6464] _copy_to_user+0x32/0xd0 [ 74.915115][ T6464] simple_read_from_buffer+0xcb/0x170 [ 74.915135][ T6464] proc_fail_nth_read+0x1af/0x230 [ 74.915151][ T6464] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.915167][ T6464] ? rw_verify_area+0xce/0x6d0 [ 74.915183][ T6464] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.915198][ T6464] vfs_read+0x1e4/0xb40 [ 74.915210][ T6464] ? __pfx_vfs_read+0x10/0x10 [ 74.915219][ T6464] ? find_held_lock+0x2b/0x80 [ 74.915233][ T6464] ? __fget_files+0x215/0x3d0 [ 74.915246][ T6464] ? __fget_files+0x21f/0x3d0 [ 74.915260][ T6464] ksys_read+0x12a/0x250 [ 74.915269][ T6464] ? __pfx_ksys_read+0x10/0x10 [ 74.915283][ T6464] do_int80_emulation+0x14b/0x720 [ 74.915301][ T6464] asm_int80_emulation+0x1a/0x20 [ 74.915313][ T6464] RIP: 0023:0xf71474eb [ 74.915323][ T6464] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 74.915333][ T6464] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 74.915345][ T6464] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54065d0 [ 74.915351][ T6464] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 74.915357][ T6464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.915363][ T6464] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 74.915369][ T6464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.915382][ T6464] [ 75.008636][ T6467] netlink: 68 bytes leftover after parsing attributes in process `syz.1.154'. [ 75.145736][ T6445] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 75.148904][ T6446] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 75.150707][ C2] ldusb 8-1:0.0: usb_submit_urb failed (-19) [ 75.153237][ T5829] usb 8-1: USB disconnect, device number 2 [ 75.166175][ T5829] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 75.703580][ T5759] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 75.710516][ T5759] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 76.279048][ T6484] fuse: Bad value for 'fd' [ 76.294473][ T42] kauditd_printk_skb: 867 callbacks suppressed [ 76.294488][ T42] audit: type=1326 audit(1785963441.135:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.1.159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 76.303757][ T42] audit: type=1326 audit(1785963441.135:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.1.159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 76.310504][ T42] audit: type=1326 audit(1785963441.135:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.1.159" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71c74eb code=0x7ffc0000 [ 76.317181][ T42] audit: type=1326 audit(1785963441.135:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.1.159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 76.323826][ T42] audit: type=1326 audit(1785963441.135:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.1.159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 76.330522][ T42] audit: type=1326 audit(1785963441.135:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.1.159" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708efec code=0x7ffc0000 [ 76.337125][ T42] audit: type=1326 audit(1785963441.135:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.1.159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 76.343698][ T42] audit: type=1326 audit(1785963441.135:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.1.159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 76.350376][ T42] audit: type=1326 audit(1785963441.135:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.1.159" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf708efec code=0x7ffc0000 [ 76.357040][ T42] audit: type=1326 audit(1785963441.135:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.1.159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 77.018861][ T6497] overlayfs: failed to resolve './file1': -2 [ 77.933619][ T6508] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 77.936351][ T6508] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 77.952550][ T6508] vhci_hcd vhci_hcd.0: Device attached [ 78.259141][ T6504] wg2 speed is unknown, defaulting to 1000 [ 78.275060][ T50] usb 40-1: SetAddress Request (2) to port 0 [ 78.280161][ T50] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 78.285089][ T5829] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.291485][ T6504] wg2 speed is unknown, defaulting to 1000 [ 78.323356][ T6504] wg2 speed is unknown, defaulting to 1000 [ 78.567845][ T6511] vhci_hcd: connection reset by peer [ 78.578943][ T5822] vhci_hcd vhci_hcd.1: stop threads [ 78.581003][ T5829] usb 5-1: config 0 has no interfaces? [ 78.582458][ T5822] vhci_hcd vhci_hcd.1: release socket [ 78.583511][ T5829] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 78.588010][ T5822] vhci_hcd vhci_hcd.1: disconnect device [ 78.590162][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.658732][ T10] wg2 speed is unknown, defaulting to 1000 [ 78.662715][ T6504] infiniband syz2: set active [ 78.675522][ T6504] infiniband syz2: added wg2 [ 78.687524][ T5829] usb 5-1: config 0 descriptor?? [ 78.697523][ T6504] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 78.708990][ T6504] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 78.717960][ T6504] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 78.786562][ T6504] RDS/IB: syz2: added [ 78.789738][ T6504] smc: adding ib device syz2 with port count 1 [ 78.794064][ T6504] smc: ib device syz2 port 1 has no pnetid [ 78.798554][ T10] wg2 speed is unknown, defaulting to 1000 [ 78.806709][ T6504] wg2 speed is unknown, defaulting to 1000 [ 78.900677][ T5837] usb 5-1: USB disconnect, device number 4 [ 78.925527][ T6513] netlink: 44 bytes leftover after parsing attributes in process `syz.0.166'. [ 78.929296][ T6526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.169'. [ 79.097571][ T6504] wg2 speed is unknown, defaulting to 1000 [ 79.318630][ T6504] wg2 speed is unknown, defaulting to 1000 [ 79.338255][ T5837] IPVS: starting estimator thread 0... [ 79.424470][ T6537] IPVS: using max 42 ests per chain, 100800 per kthread [ 79.528849][ T6504] wg2 speed is unknown, defaulting to 1000 [ 80.679527][ T6593] syzkaller0: entered promiscuous mode [ 80.681367][ T6593] syzkaller0: entered allmulticast mode [ 80.745213][ T6599] vlan2: entered promiscuous mode [ 80.746903][ T6599] hsr0: entered promiscuous mode [ 80.749154][ T6599] vlan2: entered allmulticast mode [ 80.750903][ T6599] hsr0: entered allmulticast mode [ 80.752478][ T6599] hsr_slave_0: entered allmulticast mode [ 80.754166][ T6599] hsr_slave_1: entered allmulticast mode [ 80.764852][ T6599] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 81.180648][ T6645] geneve2: entered promiscuous mode [ 81.204704][ T5894] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 81.302216][ T6661] netlink: 36 bytes leftover after parsing attributes in process `syz.2.228'. [ 81.349897][ T6664] netlink: 'syz.0.229': attribute type 13 has an invalid length. [ 81.352012][ T6666] Bluetooth: MGMT ver 1.23 [ 81.559309][ T846] cfg80211: failed to load regulatory.db [ 81.634957][ T5822] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 81.824605][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 81.866413][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 81.990044][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'. [ 81.997406][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'. [ 82.001667][ T6709] netlink: 240 bytes leftover after parsing attributes in process `syz.1.247'. [ 82.006333][ T6709] netlink: 240 bytes leftover after parsing attributes in process `syz.1.247'. [ 82.068621][ T6715] syzkaller0: entered promiscuous mode [ 82.071017][ T6715] syzkaller0: entered allmulticast mode [ 82.079883][ T6717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.251'. [ 82.105331][ T6717] netlink: 708 bytes leftover after parsing attributes in process `syz.1.251'. [ 82.263921][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.256'. [ 82.301963][ T6725] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 82.692989][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.258'. [ 82.717534][ T5822] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 82.726720][ T6737] trusted_key: syz.2.259 sent an empty control message without MSG_MORE. [ 82.727322][ T5822] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 83.178709][ T5894] hid-generic 0005:16C0:05DF.0002: item fetching failed at offset 0/2 [ 83.187085][ T5894] hid-generic 0005:16C0:05DF.0002: probe with driver hid-generic failed with error -22 [ 83.235303][ T6760] wg2 speed is unknown, defaulting to 1000 [ 83.326751][ T5836] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 83.365224][ T50] usb 40-1: device descriptor read/8, error -110 [ 83.466804][ T6780] bond1: option arp_interval: invalid value (18446744073709551615) [ 83.469187][ T6780] bond1: option arp_interval: allowed values 0 - 2147483647 [ 83.472637][ T6780] bond1 (unregistering): Released all slaves [ 83.633367][ T6792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.765390][ T50] usb usb40-port1: attempt power cycle [ 83.864419][ T6804] erspan0: entered promiscuous mode [ 83.867298][ T6804] erspan0: entered allmulticast mode [ 83.902660][ T6806] netlink: 'syz.1.287': attribute type 13 has an invalid length. [ 83.970238][ T5837] wg2 speed is unknown, defaulting to 1000 [ 84.039037][ T6819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.345461][ T50] usb usb40-port1: unable to enumerate USB device [ 84.456788][ T6834] netlink: 'syz.2.296': attribute type 62 has an invalid length. [ 84.519800][ T6840] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 84.958288][ T6873] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 85.018067][ T6883] netlink: 'syz.0.319': attribute type 13 has an invalid length. [ 85.018832][ T6885] batman_adv: batadv0: Adding interface: gretap1 [ 85.020617][ T6883] netlink: 'syz.0.319': attribute type 27 has an invalid length. [ 85.022664][ T6885] batman_adv: batadv0: The MTU of interface gretap1 is too small (1454) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.032842][ T6885] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 85.191479][ T6900] netlink: 'syz.2.327': attribute type 13 has an invalid length. [ 85.264878][ T34] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 85.367838][ T6909] netlink: 'syz.2.332': attribute type 13 has an invalid length. [ 85.435098][ T5837] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 85.719535][ T6943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.996015][ T6953] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 86.018629][ T6957] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 86.323940][ T6982] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 86.408058][ T5837] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 86.634648][ C3] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 86.641125][ T7009] __nla_validate_parse: 13 callbacks suppressed [ 86.641143][ T7009] netlink: 44 bytes leftover after parsing attributes in process `syz.3.376'. [ 86.847451][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 86.854579][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 87.432484][ T7066] netlink: 'syz.2.401': attribute type 13 has an invalid length. [ 87.476588][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 87.690892][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 87.694490][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 87.746978][ T7097] netlink: 'syz.2.416': attribute type 13 has an invalid length. [ 87.787797][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 87.793499][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 87.795197][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 87.849409][ T7113] tipc: Started in network mode [ 87.851457][ T7113] tipc: Node identity 1, cluster identity 4711 [ 87.853588][ T7113] tipc: Node number set to 1 [ 88.085948][ T7135] macvlan0: entered promiscuous mode [ 88.130867][ T7139] netlink: 'syz.2.432': attribute type 13 has an invalid length. [ 88.184659][ T5829] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 88.199176][ T7143] netlink: 76 bytes leftover after parsing attributes in process `syz.0.435'. [ 88.464204][ T7159] team0: Device vlan3 is already an upper device of the team interface [ 88.614794][ T5829] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 88.735043][ T7181] Bluetooth: MGMT ver 1.23 [ 88.882786][ T7197] ip6erspan0: entered allmulticast mode [ 88.894654][ T5822] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.905128][ T5822] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.910175][ T5822] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.913131][ T5822] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.966688][ T7212] netlink: 132 bytes leftover after parsing attributes in process `syz.2.469'. [ 89.142316][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 89.181939][ T7240] netlink: 'syz.2.482': attribute type 10 has an invalid length. [ 89.408469][ T7251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.416889][ T7251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.423630][ T7251] bond0 (unregistering): Released all slaves [ 89.440089][ T7274] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 89.443530][ T7270] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 89.483797][ T7278] openvswitch: netlink: Missing key (keys=40, expected=80) [ 89.627495][ T7293] jffs2: notice: (7293) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 89.879253][ T7301] netlink: 'syz.1.509': attribute type 10 has an invalid length. [ 89.883929][ T7315] Bluetooth: ISO socket layer initialized [ 89.959559][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.963104][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.973946][ T7323] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.976709][ T7323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.979198][ T7323] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.982003][ T7323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.274247][ T7349] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 90.557170][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888000aec400: rx timeout, send abort [ 90.562890][ T7373] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 90.695774][ T7385] netlink: 'syz.1.546': attribute type 1 has an invalid length. [ 90.817996][ T7393] syzkaller0: entered promiscuous mode [ 90.820655][ T7393] syzkaller0: entered allmulticast mode [ 90.829433][ T7393] tipc: Started in network mode [ 90.834456][ T7393] tipc: Node identity 8eadd5332512, cluster identity 4711 [ 90.837579][ T7393] tipc: Enabled bearer , priority 0 [ 90.846520][ T7393] tipc: Resetting bearer [ 90.852275][ T7392] tipc: Resetting bearer [ 90.867362][ T7392] tipc: Disabling bearer [ 91.057495][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801424c400: rx timeout, send abort [ 91.061718][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888000aec400: abort rx timeout. Force session deactivation [ 91.102929][ T7408] netlink: 'syz.2.556': attribute type 13 has an invalid length. [ 91.152371][ T7412] smc: removing ib device syz2 [ 91.155041][ T5829] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 91.200793][ T7416] netlink: 'syz.0.558': attribute type 3 has an invalid length. [ 91.208618][ T7412] smbdirect: ib_dev[syz2] removed [ 91.342512][ T7427] netlink: 'syz.2.564': attribute type 5 has an invalid length. [ 91.560616][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801424c400: abort rx timeout. Force session deactivation [ 91.615857][ T5837] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 91.638278][ T7446] netlink: 'syz.2.571': attribute type 1 has an invalid length. [ 91.868632][ T7451] __nla_validate_parse: 14 callbacks suppressed [ 91.868655][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 91.876232][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 92.336041][ T7473] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 92.528553][ T7477] netlink: 'syz.0.584': attribute type 10 has an invalid length. [ 92.554111][ T7495] netlink: 'syz.3.592': attribute type 13 has an invalid length. [ 92.694695][ T7499] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 92.742307][ T7503] netlink: 'syz.3.595': attribute type 3 has an invalid length. [ 92.749812][ T7503] netlink: 284 bytes leftover after parsing attributes in process `syz.3.595'. [ 92.756103][ T7505] geneve2: entered promiscuous mode [ 92.883556][ T5759] Bluetooth: hci3: link tx timeout [ 92.886754][ T7519] netlink: 'syz.3.603': attribute type 13 has an invalid length. [ 92.889740][ T5759] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 93.032491][ T7534] netlink: 'syz.2.609': attribute type 3 has an invalid length. [ 93.038928][ T7534] netlink: 284 bytes leftover after parsing attributes in process `syz.2.609'. [ 93.059394][ T7536] tipc: Started in network mode [ 93.061032][ T7536] tipc: Node identity d6b604549bf8, cluster identity 4711 [ 93.068104][ T7536] tipc: Enabled bearer , priority 0 [ 93.073736][ T7536] tipc: Resetting bearer [ 93.077538][ T7535] tipc: Resetting bearer [ 93.211057][ T7547] netlink: 'syz.2.615': attribute type 13 has an invalid length. [ 93.265772][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 93.383492][ T7562] netlink: 'syz.0.623': attribute type 13 has an invalid length. [ 93.391436][ T7566] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 93.479145][ T7574] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 93.533355][ T7582] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 93.636993][ T7576] netlink: 'syz.3.629': attribute type 10 has an invalid length. [ 93.760108][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 93.763605][ T7606] netlink: 'syz.1.641': attribute type 13 has an invalid length. [ 93.793854][ T7606] syzkaller0: Caught tx_queue_len zero misconfig [ 93.844068][ T7610] netlink: 48 bytes leftover after parsing attributes in process `syz.2.643'. [ 93.893186][ T5103] Bluetooth: hci3: link tx timeout [ 93.898178][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 93.942342][ T7625] netlink: 128 bytes leftover after parsing attributes in process `syz.1.650'. [ 93.951247][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'. [ 93.978546][ T7627] syzkaller0: entered promiscuous mode [ 93.980310][ T7627] syzkaller0: entered allmulticast mode [ 94.068184][ T5836] tipc: Node number set to 1296958548 [ 94.080717][ T5103] Bluetooth: hci3: link tx timeout [ 94.083310][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 94.087516][ T1166] tipc: Resetting bearer [ 94.149000][ T7648] netlink: 'syz.0.661': attribute type 3 has an invalid length. [ 94.152748][ T7648] netlink: 284 bytes leftover after parsing attributes in process `syz.0.661'. [ 94.156221][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 94.156413][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.662'. [ 94.317561][ T7663] syzkaller0: entered promiscuous mode [ 94.319347][ T7663] syzkaller0: entered allmulticast mode [ 94.337576][ T7663] tipc: Started in network mode [ 94.339294][ T7663] tipc: Node identity d2f5872d74a1, cluster identity 4711 [ 94.341681][ T7663] tipc: Enabled bearer , priority 0 [ 94.345052][ T5103] Bluetooth: hci3: link tx timeout [ 94.346758][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 94.350632][ T7663] tipc: Resetting bearer [ 94.354013][ T7662] tipc: Resetting bearer [ 94.368603][ T7662] tipc: Disabling bearer [ 94.454262][ T7674] tipc: Resetting bearer [ 94.473532][ T7673] tipc: Resetting bearer [ 94.535937][ T5103] Bluetooth: hci3: link tx timeout [ 94.537604][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 94.661947][ T7699] tipc: Resetting bearer [ 94.678227][ T7699] tipc: Enabling of bearer rejected, already enabled [ 94.683109][ T7698] tipc: Resetting bearer [ 94.954533][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 94.954699][ C3] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 95.088765][ T1162] tipc: Resetting bearer [ 95.150744][ T7721] syzkaller0: entered promiscuous mode [ 95.152681][ T7721] syzkaller0: entered allmulticast mode [ 95.159749][ T7721] tipc: Enabled bearer , priority 0 [ 95.163083][ T7721] syzkaller0: mtu less than device minimum [ 95.618973][ T7750] syzkaller0: entered promiscuous mode [ 95.621363][ T7750] syzkaller0: entered allmulticast mode [ 95.689937][ T7756] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 95.851716][ T7773] tipc: Enabling of bearer rejected, already enabled [ 95.921647][ T7784] syzkaller0: entered promiscuous mode [ 95.923448][ T7784] syzkaller0: entered allmulticast mode [ 96.181655][ T7813] syzkaller0: left promiscuous mode [ 96.184528][ T7813] syzkaller0: left allmulticast mode [ 96.186903][ T7813] tipc: Resetting bearer [ 96.302282][ T7825] syzkaller0: entered promiscuous mode [ 96.304427][ T7825] syzkaller0: entered allmulticast mode [ 96.440493][ T7831] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 96.878109][ T7851] syzkaller0: entered promiscuous mode [ 96.880073][ T7851] syzkaller0: entered allmulticast mode [ 96.906968][ T7851] tipc: Enabled bearer , priority 0 [ 96.911108][ T7850] tipc: Resetting bearer [ 96.925099][ T7850] tipc: Disabling bearer [ 96.934586][ T5836] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 97.043569][ T7859] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 97.068430][ T7863] syzkaller0: entered promiscuous mode [ 97.070761][ T7863] syzkaller0: entered allmulticast mode [ 97.080903][ T7863] tipc: Enabled bearer , priority 0 [ 97.087954][ T7863] tipc: Resetting bearer [ 97.089644][ T5837] hid-generic 0005:046D:0A0E.0003: collection stack underflow [ 97.093371][ T7868] syzkaller0: left promiscuous mode [ 97.094012][ T5837] hid-generic 0005:046D:0A0E.0003: item 0 2 0 12 parsing failed [ 97.096843][ T7868] syzkaller0: left allmulticast mode [ 97.102918][ T7861] tipc: Resetting bearer [ 97.103604][ T5837] hid-generic 0005:046D:0A0E.0003: probe with driver hid-generic failed with error -22 [ 97.124171][ T7861] tipc: Disabling bearer [ 97.186286][ T7874] __nla_validate_parse: 16 callbacks suppressed [ 97.186305][ T7874] netlink: 188 bytes leftover after parsing attributes in process `syz.0.765'. [ 97.191274][ T7874] netlink: 32 bytes leftover after parsing attributes in process `syz.0.765'. [ 97.195069][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 97.198116][ T7874] netlink: 32 bytes leftover after parsing attributes in process `syz.0.765'. [ 97.237219][ T7876] syzkaller0: entered promiscuous mode [ 97.239414][ T7876] syzkaller0: entered allmulticast mode [ 97.241768][ T7876] tipc: Resetting bearer [ 97.258128][ T7880] syzkaller0: entered promiscuous mode [ 97.260551][ T7880] syzkaller0: entered allmulticast mode [ 97.265366][ T7880] tipc: Enabling of bearer rejected, already enabled [ 97.311282][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 97.322728][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 97.400454][ T7903] netlink: 284 bytes leftover after parsing attributes in process `syz.3.780'. [ 97.441003][ T7910] tipc: Resetting bearer [ 97.459085][ T7910] tipc: Enabling of bearer rejected, already enabled [ 97.464678][ T7909] tipc: Resetting bearer [ 97.557893][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.786'. [ 97.561056][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.786'. [ 97.732487][ T7941] syzkaller0: left promiscuous mode [ 97.734189][ T7941] syzkaller0: left allmulticast mode [ 97.738851][ T7941] tipc: Resetting bearer [ 97.739525][ T7939] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 97.781574][ T7945] tipc: Enabling of bearer rejected, already enabled [ 97.813967][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 97.916185][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 98.159036][ T1163] tipc: Resetting bearer [ 98.297639][ T7964] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 98.654642][ T7990] syzkaller0: entered promiscuous mode [ 98.656499][ T7990] syzkaller0: entered allmulticast mode [ 98.669848][ T7990] tipc: Enabled bearer , priority 0 [ 98.674304][ T7989] tipc: Resetting bearer [ 98.689121][ T7989] tipc: Disabling bearer [ 98.759639][ T7992] syzkaller0: left promiscuous mode [ 98.763275][ T7992] syzkaller0: left allmulticast mode [ 98.928761][ T8011] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 98.968662][ T8013] syzkaller0: entered promiscuous mode [ 98.971125][ T8013] syzkaller0: entered allmulticast mode [ 98.973888][ T8013] tipc: Resetting bearer [ 99.041935][ T8019] tipc: Resetting bearer [ 99.070239][ T8018] tipc: Resetting bearer [ 99.167743][ T1163] tipc: Resetting bearer [ 99.297592][ T8045] tipc: Resetting bearer [ 99.306783][ T8043] tipc: Resetting bearer [ 99.451837][ T8057] syzkaller0: entered promiscuous mode [ 99.453560][ T8057] syzkaller0: entered allmulticast mode [ 99.459126][ T8057] tipc: Enabled bearer , priority 0 [ 99.463915][ T8057] tipc: Resetting bearer [ 99.469821][ T8056] tipc: Resetting bearer [ 99.481117][ T8056] tipc: Disabling bearer [ 99.652580][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.726318][ T8069] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 99.961962][ T8087] lo: Caught tx_queue_len zero misconfig [ 99.997595][ T8093] validate_nla: 8 callbacks suppressed [ 99.997614][ T8093] netlink: 'syz.3.861': attribute type 13 has an invalid length. [ 100.007168][ T8093] gretap0: refused to change device tx_queue_len [ 100.010298][ T8093] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 100.020749][ T846] hid-generic 0005:16C0:05DF.0004: item fetching failed at offset 0/1 [ 100.024746][ T846] hid-generic 0005:16C0:05DF.0004: probe with driver hid-generic failed with error -22 [ 100.139997][ T8108] syzkaller0: entered promiscuous mode [ 100.141842][ T8108] syzkaller0: entered allmulticast mode [ 100.150197][ T8108] tipc: Enabling of bearer rejected, already enabled [ 100.157350][ T8108] syzkaller0: mtu less than device minimum [ 100.203754][ T1162] tipc: Resetting bearer [ 100.222011][ T8114] syzkaller0: left promiscuous mode [ 100.224048][ T8114] syzkaller0: left allmulticast mode [ 100.226509][ T8114] tipc: Resetting bearer [ 100.263341][ T8120] netlink: 'syz.3.874': attribute type 13 has an invalid length. [ 100.268227][ T8120] gretap0: refused to change device tx_queue_len [ 100.270690][ T8120] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 100.355541][ T8132] netlink: 'syz.3.880': attribute type 13 has an invalid length. [ 100.370238][ T8132] tipc: Resetting bearer [ 100.377990][ T8136] tipc: Enabling of bearer rejected, already enabled [ 100.384698][ T8136] syzkaller0: mtu less than device minimum [ 100.460833][ T8144] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 100.467209][ T8148] syzkaller0: entered promiscuous mode [ 100.469049][ T8148] syzkaller0: entered allmulticast mode [ 100.587546][ T8159] netlink: 'syz.0.893': attribute type 13 has an invalid length. [ 100.611047][ T8160] syzkaller0: entered promiscuous mode [ 100.612890][ T8160] syzkaller0: entered allmulticast mode [ 100.622259][ T8160] tipc: Enabled bearer , priority 0 [ 100.631825][ T8160] tipc: Resetting bearer [ 100.642067][ T8158] tipc: Resetting bearer [ 100.660552][ T8158] tipc: Disabling bearer [ 100.778280][ T8163] netlink: 'syz.3.899': attribute type 10 has an invalid length. [ 100.820319][ T8183] netlink: 'syz.1.903': attribute type 3 has an invalid length. [ 100.934909][ T8194] Driver unsupported XDP return value 0 on prog (id 85) dev N/A, expect packet loss! [ 100.994018][ T8200] netlink: 'syz.2.909': attribute type 13 has an invalid length. [ 101.044798][ T34] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 101.056261][ T8205] syzkaller0: entered promiscuous mode [ 101.058695][ T8205] syzkaller0: entered allmulticast mode [ 101.066024][ T8205] tipc: Enabled bearer , priority 0 [ 101.071264][ T8204] tipc: Resetting bearer [ 101.091673][ T8204] tipc: Disabling bearer [ 101.299271][ T8222] syzkaller0: entered promiscuous mode [ 101.301228][ T8222] syzkaller0: entered allmulticast mode [ 101.565241][ T8232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.620241][ T8240] tipc: Enabled bearer , priority 0 [ 101.622925][ T8240] syzkaller0: entered promiscuous mode [ 101.627337][ T8240] syzkaller0: entered allmulticast mode [ 101.637500][ T8240] tipc: Resetting bearer [ 101.640693][ T8238] tipc: Resetting bearer [ 101.662256][ T8238] tipc: Disabling bearer [ 101.692315][ T8242] syzkaller0: entered promiscuous mode [ 101.696086][ T8242] syzkaller0: entered allmulticast mode [ 101.701435][ T8248] tipc: Resetting bearer [ 101.732430][ T8248] syzkaller0: entered promiscuous mode [ 101.736909][ T8248] syzkaller0: entered allmulticast mode [ 101.772633][ T8248] tipc: Enabling of bearer rejected, already enabled [ 101.778818][ T8246] tipc: Resetting bearer [ 101.868173][ T8259] syzkaller0: left promiscuous mode [ 101.870043][ T8259] syzkaller0: left allmulticast mode [ 101.933266][ T8253] netlink: 'syz.0.932': attribute type 10 has an invalid length. [ 101.995148][ T34] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 101.998606][ T8277] tipc: Resetting bearer [ 102.019398][ T8277] tipc: Enabling of bearer rejected, already enabled [ 102.027704][ T8276] tipc: Resetting bearer [ 102.266349][ T8299] syzkaller0: entered promiscuous mode [ 102.268287][ T8299] syzkaller0: entered allmulticast mode [ 102.279329][ T8299] tipc: Enabled bearer , priority 0 [ 102.283788][ T8298] tipc: Resetting bearer [ 102.296911][ T8298] tipc: Disabling bearer [ 102.315708][ T61] tipc: Resetting bearer [ 102.393826][ T8313] tipc: Resetting bearer [ 102.424240][ T8313] tipc: Enabling of bearer rejected, already enabled [ 102.431713][ T8312] tipc: Resetting bearer [ 102.474637][ T5759] Bluetooth: hci2: command tx timeout [ 102.612271][ T8331] syzkaller0: entered promiscuous mode [ 102.616771][ T8331] syzkaller0: entered allmulticast mode [ 102.621763][ T8331] tipc: Enabling of bearer rejected, already enabled [ 102.659048][ T8338] tipc: Enabling of bearer rejected, failed to enable media [ 102.799480][ T8355] syzkaller0: left promiscuous mode [ 102.801725][ T8355] syzkaller0: left allmulticast mode [ 102.804073][ T8355] tipc: Resetting bearer [ 102.873397][ T8357] tipc: Enabling of bearer rejected, already enabled [ 103.113679][ T8384] netlink: 'syz.0.988': attribute type 10 has an invalid length. [ 103.120905][ T8385] tipc: Resetting bearer [ 103.142950][ T8385] syzkaller0: entered promiscuous mode [ 103.144976][ T8385] syzkaller0: entered allmulticast mode [ 103.147767][ T8385] tipc: Enabling of bearer rejected, already enabled [ 103.154573][ T8383] tipc: Resetting bearer [ 103.170296][ T8389] netlink: 'syz.2.997': attribute type 13 has an invalid length. [ 103.213441][ T8393] __nla_validate_parse: 30 callbacks suppressed [ 103.213453][ T8393] netlink: 284 bytes leftover after parsing attributes in process `syz.3.999'. [ 103.316711][ T61] tipc: Resetting bearer [ 103.382702][ T8415] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1009'. [ 104.179542][ T8479] syzkaller0: entered promiscuous mode [ 104.181449][ T8479] syzkaller0: entered allmulticast mode [ 104.186762][ T8479] tipc: Enabled bearer , priority 0 [ 104.191023][ T8479] tipc: Resetting bearer [ 104.194183][ T8478] tipc: Resetting bearer [ 104.206456][ T8478] tipc: Disabling bearer [ 104.559638][ T8512] syzkaller0: entered promiscuous mode [ 104.561500][ T8512] syzkaller0: entered allmulticast mode [ 104.566120][ T8512] tipc: Enabled bearer , priority 0 [ 104.571378][ T8512] tipc: Resetting bearer [ 104.584867][ T8511] tipc: Resetting bearer [ 104.602975][ T8511] tipc: Disabling bearer [ 104.904135][ T8545] syzkaller0: entered promiscuous mode [ 104.907486][ T8545] syzkaller0: entered allmulticast mode [ 104.912592][ T8545] tipc: Enabled bearer , priority 0 [ 104.924740][ T8545] tipc: Resetting bearer [ 104.931458][ T8544] tipc: Resetting bearer [ 104.949587][ T8544] tipc: Disabling bearer [ 104.958128][ T8551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1071'. [ 105.227010][ T8588] syzkaller0: mtu less than device minimum [ 105.397304][ T8614] syzkaller0: entered promiscuous mode [ 105.399086][ T8614] syzkaller0: entered allmulticast mode [ 105.520144][ T8631] tipc: Enabling of bearer rejected, already enabled [ 105.529118][ T8631] syzkaller0: mtu less than device minimum [ 105.661551][ T8657] tipc: Resetting bearer [ 105.691764][ T8661] tipc: Enabling of bearer rejected, already enabled [ 105.695644][ T8661] syzkaller0: mtu less than device minimum [ 105.698056][ T8656] tipc: Resetting bearer [ 105.752146][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 105.756707][ T8670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1116'. [ 105.818299][ T8681] tipc: Enabling of bearer rejected, already enabled [ 105.821982][ T8681] syzkaller0: mtu less than device minimum [ 105.828092][ T8684] tipc: Resetting bearer [ 105.839112][ T8682] tipc: Resetting bearer [ 106.024284][ T8707] syzkaller0: left promiscuous mode [ 106.026827][ T8707] syzkaller0: left allmulticast mode [ 106.029403][ T8707] tipc: Resetting bearer [ 106.365751][ T8744] validate_nla: 7 callbacks suppressed [ 106.365768][ T8744] netlink: 'syz.1.1151': attribute type 1 has an invalid length. [ 106.478437][ T1166] tipc: Resetting bearer [ 106.593495][ T8773] syzkaller0: entered promiscuous mode [ 106.596120][ T8773] syzkaller0: entered allmulticast mode [ 106.598150][ T8773] tipc: Resetting bearer [ 106.601007][ T8773] netlink: 'syz.3.1162': attribute type 1 has an invalid length. [ 106.682864][ T8787] tipc: Resetting bearer [ 106.735829][ T8787] tipc: Enabling of bearer rejected, already enabled [ 106.740243][ T8791] tipc: Enabled bearer , priority 0 [ 106.750076][ T8786] tipc: Resetting bearer [ 106.752879][ T8791] tipc: Resetting bearer [ 106.796457][ T8790] tipc: Disabling bearer [ 106.932114][ T8817] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1185'. [ 107.063207][ T8836] tipc: Enabling of bearer rejected, already enabled [ 107.067734][ T8836] syzkaller0: mtu less than device minimum [ 107.128966][ T8842] syzkaller0: left promiscuous mode [ 107.131265][ T8842] syzkaller0: left allmulticast mode [ 107.212531][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1198'. [ 107.227205][ T8851] syzkaller0: entered promiscuous mode [ 107.229103][ T8851] syzkaller0: entered allmulticast mode [ 108.534536][ T8874] syzkaller0: left promiscuous mode [ 108.536492][ T8874] syzkaller0: left allmulticast mode [ 108.538346][ T8874] tipc: Resetting bearer [ 108.540322][ T8875] syzkaller0: entered promiscuous mode [ 108.542084][ T8875] syzkaller0: entered allmulticast mode [ 108.544216][ T8877] tipc: Enabling of bearer rejected, already enabled [ 108.550016][ T61] tipc: Resetting bearer [ 108.554036][ T8880] syzkaller0: mtu less than device minimum [ 108.609080][ T8886] tipc: Enabling of bearer rejected, already enabled [ 108.708055][ T8895] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 108.747788][ T8907] syzkaller0: entered promiscuous mode [ 108.749665][ T8907] syzkaller0: entered allmulticast mode [ 108.755738][ T8907] tipc: Enabled bearer , priority 0 [ 108.758508][ T8910] syzkaller0: entered promiscuous mode [ 108.760356][ T8910] syzkaller0: entered allmulticast mode [ 108.762456][ T8910] tipc: Resetting bearer [ 108.768667][ T8907] tipc: Resetting bearer [ 108.773693][ T8906] tipc: Resetting bearer [ 108.786690][ T8906] tipc: Disabling bearer [ 108.904922][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'. [ 109.025107][ T8932] syzkaller0: entered promiscuous mode [ 109.027320][ T8932] syzkaller0: entered allmulticast mode [ 110.280086][ T8944] syzkaller0: left promiscuous mode [ 110.282086][ T8944] syzkaller0: left allmulticast mode [ 110.286982][ T8948] tipc: Enabling of bearer rejected, already enabled [ 110.357660][ T8957] syzkaller0: entered promiscuous mode [ 110.359767][ T8957] syzkaller0: entered allmulticast mode [ 110.363843][ T8957] tipc: Enabled bearer , priority 0 [ 110.368198][ T8957] tipc: Resetting bearer [ 110.371422][ T8955] tipc: Resetting bearer [ 110.386441][ T8955] tipc: Disabling bearer [ 110.409571][ T8962] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1239'. [ 110.492162][ T8975] syzkaller0: entered promiscuous mode [ 110.494062][ T8975] syzkaller0: entered allmulticast mode [ 110.498509][ T8978] tipc: Enabling of bearer rejected, already enabled [ 110.616308][ T8990] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 110.649686][ T8998] tipc: Resetting bearer [ 110.656210][ T8998] tipc: Enabling of bearer rejected, already enabled [ 110.664734][ T8994] tipc: Resetting bearer [ 110.708139][ T9004] tipc: Enabling of bearer rejected, already enabled [ 110.827083][ T9020] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 110.870542][ T9030] tipc: Enabling of bearer rejected, already enabled [ 110.954537][ C3] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 111.050736][ T9053] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 111.129347][ T9055] syzkaller0: entered promiscuous mode [ 111.131826][ T9055] syzkaller0: entered allmulticast mode [ 111.141063][ T9055] tipc: Enabled bearer , priority 0 [ 111.146993][ T9055] tipc: Resetting bearer [ 111.158514][ T9054] tipc: Resetting bearer [ 111.171666][ T9054] tipc: Disabling bearer [ 111.298905][ T37] tipc: Resetting bearer [ 111.388574][ T9090] netlink: 'syz.0.1296': attribute type 13 has an invalid length. [ 111.411779][ T9093] tipc: Enabling of bearer rejected, already enabled [ 111.418548][ T9093] syzkaller0: mtu less than device minimum [ 111.472737][ T9102] netlink: 'syz.1.1304': attribute type 13 has an invalid length. [ 111.476700][ T9104] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 111.549664][ T9112] netlink: 392 bytes leftover after parsing attributes in process `syz.3.1308'. [ 111.580770][ T9119] tipc: Enabling of bearer rejected, already enabled [ 111.645926][ T9125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1314'. [ 111.648728][ T9127] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 111.674575][ T9129] netlink: 'syz.3.1316': attribute type 13 has an invalid length. [ 111.708123][ T9114] netlink: 'syz.0.1309': attribute type 10 has an invalid length. [ 111.823655][ T9141] tipc: Enabling of bearer rejected, already enabled [ 111.827697][ T9141] syzkaller0: mtu less than device minimum [ 111.886968][ T9145] syzkaller0: left promiscuous mode [ 111.888982][ T9145] syzkaller0: left allmulticast mode [ 111.950914][ T9151] netlink: 'syz.1.1326': attribute type 13 has an invalid length. [ 111.974209][ T9151] syzkaller0: Caught tx_queue_len zero misconfig [ 112.006213][ T9155] netlink: 'syz.3.1328': attribute type 13 has an invalid length. [ 112.087379][ T9161] syzkaller0: entered promiscuous mode [ 112.089197][ T9161] syzkaller0: entered allmulticast mode [ 112.097835][ T9161] tipc: Enabling of bearer rejected, already enabled [ 112.105615][ T9161] syzkaller0: mtu less than device minimum [ 112.561459][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1359'. [ 112.573126][ T9222] lo: entered allmulticast mode [ 112.583243][ T9220] lo: left allmulticast mode [ 112.749609][ T9231] netlink: 'syz.3.1363': attribute type 10 has an invalid length. [ 112.840965][ T9257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1373'. [ 112.855227][ T9259] netlink: 'syz.0.1374': attribute type 2 has an invalid length. [ 112.862838][ T9259] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1374'. [ 112.866469][ T9259] netlink: 'syz.0.1374': attribute type 2 has an invalid length. [ 112.871275][ T9259] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1374'. [ 112.930876][ T9266] syzkaller0: entered promiscuous mode [ 112.932671][ T9266] syzkaller0: entered allmulticast mode [ 113.034553][ T9277] geneve3: entered promiscuous mode [ 113.052490][ T9278] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 113.176922][ T9294] syzkaller0: entered promiscuous mode [ 113.178901][ T9294] syzkaller0: entered allmulticast mode [ 113.332688][ T9310] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 113.379206][ T9319] veth1_to_bond: entered allmulticast mode [ 113.382104][ T9319] veth1_to_bond: entered promiscuous mode [ 113.385807][ T9321] netlink: 'syz.1.1401': attribute type 13 has an invalid length. [ 113.387058][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 113.412727][ T9321] syzkaller0: Caught tx_queue_len zero misconfig [ 113.430719][ T9319] veth1_to_bond (unregistering): left promiscuous mode [ 113.433046][ T9319] veth1_to_bond (unregistering): left allmulticast mode [ 113.449372][ T9319] bond0: (slave bond_slave_1): Releasing backup interface [ 113.692751][ T9351] syzkaller0: Caught tx_queue_len zero misconfig [ 113.703844][ T9353] tipc: Enabled bearer , priority 0 [ 113.717421][ T9353] tipc: Resetting bearer [ 113.749051][ T9352] tipc: Disabling bearer [ 113.783091][ T9357] tipc: Resetting bearer [ 113.800398][ T9356] tipc: Resetting bearer [ 113.949420][ T9378] tipc: Resetting bearer [ 113.979337][ T9382] syzkaller0: entered promiscuous mode [ 113.981171][ T9382] syzkaller0: entered allmulticast mode [ 114.137882][ T9393] tipc: Enabling of bearer rejected, already enabled [ 114.147945][ T9393] syzkaller0: mtu less than device minimum [ 114.404479][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.408000][ T9424] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.513537][ T9424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.531588][ T9424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.647614][ T9424] tipc: Resetting bearer [ 114.650831][ T9424] syzkaller0: left promiscuous mode [ 114.652635][ T9424] syzkaller0: left allmulticast mode [ 114.683936][ T9453] tipc: Enabling of bearer rejected, already enabled [ 114.689367][ T9431] syzkaller0: mtu less than device minimum [ 114.705164][ T5842] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.714696][ T5842] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.718133][ T5842] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.721787][ T5842] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.731407][ T5842] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.737700][ T5842] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.754614][ T5842] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.758336][ T5842] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.765254][ T9458] syzkaller0: entered promiscuous mode [ 114.766860][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'. [ 114.767372][ T9458] syzkaller0: entered allmulticast mode [ 114.773782][ T9458] tipc: Resetting bearer [ 114.801556][ T9457] tipc: Resetting bearer [ 114.939387][ T9481] tipc: Resetting bearer [ 114.942141][ T9478] syzkaller0: Caught tx_queue_len zero misconfig [ 114.956179][ T9481] tipc: Enabling of bearer rejected, already enabled [ 114.962509][ T9480] tipc: Resetting bearer [ 114.992093][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1471'. [ 114.999624][ T9486] syzkaller0: entered promiscuous mode [ 115.001489][ T9486] syzkaller0: entered allmulticast mode [ 115.200040][ T9507] syzkaller0: entered promiscuous mode [ 115.202529][ T9507] syzkaller0: entered allmulticast mode [ 115.208958][ T9507] tipc: Enabled bearer , priority 0 [ 115.214207][ T9507] tipc: Resetting bearer [ 115.218890][ T9506] tipc: Resetting bearer [ 115.239673][ T9506] tipc: Disabling bearer [ 115.243607][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 115.390468][ T9525] syzkaller0: entered promiscuous mode [ 115.392277][ T9525] syzkaller0: entered allmulticast mode [ 115.421539][ T9515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.428419][ T9515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.435940][ T9515] bond0 (unregistering): Released all slaves [ 115.623167][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1494'. [ 115.677457][ T61] tipc: Resetting bearer [ 115.680106][ T9541] tipc: Enabling of bearer rejected, already enabled [ 115.684036][ T9541] syzkaller0: mtu less than device minimum [ 115.753958][ T9549] syzkaller0: Caught tx_queue_len zero misconfig [ 115.774789][ T9551] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.883482][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1504'. [ 115.919358][ T9568] tipc: Resetting bearer [ 115.926362][ T9568] tipc: Enabling of bearer rejected, already enabled [ 115.931856][ T9566] tipc: Resetting bearer [ 115.958287][ T9573] syzkaller0: left promiscuous mode [ 115.960211][ T9573] syzkaller0: left allmulticast mode [ 116.014125][ T9580] tipc: Resetting bearer [ 116.029467][ T9579] syzkaller0: entered promiscuous mode [ 116.031824][ T9579] syzkaller0: entered allmulticast mode [ 116.037024][ T9580] tipc: Enabling of bearer rejected, already enabled [ 116.072559][ T9578] tipc: Resetting bearer [ 116.244994][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'. [ 116.509763][ T9619] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.1522'. [ 117.726779][ T37] tipc: Resetting bearer [ 117.877254][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1534'. [ 117.942099][ T9647] syzkaller0: left promiscuous mode [ 117.944306][ T9647] syzkaller0: left allmulticast mode [ 117.946622][ T9647] tipc: Resetting bearer [ 118.031211][ T9659] tipc: Resetting bearer [ 118.043425][ T9659] tipc: Enabling of bearer rejected, already enabled [ 118.047906][ T9658] tipc: Resetting bearer [ 118.117544][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1546'. [ 118.412740][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1563'. [ 118.501148][ T9712] syzkaller0: entered promiscuous mode [ 118.502931][ T9712] syzkaller0: entered allmulticast mode [ 118.796879][ T1163] tipc: Resetting bearer [ 119.000034][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 119.000054][ T42] audit: type=1804 audit(1785963483.855:1236): pid=9776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1595" name="/newroot/384/cgroup.controllers" dev="tmpfs" ino=1979 res=1 errno=0 [ 119.011252][ T42] audit: type=1800 audit(1785963483.855:1237): pid=9776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1595" name="cgroup.controllers" dev="tmpfs" ino=1979 res=0 errno=0 [ 119.019915][ T42] audit: type=1800 audit(1785963483.855:1238): pid=9776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1595" name="cgroup.controllers" dev="tmpfs" ino=1979 res=0 errno=0 [ 120.083528][ T9821] erspan0: left promiscuous mode [ 120.085612][ T9821] erspan0: left allmulticast mode [ 120.111201][ T9821] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.177842][ T9821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.183913][ T9821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.289684][ T9821] vlan2: left promiscuous mode [ 120.291373][ T9821] hsr0: left promiscuous mode [ 120.293029][ T9821] vlan2: left allmulticast mode [ 120.294803][ T9821] hsr0: left allmulticast mode [ 120.296364][ T9821] hsr_slave_0: left allmulticast mode [ 120.298781][ T9821] hsr_slave_1: left allmulticast mode [ 120.301307][ T9821] geneve2: left promiscuous mode [ 120.304181][ T9821] ip6erspan0: left allmulticast mode [ 120.324584][ T5842] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.328040][ T5842] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.331556][ T5842] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.334891][ T5842] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.501415][ T9848] syzkaller1: entered promiscuous mode [ 120.503730][ T9848] syzkaller1: entered allmulticast mode [ 120.873681][ T9865] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.893242][ T9866] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 121.000236][ T9865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.025493][ T9865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.099670][ T9865] macvlan0: left promiscuous mode [ 121.255689][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.263561][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.267306][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.273390][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.289636][ T9891] syzkaller0: entered promiscuous mode [ 121.291974][ T9891] syzkaller0: entered allmulticast mode [ 121.298331][ T9891] tipc: Resetting bearer [ 121.422444][ T9905] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 121.702051][ T9933] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 121.720801][ T9935] validate_nla: 6 callbacks suppressed [ 121.720813][ T9935] netlink: 'syz.3.1658': attribute type 13 has an invalid length. [ 121.725516][ T9935] tipc: Resetting bearer [ 121.789737][ T9941] __nla_validate_parse: 1 callbacks suppressed [ 121.789757][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1661'. [ 121.981436][ T9956] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 122.074264][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1671'. [ 122.188634][ T9969] syzkaller0: left promiscuous mode [ 122.190681][ T9969] syzkaller0: left allmulticast mode [ 122.226591][ T9971] syzkaller0: entered promiscuous mode [ 122.228659][ T9971] syzkaller0: entered allmulticast mode [ 122.233139][ T9971] tipc: Enabled bearer , priority 0 [ 122.242989][ T9971] tipc: Resetting bearer [ 122.248396][ T9970] tipc: Resetting bearer [ 122.261880][ T9970] tipc: Disabling bearer [ 122.408409][ T9986] netlink: 'syz.0.1681': attribute type 13 has an invalid length. [ 122.692311][T10015] netlink: 'syz.0.1695': attribute type 13 has an invalid length. [ 122.959615][T10053] netlink: 'syz.3.1709': attribute type 13 has an invalid length. [ 122.969192][T10053] tipc: Resetting bearer [ 123.057803][T10067] syzkaller0: entered promiscuous mode [ 123.059600][T10067] syzkaller0: entered allmulticast mode [ 123.155021][T10078] syzkaller0: entered promiscuous mode [ 123.156891][T10078] syzkaller0: entered allmulticast mode [ 123.261926][T10087] netlink: 'syz.0.1723': attribute type 13 has an invalid length. [ 124.035506][T10157] netlink: 'syz.3.1750': attribute type 1 has an invalid length. [ 124.039829][T10157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1750'. [ 125.006370][ T42] audit: type=1800 audit(1785963489.865:1239): pid=10260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1786" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2291 res=0 errno=0 [ 125.559506][T10332] tipc: Enabling of bearer rejected, already enabled [ 125.594427][T10335] syzkaller0: left promiscuous mode [ 125.596130][T10335] syzkaller0: left allmulticast mode [ 125.597951][T10335] tipc: Resetting bearer [ 125.777782][T10350] tipc: Enabling of bearer rejected, failed to enable media [ 125.842225][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1832'. [ 125.932981][T10385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.937993][T10385] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 126.407688][T10431] netlink: 'syz.2.1859': attribute type 10 has an invalid length. [ 126.527213][T10447] tipc: Enabling of bearer rejected, failed to enable media [ 126.702336][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1874'. [ 126.944912][T10487] tipc: Enabling of bearer rejected, failed to enable media [ 127.243737][T10511] netlink: 'syz.0.1887': attribute type 10 has an invalid length. [ 127.599438][T10553] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1904'. [ 127.602938][T10553] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1904'. [ 127.635659][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1906'. [ 128.199556][T10597] block nbd0: not configured, cannot reconfigure [ 128.246667][T10601] tipc: Resetting bearer [ 128.275351][T10600] tipc: Resetting bearer [ 128.457218][ T1163] tipc: Resetting bearer [ 128.588732][T10642] syzkaller0: entered promiscuous mode [ 128.590556][T10642] syzkaller0: entered allmulticast mode [ 128.592496][T10642] tipc: Resetting bearer [ 128.595755][T10642] tipc: Enabling of bearer rejected, already enabled [ 128.634407][ T5759] Bluetooth: hci3: command 0x0406 tx timeout [ 128.641962][T10646] syzkaller0: left promiscuous mode [ 128.644211][T10646] syzkaller0: left allmulticast mode [ 128.671773][T10638] netlink: 'syz.0.1943': attribute type 10 has an invalid length. [ 128.866967][T10681] syzkaller0: left promiscuous mode [ 128.868810][T10681] syzkaller0: left allmulticast mode [ 128.871397][T10681] tipc: Resetting bearer [ 128.960510][T10675] tipc: Enabling of bearer rejected, failed to enable media [ 128.979021][T10699] netlink: 392 bytes leftover after parsing attributes in process `syz.0.1965'. [ 129.017136][T10704] syzkaller0: entered promiscuous mode [ 129.020702][T10704] syzkaller0: entered allmulticast mode [ 129.022966][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1968'. [ 129.265405][T10741] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1982'. [ 129.294015][T10733] tipc: Enabling of bearer rejected, failed to enable media [ 129.491861][T10770] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1991'. [ 129.623591][T10784] syzkaller0: entered promiscuous mode [ 129.626523][T10784] syzkaller0: entered allmulticast mode [ 129.752266][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2000'. [ 130.112924][T10807] tipc: Resetting bearer [ 130.127838][T10807] tipc: Enabling of bearer rejected, already enabled [ 130.132724][T10806] tipc: Resetting bearer [ 130.435443][T10816] tipc: Enabled bearer , priority 0 [ 130.461410][T10816] syzkaller0: entered promiscuous mode [ 130.463277][T10816] syzkaller0: entered allmulticast mode [ 130.468426][T10816] tipc: Resetting bearer [ 130.477955][T10815] tipc: Resetting bearer [ 131.849315][T10815] tipc: Disabling bearer [ 131.853774][ T37] tipc: Resetting bearer [ 131.856616][T10822] tipc: Resetting bearer [ 131.865639][ T846] tipc: Node number set to 2881475891 [ 131.868921][T10821] tipc: Resetting bearer [ 131.903585][T10839] tipc: Resetting bearer [ 131.920411][T10839] tipc: Enabling of bearer rejected, already enabled [ 131.934505][T10838] tipc: Resetting bearer [ 131.989607][T10845] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 132.101135][T10856] syzkaller0: entered promiscuous mode [ 132.103004][T10856] syzkaller0: entered allmulticast mode [ 132.220296][T10845] md: pers->run() failed ... [ 132.509110][T10886] IPVS: Error connecting to the multicast addr [ 132.875310][ T1162] tipc: Resetting bearer [ 133.217963][T10898] syzkaller0: left promiscuous mode [ 133.219736][T10898] syzkaller0: left allmulticast mode [ 133.861427][T10945] netlink: 'syz.3.2060': attribute type 13 has an invalid length. [ 133.868584][T10945] tipc: Resetting bearer [ 134.400251][T10967] nvmet: adding nsid 1 to subsystem testnqn [ 134.408218][ T42] audit: type=1800 audit(1785963499.265:1240): pid=10967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2070" name="device_path" dev="configfs" ino=28395 res=0 errno=0 [ 134.415606][ T42] audit: type=1800 audit(1785963499.265:1241): pid=10967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2070" name="buffered_io" dev="configfs" ino=28396 res=0 errno=0 [ 134.422115][ T42] audit: type=1800 audit(1785963499.265:1242): pid=10967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2070" name="addr_trtype" dev="configfs" ino=28402 res=0 errno=0 [ 134.440575][T10969] syzkaller0: entered promiscuous mode [ 134.442961][T10969] syzkaller0: entered allmulticast mode [ 134.458364][ T1163] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:7aff1d20-5ce3-4693-98ff-6898c833096c for subsystem testnqn not allowed [ 134.474932][T10967] nvme nvme0: Connect for subsystem testnqn is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:7aff1d20-5ce3-4693-98ff-6898c833096c [ 134.886398][ T5103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 134.891947][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 134.898264][ T5103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 134.903512][ T5103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 134.907302][ T5103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 134.923844][T10998] tipc: Resetting bearer [ 134.958587][T10998] syzkaller0: entered promiscuous mode [ 134.961681][T10998] syzkaller0: entered allmulticast mode [ 134.988103][T10999] syzkaller0: entered promiscuous mode [ 134.990094][T10999] syzkaller0: entered allmulticast mode [ 134.993923][T10997] tipc: Resetting bearer [ 135.273073][ T5822] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.318280][T11029] syzkaller0: entered promiscuous mode [ 135.320133][T11029] syzkaller0: entered allmulticast mode [ 135.392521][ T5822] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.452907][T10992] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.456386][T10992] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.458772][T10992] bridge_slave_0: entered allmulticast mode [ 135.461939][T10992] bridge_slave_0: entered promiscuous mode [ 135.468176][T10992] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.470535][T10992] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.473672][T10992] bridge_slave_1: entered allmulticast mode [ 135.479828][T10992] bridge_slave_1: entered promiscuous mode [ 135.548752][ T5822] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.562422][T10992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.585815][T10992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.611946][T10992] team0: Port device team_slave_0 added [ 135.655890][T10992] team0: Port device team_slave_1 added [ 135.683632][ T5822] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.692792][T10992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.695134][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.703617][T10992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.709604][T10992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.711884][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.720538][T10992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.748093][T10992] hsr_slave_0: entered promiscuous mode [ 135.750675][T10992] hsr_slave_1: entered promiscuous mode [ 135.753000][T10992] debugfs: 'hsr0' already exists in 'hsr' [ 135.757027][T10992] Cannot create hsr debugfs directory [ 136.108001][ T1166] tipc: Resetting bearer [ 136.184295][ T5822] tipc: Disabling bearer [ 136.188889][ T5822] tipc: Left network mode [ 136.390434][ T5456] 8021q: adding VLAN 0 to HW filter on device eth2 [ 136.697779][T10992] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 136.715883][T10992] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 136.720359][T10992] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 136.725804][T10992] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 136.761543][T10992] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 136.768630][T10992] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 136.771572][T10992] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 136.780706][T10992] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 136.850422][T10992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.897582][ T5822] hsr_slave_0: left promiscuous mode [ 136.900636][ T5822] hsr_slave_1: left promiscuous mode [ 136.903661][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.908380][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.914862][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.918087][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.945246][ T5822] veth1_macvtap: left promiscuous mode [ 136.948874][ T5822] veth0_macvtap: left promiscuous mode [ 136.951587][ T5822] veth1_vlan: left promiscuous mode [ 136.954156][ T5822] veth0_vlan: left promiscuous mode [ 136.954483][ T5103] Bluetooth: hci4: command tx timeout [ 137.174121][ T5822] team0 (unregistering): Port device team_slave_1 removed [ 137.183372][ T5822] team0 (unregistering): Port device team_slave_0 removed [ 137.283416][T10992] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.333760][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.336263][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.353416][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.355767][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.722104][T10992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.748283][ T5822] IPVS: stop unused estimator thread 0... [ 137.748748][T10992] veth0_vlan: entered promiscuous mode [ 137.760596][ T42] audit: type=1800 audit(1785963502.615:1243): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2124" name="zoned" dev="configfs" ino=29565 res=0 errno=0 [ 137.761419][T10992] veth1_vlan: entered promiscuous mode [ 137.764712][T11155] null_blk: nullb1: using native zone append [ 137.769289][ T42] audit: type=1800 audit(1785963502.615:1244): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2124" name="size" dev="configfs" ino=29567 res=0 errno=0 [ 137.780581][ T42] audit: type=1800 audit(1785963502.615:1245): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2124" name="power" dev="configfs" ino=29568 res=0 errno=0 [ 137.796782][T10992] veth0_macvtap: entered promiscuous mode [ 137.801232][T10992] veth1_macvtap: entered promiscuous mode [ 137.808892][T11155] null_blk: disk nullb1 created [ 137.811209][T10992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.817479][T10992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.858920][ T5822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.868546][ T5822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.875210][ T5822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.907040][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.910490][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.935285][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.941065][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.945944][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.353167][T11185] syzkaller0: entered promiscuous mode [ 138.355314][T11185] syzkaller0: entered allmulticast mode [ 139.034481][ T5103] Bluetooth: hci4: command tx timeout [ 139.047711][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2141'. [ 139.299877][T11224] syzkaller0: entered promiscuous mode [ 139.301732][T11224] syzkaller0: entered allmulticast mode [ 139.417566][T11228] tipc: Resetting bearer [ 139.425746][T11227] tipc: Resetting bearer [ 140.072987][T11237] netlink: 'syz.0.2156': attribute type 13 has an invalid length. [ 140.225091][T11243] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 140.289741][T11243] md: loop0 has zero or unknown size, marking faulty! [ 140.395144][T11260] netlink: 'syz.2.2167': attribute type 13 has an invalid length. [ 140.398926][ T37] tipc: Resetting bearer [ 140.963528][T11280] ip6gre1: entered allmulticast mode [ 140.969278][ T5822] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.099655][T11286] syzkaller0: entered promiscuous mode [ 141.102182][T11286] syzkaller0: entered allmulticast mode [ 141.107194][T11286] tipc: Enabled bearer , priority 0 [ 141.113029][T11286] tipc: Resetting bearer [ 141.120279][T11285] tipc: Resetting bearer [ 141.124583][ T5103] Bluetooth: hci4: command tx timeout [ 141.140109][T11285] tipc: Disabling bearer [ 141.237227][T11290] tipc: Resetting bearer [ 141.243074][T11289] tipc: Resetting bearer [ 141.374300][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2178'. [ 141.414866][ T1166] tipc: Resetting bearer [ 141.737460][T11315] tipc: Enabled bearer , priority 0 [ 141.745479][T11315] tipc: Resetting bearer [ 141.769671][T11314] tipc: Disabling bearer [ 142.068602][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2196'. [ 142.073268][T11329] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2196'. [ 142.077530][T11329] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2196'. [ 142.174680][T11342] tipc: Started in network mode [ 142.176286][T11342] tipc: Node identity a68ffa7855e6, cluster identity 4711 [ 142.180225][T11342] tipc: Enabled bearer , priority 0 [ 142.186575][T11342] tipc: Resetting bearer [ 142.191422][T11344] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2194'. [ 142.204684][T11341] tipc: Disabling bearer [ 143.194493][ T5103] Bluetooth: hci4: command tx timeout [ 143.297549][T11398] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2220'. [ 143.303468][T11398] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2220'. [ 143.336151][T11402] tipc: Resetting bearer [ 143.342877][T11401] tipc: Resetting bearer [ 143.421458][T11407] tipc: Resetting bearer [ 143.426866][T11406] tipc: Resetting bearer [ 143.474227][T11409] netlink: 600 bytes leftover after parsing attributes in process `syz.3.2225'. [ 143.478659][T11409] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 143.488449][ T1166] tipc: Resetting bearer [ 143.540773][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2226'. [ 143.586207][T11416] xfrm1: entered allmulticast mode [ 144.096682][T11440] __nla_validate_parse: 1 callbacks suppressed [ 144.096697][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2237'. [ 144.659983][T11466] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 145.354514][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.919798][T11506] syzkaller0: entered promiscuous mode [ 145.922271][T11506] syzkaller0: entered allmulticast mode [ 146.164949][T11520] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 146.451636][T11557] netlink: 'syz.0.2287': attribute type 13 has an invalid length. [ 146.681171][T11573] netlink: 600 bytes leftover after parsing attributes in process `syz.2.2294'. [ 146.686345][T11573] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 146.942023][T11596] syzkaller0: left promiscuous mode [ 146.943750][T11596] syzkaller0: left allmulticast mode [ 146.947494][T11596] tipc: Resetting bearer [ 146.994197][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2307'. [ 147.339806][T11607] tipc: Resetting bearer [ 147.544492][ T846] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 147.697063][ T846] usb 5-1: Dual-Role OTG device on HNP port [ 147.700525][ T846] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 147.710255][ T846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.747837][ T846] gspca_main: spca501-2.14.0 probing 0000:0000 [ 147.755232][ T846] gspca_spca501: reg write: error -32 [ 147.759847][ T846] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 147.770465][ T846] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 148.037575][T11628] netlink: 'syz.0.2319': attribute type 10 has an invalid length. [ 148.917888][T11672] syzkaller0: entered promiscuous mode [ 148.919779][T11672] syzkaller0: entered allmulticast mode [ 149.138257][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2340'. [ 149.151023][T11687] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2340'. [ 149.155049][T11687] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2340'. [ 149.211809][T11682] netlink: 'syz.2.2339': attribute type 10 has an invalid length. [ 149.982962][T11706] capability: warning: `syz.3.2347' uses deprecated v2 capabilities in a way that may be insecure [ 150.025366][T11709] syzkaller0: entered promiscuous mode [ 150.027789][T11709] syzkaller0: entered allmulticast mode [ 150.030408][T11709] tipc: Resetting bearer [ 150.069972][T11712] syzkaller0: entered promiscuous mode [ 150.072448][T11712] syzkaller0: entered allmulticast mode [ 150.243190][T11730] No control pipe specified [ 150.309964][T11735] syzkaller0: entered promiscuous mode [ 150.312392][T11735] syzkaller0: entered allmulticast mode [ 150.324541][T11735] 0: reclassify loop, rule prio 0, protocol 800 [ 150.385352][T11737] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 150.387860][T11737] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 150.410843][T11725] netlink: 'syz.1.2357': attribute type 10 has an invalid length. [ 150.485611][T11744] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 151.195227][T11782] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 151.250064][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2377'. [ 151.835401][T11819] usb usb9: usbfs: process 11819 (syz.0.2382) did not claim interface 0 before use [ 152.172826][T11828] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 152.175234][T11828] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 152.198602][ T5103] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9 [ 152.202695][ T5103] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 152.291793][T11838] tipc: Resetting bearer [ 152.297781][T11837] tipc: Resetting bearer [ 152.452293][ T5754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.473096][ T5754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.479132][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.483358][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.487690][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.931492][T11841] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.940158][T11841] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.944527][T11841] bridge_slave_0: entered allmulticast mode [ 152.950167][T11841] bridge_slave_0: entered promiscuous mode [ 152.958982][T11841] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.962745][T11841] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.965494][T11841] bridge_slave_1: entered allmulticast mode [ 152.968313][T11841] bridge_slave_1: entered promiscuous mode [ 153.041168][T11841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.048808][T11841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.066179][T11841] team0: Port device team_slave_0 added [ 153.069625][T11841] team0: Port device team_slave_1 added [ 153.086729][T11841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.089294][T11841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.105352][T11841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.136188][T11841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.139070][T11841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.149312][T11841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.191180][T11841] hsr_slave_0: entered promiscuous mode [ 153.198689][T11841] hsr_slave_1: entered promiscuous mode [ 153.202423][ T104] tipc: Resetting bearer [ 153.349401][T11871] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 153.352456][T11871] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 153.435388][T11873] md: could not open device unknown-block(1,0). [ 153.492788][ T5822] bridge_slave_1: left allmulticast mode [ 153.494885][ T5822] bridge_slave_1: left promiscuous mode [ 153.499360][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.509938][ T5822] bridge_slave_0: left allmulticast mode [ 153.512469][ T5822] bridge_slave_0: left promiscuous mode [ 153.515284][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.527785][ T5822] pim6reg99999999: left allmulticast mode [ 154.074571][ T5754] Bluetooth: hci4: command 0x0406 tx timeout [ 154.343683][ T5456] 8021q: adding VLAN 0 to HW filter on device eth2 [ 154.347355][T11895] tipc: Enabling of bearer rejected, failed to enable media [ 154.356611][T11902] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 154.359752][T11902] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 154.420218][ T5822] tipc: Disabling bearer [ 154.443945][ T5822] tipc: Left network mode [ 154.554510][ T5759] Bluetooth: hci0: command tx timeout [ 154.763388][T11929] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 154.765956][T11929] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 154.769697][T11929] tipc: Enabling of bearer rejected, failed to enable media [ 154.994544][T11841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 155.000922][T11841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 155.003665][T11841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 155.008753][T11841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 155.018824][ T5822] hsr_slave_0: left promiscuous mode [ 155.022510][ T5822] hsr_slave_1: left promiscuous mode [ 155.024754][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.028208][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.114542][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 155.184650][ T5822] team0 (unregistering): Port device team_slave_1 removed [ 155.194234][ T5822] team0 (unregistering): Port device team_slave_0 removed [ 155.305967][T11841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 155.310946][T11841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 155.314614][T11841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 155.322304][T11841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 155.402862][T11841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.427559][T11841] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.436175][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.438437][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.457347][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.459700][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.530162][T11977] tipc: Enabling of bearer rejected, failed to enable media [ 155.683153][ T5822] IPVS: stop unused estimator thread 0... [ 155.805745][T11998] netlink: 'syz.0.2427': attribute type 4 has an invalid length. [ 155.836125][T12003] tipc: Enabling of bearer rejected, failed to enable media [ 155.874913][T11841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.904351][T11841] veth0_vlan: entered promiscuous mode [ 155.912077][T11841] veth1_vlan: entered promiscuous mode [ 155.930379][T11841] veth0_macvtap: entered promiscuous mode [ 155.940199][T11841] veth1_macvtap: entered promiscuous mode [ 155.952076][T11841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.965473][T11841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.058403][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.075288][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.102174][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.104849][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.108143][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.124527][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.129394][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.145420][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.290635][ T5754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.295570][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.299405][ T5754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.302694][ T5754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.305688][ T5754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.636934][ T5759] Bluetooth: hci0: command tx timeout [ 156.932398][T12032] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.941213][T12032] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.951130][T12032] bridge_slave_0: entered allmulticast mode [ 156.959615][T12032] bridge_slave_0: entered promiscuous mode [ 156.984696][T12032] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.996598][T12032] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.999923][T12032] bridge_slave_1: entered allmulticast mode [ 157.008413][T12032] bridge_slave_1: entered promiscuous mode [ 157.071764][T12032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.077558][T12032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.095034][T12032] team0: Port device team_slave_0 added [ 157.098294][T12032] team0: Port device team_slave_1 added [ 157.118974][T12032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.121405][T12032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.128845][T12112] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2462'. [ 157.129701][T12032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.137325][T12032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.139899][T12032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.149550][T12032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.156235][T12112] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2462'. [ 157.171738][T12112] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2462'. [ 157.174587][T12032] hsr_slave_0: entered promiscuous mode [ 157.177795][T12032] hsr_slave_1: entered promiscuous mode [ 157.179977][T12032] debugfs: 'hsr0' already exists in 'hsr' [ 157.181869][T12032] Cannot create hsr debugfs directory [ 157.380305][T12118] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2465'. [ 157.764809][T12032] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 157.771347][T12032] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 157.775113][T12032] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 157.783785][T12032] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.787440][T12032] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 157.792968][T12032] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 157.797069][T12032] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 157.803699][T12032] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 157.868652][ T42] audit: type=1800 audit(1785963522.725:1246): pid=12110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2460" name="/" dev="fuse" ino=4 res=0 errno=0 [ 157.870016][T12032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.893917][T12032] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.905183][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.907477][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.919892][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.922142][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.966107][T12155] syzkaller0: entered promiscuous mode [ 157.968073][T12155] syzkaller0: entered allmulticast mode [ 158.022585][T12161] ucma_write: process 198 (syz.1.2480) changed security contexts after opening file descriptor, this is not allowed. [ 158.071780][T12164] bridge_slave_0: left allmulticast mode [ 158.074118][T12164] bridge_slave_0: left promiscuous mode [ 158.077084][T12164] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.082537][T12164] bridge_slave_1: left allmulticast mode [ 158.084652][T12164] bridge_slave_1: left promiscuous mode [ 158.086734][T12164] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.092412][T12164] bond0: (slave bond_slave_0): Releasing backup interface [ 158.103069][T12164] bond0: (slave bond_slave_1): Releasing backup interface [ 158.111578][T12164] team0: Port device team_slave_0 removed [ 158.116265][T12164] team0: Port device team_slave_1 removed [ 158.118642][T12164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.121096][T12164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.126620][T12164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.129061][T12164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.133330][T12164] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 158.147144][T12166] team0: Mode changed to "broadcast" [ 158.205666][T12170] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode [ 158.208666][T12170] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode [ 158.288180][T12178] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 158.291198][T12178] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 158.326637][T12032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.362569][T12032] veth0_vlan: entered promiscuous mode [ 158.369349][T12032] veth1_vlan: entered promiscuous mode [ 158.389053][T12032] veth0_macvtap: entered promiscuous mode [ 158.393891][T12032] veth1_macvtap: entered promiscuous mode [ 158.403621][T12032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.407145][ T5759] Bluetooth: hci3: command tx timeout [ 158.411342][T12032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.456243][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.467210][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.487845][ T5822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.525033][ T5822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.529313][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.532888][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.561984][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.566418][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.622200][T12191] No control pipe specified [ 159.994992][ T5759] Bluetooth: hci0: command tx timeout [ 160.484532][ T5759] Bluetooth: hci3: command tx timeout [ 160.760782][T12221] No control pipe specified [ 161.132151][T12234] syzkaller0: entered promiscuous mode [ 161.134635][T12234] syzkaller0: entered allmulticast mode [ 161.359657][T12244] No control pipe specified [ 161.437592][T12246] syzkaller0: entered promiscuous mode [ 161.439408][T12246] syzkaller0: entered allmulticast mode [ 161.474000][T12247] random: crng reseeded on system resumption [ 162.557605][ T5759] Bluetooth: hci3: command tx timeout [ 163.304126][T12257] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 163.306604][T12257] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 163.452683][T12290] netlink: 776 bytes leftover after parsing attributes in process `syz.1.2528'. [ 163.496044][T12294] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 163.555345][T12300] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2533'. [ 163.575495][T12304] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode [ 163.582431][T12304] mac80211_hwsim hwsim18 syzkaller0: entered allmulticast mode [ 163.639424][T12312] netlink: 776 bytes leftover after parsing attributes in process `syz.2.2539'. [ 163.741562][T12329] mac80211_hwsim hwsim18 syzkaller0: left promiscuous mode [ 163.745553][T12329] mac80211_hwsim hwsim18 syzkaller0: left allmulticast mode [ 163.816701][T12337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2543'. [ 163.832541][T12339] netlink: 776 bytes leftover after parsing attributes in process `syz.2.2551'. [ 163.840388][T12341] netlink: 'syz.1.2552': attribute type 1 has an invalid length. [ 163.866963][T12341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.883553][T12341] bond1: (slave geneve2): making interface the new active one [ 163.889293][T12341] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 164.023228][T12354] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode [ 164.025976][T12354] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode [ 164.067426][T12357] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 164.070691][T12357] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 164.128713][T12363] netlink: 776 bytes leftover after parsing attributes in process `syz.2.2562'. [ 164.282182][T12381] netlink: 776 bytes leftover after parsing attributes in process `syz.2.2571'. [ 164.589282][T12404] syzkaller0: entered promiscuous mode [ 164.591264][T12404] syzkaller0: entered allmulticast mode [ 164.601592][T12389] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 164.606230][T12389] device-mapper: ioctl: error adding target to table [ 164.647159][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2580'. [ 164.659390][ T5759] Bluetooth: hci3: command tx timeout [ 165.196633][T12410] netlink: 776 bytes leftover after parsing attributes in process `syz.2.2583'. [ 166.382560][T12415] bridge_slave_0: left allmulticast mode [ 166.384922][T12415] bridge_slave_0: left promiscuous mode [ 166.387512][T12415] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.397275][T12415] bridge_slave_1: left allmulticast mode [ 166.401731][T12415] bridge_slave_1: left promiscuous mode [ 166.407218][T12415] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.420067][T12415] bond0: (slave bond_slave_0): Releasing backup interface [ 166.425926][T12415] bond0: (slave bond_slave_1): Releasing backup interface [ 166.438120][T12415] team0: Port device team_slave_0 removed [ 166.444230][T12415] team0: Port device team_slave_1 removed [ 166.447881][T12415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.451614][T12415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.456130][T12415] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 166.462324][T12416] team0: Mode changed to "broadcast" [ 166.476218][T12422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2588'. [ 166.622842][T12435] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 166.630895][T12435] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 166.670260][T12441] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.716701][T12448] autofs: Unknown parameter '0x0000000000000000' [ 166.727624][T12444] syzkaller0: entered promiscuous mode [ 166.734392][T12444] syzkaller0: entered allmulticast mode [ 168.360311][T12467] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode [ 168.363490][T12467] mac80211_hwsim hwsim18 syzkaller0: entered allmulticast mode [ 168.474259][T12477] tipc: Started in network mode [ 168.475044][T12479] autofs: Unknown parameter 'fd0x0000000000000000' [ 168.477860][T12477] tipc: Node identity 080211000001, cluster identity 4711 [ 168.482999][T12477] tipc: Enabled bearer , priority 0 [ 168.493180][T12477] tipc: Resetting bearer [ 168.516470][T12475] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 168.615229][T12475] md: could not open device unknown-block(1,0). [ 168.787148][T12475] md/raid:md0: not clean -- starting background reconstruction [ 168.796926][T12475] md/raid:md0: device ram0 operational as raid disk 0 [ 168.821650][T12475] md/raid:md0: raid level 5 active with 1 out of 1 devices, algorithm 0 [ 168.825734][T12475] ------------[ cut here ]------------ [ 168.827549][T12475] UBSAN: shift-out-of-bounds in ./include/linux/log2.h:57:13 [ 168.829845][T12475] shift exponent 64 is too large for 64-bit type 'long unsigned int' SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 168.832639][T12475] CPU: 0 UID: 0 PID: 12475 Comm: syz.3.2608 Not tainted syzkaller #0 PREEMPT(full) [ 168.832655][T12475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.832662][T12475] Call Trace: [ 168.832669][T12475] [ 168.832674][T12475] dump_stack_lvl+0x100/0x190 [ 168.832697][T12475] ubsan_epilogue+0xa/0x30 [ 168.832709][T12475] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 168.833058][T12475] raid5_set_limits+0x310/0x53c [ 168.833076][T12475] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 168.833096][T12475] ? __pfx_raid5_set_limits+0x10/0x10 [ 168.833125][T12475] raid5_run.cold+0x35a/0xd19 [ 168.833145][T12475] md_run+0xc2f/0x2510 [ 168.833175][T12475] ? __pfx_md_run+0x10/0x10 [ 168.833192][T12475] ? set_disk_ro+0x1b7/0x210 [ 168.833209][T12475] ? __pfx_set_disk_ro+0x10/0x10 [ 168.833229][T12475] do_md_run+0x36/0x660 [ 168.833248][T12475] array_state_store+0x9c5/0xcf0 [ 168.833263][T12475] md_attr_store+0x1c5/0x330 [ 168.833278][T12475] ? __pfx_md_attr_store+0x10/0x10 [ 168.833292][T12475] sysfs_kf_write+0xf2/0x150 [ 168.833309][T12475] kernfs_fop_write_iter+0x3e0/0x5f0 [ 168.833323][T12475] ? __pfx_sysfs_kf_write+0x10/0x10 [ 168.833341][T12475] vfs_write+0x6ac/0x1050 [ 168.833353][T12475] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 168.833368][T12475] ? __pfx_vfs_write+0x10/0x10 [ 168.833378][T12475] ? find_held_lock+0x2b/0x80 [ 168.833402][T12475] ksys_write+0x12a/0x250 [ 168.833413][T12475] ? __pfx_ksys_write+0x10/0x10 [ 168.833428][T12475] __do_fast_syscall_32+0xe7/0x970 [ 168.833449][T12475] do_fast_syscall_32+0x32/0x70 [ 168.833464][T12475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.833478][T12475] RIP: 0023:0xf7f64fec [ 168.833493][T12475] Code: Unable to access opcode bytes at 0xf7f64fc2. [ 168.833499][T12475] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 168.833510][T12475] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800007c0 [ 168.833517][T12475] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.833523][T12475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.833529][T12475] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 168.833536][T12475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.833550][T12475] [ 168.833554][T12475] ---[ end trace ]--- [ 168.908273][T12475] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 168.910534][T12475] CPU: 0 UID: 0 PID: 12475 Comm: syz.3.2608 Not tainted syzkaller #0 PREEMPT(full) [ 168.913374][T12475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.916512][T12475] Call Trace: [ 168.917552][T12475] [ 168.918508][T12475] dump_stack_lvl+0x100/0x190 [ 168.919995][T12475] vpanic+0x552/0x970 [ 168.921235][T12475] ? __pfx_vpanic+0x10/0x10 [ 168.922616][T12475] panic+0xd1/0xe0 [ 168.923799][T12475] ? __pfx_panic+0x10/0x10 [ 168.925175][T12475] check_panic_on_warn.cold+0x19/0x34 [ 168.926784][T12475] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 168.928780][T12475] raid5_set_limits+0x310/0x53c [ 168.930286][T12475] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 168.931980][T12475] ? __pfx_raid5_set_limits+0x10/0x10 [ 168.933654][T12475] raid5_run.cold+0x35a/0xd19 [ 168.935130][T12475] md_run+0xc2f/0x2510 [ 168.936410][T12475] ? __pfx_md_run+0x10/0x10 [ 168.937828][T12475] ? set_disk_ro+0x1b7/0x210 [ 168.939287][T12475] ? __pfx_set_disk_ro+0x10/0x10 [ 168.940862][T12475] do_md_run+0x36/0x660 [ 168.942112][T12475] array_state_store+0x9c5/0xcf0 [ 168.943627][T12475] md_attr_store+0x1c5/0x330 [ 168.945012][T12475] ? __pfx_md_attr_store+0x10/0x10 [ 168.946818][T12475] sysfs_kf_write+0xf2/0x150 [ 168.948223][T12475] kernfs_fop_write_iter+0x3e0/0x5f0 [ 168.949890][T12475] ? __pfx_sysfs_kf_write+0x10/0x10 [ 168.951523][T12475] vfs_write+0x6ac/0x1050 [ 168.952871][T12475] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 168.954647][T12475] ? __pfx_vfs_write+0x10/0x10 [ 168.956081][T12475] ? find_held_lock+0x2b/0x80 [ 168.957541][T12475] ksys_write+0x12a/0x250 [ 168.958870][T12475] ? __pfx_ksys_write+0x10/0x10 [ 168.960398][T12475] __do_fast_syscall_32+0xe7/0x970 [ 168.961948][T12475] do_fast_syscall_32+0x32/0x70 [ 168.963470][T12475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.965407][T12475] RIP: 0023:0xf7f64fec [ 168.966638][T12475] Code: Unable to access opcode bytes at 0xf7f64fc2. [ 168.968618][T12475] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 168.971140][T12475] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800007c0 [ 168.973658][T12475] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.976705][T12475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.979301][T12475] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 168.981680][T12475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.984416][T12475] [ 168.985890][T12475] Kernel Offset: disabled [ 168.987247][T12475] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:58:53 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff9b7037b1 RBX=ffffc9000dafedcd RCX=ffffc9000d6f2000 RDX=0000000000080000 RSI=ffffffff8bb4ebee RDI=ffff888027dba540 RBP=ffffffff9b70379d RSP=ffffc9000dafed40 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000062 R11=0000000000000000 R12=0000000000000062 R13=000000000000001c R14=ffffc9000dafedb0 R15=dffffc0000000000 RIP=ffffffff8209b100 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f735e630 CR3=0000000053c15000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000004 RBX=ffffffff8ebf3340 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8e183c7e RDI=ffffffff8ebf3910 RBP=00000000000062cc RSP=ffffc9000e0d70a0 R8 =00000000c0745c1e R9 =00000000000000b8 R10=0000000000000200 R11=0000000000000000 R12=1ffff92001c1ae15 R13=0000000000000001 R14=ffffc9000e0d7200 R15=0000000000000001 RIP=ffffffff81ee5646 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096cdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c24452b CR3=000000004bf96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000003 RBX=0000002746383f13 RCX=1ffff110056850a2 RDX=ffff888020de8000 RSI=ffffffff81f55e62 RDI=ffff88802b428510 RBP=ffff88802b428400 RSP=ffffc9000df8f4d0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=ffff88802b4284c0 R14=0000000000000000 R15=ffff88802b43c3c0 RIP=ffffffff8209b10b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ddf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f924d7225d0 CR3=0000000056230000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000a45 0000001800000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5401ffffffffffff fffff5080880031c 000003670000000d 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffe0800058abf f803000800058abf f003000400058abf ec03200400058abf ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e803200800060800 200800060274c218 0800058abfe80201 0000000806060101 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ca5ffffffffe0800 058abff803000800 058abff003000400 058abfec03200400 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 058abfe803200800 0608002008000600 74c2010800088002 040177a600435049 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001268088080002 af80020100000608 06060162ee408090 82080002afb00300 ZMM25=8c8b00a38c8b00a3 8c8b00a38c8b00a3 8c8b00a38c8b00a3 8c8b00a38c8b00a3 8c8b00a38c8b00a3 8c8b00a38c8b00a3 8c8b00a38c8b00a3 8c8b00a38c8b00a3 ZMM26=19fa465519fa4655 19fa465519fa4655 19fa465519fa4655 19fa465519fa4655 19fa465519fa4655 19fa465519fa4655 19fa465519fa4655 19fa465519fa4655 ZMM27=679da70b679da70b 679da70b679da70b 679da70b679da70b 679da70b679da70b 679da70b679da70b 679da70b679da70b 679da70b679da70b 679da70b679da70b ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=080e0000080e0000 080e0000080e0000 080e0000080e0000 080e0000080e0000 080e0000080e0000 080e0000080e0000 080e0000080e0000 080e0000080e0000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffffff8ebf3340 RCX=ffffffff8bb677e5 RDX=1ffffffff1d7e676 RSI=ffffffff8c400a00 RDI=ffffffff8ebf33b0 RBP=0000000000000008 RSP=ffffc9000e0c77f8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffc9000e0c78b8 R14=ffff888043ddc600 R15=0000000000000191 RIP=ffffffff81ee0eca RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7362020 CR3=00000000503da000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000