last executing test programs: 56.892547728s ago: executing program 2 (id=497): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x1, @vbi={0x2, 0x9, 0x1, 0xa0363159, [0x3, 0xffff], [0x3, 0x4], 0x1}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xd000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}}, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x140d, 0x4, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x30000040}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x3f, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) 55.53774122s ago: executing program 2 (id=503): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@setlink={0x34, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x20000, 0x4a204}, [@IFLA_ADDRESS={0xa, 0x1, @random="94f652ff61fa"}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x29a29}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x24048880) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000240)={'syztnl1\x00', r4, 0x10, 0x8000, 0x2, 0x2, {{0x18, 0x4, 0x1, 0x7, 0x60, 0x66, 0x0, 0x40, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x3c, 0x77, 0x1, 0x9, [{@multicast2, 0x9}, {@multicast1, 0x1}, {@multicast1, 0x630}, {@loopback, 0x8}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @lsrr={0x83, 0x7, 0x5e, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x4, 0x55, 0x1, 0xc}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='!,\x00') mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000500)=0xb0000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@local}) 55.5254612s ago: executing program 2 (id=504): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x21, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50) write$FUSE_LK(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, {{0x2, 0x0, 0x1}}}, 0x28) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="3cc347846b2e1d2f6393", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache,\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_IOCTL(r3, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x6, 0x0, 0x8e4, 0x3}}, 0xf000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setitimer(0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffc, 0x3bd}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 55.435023706s ago: executing program 2 (id=505): syz_open_dev$vim2m(&(0x7f0000000140), 0x40000000000000fb, 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffffffffffdd9) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000380), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f00000003c0)={0x1, 0x2, 0x3}) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) 55.349792915s ago: executing program 2 (id=508): fanotify_init(0x0, 0x0) epoll_create1(0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r1, 0x7ff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000900009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12, 0x4, 0x424, 0x6}}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000001000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mq_open(0x0, 0x42, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0xffff, 0x0, 0x0, 0x8, 0x2}, {0x0, 0x4, 0x0, 0x40000400000000, 0x0, 0x40009, 0xffffffffffffffff}, {0x0, 0xfffffffffffffff7, 0x53e5, 0x7}, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x32}, 0xa, @in6=@remote, 0x1502, 0x1, 0x2, 0x0, 0x0, 0xfffffffd}}, 0xe4) dup(0xffffffffffffffff) 54.980559675s ago: executing program 2 (id=511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x1e, 0x4, 0x0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000003c0), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="000000000000181e3537a154ccc05b07caca7a26", @ANYRESDEC, @ANYRES32, @ANYRESDEC=r0], 0x50) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r3, &(0x7f0000000200)="2eec4f600c15d9ad9e83224620d5356572bd1d4647b826d57d839d38e578a9a9b3b73c484b539f2181158c2bd5074d2145de3f3b91646c024fb744c7a3d51cc6e235536bda5037bb50d5ce282d4f84684e6272d6bafd3bafa4f14a18d4384d9220084803a79f5b7e147c3f340e44bbe7662f33671e122225ff9a527f4a896ccd31d950edc13f71e5bb8f5ddc63cef78fdd9db45875675f93223fc40293d9e378ebf030f37c3ac29a98b3f804aa71af883b649ac221418d0045c46d285422db9c912be2e9dfaa12d4c923bfdeb32e6723", 0xfffffe8d) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc1485544, &(0x7f0000000000)=0x5) 54.949712335s ago: executing program 32 (id=511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x1e, 0x4, 0x0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000003c0), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="000000000000181e3537a154ccc05b07caca7a26", @ANYRESDEC, @ANYRES32, @ANYRESDEC=r0], 0x50) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r3, &(0x7f0000000200)="2eec4f600c15d9ad9e83224620d5356572bd1d4647b826d57d839d38e578a9a9b3b73c484b539f2181158c2bd5074d2145de3f3b91646c024fb744c7a3d51cc6e235536bda5037bb50d5ce282d4f84684e6272d6bafd3bafa4f14a18d4384d9220084803a79f5b7e147c3f340e44bbe7662f33671e122225ff9a527f4a896ccd31d950edc13f71e5bb8f5ddc63cef78fdd9db45875675f93223fc40293d9e378ebf030f37c3ac29a98b3f804aa71af883b649ac221418d0045c46d285422db9c912be2e9dfaa12d4c923bfdeb32e6723", 0xfffffe8d) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc1485544, &(0x7f0000000000)=0x5) 5.316432674s ago: executing program 4 (id=722): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffde1, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x905, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0) 5.24813993s ago: executing program 4 (id=724): fanotify_init(0x0, 0x0) epoll_create1(0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r1, 0x7ff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000900009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12, 0x4, 0x424, 0x6}}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000001000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mq_open(0x0, 0x42, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0xffff, 0x0, 0x0, 0x8, 0x2}, {0x0, 0x4, 0x0, 0x40000400000000, 0x0, 0x40009, 0xffffffffffffffff}, {0x0, 0xfffffffffffffff7, 0x53e5, 0x7}, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x32}, 0xa, @in6=@remote, 0x1502, 0x1, 0x2, 0x0, 0x0, 0xfffffffd}}, 0xe4) dup(0xffffffffffffffff) 5.059294305s ago: executing program 1 (id=727): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 4.457729392s ago: executing program 0 (id=729): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x0) 4.293161926s ago: executing program 4 (id=730): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a010200000000000000000200000009000300"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20048005) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 4.222141601s ago: executing program 4 (id=731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0xc0}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000040)=0x5, 0x4) bind$inet6(r4, &(0x7f0000f65000)={0xa, 0x4e20, 0x228, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100f188f3eb8aa914a0dd8354beed8bc065f0ff010000b430ac65e6459d65f92d7fe29ece7c0986112c2367eb7473c5da1ccc6d4226380bcc08f2d3ca047a7b800cd37ad48d31da361d50b822c689838f7b0ce621444e1541b56d2709ff20aebcc0eb8c77fc46e714cc938e2348f1dd80d338f47ef8755e5aaefdf119edaed45dc114a43e01b3e1b66f"], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20020800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002d80)=""/4109, 0x100d}, {0x0}], 0x2}, 0x10}], 0x4, 0x10160, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 3.547532957s ago: executing program 0 (id=733): openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x80000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x0, 0x0) 3.255156582s ago: executing program 4 (id=734): waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002d80)={0x2020}, 0xcf9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r6], 0x50}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', r4, 0x2f, 0xfb, 0x3, 0x976b, 0x13, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x8, 0x40, 0x5, 0x401}}) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r11 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061109c000000000004000000000000049500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r12 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x4e21, 0x1ffc, @loopback, 0x7fffe}, 0x1c) 2.992134691s ago: executing program 3 (id=736): fanotify_init(0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r1, 0x7ff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000900009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12, 0x4, 0x424, 0x6}}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000001000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mq_open(0x0, 0x42, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0xffff, 0x0, 0x0, 0x8, 0x2}, {0x0, 0x4, 0x0, 0x40000400000000, 0x0, 0x40009, 0xffffffffffffffff}, {0x0, 0xfffffffffffffff7, 0x53e5, 0x7}, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x32}, 0xa, @in6=@remote, 0x1502, 0x1, 0x2, 0x0, 0x0, 0xfffffffd}}, 0xe4) dup(0xffffffffffffffff) 2.609930901s ago: executing program 0 (id=737): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2b, 0x80801, 0x1) socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 1.772517825s ago: executing program 1 (id=738): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2b, 0x80801, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local}, {@in6=@remote, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x2}}]}, 0x184}}, 0x0) 1.772222815s ago: executing program 3 (id=739): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a010200000000000000000200000009000300"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20048005) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.771593073s ago: executing program 3 (id=740): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@setlink={0x34, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x20000, 0x4a204}, [@IFLA_ADDRESS={0xa, 0x1, @random="94f652ff61fa"}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x29a29}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x24048880) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000240)={'syztnl1\x00', r3, 0x10, 0x8000, 0x2, 0x2, {{0x18, 0x4, 0x1, 0x7, 0x60, 0x66, 0x0, 0x40, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x3c, 0x77, 0x1, 0x9, [{@multicast2, 0x9}, {@multicast1, 0x1}, {@multicast1, 0x630}, {@loopback, 0x8}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @lsrr={0x83, 0x7, 0x5e, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x4, 0x55, 0x1, 0xc}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='!,\x00') mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000500)=0xb0000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000180)={@local}) 1.73880709s ago: executing program 3 (id=741): r0 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x34325842, 0x4, 0x2, [{}, {0x277c}, {}, {}, {}, {0xd360}, {}, {0x0, 0xfffffffc}], 0x10}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf8, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) syz_usb_connect(0x0, 0x2c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5b, 0xaa, 0x7f, 0x20, 0x458, 0x706e, 0x3564, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x2}]}]}}]}}]}}, 0x0) 1.62918435s ago: executing program 0 (id=742): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@setlink={0x34, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x20000, 0x4a204}, [@IFLA_ADDRESS={0xa, 0x1, @random="94f652ff61fa"}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x29a29}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x24048880) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000240)={'syztnl1\x00', r3, 0x10, 0x8000, 0x2, 0x2, {{0x18, 0x4, 0x1, 0x7, 0x60, 0x66, 0x0, 0x40, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x3c, 0x77, 0x1, 0x9, [{@multicast2, 0x9}, {@multicast1, 0x1}, {@multicast1, 0x630}, {@loopback, 0x8}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @lsrr={0x83, 0x7, 0x5e, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x4, 0x55, 0x1, 0xc}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='!,\x00') mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000500)=0xb0000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000180)={@local}) 1.615891219s ago: executing program 0 (id=743): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 814.026241ms ago: executing program 1 (id=744): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sched_setaffinity(r0, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000540)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 671.432507ms ago: executing program 1 (id=745): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) close(r0) 671.005114ms ago: executing program 0 (id=746): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sync() r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x1, @vbi={0x2, 0x9, 0x1, 0xa0363159, [0x3, 0xffff], [0x3, 0x4], 0x1}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xd000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}}, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x140d, 0x4, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x30000040}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x3f, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) 655.884764ms ago: executing program 1 (id=747): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="029993440c7a0c95d3bb8cf253fd63c588ff", 0x12}], 0x1}}], 0x1, 0xc0) close(r0) 592.70989ms ago: executing program 1 (id=748): openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x80000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x0, 0x0) 152.425256ms ago: executing program 3 (id=749): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="029993440c7a0c95d3bb8cf253fd63c588ff", 0x12}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) close(r0) 62.796564ms ago: executing program 3 (id=750): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2b, 0x80801, 0x1) socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 0s ago: executing program 4 (id=751): openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x80000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:44655' (ED25519) to the list of known hosts. [ 41.773931][ T5943] cgroup: Unknown subsys name 'net' [ 41.898041][ T5943] cgroup: Unknown subsys name 'cpuset' [ 41.900890][ T5943] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.816552][ T5943] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.049839][ T5956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.054086][ T5956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.056166][ T5956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.058736][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.060108][ T5961] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.060868][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.063734][ T5963] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.065655][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.067445][ T5963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.069247][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.070906][ T5963] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 45.072886][ T5956] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 45.074764][ T5963] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.076854][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.081554][ T5967] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.083046][ T5961] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.084958][ T5967] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.088188][ T5967] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.089169][ T5960] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.091986][ T5967] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.094756][ T5960] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 45.095836][ T5967] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 45.097993][ T5960] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.100846][ T5967] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.244220][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 45.290776][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 45.388712][ T5965] chnl_net:caif_netlink_parms(): no params data found [ 45.444806][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.447495][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.449646][ T5959] bridge_slave_0: entered allmulticast mode [ 45.452060][ T5959] bridge_slave_0: entered promiscuous mode [ 45.456051][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.457971][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.459982][ T5959] bridge_slave_1: entered allmulticast mode [ 45.462187][ T5959] bridge_slave_1: entered promiscuous mode [ 45.492130][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.495046][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.497885][ T5954] bridge_slave_0: entered allmulticast mode [ 45.501160][ T5954] bridge_slave_0: entered promiscuous mode [ 45.552495][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.555283][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.557567][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.559834][ T5954] bridge_slave_1: entered allmulticast mode [ 45.562401][ T5954] bridge_slave_1: entered promiscuous mode [ 45.588847][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 45.601809][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.626918][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.629090][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.631456][ T5965] bridge_slave_0: entered allmulticast mode [ 45.633960][ T5965] bridge_slave_0: entered promiscuous mode [ 45.658121][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.664602][ T5959] team0: Port device team_slave_0 added [ 45.670666][ T5959] team0: Port device team_slave_1 added [ 45.672626][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.674765][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.676795][ T5965] bridge_slave_1: entered allmulticast mode [ 45.678946][ T5965] bridge_slave_1: entered promiscuous mode [ 45.681833][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.759496][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.761558][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.769691][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.784965][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.789323][ T5954] team0: Port device team_slave_0 added [ 45.792805][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.806684][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.809431][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.819408][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.830729][ T5954] team0: Port device team_slave_1 added [ 45.855640][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.857679][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.859719][ T5955] bridge_slave_0: entered allmulticast mode [ 45.861851][ T5955] bridge_slave_0: entered promiscuous mode [ 45.865216][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.867233][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.869229][ T5955] bridge_slave_1: entered allmulticast mode [ 45.871555][ T5955] bridge_slave_1: entered promiscuous mode [ 45.895840][ T5965] team0: Port device team_slave_0 added [ 45.901505][ T5965] team0: Port device team_slave_1 added [ 45.949357][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.954570][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.956851][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.965375][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.970772][ T5959] hsr_slave_0: entered promiscuous mode [ 45.973067][ T5959] hsr_slave_1: entered promiscuous mode [ 45.985300][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.989254][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.991927][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.999547][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.007824][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.010583][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.019319][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.047454][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.050239][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.059974][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.066667][ T5955] team0: Port device team_slave_0 added [ 46.094495][ T5954] hsr_slave_0: entered promiscuous mode [ 46.096605][ T5954] hsr_slave_1: entered promiscuous mode [ 46.098604][ T5954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.101073][ T5954] Cannot create hsr debugfs directory [ 46.104852][ T5955] team0: Port device team_slave_1 added [ 46.165163][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.167585][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.176974][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.181463][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.184429][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.194185][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.200412][ T5965] hsr_slave_0: entered promiscuous mode [ 46.202480][ T5965] hsr_slave_1: entered promiscuous mode [ 46.204546][ T5965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.206677][ T5965] Cannot create hsr debugfs directory [ 46.314268][ T5955] hsr_slave_0: entered promiscuous mode [ 46.316215][ T5955] hsr_slave_1: entered promiscuous mode [ 46.317994][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.320098][ T5955] Cannot create hsr debugfs directory [ 46.371906][ T5959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.378359][ T5959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.401916][ T5959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.423481][ T5959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.480914][ T5965] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.484827][ T5965] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.488935][ T5965] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.492806][ T5965] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.513530][ T5954] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.520339][ T5954] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.531053][ T5954] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.534669][ T5954] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.567476][ T5955] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.578116][ T5955] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.587264][ T5955] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.590865][ T5955] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.601608][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.620310][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.639025][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.641222][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.649367][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.664235][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.666296][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.692646][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.700475][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.702559][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.717295][ T221] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.719341][ T221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.723294][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.744466][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.754109][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.757658][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.759685][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.766524][ T221] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.768565][ T221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.785103][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.798407][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.800466][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.811496][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.813718][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.827867][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.861308][ T5959] veth0_vlan: entered promiscuous mode [ 46.880538][ T5959] veth1_vlan: entered promiscuous mode [ 46.891840][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.899795][ T5959] veth0_macvtap: entered promiscuous mode [ 46.904304][ T5959] veth1_macvtap: entered promiscuous mode [ 46.911751][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.919383][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.924468][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.930291][ T5959] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.933873][ T5959] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.936323][ T5959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.938755][ T5959] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.972632][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.983458][ T5965] veth0_vlan: entered promiscuous mode [ 46.999862][ T5954] veth0_vlan: entered promiscuous mode [ 47.005482][ T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.008333][ T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.014804][ T5965] veth1_vlan: entered promiscuous mode [ 47.020065][ T5954] veth1_vlan: entered promiscuous mode [ 47.031883][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.034964][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.036510][ T5965] veth0_macvtap: entered promiscuous mode [ 47.044598][ T5965] veth1_macvtap: entered promiscuous mode [ 47.061289][ T5954] veth0_macvtap: entered promiscuous mode [ 47.067281][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.070369][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.074352][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.077035][ T5955] veth0_vlan: entered promiscuous mode [ 47.080069][ T5954] veth1_macvtap: entered promiscuous mode [ 47.083850][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.086779][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.090213][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.098227][ T5959] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.098345][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.104382][ T5960] Bluetooth: hci2: command tx timeout [ 47.107213][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.110790][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.114396][ T5960] Bluetooth: hci1: command tx timeout [ 47.114561][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.119540][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.122904][ T5965] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.125365][ T5965] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.127784][ T5965] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.130769][ T5965] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.140124][ T5955] veth1_vlan: entered promiscuous mode [ 47.143466][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.146351][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.148936][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.151702][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.156582][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.165404][ T5954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.169025][ T5954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.172510][ T5954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.175503][ T5954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.183979][ T5960] Bluetooth: hci3: command tx timeout [ 47.183988][ T5967] Bluetooth: hci0: command tx timeout [ 47.213767][ T5955] veth0_macvtap: entered promiscuous mode [ 47.220089][ T5955] veth1_macvtap: entered promiscuous mode [ 47.228526][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.230811][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.231197][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.237595][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.240331][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.243273][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.246019][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.249271][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.253631][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.270104][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.270640][ T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.273380][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.276044][ T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.278690][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.285337][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.288537][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.291902][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.295860][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.296761][ T6017] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 47.303611][ T6017] overlayfs: failed to set xattr on upper [ 47.305742][ T6017] overlayfs: ...falling back to redirect_dir=nofollow. [ 47.312370][ T6017] overlayfs: ...falling back to index=off. [ 47.314112][ T5955] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.314177][ T5955] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.314195][ T5955] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.314210][ T5955] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.325559][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.328227][ T6017] overlayfs: ...falling back to uuid=null. [ 47.331677][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.346914][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.350893][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.381763][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.385887][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.399282][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.401525][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.523079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.953899][ T6039] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 48.955895][ T6039] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 48.965337][ T6039] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 48.968584][ T6039] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 48.970277][ T6039] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 48.973951][ T6039] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 48.977218][ T6039] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 48.978885][ T6039] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 48.981362][ T6039] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 48.983923][ T6039] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 48.985587][ T6039] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 48.990758][ T6039] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 50.512275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.523056][ T30] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.645659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.686494][ T30] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 50.690335][ T30] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 50.693809][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 50.696512][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.713011][ T6055] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 50.727964][ T30] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 50.792984][ T1330] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.956356][ T1330] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 50.962260][ T1330] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 50.965177][ T1330] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 50.967743][ T1330] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.985146][ T6057] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 50.989009][ T1330] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 51.022930][ T5960] Bluetooth: hci0: command 0x040f tx timeout [ 51.023742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 51.027612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 51.033089][ T5960] Bluetooth: hci3: command 0x040f tx timeout [ 51.034831][ T5960] Bluetooth: hci2: command 0x040f tx timeout [ 51.068735][ T6066] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 51.070746][ T6066] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 51.072486][ T6066] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 51.074518][ T6066] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 51.289459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 52.292807][ T6079] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.027054][ T833] usb 5-1: USB disconnect, device number 2 [ 53.073876][ T5960] Bluetooth: hci1: command 0x040f tx timeout [ 53.159894][ T5960] Bluetooth: hci3: command 0x040f tx timeout [ 53.159969][ T5967] Bluetooth: hci2: command 0x040f tx timeout [ 53.196723][ T64] usb 8-1: USB disconnect, device number 2 [ 53.641882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.782947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 53.785223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 53.787383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 53.994418][ T6100] netlink: 'syz.2.23': attribute type 10 has an invalid length. [ 53.997532][ T6100] veth0_macvtap: left promiscuous mode [ 54.008781][ T6100] batman_adv: batadv0: Adding interface: macvtap0 [ 54.010760][ T6100] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.019073][ T6100] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 54.062071][ T6103] netlink: 'syz.2.24': attribute type 10 has an invalid length. [ 54.099098][ T6097] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 54.101216][ T6097] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 54.102922][ T6097] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 54.447217][ T6109] netlink: 'syz.1.26': attribute type 10 has an invalid length. [ 54.451027][ T6109] veth0_macvtap: left promiscuous mode [ 54.457660][ T6109] batman_adv: batadv0: Adding interface: macvtap0 [ 54.459569][ T6109] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.466587][ T6109] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 54.972934][ T6116] Bluetooth: MGMT ver 1.23 [ 55.168439][ T6122] sch_fq: defrate 511 ignored. [ 55.680413][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 55.685545][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 56.114984][ T6134] hsr_slave_1 (unregistering): left promiscuous mode [ 56.152585][ T5967] Bluetooth: hci1: command 0x040f tx timeout [ 56.323766][ T5967] Bluetooth: hci3: command 0x040f tx timeout [ 56.323773][ T5960] Bluetooth: hci2: command 0x040f tx timeout [ 56.962589][ T6146] lo speed is unknown, defaulting to 1000 [ 56.964249][ T6146] lo speed is unknown, defaulting to 1000 [ 56.976728][ T6146] lo speed is unknown, defaulting to 1000 [ 56.980502][ T6146] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 56.985436][ T6146] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 57.021091][ T6146] lo speed is unknown, defaulting to 1000 [ 57.024319][ T6146] lo speed is unknown, defaulting to 1000 [ 57.028573][ T6146] lo speed is unknown, defaulting to 1000 [ 57.030695][ T6146] lo speed is unknown, defaulting to 1000 [ 57.133119][ T6149] ip6erspan0: entered promiscuous mode [ 57.533768][ T6164] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.535674][ T6164] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 57.537955][ T6164] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 57.627779][ T834] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 57.929599][ T834] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 57.932709][ T834] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 57.935426][ T834] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 57.937896][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.944028][ T6162] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 57.947528][ T834] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 58.333159][ T6173] sg_read: process 39 (syz.1.47) changed security contexts after opening file descriptor, this is not allowed. [ 59.669812][ T5967] Bluetooth: hci1: command 0x040f tx timeout [ 59.755280][ T5967] Bluetooth: hci3: command 0x040f tx timeout [ 59.755377][ T5960] Bluetooth: hci2: command 0x040f tx timeout [ 60.102326][ T1454] usb 5-1: USB disconnect, device number 3 [ 60.419718][ T6197] bridge_slave_0: left allmulticast mode [ 60.421511][ T6197] bridge_slave_0: left promiscuous mode [ 60.424644][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.431816][ T6197] bridge_slave_1: left allmulticast mode [ 60.433456][ T6197] bridge_slave_1: left promiscuous mode [ 60.435306][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.442475][ T6197] bond0: (slave bond_slave_0): Releasing backup interface [ 60.446716][ T6197] bond0: (slave bond_slave_1): Releasing backup interface [ 60.458354][ T6197] team0: Port device team_slave_0 removed [ 60.465307][ T6197] team0: Port device team_slave_1 removed [ 60.467347][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.470152][ T6197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.473835][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.475979][ T6197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.483223][ T6197] batman_adv: batadv0: Removing interface: macvtap0 [ 60.528485][ T6197] Zero length message leads to an empty skb [ 60.580137][ T6200] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 60.582974][ T6200] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 60.782879][ T6208] sch_fq: defrate 511 ignored. [ 60.932535][ T6206] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 60.935087][ T6206] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 60.936963][ T6206] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 61.285621][ T6202] Set syz1 is full, maxelem 65536 reached [ 61.402943][ T6222] netlink: 'syz.1.64': attribute type 10 has an invalid length. [ 61.405603][ T6222] batman_adv: batadv0: Adding interface: macvtap0 [ 61.407598][ T6222] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.437250][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 61.447946][ T6222] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 61.512453][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'. [ 61.840903][ T6235] lo speed is unknown, defaulting to 1000 [ 61.842661][ T6235] lo speed is unknown, defaulting to 1000 [ 61.844530][ T6235] lo speed is unknown, defaulting to 1000 [ 61.850427][ T6235] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 61.859223][ T6235] lo speed is unknown, defaulting to 1000 [ 61.861443][ T6235] lo speed is unknown, defaulting to 1000 [ 61.863512][ T6235] lo speed is unknown, defaulting to 1000 [ 61.865575][ T6235] lo speed is unknown, defaulting to 1000 [ 62.511339][ T6242] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 62.515341][ T6242] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 62.517250][ T6242] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 63.251172][ T834] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 63.418497][ T834] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 63.422894][ T834] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 63.426146][ T834] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 63.428639][ T834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.490277][ T6261] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 63.492151][ T6261] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 63.493803][ T6261] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 63.526486][ T6255] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 63.530272][ T834] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 63.839148][ T833] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 64.024750][ T833] usb 5-1: unable to get BOS descriptor or descriptor too short [ 64.028185][ T833] usb 5-1: not running at top speed; connect to a high speed hub [ 64.031917][ T833] usb 5-1: config 0 has no interfaces? [ 64.037183][ T833] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 64.039832][ T833] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 64.042233][ T833] usb 5-1: Product: syz [ 64.043414][ T833] usb 5-1: Manufacturer: syz [ 64.044720][ T833] usb 5-1: SerialNumber: syz [ 64.048311][ T833] usb 5-1: config 0 descriptor?? [ 64.313214][ T6270] ip6erspan0: entered promiscuous mode [ 64.861102][ T9] usb 6-1: USB disconnect, device number 2 [ 65.560377][ T5960] Bluetooth: hci1: command 0x040f tx timeout [ 65.646644][ T5960] Bluetooth: hci3: command 0x040f tx timeout [ 65.646664][ T5967] Bluetooth: hci2: command 0x040f tx timeout [ 65.840802][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 65.846277][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 65.971585][ T6293] hsr_slave_1 (unregistering): left promiscuous mode [ 66.537789][ T1454] usb 5-1: USB disconnect, device number 4 [ 67.624526][ T6313] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 67.626440][ T6313] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 67.628973][ T6313] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 68.224113][ T6320] Set syz1 is full, maxelem 65536 reached [ 68.443423][ T6327] netlink: 'syz.3.94': attribute type 10 has an invalid length. [ 68.446236][ T6327] veth0_macvtap: left promiscuous mode [ 68.453352][ T6327] batman_adv: batadv0: Adding interface: macvtap0 [ 68.455234][ T6327] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.462342][ T6327] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 68.810163][ T833] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 68.972700][ T833] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 68.975799][ T833] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 69.007519][ T833] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 69.010876][ T833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.018954][ T6333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 69.024854][ T833] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 69.751970][ T5960] Bluetooth: hci1: command 0x040f tx timeout [ 69.836505][ T5960] Bluetooth: hci2: command 0x040f tx timeout [ 69.836533][ T5967] Bluetooth: hci3: command 0x040f tx timeout [ 70.326303][ T9] usb 8-1: USB disconnect, device number 3 [ 70.405162][ T6361] fuse: Unknown parameter 'use00000000000000000000' [ 70.713102][ T834] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 70.897781][ T834] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 70.900954][ T834] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 70.903688][ T834] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 70.906424][ T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.914467][ T6363] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 70.919843][ T834] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 71.021027][ T6368] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 71.022945][ T6368] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 71.025075][ T6368] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 71.099963][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 71.104450][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 71.225403][ T6376] hsr_slave_1 (unregistering): left promiscuous mode [ 71.657802][ T834] usb 7-1: USB disconnect, device number 2 [ 72.049468][ T1451] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 72.209923][ T1451] usb 6-1: Using ep0 maxpacket: 8 [ 72.220814][ T1451] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.226793][ T1451] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.230164][ T1451] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.235692][ T1451] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.235817][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.239463][ T1451] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 72.241815][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.244036][ T1451] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.281907][ T6386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.288275][ T6386] bond0: (slave rose0): Enslaving as an active interface with an up link [ 72.387013][ T6394] fuse: Unknown parameter 'user_i00000000000000000000' [ 72.473359][ T1451] usb 6-1: usb_control_msg returned -32 [ 72.475665][ T1451] usbtmc 6-1:16.0: can't read capabilities [ 72.979144][ T6399] Set syz1 is full, maxelem 65536 reached [ 73.097127][ T5967] Bluetooth: hci1: command 0x040f tx timeout [ 73.171941][ T5967] Bluetooth: hci3: command 0x040f tx timeout [ 73.171947][ T5960] Bluetooth: hci2: command 0x040f tx timeout [ 73.268131][ T833] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 73.432492][ T833] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.435561][ T833] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 73.438264][ T833] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 73.440883][ T833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.445129][ T6412] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 73.448579][ T833] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 74.141858][ T834] usb 7-1: USB disconnect, device number 3 [ 74.989352][ T834] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 75.043985][ T6015] usb 6-1: USB disconnect, device number 3 [ 75.073512][ T6432] fuse: Unknown parameter 'user_i00000000000000000000' [ 75.153652][ T834] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.156891][ T834] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 75.159714][ T834] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 75.162730][ T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.167544][ T6427] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 75.176697][ T834] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 75.324536][ T6436] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.326380][ T6436] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.328429][ T6436] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.115903][ T6448] netlink: 'syz.1.126': attribute type 10 has an invalid length. [ 76.357161][ T6454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.129'. [ 76.362249][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 76.492251][ T6461] fuse: Unknown parameter 'user_i00000000000000000000' [ 77.014681][ T6015] usb 7-1: USB disconnect, device number 4 [ 77.362660][ T5967] Bluetooth: hci1: command 0x040f tx timeout [ 77.533938][ T5967] Bluetooth: hci3: command 0x040f tx timeout [ 77.533959][ T5960] Bluetooth: hci2: command 0x040f tx timeout [ 77.564531][ T6469] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 77.567253][ T6469] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 77.569162][ T6469] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.017221][ T6478] siw: device registration error -23 [ 78.793410][ T6489] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.798547][ T6489] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.801834][ T6489] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.495425][ T6495] fuse: Unknown parameter 'user_id00000000000000000000' [ 79.778437][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 80.869290][ T5960] Bluetooth: hci1: command 0x040f tx timeout [ 80.954744][ T5960] Bluetooth: hci2: command 0x040f tx timeout [ 81.040433][ T5960] Bluetooth: hci3: command 0x040f tx timeout [ 81.193618][ T6526] fuse: Unknown parameter 'user_id00000000000000000000' [ 81.409576][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 83.186842][ T1016] cfg80211: failed to load regulatory.db [ 83.197840][ T6555] fuse: Unknown parameter 'user_id00000000000000000000' [ 83.311073][ T6560] process 'syz.0.162' launched './file1' with NULL argv: empty string added [ 83.980156][ T5994] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 84.143742][ T5994] usb 5-1: unable to get BOS descriptor or descriptor too short [ 84.146949][ T5994] usb 5-1: not running at top speed; connect to a high speed hub [ 84.151464][ T5994] usb 5-1: config 0 has no interfaces? [ 84.166430][ T5994] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 84.168968][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 84.171255][ T5994] usb 5-1: Product: syz [ 84.173435][ T5994] usb 5-1: Manufacturer: syz [ 84.174799][ T5994] usb 5-1: SerialNumber: syz [ 84.177640][ T5994] usb 5-1: config 0 descriptor?? [ 85.131811][ T6587] fuse: Bad value for 'fd' [ 85.405040][ T6595] siw: device registration error -23 [ 86.586160][ T6602] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.588014][ T6602] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.592274][ T6602] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.603811][ T35] usb 5-1: USB disconnect, device number 5 [ 87.423641][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 87.480474][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 87.731190][ T6623] fuse: Bad value for 'fd' [ 88.318636][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 88.330096][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 88.483000][ T6637] hsr_slave_1 (unregistering): left promiscuous mode [ 88.663707][ T5960] Bluetooth: hci1: command 0x040f tx timeout [ 88.737498][ T5960] Bluetooth: hci3: command 0x040f tx timeout [ 88.737605][ T5967] Bluetooth: hci2: command 0x040f tx timeout [ 89.969677][ T6649] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.973759][ T6649] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.975523][ T6649] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.657400][ T6663] fuse: Bad value for 'fd' [ 91.045645][ T6685] siw: device registration error -23 [ 91.531199][ T6694] overlayfs: missing 'lowerdir' [ 92.072995][ T5960] Bluetooth: hci1: command 0x040f tx timeout [ 92.158581][ T5960] Bluetooth: hci2: command 0x040f tx timeout [ 92.158626][ T5967] Bluetooth: hci3: command 0x040f tx timeout [ 92.535521][ T6709] siw: device registration error -23 [ 94.033837][ T6717] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 94.035659][ T6717] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 94.037379][ T6717] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 94.434774][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 95.847260][ T834] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 96.007186][ T834] usb 6-1: Using ep0 maxpacket: 8 [ 96.010491][ T834] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.013552][ T834] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.016552][ T834] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.019528][ T834] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.023560][ T834] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.026494][ T834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.135884][ T6751] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 96.137967][ T6751] overlayfs: failed to set xattr on upper [ 96.139662][ T6751] overlayfs: ...falling back to redirect_dir=nofollow. [ 96.141657][ T6751] overlayfs: ...falling back to index=off. [ 96.143307][ T6751] overlayfs: ...falling back to uuid=null. [ 96.178198][ T5960] Bluetooth: hci3: command 0x040f tx timeout [ 96.180001][ T5967] Bluetooth: hci2: command 0x040f tx timeout [ 96.188153][ T5967] Bluetooth: hci1: command 0x040f tx timeout [ 96.250928][ T834] usb 6-1: usb_control_msg returned -32 [ 96.252569][ T834] usbtmc 6-1:16.0: can't read capabilities [ 96.318725][ T6015] usb 6-1: USB disconnect, device number 4 [ 96.972980][ T6761] sch_fq: defrate 511 ignored. [ 97.062032][ T6757] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.065164][ T6757] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.071647][ T6757] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.968371][ T6776] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.970301][ T6776] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.972189][ T6776] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.409856][ T6782] siw: device registration error -23 [ 98.868057][ T6789] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 98.870627][ T6789] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 99.185087][ T6801] overlayfs: missing 'lowerdir' [ 100.112391][ T5960] Bluetooth: hci2: command 0x040f tx timeout [ 100.114197][ T5960] Bluetooth: hci1: command 0x040f tx timeout [ 100.115904][ T5967] Bluetooth: hci3: command 0x040f tx timeout [ 101.340737][ T6839] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.342718][ T6839] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.345679][ T6839] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.403687][ T6844] siw: device registration error -23 [ 102.202758][ T6856] siw: device registration error -23 [ 102.627153][ T6860] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.629984][ T6860] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.632664][ T6860] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.798317][ T6867] fuse: Unknown parameter 'fd0x0000000000000004' [ 104.707211][ T6893] siw: device registration error -23 [ 104.730659][ T5964] Bluetooth: hci1: command 0x040f tx timeout [ 104.816358][ T5967] Bluetooth: hci2: command 0x040f tx timeout [ 104.818718][ T5964] Bluetooth: hci3: command 0x040f tx timeout [ 105.029974][ T833] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 105.204693][ T833] usb 8-1: unable to get BOS descriptor or descriptor too short [ 105.208533][ T833] usb 8-1: not running at top speed; connect to a high speed hub [ 105.211895][ T833] usb 8-1: config 0 has no interfaces? [ 105.215083][ T833] usb 8-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 105.217688][ T833] usb 8-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 105.219954][ T833] usb 8-1: Product: syz [ 105.221178][ T833] usb 8-1: Manufacturer: syz [ 105.223194][ T833] usb 8-1: SerialNumber: syz [ 105.225789][ T833] usb 8-1: config 0 descriptor?? [ 105.226922][ T6900] syz.2.267 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 105.448755][ T6903] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.450852][ T6903] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.452758][ T6903] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.718280][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 107.395443][ T1016] usb 8-1: USB disconnect, device number 4 [ 107.473340][ T6940] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 107.475191][ T6940] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.476967][ T6940] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.472650][ T6963] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 108.475381][ T6963] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 108.477262][ T6963] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.917866][ T6969] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 110.043862][ T5994] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 110.204635][ T5994] usb 5-1: Using ep0 maxpacket: 8 [ 110.208740][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 110.211815][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.214481][ T5994] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.217298][ T5994] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 246 [ 110.220016][ T5994] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 110.222527][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.225841][ T5994] usb 5-1: config 0 descriptor?? [ 110.227863][ T6977] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 110.449899][ T5994] usb 5-1: USB disconnect, device number 6 [ 110.450822][ T5964] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 110.631845][ T5967] Bluetooth: hci1: command 0x040f tx timeout [ 110.633019][ T5964] Bluetooth: hci2: command 0x040f tx timeout [ 110.642702][ T5964] Bluetooth: hci3: command 0x040f tx timeout [ 111.340285][ T6995] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.342147][ T6995] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.343961][ T6995] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.566832][ T57] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 112.683105][ T7034] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.695193][ T7034] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.718270][ T7034] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.771669][ T57] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 112.774669][ T57] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 112.778280][ T57] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 112.782172][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.936417][ T7044] overlayfs: missing 'workdir' [ 113.208354][ T57] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 113.369989][ T57] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 113.373033][ T57] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 113.375723][ T57] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 113.378381][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.773717][ T7049] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.776182][ T7049] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.778317][ T7049] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.859285][ T7055] siw: device registration error -23 [ 114.408241][ T833] usb 7-1: USB disconnect, device number 5 [ 115.250516][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'. [ 115.399929][ T834] usb 8-1: USB disconnect, device number 5 [ 115.560300][ T5994] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 115.722549][ T5994] usb 5-1: unable to get BOS descriptor or descriptor too short [ 115.725095][ T5994] usb 5-1: not running at top speed; connect to a high speed hub [ 115.728032][ T5994] usb 5-1: config 0 has no interfaces? [ 115.731141][ T5994] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 115.733853][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 115.736014][ T5994] usb 5-1: Product: syz [ 115.737185][ T5994] usb 5-1: Manufacturer: syz [ 115.738570][ T5994] usb 5-1: SerialNumber: syz [ 115.741224][ T5994] usb 5-1: config 0 descriptor?? [ 115.934588][ T5964] Bluetooth: hci3: command 0x040f tx timeout [ 115.936314][ T5964] Bluetooth: hci2: command 0x040f tx timeout [ 115.938110][ T5964] Bluetooth: hci1: command 0x040f tx timeout [ 116.605343][ T7097] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.607268][ T7097] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.609108][ T7097] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.378196][ T1016] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 117.538127][ T1016] usb 8-1: Using ep0 maxpacket: 8 [ 117.544367][ T1016] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 117.547518][ T1016] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.564111][ T1016] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.566729][ T1016] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 246 [ 117.569338][ T1016] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 117.573245][ T1016] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.577004][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 117.581376][ T1016] usb 8-1: config 0 descriptor?? [ 117.584119][ T7103] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.807471][ T5994] usb 8-1: USB disconnect, device number 6 [ 117.808869][ T5960] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 118.177807][ T5994] usb 5-1: USB disconnect, device number 7 [ 118.413843][ T7121] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.416551][ T7121] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.418551][ T7121] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.547812][ T833] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 119.712962][ T833] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 119.718016][ T833] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 119.720849][ T833] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.723831][ T833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.011912][ T833] usb 6-1: USB disconnect, device number 5 [ 120.182451][ T7141] siw: device registration error -23 [ 120.313320][ T7138] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.315446][ T7138] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.317968][ T7138] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.090319][ T7164] netlink: 48 bytes leftover after parsing attributes in process `syz.1.339'. [ 121.157239][ T7167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 121.435168][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 122.445012][ T5964] Bluetooth: hci1: command 0x040f tx timeout [ 122.519889][ T5964] Bluetooth: hci3: command 0x040f tx timeout [ 122.519908][ T5967] Bluetooth: hci2: command 0x040f tx timeout [ 122.733668][ T834] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 122.916024][ T7187] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 122.917906][ T7187] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.919881][ T7187] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.948712][ T834] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 122.951482][ T834] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 122.953876][ T834] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 122.956224][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.380104][ T9] usb 5-1: USB disconnect, device number 8 [ 124.606693][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.356'. [ 125.000588][ T5967] Bluetooth: hci1: command 0x040f tx timeout [ 125.085682][ T5967] Bluetooth: hci2: command 0x040f tx timeout [ 125.085751][ T5960] Bluetooth: hci3: command 0x040f tx timeout [ 125.215465][ T7225] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.217362][ T7225] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.219202][ T7225] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.972949][ T834] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 126.146358][ T834] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 126.149221][ T834] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 126.151780][ T834] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 126.154303][ T834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.631937][ T7257] siw: device registration error -23 [ 127.162041][ T7260] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 127.164029][ T7260] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.165825][ T7260] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 127.618628][ T833] usb 6-1: USB disconnect, device number 6 [ 128.240949][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 128.307042][ T7277] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.309325][ T7277] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.311580][ T7277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.822467][ T7315] sch_fq: defrate 511 ignored. [ 129.829771][ T7306] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.831824][ T7306] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.834517][ T7306] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.317878][ T7321] siw: device registration error -23 [ 131.286168][ T5994] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 131.457202][ T5994] usb 7-1: Using ep0 maxpacket: 32 [ 131.460815][ T5994] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 131.465940][ T5994] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 131.470028][ T5994] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 131.472385][ T5994] usb 7-1: Product: syz [ 131.473615][ T5994] usb 7-1: Manufacturer: syz [ 131.474946][ T5994] usb 7-1: SerialNumber: syz [ 131.479235][ T5994] usb 7-1: config 0 descriptor?? [ 131.482167][ T7331] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.596133][ T7341] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 131.597995][ T7341] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.599758][ T7341] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.706168][ T834] usb 7-1: USB disconnect, device number 6 [ 131.954285][ T7351] overlayfs: failed to resolve './file0': -2 [ 132.709916][ T7370] netlink: 48 bytes leftover after parsing attributes in process `syz.0.403'. [ 132.757418][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 133.123949][ T7378] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.125947][ T7378] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.127731][ T7378] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 133.616650][ T833] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 133.777170][ T833] usb 8-1: Using ep0 maxpacket: 32 [ 133.781367][ T833] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 133.786097][ T833] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 133.788660][ T833] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 133.790945][ T833] usb 8-1: Product: syz [ 133.792121][ T833] usb 8-1: Manufacturer: syz [ 133.793451][ T833] usb 8-1: SerialNumber: syz [ 133.795973][ T833] usb 8-1: config 0 descriptor?? [ 133.797911][ T7384] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 134.021441][ T833] usb 8-1: USB disconnect, device number 7 [ 135.140583][ T7408] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.145673][ T7408] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.147454][ T7408] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.844430][ T7416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.418'. [ 135.922694][ T7419] siw: device registration error -23 [ 136.940074][ T7431] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.943120][ T7431] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.945002][ T7431] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.918621][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.920503][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.190288][ T7475] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.192903][ T7475] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 138.195610][ T7475] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.368248][ T6721] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 139.539251][ T6721] usb 5-1: Using ep0 maxpacket: 8 [ 139.542556][ T6721] usb 5-1: config 0 has no interfaces? [ 139.544629][ T6721] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.547903][ T6721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.554091][ T6721] usb 5-1: config 0 descriptor?? [ 139.775713][ T5994] usb 5-1: USB disconnect, device number 9 [ 140.319698][ T5960] Bluetooth: hci1: command 0x040f tx timeout [ 140.394678][ T5967] Bluetooth: hci2: command 0x040f tx timeout [ 140.401215][ T5960] Bluetooth: hci3: command 0x040f tx timeout [ 142.273568][ T7540] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.275575][ T7540] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.277907][ T7540] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.355794][ T57] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 143.467847][ T7574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.462'. [ 143.528210][ T57] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 143.531298][ T57] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.534379][ T57] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.538033][ T57] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 143.540638][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.545979][ T57] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.548221][ T57] usb 5-1: invalid MIDI out EP 0 [ 143.566990][ T57] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 143.597297][ T6064] udevd[6064]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.625747][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 144.209864][ T7581] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.214333][ T7581] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.217417][ T7581] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.236857][ T7590] netlink: 48 bytes leftover after parsing attributes in process `syz.1.465'. [ 144.275413][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 145.266352][ T9] usb 5-1: USB disconnect, device number 10 [ 146.450137][ T5967] Bluetooth: hci3: command 0x040f tx timeout [ 146.452392][ T5967] Bluetooth: hci2: command 0x040f tx timeout [ 146.454615][ T5960] Bluetooth: hci1: command 0x040f tx timeout [ 147.240680][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 147.364823][ T6721] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 147.404194][ T7631] siw: device registration error -23 [ 147.546630][ T6721] usb 8-1: Using ep0 maxpacket: 8 [ 147.550036][ T6721] usb 8-1: config 0 has no interfaces? [ 147.551798][ T6721] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 147.554350][ T6721] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.559401][ T6721] usb 8-1: config 0 descriptor?? [ 147.783187][ T6721] usb 8-1: USB disconnect, device number 8 [ 148.425310][ T7649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.483'. [ 148.578187][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.485'. [ 149.346224][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 149.866528][ T7673] siw: device registration error -23 [ 150.531100][ T6015] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 150.661313][ T7686] siw: device registration error -23 [ 150.722361][ T6015] usb 6-1: Using ep0 maxpacket: 32 [ 150.771588][ T6015] usb 6-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 150.779293][ T6015] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.798296][ T6015] usb 6-1: config 0 descriptor?? [ 151.093242][ T7692] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 151.095289][ T7692] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 151.099424][ T7692] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 151.538864][ T5994] usb 6-1: USB disconnect, device number 7 [ 151.630411][ T57] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 151.791883][ T57] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 151.794970][ T57] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 151.797908][ T57] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 151.800432][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.842038][ T57] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.844390][ T57] usb 8-1: invalid MIDI out EP 0 [ 151.865306][ T57] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 151.884600][ T6064] udevd[6064]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.052560][ T7700] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.059714][ T7700] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.061924][ T7700] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.531411][ T45] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.640286][ T45] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.707366][ T5964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.712046][ T5964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.714836][ T5964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.717973][ T5964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.720231][ T5964] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.722412][ T5964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.736592][ T45] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.764631][ T7724] lo speed is unknown, defaulting to 1000 [ 152.861264][ T45] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.914934][ T7724] chnl_net:caif_netlink_parms(): no params data found [ 152.961282][ T7724] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.963331][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.965704][ T7724] bridge_slave_0: entered allmulticast mode [ 152.968734][ T7724] bridge_slave_0: entered promiscuous mode [ 152.972408][ T7724] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.974424][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.976495][ T7724] bridge_slave_1: entered allmulticast mode [ 152.979175][ T7724] bridge_slave_1: entered promiscuous mode [ 153.005329][ T7724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.018565][ T7724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.073262][ T7724] team0: Port device team_slave_0 added [ 153.076371][ T45] bridge_slave_1: left allmulticast mode [ 153.078387][ T45] bridge_slave_1: left promiscuous mode [ 153.081753][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.089487][ T45] bridge_slave_0: left allmulticast mode [ 153.091149][ T45] bridge_slave_0: left promiscuous mode [ 153.092852][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.355217][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.366367][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.374967][ T45] bond0 (unregistering): Released all slaves [ 153.388538][ T7724] team0: Port device team_slave_1 added [ 153.404052][ T9] usb 8-1: USB disconnect, device number 9 [ 153.450804][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.453245][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.464624][ T7724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.472213][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.474316][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.482512][ T7724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.557477][ T7724] hsr_slave_0: entered promiscuous mode [ 153.560139][ T7724] hsr_slave_1: entered promiscuous mode [ 153.562537][ T7724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.565361][ T7724] Cannot create hsr debugfs directory [ 153.640194][ T6721] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 153.681333][ T7724] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 153.686713][ T7724] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 153.702086][ T45] hsr_slave_0: left promiscuous mode [ 153.704301][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.706729][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.713598][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.717158][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.720388][ T45] batman_adv: batadv0: Removing interface: macvtap0 [ 153.746733][ T45] veth1_macvtap: left promiscuous mode [ 153.750695][ T45] veth1_vlan: left promiscuous mode [ 153.752493][ T45] veth0_vlan: left promiscuous mode [ 153.826050][ T6721] usb 5-1: unable to get BOS descriptor or descriptor too short [ 153.828815][ T6721] usb 5-1: not running at top speed; connect to a high speed hub [ 153.832030][ T6721] usb 5-1: config 0 has no interfaces? [ 153.836914][ T6721] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 153.839496][ T6721] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 153.842026][ T6721] usb 5-1: Product: syz [ 153.843357][ T6721] usb 5-1: Manufacturer: syz [ 153.844795][ T6721] usb 5-1: SerialNumber: syz [ 153.847904][ T6721] usb 5-1: config 0 descriptor?? [ 154.098267][ T6721] usb 5-1: USB disconnect, device number 11 [ 154.250688][ T5960] Bluetooth: hci3: command 0x040f tx timeout [ 154.250701][ T5964] Bluetooth: hci2: command 0x040f tx timeout [ 154.305363][ T45] team0 (unregistering): Port device team_slave_1 removed [ 154.374802][ T45] team0 (unregistering): Port device team_slave_0 removed [ 154.842246][ T7724] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 154.855124][ T7724] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 154.896735][ T7724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.907197][ T7724] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.913142][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.915184][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.921864][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.923936][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.944425][ T5964] Bluetooth: hci1: command tx timeout [ 155.048440][ T7724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.163932][ T7724] veth0_vlan: entered promiscuous mode [ 155.174871][ T7724] veth1_vlan: entered promiscuous mode [ 155.186160][ T7724] veth0_macvtap: entered promiscuous mode [ 155.189204][ T7724] veth1_macvtap: entered promiscuous mode [ 155.197632][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.200590][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.205288][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.208118][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.211465][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.218182][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.220992][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.224734][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.227582][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.231137][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.239428][ T7724] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.241889][ T7724] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.244762][ T7724] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.247168][ T7724] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.308539][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.310875][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.335065][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.337176][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.155162][ T7857] siw: device registration error -23 [ 157.157833][ T5964] Bluetooth: hci1: command tx timeout [ 157.766827][ T63] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 157.774262][ T7864] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 157.778476][ T7864] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 157.780337][ T7864] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 157.782906][ T7864] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 157.785714][ T7864] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 157.938026][ T63] usb 8-1: Using ep0 maxpacket: 32 [ 157.941812][ T63] usb 8-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 157.944427][ T63] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.947537][ T63] usb 8-1: config 0 descriptor?? [ 158.745856][ T63] usb 8-1: USB disconnect, device number 10 [ 159.894323][ T5964] Bluetooth: hci2: command 0x040f tx timeout [ 159.979819][ T5964] Bluetooth: hci1: command 0x0419 tx timeout [ 159.979840][ T5960] Bluetooth: hci3: command 0x040f tx timeout [ 159.987708][ T7896] siw: device registration error -23 [ 160.179521][ T7898] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 160.181692][ T7898] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.184045][ T7898] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.432238][ T7919] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.434486][ T7919] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.436216][ T7919] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.722523][ T5994] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 161.895786][ T5994] usb 6-1: unable to get BOS descriptor or descriptor too short [ 161.898737][ T5994] usb 6-1: not running at top speed; connect to a high speed hub [ 161.902344][ T5994] usb 6-1: config 0 has no interfaces? [ 161.905545][ T5994] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 161.908056][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 161.910322][ T5994] usb 6-1: Product: syz [ 161.911479][ T5994] usb 6-1: Manufacturer: syz [ 161.912828][ T5994] usb 6-1: SerialNumber: syz [ 161.915429][ T5994] usb 6-1: config 0 descriptor?? [ 163.069309][ T834] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 163.241737][ T834] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.244989][ T834] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.247908][ T834] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.250545][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.257605][ T7947] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 163.266820][ T834] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.486446][ T5964] Bluetooth: hci2: command 0x040f tx timeout [ 163.661922][ T5964] Bluetooth: hci1: command 0x0419 tx timeout [ 163.663673][ T5964] Bluetooth: hci3: command 0x040f tx timeout [ 163.871102][ T834] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 164.042136][ T834] usb 8-1: Using ep0 maxpacket: 8 [ 164.048417][ T834] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 164.051309][ T834] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.054007][ T834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.349168][ T6721] usb 5-1: USB disconnect, device number 12 [ 164.417408][ T834] usb 6-1: USB disconnect, device number 8 [ 164.531802][ T7969] netlink: 48 bytes leftover after parsing attributes in process `syz.4.556'. [ 164.538157][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.556'. [ 164.657075][ T7969] hsr_slave_1 (unregistering): left promiscuous mode [ 165.175382][ T834] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 165.347586][ T834] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 165.350750][ T834] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 165.353710][ T834] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 165.414283][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.421237][ T834] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.424784][ T834] usb 5-1: invalid MIDI out EP 0 [ 165.441723][ T834] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 165.460048][ T6064] udevd[6064]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.881064][ T5964] Bluetooth: hci1: command 0x0419 tx timeout [ 166.281415][ T6721] usb 5-1: USB disconnect, device number 13 [ 166.661367][ T1451] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 166.834083][ T1451] usb 6-1: Using ep0 maxpacket: 32 [ 166.839381][ T1451] usb 6-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 166.842074][ T1451] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.852300][ T9] usb 8-1: USB disconnect, device number 11 [ 166.872138][ T1451] usb 6-1: config 0 descriptor?? [ 167.151601][ T6721] usb 6-1: USB disconnect, device number 9 [ 167.646853][ T8012] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.649907][ T8012] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.654066][ T8012] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.665574][ T30] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 168.864827][ T30] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.868556][ T30] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 168.873831][ T30] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 168.876892][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.898456][ T8037] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.911408][ T30] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 168.950422][ T834] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 169.143959][ T834] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.147343][ T834] usb 9-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 169.150887][ T834] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.154185][ T834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.176272][ T834] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.179516][ T834] usb 9-1: invalid MIDI out EP 0 [ 169.205416][ T834] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 169.227741][ T6064] udevd[6064]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 169.815127][ T5960] Bluetooth: hci1: command 0x0419 tx timeout [ 169.815306][ T5967] Bluetooth: hci2: command 0x040f tx timeout [ 169.825766][ T5967] Bluetooth: hci3: command 0x040f tx timeout [ 170.788253][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.574'. [ 171.111424][ T63] usb 6-1: USB disconnect, device number 10 [ 171.403437][ T5994] usb 9-1: USB disconnect, device number 2 [ 171.846325][ T30] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 172.006630][ T30] usb 8-1: Using ep0 maxpacket: 32 [ 172.011381][ T30] usb 8-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 172.014287][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.026164][ T30] usb 8-1: config 0 descriptor?? [ 172.038797][ T5967] Bluetooth: hci1: command 0x0419 tx timeout [ 172.470378][ T63] usb 8-1: USB disconnect, device number 12 [ 172.626204][ T8131] siw: device registration error -23 [ 173.084838][ T8159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.588'. [ 173.131094][ T8160] netlink: 48 bytes leftover after parsing attributes in process `syz.4.586'. [ 173.174652][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'. [ 173.485784][ T8171] fuse: Bad value for 'fd' [ 173.553582][ T8166] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.555496][ T8166] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 173.559789][ T8166] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.364198][ T8184] siw: device registration error -23 [ 175.043276][ T8206] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.045173][ T8206] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 175.046941][ T8206] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 175.551124][ T8212] No control pipe specified [ 176.904316][ T8229] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.907476][ T8229] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.910733][ T8229] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 177.801818][ T8248] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 177.803784][ T8248] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 177.806263][ T8248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 178.280370][ T39] audit: type=1804 audit(1739687982.095:2): pid=8264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.618" name="/newroot/146/file0" dev="tmpfs" ino=778 res=1 errno=0 [ 178.294792][ T39] audit: type=1804 audit(1739687982.114:3): pid=8264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.618" name="/newroot/146/file0" dev="tmpfs" ino=778 res=1 errno=0 [ 179.062451][ T30] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 179.244207][ T30] usb 8-1: Using ep0 maxpacket: 32 [ 179.248747][ T30] usb 8-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 179.251389][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.258791][ T30] usb 8-1: config 0 descriptor?? [ 179.754554][ T1451] usb 8-1: USB disconnect, device number 13 [ 179.972496][ T8282] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 179.975026][ T8282] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 179.977542][ T8282] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 180.692061][ T8305] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 180.695675][ T8305] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 180.697585][ T8305] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 181.393447][ T30] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 181.566807][ T30] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 181.570624][ T30] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 181.573898][ T30] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 181.577088][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.970827][ T8310] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.985492][ T30] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.281969][ T1451] usb 6-1: USB disconnect, device number 11 [ 182.823711][ T8344] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 182.825942][ T8344] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 182.827928][ T8344] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 184.685728][ T30] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 184.858844][ T30] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 184.862420][ T30] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 184.865474][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 184.869149][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.874639][ T8392] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 184.879790][ T30] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.963730][ T5967] Bluetooth: hci2: command 0x040f tx timeout [ 185.038652][ T5960] Bluetooth: hci3: command 0x040f tx timeout [ 185.038666][ T5967] Bluetooth: hci1: command 0x0419 tx timeout [ 185.124091][ T63] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 185.170419][ T5837] usb 5-1: USB disconnect, device number 14 [ 185.295251][ T63] usb 9-1: Using ep0 maxpacket: 32 [ 185.301576][ T63] usb 9-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 185.304083][ T63] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.308488][ T63] usb 9-1: config 0 descriptor?? [ 185.908494][ T63] usb 9-1: USB disconnect, device number 3 [ 187.047441][ T8424] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.050857][ T8424] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.052775][ T8424] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.766491][ T8436] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.768413][ T8436] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.771559][ T8436] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 189.304067][ T6015] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 189.341696][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 189.494065][ T6015] usb 5-1: unable to get BOS descriptor or descriptor too short [ 189.496774][ T6015] usb 5-1: not running at top speed; connect to a high speed hub [ 189.500956][ T6015] usb 5-1: config 0 has no interfaces? [ 189.505601][ T6015] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 189.508329][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 189.510993][ T6015] usb 5-1: Product: syz [ 189.512261][ T6015] usb 5-1: Manufacturer: syz [ 189.514029][ T6015] usb 5-1: SerialNumber: syz [ 189.518043][ T6015] usb 5-1: config 0 descriptor?? [ 190.084485][ T5960] Bluetooth: hci2: command 0x040f tx timeout [ 190.533620][ T6015] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 190.675941][ T8473] siw: device registration error -23 [ 190.704613][ T6015] usb 8-1: Using ep0 maxpacket: 32 [ 190.709888][ T6015] usb 8-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 190.712983][ T6015] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.718888][ T6015] usb 8-1: config 0 descriptor?? [ 190.939772][ T5960] Bluetooth: hci1: command 0x0419 tx timeout [ 190.939886][ T5967] Bluetooth: hci3: command 0x040f tx timeout [ 190.986393][ T1451] usb 8-1: USB disconnect, device number 14 [ 191.914312][ T63] usb 5-1: USB disconnect, device number 15 [ 192.030274][ T6721] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 192.211869][ T6721] usb 6-1: Using ep0 maxpacket: 32 [ 192.216420][ T6721] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.219301][ T6721] usb 6-1: config 0 has no interfaces? [ 192.223401][ T6721] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 192.225941][ T6721] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 192.228274][ T6721] usb 6-1: Product: syz [ 192.229499][ T6721] usb 6-1: Manufacturer: syz [ 192.230860][ T6721] usb 6-1: SerialNumber: syz [ 192.233279][ T6721] usb 6-1: config 0 descriptor?? [ 192.460187][ T6721] usb 6-1: USB disconnect, device number 12 [ 193.783437][ T6721] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 193.943775][ T6721] usb 8-1: Using ep0 maxpacket: 8 [ 193.947888][ T6721] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.950805][ T6721] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 193.953827][ T6721] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 193.957454][ T6721] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 193.960035][ T6721] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.964846][ T6721] usb 8-1: config 0 descriptor?? [ 194.190456][ T6015] usb 8-1: USB disconnect, device number 15 [ 195.729175][ T834] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 195.889484][ T834] usb 5-1: Using ep0 maxpacket: 32 [ 195.892462][ T834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.895238][ T834] usb 5-1: config 0 has no interfaces? [ 195.899279][ T834] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 195.901891][ T834] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 195.904149][ T834] usb 5-1: Product: syz [ 195.905376][ T834] usb 5-1: Manufacturer: syz [ 195.906682][ T834] usb 5-1: SerialNumber: syz [ 195.909040][ T834] usb 5-1: config 0 descriptor?? [ 196.031278][ T8539] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 196.033276][ T8539] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 196.035049][ T8539] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 196.137589][ T6015] usb 5-1: USB disconnect, device number 16 [ 198.124674][ T5967] Bluetooth: hci2: command 0x040f tx timeout [ 198.220061][ T5967] Bluetooth: hci1: command 0x0419 tx timeout [ 198.220192][ T5960] Bluetooth: hci3: command 0x040f tx timeout [ 198.628550][ T1451] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 198.786635][ T1451] usb 9-1: Using ep0 maxpacket: 32 [ 198.789468][ T1451] usb 9-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 198.792014][ T1451] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.795374][ T1451] usb 9-1: config 0 descriptor?? [ 199.053052][ T1451] usb 9-1: USB disconnect, device number 4 [ 199.188570][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 199.898055][ T1451] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 200.069647][ T1451] usb 9-1: Using ep0 maxpacket: 32 [ 200.076765][ T1451] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.079876][ T1451] usb 9-1: config 0 has no interfaces? [ 200.102853][ T1451] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 200.106415][ T1451] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 200.109629][ T1451] usb 9-1: Product: syz [ 200.111293][ T1451] usb 9-1: Manufacturer: syz [ 200.122952][ T1451] usb 9-1: SerialNumber: syz [ 200.126478][ T1451] usb 9-1: config 0 descriptor?? [ 200.357162][ T5837] usb 9-1: USB disconnect, device number 5 [ 200.417175][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 202.673881][ T8639] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.675857][ T8639] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.677712][ T8639] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.785112][ T5837] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 202.977584][ T5837] usb 6-1: Using ep0 maxpacket: 8 [ 202.982944][ T5837] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.985897][ T5837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.989094][ T5837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.992084][ T5837] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.995995][ T5837] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.998940][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.239395][ T5837] usb 6-1: usb_control_msg returned -32 [ 203.241415][ T5837] usbtmc 6-1:16.0: can't read capabilities [ 203.598912][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.600834][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.438036][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.734'. [ 204.669639][ T8668] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.671901][ T8668] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 204.688648][ T8668] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.715612][ T8668] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 205.705463][ T5837] usb 6-1: USB disconnect, device number 13 [ 205.917881][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 206.173936][ T5837] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 206.345111][ T5837] usb 8-1: Using ep0 maxpacket: 32 [ 206.365900][ T5837] usb 8-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 206.368693][ T5837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.372460][ T5837] usb 8-1: config 0 descriptor?? [ 206.772551][ T5960] Bluetooth: hci2: command 0x040f tx timeout [ 206.821104][ T5837] usb 8-1: USB disconnect, device number 16 [ 206.847368][ T5960] Bluetooth: hci3: command 0x040f tx timeout [ 206.932880][ T5960] Bluetooth: hci1: command 0x0419 tx timeout [ 207.549456][ T5960] ================================================================== [ 207.551746][ T5960] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0x16a/0x170 [ 207.554041][ T5960] Read of size 8 at addr ffff888025733188 by task kworker/u33:3/5960 [ 207.557840][ T5960] [ 207.558563][ T5960] CPU: 3 UID: 0 PID: 5960 Comm: kworker/u33:3 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 207.558581][ T5960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 207.558591][ T5960] Workqueue: hci1 hci_rx_work [ 207.558610][ T5960] Call Trace: [ 207.558649][ T5960] [ 207.558654][ T5960] dump_stack_lvl+0x116/0x1f0 [ 207.558671][ T5960] print_report+0xc3/0x620 [ 207.558691][ T5960] ? __virt_addr_valid+0x5e/0x590 [ 207.558705][ T5960] ? __phys_addr+0xc6/0x150 [ 207.558717][ T5960] kasan_report+0xd9/0x110 [ 207.558734][ T5960] ? l2cap_sock_ready_cb+0x16a/0x170 [ 207.558750][ T5960] ? l2cap_sock_ready_cb+0x16a/0x170 [ 207.558768][ T5960] l2cap_sock_ready_cb+0x16a/0x170 [ 207.558786][ T5960] l2cap_le_start+0x1ec/0xe40 [ 207.558798][ T5960] ? __pfx___mutex_lock+0x10/0x10 [ 207.558812][ T5960] ? __pfx_l2cap_le_start+0x10/0x10 [ 207.558825][ T5960] ? do_raw_read_unlock+0x44/0xe0 [ 207.558838][ T5960] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 207.558851][ T5960] ? __l2cap_chan_add+0x3db/0xa20 [ 207.558865][ T5960] l2cap_connect_cfm+0x99f/0xf10 [ 207.558880][ T5960] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 207.558894][ T5960] ? hci_cb_lookup+0x319/0x4e0 [ 207.558909][ T5960] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 207.558923][ T5960] le_conn_complete_evt+0x168d/0x1da0 [ 207.558937][ T5960] ? __pfx_lock_release+0x10/0x10 [ 207.558953][ T5960] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 207.558969][ T5960] hci_le_conn_complete_evt+0x23c/0x370 [ 207.558984][ T5960] hci_le_meta_evt+0x2e2/0x5d0 [ 207.558999][ T5960] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 207.559013][ T5960] hci_event_packet+0x666/0x1180 [ 207.559026][ T5960] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 207.559041][ T5960] ? __pfx_hci_event_packet+0x10/0x10 [ 207.559054][ T5960] ? mark_held_locks+0x9f/0xe0 [ 207.559068][ T5960] ? kcov_remote_start+0x3cf/0x6e0 [ 207.559083][ T5960] ? lockdep_hardirqs_on+0x7c/0x110 [ 207.559095][ T5960] hci_rx_work+0x2c5/0x16b0 [ 207.559110][ T5960] ? process_one_work+0x921/0x1ba0 [ 207.559125][ T5960] process_one_work+0x9c5/0x1ba0 [ 207.559139][ T5960] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 207.559154][ T5960] ? __pfx_process_one_work+0x10/0x10 [ 207.559169][ T5960] ? assign_work+0x1a0/0x250 [ 207.559182][ T5960] worker_thread+0x6c8/0xf00 [ 207.559197][ T5960] ? __pfx_worker_thread+0x10/0x10 [ 207.559210][ T5960] kthread+0x3af/0x750 [ 207.559222][ T5960] ? __pfx_kthread+0x10/0x10 [ 207.559234][ T5960] ? lock_acquire+0x2f/0xb0 [ 207.559281][ T5960] ? __pfx_kthread+0x10/0x10 [ 207.559294][ T5960] ret_from_fork+0x45/0x80 [ 207.559310][ T5960] ? __pfx_kthread+0x10/0x10 [ 207.559322][ T5960] ret_from_fork_asm+0x1a/0x30 [ 207.559338][ T5960] [ 207.559342][ T5960] [ 207.633112][ T5960] Allocated by task 8708: [ 207.634318][ T5960] kasan_save_stack+0x33/0x60 [ 207.635638][ T5960] kasan_save_track+0x14/0x30 [ 207.636960][ T5960] __kasan_kmalloc+0xaa/0xb0 [ 207.638250][ T5960] __kmalloc_noprof+0x21c/0x510 [ 207.639622][ T5960] sk_prot_alloc+0x1a8/0x2a0 [ 207.640926][ T5960] sk_alloc+0x36/0xb90 [ 207.642084][ T5960] bt_sock_alloc+0x3b/0x3a0 [ 207.643353][ T5960] l2cap_sock_alloc.constprop.0+0x33/0x1d0 [ 207.644974][ T5960] l2cap_sock_create+0x123/0x1f0 [ 207.646353][ T5960] bt_sock_create+0x182/0x350 [ 207.647669][ T5960] __sock_create+0x335/0x8d0 [ 207.648993][ T5960] __sys_socket+0x14f/0x260 [ 207.650260][ T5960] __ia32_sys_socket+0x72/0xb0 [ 207.651593][ T5960] __do_fast_syscall_32+0x73/0x120 [ 207.653019][ T5960] do_fast_syscall_32+0x32/0x80 [ 207.654376][ T5960] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.656126][ T5960] [ 207.656814][ T5960] Freed by task 8707: [ 207.657929][ T5960] kasan_save_stack+0x33/0x60 [ 207.659240][ T5960] kasan_save_track+0x14/0x30 [ 207.660570][ T5960] kasan_save_free_info+0x3b/0x60 [ 207.661988][ T5960] __kasan_slab_free+0x51/0x70 [ 207.663334][ T5960] kfree+0x2c4/0x4d0 [ 207.664437][ T5960] __sk_destruct+0x5eb/0x720 [ 207.665737][ T5960] sk_destruct+0xc2/0xf0 [ 207.666919][ T5960] __sk_free+0xf4/0x3e0 [ 207.668078][ T5960] sk_free+0x6a/0x90 [ 207.669197][ T5960] l2cap_sock_kill+0x171/0x2d0 [ 207.670549][ T5960] l2cap_sock_release+0x189/0x210 [ 207.671957][ T5960] __sock_release+0xb0/0x270 [ 207.673262][ T5960] sock_close+0x1c/0x30 [ 207.674434][ T5960] __fput+0x3ff/0xb70 [ 207.675563][ T5960] task_work_run+0x14e/0x250 [ 207.676869][ T5960] syscall_exit_to_user_mode+0x27b/0x2a0 [ 207.678420][ T5960] __do_fast_syscall_32+0x80/0x120 [ 207.679853][ T5960] do_fast_syscall_32+0x32/0x80 [ 207.681258][ T5960] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.683040][ T5960] [ 207.683753][ T5960] The buggy address belongs to the object at ffff888025733000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 207.683753][ T5960] which belongs to the cache kmalloc-2k of size 2048 [ 207.687888][ T5960] The buggy address is located 392 bytes inside of [ 207.687888][ T5960] freed 2048-byte region [ffff888025733000, ffff888025733800) [ 207.691574][ T5960] [ 207.692267][ T5960] The buggy address belongs to the physical page: [ 207.694063][ T5960] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25730 [ 207.696665][ T5960] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 207.699001][ T5960] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 207.701187][ T5960] page_type: f5(slab) [ 207.702307][ T5960] raw: 00fff00000000040 ffff88801b042f00 ffffea000099aa00 dead000000000002 [ 207.704683][ T5960] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 207.707075][ T5960] head: 00fff00000000040 ffff88801b042f00 ffffea000099aa00 dead000000000002 [ 207.709514][ T5960] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 207.711918][ T5960] head: 00fff00000000003 ffffea000095cc01 ffffffffffffffff 0000000000000000 [ 207.714348][ T5960] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 207.716754][ T5960] page dumped because: kasan: bad access detected [ 207.718460][ T5960] page_owner tracks the page as allocated [ 207.720059][ T5960] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5955, tgid 5955 (syz-executor), ts 45947916297, free_ts 45855348477 [ 207.725887][ T5960] post_alloc_hook+0x181/0x1b0 [ 207.727262][ T5960] get_page_from_freelist+0xfce/0x2f80 [ 207.728838][ T5960] __alloc_frozen_pages_noprof+0x221/0x2470 [ 207.730516][ T5960] alloc_pages_mpol+0x1fc/0x540 [ 207.731909][ T5960] new_slab+0x23d/0x330 [ 207.733124][ T5960] ___slab_alloc+0xc5d/0x1720 [ 207.734463][ T5960] __slab_alloc.constprop.0+0x56/0xb0 [ 207.735981][ T5960] __kmalloc_node_track_caller_noprof+0x2f1/0x510 [ 207.737811][ T5960] kmalloc_reserve+0xef/0x2c0 [ 207.739151][ T5960] pskb_expand_head+0x243/0x1240 [ 207.740573][ T5960] netlink_trim+0x22d/0x310 [ 207.741872][ T5960] netlink_broadcast_filtered+0xc7/0xef0 [ 207.743414][ T5960] nlmsg_notify+0x9e/0x220 [ 207.744678][ T5960] rtnetlink_event+0x177/0x1f0 [ 207.746103][ T5960] notifier_call_chain+0xb7/0x410 [ 207.747503][ T5960] call_netdevice_notifiers_info+0xbe/0x140 [ 207.749211][ T5960] page last free pid 5955 tgid 5955 stack trace: [ 207.750955][ T5960] free_frozen_pages+0x6db/0xfb0 [ 207.752366][ T5960] qlist_free_all+0x4e/0x120 [ 207.753715][ T5960] kasan_quarantine_reduce+0x195/0x1e0 [ 207.755249][ T5960] __kasan_slab_alloc+0x69/0x90 [ 207.756650][ T5960] kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 207.758315][ T5960] __alloc_skb+0x2b1/0x380 [ 207.759596][ T5960] netlink_alloc_large_skb+0x69/0x130 [ 207.761124][ T5960] netlink_sendmsg+0x689/0xd70 [ 207.762492][ T5960] __sys_sendto+0x488/0x4f0 [ 207.763796][ T5960] __do_compat_sys_socketcall+0x5e2/0x700 [ 207.765395][ T5960] __do_fast_syscall_32+0x73/0x120 [ 207.766857][ T5960] do_fast_syscall_32+0x32/0x80 [ 207.768247][ T5960] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.770074][ T5960] [ 207.770764][ T5960] Memory state around the buggy address: [ 207.772340][ T5960] ffff888025733080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 207.774721][ T5960] ffff888025733100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 207.776915][ T5960] >ffff888025733180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 207.779117][ T5960] ^ [ 207.780344][ T5960] ffff888025733200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 207.782557][ T5960] ffff888025733280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 207.784782][ T5960] ================================================================== [ 207.787422][ T5960] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 207.789469][ T5960] CPU: 3 UID: 0 PID: 5960 Comm: kworker/u33:3 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 207.792472][ T5960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 207.795490][ T5960] Workqueue: hci1 hci_rx_work [ 207.796853][ T5960] Call Trace: [ 207.797827][ T5960] [ 207.798671][ T5960] dump_stack_lvl+0x3d/0x1f0 [ 207.800023][ T5960] panic+0x71d/0x800 [ 207.801159][ T5960] ? __pfx_panic+0x10/0x10 [ 207.802458][ T5960] ? irqentry_exit+0x3b/0x90 [ 207.803881][ T5960] ? lockdep_hardirqs_on+0x7c/0x110 [ 207.805355][ T5960] ? preempt_schedule_thunk+0x1a/0x30 [ 207.806884][ T5960] ? preempt_schedule_common+0x44/0xc0 [ 207.808436][ T5960] check_panic_on_warn+0xab/0xb0 [ 207.809904][ T5960] end_report+0x117/0x180 [ 207.811153][ T5960] kasan_report+0xe9/0x110 [ 207.812469][ T5960] ? l2cap_sock_ready_cb+0x16a/0x170 [ 207.814010][ T5960] ? l2cap_sock_ready_cb+0x16a/0x170 [ 207.815511][ T5960] l2cap_sock_ready_cb+0x16a/0x170 [ 207.816980][ T5960] l2cap_le_start+0x1ec/0xe40 [ 207.818331][ T5960] ? __pfx___mutex_lock+0x10/0x10 [ 207.819794][ T5960] ? __pfx_l2cap_le_start+0x10/0x10 [ 207.821314][ T5960] ? do_raw_read_unlock+0x44/0xe0 [ 207.822827][ T5960] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 207.824588][ T5960] ? __l2cap_chan_add+0x3db/0xa20 [ 207.826035][ T5960] l2cap_connect_cfm+0x99f/0xf10 [ 207.827447][ T5960] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 207.829005][ T5960] ? hci_cb_lookup+0x319/0x4e0 [ 207.830409][ T5960] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 207.831898][ T5960] le_conn_complete_evt+0x168d/0x1da0 [ 207.833447][ T5960] ? __pfx_lock_release+0x10/0x10 [ 207.834879][ T5960] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 207.836475][ T5960] hci_le_conn_complete_evt+0x23c/0x370 [ 207.838044][ T5960] hci_le_meta_evt+0x2e2/0x5d0 [ 207.839444][ T5960] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 207.841177][ T5960] hci_event_packet+0x666/0x1180 [ 207.842656][ T5960] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 207.844165][ T5960] ? __pfx_hci_event_packet+0x10/0x10 [ 207.845702][ T5960] ? mark_held_locks+0x9f/0xe0 [ 207.847081][ T5960] ? kcov_remote_start+0x3cf/0x6e0 [ 207.848603][ T5960] ? lockdep_hardirqs_on+0x7c/0x110 [ 207.850116][ T5960] hci_rx_work+0x2c5/0x16b0 [ 207.851439][ T5960] ? process_one_work+0x921/0x1ba0 [ 207.852980][ T5960] process_one_work+0x9c5/0x1ba0 [ 207.854402][ T5960] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 207.855992][ T5960] ? __pfx_process_one_work+0x10/0x10 [ 207.857536][ T5960] ? assign_work+0x1a0/0x250 [ 207.858865][ T5960] worker_thread+0x6c8/0xf00 [ 207.860262][ T5960] ? __pfx_worker_thread+0x10/0x10 [ 207.861845][ T5960] kthread+0x3af/0x750 [ 207.863069][ T5960] ? __pfx_kthread+0x10/0x10 [ 207.864387][ T5960] ? lock_acquire+0x2f/0xb0 [ 207.865716][ T5960] ? __pfx_kthread+0x10/0x10 [ 207.867036][ T5960] ret_from_fork+0x45/0x80 [ 207.868324][ T5960] ? __pfx_kthread+0x10/0x10 [ 207.869723][ T5960] ret_from_fork_asm+0x1a/0x30 [ 207.871099][ T5960] [ 207.872590][ T5960] Kernel Offset: disabled [ 207.873831][ T5960] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:40:19 Registers: info registers vcpu 0 CPU#0 RAX=00000000009dabd5 RBX=0000000000000000 RCX=ffffffff8b54f469 RDX=0000000000000000 RSI=ffffffff8b6ced20 RDI=ffffffff8bd34400 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed1005686f85 R10=ffff88802b437c2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90626710 R15=0000000000000000 RIP=ffffffff8b55084f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f72d1684 CR3=000000006c3c4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000dfcc51 RBX=0000000000000001 RCX=ffffffff8b54f469 RDX=0000000000000000 RSI=ffffffff8b6ced20 RDI=ffffffff8bd34400 RBP=ffffed1003ad1910 RSP=ffffc9000047fe08 R8 =0000000000000001 R9 =ffffed10056a6f85 R10=ffff88802b537c2b R11=0000000000000000 R12=0000000000000001 R13=ffff88801d68c880 R14=ffffffff90626710 R15=0000000000000000 RIP=ffffffff8b55084f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002ed14ffc CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009c00000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff82030192 RDX=ffff88801bf6a440 RSI=ffffffff820301ab RDI=0000000000000005 RBP=800000005b9f1025 RSP=ffffc90003e8f830 R8 =0000000000000005 R9 =00000000ff000000 R10=00000000ffffffff R11=0000000000000003 R12=0000000000000000 R13=ffffc90003e8f9a0 R14=ffff88801cf3f5d0 R15=dffffc0000000000 RIP=ffffffff81b9d6c1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f46e40 CR3=000000004c85a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73dcff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff853e46e5 RDI=ffffffff9ab6be20 RBP=ffffffff9ab6bde0 RSP=ffffc900043c7110 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3735323038386552 R12=0000000000000000 R13=0000000000000005 R14=ffffffff9ab6bde0 R15=0000000000000000 RIP=ffffffff853e470f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000566ec4c0 CR3=000000006bf06000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009c00000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000