last executing test programs: 1m38.318676033s ago: executing program 1 (id=965): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e23, @private=0xa010100}, {0x2, 0x1, @multicast2}, {0x2, 0x4e21, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2000000000, 0xf298}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540040001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000100004000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1m38.245276185s ago: executing program 1 (id=967): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000040)='syzkaller\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) close_range(r1, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) close(r6) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xe) (async) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xe) 1m37.955346166s ago: executing program 1 (id=968): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@float={0x2, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x0]}}, &(0x7f0000000300)=""/133, 0x27, 0x85, 0x1, 0x1, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x14c8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x31}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) 1m37.745836486s ago: executing program 1 (id=969): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$P9_RGETLOCK(r2, 0x0, 0xffffff6a) pipe2(&(0x7f0000000240), 0x0) timer_create(0x2, &(0x7f0000000100)={0x0, 0x10, 0x4, @thr={0x0, &(0x7f0000000080)="479652820e9585331bb6efcca6b383164814b1b467b43400ca96f2b01e96fa7244a0388f3d47fa1a55db2fcf57270ac800d3"}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) read$FUSE(r3, 0x0, 0x0) capset(0x0, 0x0) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) r5 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xc0000000}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x3, 0xb, 0x8, 0x2, 0x7, 0x8}}, {0x4}}]}]}, 0x68}}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) r6 = syz_usb_connect$uac1(0x0, 0x82, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003000000206b1d01014000010203010902700003e03f80090904000000010100000a240107000c02010209240305070305030209040100000102000009040101010102000008240305050707250101088a000904020000010200000904020101010200000905820908000f040107250180010e00"/130], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000180)=0x80007, 0x4) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='afs\x00', 0x103001, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendto$packet(r7, &(0x7f00000000c0)="07197fbd", 0x4, 0x404c0d0, &(0x7f0000000000)={0x11, 0x8100, r8, 0x1, 0x6, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m34.993395269s ago: executing program 1 (id=978): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000009030000000000000000000081"], 0x0, 0x4e, 0x0, 0x1, 0x0, 0x10000, @value}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x1e, 0x1, 0x4, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x2219e566e760a58b, 0x2, 0x0, 0x700}, 0x10}, 0x1, 0x7}, 0x0) r4 = openat$full(0xffffff9c, &(0x7f0000000080), 0x40900, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f0000000180)=0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff038}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2000, 0x0) syz_emit_ethernet(0x1b6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) openat$rtc(0xffffff9c, 0x0, 0xa4383, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x7, 0x9, 0x31363553, 0x0, 0xa, [{0x2, 0x5}, {0x6, 0x8007f36}, {0x200, 0x70}, {0x3, 0xb}, {0x1ff, 0x100}, {0x6, 0x589}, {0x89, 0x7}, {0x10001, 0x8}], 0x10, 0x8, 0x4, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$nmem0(0xffffff9c, &(0x7f0000000300), 0x1412c0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 1m34.905672049s ago: executing program 1 (id=979): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_clone(0x4021400, &(0x7f0000000040)="20ed8a442c7b092fd2704c3c7378c8d9c43d0df245fffe10f34f1f23d4454aaaaa054bcdadd8bf7595b1a7d7a1a687db", 0x30, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000001880)="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") prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) ppoll(&(0x7f0000000440)=[{r0, 0xa000}, {r0, 0x450}], 0x2, &(0x7f0000000480), &(0x7f00000007c0)={[0xb, 0x7ff]}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_io_uring_setup(0x893, &(0x7f00000003c0)={0x0, 0xaee1, 0x0, 0x0, 0x1a3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000700)={{0x0, 0x8, 0x9, 0xfffffffffffffff1, 0x6, 0x7ff, 0xbb, 0x7, 0x2, 0x3, 0xffff, 0x1, 0x8, 0x3, 0x9}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000880)={r7, r8, "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", "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"}) r9 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x20a83, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd=r3, 0x3, {0x0, r3}, 0xfffffff8, 0x0, 0x0, {0x0, r11, r0}}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) io_uring_enter(r4, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000800), 0x220100, 0x0) 1m34.853537707s ago: executing program 32 (id=979): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_clone(0x4021400, &(0x7f0000000040)="20ed8a442c7b092fd2704c3c7378c8d9c43d0df245fffe10f34f1f23d4454aaaaa054bcdadd8bf7595b1a7d7a1a687db", 0x30, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000001880)="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") prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) ppoll(&(0x7f0000000440)=[{r0, 0xa000}, {r0, 0x450}], 0x2, &(0x7f0000000480), &(0x7f00000007c0)={[0xb, 0x7ff]}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_io_uring_setup(0x893, &(0x7f00000003c0)={0x0, 0xaee1, 0x0, 0x0, 0x1a3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000700)={{0x0, 0x8, 0x9, 0xfffffffffffffff1, 0x6, 0x7ff, 0xbb, 0x7, 0x2, 0x3, 0xffff, 0x1, 0x8, 0x3, 0x9}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000880)={r7, r8, "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", "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"}) r9 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x20a83, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd=r3, 0x3, {0x0, r3}, 0xfffffff8, 0x0, 0x0, {0x0, r11, r0}}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) io_uring_enter(r4, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000800), 0x220100, 0x0) 44.3550831s ago: executing program 4 (id=1014): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000080)=0xffffe, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r5, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0xec4a}], 0x1, 0x2020, 0x0) setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000140), 0x4) r6 = syz_clone(0x100b300, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r6, 0x3, &(0x7f0000000080)=[&(0x7f0000bdf000/0x1000)=nil, &(0x7f0000bdd000/0x3000)=nil, &(0x7f0000bdd000/0x1000)=nil], 0x0, &(0x7f0000000200), 0x4) sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x80, 0x10, 0x1, 0x2, {{0x28, 0x4, 0x0, 0x4, 0xa0, 0x66, 0x0, 0x3, 0x2f, 0x0, @multicast2, @multicast2, {[@end, @timestamp_addr={0x44, 0x1c, 0xae, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast}, {@remote, 0x74}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x89, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xb}, {@broadcast}, {@remote, 0x10}, {@multicast2, 0x2}]}, @timestamp={0x44, 0x2c, 0x72, 0x0, 0x5, [0x400, 0x3, 0x9, 0x6, 0x80000001, 0x5, 0x4, 0x7, 0x5, 0x80]}, @noop, @noop, @timestamp_addr={0x44, 0x14, 0x37, 0x1, 0x9, [{@broadcast, 0x7}, {@private=0xa010101, 0x200}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newtclass={0x5c, 0x28, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xc}, {0xb, 0xb}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_prio={0x9}]}, 0x5c}}, 0x0) 40.713930494s ago: executing program 2 (id=812): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/4110, 0x100e}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) fallocate(r4, 0x3, 0x1, 0x40551b1e) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r2, 0xb03, 0x3}, 0x14}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) 33.901887529s ago: executing program 4 (id=1014): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000080)=0xffffe, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r5, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0xec4a}], 0x1, 0x2020, 0x0) setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000140), 0x4) r6 = syz_clone(0x100b300, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r6, 0x3, &(0x7f0000000080)=[&(0x7f0000bdf000/0x1000)=nil, &(0x7f0000bdd000/0x3000)=nil, &(0x7f0000bdd000/0x1000)=nil], 0x0, &(0x7f0000000200), 0x4) sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x80, 0x10, 0x1, 0x2, {{0x28, 0x4, 0x0, 0x4, 0xa0, 0x66, 0x0, 0x3, 0x2f, 0x0, @multicast2, @multicast2, {[@end, @timestamp_addr={0x44, 0x1c, 0xae, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast}, {@remote, 0x74}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x89, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xb}, {@broadcast}, {@remote, 0x10}, {@multicast2, 0x2}]}, @timestamp={0x44, 0x2c, 0x72, 0x0, 0x5, [0x400, 0x3, 0x9, 0x6, 0x80000001, 0x5, 0x4, 0x7, 0x5, 0x80]}, @noop, @noop, @timestamp_addr={0x44, 0x14, 0x37, 0x1, 0x9, [{@broadcast, 0x7}, {@private=0xa010101, 0x200}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newtclass={0x5c, 0x28, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xc}, {0xb, 0xb}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_prio={0x9}]}, 0x5c}}, 0x0) 32.309554968s ago: executing program 2 (id=812): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/4110, 0x100e}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) fallocate(r4, 0x3, 0x1, 0x40551b1e) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r2, 0xb03, 0x3}, 0x14}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) 26.252940058s ago: executing program 4 (id=1014): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000080)=0xffffe, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r5, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0xec4a}], 0x1, 0x2020, 0x0) setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000140), 0x4) r6 = syz_clone(0x100b300, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r6, 0x3, &(0x7f0000000080)=[&(0x7f0000bdf000/0x1000)=nil, &(0x7f0000bdd000/0x3000)=nil, &(0x7f0000bdd000/0x1000)=nil], 0x0, &(0x7f0000000200), 0x4) sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x80, 0x10, 0x1, 0x2, {{0x28, 0x4, 0x0, 0x4, 0xa0, 0x66, 0x0, 0x3, 0x2f, 0x0, @multicast2, @multicast2, {[@end, @timestamp_addr={0x44, 0x1c, 0xae, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast}, {@remote, 0x74}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x89, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xb}, {@broadcast}, {@remote, 0x10}, {@multicast2, 0x2}]}, @timestamp={0x44, 0x2c, 0x72, 0x0, 0x5, [0x400, 0x3, 0x9, 0x6, 0x80000001, 0x5, 0x4, 0x7, 0x5, 0x80]}, @noop, @noop, @timestamp_addr={0x44, 0x14, 0x37, 0x1, 0x9, [{@broadcast, 0x7}, {@private=0xa010101, 0x200}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newtclass={0x5c, 0x28, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xc}, {0xb, 0xb}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_prio={0x9}]}, 0x5c}}, 0x0) 24.994893568s ago: executing program 2 (id=812): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/4110, 0x100e}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) fallocate(r4, 0x3, 0x1, 0x40551b1e) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r2, 0xb03, 0x3}, 0x14}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) 10.317422786s ago: executing program 4 (id=1014): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000080)=0xffffe, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r5, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0xec4a}], 0x1, 0x2020, 0x0) setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000140), 0x4) r6 = syz_clone(0x100b300, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r6, 0x3, &(0x7f0000000080)=[&(0x7f0000bdf000/0x1000)=nil, &(0x7f0000bdd000/0x3000)=nil, &(0x7f0000bdd000/0x1000)=nil], 0x0, &(0x7f0000000200), 0x4) sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x80, 0x10, 0x1, 0x2, {{0x28, 0x4, 0x0, 0x4, 0xa0, 0x66, 0x0, 0x3, 0x2f, 0x0, @multicast2, @multicast2, {[@end, @timestamp_addr={0x44, 0x1c, 0xae, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast}, {@remote, 0x74}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x89, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xb}, {@broadcast}, {@remote, 0x10}, {@multicast2, 0x2}]}, @timestamp={0x44, 0x2c, 0x72, 0x0, 0x5, [0x400, 0x3, 0x9, 0x6, 0x80000001, 0x5, 0x4, 0x7, 0x5, 0x80]}, @noop, @noop, @timestamp_addr={0x44, 0x14, 0x37, 0x1, 0x9, [{@broadcast, 0x7}, {@private=0xa010101, 0x200}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newtclass={0x5c, 0x28, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xc}, {0xb, 0xb}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_prio={0x9}]}, 0x5c}}, 0x0) 10.309919648s ago: executing program 2 (id=812): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/4110, 0x100e}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) fallocate(r4, 0x3, 0x1, 0x40551b1e) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r2, 0xb03, 0x3}, 0x14}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) 10.309726283s ago: executing program 4 (id=1014): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000080)=0xffffe, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r5, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0xec4a}], 0x1, 0x2020, 0x0) setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000140), 0x4) r6 = syz_clone(0x100b300, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r6, 0x3, &(0x7f0000000080)=[&(0x7f0000bdf000/0x1000)=nil, &(0x7f0000bdd000/0x3000)=nil, &(0x7f0000bdd000/0x1000)=nil], 0x0, &(0x7f0000000200), 0x4) sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x80, 0x10, 0x1, 0x2, {{0x28, 0x4, 0x0, 0x4, 0xa0, 0x66, 0x0, 0x3, 0x2f, 0x0, @multicast2, @multicast2, {[@end, @timestamp_addr={0x44, 0x1c, 0xae, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast}, {@remote, 0x74}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x89, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xb}, {@broadcast}, {@remote, 0x10}, {@multicast2, 0x2}]}, @timestamp={0x44, 0x2c, 0x72, 0x0, 0x5, [0x400, 0x3, 0x9, 0x6, 0x80000001, 0x5, 0x4, 0x7, 0x5, 0x80]}, @noop, @noop, @timestamp_addr={0x44, 0x14, 0x37, 0x1, 0x9, [{@broadcast, 0x7}, {@private=0xa010101, 0x200}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newtclass={0x5c, 0x28, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xc}, {0xb, 0xb}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_prio={0x9}]}, 0x5c}}, 0x0) 9.073048951s ago: executing program 2 (id=812): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/4110, 0x100e}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) fallocate(r4, 0x3, 0x1, 0x40551b1e) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r2, 0xb03, 0x3}, 0x14}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) 5.914975343s ago: executing program 3 (id=1273): ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x541b, 0x0) iopl(0x3) r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) io_uring_setup(0x1582, &(0x7f0000000140)={0x0, 0xccc2, 0x40, 0x0, 0x365}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@dellink={0x28, 0x11, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa200, 0x30044}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x40080c0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x589a, @dev={0xfe, 0x80, '\x00', 0x24}, 0x5}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '}/:', 0x20, 0x9, 0x20, [0x66, 0x38, 0x61, 0x0, 0x32, 0x39, 0x65, 0x63]}, 0x37, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$packet(0x11, 0x2, 0x300) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000040)=""/151, &(0x7f0000000100)=0xfffffffffffffcc5) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 5.2634097s ago: executing program 4 (id=1014): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000080)=0xffffe, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r5, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0xec4a}], 0x1, 0x2020, 0x0) setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000140), 0x4) r6 = syz_clone(0x100b300, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r6, 0x3, &(0x7f0000000080)=[&(0x7f0000bdf000/0x1000)=nil, &(0x7f0000bdd000/0x3000)=nil, &(0x7f0000bdd000/0x1000)=nil], 0x0, &(0x7f0000000200), 0x4) sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x80, 0x10, 0x1, 0x2, {{0x28, 0x4, 0x0, 0x4, 0xa0, 0x66, 0x0, 0x3, 0x2f, 0x0, @multicast2, @multicast2, {[@end, @timestamp_addr={0x44, 0x1c, 0xae, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast}, {@remote, 0x74}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x89, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xb}, {@broadcast}, {@remote, 0x10}, {@multicast2, 0x2}]}, @timestamp={0x44, 0x2c, 0x72, 0x0, 0x5, [0x400, 0x3, 0x9, 0x6, 0x80000001, 0x5, 0x4, 0x7, 0x5, 0x80]}, @noop, @noop, @timestamp_addr={0x44, 0x14, 0x37, 0x1, 0x9, [{@broadcast, 0x7}, {@private=0xa010101, 0x200}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newtclass={0x5c, 0x28, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xc}, {0xb, 0xb}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_prio={0x9}]}, 0x5c}}, 0x0) 3.957559776s ago: executing program 3 (id=1277): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_TLS_RX(r8, 0x6, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0xf, 0x1, '}'}, 0x9) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.683813791s ago: executing program 0 (id=1280): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f00000000c0)='qdisc_dequeue\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) accept4$unix(r7, &(0x7f0000000140), 0x0, 0x80000) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix']) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6b, 0x5a}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x8800) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r9}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) dup(r10) 3.448740199s ago: executing program 0 (id=1281): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x18, 0x4, @thr={&(0x7f0000000080)="1e33663f8d5122f64eea7d5b70a3ad03d52c9312040d7a099519f847acb121a09ed6383a8e1b6a0821876043a7405072dbfad083e0c7550d53adb15a15a4c5f943a9c6371c70017ca9f99b4e120258db3f82d4f79b0ce357ac7802f55a724f1b56eaf9d00975d4f8383e4fbe1831a1d907680639ea7a9c0ea6533c208719790da46059b476f1c089b11c024426f0064706b62d2e8d8035844c3eae718f71210442522652933cf0b57da0d6319fa5baecefa1aecfc64e56340de399c948a674f8e67535b60c85d57f162508b319d3fec47a93b3108baf345ee863b90c82e2490a66da45ffe42c0669c3ce5aed69608840cd1bc9c100b0a869c35a", &(0x7f0000000180)="b1bc63ebb14b2162df462fc52d11c5928ca2af89fac12b4b09b032ecf3366aedce497b99418d086edf5a1344a50303b19602414080009cfb722867e102e88488dc2e51ad1e737417d8ababb186d4aa4db94edd71ddb3cfc495e4ee60c30380ab59660ca712ddb9f76bbff81c8d2a1aa4c4e051e1d53abdb9beaabe2326fd131c43510f7e5f58ed99850cebc4cd3f17a953270ff0e236b2e666182407e732a06bf42af08628c9b7eb2adb01d63925de8577a0c767c54bf3"}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x1, &(0x7f00000002c0)={{0x77359400}}, &(0x7f0000000300)) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0xe, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}}, 0x20004084) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000340)={0x79, 0x0, 0x699}) close(r3) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40044) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x3}) close(r0) 3.385215816s ago: executing program 3 (id=1282): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="93378efcd17301726272853a9fa88608996042ab60ae09f9a90efedde424f36d", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000180)=""/154, 0x9a, 0x40000122, 0x0, 0x0) 3.384973278s ago: executing program 3 (id=1283): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f0000000cc0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH\x0f\xb5U18!\x91/\xca\x00\xad\xc2\x8e\xa0\xdc\xf0\xec\x93\x88V\'\xa1\xcf\xd7\x11\xa1$]3\xbaH\x18c\x93Q\xf8\x06\t\x80\xdaK\x17j[\xef\xbc4\xf2\xbe\xecS\xb3Xp\xc9\xbb\xd7b\x87\xdd\xb5$\xdb\xcb\x83&\x18\xcfx*\x9b\xddeS0\xd1\x93\xd8\xee\xd5*LXM\xd7\x17@\x00$\n\x03\xedQk\xefm5\xe9\xfb\xca\x17jz\'\xf6\\$Z\xc6B^\\\x03\xf8\x917\xb4|c\x8c\xa52wQ\x9c\x05U(fv\xb0\xcf\xa0\x8b\x04\x0e\x1eym\x01\xbcp\xf2\xa3\x0e\xf6^\xa2\v2\xfd\x9dzOxnK\x94\xcd\xd8i\xdb\xf1(z\x80\x17!i \'\x85\xe6\xf2#\xb9M&\x04\xb0\xd4\xba^(\xb9.;\x1a\x00\xe1\xa5\xc8\x9bn\x15\xf2\x94\x81-1\xa0z<\x91\xe5\x1b\xad\'\xdd\x9cB\xc7%\xbe\xfc\xb6\x97\x87\xf5\xa3Q\xacs6sG\xc7\xdb;Z\x88\xea\xa1L\v\x02qo\xd0\xe9\x97k\x86\xd1\x9a\xfb{JE\b\x01\x95j\xf5~1\xd6\xcc\xf0L\xafJu\b\xa7\x93\xf4\xfd4\r\xe1\x12\xe1\xf7X\x0fJb\xd8f\xe3)\xe0\xf38\xb8\xe8\xa7\xf1!\xf6\x0e\xa3\xbd\x9c4\xc3\xbb\xcc\xf0z\xa1\x1f\x89\xb3\xff\xf8\x18\xb0\x04Iv\xec\xccc\x00\x17\xf0{GQ\xd1\x82b\xac\xe4G\x8fT\x83\x05gF\xe1\xd5\x82H=\x9dL\t\xb47\xc46\xcahf\x8f\x19N\xfdp5 \xce\xf6T\b\x9f\xa4\xc3\x13\xf7\x05\xc0!A4\x99\x82\x9ew\x11DK\xaa\xde\x06\x97\x06Zj\xb0A\xb8@`!\x05\x96\xd2\xe4M\xf0\xba]\x9b\xf9YOP\x9e\xbc\xd8\a\xf5+WI\xe8\x7f\xa8\xf9?/\x804;\xfd\xfdK<\xdd\x19K;\x81a`\xbf\x02\x92\xf8Q\x91\xb8F\xc7\\\x90! \xa9\xd1g\f\xf9\x1e\x8a\x86\x98\x90\xe9\x86\x9a\x00\xd2\xdc\xb3\xa9\xce\xcd\xcb\xb8`\x8a', 0x6) ftruncate(r0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000000)='\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f00000002c0)='./file2\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xf, r4, 0xfffffffffffffffc, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x3a) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r9, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=ANY=[], 0x13f0}, 0x0, 0xc04c840}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) sendfile(r5, r5, 0x0, 0x800000009) 3.329673433s ago: executing program 3 (id=1284): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x5) r1 = creat(&(0x7f0000000140)='./file0\x00', 0xa2) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r2, 0x1}, 0x8) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) pipe2$9p(&(0x7f0000000000), 0x84880) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000380)={0x7, 0x1, 0x0, "6eccdf9b2ed51e03e6cdde42e5b9b568a530b0f30894c86c95a533c225abce37"}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0800a000da0900e607009f000d090000000000003374cb00"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.203891177s ago: executing program 0 (id=1285): syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0xff, 0x0, 0x2, 0x1}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0x18, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086ddccef6a0020c19498ea77", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 3.203508325s ago: executing program 0 (id=1286): ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x541b, 0x0) iopl(0x3) r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) io_uring_setup(0x1582, &(0x7f0000000140)={0x0, 0xccc2, 0x40, 0x0, 0x365}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@dellink={0x28, 0x11, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa200, 0x30044}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x40080c0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x589a, @dev={0xfe, 0x80, '\x00', 0x24}, 0x5}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '}/:', 0x20, 0x9, 0x20, [0x66, 0x38, 0x61, 0x0, 0x32, 0x39, 0x65, 0x63]}, 0x37, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$packet(0x11, 0x2, 0x300) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000040)=""/151, &(0x7f0000000100)=0xfffffffffffffcc5) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 3.201450895s ago: executing program 3 (id=1287): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="93378efcd17301726272853a9fa88608996042ab60ae09f9a90efedde424f36d", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000000)=""/137, 0x89, 0x141, 0x0, 0x0) 3.095195099s ago: executing program 33 (id=1287): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="93378efcd17301726272853a9fa88608996042ab60ae09f9a90efedde424f36d", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000000)=""/137, 0x89, 0x141, 0x0, 0x0) 2.245615753s ago: executing program 0 (id=1289): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) (async) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x79, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES8, @ANYRES8], 0x8) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x34, r3, 0x13b, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x23}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}]}, 0x34}}, 0x2400c120) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='X'], 0x6) 2.17506106s ago: executing program 0 (id=1290): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_TLS_RX(r8, 0x6, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0xf, 0x1, '}'}, 0x9) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 0s ago: executing program 2 (id=812): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/4110, 0x100e}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) fallocate(r4, 0x3, 0x1, 0x40551b1e) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r2, 0xb03, 0x3}, 0x14}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) kernel console output (not intermixed with test programs): 195.002675][T10555] bridge_slave_1: entered promiscuous mode [ 195.036550][T10555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.042382][T10555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.076748][T10555] team0: Port device team_slave_0 added [ 195.081915][T10555] team0: Port device team_slave_1 added [ 195.119982][T10555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.122482][T10555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.133290][T10568] input: syz0 as /devices/virtual/input/input8 [ 195.134173][T10555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.141506][T10555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.143773][T10555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.152548][T10555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.251440][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1118'. [ 195.258860][T10555] hsr_slave_0: entered promiscuous mode [ 195.261381][T10555] hsr_slave_1: entered promiscuous mode [ 195.263526][T10555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.266005][T10555] Cannot create hsr debugfs directory [ 195.324446][T10570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.586402][ T8866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.691375][ T8866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.762189][ T8866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.776140][T10591] netlink: 'syz.0.1121': attribute type 1 has an invalid length. [ 195.859171][ T8866] bridge_slave_1: left allmulticast mode [ 195.861160][ T8866] bridge_slave_1: left promiscuous mode [ 195.863133][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.866942][ T8866] bridge_slave_0: left allmulticast mode [ 195.868853][ T8866] bridge_slave_0: left promiscuous mode [ 195.871236][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.014136][T10597] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1123'. [ 196.141249][ T8866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.145951][ T8866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.149758][ T8866] bond0 (unregistering): Released all slaves [ 196.254185][T10609] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1126'. [ 196.670248][T10555] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 196.674724][T10555] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 196.678959][T10555] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 196.683323][T10555] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 196.731159][T10555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.745355][T10555] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.750381][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.752797][ T8853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.762675][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.765037][ T8853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.890687][ T5946] Bluetooth: hci0: command tx timeout [ 196.941204][T10555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.963842][T10555] veth0_vlan: entered promiscuous mode [ 196.969756][T10555] veth1_vlan: entered promiscuous mode [ 196.987676][T10555] veth0_macvtap: entered promiscuous mode [ 196.994656][T10555] veth1_macvtap: entered promiscuous mode [ 197.004050][T10555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.010173][T10555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.016089][T10555] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.018870][T10555] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.021955][T10555] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.024768][T10555] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.114687][T10656] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1130'. [ 197.117714][T10656] nbd: must specify at least one socket [ 197.360617][ T834] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 197.362937][ T834] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 197.386693][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.391631][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.394810][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.397788][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.400587][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.456778][ T8853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.460842][ T8853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.498952][ T8853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.501972][ T8853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.627786][ T8866] hsr_slave_0: left promiscuous mode [ 197.630141][ T8866] hsr_slave_1: left promiscuous mode [ 197.633321][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.635776][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.638614][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.643028][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.665981][ T8866] veth1_macvtap: left promiscuous mode [ 197.667812][ T8866] veth0_macvtap: left promiscuous mode [ 197.669678][ T8866] veth1_vlan: left promiscuous mode [ 197.671833][ T8866] veth0_vlan: left promiscuous mode [ 198.317785][ T8866] team0 (unregistering): Port device team_slave_1 removed [ 198.394621][ T8866] team0 (unregistering): Port device team_slave_0 removed [ 198.461356][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1134'. [ 198.928838][T10684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.038301][T10577] chnl_net:caif_netlink_parms(): no params data found [ 199.109602][T10577] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.112138][T10577] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.114502][T10577] bridge_slave_0: entered allmulticast mode [ 199.117237][T10577] bridge_slave_0: entered promiscuous mode [ 199.122807][T10577] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.125232][T10577] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.127582][T10577] bridge_slave_1: entered allmulticast mode [ 199.130333][T10577] bridge_slave_1: entered promiscuous mode [ 199.198061][T10577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.204501][T10577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.239130][T10577] team0: Port device team_slave_0 added [ 199.249893][T10577] team0: Port device team_slave_1 added [ 199.369250][T10577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.372394][T10577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.380845][T10577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.385238][T10577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.387558][T10577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.396756][T10577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.434468][T10577] hsr_slave_0: entered promiscuous mode [ 199.436842][T10577] hsr_slave_1: entered promiscuous mode [ 199.439117][T10577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.442637][T10577] Cannot create hsr debugfs directory [ 199.521398][ T5946] Bluetooth: hci2: command tx timeout [ 199.566862][T10577] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.602359][ T8866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.633930][T10577] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.714010][T10577] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.822467][T10577] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.905715][T10577] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 199.910620][T10577] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 199.914605][T10577] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 199.918638][T10577] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 199.931533][T10577] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.933899][T10577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.936344][T10577] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.938628][T10577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.973582][T10577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.984519][ T8862] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.988142][ T8862] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.005216][T10577] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.011351][ T8882] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.014558][ T8882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.025517][ T8862] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.027910][ T8862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.144141][T10577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.278225][T10577] veth0_vlan: entered promiscuous mode [ 200.283567][T10577] veth1_vlan: entered promiscuous mode [ 200.296754][T10577] veth0_macvtap: entered promiscuous mode [ 200.300656][T10577] veth1_macvtap: entered promiscuous mode [ 200.314639][ T8866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.326715][T10577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.333472][T10577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.338944][T10577] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.342092][T10577] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.344930][T10577] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.347721][T10577] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.377207][ T8882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.379782][ T8882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.393259][ T8862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.395810][ T8862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.650759][T10733] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1144'. [ 200.708840][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.714122][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.717559][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.723932][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.726307][T10735] 9pnet: Could not find request transport: tip [ 200.729678][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.841456][T10739] chnl_net:caif_netlink_parms(): no params data found [ 200.954402][T10739] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.956859][T10739] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.959297][T10739] bridge_slave_0: entered allmulticast mode [ 200.965298][T10739] bridge_slave_0: entered promiscuous mode [ 200.969329][T10739] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.972026][T10739] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.974447][T10739] bridge_slave_1: entered allmulticast mode [ 200.977230][T10739] bridge_slave_1: entered promiscuous mode [ 201.014038][T10739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.018595][T10739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.068870][T10739] team0: Port device team_slave_0 added [ 201.076434][T10739] team0: Port device team_slave_1 added [ 201.190958][ T8866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.197652][T10739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.199999][T10739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.209351][T10739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.214271][T10739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.216536][T10739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.225120][T10739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.268064][T10739] hsr_slave_0: entered promiscuous mode [ 201.270952][T10739] hsr_slave_1: entered promiscuous mode [ 201.273251][T10739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.275783][T10739] Cannot create hsr debugfs directory [ 201.291619][ T8866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.438632][ T8866] bridge_slave_1: left allmulticast mode [ 201.441357][ T8866] bridge_slave_1: left promiscuous mode [ 201.444853][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.450329][ T8866] bridge_slave_0: left allmulticast mode [ 201.453239][ T8866] bridge_slave_0: left promiscuous mode [ 201.455987][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.460751][ T8866] bridge_slave_1: left allmulticast mode [ 201.462750][ T8866] bridge_slave_1: left promiscuous mode [ 201.464726][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.468528][ T8866] bridge_slave_0: left allmulticast mode [ 201.470857][ T8866] bridge_slave_0: left promiscuous mode [ 201.472846][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.925366][ T8866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.930052][ T8866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.934473][ T8866] bond0 (unregistering): Released all slaves [ 202.014740][ T8866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.018992][ T8866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.022993][ T8866] bond0 (unregistering): Released all slaves [ 202.590742][T10739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 202.594968][T10739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.599034][T10739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.604206][T10739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 202.662498][T10739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.673498][T10739] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.683285][ T8845] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.685695][ T8845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.698839][ T8866] hsr_slave_0: left promiscuous mode [ 202.701818][ T8866] hsr_slave_1: left promiscuous mode [ 202.704002][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.706498][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.713452][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.716137][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.725482][ T8866] hsr_slave_0: left promiscuous mode [ 202.727672][ T8866] hsr_slave_1: left promiscuous mode [ 202.729830][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.732383][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.735112][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.737581][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.785143][ T8866] veth1_macvtap: left promiscuous mode [ 202.787024][ T8866] veth0_macvtap: left promiscuous mode [ 202.788887][ T8866] veth1_vlan: left promiscuous mode [ 202.790729][ T8866] veth0_vlan: left promiscuous mode [ 202.793226][ T8866] veth1_macvtap: left promiscuous mode [ 202.795094][ T8866] veth0_macvtap: left promiscuous mode [ 202.797015][ T8866] veth1_vlan: left promiscuous mode [ 202.798800][ T8866] veth0_vlan: left promiscuous mode [ 202.810603][ T5946] Bluetooth: hci0: command tx timeout [ 203.227418][T10801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1152'. [ 203.357254][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.377580][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.391699][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.404150][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.406982][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.555888][ T8866] team0 (unregistering): Port device team_slave_1 removed [ 203.626862][ T8866] team0 (unregistering): Port device team_slave_0 removed [ 204.728195][ T8866] team0 (unregistering): Port device team_slave_1 removed [ 204.803009][ T8866] team0 (unregistering): Port device team_slave_0 removed [ 204.880636][ T5955] Bluetooth: hci0: command tx timeout [ 204.921652][T10809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1153'. [ 205.376377][ T8845] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.378769][ T8845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.450644][ T5955] Bluetooth: hci2: command tx timeout [ 205.454488][T10817] netlink: zone id is out of range [ 205.456422][T10817] netlink: del zone limit has 4 unknown bytes [ 205.574103][T10804] chnl_net:caif_netlink_parms(): no params data found [ 205.676010][T10804] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.678490][T10804] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.682108][T10804] bridge_slave_0: entered allmulticast mode [ 205.684979][T10804] bridge_slave_0: entered promiscuous mode [ 205.693722][T10804] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.696282][T10804] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.698726][T10804] bridge_slave_1: entered allmulticast mode [ 205.701638][T10804] bridge_slave_1: entered promiscuous mode [ 205.708830][T10739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.746250][T10804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.760035][T10804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.808420][T10804] team0: Port device team_slave_0 added [ 205.813386][T10804] team0: Port device team_slave_1 added [ 205.856271][T10804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.858565][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.868487][T10804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.873814][T10804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.876172][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.885308][T10804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.945345][T10804] hsr_slave_0: entered promiscuous mode [ 205.947651][T10804] hsr_slave_1: entered promiscuous mode [ 205.950184][T10804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.953541][T10804] Cannot create hsr debugfs directory [ 205.957730][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 205.992749][T10739] veth0_vlan: entered promiscuous mode [ 206.043134][T10861] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 206.064365][T10739] veth1_vlan: entered promiscuous mode [ 206.101543][T10804] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.123004][T10739] veth0_macvtap: entered promiscuous mode [ 206.127036][T10739] veth1_macvtap: entered promiscuous mode [ 206.137140][T10739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.143654][T10739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.149254][T10739] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.152455][T10739] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.155413][T10739] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.158276][T10739] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.161859][T10867] 9pnet_rdma: rdma_create_trans (10867): problem binding to privport: 13 [ 206.202794][T10804] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.222289][ T8862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.228709][ T8862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.246129][ T8845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.248952][ T8845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.313021][T10804] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.412992][T10804] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.485056][ T8866] bridge_slave_1: left allmulticast mode [ 206.487540][ T8866] bridge_slave_1: left promiscuous mode [ 206.490146][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.497732][ T8866] bridge_slave_0: left allmulticast mode [ 206.500231][ T8866] bridge_slave_0: left promiscuous mode [ 206.503327][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.508851][T10874] [U] [ 206.509939][T10874] [U] [ 206.510915][T10874] [U] [ 206.511836][T10874] [U] [ 206.514435][T10874] [U] [ 206.515372][T10874] [U] [ 206.516293][T10874] [U] [ 206.517221][T10874] [U] [ 206.518166][T10874] [U] [ 206.519096][T10874] [U] [ 206.520045][T10874] [U] [ 206.521052][T10874] [U] [ 206.522395][T10874] [U] [ 206.523379][T10874] [U] [ 206.524329][T10874] [U] [ 206.525266][T10874] [U] [ 206.526229][T10874] [U] [ 206.527175][T10874] [U] [ 206.528117][T10874] [U] [ 206.529050][T10874] [U] [ 206.530165][T10874] [U] [ 206.531184][T10874] [U] [ 206.532095][T10874] [U] [ 206.532996][T10874] [U] [ 206.535686][T10874] [U] [ 206.536740][T10874] [U] [ 206.537885][T10874] [U] [ 206.538831][T10874] [U] [ 206.539951][T10874] [U] [ 206.541067][T10874] [U] [ 206.542100][T10874] [U] [ 206.543128][T10874] [U] [ 206.545438][T10874] [U] [ 206.546420][T10874] [U] [ 206.547349][T10874] [U] [ 206.548274][T10874] [U] [ 206.549170][T10874] [U] [ 206.550063][T10874] [U] [ 206.551062][T10874] [U] [ 206.552012][T10874] [U] [ 206.553885][T10874] [U] [ 206.555001][T10874] [U] [ 206.556116][T10874] [U] [ 206.557115][T10874] [U] [ 206.558209][T10874] [U] [ 206.559207][T10874] [U] [ 206.560247][T10874] [U] [ 206.561356][T10874] [U] [ 206.562285][T10876] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 206.564582][T10874] [U] [ 206.566553][T10876] overlay: filesystem on ./bus not supported as upperdir [ 206.567007][T10874] [U] [ 206.570645][T10874] [U] [ 206.571850][T10874] [U] [ 206.573264][T10874] [U] [ 206.573580][T10876] overlay: filesystem on ./bus not supported as upperdir [ 206.574465][T10874] [U] [ 206.578014][T10874] [U] [ 206.579223][T10874] [U] [ 206.580667][T10874] [U] [ 206.581944][T10874] [U] [ 206.583165][T10874] [U] [ 206.584406][T10874] [U] [ 206.585727][T10874] [U] [ 206.585953][T10876] overlay: filesystem on ./bus not supported as upperdir [ 206.586928][T10874] [U] [ 206.590617][T10874] [U] [ 206.591847][T10874] [U] [ 206.594067][T10876] overlay: filesystem on ./bus not supported as upperdir [ 206.594968][T10874] [U] [ 206.597488][T10874] [U] [ 206.598691][T10874] [U] [ 206.599935][T10874] [U] [ 206.601674][T10876] overlay: filesystem on ./bus not supported as upperdir [ 206.602505][T10874] [U] [ 206.605256][T10874] [U] [ 206.606503][T10874] [U] [ 206.607746][T10874] [U] [ 206.609183][T10874] [U] [ 206.610472][T10874] [U] [ 206.611715][T10874] [U] [ 206.612844][T10874] [U] [ 206.631440][T10876] [U] [ 206.857614][ T8866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.862547][ T8866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.866408][ T8866] bond0 (unregistering): Released all slaves [ 206.906714][T10804] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.912800][T10804] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.916776][T10804] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.925489][T10804] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.000072][T10804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.010146][T10804] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.015264][ T8882] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.017647][ T8882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.025208][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.027565][ T8853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.150389][T10804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.183038][ T8866] hsr_slave_0: left promiscuous mode [ 207.185224][ T8866] hsr_slave_1: left promiscuous mode [ 207.187371][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.189808][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.192786][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.195205][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.220253][ T8866] veth1_macvtap: left promiscuous mode [ 207.222746][ T8866] veth0_macvtap: left promiscuous mode [ 207.224678][ T8866] veth1_vlan: left promiscuous mode [ 207.226471][ T8866] veth0_vlan: left promiscuous mode [ 207.530827][ T5955] Bluetooth: hci2: command tx timeout [ 207.859675][ T8866] team0 (unregistering): Port device team_slave_1 removed [ 207.929588][ T8866] team0 (unregistering): Port device team_slave_0 removed [ 208.223754][T10886] libceph: resolve '400' (ret=-3): failed [ 208.232029][ T40] audit: type=1326 audit(1747585272.448:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.3.1172" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x0 [ 208.326640][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.348830][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.355076][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.365480][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.373702][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.404463][T10899] xt_CT: No such helper "syz1" [ 208.514891][T10896] syzkaller1: entered promiscuous mode [ 208.517496][T10896] syzkaller1: entered allmulticast mode [ 208.649719][T10804] veth0_vlan: entered promiscuous mode [ 208.656763][T10804] veth1_vlan: entered promiscuous mode [ 208.665952][T10894] chnl_net:caif_netlink_parms(): no params data found [ 208.768020][T10804] veth0_macvtap: entered promiscuous mode [ 208.792492][T10804] veth1_macvtap: entered promiscuous mode [ 208.799003][T10894] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.801745][T10894] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.804148][T10894] bridge_slave_0: entered allmulticast mode [ 208.806820][T10894] bridge_slave_0: entered promiscuous mode [ 208.812230][T10894] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.814579][T10894] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.816928][T10894] bridge_slave_1: entered allmulticast mode [ 208.820019][T10894] bridge_slave_1: entered promiscuous mode [ 208.840118][T10804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.858693][T10894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.863574][T10894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.903337][T10894] team0: Port device team_slave_0 added [ 208.906530][T10804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.913534][T10894] team0: Port device team_slave_1 added [ 208.958215][T10804] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.961202][T10804] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.964032][T10804] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.966808][T10804] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.971653][T10894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.973937][T10894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.982202][T10894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.986765][T10894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.989063][T10894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.998576][T10894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.057222][T10894] hsr_slave_0: entered promiscuous mode [ 209.059534][T10894] hsr_slave_1: entered promiscuous mode [ 209.063196][T10894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.065651][T10894] Cannot create hsr debugfs directory [ 209.142084][ T8882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.145750][ T8882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.253664][T10894] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.265136][ T8882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.268492][ T8882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.605665][T10894] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.745252][T10894] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.864198][T10894] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.035636][ T8866] bridge_slave_1: left allmulticast mode [ 210.037603][ T8866] bridge_slave_1: left promiscuous mode [ 210.039530][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.047666][ T8866] bridge_slave_0: left allmulticast mode [ 210.049567][ T8866] bridge_slave_0: left promiscuous mode [ 210.053751][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.346143][ T8866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.355417][ T8866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.360955][ T8866] bond0 (unregistering): Released all slaves [ 210.400813][ T5946] Bluetooth: hci0: command tx timeout [ 210.440746][T10894] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.446880][T10894] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.452157][T10894] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.457436][T10894] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.526170][T10894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.537255][T10894] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.546334][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.548854][ T8853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.554928][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.557783][ T8853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.679075][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.687317][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.692462][ T8866] hsr_slave_0: left promiscuous mode [ 210.695049][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.695266][ T8866] hsr_slave_1: left promiscuous mode [ 210.699474][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.699746][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.704665][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.707653][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.713679][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.716170][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.746497][ T8866] veth1_macvtap: left promiscuous mode [ 210.748324][ T8866] veth0_macvtap: left promiscuous mode [ 210.750073][ T8866] veth1_vlan: left promiscuous mode [ 210.752030][ T8866] veth0_vlan: left promiscuous mode [ 210.931425][T10958] Bluetooth: MGMT ver 1.23 [ 211.438088][ T8866] team0 (unregistering): Port device team_slave_1 removed [ 211.511006][ T8866] team0 (unregistering): Port device team_slave_0 removed [ 211.615897][T10960] fuse: Bad value for 'user_id' [ 211.618122][T10960] fuse: Bad value for 'user_id' [ 211.722867][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1187'. [ 212.188171][T10894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.282448][T10894] veth0_vlan: entered promiscuous mode [ 212.288665][T10894] veth1_vlan: entered promiscuous mode [ 212.312344][T10953] chnl_net:caif_netlink_parms(): no params data found [ 212.362713][T10894] veth0_macvtap: entered promiscuous mode [ 212.385482][T10894] veth1_macvtap: entered promiscuous mode [ 212.425143][T10953] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.427510][T10953] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.429926][T10953] bridge_slave_0: entered allmulticast mode [ 212.432805][T10953] bridge_slave_0: entered promiscuous mode [ 212.437368][T10953] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.439794][T10953] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.443395][T10953] bridge_slave_1: entered allmulticast mode [ 212.446423][T10953] bridge_slave_1: entered promiscuous mode [ 212.480594][ T5955] Bluetooth: hci0: command tx timeout [ 212.493318][T10953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.499890][T10953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.519462][T10894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.543335][T10894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.549929][T10953] team0: Port device team_slave_0 added [ 212.557599][T10953] team0: Port device team_slave_1 added [ 212.568122][T10894] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.572255][T10894] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.574998][T10894] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.577759][T10894] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.613352][T10953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.616086][T10953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.626068][T10953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.633765][T10953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.636337][T10953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.646226][T10953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.688727][T10953] hsr_slave_0: entered promiscuous mode [ 212.691189][T10953] hsr_slave_1: entered promiscuous mode [ 212.693290][T10953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.695902][T10953] Cannot create hsr debugfs directory [ 212.720802][ T5955] Bluetooth: hci2: command tx timeout [ 212.790312][ T8866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.864169][ T8835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.866648][ T8835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.889769][ T8866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.924940][ T8845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.927565][ T8845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.991224][ T8866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.069777][ T8866] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.223043][ T8866] bridge_slave_1: left allmulticast mode [ 213.224943][ T8866] bridge_slave_1: left promiscuous mode [ 213.226802][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.231772][ T8866] bridge_slave_0: left allmulticast mode [ 213.233638][ T8866] bridge_slave_0: left promiscuous mode [ 213.235468][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.620725][ T8866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.625168][ T8866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.629222][ T8866] bond0 (unregistering): Released all slaves [ 213.784858][T10996] syz.0.1192 (10996) used greatest stack depth: 19896 bytes left [ 213.968663][ T8866] hsr_slave_0: left promiscuous mode [ 213.975455][ T8866] hsr_slave_1: left promiscuous mode [ 213.977610][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.980039][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.984311][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.986863][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.043841][ T8866] veth1_macvtap: left promiscuous mode [ 214.045679][ T8866] veth0_macvtap: left promiscuous mode [ 214.047524][ T8866] veth1_vlan: left promiscuous mode [ 214.049289][ T8866] veth0_vlan: left promiscuous mode [ 214.693761][ T8866] team0 (unregistering): Port device team_slave_1 removed [ 214.787476][ T8866] team0 (unregistering): Port device team_slave_0 removed [ 214.810690][ T5955] Bluetooth: hci2: command tx timeout [ 214.893873][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.909674][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.914787][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.919487][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.930360][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.564598][T10953] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 215.569255][T11059] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.576587][T11062] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.582445][T10953] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 215.584710][T11062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1203'. [ 215.595499][T10953] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 215.651322][T10953] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 215.708268][T11040] chnl_net:caif_netlink_parms(): no params data found [ 215.821222][T11040] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.823730][T11040] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.826159][T11040] bridge_slave_0: entered allmulticast mode [ 215.829113][T11040] bridge_slave_0: entered promiscuous mode [ 215.833829][T11040] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.836360][T11040] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.838833][T11040] bridge_slave_1: entered allmulticast mode [ 215.842262][T11040] bridge_slave_1: entered promiscuous mode [ 215.880604][T11040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.885345][T11040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.890645][T10953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.930874][T11040] team0: Port device team_slave_0 added [ 215.938457][T10953] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.944124][T11040] team0: Port device team_slave_1 added [ 215.955973][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.958500][ T8853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.980907][ T8835] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.983417][ T8835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.002408][T11040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.005323][T11040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.016328][T11040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.022832][T11040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.025681][T11040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.036165][T11040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.106348][T11040] hsr_slave_0: entered promiscuous mode [ 216.109877][T11040] hsr_slave_1: entered promiscuous mode [ 216.114006][T11040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.116622][T11040] Cannot create hsr debugfs directory [ 216.242158][ T8866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.317660][ T8866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.351465][T10953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.371147][ T8866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.436132][ T8866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.534309][T10953] veth0_vlan: entered promiscuous mode [ 216.546286][T10953] veth1_vlan: entered promiscuous mode [ 216.555799][ T8866] bridge_slave_1: left allmulticast mode [ 216.557747][ T8866] bridge_slave_1: left promiscuous mode [ 216.559829][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.563932][ T8866] bridge_slave_0: left allmulticast mode [ 216.565877][ T8866] bridge_slave_0: left promiscuous mode [ 216.569002][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.914034][ T5955] Bluetooth: hci2: command tx timeout [ 216.963205][ T5955] Bluetooth: hci0: command tx timeout [ 216.985497][ T8866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.990252][ T8866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.994907][ T8866] bond0 (unregistering): Released all slaves [ 217.079233][T11103] input: syz1 as /devices/virtual/input/input10 [ 217.096745][T10953] veth0_macvtap: entered promiscuous mode [ 217.112319][T10953] veth1_macvtap: entered promiscuous mode [ 217.130062][T10953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.184459][T10953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.188619][T10953] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.193114][T10953] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.195810][T10953] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.198403][T11103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1207'. [ 217.198608][T10953] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.420069][ T8866] hsr_slave_0: left promiscuous mode [ 217.423881][ T8866] hsr_slave_1: left promiscuous mode [ 217.425893][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.428248][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.431667][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.434557][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.457151][ T8866] veth1_macvtap: left promiscuous mode [ 217.459111][ T8866] veth0_macvtap: left promiscuous mode [ 217.461327][ T8866] veth1_vlan: left promiscuous mode [ 217.463086][ T8866] veth0_vlan: left promiscuous mode [ 217.786569][ T40] audit: type=1800 audit(1747585281.998:1938): pid=11126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1212" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 218.197140][ T8866] team0 (unregistering): Port device team_slave_1 removed [ 218.274605][ T8866] team0 (unregistering): Port device team_slave_0 removed [ 218.883275][T11133] syz.3.1214 (11133): drop_caches: 2 [ 218.941745][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.945171][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.960584][ T5955] Bluetooth: hci2: command tx timeout [ 218.977165][T11040] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.995728][T11040] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.012269][T11040] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.029575][T11040] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.035929][ T8862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.039920][ T8862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.050557][ T5955] Bluetooth: hci0: command tx timeout [ 219.055286][T11145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1216'. [ 219.075358][T11040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.086293][T11040] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.129641][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.132058][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.173485][ T8882] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.176630][ T8882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.327200][T11040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.355158][T11040] veth0_vlan: entered promiscuous mode [ 219.361357][T11040] veth1_vlan: entered promiscuous mode [ 219.384048][T11040] veth0_macvtap: entered promiscuous mode [ 219.389460][T11040] veth1_macvtap: entered promiscuous mode [ 219.400934][T11040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.407321][T11040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.412327][T11040] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.415541][T11040] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.418690][T11040] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.422589][T11040] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.502980][ T8845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.505066][ T8882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.509271][ T8882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.510579][ T8845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.822470][T11167] input: syz1 as /devices/virtual/input/input11 [ 220.136123][ T1134] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.141897][ T34] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 220.292751][ T34] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.296859][ T34] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 220.301686][ T34] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 220.304575][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 220.307073][ T34] usb 8-1: SerialNumber: syz [ 220.743593][ T1134] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.829922][ T1134] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.900609][ T1134] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.997277][ T1134] bridge_slave_1: left allmulticast mode [ 220.999645][ T1134] bridge_slave_1: left promiscuous mode [ 221.002666][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.008515][ T1134] bridge_slave_0: left allmulticast mode [ 221.011145][ T1134] bridge_slave_0: left promiscuous mode [ 221.013563][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.148495][T11174] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 221.150740][T11174] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 221.159053][T11174] vhci_hcd vhci_hcd.0: Device attached [ 221.162708][T11176] vhci_hcd: cannot find a urb of seqnum 129 max seqnum 0 [ 221.169257][ T8866] vhci_hcd: stop threads [ 221.171622][ T8866] vhci_hcd: release socket [ 221.173138][ T8866] vhci_hcd: disconnect device [ 221.202822][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.204635][T11174] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 221.206079][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.207166][T11174] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 221.207223][T11174] vhci_hcd vhci_hcd.0: Device attached [ 221.210255][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.214691][T11180] vhci_hcd: connection closed [ 221.220922][ T8866] vhci_hcd: stop threads [ 221.221081][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.222514][ T8866] vhci_hcd: release socket [ 221.222524][ T8866] vhci_hcd: disconnect device [ 221.224902][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.318296][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.322459][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.328205][ T1134] bond0 (unregistering): Released all slaves [ 221.488095][T11178] chnl_net:caif_netlink_parms(): no params data found [ 221.594675][T11178] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.597098][T11178] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.599467][T11178] bridge_slave_0: entered allmulticast mode [ 221.604374][T11178] bridge_slave_0: entered promiscuous mode [ 221.607550][T11178] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.609985][T11178] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.613163][T11178] bridge_slave_1: entered allmulticast mode [ 221.616188][T11178] bridge_slave_1: entered promiscuous mode [ 221.661363][ T1134] hsr_slave_0: left promiscuous mode [ 221.663439][ T1134] hsr_slave_1: left promiscuous mode [ 221.665518][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.668283][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.671733][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.674175][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.695506][ T1134] veth1_macvtap: left promiscuous mode [ 221.697419][ T1134] veth0_macvtap: left promiscuous mode [ 221.699376][ T1134] veth1_vlan: left promiscuous mode [ 221.704288][ T1134] veth0_vlan: left promiscuous mode [ 222.355443][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 222.433581][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 222.852971][ T34] usb 8-1: USB disconnect, device number 15 [ 223.017808][T11178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.027233][T11178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.103366][T11178] team0: Port device team_slave_0 added [ 223.107061][T11178] team0: Port device team_slave_1 added [ 223.137936][T11178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.140291][T11178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.148744][T11178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.153222][T11178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.155490][T11178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.164185][T11178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.225096][T11178] hsr_slave_0: entered promiscuous mode [ 223.227741][T11178] hsr_slave_1: entered promiscuous mode [ 223.229927][T11178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.238058][T11178] Cannot create hsr debugfs directory [ 223.280544][ T5946] Bluetooth: hci0: command tx timeout [ 223.340375][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.346699][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.349787][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.352995][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.357820][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.458098][ T1134] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.525986][T11207] chnl_net:caif_netlink_parms(): no params data found [ 223.555058][ T1134] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.665006][ T1134] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.693617][T11207] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.696057][T11207] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.698433][T11207] bridge_slave_0: entered allmulticast mode [ 223.701417][T11207] bridge_slave_0: entered promiscuous mode [ 223.727029][T11207] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.729354][T11207] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.733832][T11207] bridge_slave_1: entered allmulticast mode [ 223.736581][T11207] bridge_slave_1: entered promiscuous mode [ 223.763788][ T1134] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.788688][T11207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.804542][T11207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.883332][T11207] team0: Port device team_slave_0 added [ 223.887010][T11207] team0: Port device team_slave_1 added [ 223.937145][T11178] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 223.943418][T11207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.945734][T11207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.955704][T11207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.960153][T11207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.962702][T11207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.971366][T11207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.982915][T11178] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 223.989783][T11178] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.012073][T11178] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.016412][ T1134] bridge_slave_1: left allmulticast mode [ 224.018347][ T1134] bridge_slave_1: left promiscuous mode [ 224.020301][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.024473][ T1134] bridge_slave_0: left allmulticast mode [ 224.026403][ T1134] bridge_slave_0: left promiscuous mode [ 224.028297][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.178146][T11239] input: syz1 as /devices/virtual/input/input12 [ 224.324831][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.329201][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.333128][ T1134] bond0 (unregistering): Released all slaves [ 224.433450][T11207] hsr_slave_0: entered promiscuous mode [ 224.435827][T11207] hsr_slave_1: entered promiscuous mode [ 224.438429][T11207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.441094][T11207] Cannot create hsr debugfs directory [ 224.642208][ T1134] hsr_slave_0: left promiscuous mode [ 224.644785][ T1134] hsr_slave_1: left promiscuous mode [ 224.646857][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.649306][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.652444][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.654941][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.678112][ T1134] veth1_macvtap: left promiscuous mode [ 224.680015][ T1134] veth0_macvtap: left promiscuous mode [ 224.682281][ T1134] veth1_vlan: left promiscuous mode [ 224.684076][ T1134] veth0_vlan: left promiscuous mode [ 225.370918][ T5955] Bluetooth: hci0: command tx timeout [ 225.381611][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 225.453291][ T5955] Bluetooth: hci2: command tx timeout [ 225.467848][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 225.716882][ T40] audit: type=1326 audit(1747585289.928:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.3.1233" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 225.724690][ T40] audit: type=1326 audit(1747585289.938:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.3.1233" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 225.731761][ T40] audit: type=1326 audit(1747585289.938:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.3.1233" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 225.738767][ T40] audit: type=1326 audit(1747585289.938:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.3.1233" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 225.748869][ T40] audit: type=1326 audit(1747585289.938:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.3.1233" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 225.756008][ T40] audit: type=1326 audit(1747585289.948:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.3.1233" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 225.762990][ T40] audit: type=1326 audit(1747585289.948:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.3.1233" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 225.769806][ T40] audit: type=1326 audit(1747585289.948:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.3.1233" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70fe5a7 code=0x7ffc0000 [ 225.776912][ T40] audit: type=1326 audit(1747585289.948:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.3.1233" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 225.784083][ T40] audit: type=1326 audit(1747585289.948:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.3.1233" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70fe5a7 code=0x7ffc0000 [ 226.171437][T11178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.183141][T11178] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.188144][ T8845] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.190578][ T8845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.202790][ T8866] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.205172][ T8866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.251395][ T5984] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 226.343505][T11178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.348053][T11283] netlink: 'syz.3.1238': attribute type 10 has an invalid length. [ 226.410541][ T5984] usb 5-1: Using ep0 maxpacket: 32 [ 226.414142][ T5984] usb 5-1: unable to get BOS descriptor or descriptor too short [ 226.418419][ T5984] usb 5-1: config index 0 descriptor too short (expected 34347, got 43) [ 226.423656][ T5984] usb 5-1: config 31 has too many interfaces: 196, using maximum allowed: 32 [ 226.426545][ T5984] usb 5-1: config 31 has an invalid descriptor of length 0, skipping remainder of the config [ 226.429809][ T5984] usb 5-1: config 31 has 1 interface, different from the descriptor's value: 196 [ 226.433541][ T5984] usb 5-1: config 31 has no interface number 0 [ 226.435855][ T5984] usb 5-1: config 31 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 226.439839][ T5984] usb 5-1: config 31 interface 81 altsetting 3 bulk endpoint 0x83 has invalid maxpacket 150 [ 226.443589][ T5984] usb 5-1: config 31 interface 81 has no altsetting 0 [ 226.451556][ T5984] usb 5-1: string descriptor 0 read error: -22 [ 226.453657][ T5984] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 226.456628][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.461321][T11270] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 226.468247][ T5984] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:31.81/input/input13 [ 226.505801][ C2] usbtouchscreen 5-1:31.81: usbtouch_irq - usb_submit_urb failed with result: -1 [ 226.564772][T11178] veth0_vlan: entered promiscuous mode [ 226.570207][T11178] veth1_vlan: entered promiscuous mode [ 226.584296][T11178] veth0_macvtap: entered promiscuous mode [ 226.588158][T11178] veth1_macvtap: entered promiscuous mode [ 226.599429][T11178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.606104][T11178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.612008][T11178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.614930][T11178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.617761][T11178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.622600][T11178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.695372][T11207] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 226.699649][T11207] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 226.704929][T11207] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.710862][T11207] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 226.710970][ T8882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.716768][ T8882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.742639][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.745297][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.762363][ C0] usbtouchscreen 5-1:31.81: usbtouch_irq - usb_submit_urb failed with result: -1 [ 226.777077][T11207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.802835][T11207] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.819895][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.822301][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.828590][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.831076][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.957762][T11207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.985237][T11207] veth0_vlan: entered promiscuous mode [ 226.987920][T11159] usb 5-1: USB disconnect, device number 12 [ 226.991662][T11207] veth1_vlan: entered promiscuous mode [ 227.007477][T11207] veth0_macvtap: entered promiscuous mode [ 227.013155][T11207] veth1_macvtap: entered promiscuous mode [ 227.023061][T11207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.030032][T11207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.037416][T11207] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.040355][T11207] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.043579][T11207] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.046480][T11207] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.094770][ T8882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.097485][ T8882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.110665][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.113142][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.526721][T11326] gretap0: entered promiscuous mode [ 227.530184][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 227.788505][ T8866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.830708][T11159] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 228.000728][T11159] usb 5-1: Using ep0 maxpacket: 8 [ 228.008142][T11159] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 228.011257][T11159] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.014604][T11159] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.018036][T11159] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.021606][T11159] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.026076][T11159] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 228.029019][T11159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.243063][T11159] usb 5-1: usb_control_msg returned -71 [ 228.244946][T11159] usbtmc 5-1:16.0: can't read capabilities [ 228.261765][T11159] usb 5-1: USB disconnect, device number 13 [ 228.327500][ T8866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.748098][T11336] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1244'. [ 228.842324][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.846705][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.852621][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.858402][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.862240][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.982575][T11339] chnl_net:caif_netlink_parms(): no params data found [ 229.044320][T11352] ubi: mtd0 is already attached to ubi31 [ 229.064770][T11339] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.064838][T11339] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.064916][T11339] bridge_slave_0: entered allmulticast mode [ 229.065617][T11339] bridge_slave_0: entered promiscuous mode [ 229.066704][T11339] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.066745][T11339] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.066807][T11339] bridge_slave_1: entered allmulticast mode [ 229.067477][T11339] bridge_slave_1: entered promiscuous mode [ 229.117564][T11339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.119099][T11339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.226557][T11339] team0: Port device team_slave_0 added [ 229.227995][T11339] team0: Port device team_slave_1 added [ 229.273638][ T8866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.276429][T11339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.276440][T11339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.276489][T11339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.279725][T11339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.279734][T11339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.279754][T11339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.322990][T11339] hsr_slave_0: entered promiscuous mode [ 229.323551][T11339] hsr_slave_1: entered promiscuous mode [ 229.323886][T11339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.323954][T11339] Cannot create hsr debugfs directory [ 229.492528][ T8866] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.605262][ T8866] bridge_slave_1: left allmulticast mode [ 229.605280][ T8866] bridge_slave_1: left promiscuous mode [ 229.605387][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.606629][ T8866] bridge_slave_0: left allmulticast mode [ 229.606640][ T8866] bridge_slave_0: left promiscuous mode [ 229.606726][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.951757][ T8866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.953116][ T8866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.953967][ T8866] bond0 (unregistering): Released all slaves [ 230.301363][ T8866] hsr_slave_0: left promiscuous mode [ 230.303502][ T8866] hsr_slave_1: left promiscuous mode [ 230.305546][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.308014][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.312216][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.314634][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.338746][ T8866] veth1_macvtap: left promiscuous mode [ 230.340929][ T8866] veth0_macvtap: left promiscuous mode [ 230.342961][ T8866] veth1_vlan: left promiscuous mode [ 230.344836][ T8866] veth0_vlan: left promiscuous mode [ 230.827270][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.842962][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.851764][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.854710][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.863601][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.961126][ T5955] Bluetooth: hci0: command tx timeout [ 231.096430][ T8866] team0 (unregistering): Port device team_slave_1 removed [ 231.172351][ T8866] team0 (unregistering): Port device team_slave_0 removed [ 231.932041][T11339] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 231.949680][T11339] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 231.964904][T11339] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 231.977817][T11339] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 232.085614][T11374] chnl_net:caif_netlink_parms(): no params data found [ 232.121403][T11339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.207420][T11374] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.212527][T11374] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.215489][T11374] bridge_slave_0: entered allmulticast mode [ 232.219131][T11374] bridge_slave_0: entered promiscuous mode [ 232.223901][T11374] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.226660][T11374] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.229505][T11374] bridge_slave_1: entered allmulticast mode [ 232.232938][T11374] bridge_slave_1: entered promiscuous mode [ 232.268083][T11374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.275377][T11374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.281445][T11339] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.317633][T11374] team0: Port device team_slave_0 added [ 232.323163][T11374] team0: Port device team_slave_1 added [ 232.363460][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.365851][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.374431][T11374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.376749][T11374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.385503][T11374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.391697][T11374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.393946][T11374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.402627][T11374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.410897][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.413196][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.448358][T11374] hsr_slave_0: entered promiscuous mode [ 232.450817][T11374] hsr_slave_1: entered promiscuous mode [ 232.453030][T11374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.455496][T11374] Cannot create hsr debugfs directory [ 232.480517][ T5984] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 232.498908][ T8866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.587481][ T8866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.640883][ T5984] usb 8-1: Using ep0 maxpacket: 32 [ 232.644249][ T5984] usb 8-1: unable to get BOS descriptor or descriptor too short [ 232.647532][ T5984] usb 8-1: config index 0 descriptor too short (expected 34347, got 43) [ 232.650252][ T5984] usb 8-1: config 31 has too many interfaces: 196, using maximum allowed: 32 [ 232.653369][ T5984] usb 8-1: config 31 has an invalid descriptor of length 0, skipping remainder of the config [ 232.656717][ T5984] usb 8-1: config 31 has 1 interface, different from the descriptor's value: 196 [ 232.659699][ T5984] usb 8-1: config 31 has no interface number 0 [ 232.663611][ T5984] usb 8-1: config 31 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 232.667409][ T5984] usb 8-1: config 31 interface 81 altsetting 3 bulk endpoint 0x83 has invalid maxpacket 150 [ 232.670970][ T5984] usb 8-1: config 31 interface 81 has no altsetting 0 [ 232.675394][ T5984] usb 8-1: string descriptor 0 read error: -22 [ 232.677535][ T5984] usb 8-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 232.678273][ T8866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.680896][ T5984] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.689366][T11398] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 232.690680][T11339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.695953][ T5984] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:31.81/input/input14 [ 232.750046][ T8866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.868275][ T8866] bridge_slave_1: left allmulticast mode [ 232.870207][ T8866] bridge_slave_1: left promiscuous mode [ 232.873099][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.878443][ T8866] bridge_slave_0: left allmulticast mode [ 232.881028][ T8866] bridge_slave_0: left promiscuous mode [ 232.882971][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.953019][ C3] usbtouchscreen 8-1:31.81: usbtouch_irq - usb_submit_urb failed with result: -1 [ 232.964688][ T5955] Bluetooth: hci2: command tx timeout [ 233.040807][ T5955] Bluetooth: hci0: command tx timeout [ 233.058168][T11416] openvswitch: netlink: IP tunnel TTL not specified. [ 233.165678][ T8866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.169846][ T8866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.173635][ T8866] bond0 (unregistering): Released all slaves [ 233.212747][T11339] veth0_vlan: entered promiscuous mode [ 233.218935][T11339] veth1_vlan: entered promiscuous mode [ 233.231865][ T29] usb 8-1: USB disconnect, device number 16 [ 233.244791][T11339] veth0_macvtap: entered promiscuous mode [ 233.249504][T11339] veth1_macvtap: entered promiscuous mode [ 233.259612][T11339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.267323][T11339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.295700][T11339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.298576][T11339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.302485][T11339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.305319][T11339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.363388][ T2084] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 233.418087][ T8882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.422859][ T8882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.434540][ T8853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.437105][ T8853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.521805][ T2084] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 233.526269][ T2084] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 233.530224][T11374] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 233.531296][ T2084] usb 5-1: config 220 interface 0 has no altsetting 0 [ 233.539039][ T2084] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 233.543127][ T2084] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.546513][ T2084] usb 5-1: Product: syz [ 233.548392][ T2084] usb 5-1: Manufacturer: syz [ 233.551132][ T2084] usb 5-1: SerialNumber: syz [ 233.555376][ T8866] hsr_slave_0: left promiscuous mode [ 233.557951][ T8866] hsr_slave_1: left promiscuous mode [ 233.560126][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.562582][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.565508][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.568182][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.591733][ T8866] veth1_macvtap: left promiscuous mode [ 233.593602][ T8866] veth0_macvtap: left promiscuous mode [ 233.595437][ T8866] veth1_vlan: left promiscuous mode [ 233.597331][ T8866] veth0_vlan: left promiscuous mode [ 233.768856][ T2084] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 233.771727][ T2084] usb 5-1: No valid video chain found. [ 233.777953][ T2084] usb 5-1: USB disconnect, device number 14 [ 233.921484][ T833] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 234.040858][T11438] "syz.3.1252" (11438) uses obsolete ecb(arc4) skcipher [ 234.317637][ T8866] team0 (unregistering): Port device team_slave_1 removed [ 234.395248][ T8866] team0 (unregistering): Port device team_slave_0 removed [ 234.995343][T11374] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 235.001673][T11374] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 235.009207][T11374] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 235.051517][ T5955] Bluetooth: hci2: command tx timeout [ 235.055685][T11374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.066719][T11374] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.078005][ T8835] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.080491][ T8835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.092670][ T8835] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.095042][ T8835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.208290][T11374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.229091][T11374] veth0_vlan: entered promiscuous mode [ 235.234934][T11374] veth1_vlan: entered promiscuous mode [ 235.249385][T11374] veth0_macvtap: entered promiscuous mode [ 235.253955][T11374] veth1_macvtap: entered promiscuous mode [ 235.268507][T11374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.274678][T11374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.279133][T11374] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.285084][T11374] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.287927][T11374] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.291137][T11374] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.341322][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.343984][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.357746][ T8845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.360392][ T8845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.416862][ T8866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.677954][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.682945][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.686064][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.689532][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.694238][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.800180][T11463] chnl_net:caif_netlink_parms(): no params data found [ 235.875153][T11463] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.877556][T11463] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.879913][T11463] bridge_slave_0: entered allmulticast mode [ 235.883717][T11463] bridge_slave_0: entered promiscuous mode [ 235.886976][T11463] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.889360][T11463] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.892751][T11463] bridge_slave_1: entered allmulticast mode [ 235.895468][T11463] bridge_slave_1: entered promiscuous mode [ 235.926487][T11463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.931574][T11463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.966525][T11463] team0: Port device team_slave_0 added [ 235.970100][T11463] team0: Port device team_slave_1 added [ 236.005331][T11463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.007911][T11463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.016381][T11463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.021509][T11463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.023820][T11463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.032502][T11463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.075986][T11463] hsr_slave_0: entered promiscuous mode [ 236.078316][T11463] hsr_slave_1: entered promiscuous mode [ 236.080531][T11463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.083062][T11463] Cannot create hsr debugfs directory [ 236.275857][ T8866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.684685][ T8866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.745457][ T8866] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.865138][ T8866] bridge_slave_1: left allmulticast mode [ 236.867216][ T8866] bridge_slave_1: left promiscuous mode [ 236.869244][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.875945][ T8866] bridge_slave_0: left allmulticast mode [ 236.878479][ T8866] bridge_slave_0: left promiscuous mode [ 236.882250][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.151265][ T8866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.155392][ T8866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.159039][ T8866] bond0 (unregistering): Released all slaves [ 237.504647][ T8866] hsr_slave_0: left promiscuous mode [ 237.507674][ T8866] hsr_slave_1: left promiscuous mode [ 237.509999][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.513222][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.516717][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.519324][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.547734][ T8866] veth1_macvtap: left promiscuous mode [ 237.549610][ T8866] veth0_macvtap: left promiscuous mode [ 237.551936][ T8866] veth1_vlan: left promiscuous mode [ 237.553705][ T8866] veth0_vlan: left promiscuous mode [ 237.762601][ T5955] Bluetooth: hci0: command tx timeout [ 238.242955][ T8866] team0 (unregistering): Port device team_slave_1 removed [ 238.324568][ T8866] team0 (unregistering): Port device team_slave_0 removed [ 239.071454][T11463] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.086528][T11463] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.100213][T11463] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.104685][T11463] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.151620][T11463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.165588][T11463] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.174549][ T8832] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.177133][ T8832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.184097][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.187089][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.328438][T11463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.372880][ T8866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.420698][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.424969][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.428051][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.433899][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.437863][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.451443][ T8866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.505486][T11463] veth0_vlan: entered promiscuous mode [ 239.512412][T11463] veth1_vlan: entered promiscuous mode [ 239.535986][ T8866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.569305][T11463] veth0_macvtap: entered promiscuous mode [ 239.576573][T11463] veth1_macvtap: entered promiscuous mode [ 239.589069][T11463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.596602][T11463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.602813][T11508] chnl_net:caif_netlink_parms(): no params data found [ 239.608118][T11463] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.612448][T11463] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.615270][T11463] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.618535][T11463] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.638589][ T8866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.705747][T11508] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.708167][T11508] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.711590][T11508] bridge_slave_0: entered allmulticast mode [ 239.714323][T11508] bridge_slave_0: entered promiscuous mode [ 239.717467][T11508] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.719876][T11508] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.722352][T11508] bridge_slave_1: entered allmulticast mode [ 239.725041][T11508] bridge_slave_1: entered promiscuous mode [ 239.766672][T11508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.771696][T11508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.814118][T11508] team0: Port device team_slave_0 added [ 239.819014][T11508] team0: Port device team_slave_1 added [ 239.834803][ T8832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.837444][ T8832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.850970][ T5955] Bluetooth: hci0: command tx timeout [ 239.896892][T11508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.899351][T11508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.908928][T11508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.923473][T11508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.925937][T11508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.934389][T11508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.939063][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.942499][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.963640][ T8866] bridge_slave_1: left allmulticast mode [ 239.966110][ T8866] bridge_slave_1: left promiscuous mode [ 239.969498][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.976745][ T8866] bridge_slave_0: left allmulticast mode [ 239.979186][ T8866] bridge_slave_0: left promiscuous mode [ 239.983346][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.261442][ T8866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.265531][ T8866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.269191][ T8866] bond0 (unregistering): Released all slaves [ 240.336675][T11508] hsr_slave_0: entered promiscuous mode [ 240.339197][T11508] hsr_slave_1: entered promiscuous mode [ 240.341692][T11508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.344208][T11508] Cannot create hsr debugfs directory [ 240.645545][ T8866] hsr_slave_0: left promiscuous mode [ 240.648555][ T8866] hsr_slave_1: left promiscuous mode [ 240.651927][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.655194][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.659068][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.662793][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.695572][ T8866] veth1_macvtap: left promiscuous mode [ 240.697264][ T8866] veth0_macvtap: left promiscuous mode [ 240.698940][ T8866] veth1_vlan: left promiscuous mode [ 240.701108][ T8866] veth0_vlan: left promiscuous mode [ 241.345001][ T8866] team0 (unregistering): Port device team_slave_1 removed [ 241.426687][ T8866] team0 (unregistering): Port device team_slave_0 removed [ 241.522509][ T5955] Bluetooth: hci2: command tx timeout [ 242.309818][T11508] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 242.318231][T11508] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 242.323135][T11508] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 242.327131][T11508] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 242.378908][T11508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.390060][T11508] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.397870][ T8835] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.400521][ T8835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.412931][ T8835] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.415710][ T8835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.515785][ T8866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.575879][T11508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.596631][T11508] veth0_vlan: entered promiscuous mode [ 242.603581][T11508] veth1_vlan: entered promiscuous mode [ 242.619069][T11508] veth0_macvtap: entered promiscuous mode [ 242.624346][T11508] veth1_macvtap: entered promiscuous mode [ 242.633309][T11508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.639283][T11508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.645038][T11508] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.647847][T11508] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.652436][T11508] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.655233][T11508] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.697880][ T8882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.704663][ T8882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.718303][ T8835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.724172][ T8835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.735275][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.738897][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.746202][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.749267][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.752518][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.892319][T11561] chnl_net:caif_netlink_parms(): no params data found [ 242.984656][T11561] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.987083][T11561] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.989517][T11561] bridge_slave_0: entered allmulticast mode [ 242.992948][T11561] bridge_slave_0: entered promiscuous mode [ 242.996305][T11561] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.998749][T11561] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.001352][T11561] bridge_slave_1: entered allmulticast mode [ 243.004212][T11561] bridge_slave_1: entered promiscuous mode [ 243.051321][T11561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.056055][T11561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.106095][T11561] team0: Port device team_slave_0 added [ 243.114959][T11561] team0: Port device team_slave_1 added [ 243.151630][T11561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.153908][T11561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.162319][T11561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.166658][T11561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.168922][T11561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.177453][T11561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.215562][T11561] hsr_slave_0: entered promiscuous mode [ 243.217852][T11561] hsr_slave_1: entered promiscuous mode [ 243.219992][T11561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.222706][T11561] Cannot create hsr debugfs directory [ 243.577849][ T8866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.671669][ T8866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.744607][ T8866] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.829851][ T8866] bridge_slave_1: left allmulticast mode [ 243.832096][ T8866] bridge_slave_1: left promiscuous mode [ 243.836510][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.842027][ T8866] bridge_slave_0: left allmulticast mode [ 243.844275][ T8866] bridge_slave_0: left promiscuous mode [ 243.846471][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.138613][ T8866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.151409][ T8866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.160078][ T8866] bond0 (unregistering): Released all slaves [ 244.542422][ T8866] hsr_slave_0: left promiscuous mode [ 244.550743][ T8866] hsr_slave_1: left promiscuous mode [ 244.556430][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.559708][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.574538][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.577025][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.599960][ T8866] veth1_macvtap: left promiscuous mode [ 244.602267][ T8866] veth0_macvtap: left promiscuous mode [ 244.604152][ T8866] veth1_vlan: left promiscuous mode [ 244.605857][ T8866] veth0_vlan: left promiscuous mode [ 244.813047][ T5955] Bluetooth: hci0: command tx timeout [ 245.398676][ T8866] team0 (unregistering): Port device team_slave_1 removed [ 245.481356][ T8866] team0 (unregistering): Port device team_slave_0 removed [ 246.225070][T11561] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.229391][T11561] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.233879][T11561] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.238575][T11561] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 246.319633][T11561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.334851][T11561] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.342618][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.345740][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.353823][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.356955][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.519308][ T8866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.537551][T11561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.598244][ T8866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.652356][ T8866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.723950][ T8866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.748556][T11561] veth0_vlan: entered promiscuous mode [ 246.754079][T11561] veth1_vlan: entered promiscuous mode [ 246.768959][T11561] veth0_macvtap: entered promiscuous mode [ 246.773676][T11561] veth1_macvtap: entered promiscuous mode [ 246.782735][T11561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.790796][T11561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.804664][T11561] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.807510][T11561] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.810397][T11561] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.815691][T11561] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.825152][T11647] fuse: Bad value for 'rootmode' [ 246.839298][T11647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1265'. [ 246.868435][ T8866] bridge_slave_1: left allmulticast mode [ 246.870350][ T8866] bridge_slave_1: left promiscuous mode [ 246.874890][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.878629][ T8866] bridge_slave_0: left allmulticast mode [ 246.881027][ T5955] Bluetooth: hci0: command tx timeout [ 246.881086][ T8866] bridge_slave_0: left promiscuous mode [ 246.885347][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.931018][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.934229][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.945057][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.953519][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.959676][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.195901][ T8866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.200332][ T8866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.204275][ T8866] bond0 (unregistering): Released all slaves [ 247.303041][ T8832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.314747][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.317444][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.319879][ T8832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.330107][T11657] netlink: 'syz.0.1267': attribute type 10 has an invalid length. [ 247.517509][T11650] chnl_net:caif_netlink_parms(): no params data found [ 247.656015][T11650] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.658466][T11650] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.661371][T11650] bridge_slave_0: entered allmulticast mode [ 247.664082][T11650] bridge_slave_0: entered promiscuous mode [ 247.669582][ T8866] hsr_slave_0: left promiscuous mode [ 247.673014][ T8866] hsr_slave_1: left promiscuous mode [ 247.675087][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.677533][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.680605][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.683108][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.707068][ T8866] veth1_macvtap: left promiscuous mode [ 247.708958][ T8866] veth0_macvtap: left promiscuous mode [ 247.712265][ T8866] veth1_vlan: left promiscuous mode [ 247.714225][ T8866] veth0_vlan: left promiscuous mode [ 247.916291][T11688] FAULT_INJECTION: forcing a failure. [ 247.916291][T11688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.921210][T11688] CPU: 3 UID: 0 PID: 11688 Comm: syz.3.1271 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 247.921226][T11688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.921232][T11688] Call Trace: [ 247.921236][T11688] [ 247.921240][T11688] dump_stack_lvl+0x16c/0x1f0 [ 247.921276][T11688] should_fail_ex+0x512/0x640 [ 247.921298][T11688] _copy_to_iter+0x2a4/0x15a0 [ 247.921310][T11688] ? do_raw_spin_lock+0x12c/0x2b0 [ 247.921325][T11688] ? find_held_lock+0x2b/0x80 [ 247.921336][T11688] ? __pfx__copy_to_iter+0x10/0x10 [ 247.921344][T11688] ? rcu_is_watching+0x12/0xc0 [ 247.921354][T11688] ? __local_bh_enable_ip+0xa4/0x120 [ 247.921366][T11688] ? lockdep_hardirqs_on+0x7c/0x110 [ 247.921381][T11688] ? cprng_get_random+0x341/0x4a0 [ 247.921393][T11688] ? __local_bh_enable_ip+0xa4/0x120 [ 247.921404][T11688] ? cprng_get_random+0x35d/0x4a0 [ 247.921418][T11688] _rng_recvmsg.constprop.0+0x18a/0x210 [ 247.921430][T11688] ? __pfx__rng_recvmsg.constprop.0+0x10/0x10 [ 247.921441][T11688] ? aa_sk_perm+0x2f4/0xb10 [ 247.921462][T11688] sock_recvmsg+0x1f9/0x250 [ 247.921479][T11688] __sys_recvfrom+0x203/0x310 [ 247.921491][T11688] ? __pfx___sys_recvfrom+0x10/0x10 [ 247.921514][T11688] ? ksys_write+0x1b9/0x240 [ 247.921524][T11688] ? __pfx_ksys_write+0x10/0x10 [ 247.921536][T11688] __ia32_compat_sys_recvfrom+0xe4/0x1c0 [ 247.921550][T11688] ? lockdep_hardirqs_on+0x7c/0x110 [ 247.921564][T11688] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 247.921580][T11688] __do_fast_syscall_32+0x73/0x120 [ 247.921597][T11688] do_fast_syscall_32+0x32/0x80 [ 247.921613][T11688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.921627][T11688] RIP: 0023:0xf70fe579 [ 247.921635][T11688] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 247.921645][T11688] RSP: 002b:00000000f50ee55c EFLAGS: 00000296 ORIG_RAX: 0000000000000173 [ 247.921656][T11688] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 247.921662][T11688] RDX: 0000000000000089 RSI: 0000000000000141 RDI: 0000000000000000 [ 247.921668][T11688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.921674][T11688] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 247.921680][T11688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.921692][T11688] [ 248.032875][T11690] syz.3.1272: attempt to access beyond end of device [ 248.032875][T11690] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 248.040091][T11690] SQUASHFS error: Failed to read block 0x0: -5 [ 248.042839][T11690] unable to read squashfs_super_block [ 248.507719][T11700] trusted_key: encrypted_key: insufficient parameters specified [ 248.610759][ T834] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 248.617190][ T8866] team0 (unregistering): Port device team_slave_1 removed [ 248.695915][ T8866] team0 (unregistering): Port device team_slave_0 removed [ 248.773647][ T834] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 248.777230][ T834] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 248.787199][ T834] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 248.790212][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.811538][T11699] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 248.817913][ T834] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.032017][T10323] usb 5-1: USB disconnect, device number 15 [ 249.050898][ T5955] Bluetooth: hci2: command tx timeout [ 249.414944][T11650] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.417318][T11650] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.419828][T11650] bridge_slave_1: entered allmulticast mode [ 249.422929][T11650] bridge_slave_1: entered promiscuous mode [ 249.466861][T11650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.474102][T11650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.527271][T11650] team0: Port device team_slave_0 added [ 249.540904][T11650] team0: Port device team_slave_1 added [ 249.588892][T11650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.591745][T11650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.600012][T11650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.605421][T11650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.607792][T11650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.616446][T11650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.677966][T11650] hsr_slave_0: entered promiscuous mode [ 249.681208][T11650] hsr_slave_1: entered promiscuous mode [ 249.683775][T11650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.686890][T11650] Cannot create hsr debugfs directory [ 249.968896][ T8866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.151233][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.155551][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.160239][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.165543][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.171915][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.430799][T11730] chnl_net:caif_netlink_parms(): no params data found [ 250.478440][T11650] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 250.483722][T11650] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 250.506207][T11650] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 250.564160][T11650] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.623580][T11730] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.626419][T11730] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.629013][T11730] bridge_slave_0: entered allmulticast mode [ 250.632136][T11730] bridge_slave_0: entered promiscuous mode [ 250.636321][T11730] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.638947][T11763] overlay: filesystem on ./bus not supported as upperdir [ 250.642715][T11730] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.645141][T11730] bridge_slave_1: entered allmulticast mode [ 250.647814][T11730] bridge_slave_1: entered promiscuous mode [ 250.659572][ T40] kauditd_printk_skb: 253 callbacks suppressed [ 250.659582][ T40] audit: type=1804 audit(1747585314.868:2202): pid=11763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1283" name="/newroot/413/bus/file1" dev="overlay" ino=2241 res=1 errno=0 [ 250.694707][T11730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.700313][T11730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.787545][T11730] team0: Port device team_slave_0 added [ 250.794152][T11730] team0: Port device team_slave_1 added [ 250.841224][T11730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.843588][T11730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.852286][T11730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.858564][T11730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.861767][T11730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.870549][T11730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.915019][T11730] hsr_slave_0: entered promiscuous mode [ 250.917385][T11730] hsr_slave_1: entered promiscuous mode [ 250.919696][T11730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.924378][T11730] Cannot create hsr debugfs directory [ 250.965810][T11650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.022939][T11650] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.034470][ T8882] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.036761][ T8882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.042938][ T8882] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.045948][ T8882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.074654][ T8866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.077925][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 251.083597][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 251.088092][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.093693][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.096386][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 251.131122][ T5946] Bluetooth: hci2: command tx timeout [ 251.210512][T11650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.220152][T11778] chnl_net:caif_netlink_parms(): no params data found [ 251.247972][T11788] trusted_key: encrypted_key: insufficient parameters specified [ 251.308944][ T8866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.331416][T11778] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.333811][T11778] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.336239][T11778] bridge_slave_0: entered allmulticast mode [ 251.339048][T11778] bridge_slave_0: entered promiscuous mode [ 251.343558][T11778] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.345914][T11778] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.348307][T11778] bridge_slave_1: entered allmulticast mode [ 251.351472][T11778] bridge_slave_1: entered promiscuous mode [ 251.389019][T11778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.402525][ T8866] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.409810][T11778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.456771][T11778] team0: Port device team_slave_0 added [ 251.462211][T11778] team0: Port device team_slave_1 added [ 251.493329][T11650] veth0_vlan: entered promiscuous mode [ 251.496133][T11778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.499004][T11778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.507872][T11778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.513342][T11778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.515614][T11778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.527063][T11778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.581504][T11650] veth1_vlan: entered promiscuous mode [ 251.594543][T11778] hsr_slave_0: entered promiscuous mode [ 251.597074][T11778] hsr_slave_1: entered promiscuous mode [ 251.599292][T11778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.603041][T11778] Cannot create hsr debugfs directory [ 251.690634][ T8866] bridge_slave_1: left allmulticast mode [ 251.692550][ T8866] bridge_slave_1: left promiscuous mode [ 251.694417][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.698024][ T8866] bridge_slave_0: left allmulticast mode [ 251.699900][ T8866] bridge_slave_0: left promiscuous mode [ 251.704193][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.982628][ T8866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.987406][ T8866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.991733][ T8866] bond0 (unregistering): Released all slaves [ 252.001210][T11650] veth0_macvtap: entered promiscuous mode [ 252.051492][T11650] veth1_macvtap: entered promiscuous mode [ 252.095379][T11650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.103737][T11650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.109038][T11650] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.112661][T11650] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.115497][T11650] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.118268][T11650] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.241482][ T5946] Bluetooth: hci0: command tx timeout [ 252.247819][ T8853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.251267][ T8853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.293893][ T8882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.297293][ T8882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.328454][ T8866] hsr_slave_0: left promiscuous mode [ 252.334776][ T8866] hsr_slave_1: left promiscuous mode [ 252.337078][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.339436][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.342648][ T8866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.345018][ T8866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.377459][ T8866] veth1_macvtap: left promiscuous mode [ 252.379288][ T8866] veth0_macvtap: left promiscuous mode [ 252.381349][ T8866] veth1_vlan: left promiscuous mode [ 252.383059][ T8866] veth0_vlan: left promiscuous mode [ 253.086295][ T8866] team0 (unregistering): Port device team_slave_1 removed [ 253.123361][ T5946] Bluetooth: hci3: command tx timeout [ 253.177823][ T8866] team0 (unregistering): Port device team_slave_0 removed [ 253.865693][T11730] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 253.870652][T11730] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 253.875918][T11730] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.889585][T11730] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 253.928292][T11778] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 253.934435][T11778] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 253.938440][T11778] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 253.945813][T11778] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 254.005194][T11730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.028731][T11778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.033729][T11730] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.047866][ T8845] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.050322][ T8845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.054468][ T8845] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.056882][ T8845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.076485][T11778] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.099339][ T8835] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.102579][ T8835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.120291][ T8882] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.123505][ T8882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.260620][T11778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.279815][ T8866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.296667][T11730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.321650][ T5946] Bluetooth: hci0: command tx timeout [ 254.416515][T11778] veth0_vlan: entered promiscuous mode [ 254.429080][T11778] veth1_vlan: entered promiscuous mode [ 254.463511][T11730] veth0_vlan: entered promiscuous mode [ 254.472211][T11778] veth0_macvtap: entered promiscuous mode [ 254.478526][T11778] veth1_macvtap: entered promiscuous mode [ 254.483696][T11730] veth1_vlan: entered promiscuous mode [ 254.501956][T11778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.511797][T11778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.520967][T11778] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.524720][T11778] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.528400][T11778] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.533084][T11778] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.548918][T11730] veth0_macvtap: entered promiscuous mode [ 254.555348][T11730] veth1_macvtap: entered promiscuous mode [ 254.588111][T11730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.602937][T11730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.613563][ T8882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.615679][T11730] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.616602][ T8882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.620597][T11730] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.626919][T11730] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.631387][T11730] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.660126][ T8845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.663553][ T8845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.715166][ T8832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.718256][ T8832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.744492][ T8882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.747071][ T8882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.821971][ T8862] ================================================================== [ 254.824606][ T8862] BUG: KASAN: global-out-of-bounds in fib6_ifdown+0x7f5/0x8f0 [ 254.826988][ T8862] Read of size 8 at addr ffffffff9af85cd0 by task kworker/u32:53/8862 [ 254.830570][ T8862] [ 254.831960][ T8862] CPU: 2 UID: 0 PID: 8862 Comm: kworker/u32:53 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 254.831977][ T8862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.831988][ T8862] Workqueue: events_unbound linkwatch_event [ 254.832011][ T8862] Call Trace: [ 254.832016][ T8862] [ 254.832021][ T8862] dump_stack_lvl+0x116/0x1f0 [ 254.832041][ T8862] print_report+0xc3/0x670 [ 254.832054][ T8862] ? __virt_addr_valid+0x5e/0x590 [ 254.832067][ T8862] ? __phys_addr+0xc6/0x150 [ 254.832080][ T8862] ? fib6_ifdown+0x7f5/0x8f0 [ 254.832092][ T8862] kasan_report+0xe0/0x110 [ 254.832104][ T8862] ? fib6_ifdown+0x7f5/0x8f0 [ 254.832117][ T8862] fib6_ifdown+0x7f5/0x8f0 [ 254.832128][ T8862] ? __pfx_fib6_ifdown+0x10/0x10 [ 254.832140][ T8862] fib6_clean_node+0x2a4/0x5b0 [ 254.832153][ T8862] ? __pfx_fib6_clean_node+0x10/0x10 [ 254.832172][ T8862] fib6_walk_continue+0x44f/0x8d0 [ 254.832184][ T8862] fib6_walk+0x182/0x370 [ 254.832194][ T8862] ? __pfx_fib6_ifdown+0x10/0x10 [ 254.832205][ T8862] fib6_clean_tree+0xd4/0x110 [ 254.832215][ T8862] ? __pfx_fib6_clean_tree+0x10/0x10 [ 254.832226][ T8862] ? __pfx_fib6_clean_node+0x10/0x10 [ 254.832238][ T8862] ? __pfx_fib6_ifdown+0x10/0x10 [ 254.832251][ T8862] ? __pfx_fib6_ifdown+0x10/0x10 [ 254.832262][ T8862] __fib6_clean_all+0x107/0x2d0 [ 254.832274][ T8862] rt6_sync_down_dev+0x139/0x160 [ 254.832290][ T8862] ? __pfx_rt6_sync_down_dev+0x10/0x10 [ 254.832306][ T8862] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 254.832320][ T8862] addrconf_notify+0x12ef/0x19e0 [ 254.832335][ T8862] ? ip6mr_device_event+0x1bc/0x230 [ 254.832351][ T8862] notifier_call_chain+0xbc/0x410 [ 254.832363][ T8862] ? __pfx_addrconf_notify+0x10/0x10 [ 254.832381][ T8862] ? ref_tracker_free+0x2a0/0x830 [ 254.832397][ T8862] call_netdevice_notifiers_info+0xbe/0x140 [ 254.832414][ T8862] netif_state_change+0x165/0x3b0 [ 254.832429][ T8862] ? __pfx_netif_state_change+0x10/0x10 [ 254.832444][ T8862] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 254.832459][ T8862] linkwatch_do_dev+0x12b/0x160 [ 254.832474][ T8862] __linkwatch_run_queue+0x2aa/0x8a0 [ 254.832491][ T8862] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 254.832509][ T8862] linkwatch_event+0x8f/0xc0 [ 254.832523][ T8862] ? __pfx_linkwatch_event+0x10/0x10 [ 254.832539][ T8862] ? rcu_is_watching+0x12/0xc0 [ 254.832549][ T8862] process_one_work+0x9cf/0x1b70 [ 254.832568][ T8862] ? __pfx_process_one_work+0x10/0x10 [ 254.832585][ T8862] ? assign_work+0x1a0/0x250 [ 254.832600][ T8862] worker_thread+0x6c8/0xf10 [ 254.832618][ T8862] ? __kthread_parkme+0x19e/0x250 [ 254.832630][ T8862] ? __pfx_worker_thread+0x10/0x10 [ 254.832646][ T8862] kthread+0x3c2/0x780 [ 254.832661][ T8862] ? __pfx_kthread+0x10/0x10 [ 254.832674][ T8862] ? __pfx_kthread+0x10/0x10 [ 254.832688][ T8862] ? __pfx_kthread+0x10/0x10 [ 254.832701][ T8862] ? __pfx_kthread+0x10/0x10 [ 254.832715][ T8862] ? rcu_is_watching+0x12/0xc0 [ 254.832724][ T8862] ? __pfx_kthread+0x10/0x10 [ 254.832738][ T8862] ret_from_fork+0x48/0x80 [ 254.832748][ T8862] ? __pfx_kthread+0x10/0x10 [ 254.832762][ T8862] ret_from_fork_asm+0x1a/0x30 [ 254.832780][ T8862] [ 254.832784][ T8862] [ 254.933776][ T8862] The buggy address belongs to the variable: [ 254.936030][ T8862] __key.0+0x30/0x40 [ 254.937522][ T8862] [ 254.938460][ T8862] The buggy address belongs to the physical page: [ 254.940867][ T8862] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1af85 [ 254.944163][ T8862] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 254.947118][ T8862] raw: 00fff00000002000 ffffea00006be148 ffffea00006be148 0000000000000000 [ 254.950348][ T8862] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 254.953578][ T8862] page dumped because: kasan: bad access detected [ 254.956022][ T8862] page_owner info is not present (never set?) [ 254.958311][ T8862] [ 254.959239][ T8862] Memory state around the buggy address: [ 254.961416][ T8862] ffffffff9af85b80: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 254.964443][ T8862] ffffffff9af85c00: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 254.967446][ T8862] >ffffffff9af85c80: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 254.970489][ T8862] ^ [ 254.973017][ T8862] ffffffff9af85d00: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 254.976044][ T8862] ffffffff9af85d80: 00 00 00 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 254.979068][ T8862] ================================================================== [ 254.982472][ T8862] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 254.985195][ T8862] CPU: 2 UID: 0 PID: 8862 Comm: kworker/u32:53 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 254.989819][ T8862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.993796][ T8862] Workqueue: events_unbound linkwatch_event [ 254.996050][ T8862] Call Trace: [ 254.997340][ T8862] [ 254.998477][ T8862] dump_stack_lvl+0x3d/0x1f0 [ 255.000244][ T8862] panic+0x71c/0x800 [ 255.001761][ T8862] ? __pfx_panic+0x10/0x10 [ 255.003462][ T8862] ? mark_held_locks+0x49/0x80 [ 255.005273][ T8862] ? fib6_ifdown+0x7f5/0x8f0 [ 255.007022][ T8862] ? check_panic_on_warn+0x1f/0xb0 [ 255.008964][ T8862] ? fib6_ifdown+0x7f5/0x8f0 [ 255.010716][ T8862] check_panic_on_warn+0xab/0xb0 [ 255.012622][ T8862] end_report+0x107/0x170 [ 255.014255][ T8862] kasan_report+0xee/0x110 [ 255.015964][ T8862] ? fib6_ifdown+0x7f5/0x8f0 [ 255.017725][ T8862] fib6_ifdown+0x7f5/0x8f0 [ 255.019433][ T8862] ? __pfx_fib6_ifdown+0x10/0x10 [ 255.021331][ T8862] fib6_clean_node+0x2a4/0x5b0 [ 255.023175][ T8862] ? __pfx_fib6_clean_node+0x10/0x10 [ 255.025213][ T8862] fib6_walk_continue+0x44f/0x8d0 [ 255.027095][ T8862] fib6_walk+0x182/0x370 [ 255.028707][ T8862] ? __pfx_fib6_ifdown+0x10/0x10 [ 255.030600][ T8862] fib6_clean_tree+0xd4/0x110 [ 255.032313][ T8862] ? __pfx_fib6_clean_tree+0x10/0x10 [ 255.034271][ T8862] ? __pfx_fib6_clean_node+0x10/0x10 [ 255.036311][ T8862] ? __pfx_fib6_ifdown+0x10/0x10 [ 255.038230][ T8862] ? __pfx_fib6_ifdown+0x10/0x10 [ 255.040070][ T8862] __fib6_clean_all+0x107/0x2d0 [ 255.041617][ T8862] rt6_sync_down_dev+0x139/0x160 [ 255.043224][ T8862] ? __pfx_rt6_sync_down_dev+0x10/0x10 [ 255.044980][ T8862] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 255.046878][ T8862] addrconf_notify+0x12ef/0x19e0 [ 255.048499][ T8862] ? ip6mr_device_event+0x1bc/0x230 [ 255.050201][ T8862] notifier_call_chain+0xbc/0x410 [ 255.051823][ T8862] ? __pfx_addrconf_notify+0x10/0x10 [ 255.053517][ T8862] ? ref_tracker_free+0x2a0/0x830 [ 255.055135][ T8862] call_netdevice_notifiers_info+0xbe/0x140 [ 255.057029][ T8862] netif_state_change+0x165/0x3b0 [ 255.058625][ T8862] ? __pfx_netif_state_change+0x10/0x10 [ 255.060425][ T8862] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 255.062313][ T8862] linkwatch_do_dev+0x12b/0x160 [ 255.063870][ T8862] __linkwatch_run_queue+0x2aa/0x8a0 [ 255.065562][ T8862] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 255.067432][ T8862] linkwatch_event+0x8f/0xc0 [ 255.068936][ T8862] ? __pfx_linkwatch_event+0x10/0x10 [ 255.070660][ T8862] ? rcu_is_watching+0x12/0xc0 [ 255.072257][ T8862] process_one_work+0x9cf/0x1b70 [ 255.073834][ T8862] ? __pfx_process_one_work+0x10/0x10 [ 255.075575][ T8862] ? assign_work+0x1a0/0x250 [ 255.077081][ T8862] worker_thread+0x6c8/0xf10 [ 255.078605][ T8862] ? __kthread_parkme+0x19e/0x250 [ 255.080312][ T8862] ? __pfx_worker_thread+0x10/0x10 [ 255.082001][ T8862] kthread+0x3c2/0x780 [ 255.083378][ T8862] ? __pfx_kthread+0x10/0x10 [ 255.084866][ T8862] ? __pfx_kthread+0x10/0x10 [ 255.086350][ T8862] ? __pfx_kthread+0x10/0x10 [ 255.087853][ T8862] ? __pfx_kthread+0x10/0x10 [ 255.089350][ T8862] ? rcu_is_watching+0x12/0xc0 [ 255.090905][ T8862] ? __pfx_kthread+0x10/0x10 [ 255.092396][ T8862] ret_from_fork+0x48/0x80 [ 255.093856][ T8862] ? __pfx_kthread+0x10/0x10 [ 255.095374][ T8862] ret_from_fork_asm+0x1a/0x30 [ 255.096924][ T8862] [ 255.098632][ T8862] Kernel Offset: disabled [ 255.100083][ T8862] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:17:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000331865 RBX=0000000000000000 RCX=ffffffff8b69a3e9 RDX=0000000000000000 RSI=ffffffff8dbde65f RDI=ffffffff8bf48c60 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90854c10 R15=0000000000000000 RIP=ffffffff8b698c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7405238 CR3=0000000021b95000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005601e03d6c50 00005601e03d6c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff44b56350 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2053534249207765 6e20676e69746165 7243203a316e616c 77205d3238383854 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746361706d692064 6c756f6320686369 6877203272657961 6c206e6f20646574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e656d6761726620 6562206c6c697720 656361667265746e 6920736968742072 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65766f20676e696f 67207374656b6361 50202e7374656b63 6170207664612d6e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616d74616220666f 2074726f70736e61 7274206568742065 6c646e6168206f74 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000008017cb RBX=0000000000000001 RCX=ffffffff8b69a3e9 RDX=0000000000000000 RSI=ffffffff8dbde65f RDI=ffffffff8bf48c60 RBP=ffffed1003b57488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed10056665bd R10=ffff88802b332deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801daba440 R14=ffffffff90854c10 R15=0000000000000000 RIP=ffffffff8b698c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffd24f3c CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854c5bf5 RDI=ffffffff9ade4c80 RBP=ffffffff9ade4c40 RSP=ffffc9000ef1f030 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000036383854 R12=0000000000000000 R13=000000000000005b R14=ffffffff9ade4c40 R15=ffffffff854c5b90 RIP=ffffffff854c5c1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055580d7c4680 CR3=0000000022b41000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=000000000ffe0000 Opmask02=000000000fffffff Opmask03=0000000020400004 Opmask04=00000000ffffdfff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055580d6ed630 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055580d704b50 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efff7ff1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c431d1c1a141601 5c43000611171d5c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 682f6d697377685f 313132303863616d 2f6c617574726976 2f73656369766564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000009011 000055580d707790 000055580d720000 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000256e81 RBX=0000000000000003 RCX=ffffffff8b69a3e9 RDX=0000000000000000 RSI=ffffffff8dbde65f RDI=ffffffff8bf48c60 RBP=ffffed1003b5a000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056a65bd R10=ffff88802b532deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801dad0000 R14=ffffffff90854c10 R15=0000000000000000 RIP=ffffffff8b698c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ae7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055580d753e00 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000000003 Opmask02=00000000ffff7fdf Opmask03=0000000020400004 Opmask04=00000000ffffdfff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055580d6fd930 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055580d6f14d0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c431d1c1a141601 5c43000611171d5c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00306963682f6874 6f6f7465756c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 682f6d697377685f 313132303863616d 2f6c617574726976 2f73656369766564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000009011 000055580d707790 000055580d720000 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000