last executing test programs: 2m15.720444393s ago: executing program 1 (id=1967): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c00000010001fff000000fffe00000000000000", @ANYRES32=0x0, @ANYBLOB="00120000009404006c0012800b00010062726964676500005c0002800c001e00000000000000000005002a00ff0000000500260001000000050019000000000008001a00d80300000c001f0000000000000000000500240000000000050024000100000008001a0007000000050007000700000008000a00", @ANYRES32=r2], 0x9c}}, 0x40) 2m15.633763953s ago: executing program 1 (id=1970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0xf8, 0x3, 0x7ffffeff, 0xa, 0x1b, "1012a2c2e0d99745e394509d287560250d00"}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000040)=0xa) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c000180080001406401016894891907652c6b2008a599c33400060004404e20000005000700840000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x8850) 2m15.533406101s ago: executing program 1 (id=1972): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0x4aa}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {{@in=@local, 0x80, 0x32}, 0x0, @in6=@empty, 0x3506, 0x2, 0x0, 0x8, 0xfffffffd}}, 0xe8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010030bd701004000000050000004000010005000000080009000200000008000b000000000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 2m15.442405831s ago: executing program 1 (id=1974): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$cachefiles(0xffffff9c, 0x0, 0x90200, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x2001c800}, 0x24000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x40800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r2 = syz_io_uring_setup(0x1e20, &(0x7f0000000200)={0x0, 0x86f4, 0x10100}, &(0x7f00000005c0)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x10, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207d9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000000000000b70000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(&(0x7f0000000140)='./bus\x00') getuid() mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs/file0\x00', &(0x7f0000000240), 0x1000800, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f1d64", @ANYBLOB]) r6 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x600, 0x0, {{0x1, 0x2, 0x1000000000005, 0x7, 0x3, 0x1, {0x400000080001, 0xfc, 0x20ff, 0x8, 0xe, 0xd614, 0x9, 0x3, 0xfffffffe, 0x8000, 0x4, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m14.50081913s ago: executing program 1 (id=1977): r0 = syz_open_dev$sndpcmp(&(0x7f0000000740), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc25c4111, &(0x7f0000000780)={0x3, [[0x9, 0xeb38, 0x9, 0x16, 0x3b33, 0x200, 0xb270], [0x1, 0x5, 0x9, 0x80000000, 0x9, 0xc, 0x2], [0x2, 0x2c, 0x4, 0x9, 0x1, 0xb, 0x7f]], '\x00', [{0x3, 0x8}, {0x5, 0xfffffff3}, {0x9, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x3, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x10, 0x0, 0x1, 0x1}, {0x9, 0x6, 0x1, 0x0, 0x1}, {0x2000000, 0x9, 0x0, 0x0, 0x1}, {0x8, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x401, 0x1, 0x1, 0x1}, {0x2, 0x791, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x1000, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x7, 0x1, 0x1, 0x0, 0x1}], '\x00', 0x9e}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') pread64(r4, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8) ioctl$USBDEVFS_BULK(r4, 0xc0105502, &(0x7f00000004c0)={{{0x9, 0x1}}, 0xf5, 0x6, &(0x7f0000000380)="787e7abfd6519e19267835b7f36b0654d9864ed74c3b9cc36b7dbc9a5996b62cb6d31f15e42eb5b409b507c0262cc581765549b7bc1dd7806d4736ded50388114c6391005000306d7cc6eb705fae367d10a820f2666b5daaefdfb2b16486ad0d900e41cde3feb950454add2d806567c97a550883a3cb5b46bb75a42a5f5c68a84fb118784f61e614f34d658456ab186d7fe868298d0f17b917d6f5813aa0bb5cd942b182c5dbd59a0a1e6fd03414c601b0a19748988391bd402b8d850c1605bef2a1a817f32e4d3a7652d4a3673b0b8f08d7dae8adf897b096c0dbc0067746fe0a13b7a9b4a5d30d19379cbd506a73d1cbac9ed6b3"}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@newtclass={0x74, 0x28, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x9, 0x9}, {0x8, 0xffe0}, {0xb, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x91, 0x1}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3}}}, @tclass_kind_options=@c_prio={0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x884}, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) fsetxattr$security_ima(r6, &(0x7f0000000080), &(0x7f0000000100)=@ng={0x4, 0x7}, 0x2, 0x1) ioctl$BTRFS_IOC_GET_FEATURES(r6, 0x80189439, &(0x7f00000000c0)) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) socket(0x1, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r8 = dup(r7) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0xfefff000}) 2m13.773504434s ago: executing program 1 (id=1979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x0) 2m13.673438587s ago: executing program 32 (id=1979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x0) 54.795445395s ago: executing program 3 (id=2479): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) syz_open_pts(r0, 0x141601) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000200001000001000008000500", @ANYRES32=r6], 0x50}}, 0x2) 54.712512804s ago: executing program 3 (id=2483): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0xc2, &(0x7f0000001700)=""/194, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004a00)={0x2020}, 0x2020) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000700)=""/196, 0xc4}], 0x2, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'macvlan0\x00'}) socket(0x1, 0x3, 0x6a) socket$netlink(0x10, 0x3, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[], 0x6c}}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x6) getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) listen(r5, 0x0) recvfrom(r5, &(0x7f00000000c0)=""/140, 0x8c, 0x10000, 0x0, 0x0) 53.716966978s ago: executing program 3 (id=2491): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmmsg$inet6(r0, &(0x7f00000008c0), 0x0, 0x408c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0xb5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0xd75) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={0xffffffffffffffff, 0x0}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f00000003c0)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000}, 0x50) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 53.442751122s ago: executing program 3 (id=2495): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0xf8, 0x30, 0x400, 0x0, 0x0, {}, [{0xe4, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x9c, 0xb, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x63, 0x6, "4fe57f129a3eb13490ddb0e46f5723257acd55be930a7977fd1504063c1c16cb773ddeb43ae0bf473cf76ccde2dd16131b78b81c8c4e1758ac894ced7d2c0f23fd25777533b2bfad78ea342c80a9a267d7afaf9eec44175d809854fd6f3c26"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) rt_sigsuspend(0x0, 0x0) r1 = getpid() r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x2c}}, 0x20000084) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) syz_emit_ethernet(0x82, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) 52.432626982s ago: executing program 3 (id=2510): r0 = syz_open_dev$sndpcmp(&(0x7f0000000740), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc25c4111, &(0x7f0000000780)={0x3, [[0x9, 0xeb38, 0x9, 0x16, 0x3b33, 0x200, 0xb270], [0x1, 0x5, 0x9, 0x80000000, 0x9, 0xc, 0x2], [0x2, 0x2c, 0x4, 0x9, 0x1, 0xb, 0x7f]], '\x00', [{0x3, 0x8}, {0x5, 0xfffffff3}, {0x9, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x3, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x10, 0x0, 0x1, 0x1}, {0x9, 0x6, 0x1, 0x0, 0x1}, {0x0, 0x9, 0x0, 0x0, 0x1}, {0x8, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x401, 0x1, 0x1, 0x1}, {0x2, 0x791, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x1000, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x7, 0x1, 0x1, 0x0, 0x1}], '\x00', 0x9e, 0x0, 0x0, 0x0, 0x2000000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') pread64(r4, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8) ioctl$USBDEVFS_BULK(r4, 0xc0105502, &(0x7f00000004c0)={{{0x9, 0x1}}, 0xf5, 0x6, &(0x7f0000000380)="787e7abfd6519e19267835b7f36b0654d9864ed74c3b9cc36b7dbc9a5996b62cb6d31f15e42eb5b409b507c0262cc581765549b7bc1dd7806d4736ded50388114c6391005000306d7cc6eb705fae367d10a820f2666b5daaefdfb2b16486ad0d900e41cde3feb950454add2d806567c97a550883a3cb5b46bb75a42a5f5c68a84fb118784f61e614f34d658456ab186d7fe868298d0f17b917d6f5813aa0bb5cd942b182c5dbd59a0a1e6fd03414c601b0a19748988391bd402b8d850c1605bef2a1a817f32e4d3a7652d4a3673b0b8f08d7dae8adf897b096c0dbc0067746fe0a13b7a9b4a5d30d19379cbd506a73d1cbac9ed6b3"}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@newtclass={0x74, 0x28, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x9, 0x9}, {0x8, 0xffe0}, {0xb, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x91, 0x1}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3}}}, @tclass_kind_options=@c_prio={0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x884}, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) fsetxattr$security_ima(r6, &(0x7f0000000080), &(0x7f0000000100)=@ng={0x4, 0x7}, 0x2, 0x1) ioctl$BTRFS_IOC_GET_FEATURES(r6, 0x80189439, &(0x7f00000000c0)) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) socket(0x1, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r8 = dup(r7) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0xfefff000}) 52.362589981s ago: executing program 3 (id=2511): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x56, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a8fdff8100000086000076cd8a00180086f91e97b79a18425264b69d62d9f50020bdefbd6c010000000000000000000000000400fe800000000000000000000000000000000200000000000007"], 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(r2, 0x0, r3, 0x0, 0x10000000000016, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) bpf$MAP_CREATE(0x0, 0x0, 0x0) sync() socket$packet(0x11, 0x3, 0x300) r4 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x20000023896) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) 36.921822458s ago: executing program 33 (id=2511): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x56, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a8fdff8100000086000076cd8a00180086f91e97b79a18425264b69d62d9f50020bdefbd6c010000000000000000000000000400fe800000000000000000000000000000000200000000000007"], 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(r2, 0x0, r3, 0x0, 0x10000000000016, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) bpf$MAP_CREATE(0x0, 0x0, 0x0) sync() socket$packet(0x11, 0x3, 0x300) r4 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x20000023896) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) 3.702291485s ago: executing program 4 (id=2831): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 3.627303263s ago: executing program 2 (id=2832): sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000000b010900000000000000000700000a070001000000000008"], 0x24}}, 0x8010) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0x6f15bd2, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) mount(0x0, 0x0, 0x0, 0x1012000, &(0x7f0000000840)='/dev/media#\x00') creat(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e", 0x21}], 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB="000000004000000000000000000000f100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) 3.623632837s ago: executing program 4 (id=2833): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x2f}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x1006, 0x3}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[]) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0) fchown(r4, 0xee01, 0x0) 2.884234422s ago: executing program 4 (id=2834): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltaction={0x18, 0x31, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2004c801}, 0x4000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) sendto$inet6(r1, &(0x7f0000000140)="8f69", 0x2, 0x810, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0xb9eb0eb005d40dc0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000040000001800000042a0000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r3, 0x0, 0x0}, 0x20) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0205710, &(0x7f00000004c0)={0x0, 0xff, 0x10, 0x0, 0x3}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000200)=0x20022, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000), 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x208a22, 0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 2.269975194s ago: executing program 0 (id=2836): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010000000000f0ffff0007", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 2.22008866s ago: executing program 2 (id=2837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf250f0000002c0007800c"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x29456992}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d0300"], 0x40}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040015}, 0x40040) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x3c, r1, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x3c}}, 0x0) 2.219682832s ago: executing program 0 (id=2838): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltaction={0x18, 0x31, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2004c801}, 0x4000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) sendto$inet6(r1, &(0x7f0000000140)="8f69", 0x2, 0x810, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0xb9eb0eb005d40dc0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x403, r2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="07000000040000001800000042a0000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000004a6dcc9e7d21839995ae8cd91d7946e8000000000000a14d47b5b359f105feeefe0f414af3b6f844bacd4608b0b8471eb74438f611d6ae61f8f1ebac79ba9fb8438b19a94b10f7ab55d0f176831ddb3336ea66386f7738399f62e550ef7fa1bfe7837cadf363e5aedc0b16b7fb5eeaef15cabcf588abe603846cd101e592f40b5e42df6e371197c81c4d4d214fc4841c20a8c4265b0212143ff5fb0d401d13dfc54b2be5d36a3096304303bd4e0ebf219646a47a30d2001575d1857a104caf703184ee627246a2adb79d8ae3ae7b7be084dacff0bd550c"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r4, 0x0, 0x0}, 0x20) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000200)=0x20022, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000), 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x1}, 0x2) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x208a22, 0x4) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600"}) 1.92557615s ago: executing program 2 (id=2839): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1100000008001a0004000000b47c00ea20000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e00ff00b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 1.90536895s ago: executing program 4 (id=2840): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfff8, 0x5000000}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.884086565s ago: executing program 4 (id=2841): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={r1, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) readv(0xffffffffffffffff, &(0x7f0000001240), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) listen(0xffffffffffffffff, 0x3) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e00000001000000010000800000000008400400", @ANYRES32, @ANYBLOB="0104000000007e820000001fbab2000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000020000000700"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000002000000000010002100008018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, 0x0) r7 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.822250289s ago: executing program 2 (id=2842): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643dc21789226edffb5888b818909a2ceb01792eafa2b93233c0ff84a5e721804caa17c83d1ae3e5ac515f5348239b3a76b64fc6d5f3a7acb15cd933017cee485ec731ddb324fc1293778dce3edd413c02b3a008e4f08b12d8ade7dcbdaf309faee67b965aeedce5a46ffda4da8c5dd6a3fb4169ac435d3867af2e2ff4328b08e9100246972a7eb57503131ead1c17649cc2e5fa0e776bf50c5a074652feb2452f040d7f167bb4c6015371ec96ec61d59692", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc044560f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x5885, 0x0, 0x1, 0x2d8}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0xe0ff, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, 0x0, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r0, 0x800000000000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 1.481685772s ago: executing program 0 (id=2843): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) pipe(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) (async) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) pipe(0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, 0x0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) (async) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) (async) 1.201609069s ago: executing program 0 (id=2844): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) syz_open_dev$sg(0x0, 0x0, 0x5) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (rerun: 64) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r4, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a5e77a68e174f000300ffffffffff0fe200"}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) (async) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b0001006261746164760000", @ANYRES32], 0x3c}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_clone(0x2000211, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 697.170364ms ago: executing program 4 (id=2848): prctl$PR_MCE_KILL(0x21, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) prlimit64(0x0, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 341.392447ms ago: executing program 5 (id=2849): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@call={0x85, 0x0, 0x0, 0x85}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x100000, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21) 315.175113ms ago: executing program 2 (id=2850): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x12000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x42, 0x0, 0x20000810}, 0x8000) 313.826837ms ago: executing program 5 (id=2851): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) syz_open_pts(r0, 0x141601) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001fffe01000008000500", @ANYRES32=r6], 0x50}}, 0x2) 172.453883ms ago: executing program 5 (id=2852): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 172.086086ms ago: executing program 0 (id=2853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0x6, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000030001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 171.697723ms ago: executing program 5 (id=2854): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0xb, 0x0, 0x11c3adec}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x14) syz_io_uring_setup(0x70ca, 0x0, 0x0, &(0x7f00000007c0)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x12, 0x4000ffc, 0x54}, 0x2c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c000400140001000a000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) 91.271888ms ago: executing program 5 (id=2855): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1100000008001a0004000000b47c00ea20000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e07ff00b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 90.983299ms ago: executing program 2 (id=2856): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgid(0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) sched_setscheduler(0x0, 0x0, &(0x7f0000000280)=0x19a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) pread64(0xffffffffffffffff, 0x0, 0x0, 0x6) open(&(0x7f00000003c0)='./bus\x00', 0x220000, 0x10) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40086410, &(0x7f0000000300)={0x9, &(0x7f00000001c0)="8be9656f814a4d2440"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000440)='./file1/file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./bus\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r5, @ANYBLOB="100006000000000020"], 0x54, 0x1) 1.940673ms ago: executing program 5 (id=2857): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x79, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000000000001500000000000000000200"/108], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000fdffffffffffffff00000000000000000000000a0000008700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000fbfffffffffffffffdffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000001"], 0xb8}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb261a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4d8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c952197b0a508c0e16fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d6"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r9, &(0x7f0000000000)=0x10000000000700, 0xfffffd65) syz_emit_ethernet(0x39d, &(0x7f0000001480)={@random="95bbbcaa87cd", @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x367, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[@srh={0x4c72341d8794356, 0x2, 0x4, 0x1, 0x40, 0x40, 0x100, [@remote]}, @dstopts={0x32, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}]}, @srh={0x67, 0x6, 0x4, 0x3, 0x5, 0x0, 0xfff, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, @remote]}], @pkt_toobig={0x2, 0x0, 0x0, 0x1, {0x6, 0x6, "94683d", 0xec1a, 0x4, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, [@hopopts={0x4, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x6}]}, @routing={0x67, 0xc, 0x0, 0x5, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, @local, @mcast1, @local]}, @srh={0x0, 0x6, 0x4, 0x3, 0x1, 0x30, 0xf04, [@mcast1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @routing={0x3b, 0x8, 0x2, 0xa, 0x0, [@mcast1, @empty, @mcast1, @mcast2]}, @fragment={0x2e, 0x0, 0x6, 0x0, 0x0, 0x3, 0x68}, @routing={0x0, 0xa, 0x1, 0x9, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2]}, @dstopts={0x8baf906260a4da34, 0x16, '\x00', [@hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x4}, @generic={0x1, 0x7d, "a124e2b4fcbb22e6cf78333696594eadb2f58766462bcdad24762059dedc5ee175bbd1a28f9ee88e0567b25cd04e254fe393de6924fb517ba2165723cb684c6e73c8d15fb810bb3c8017d6cfd084e0f0e2779db1b6fd93f16e54f6019f2fce82c5070bc94494a3ec189c91eebd25df2b0a39af626c44a2ef63231783d7"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1a}}, @ra={0x5, 0x2, 0x5}, @pad1]}], "19c6e9f77e1ef908b6b6a4eb23ee9545052a5df6c1388a1b2c1f8f5c604b027294086789aaff4cbc47d201aed8ec0b74df7532c37f9cafd8e64291cf0ecb03766287c693049c9fdf2683d35440ef6fd17f9253c766ff73ee0281fe23444942c2efbc45589b4d983180ad8514d8033fc26412ab60b80b363e734d63518018ecac0f0be58521f5b3f7f6851853a3cc9e2a6004c96ad268c51ccc56ea0736868cb022c121be35bc929b62e2e3a1733ea24ac22348466666c29507379d28415580"}}}}}}}, 0x0) 0s ago: executing program 0 (id=2858): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd70000000000008003f0008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) kernel console output (not intermixed with test programs): registering): Released all slaves [ 385.226927][T12874] bond9 (unregistering): Released all slaves [ 385.267031][T13476] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.269568][T13476] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.272061][T13476] bridge_slave_0: entered allmulticast mode [ 385.274944][T13476] bridge_slave_0: entered promiscuous mode [ 385.278273][T13476] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.282874][T13476] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.285975][T13476] bridge_slave_1: entered allmulticast mode [ 385.288858][T13476] bridge_slave_1: entered promiscuous mode [ 385.354666][T13520] FAULT_INJECTION: forcing a failure. [ 385.354666][T13520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.361785][T13520] CPU: 3 UID: 0 PID: 13520 Comm: syz.4.2216 Not tainted syzkaller #0 PREEMPT(full) [ 385.361812][T13520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 385.361823][T13520] Call Trace: [ 385.361831][T13520] [ 385.361839][T13520] dump_stack_lvl+0x16c/0x1f0 [ 385.361867][T13520] should_fail_ex+0x512/0x640 [ 385.361899][T13520] _copy_to_user+0x32/0xd0 [ 385.361930][T13520] simple_read_from_buffer+0xcb/0x170 [ 385.361963][T13520] proc_fail_nth_read+0x197/0x240 [ 385.361985][T13520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 385.362008][T13520] ? rw_verify_area+0xcf/0x6c0 [ 385.362026][T13520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 385.362045][T13520] vfs_read+0x1e4/0xcf0 [ 385.362069][T13520] ? __pfx_vfs_read+0x10/0x10 [ 385.362085][T13520] ? find_held_lock+0x2b/0x80 [ 385.362113][T13520] ? __fget_files+0x20e/0x3c0 [ 385.362141][T13520] ksys_read+0x12a/0x250 [ 385.362159][T13520] ? __pfx_ksys_read+0x10/0x10 [ 385.362180][T13520] ? rcu_is_watching+0x12/0xc0 [ 385.362204][T13520] __do_fast_syscall_32+0x7c/0x300 [ 385.362232][T13520] do_fast_syscall_32+0x32/0x80 [ 385.362256][T13520] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 385.362280][T13520] RIP: 0023:0xf70dd579 [ 385.362295][T13520] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 385.362315][T13520] RSP: 002b:00000000f54cd590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 385.362334][T13520] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54cd620 [ 385.362346][T13520] RDX: 000000000000000f RSI: 00000000f7476ff4 RDI: 0000000000000000 [ 385.362359][T13520] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 385.362370][T13520] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 385.362382][T13520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 385.362410][T13520] [ 385.492998][T13476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.497656][T13476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.543857][ T5354] Dev loop4: unable to read RDB block 7 [ 385.545753][ T5354] loop4: unable to read partition table [ 385.547863][ T5354] loop4: partition table beyond EOD, truncated [ 385.550312][T13524] netlink: 'syz.3.2219': attribute type 4 has an invalid length. [ 385.550334][T13524] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2219'. [ 385.578082][ T5354] Dev loop4: unable to read RDB block 7 [ 385.580103][ T5354] loop4: unable to read partition table [ 385.582026][ T5354] loop4: partition table beyond EOD, truncated [ 385.597618][T13476] team0: Port device team_slave_0 added [ 385.604765][T13526] vlan2: entered promiscuous mode [ 385.607524][T13526] vlan2: entered allmulticast mode [ 385.611110][T13526] hsr_slave_1: entered allmulticast mode [ 385.615749][T13476] team0: Port device team_slave_1 added [ 385.646064][ T5354] Dev loop4: unable to read RDB block 7 [ 385.648156][ T5354] loop4: unable to read partition table [ 385.650979][ T5354] loop4: partition table beyond EOD, truncated [ 385.671625][T13532] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2221'. [ 385.702479][T13476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.705361][T13476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.715864][T13476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.721427][T13476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.723956][T13476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.735040][T13476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.743355][ T5354] Dev loop4: unable to read RDB block 7 [ 385.745435][ T5354] loop4: unable to read partition table [ 385.747637][ T5354] loop4: partition table beyond EOD, truncated [ 385.789937][ T6029] usb usb44-port1: attempt power cycle [ 385.868268][T13476] hsr_slave_0: entered promiscuous mode [ 385.871949][T13476] hsr_slave_1: entered promiscuous mode [ 385.874649][T13476] debugfs: 'hsr0' already exists in 'hsr' [ 385.876542][T13476] Cannot create hsr debugfs directory [ 386.129441][ T34] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 386.275187][ T34] usb 9-1: device descriptor read/64, error -71 [ 386.380084][ T6029] usb usb44-port1: unable to enumerate USB device [ 386.387665][T13561] rdma_rxe: rxe_newlink: failed to add syz_tun [ 386.529918][ T34] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 386.629176][T13570] syzkaller0: entered promiscuous mode [ 386.631848][T13570] syzkaller0: entered allmulticast mode [ 386.660124][T13570] tipc: Enabled bearer , priority 0 [ 386.664055][T13569] tipc: Resetting bearer [ 386.674482][T13569] tipc: Disabling bearer [ 386.679544][ T34] usb 9-1: device descriptor read/64, error -71 [ 386.692784][T13476] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 386.700314][T13476] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 386.712321][T13476] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 386.716535][T13476] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 386.758211][T13476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.771117][T13476] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.776817][T12872] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.780037][T12872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.787666][T12877] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.790831][T12877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.799938][ T34] usb usb9-port1: attempt power cycle [ 386.949692][ T64] Bluetooth: hci2: command tx timeout [ 386.954344][T13476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.978518][T13476] veth0_vlan: entered promiscuous mode [ 386.984038][T13476] veth1_vlan: entered promiscuous mode [ 387.001264][T13476] veth0_macvtap: entered promiscuous mode [ 387.007117][T13476] veth1_macvtap: entered promiscuous mode [ 387.017540][T13476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.026810][T13476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.035544][T12877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.038711][T12877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.042833][T12877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.046804][T12877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.086447][T12871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.091068][T12871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.107605][T12875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.112590][T12875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.149574][ T34] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 387.179988][ T34] usb 9-1: device descriptor read/8, error -71 [ 387.211259][T12874] tipc: Disabling bearer [ 387.215908][T12874] tipc: Left network mode [ 387.429438][ T34] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 387.469407][ T34] usb 9-1: device descriptor read/8, error -71 [ 387.528396][T12874] hsr_slave_0: left promiscuous mode [ 387.539545][T12874] hsr_slave_1: left promiscuous mode [ 387.544265][T12874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.548337][T12874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.579500][ T34] usb usb9-port1: unable to enumerate USB device [ 387.717711][T12875] smc: removing ib device syz2 [ 388.312198][T12874] team0 (unregistering): Port device team_slave_1 removed [ 388.402008][T12874] team0 (unregistering): Port device team_slave_0 removed [ 388.827643][ T5354] Dev loop4: unable to read RDB block 7 [ 388.833286][ T5354] loop4: unable to read partition table [ 388.845154][ T5354] loop4: partition table beyond EOD, truncated [ 389.035175][ T64] Bluetooth: hci2: command tx timeout [ 389.424932][T13635] tipc: Enabling of bearer rejected, already enabled [ 389.722669][ T5354] Dev loop4: unable to read RDB block 7 [ 389.724833][ T5354] loop4: unable to read partition table [ 389.727067][ T5354] loop4: partition table beyond EOD, truncated [ 389.852795][T13666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2246'. [ 390.165860][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 390.165877][ T40] audit: type=1326 audit(390.049:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.4.2243" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x0 [ 391.109551][ T64] Bluetooth: hci2: command tx timeout [ 391.403630][T13701] comedi comedi0: Minor 5 could not be opened [ 392.800314][ T5354] Dev loop4: unable to read RDB block 7 [ 392.803598][ T5354] loop4: unable to read partition table [ 392.807072][ T5354] loop4: partition table beyond EOD, truncated [ 392.855815][T13706] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 392.915753][ T5354] Dev loop4: unable to read RDB block 7 [ 392.918066][ T5354] loop4: unable to read partition table [ 392.923777][ T5354] loop4: partition table beyond EOD, truncated [ 393.089781][T13719] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2259'. [ 393.323467][T13719] syz.4.2259 (13719): drop_caches: 2 [ 393.927086][ T5354] Dev loop4: unable to read RDB block 7 [ 393.929713][ T5354] loop4: unable to read partition table [ 393.932269][ T5354] loop4: partition table beyond EOD, truncated [ 393.993856][T13733] tipc: Started in network mode [ 393.996091][T13733] tipc: Node identity ac1414aa, cluster identity 4711 [ 394.005726][T13733] tipc: Enabled bearer , priority 10 [ 394.087054][ T5354] Dev loop4: unable to read RDB block 7 [ 394.090266][ T5354] loop4: unable to read partition table [ 394.092917][ T5354] loop4: partition table beyond EOD, truncated [ 394.150546][ T5354] Dev loop4: unable to read RDB block 7 [ 394.152433][ T5354] loop4: unable to read partition table [ 394.154763][ T5354] loop4: partition table beyond EOD, truncated [ 394.294480][T13740] 9pnet_fd: Insufficient options for proto=fd [ 394.304545][T13740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.520798][T13742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2269'. [ 394.526542][T13742] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2269'. [ 394.536642][T13742] batadv1: entered allmulticast mode [ 394.945215][T13760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2276'. [ 395.038214][T13760] bond1: entered allmulticast mode [ 395.041286][T13760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.219733][ T34] tipc: Node number set to 2886997162 [ 395.244015][ T5354] Dev loop4: unable to read RDB block 7 [ 395.271226][ T5354] loop4: unable to read partition table [ 395.273843][ T5354] loop4: partition table beyond EOD, truncated [ 395.350805][ T5354] Dev loop4: unable to read RDB block 7 [ 395.353092][ T5354] loop4: unable to read partition table [ 395.355076][ T5354] loop4: partition table beyond EOD, truncated [ 395.391563][T13778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2282'. [ 396.573276][T13814] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 397.413632][T13829] netlink: 'syz.3.2301': attribute type 11 has an invalid length. [ 397.417854][T13829] netlink: 'syz.3.2301': attribute type 11 has an invalid length. [ 397.420514][T13829] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2301'. [ 397.649438][ T34] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 397.672558][T13855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2308'. [ 397.712085][T13858] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2309'. [ 397.799453][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 397.803603][ T34] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.807425][ T34] usb 9-1: config 0 has no interfaces? [ 397.809241][ T34] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 397.813948][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.818106][ T34] usb 9-1: config 0 descriptor?? [ 398.668219][T13878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2314'. [ 399.050023][T13897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 399.052936][T13902] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2321'. [ 399.053767][T13897] bond0: (slave bond2): Enslaving as an active interface with an up link [ 399.217135][T13902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.223922][T13902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.230036][T13902] bond0 (unregistering): (slave bond2): Releasing backup interface [ 399.234700][T13902] bond0 (unregistering): Released all slaves [ 399.436342][ T40] audit: type=1326 audit(399.319:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 399.446179][ T40] audit: type=1326 audit(399.319:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 399.455556][ T40] audit: type=1326 audit(399.319:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2323" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 399.465513][ T40] audit: type=1326 audit(399.319:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 399.474858][ T40] audit: type=1326 audit(399.319:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 399.484113][ T40] audit: type=1326 audit(399.319:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2323" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 399.493255][ T40] audit: type=1326 audit(399.319:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2323" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 399.502494][ T40] audit: type=1326 audit(399.319:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2323" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 399.511298][ T40] audit: type=1326 audit(399.319:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2323" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 399.520231][ T40] audit: type=1326 audit(399.319:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13905 comm="syz.2.2323" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 399.723204][T13915] batman_adv: batadv0: Adding interface: dummy0 [ 399.725955][T13915] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.738616][T13915] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 400.067582][T13927] tipc: Enabling of bearer rejected, already enabled [ 400.225577][T13942] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2337'. [ 400.261819][T13948] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2340'. [ 400.271195][T13950] xt_TCPMSS: Only works on TCP SYN packets [ 400.284466][T13952] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2340'. [ 400.308284][T13956] netlink: 'syz.0.2341': attribute type 4 has an invalid length. [ 400.312059][T13956] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2341'. [ 400.352216][T13960] netlink: 'syz.2.2343': attribute type 1 has an invalid length. [ 400.366825][T13960] bond0: entered promiscuous mode [ 400.368568][T13960] bond0: entered allmulticast mode [ 400.375484][T13960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2343'. [ 400.383356][T13960] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 400.388694][T13960] bond0: (slave bridge1): making interface the new active one [ 400.392215][T13960] bridge1: entered promiscuous mode [ 400.394412][T13960] bridge1: entered allmulticast mode [ 400.397287][T13960] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 400.434261][ T1024] usb 9-1: USB disconnect, device number 15 [ 400.504615][T13979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2350'. [ 400.837833][T13982] syzkaller1: entered promiscuous mode [ 400.839828][T13982] syzkaller1: entered allmulticast mode [ 400.865298][T13982] program syz.2.2346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.401750][ T1168] block nbd0: Possible stuck request ffff8880258b0000: control (read@0,1024B). Runtime 90 seconds [ 402.406285][ T1168] block nbd0: Possible stuck request ffff8880258b01c0: control (read@1024,1024B). Runtime 90 seconds [ 402.416828][ T1168] block nbd0: Possible stuck request ffff8880258b0380: control (read@2048,1024B). Runtime 90 seconds [ 402.420819][ T1168] block nbd0: Possible stuck request ffff8880258b0540: control (read@3072,1024B). Runtime 90 seconds [ 402.809505][ T1024] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 402.949243][T14015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2358'. [ 402.960893][ T1024] usb 9-1: config 160 has an invalid interface number: 200 but max is 0 [ 402.964093][ T1024] usb 9-1: config 160 has no interface number 0 [ 402.966276][ T1024] usb 9-1: config 160 interface 200 has no altsetting 0 [ 403.000203][ T1024] usb 9-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 403.003484][ T1024] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.006064][ T1024] usb 9-1: Product: syz [ 403.007441][ T1024] usb 9-1: Manufacturer: syz [ 403.008965][ T1024] usb 9-1: SerialNumber: syz [ 403.037718][T14019] 8021q: adding VLAN 0 to HW filter on device bond3 [ 403.044607][T14019] bond0: (slave bond3): Enslaving as an active interface with a down link [ 403.050905][T14019] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2359'. [ 403.293784][T14028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2360'. [ 403.598168][T14033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.613292][T14047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2366'. [ 404.643380][T14047] batadv1: entered allmulticast mode [ 404.654247][T14048] block device autoloading is deprecated and will be removed. [ 404.654376][T14050] netlink: 'syz.2.2368': attribute type 4 has an invalid length. [ 405.155870][ T1024] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 405.158350][ T1024] usb 9-1: MIDIStreaming interface descriptor not found [ 405.226759][ T1024] usb 9-1: USB disconnect, device number 16 [ 405.254821][T14065] netlink: 'syz.4.2372': attribute type 1 has an invalid length. [ 405.266131][T14065] bond0: entered promiscuous mode [ 405.267852][T14065] bond0: entered allmulticast mode [ 405.273318][T14065] __nla_validate_parse: 3 callbacks suppressed [ 405.273346][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2372'. [ 405.282098][T14065] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 405.287852][T14065] bond0: (slave bridge1): making interface the new active one [ 405.292667][T14065] bridge1: entered promiscuous mode [ 405.294532][T14065] bridge1: entered allmulticast mode [ 405.298565][T14065] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 405.439935][T14070] netlink: 'syz.2.2371': attribute type 1 has an invalid length. [ 405.491694][T14070] 8021q: adding VLAN 0 to HW filter on device bond4 [ 406.290378][T14092] FAULT_INJECTION: forcing a failure. [ 406.290378][T14092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.295809][T14092] CPU: 2 UID: 0 PID: 14092 Comm: syz.2.2378 Not tainted syzkaller #0 PREEMPT(full) [ 406.295825][T14092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 406.295832][T14092] Call Trace: [ 406.295849][T14092] [ 406.295854][T14092] dump_stack_lvl+0x16c/0x1f0 [ 406.295873][T14092] should_fail_ex+0x512/0x640 [ 406.295892][T14092] _copy_from_user+0x2e/0xd0 [ 406.295911][T14092] get_compat_msghdr+0xa7/0x170 [ 406.295922][T14092] ? __pfx_get_compat_msghdr+0x10/0x10 [ 406.295938][T14092] ___sys_sendmsg+0x1ae/0x1d0 [ 406.295952][T14092] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.295969][T14092] ? find_held_lock+0x2b/0x80 [ 406.295991][T14092] __sys_sendmsg+0x16d/0x220 [ 406.296002][T14092] ? __pfx___sys_sendmsg+0x10/0x10 [ 406.296019][T14092] ? rcu_is_watching+0x12/0xc0 [ 406.296033][T14092] __do_fast_syscall_32+0x7c/0x300 [ 406.296050][T14092] do_fast_syscall_32+0x32/0x80 [ 406.296067][T14092] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 406.296086][T14092] RIP: 0023:0xf70ed579 [ 406.296098][T14092] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 406.296109][T14092] RSP: 002b:00000000f54bc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 406.296120][T14092] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000000 [ 406.296126][T14092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 406.296132][T14092] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 406.296141][T14092] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 406.296151][T14092] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 406.296173][T14092] [ 407.380935][ T5952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 407.387172][ T5952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 407.392054][ T5952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 407.395834][ T5952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 407.399247][ T5952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 407.814926][T12171] smc: removing ib device syz1 [ 407.835423][T14115] chnl_net:caif_netlink_parms(): no params data found [ 407.879455][T14125] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 407.882092][T14125] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 407.883486][T14111] openvswitch: netlink: Key type 98 is out of range max 32 [ 407.885280][T14125] vhci_hcd vhci_hcd.0: Device attached [ 407.915700][T14125] fuse: Unknown parameter '0x000000000000000f' [ 407.940641][T14127] vhci_hcd: connection closed [ 407.940832][T12875] vhci_hcd: stop threads [ 407.944338][T12875] vhci_hcd: release socket [ 407.946156][T12875] vhci_hcd: disconnect device [ 408.292524][T14115] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.295365][T14115] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.298101][T14115] bridge_slave_0: entered allmulticast mode [ 408.302378][T14115] bridge_slave_0: entered promiscuous mode [ 408.305898][T14115] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.308382][T14115] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.311474][T14115] bridge_slave_1: entered allmulticast mode [ 408.316081][T14115] bridge_slave_1: entered promiscuous mode [ 408.430750][T14139] rdma_rxe: rxe_newlink: failed to add syz_tun [ 408.528807][T14115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.554896][T14115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.623245][ T40] kauditd_printk_skb: 406 callbacks suppressed [ 408.623255][ T40] audit: type=1326 audit(408.509:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.0.2390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 408.635445][T14144] overlayfs: missing 'lowerdir' [ 408.649581][ T40] audit: type=1326 audit(408.519:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.0.2390" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 408.660962][ T40] audit: type=1326 audit(408.519:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.0.2390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 408.673654][ T40] audit: type=1326 audit(408.519:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.0.2390" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 408.676105][T14115] team0: Port device team_slave_0 added [ 408.682980][ T40] audit: type=1326 audit(408.519:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.0.2390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 408.683025][ T40] audit: type=1326 audit(408.519:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.0.2390" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 408.683064][ T40] audit: type=1326 audit(408.519:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.0.2390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 408.683103][ T40] audit: type=1326 audit(408.519:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.0.2390" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 408.683141][ T40] audit: type=1326 audit(408.529:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.0.2390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 408.717931][T14115] team0: Port device team_slave_1 added [ 408.728789][ T40] audit: type=1326 audit(408.529:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.0.2390" exe="/syz-executor" sig=0 arch=40000003 syscall=12 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 408.851118][T14115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.853587][T14115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.862178][T14115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.866707][T14115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.869138][T14115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.882334][T14115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.924778][T14115] hsr_slave_0: entered promiscuous mode [ 408.927326][T14115] hsr_slave_1: entered promiscuous mode [ 408.929733][T14115] debugfs: 'hsr0' already exists in 'hsr' [ 408.931760][T14115] Cannot create hsr debugfs directory [ 409.429665][ T64] Bluetooth: hci4: command tx timeout [ 409.445201][T12171] bond5 (unregistering): (slave gretap1): Releasing active interface [ 409.517163][T12171] bond4 (unregistering): (slave gre2): Releasing backup interface [ 409.521328][T12171] gre2 (unregistering): left promiscuous mode [ 409.663447][T12171] team0: Port device geneve0 removed [ 409.676926][T12171] bond1 (unregistering): (slave bridge1): Releasing active interface [ 409.740751][T12171] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 409.898262][T12171] bond8 (unregistering): (slave bridge3): Releasing active interface [ 409.901898][T12171] bridge3 (unregistering): left promiscuous mode [ 409.904069][T12171] bridge3 (unregistering): left allmulticast mode [ 410.004684][T14162] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 410.007536][T14162] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 410.010836][T14163] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 410.013748][T14163] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 410.017844][T14163] vhci_hcd vhci_hcd.0: Device attached [ 410.018795][T14162] vhci_hcd vhci_hcd.0: Device attached [ 410.024282][T14166] vhci_hcd: connection closed [ 410.024561][T12877] vhci_hcd: stop threads [ 410.025483][T14164] vhci_hcd: connection closed [ 410.026716][T12877] vhci_hcd: release socket [ 410.026733][T12877] vhci_hcd: disconnect device [ 410.035284][T12877] vhci_hcd: stop threads [ 410.037183][T12877] vhci_hcd: release socket [ 410.039194][T12877] vhci_hcd: disconnect device [ 410.114828][T12171] bond1 (unregistering): Released all slaves [ 410.210151][T12171] bond2 (unregistering): Released all slaves [ 410.314936][T12171] bond3 (unregistering): Released all slaves [ 410.327253][T12171] bond0 (unregistering): (slave bond6): Releasing active interface [ 410.332123][T12171] bond0 (unregistering): (slave bond7): Releasing active interface [ 410.335691][T12171] bond0 (unregistering): (slave bond10): Releasing active interface [ 410.339003][T12171] bond0 (unregistering): (slave bond11): Releasing active interface [ 410.342734][T12171] bond0 (unregistering): (slave bond12): Releasing active interface [ 410.345960][T12171] bond0 (unregistering): Released all slaves [ 410.441391][T12171] bond4 (unregistering): Released all slaves [ 410.452903][T12171] bond5 (unregistering): Released all slaves [ 410.553965][T12171] bond6 (unregistering): Released all slaves [ 410.634696][T14172] netlink: 'syz.0.2397': attribute type 1 has an invalid length. [ 410.655210][T12171] bond7 (unregistering): Released all slaves [ 410.663425][T12171] bond8 (unregistering): Released all slaves [ 410.673575][T12171] bond9 (unregistering): Released all slaves [ 410.686354][T14174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2397'. [ 410.780222][T12171] bond10 (unregistering): Released all slaves [ 410.872820][T12171] bond11 (unregistering): Released all slaves [ 410.968214][T12171] bond12 (unregistering): Released all slaves [ 411.013808][T14172] bond19: entered promiscuous mode [ 411.016096][T14172] bond19: entered allmulticast mode [ 411.023530][T14174] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 411.029687][T14174] bond19: (slave bridge4): making interface the new active one [ 411.032392][T14174] bridge4: entered promiscuous mode [ 411.034359][T14174] bridge4: entered allmulticast mode [ 411.036913][T14174] bond19: (slave bridge4): Enslaving as an active interface with an up link [ 411.258706][T14191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2401'. [ 411.306282][T14193] FAULT_INJECTION: forcing a failure. [ 411.306282][T14193] name failslab, interval 1, probability 0, space 0, times 0 [ 411.310555][T14193] CPU: 1 UID: 0 PID: 14193 Comm: syz.4.2402 Not tainted syzkaller #0 PREEMPT(full) [ 411.310570][T14193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 411.310576][T14193] Call Trace: [ 411.310580][T14193] [ 411.310585][T14193] dump_stack_lvl+0x16c/0x1f0 [ 411.310602][T14193] should_fail_ex+0x512/0x640 [ 411.310619][T14193] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 411.310632][T14193] should_failslab+0xc2/0x120 [ 411.310648][T14193] kmem_cache_alloc_node_noprof+0x78/0x770 [ 411.310670][T14193] ? __alloc_skb+0x2b2/0x380 [ 411.310693][T14193] ? __alloc_skb+0x2b2/0x380 [ 411.310708][T14193] ? __pfx_netlink_insert+0x10/0x10 [ 411.310718][T14193] __alloc_skb+0x2b2/0x380 [ 411.310735][T14193] ? __pfx___alloc_skb+0x10/0x10 [ 411.310751][T14193] ? netlink_autobind.isra.0+0x158/0x370 [ 411.310767][T14193] netlink_alloc_large_skb+0x69/0x140 [ 411.310779][T14193] netlink_sendmsg+0x698/0xdd0 [ 411.310793][T14193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.310807][T14193] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 411.310825][T14193] ____sys_sendmsg+0xa98/0xc70 [ 411.310840][T14193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.310853][T14193] ? get_compat_msghdr+0x11a/0x170 [ 411.310870][T14193] ___sys_sendmsg+0x134/0x1d0 [ 411.310881][T14193] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.310898][T14193] ? find_held_lock+0x2b/0x80 [ 411.310919][T14193] __sys_sendmsg+0x16d/0x220 [ 411.310930][T14193] ? __pfx___sys_sendmsg+0x10/0x10 [ 411.310947][T14193] ? rcu_is_watching+0x12/0xc0 [ 411.310961][T14193] __do_fast_syscall_32+0x7c/0x300 [ 411.310976][T14193] do_fast_syscall_32+0x32/0x80 [ 411.310990][T14193] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.311005][T14193] RIP: 0023:0xf70dd579 [ 411.311014][T14193] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 411.311025][T14193] RSP: 002b:00000000f54ac55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 411.311035][T14193] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000000 [ 411.311041][T14193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.311047][T14193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 411.311053][T14193] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 411.311071][T14193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 411.311085][T14193] [ 411.326049][T14191] syz.0.2401 (14191): drop_caches: 2 [ 411.509564][ T64] Bluetooth: hci4: command tx timeout [ 411.887836][T14115] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 411.901153][T14115] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 411.907983][T14115] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 411.915343][T14115] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 411.993774][T14115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.033046][T14115] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.046863][T12877] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.049462][T12877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.064810][T12871] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.067384][T12871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.274419][T14115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.295232][T14115] veth0_vlan: entered promiscuous mode [ 412.302136][T14115] veth1_vlan: entered promiscuous mode [ 412.324112][T14115] veth0_macvtap: entered promiscuous mode [ 412.330093][T14115] veth1_macvtap: entered promiscuous mode [ 412.344259][T14115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.351047][T14115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.455998][T12874] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.520471][T12874] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.523861][T12874] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.526854][T12874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.559387][T12874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.582543][T12874] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.599002][T12874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.603258][T12874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.711425][T14233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2384'. [ 412.865511][T14235] xt_TCPMSS: Only works on TCP SYN packets [ 413.411308][T12171] tipc: Disabling bearer [ 413.417062][T12171] tipc: Left network mode [ 413.599800][ T64] Bluetooth: hci4: command tx timeout [ 413.618548][T12171] hsr_slave_0: left promiscuous mode [ 413.622166][T12171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.625998][T12171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.630486][T12171] batman_adv: batadv0: Removing interface: dummy0 [ 413.932482][T14251] input: syz1 as /devices/virtual/input/input12 [ 413.977997][T14248] ceph: No mds server is up or the cluster is laggy [ 414.020376][ T6030] libceph: connect (1)[c::]:6789 error -101 [ 414.098115][ T6030] libceph: mon0 (1)[c::]:6789 connect error [ 414.698641][T14273] ubi31: attaching mtd0 [ 414.719825][T14273] ubi31: scanning is finished [ 414.721983][T14273] ubi31: empty MTD device detected [ 414.822784][T14283] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 414.826002][T14283] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 414.831363][T14283] vhci_hcd vhci_hcd.0: Device attached [ 414.992641][T14273] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 414.994048][T14283] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2420'. [ 414.996071][T14273] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 415.021567][T14273] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 415.025776][T14273] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 415.029262][T14273] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 415.040732][T14273] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 415.049440][T14273] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4063563492 [ 415.053886][T14273] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 415.066606][T14289] ubi31: background thread "ubi_bgt31d" started, PID 14289 [ 415.139438][ T6030] usb 44-1: SetAddress Request (14) to port 0 [ 415.142508][ T6030] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 415.180367][T12171] team0 (unregistering): Port device team_slave_1 removed [ 415.296803][T12171] team0 (unregistering): Port device team_slave_0 removed [ 415.457931][T14284] vhci_hcd: connection reset by peer [ 415.460671][T12875] vhci_hcd: stop threads [ 415.462143][T12875] vhci_hcd: release socket [ 415.466241][T12875] vhci_hcd: disconnect device [ 415.560732][T14292] netlink: 'syz.2.2421': attribute type 1 has an invalid length. [ 415.669715][ T64] Bluetooth: hci4: command tx timeout [ 415.965941][T14291] vlan2: entered promiscuous mode [ 415.967858][T14291] vlan2: entered allmulticast mode [ 415.969834][T14291] hsr_slave_1: entered allmulticast mode [ 416.144149][T14304] xt_TCPMSS: Only works on TCP SYN packets [ 416.300916][T14311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2427'. [ 416.681462][T14315] ptrace attach of "/syz-executor exec"[14115] was attempted by ""[14315] [ 417.145774][T14323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 417.157817][T14325] netlink: 'syz.2.2431': attribute type 10 has an invalid length. [ 417.160739][T14323] /dev/nullb0: Can't open blockdev [ 417.161866][T14325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2431'. [ 417.167325][T14325] team0: Device geneve0 is up. Set it down before adding it as a team port [ 417.170910][T14325] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 417.184566][T14323] syzkaller1: entered promiscuous mode [ 417.186505][T14323] syzkaller1: entered allmulticast mode [ 417.530877][T14337] infiniband syz1: set down [ 417.539365][T14337] infiniband syz1: added syz_tun [ 417.573925][T14337] RDS/IB: syz1: added [ 417.575474][T14337] smc: adding ib device syz1 with port count 1 [ 417.577620][T14337] smc: ib device syz1 port 1 has no pnetid [ 417.863907][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 417.863919][ T40] audit: type=1326 audit(417.749:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.3.2438" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 417.892697][ T40] audit: type=1326 audit(417.749:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.3.2438" exe="/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 417.909462][ T40] audit: type=1326 audit(417.759:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.3.2438" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 417.915899][ T40] audit: type=1326 audit(417.759:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.3.2438" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 417.929357][ T40] audit: type=1326 audit(417.759:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.3.2438" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 417.936779][ T40] audit: type=1326 audit(417.759:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.3.2438" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 417.954369][ T40] audit: type=1326 audit(417.759:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.3.2438" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 417.963706][ T40] audit: type=1326 audit(417.759:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.3.2438" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 417.972357][ T40] audit: type=1326 audit(417.759:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.3.2438" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 417.981454][ T40] audit: type=1326 audit(417.759:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.3.2438" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 418.170302][T14358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2441'. [ 418.246853][T14364] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 418.249821][T14364] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 418.254949][T14364] vhci_hcd vhci_hcd.0: Device attached [ 418.263608][T14365] vhci_hcd: connection closed [ 418.263808][T12863] vhci_hcd: stop threads [ 418.267906][T12863] vhci_hcd: release socket [ 418.272052][T12863] vhci_hcd: disconnect device [ 418.312170][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2446'. [ 418.397555][T14374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2448'. [ 418.408521][T14374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2448'. [ 418.806271][T14377] netlink: 'syz.3.2449': attribute type 1 has an invalid length. [ 418.809645][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2449'. [ 418.816682][T14377] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 419.062482][T14383] 9pnet_fd: Insufficient options for proto=fd [ 419.190431][ T64] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 419.191172][ T5952] Bluetooth: hci1: command 0x1003 tx timeout [ 419.645344][ T24] libceph: connect (1)[c::]:6789 error -101 [ 419.647983][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 419.922625][ T24] libceph: connect (1)[c::]:6789 error -101 [ 419.926349][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 420.139706][T14402] ceph: No mds server is up or the cluster is laggy [ 420.229526][ T6030] usb 44-1: device descriptor read/8, error -110 [ 420.771328][ T6030] usb usb44-port1: attempt power cycle [ 421.339932][ T6030] usb usb44-port1: unable to enumerate USB device [ 421.511731][T14428] 8021q: adding VLAN 0 to HW filter on device bond5 [ 421.516507][T14428] bond0: (slave bond5): Enslaving as an active interface with a down link [ 421.520493][T14432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2466'. [ 421.525781][T14428] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2464'. [ 421.667746][T14445] tmpfs: Unknown parameter '00000000000000000000011' [ 421.800592][T14448] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2469'. [ 421.842989][T14450] netlink: 'syz.0.2470': attribute type 1 has an invalid length. [ 421.858414][T14450] bond20: entered promiscuous mode [ 421.861868][T14450] bond20: entered allmulticast mode [ 421.884153][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2470'. [ 421.895420][T14450] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 421.903443][T14450] bond20: (slave bridge5): making interface the new active one [ 421.907616][T14450] bridge5: entered promiscuous mode [ 421.910623][T14450] bridge5: entered allmulticast mode [ 421.914117][T14450] bond20: (slave bridge5): Enslaving as an active interface with an up link [ 422.044273][T14459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2473'. [ 422.223037][T14463] tipc: Enabling of bearer rejected, already enabled [ 422.789676][T14453] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 422.792593][T14453] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 422.938713][T14453] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 422.942566][T14453] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 422.949277][T14453] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 422.953458][T14453] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 422.960519][T14453] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 422.966090][T14453] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 422.968803][T14453] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 423.059438][T14453] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 423.147234][T14477] vlan2: entered promiscuous mode [ 423.149815][T14477] vlan2: entered allmulticast mode [ 423.152133][T14477] hsr_slave_1: entered allmulticast mode [ 423.158342][T14479] ieee802154 phy0 wpan0: encryption failed: -22 [ 423.159972][T14477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2479'. [ 423.204667][T14482] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2481'. [ 423.379664][T14488] fuse: Bad value for 'fd' [ 423.503196][T14494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2482'. [ 423.508178][T14494] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2482'. [ 423.517385][T14494] batadv1: entered allmulticast mode [ 423.989448][ T64] Bluetooth: hci3: command 0x0406 tx timeout [ 424.044519][T14506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2488'. [ 424.265335][T14514] tipc: Enabling of bearer rejected, already enabled [ 424.309585][T14517] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 424.311879][T14517] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 424.320963][T14517] vhci_hcd vhci_hcd.0: Device attached [ 424.327737][T14517] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 424.330014][T14517] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 424.335065][T14517] vhci_hcd vhci_hcd.0: Device attached [ 424.341913][T14517] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(16) [ 424.343990][T14523] syzkaller0: entered promiscuous mode [ 424.344721][T14517] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 424.351007][T14517] vhci_hcd vhci_hcd.0: Device attached [ 424.351708][T14523] syzkaller0: entered allmulticast mode [ 424.356610][T14517] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 424.370978][T14517] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 424.373527][T14517] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 424.386765][T14517] vhci_hcd vhci_hcd.0: Device attached [ 424.390683][T14517] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(22) [ 424.392786][T14517] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 424.395643][T14517] vhci_hcd vhci_hcd.0: Device attached [ 424.395985][T14523] tipc: Started in network mode [ 424.398397][T14517] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 424.400223][T14523] tipc: Node identity ae5d490d6226, cluster identity 4711 [ 424.402561][T14523] tipc: Enabled bearer , priority 0 [ 424.410431][T14517] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(26) [ 424.412559][T14517] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 424.417482][T14520] tipc: Resetting bearer [ 424.417998][T14517] vhci_hcd vhci_hcd.0: Device attached [ 424.431591][T14517] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 424.443570][T14520] tipc: Disabling bearer [ 424.445548][T14528] vhci_hcd: connection closed [ 424.445635][T14526] vhci_hcd: connection closed [ 424.446308][T14521] vhci_hcd: connection closed [ 424.450774][T12171] vhci_hcd: stop threads [ 424.454642][T12171] vhci_hcd: release socket [ 424.458087][T14518] vhci_hcd: connection closed [ 424.458380][T14524] vhci_hcd: connection closed [ 424.458613][T12171] vhci_hcd: disconnect device [ 424.465353][T12171] vhci_hcd: stop threads [ 424.467352][T12171] vhci_hcd: release socket [ 424.469608][T12171] vhci_hcd: disconnect device [ 424.472875][T12171] vhci_hcd: stop threads [ 424.473911][T14530] vhci_hcd: connection closed [ 424.476393][T12171] vhci_hcd: release socket [ 424.482613][T12171] vhci_hcd: disconnect device [ 424.484842][T12171] vhci_hcd: stop threads [ 424.486863][T12171] vhci_hcd: release socket [ 424.488984][T12171] vhci_hcd: disconnect device [ 424.492055][T12171] vhci_hcd: stop threads [ 424.494233][T12171] vhci_hcd: release socket [ 424.496401][T12171] vhci_hcd: disconnect device [ 424.498773][T12171] vhci_hcd: stop threads [ 424.501092][ T24] vhci_hcd: vhci_device speed not set [ 424.503918][T12171] vhci_hcd: release socket [ 424.506664][T12171] vhci_hcd: disconnect device [ 424.765648][T14538] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 424.768859][T14538] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 424.772463][T14538] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 424.775213][T14538] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 424.788587][T14548] xt_hashlimit: overflow, rate too high: 0 [ 424.935615][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 424.935632][ T40] audit: type=1326 audit(424.819:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.0.2505" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 424.948424][ T40] audit: type=1326 audit(424.819:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.0.2505" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 424.959115][ T40] audit: type=1326 audit(424.819:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.0.2505" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 424.968811][ T40] audit: type=1326 audit(424.819:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.0.2505" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 424.978566][ T40] audit: type=1326 audit(424.819:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.0.2505" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 424.989003][ T40] audit: type=1326 audit(424.819:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.0.2505" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 424.998187][ T40] audit: type=1326 audit(424.819:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.0.2505" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 425.005524][ T40] audit: type=1326 audit(424.819:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.0.2505" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 425.014774][ T40] audit: type=1326 audit(424.819:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.0.2505" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 425.014799][ T40] audit: type=1326 audit(424.829:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.0.2505" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 425.424869][T14585] xt_TCPMSS: Only works on TCP SYN packets [ 425.718891][T14593] netlink: 'syz.0.2512': attribute type 10 has an invalid length. [ 426.020872][T14599] netlink: 'syz.4.2515': attribute type 1 has an invalid length. [ 426.040962][T14599] bond2: entered promiscuous mode [ 426.043288][T14599] bond2: entered allmulticast mode [ 426.056142][T14599] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 426.063786][T14599] bond2: (slave bridge2): making interface the new active one [ 426.067606][T14599] bridge2: entered promiscuous mode [ 426.071167][T14599] bridge2: entered allmulticast mode [ 426.074240][T14599] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 426.120438][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 426.126722][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 426.132908][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 426.137363][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 426.145177][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 426.177500][T12883] smc: removing ib device syz1 [ 426.486815][T14621] FAULT_INJECTION: forcing a failure. [ 426.486815][T14621] name failslab, interval 1, probability 0, space 0, times 0 [ 426.493014][T14621] CPU: 3 UID: 0 PID: 14621 Comm: syz.4.2521 Not tainted syzkaller #0 PREEMPT(full) [ 426.493052][T14621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 426.493064][T14621] Call Trace: [ 426.493072][T14621] [ 426.493079][T14621] dump_stack_lvl+0x16c/0x1f0 [ 426.493107][T14621] should_fail_ex+0x512/0x640 [ 426.493155][T14621] ? __kmalloc_cache_noprof+0x5f/0x780 [ 426.493178][T14621] should_failslab+0xc2/0x120 [ 426.493203][T14621] __kmalloc_cache_noprof+0x72/0x780 [ 426.493221][T14621] ? genl_start+0x1e8/0x980 [ 426.493248][T14621] ? genl_start+0x1e8/0x980 [ 426.493268][T14621] genl_start+0x1e8/0x980 [ 426.493292][T14621] __netlink_dump_start+0x60e/0x990 [ 426.493315][T14621] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 426.493340][T14621] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 426.493364][T14621] ? find_held_lock+0x2b/0x80 [ 426.493388][T14621] ? __pfx_genl_get_cmd+0x10/0x10 [ 426.493407][T14621] ? __pfx_genl_start+0x10/0x10 [ 426.493426][T14621] ? __pfx_genl_dumpit+0x10/0x10 [ 426.493446][T14621] ? __pfx_genl_done+0x10/0x10 [ 426.493471][T14621] ? __radix_tree_lookup+0x21f/0x2c0 [ 426.493496][T14621] genl_rcv_msg+0x46e/0x800 [ 426.493522][T14621] ? __pfx_genl_rcv_msg+0x10/0x10 [ 426.493545][T14621] ? __pfx_netdev_nl_queue_get_dumpit+0x10/0x10 [ 426.493577][T14621] netlink_rcv_skb+0x158/0x420 [ 426.493597][T14621] ? __pfx_genl_rcv_msg+0x10/0x10 [ 426.493620][T14621] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 426.493651][T14621] ? netlink_deliver_tap+0x1ae/0xd30 [ 426.493673][T14621] genl_rcv+0x28/0x40 [ 426.493691][T14621] netlink_unicast+0x5aa/0x870 [ 426.493714][T14621] ? __pfx_netlink_unicast+0x10/0x10 [ 426.493744][T14621] netlink_sendmsg+0x8c8/0xdd0 [ 426.493768][T14621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.493791][T14621] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 426.493821][T14621] ____sys_sendmsg+0xa98/0xc70 [ 426.493846][T14621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.493867][T14621] ? get_compat_msghdr+0x11a/0x170 [ 426.493896][T14621] ___sys_sendmsg+0x134/0x1d0 [ 426.493930][T14621] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.493961][T14621] ? find_held_lock+0x2b/0x80 [ 426.493997][T14621] __sys_sendmsg+0x16d/0x220 [ 426.494016][T14621] ? __pfx___sys_sendmsg+0x10/0x10 [ 426.494053][T14621] ? rcu_is_watching+0x12/0xc0 [ 426.494078][T14621] __do_fast_syscall_32+0x7c/0x300 [ 426.494104][T14621] do_fast_syscall_32+0x32/0x80 [ 426.494127][T14621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 426.494150][T14621] RIP: 0023:0xf70dd579 [ 426.494165][T14621] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 426.494183][T14621] RSP: 002b:00000000f54ac55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 426.494201][T14621] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000000 [ 426.494213][T14621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 426.494223][T14621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 426.494234][T14621] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 426.494244][T14621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 426.494269][T14621] [ 426.781607][T14603] chnl_net:caif_netlink_parms(): no params data found [ 426.794857][ T5952] Bluetooth: hci4: command 0x0c1a tx timeout [ 426.794950][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 426.797452][ T5952] Bluetooth: hci2: command 0x0c1a tx timeout [ 426.838283][T14632] __nla_validate_parse: 7 callbacks suppressed [ 426.838295][T14632] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2524'. [ 427.318563][ T24] usb 5-1: USB disconnect, device number 11 [ 427.341229][T14603] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.356979][T14603] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.360674][T14603] bridge_slave_0: entered allmulticast mode [ 427.365711][T14603] bridge_slave_0: entered promiscuous mode [ 427.371521][T14603] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.374895][T14603] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.378101][T14603] bridge_slave_1: entered allmulticast mode [ 427.387953][T14603] bridge_slave_1: entered promiscuous mode [ 427.505200][T14645] xt_TCPMSS: Only works on TCP SYN packets [ 427.506223][T14603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.531474][T14603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.626198][T14603] team0: Port device team_slave_0 added [ 427.636799][T14603] team0: Port device team_slave_1 added [ 427.707715][T14603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.711105][T14603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.727844][T14603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.736136][T14603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.739226][T14603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.753061][T14603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.835944][T14603] hsr_slave_0: entered promiscuous mode [ 427.840296][T14603] hsr_slave_1: entered promiscuous mode [ 427.843380][T14603] debugfs: 'hsr0' already exists in 'hsr' [ 427.846303][T14603] Cannot create hsr debugfs directory [ 428.230920][ T64] Bluetooth: hci1: command tx timeout [ 428.500937][T14652] netlink: 'syz.4.2529': attribute type 1 has an invalid length. [ 428.502858][T14603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 428.524983][T14652] bond3: entered promiscuous mode [ 428.526799][T14652] bond3: entered allmulticast mode [ 428.528925][T14603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 428.531687][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2529'. [ 428.544734][T14652] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 428.553153][T14652] bond3: (slave bridge3): making interface the new active one [ 428.556396][T14652] bridge3: entered promiscuous mode [ 428.558766][T14652] bridge3: entered allmulticast mode [ 428.563157][T14652] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 428.566958][T14603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 428.578708][T14603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 428.650282][T14603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.661336][T14603] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.668920][T12874] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.671616][T12874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.692435][T12874] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.695050][T12874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.699068][T14665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2532'. [ 428.728714][T14603] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 428.732304][T14603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.869681][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 428.879462][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 428.882134][ T64] Bluetooth: hci4: command 0x0c1a tx timeout [ 428.971803][T14603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.023688][T14603] veth0_vlan: entered promiscuous mode [ 429.036007][T14603] veth1_vlan: entered promiscuous mode [ 429.098541][T14603] veth0_macvtap: entered promiscuous mode [ 429.111851][T14603] veth1_macvtap: entered promiscuous mode [ 429.156665][T14603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.171427][T14603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.178310][T12877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.182160][T12877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.186907][T12877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.192082][T12877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.245858][T12874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.249349][T12874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.265288][T12863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.268901][T12863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.725187][T14684] syzkaller0: entered promiscuous mode [ 429.727700][T14684] syzkaller0: entered allmulticast mode [ 429.751787][T14684] tipc: Enabled bearer , priority 0 [ 429.758847][T14683] tipc: Resetting bearer [ 429.774962][T14683] tipc: Disabling bearer [ 430.100831][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 430.100846][ T40] audit: type=1326 audit(429.989:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.2.2541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 430.110331][ T40] audit: type=1326 audit(429.989:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.2.2541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 430.117482][ T40] audit: type=1326 audit(429.989:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.2.2541" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 430.124416][ T40] audit: type=1326 audit(429.989:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.2.2541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 430.132471][ T40] audit: type=1326 audit(429.989:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.2.2541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 430.141519][ T40] audit: type=1326 audit(429.999:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.2.2541" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 430.152114][ T40] audit: type=1326 audit(429.999:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.2.2541" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 430.160888][ T40] audit: type=1326 audit(429.999:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.2.2541" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 430.169959][ T40] audit: type=1326 audit(429.999:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.2.2541" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 430.180109][ T40] audit: type=1326 audit(429.999:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14694 comm="syz.2.2541" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 430.309877][ T5947] Bluetooth: hci1: command tx timeout [ 430.959733][ T5947] Bluetooth: hci4: command 0x0c1a tx timeout [ 430.965889][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 431.333665][T14713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2546'. [ 431.337630][T14713] bridge_slave_1: left allmulticast mode [ 431.340247][T14713] bridge_slave_1: left promiscuous mode [ 431.342922][T14713] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.351638][T14713] bridge_slave_0: left allmulticast mode [ 431.354723][T14713] bridge_slave_0: left promiscuous mode [ 431.357277][T14713] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.250709][T14729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2549'. [ 432.389516][ T64] Bluetooth: hci1: command tx timeout [ 432.479789][ T1168] block nbd0: Possible stuck request ffff8880258b0000: control (read@0,1024B). Runtime 120 seconds [ 432.483496][ T1168] block nbd0: Possible stuck request ffff8880258b01c0: control (read@1024,1024B). Runtime 120 seconds [ 432.488062][ T1168] block nbd0: Possible stuck request ffff8880258b0380: control (read@2048,1024B). Runtime 120 seconds [ 432.493772][ T1168] block nbd0: Possible stuck request ffff8880258b0540: control (read@3072,1024B). Runtime 120 seconds [ 434.479502][ T64] Bluetooth: hci1: command tx timeout [ 436.361989][ T40] kauditd_printk_skb: 1015 callbacks suppressed [ 436.362007][ T40] audit: type=1326 audit(436.249:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.0.2560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 436.371838][ T40] audit: type=1326 audit(436.249:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.0.2560" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 436.380291][ T40] audit: type=1326 audit(436.249:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.0.2560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 436.388474][ T40] audit: type=1326 audit(436.249:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.0.2560" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 436.397934][ T40] audit: type=1326 audit(436.249:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.0.2560" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000 [ 436.406174][ T40] audit: type=1326 audit(436.249:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.0.2560" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000 [ 436.414489][ T40] audit: type=1326 audit(436.249:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.0.2560" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000 [ 436.421920][ T40] audit: type=1326 audit(436.249:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.0.2560" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000 [ 436.431492][ T40] audit: type=1326 audit(436.249:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.0.2560" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000 [ 436.439352][ T40] audit: type=1326 audit(436.249:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.0.2560" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000 [ 436.523736][T14772] syzkaller0: entered promiscuous mode [ 436.526328][T14772] syzkaller0: entered allmulticast mode [ 436.546431][T14772] tipc: Started in network mode [ 436.548758][T14772] tipc: Node identity 469a391de097, cluster identity 4711 [ 436.554599][T14772] tipc: Enabled bearer , priority 0 [ 436.559888][T14770] tipc: Resetting bearer [ 436.576415][T14770] tipc: Disabling bearer [ 438.458579][T14803] netlink: 'syz.0.2569': attribute type 4 has an invalid length. [ 438.462997][T14803] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2569'. [ 438.480577][T14803] .`: renamed from bond0 (while UP) [ 438.684905][T14811] netlink: zone id is out of range [ 438.687283][T14811] netlink: zone id is out of range [ 438.690075][T14811] netlink: zone id is out of range [ 438.692479][T14811] netlink: zone id is out of range [ 438.694817][T14811] netlink: zone id is out of range [ 438.697338][T14811] netlink: zone id is out of range [ 438.703767][T14811] netlink: zone id is out of range [ 438.706315][T14811] netlink: zone id is out of range [ 438.708567][T14811] netlink: zone id is out of range [ 438.711294][T14811] netlink: zone id is out of range [ 438.758889][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2574'. [ 438.762257][T14814] bridge_slave_1: left allmulticast mode [ 438.764577][T14814] bridge_slave_1: left promiscuous mode [ 438.766644][T14814] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.771377][T14814] bridge_slave_0: left allmulticast mode [ 438.773438][T14814] bridge_slave_0: left promiscuous mode [ 438.775506][T14814] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.143301][T14826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2575'. [ 439.158523][T14826] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2575'. [ 439.182196][T14821] infiniband syz1: set active [ 439.184173][T14821] infiniband syz1: added syz_tun [ 439.196004][T14826] batadv1: entered allmulticast mode [ 439.233278][T14821] RDS/IB: syz1: added [ 439.235144][T14821] smc: adding ib device syz1 with port count 1 [ 439.248274][T14821] smc: ib device syz1 port 1 has no pnetid [ 441.125776][T14856] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2588'. [ 441.220974][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 441.228810][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 441.233956][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 441.238044][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 441.243747][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 441.309434][ T24] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 441.337558][T14866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2591'. [ 441.372376][ T40] kauditd_printk_skb: 2077 callbacks suppressed [ 441.372395][ T40] audit: type=1326 audit(441.259:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.2.2590" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 441.389621][ T40] audit: type=1326 audit(441.259:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.2.2590" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 441.396559][ T40] audit: type=1326 audit(441.259:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.2.2590" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 441.430778][ T40] audit: type=1326 audit(441.259:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.2.2590" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 441.438947][ T40] audit: type=1326 audit(441.259:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.2.2590" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 441.459959][ T40] audit: type=1326 audit(441.259:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.2.2590" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 441.467557][ T40] audit: type=1326 audit(441.259:4475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.2.2590" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 441.494343][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 441.496017][ T40] audit: type=1326 audit(441.269:4476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.2.2590" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 441.497583][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 441.497608][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.497629][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 441.497651][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 441.499056][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 441.515742][ T40] audit: type=1326 audit(441.269:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.2.2590" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 441.518927][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 441.541614][ T40] audit: type=1326 audit(441.279:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.2.2590" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 441.547335][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.562281][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 441.566679][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 441.575897][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 441.579597][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 441.584479][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.590865][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 441.595637][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 441.603903][ T24] usb 9-1: string descriptor 0 read error: -22 [ 441.606263][ T24] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 441.609236][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.625624][ T24] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 441.653920][T14861] chnl_net:caif_netlink_parms(): no params data found [ 441.786671][T14861] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.792548][T14861] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.795888][T14861] bridge_slave_0: entered allmulticast mode [ 441.799979][T14861] bridge_slave_0: entered promiscuous mode [ 441.803862][T14861] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.806267][T14861] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.808804][T14861] bridge_slave_1: entered allmulticast mode [ 441.813351][T14861] bridge_slave_1: entered promiscuous mode [ 441.996016][T14874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.009900][T14874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.014279][T14861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.035018][T14861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.191012][T14861] team0: Port device team_slave_0 added [ 442.198736][T14861] team0: Port device team_slave_1 added [ 442.272974][T14861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.276037][T14861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.288748][T14861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.295277][T14861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.298277][T14861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.307551][T14861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.350067][ T1343] usb 9-1: USB disconnect, device number 17 [ 442.412175][T14861] hsr_slave_0: entered promiscuous mode [ 442.415635][T14861] hsr_slave_1: entered promiscuous mode [ 442.416956][T14876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2592'. [ 442.418180][T14861] debugfs: 'hsr0' already exists in 'hsr' [ 442.424515][T14861] Cannot create hsr debugfs directory [ 442.618195][T14861] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 442.629943][T14861] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 442.659059][T14861] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 442.668002][T14861] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 442.691638][T14891] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 442.694868][T14891] block device autoloading is deprecated and will be removed. [ 442.745149][T14861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.760281][T14861] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.766289][T12877] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.768960][T12877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.777400][T12871] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.779828][T12871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.001127][T14861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.258565][T14861] veth0_vlan: entered promiscuous mode [ 443.271085][ T5947] Bluetooth: hci3: command tx timeout [ 443.273092][T14861] veth1_vlan: entered promiscuous mode [ 443.392199][T14861] veth0_macvtap: entered promiscuous mode [ 443.401919][T14861] veth1_macvtap: entered promiscuous mode [ 443.419542][T14861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.437377][T14861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.451686][T12877] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.456758][T12877] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.461278][T12877] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.465967][T12877] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.573267][T12877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.575824][T12877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.604467][T12874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.608172][T12874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.730433][T14922] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2586'. [ 443.868280][T14930] 8021q: adding VLAN 0 to HW filter on device bond6 [ 443.881634][T14930] bond0: (slave bond6): Enslaving as an active interface with a down link [ 443.888803][T14930] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2601'. [ 443.961851][T14944] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2604'. [ 444.274757][T14957] netlink: 'syz.5.2610': attribute type 1 has an invalid length. [ 444.421636][T14959] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 444.634490][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.749552][ T5954] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 444.920278][ T5954] usb 5-1: Using ep0 maxpacket: 8 [ 444.935709][ T5954] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 444.939630][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.982970][ T5954] pvrusb2: Hardware description: Terratec Grabster AV400 [ 444.989153][ T5954] pvrusb2: ********** [ 444.992590][ T5954] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 444.998964][ T5954] pvrusb2: Important functionality might not be entirely working. [ 445.002546][ T5954] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 445.007047][ T5954] pvrusb2: ********** [ 445.084713][T14986] netlink: 'syz.2.2619': attribute type 10 has an invalid length. [ 445.088545][T14986] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2619'. [ 445.095004][T14986] team0: Device geneve0 is up. Set it down before adding it as a team port [ 445.100763][T14986] net_ratelimit: 35 callbacks suppressed [ 445.100779][T14986] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 445.305762][ T2491] pvrusb2: Invalid write control endpoint [ 445.329583][T14996] hsr0: entered promiscuous mode [ 445.332407][T14995] hsr0: left promiscuous mode [ 445.349696][ T5947] Bluetooth: hci3: command tx timeout [ 445.362058][ T2491] pvrusb2: Invalid write control endpoint [ 445.364196][ T2491] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 445.367809][ T2491] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 445.383247][ T2491] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 445.386739][ T2491] pvrusb2: Device being rendered inoperable [ 445.389041][ T2491] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 445.394151][ T2491] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 445.405283][ T2491] pvrusb2: Attached sub-driver cx25840 [ 445.406487][T14999] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2622'. [ 445.421881][ T2491] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 445.427452][ T2491] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 445.506146][T14965] pvrusb2: Attempted to execute control transfer when device not ok [ 445.511309][ T5954] usb 5-1: USB disconnect, device number 12 [ 445.630477][T15008] rdma_rxe: rxe_newlink: failed to add syz_tun [ 445.971674][T15015] netlink: 'syz.4.2628': attribute type 1 has an invalid length. [ 445.989107][T15015] bond4: entered promiscuous mode [ 445.994608][T15015] bond4: entered allmulticast mode [ 446.001373][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2628'. [ 446.008303][T15015] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 446.013763][T15015] bond4: (slave bridge0): making interface the new active one [ 446.016293][T15015] bridge0: entered promiscuous mode [ 446.019218][T15015] bridge0: entered allmulticast mode [ 446.022802][T15015] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 446.078497][T15023] 9pnet_virtio: no channels available for device 3$Î~VºÐPÚ [ 446.122359][T15026] hsr0: entered allmulticast mode [ 446.124543][T15026] hsr_slave_0: entered allmulticast mode [ 446.126904][T15026] hsr_slave_1: entered allmulticast mode [ 446.621669][ T40] kauditd_printk_skb: 1434 callbacks suppressed [ 446.621686][ T40] audit: type=1326 audit(446.509:5913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15032 comm="syz.0.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 446.634396][ T40] audit: type=1326 audit(446.509:5914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15032 comm="syz.0.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 446.643715][ T40] audit: type=1326 audit(446.509:5915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15032 comm="syz.0.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 446.653539][ T40] audit: type=1326 audit(446.509:5916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15032 comm="syz.0.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 446.663060][ T40] audit: type=1326 audit(446.509:5917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15032 comm="syz.0.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 446.673630][ T40] audit: type=1326 audit(446.509:5918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15032 comm="syz.0.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 446.683280][ T40] audit: type=1326 audit(446.509:5919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15032 comm="syz.0.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000 [ 446.692646][ T40] audit: type=1326 audit(446.509:5920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15032 comm="syz.0.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000 [ 446.701868][ T40] audit: type=1326 audit(446.509:5921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15032 comm="syz.0.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000 [ 446.711453][ T40] audit: type=1326 audit(446.509:5922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15032 comm="syz.0.2633" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701d598 code=0x7ffc0000 [ 447.321257][T15042] syzkaller0: entered promiscuous mode [ 447.323973][T15042] syzkaller0: entered allmulticast mode [ 447.386244][T15042] tipc: Started in network mode [ 447.389242][T15042] tipc: Node identity de85ce14cbb4, cluster identity 4711 [ 447.411935][T15042] tipc: Enabled bearer , priority 0 [ 447.437375][ T5947] Bluetooth: hci3: command tx timeout [ 447.445121][T15041] tipc: Resetting bearer [ 447.483095][T15041] tipc: Disabling bearer [ 448.628266][T15052] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2640'. [ 448.838153][T15054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2641'. [ 449.261736][T15071] xt_TCPMSS: Only works on TCP SYN packets [ 449.303432][T15073] rdma_rxe: rxe_newlink: failed to add syz_tun [ 449.433059][T15075] netlink: 'syz.5.2648': attribute type 4 has an invalid length. [ 449.436427][T15075] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2648'. [ 449.449434][T15075] .`: renamed from bond0 (while UP) [ 449.509452][ T5947] Bluetooth: hci3: command tx timeout [ 449.957964][T15078] netlink: 'syz.5.2651': attribute type 1 has an invalid length. [ 450.116397][T15088] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2654'. [ 450.436304][T15096] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2655'. [ 450.882368][T15103] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 450.885331][T15103] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 450.888669][T15103] vhci_hcd vhci_hcd.0: Device attached [ 451.082084][T15107] ceph: No mds server is up or the cluster is laggy [ 451.164770][T15110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 451.322165][ T6030] libceph: connect (1)[c::]:6789 error -101 [ 451.332841][ T6030] libceph: mon0 (1)[c::]:6789 connect error [ 451.438148][ T1334] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 451.546995][T15114] syzkaller0: entered promiscuous mode [ 451.549542][T15114] syzkaller0: entered allmulticast mode [ 451.568366][T15114] tipc: Enabled bearer , priority 0 [ 451.573448][T15113] tipc: Resetting bearer [ 451.588970][T15113] tipc: Disabling bearer [ 451.597807][T15105] vhci_hcd: connection reset by peer [ 451.601088][T12874] vhci_hcd: stop threads [ 451.603085][T12874] vhci_hcd: release socket [ 451.605181][T12874] vhci_hcd: disconnect device [ 452.025675][T15132] program syz.5.2664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 452.030438][T15132] ata1.00: invalid transfer count 0 [ 452.694901][T15138] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2666'. [ 452.698335][T15138] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2666'. [ 452.779427][ T53] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 452.879098][T15142] rdma_rxe: rxe_newlink: failed to add syz_tun [ 452.949781][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 452.955202][ T53] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 452.958356][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.972507][ T53] pvrusb2: Hardware description: Terratec Grabster AV400 [ 452.975302][ T53] pvrusb2: ********** [ 452.976794][ T53] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 452.983628][ T53] pvrusb2: Important functionality might not be entirely working. [ 452.986269][ T53] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 452.998300][ T53] pvrusb2: ********** [ 453.008044][T15154] syzkaller0: entered promiscuous mode [ 453.010886][T15154] syzkaller0: entered allmulticast mode [ 453.036093][T15154] tipc: Enabled bearer , priority 0 [ 453.041293][T15153] tipc: Resetting bearer [ 453.054588][T15153] tipc: Disabling bearer [ 453.188067][ T2491] pvrusb2: Invalid write control endpoint [ 453.216309][ T2491] pvrusb2: Invalid write control endpoint [ 453.218504][ T2491] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 453.229399][ T2491] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 453.232679][ T2491] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 453.242396][ T2491] pvrusb2: Device being rendered inoperable [ 453.245551][ T2491] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 453.248041][ T2491] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 453.251651][ T2491] pvrusb2: Attached sub-driver cx25840 [ 453.253813][ T2491] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 453.257766][ T2491] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 453.388002][T15136] pvrusb2: Attempted to execute control transfer when device not ok [ 453.394026][ T53] usb 5-1: USB disconnect, device number 13 [ 453.489467][ T6025] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 453.639482][ T6025] usb 9-1: Using ep0 maxpacket: 8 [ 453.645113][ T6025] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 453.648945][ T6025] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.657913][ T6025] pvrusb2: Hardware description: Terratec Grabster AV400 [ 453.661137][ T6025] pvrusb2: ********** [ 453.662974][ T6025] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 453.668874][ T6025] pvrusb2: Important functionality might not be entirely working. [ 453.672775][ T6025] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 453.677641][ T6025] pvrusb2: ********** [ 453.862577][ T2491] pvrusb2: Invalid write control endpoint [ 453.899491][ T2491] pvrusb2: Invalid write control endpoint [ 453.901630][ T2491] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 453.905831][ T2491] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 453.909264][ T2491] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 453.913482][ T2491] pvrusb2: Device being rendered inoperable [ 453.915728][ T2491] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 453.918961][ T2491] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 453.923779][ T2491] pvrusb2: Attached sub-driver cx25840 [ 453.926010][ T2491] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 453.930828][ T2491] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 453.936972][T15164] xt_hashlimit: overflow, try lower: 60585/0 [ 453.941365][T15164] xt_hashlimit: overflow, try lower: 60585/0 [ 453.944446][T15164] xt_hashlimit: overflow, try lower: 60585/0 [ 453.947522][T15164] xt_hashlimit: overflow, try lower: 60585/0 [ 453.951973][T15164] xt_hashlimit: overflow, try lower: 60585/0 [ 453.955183][T15164] xt_hashlimit: overflow, try lower: 60585/0 [ 453.958123][T15164] xt_hashlimit: overflow, try lower: 60585/0 [ 453.962167][T15164] xt_hashlimit: overflow, try lower: 60585/0 [ 453.964629][T15164] xt_hashlimit: overflow, try lower: 60585/0 [ 453.967018][T15164] xt_hashlimit: overflow, try lower: 60585/0 [ 454.067813][T15161] pvrusb2: Attempted to execute control transfer when device not ok [ 454.071698][ T24] usb 9-1: USB disconnect, device number 18 [ 454.249471][T14568] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 454.419428][T14568] usb 5-1: Using ep0 maxpacket: 8 [ 454.423863][T14568] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 454.427707][T14568] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.438915][T14568] pvrusb2: Hardware description: Terratec Grabster AV400 [ 454.441761][T14568] pvrusb2: ********** [ 454.443183][T14568] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 454.447262][T14568] pvrusb2: Important functionality might not be entirely working. [ 454.449460][ T6025] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 454.450245][T14568] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 454.458257][T14568] pvrusb2: ********** [ 454.629605][ T6025] usb 10-1: Using ep0 maxpacket: 8 [ 454.634582][ T6025] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 454.638803][ T6025] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.639201][ T2491] pvrusb2: Invalid write control endpoint [ 454.655551][ T6025] pvrusb2: Hardware description: Terratec Grabster AV400 [ 454.659865][ T6025] pvrusb2: ********** [ 454.661651][ T6025] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 454.665039][ T2491] pvrusb2: Invalid write control endpoint [ 454.668098][ T2491] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 454.669366][ T6025] pvrusb2: Important functionality might not be entirely working. [ 454.672035][ T2491] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 454.675167][ T6025] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 454.678589][ T2491] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 454.683589][ T6025] pvrusb2: ********** [ 454.686844][ T2491] pvrusb2: Device being rendered inoperable [ 454.691322][ T2491] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 454.694582][ T2491] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 454.698992][ T2491] pvrusb2: Attached sub-driver cx25840 [ 454.701655][ T2491] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 454.706186][ T2491] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 454.780111][ T6031] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 454.841785][T14568] usb 5-1: USB disconnect, device number 14 [ 454.855022][ T2491] pvrusb2: Invalid write control endpoint [ 454.895281][ T2491] pvrusb2: Invalid write control endpoint [ 454.897734][ T2491] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 454.903435][ T2491] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 454.907224][ T2491] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 454.912503][ T2491] pvrusb2: Device being rendered inoperable [ 454.914712][ T2491] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 454.917527][ T2491] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 454.920357][ T6031] usb 7-1: device descriptor read/64, error -71 [ 454.927643][ T2491] pvrusb2: Attached sub-driver cx25840 [ 454.930292][ T2491] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 454.934891][ T2491] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 455.056374][T15170] pvrusb2: Attempted to execute control transfer when device not ok [ 455.062621][T14568] usb 10-1: USB disconnect, device number 2 [ 455.159468][ T6031] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 455.289461][ T6031] usb 7-1: device descriptor read/64, error -71 [ 455.399693][ T6031] usb usb7-port1: attempt power cycle [ 455.749745][ T6031] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 455.780255][ T6031] usb 7-1: device descriptor read/8, error -71 [ 456.069885][ T6031] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 456.100063][ T6031] usb 7-1: device descriptor read/8, error -71 [ 456.221248][ T6031] usb usb7-port1: unable to enumerate USB device [ 456.483370][T15205] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2688'. [ 456.509888][T15205] syz.4.2688 (15205): drop_caches: 2 [ 456.551351][ T1334] vhci_hcd: vhci_device speed not set [ 456.761734][T15211] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2693'. [ 456.856185][T15211] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.862923][T15211] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.868283][T15211] .` (unregistering): Released all slaves [ 457.049447][ T6031] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 457.155837][T15218] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2695'. [ 457.167214][T15218] syz.5.2695 (15218): drop_caches: 2 [ 457.199408][ T6031] usb 5-1: Using ep0 maxpacket: 8 [ 457.214432][ T6031] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 457.229499][ T6031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.274032][ T6031] pvrusb2: Hardware description: Terratec Grabster AV400 [ 457.277191][ T6031] pvrusb2: ********** [ 457.278861][ T6031] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 457.284450][ T6031] pvrusb2: Important functionality might not be entirely working. [ 457.287745][ T6031] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 457.292433][ T6031] pvrusb2: ********** [ 457.443220][ T2491] pvrusb2: Invalid write control endpoint [ 457.479997][ T2491] pvrusb2: Invalid write control endpoint [ 457.486932][ T2491] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 457.490894][ T2491] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 457.494068][ T2491] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 457.499645][ T2491] pvrusb2: Device being rendered inoperable [ 457.502359][ T2491] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 457.505399][ T2491] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 457.513394][ T2491] pvrusb2: Attached sub-driver cx25840 [ 457.515749][ T2491] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 457.521864][ T2491] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 457.644075][T15213] pvrusb2: Attempted to execute control transfer when device not ok [ 457.647810][T15228] xt_TCPMSS: Only works on TCP SYN packets [ 457.651701][ T24] usb 5-1: USB disconnect, device number 15 [ 457.701405][T15231] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2699'. [ 458.016438][ T6031] libceph: connect (1)[c::]:6789 error -101 [ 458.019038][ T6031] libceph: mon0 (1)[c::]:6789 connect error [ 458.066720][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2704'. [ 458.281151][T13599] libceph: connect (1)[c::]:6789 error -101 [ 458.283355][T13599] libceph: mon0 (1)[c::]:6789 connect error [ 458.393308][T15261] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2707'. [ 458.425390][T15261] syz.0.2707 (15261): drop_caches: 2 [ 458.544346][T15267] syzkaller0: entered promiscuous mode [ 458.546460][T15267] syzkaller0: entered allmulticast mode [ 458.583245][T15267] tipc: Enabled bearer , priority 0 [ 458.590816][T15266] tipc: Resetting bearer [ 458.609104][T15266] tipc: Disabling bearer [ 458.774178][ T5947] Bluetooth: hci0: unexpected event for opcode 0xff03 [ 458.789608][ T6031] libceph: connect (1)[c::]:6789 error -101 [ 458.791621][ T6031] libceph: mon0 (1)[c::]:6789 connect error [ 458.843108][T15246] ceph: No mds server is up or the cluster is laggy [ 459.038582][ T40] kauditd_printk_skb: 3019 callbacks suppressed [ 459.038599][ T40] audit: type=1326 audit(458.919:8942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.2.2715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 459.052095][ T40] audit: type=1326 audit(458.919:8943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.2.2715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 459.061707][ T40] audit: type=1326 audit(458.919:8944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.2.2715" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 459.071046][ T40] audit: type=1326 audit(458.919:8945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.2.2715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 459.083336][ T40] audit: type=1326 audit(458.919:8946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.2.2715" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 459.091891][ T40] audit: type=1326 audit(458.919:8947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.2.2715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 459.119562][ T40] audit: type=1326 audit(458.929:8948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.2.2715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 459.130432][ T40] audit: type=1326 audit(458.929:8949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.2.2715" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 459.139883][ T40] audit: type=1326 audit(458.929:8950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.2.2715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 459.148808][ T40] audit: type=1326 audit(458.929:8951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.2.2715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 459.211672][T15280] xt_TCPMSS: Only works on TCP SYN packets [ 459.219732][ T6025] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 459.324549][T15287] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2718'. [ 459.389561][ T6025] usb 9-1: Using ep0 maxpacket: 8 [ 459.395772][ T6025] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 459.400018][ T6025] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.422168][ T6025] pvrusb2: Hardware description: Terratec Grabster AV400 [ 459.425304][ T6025] pvrusb2: ********** [ 459.427103][ T6025] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 459.431817][ T6025] pvrusb2: Important functionality might not be entirely working. [ 459.436958][ T6025] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 459.442623][ T6025] pvrusb2: ********** [ 459.568984][T15296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2719'. [ 459.572892][T15296] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2719'. [ 459.578948][T15296] batadv1: entered allmulticast mode [ 460.252216][ T2491] pvrusb2: Invalid write control endpoint [ 460.287557][ T2491] pvrusb2: Invalid write control endpoint [ 460.290165][ T2491] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 460.293269][ T2491] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 460.295761][ T2491] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 460.298913][ T2491] pvrusb2: Device being rendered inoperable [ 460.301475][ T2491] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 460.303779][ T2491] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 460.309903][ T2491] pvrusb2: Attached sub-driver cx25840 [ 460.311930][ T2491] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 460.315234][ T2491] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 460.463552][T15316] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2725'. [ 460.709472][ T29] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 460.863148][ T29] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 460.866531][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.869211][ T29] usb 5-1: Product: syz [ 460.870988][ T29] usb 5-1: Manufacturer: syz [ 460.872580][ T29] usb 5-1: SerialNumber: syz [ 460.876318][ T29] usb 5-1: config 0 descriptor?? [ 461.012446][T15271] pvrusb2: Attempted to execute control transfer when device not ok [ 461.143056][T13599] usb 5-1: USB disconnect, device number 16 [ 462.117862][ T6031] usb 9-1: USB disconnect, device number 19 [ 462.553544][ T1168] block nbd0: Possible stuck request ffff8880258b0000: control (read@0,1024B). Runtime 150 seconds [ 462.559408][ T1168] block nbd0: Possible stuck request ffff8880258b01c0: control (read@1024,1024B). Runtime 150 seconds [ 462.559448][ T1168] block nbd0: Possible stuck request ffff8880258b0380: control (read@2048,1024B). Runtime 150 seconds [ 462.559462][ T1168] block nbd0: Possible stuck request ffff8880258b0540: control (read@3072,1024B). Runtime 150 seconds [ 462.849835][ T6031] libceph: connect (1)[c::]:6789 error -101 [ 462.853346][ T6031] libceph: mon0 (1)[c::]:6789 connect error [ 463.111047][ T24] libceph: connect (1)[c::]:6789 error -101 [ 463.113481][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 463.123717][T15352] ceph: No mds server is up or the cluster is laggy [ 463.231020][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2739'. [ 463.753545][T15376] vlan2: entered promiscuous mode [ 463.755786][T15376] vlan2: entered allmulticast mode [ 463.757662][T15376] hsr_slave_1: entered allmulticast mode [ 463.929496][T15381] syzkaller0: entered promiscuous mode [ 463.931961][T15381] syzkaller0: entered allmulticast mode [ 463.956764][T15381] tipc: Enabled bearer , priority 0 [ 463.962823][T15380] tipc: Resetting bearer [ 463.980633][T15380] tipc: Disabling bearer [ 464.377150][T15397] input: syz0 as /devices/virtual/input/input13 [ 464.500180][T15400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2749'. [ 464.535850][T15400] 9pnet_fd: Insufficient options for proto=fd [ 464.615843][T15412] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 464.619023][T15412] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 464.623289][T15412] vhci_hcd vhci_hcd.0: Device attached [ 464.649383][ T53] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 464.674073][T15412] binder: Binderfs stats mode cannot be changed during a remount [ 464.799427][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 464.850448][ T53] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 464.854298][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.871831][ T53] pvrusb2: Hardware description: Terratec Grabster AV400 [ 464.874824][ T53] pvrusb2: ********** [ 464.889430][ T53] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 464.893766][ T53] pvrusb2: Important functionality might not be entirely working. [ 464.897913][ T53] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 464.899679][T13599] usb 48-1: SetAddress Request (2) to port 0 [ 464.903784][ T53] pvrusb2: ********** [ 464.912456][T13599] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 465.072741][ T2491] pvrusb2: Invalid write control endpoint [ 465.105241][ T2491] pvrusb2: Invalid write control endpoint [ 465.107283][ T2491] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 465.111254][ T2491] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 465.114027][ T2491] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 465.117642][ T2491] pvrusb2: Device being rendered inoperable [ 465.119903][ T2491] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 465.122221][ T2491] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 465.125163][ T2491] pvrusb2: Attached sub-driver cx25840 [ 465.127199][ T2491] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 465.130846][ T2491] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 465.455563][ T53] Process accounting resumed [ 465.493009][T15413] vhci_hcd: connection reset by peer [ 465.495141][T12871] vhci_hcd: stop threads [ 465.496813][T12871] vhci_hcd: release socket [ 465.498548][T12871] vhci_hcd: disconnect device [ 465.561394][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2759'. [ 465.579734][T15419] Process accounting resumed [ 465.620684][T15429] vlan2: entered promiscuous mode [ 465.623229][T15429] vlan2: entered allmulticast mode [ 465.630447][T15431] pvrusb2: Attempted to execute control transfer when device not ok [ 465.697840][T15435] binder: 15434:15435 ioctl c0502100 80002c80 returned -22 [ 465.830681][ T5947] Bluetooth: hci3: command tx timeout [ 465.937807][T15440] netlink: 'syz.0.2764': attribute type 1 has an invalid length. [ 465.952913][T15440] bond0: entered promiscuous mode [ 465.954805][T15440] bond0: entered allmulticast mode [ 465.959151][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2764'. [ 465.966177][T15440] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 465.971926][T15440] bond0: (slave bridge0): making interface the new active one [ 465.976254][T15440] bridge0: entered promiscuous mode [ 465.978196][T15440] bridge0: entered allmulticast mode [ 465.980937][T15440] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 466.116286][T15447] xt_TCPMSS: Only works on TCP SYN packets [ 466.329270][T15452] netlink: 'syz.5.2769': attribute type 10 has an invalid length. [ 466.333822][T15452] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2769'. [ 466.343994][T15452] team0: Port device geneve0 added [ 466.437866][T15457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2768'. [ 466.443438][T15457] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2768'. [ 466.459778][T15457] batadv1: entered allmulticast mode [ 467.351808][T15468] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2775'. [ 467.394794][ T6025] usb 7-1: USB disconnect, device number 15 [ 467.700783][T12871] Bluetooth: Error in BCSP hdr checksum [ 467.710688][T15479] netlink: 'syz.2.2777': attribute type 7 has an invalid length. [ 467.952283][T12171] Bluetooth: Error in BCSP hdr checksum [ 468.211024][T12883] Bluetooth: Error in BCSP hdr checksum [ 468.854854][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2786'. [ 468.874739][T15486] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 468.877166][T15486] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 468.880319][T15486] vhci_hcd vhci_hcd.0: Device attached [ 468.927937][T15501] syzkaller1: entered promiscuous mode [ 468.930207][T15501] syzkaller1: entered allmulticast mode [ 468.937213][T15501] program syz.5.2786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 469.119405][ T6025] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 469.269942][T15502] vhci_hcd: connection reset by peer [ 469.272711][T12871] vhci_hcd: stop threads [ 469.274768][T12871] vhci_hcd: release socket [ 469.276971][T12871] vhci_hcd: disconnect device [ 469.509619][ T64] Bluetooth: hci5: command 0x1003 tx timeout [ 469.511933][ T5947] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 469.632360][T15510] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2789'. [ 469.668550][T15512] hsr0: left allmulticast mode [ 469.670565][T15512] hsr_slave_0: left allmulticast mode [ 469.718991][T15516] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2792'. [ 469.800568][T15522] syzkaller0: entered promiscuous mode [ 469.802454][T15522] syzkaller0: entered allmulticast mode [ 469.890805][T15526] syz.0.2794 (15526): drop_caches: 2 [ 470.277596][T15541] FAULT_INJECTION: forcing a failure. [ 470.277596][T15541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.304154][T15541] CPU: 0 UID: 0 PID: 15541 Comm: syz.4.2801 Not tainted syzkaller #0 PREEMPT(full) [ 470.304197][T15541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 470.304208][T15541] Call Trace: [ 470.304215][T15541] [ 470.304223][T15541] dump_stack_lvl+0x16c/0x1f0 [ 470.304251][T15541] should_fail_ex+0x512/0x640 [ 470.304277][T15541] _copy_to_user+0x32/0xd0 [ 470.304296][T15541] simple_read_from_buffer+0xcb/0x170 [ 470.304315][T15541] proc_fail_nth_read+0x197/0x240 [ 470.304328][T15541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 470.304340][T15541] ? rw_verify_area+0xcf/0x6c0 [ 470.304351][T15541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 470.304363][T15541] vfs_read+0x1e4/0xcf0 [ 470.304378][T15541] ? __pfx_vfs_read+0x10/0x10 [ 470.304388][T15541] ? find_held_lock+0x2b/0x80 [ 470.304404][T15541] ? __fget_files+0x20e/0x3c0 [ 470.304431][T15541] ksys_read+0x12a/0x250 [ 470.304445][T15541] ? __pfx_ksys_read+0x10/0x10 [ 470.304458][T15541] ? rcu_is_watching+0x12/0xc0 [ 470.304472][T15541] __do_fast_syscall_32+0x7c/0x300 [ 470.304488][T15541] do_fast_syscall_32+0x32/0x80 [ 470.304502][T15541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 470.304517][T15541] RIP: 0023:0xf70dd579 [ 470.304526][T15541] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 470.304538][T15541] RSP: 002b:00000000f54cd590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 470.304549][T15541] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54cd620 [ 470.304556][T15541] RDX: 000000000000000f RSI: 00000000f7476ff4 RDI: 0000000000000000 [ 470.304562][T15541] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 470.304569][T15541] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 470.304575][T15541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 470.304590][T15541] [ 470.460794][T13599] usb 48-1: device descriptor read/8, error -110 [ 470.723960][T15552] netlink: zone id is out of range [ 470.729041][T15552] netlink: zone id is out of range [ 470.749266][T15552] netlink: zone id is out of range [ 470.753896][T15552] netlink: zone id is out of range [ 470.755596][T15552] netlink: zone id is out of range [ 470.769780][T15552] netlink: zone id is out of range [ 470.772468][T15552] netlink: zone id is out of range [ 470.776280][T15552] netlink: zone id is out of range [ 470.778445][T15552] netlink: zone id is out of range [ 470.786432][T15552] netlink: zone id is out of range [ 470.889575][T15558] tipc: Invalid UDP bearer configuration [ 470.889641][T15558] tipc: Enabling of bearer rejected, failed to enable media [ 470.903114][T15560] netlink: 'syz.2.2808': attribute type 1 has an invalid length. [ 470.930364][T13599] usb usb48-port1: attempt power cycle [ 471.729980][T13599] usb usb48-port1: unable to enumerate USB device [ 472.339498][ T64] Bluetooth: hci5: command 0x1003 tx timeout [ 472.342602][ T5947] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 472.476949][T15581] netlink: 'syz.5.2814': attribute type 23 has an invalid length. [ 472.585462][T15588] netlink: 'syz.5.2816': attribute type 1 has an invalid length. [ 472.607597][T15588] bond0: entered promiscuous mode [ 472.610412][T15588] bond0: entered allmulticast mode [ 472.619600][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2816'. [ 472.644674][T15588] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 472.655580][T15588] bond0: (slave bridge1): making interface the new active one [ 472.659206][T15588] bridge1: entered promiscuous mode [ 472.664899][T15588] bridge1: entered allmulticast mode [ 472.668120][T15588] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 472.824805][T15598] xt_TCPMSS: Only works on TCP SYN packets [ 473.624011][T15617] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2825'. [ 473.771043][T15620] syzkaller0: entered promiscuous mode [ 473.772974][T15620] syzkaller0: entered allmulticast mode [ 473.806768][T15624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2828'. [ 473.833496][T15624] bond0: (slave bridge0): Releasing active interface [ 473.836410][T15624] bridge0 (unregistering): left promiscuous mode [ 473.838844][T15624] bridge0 (unregistering): left allmulticast mode [ 473.920927][T15625] tipc: Enabled bearer , priority 0 [ 473.933587][T15619] tipc: Resetting bearer [ 473.997038][T15619] tipc: Disabling bearer [ 474.019071][T15627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2829'. [ 474.033801][T15627] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2829'. [ 474.050334][T15627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2829'. [ 474.069801][T14568] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 474.163268][T15628] cgroup: No subsys list or none specified [ 474.199576][T14568] usb 10-1: device descriptor read/64, error -71 [ 474.219501][ T6025] vhci_hcd: vhci_device speed not set [ 474.417788][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2832'. [ 474.449463][T14568] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 474.579437][T14568] usb 10-1: device descriptor read/64, error -71 [ 474.689638][T14568] usb usb10-port1: attempt power cycle [ 474.944496][T15636] team0 (unregistering): Port device team_slave_0 removed [ 474.973977][T15636] team0 (unregistering): Port device team_slave_1 removed [ 475.040283][T14568] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 475.080087][T14568] usb 10-1: device descriptor read/8, error -71 [ 475.319420][T14568] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 475.342388][T14568] usb 10-1: device descriptor read/8, error -71 [ 475.449644][T14568] usb usb10-port1: unable to enumerate USB device [ 475.547478][T15646] syzkaller0: entered promiscuous mode [ 475.549474][T15646] syzkaller0: entered allmulticast mode [ 475.565325][T15646] tipc: Enabled bearer , priority 0 [ 475.568654][T15645] tipc: Resetting bearer [ 475.591085][T15645] tipc: Disabling bearer [ 475.677550][T15648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2836'. [ 475.735189][T15652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2837'. [ 475.742157][T15652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2837'. [ 476.051449][T15658] 8021q: adding VLAN 0 to HW filter on device bond7 [ 476.055187][T15658] bond0: (slave bond7): Enslaving as an active interface with a down link [ 476.062824][T15658] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2839'. [ 476.118313][T15665] fuse: Bad value for 'fd' [ 476.320519][T15668] Mount JFS Failure: -22 [ 476.322241][T15668] jfs_mount failed w/return code = -22 [ 476.471667][T15672] loop2: detected capacity change from 0 to 7 [ 476.478515][T11031] loop2: [ 476.480176][T11031] loop2: partition table partially beyond EOD, truncated [ 476.694695][ T5354] loop2: [ 476.696162][ T5354] loop2: partition table partially beyond EOD, truncated [ 477.798653][T15705] tipc: Enabling of bearer rejected, failed to enable media [ 477.802482][T15704] syzkaller0: entered promiscuous mode [ 477.804895][T15704] syzkaller0: entered allmulticast mode [ 477.833490][T15704] tipc: Enabled bearer , priority 0 [ 477.838320][T15702] tipc: Resetting bearer [ 477.860591][T15702] tipc: Disabling bearer [ 477.885040][T15710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.888308][T15710] bond0: (slave bond1): Enslaving as an active interface with a down link [ 477.897734][T15710] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2855'. [ 478.014696][T15715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2858'. [ 478.039739][T15716] [ 478.040839][T15716] ====================================================== [ 478.043934][T15716] WARNING: possible circular locking dependency detected [ 478.047482][T15716] syzkaller #0 Not tainted [ 478.050442][T15716] ------------------------------------------------------ [ 478.054696][T15716] syz.5.2857/15716 is trying to acquire lock: [ 478.057260][T15716] ffff88804efc4bc0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: walk_component+0x345/0x5b0 [ 478.061220][T15716] [ 478.061220][T15716] but task is already holding lock: [ 478.064636][T15716] ffff888061e0b488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 478.069059][T15716] [ 478.069059][T15716] which lock already depends on the new lock. [ 478.069059][T15716] [ 478.072451][T15716] [ 478.072451][T15716] the existing dependency chain (in reverse order) is: [ 478.076135][T15716] [ 478.076135][T15716] -> #3 (&of->mutex){+.+.}-{4:4}: [ 478.078576][T15716] __mutex_lock+0x193/0x1060 [ 478.080280][T15716] kernfs_fop_write_iter+0x28f/0x570 [ 478.082321][T15716] iter_file_splice_write+0xa24/0x12e0 [ 478.084451][T15716] do_splice+0x1478/0x1fc0 [ 478.086423][T15716] __do_splice+0x32a/0x360 [ 478.088596][T15716] __ia32_sys_splice+0x189/0x250 [ 478.090615][T15716] __do_fast_syscall_32+0x7c/0x300 [ 478.092468][T15716] do_fast_syscall_32+0x32/0x80 [ 478.094278][T15716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.096513][T15716] [ 478.096513][T15716] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 478.099113][T15716] __mutex_lock+0x193/0x1060 [ 478.100845][T15716] pipe_lock+0x64/0x80 [ 478.102392][T15716] iter_file_splice_write+0x1ea/0x12e0 [ 478.104413][T15716] do_splice+0x1478/0x1fc0 [ 478.106102][T15716] __do_splice+0x32a/0x360 [ 478.107825][T15716] __ia32_sys_splice+0x189/0x250 [ 478.109787][T15716] __do_fast_syscall_32+0x7c/0x300 [ 478.111846][T15716] do_fast_syscall_32+0x32/0x80 [ 478.114312][T15716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.117136][T15716] [ 478.117136][T15716] -> #1 (sb_writers#5){.+.+}-{0:0}: [ 478.120207][T15716] mnt_want_write+0x6f/0x450 [ 478.122401][T15716] ovl_create_object+0x12c/0x300 [ 478.124736][T15716] lookup_open.isra.0+0x11d3/0x1580 [ 478.127193][T15716] path_openat+0x893/0x2cb0 [ 478.129522][T15716] do_filp_open+0x20b/0x470 [ 478.131692][T15716] do_sys_openat2+0x11b/0x1d0 [ 478.133879][T15716] __ia32_sys_creat+0xcb/0x120 [ 478.136095][T15716] __do_fast_syscall_32+0x7c/0x300 [ 478.138419][T15716] do_fast_syscall_32+0x32/0x80 [ 478.140451][T15716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.142756][T15716] [ 478.142756][T15716] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 478.145701][T15716] __lock_acquire+0x126f/0x1c90 [ 478.147668][T15716] lock_acquire+0x179/0x350 [ 478.149706][T15716] down_read+0x9b/0x480 [ 478.151608][T15716] walk_component+0x345/0x5b0 [ 478.153594][T15716] path_lookupat+0x142/0x6d0 [ 478.155283][T15716] filename_lookup+0x224/0x5f0 [ 478.157076][T15716] kern_path+0x35/0x50 [ 478.158782][T15716] lookup_bdev+0xd8/0x280 [ 478.160612][T15716] resume_store+0x1d6/0x460 [ 478.162752][T15716] kobj_attr_store+0x58/0x80 [ 478.164793][T15716] sysfs_kf_write+0xf2/0x150 [ 478.166607][T15716] kernfs_fop_write_iter+0x3af/0x570 [ 478.168603][T15716] vfs_write+0x7d3/0x11d0 [ 478.170446][T15716] ksys_write+0x12a/0x250 [ 478.172106][T15716] __do_fast_syscall_32+0x7c/0x300 [ 478.174081][T15716] do_fast_syscall_32+0x32/0x80 [ 478.176077][T15716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.178403][T15716] [ 478.178403][T15716] other info that might help us debug this: [ 478.178403][T15716] [ 478.182201][T15716] Chain exists of: [ 478.182201][T15716] &ovl_i_mutex_dir_key[depth] --> &pipe->mutex --> &of->mutex [ 478.182201][T15716] [ 478.187446][T15716] Possible unsafe locking scenario: [ 478.187446][T15716] [ 478.190623][T15716] CPU0 CPU1 [ 478.192431][T15716] ---- ---- [ 478.194233][T15716] lock(&of->mutex); [ 478.195659][T15716] lock(&pipe->mutex); [ 478.198089][T15716] lock(&of->mutex); [ 478.200295][T15716] rlock(&ovl_i_mutex_dir_key[depth]); [ 478.202174][T15716] [ 478.202174][T15716] *** DEADLOCK *** [ 478.202174][T15716] [ 478.204828][T15716] 4 locks held by syz.5.2857/15716: [ 478.206582][T15716] #0: ffff88805ff6c478 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 478.209830][T15716] #1: ffff8880489fc420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 478.213278][T15716] #2: ffff888061e0b488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 478.216743][T15716] #3: ffff88801c7143c8 (kn->active#73){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 478.220386][T15716] [ 478.220386][T15716] stack backtrace: [ 478.222594][T15716] CPU: 2 UID: 0 PID: 15716 Comm: syz.5.2857 Not tainted syzkaller #0 PREEMPT(full) [ 478.222611][T15716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 478.222619][T15716] Call Trace: [ 478.222627][T15716] [ 478.222633][T15716] dump_stack_lvl+0x116/0x1f0 [ 478.222650][T15716] print_circular_bug+0x275/0x350 [ 478.222666][T15716] check_noncircular+0x14c/0x170 [ 478.222689][T15716] __lock_acquire+0x126f/0x1c90 [ 478.222712][T15716] lock_acquire+0x179/0x350 [ 478.222731][T15716] ? walk_component+0x345/0x5b0 [ 478.222748][T15716] ? __pfx___might_resched+0x10/0x10 [ 478.222765][T15716] ? try_to_unlazy+0x24e/0x660 [ 478.222781][T15716] down_read+0x9b/0x480 [ 478.222796][T15716] ? walk_component+0x345/0x5b0 [ 478.222806][T15716] ? __pfx_down_read+0x10/0x10 [ 478.222821][T15716] ? lookup_fast+0x156/0x610 [ 478.222831][T15716] walk_component+0x345/0x5b0 [ 478.222841][T15716] path_lookupat+0x142/0x6d0 [ 478.222852][T15716] filename_lookup+0x224/0x5f0 [ 478.222864][T15716] ? __pfx_filename_lookup+0x10/0x10 [ 478.222888][T15716] ? getname_kernel+0x52/0x370 [ 478.222905][T15716] ? __asan_memcpy+0x3c/0x60 [ 478.222919][T15716] kern_path+0x35/0x50 [ 478.222931][T15716] lookup_bdev+0xd8/0x280 [ 478.222949][T15716] ? __pfx_lookup_bdev+0x10/0x10 [ 478.222968][T15716] ? __asan_memcpy+0x3c/0x60 [ 478.222982][T15716] resume_store+0x1d6/0x460 [ 478.222993][T15716] ? __pfx_resume_store+0x10/0x10 [ 478.223005][T15716] ? find_held_lock+0x2b/0x80 [ 478.223023][T15716] ? __pfx_resume_store+0x10/0x10 [ 478.223036][T15716] kobj_attr_store+0x58/0x80 [ 478.223054][T15716] ? __pfx_kobj_attr_store+0x10/0x10 [ 478.223074][T15716] sysfs_kf_write+0xf2/0x150 [ 478.223088][T15716] kernfs_fop_write_iter+0x3af/0x570 [ 478.223099][T15716] ? __pfx_sysfs_kf_write+0x10/0x10 [ 478.223112][T15716] vfs_write+0x7d3/0x11d0 [ 478.223124][T15716] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 478.223135][T15716] ? __pfx_vfs_write+0x10/0x10 [ 478.223147][T15716] ? find_held_lock+0x2b/0x80 [ 478.223162][T15716] ksys_write+0x12a/0x250 [ 478.223174][T15716] ? __pfx_ksys_write+0x10/0x10 [ 478.223187][T15716] ? rcu_is_watching+0x12/0xc0 [ 478.223200][T15716] __do_fast_syscall_32+0x7c/0x300 [ 478.223215][T15716] do_fast_syscall_32+0x32/0x80 [ 478.223229][T15716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.223244][T15716] RIP: 0023:0xf70dd579 [ 478.223254][T15716] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 478.223265][T15716] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 478.223276][T15716] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 0000000080000000 [ 478.223283][T15716] RDX: 00000000fffffd65 RSI: 0000000000000000 RDI: 0000000000000000 [ 478.223290][T15716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 478.223296][T15716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.223302][T15716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.223313][T15716] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 478.367465][T15716] block device autoloading is deprecated and will be removed. [ 478.370570][T15716] PM: Image not found (code -5) [ 478.510021][ T1205] smc: removing ib device syz1 [ 478.518409][ T53] syz1: Port: 1 Link DOWN [ 478.835584][T12872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.002309][T12872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.075453][T12872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.154149][T12872] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.268016][T12872] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.342396][T12872] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.445094][T12872] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.507533][T12872] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.609272][T12872] bridge_slave_1: left allmulticast mode [ 479.615514][T12872] bridge_slave_1: left promiscuous mode [ 479.618033][T12872] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.622713][T12872] bridge_slave_0: left allmulticast mode [ 479.625625][T12872] bridge_slave_0: left promiscuous mode [ 479.628717][T12872] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.634706][T12872] bridge_slave_1: left allmulticast mode [ 479.637190][T12872] bridge_slave_1: left promiscuous mode [ 479.639903][T12872] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.644596][T12872] bridge_slave_0: left allmulticast mode [ 479.647108][T12872] bridge_slave_0: left promiscuous mode [ 479.650201][T12872] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.772607][T12872] bond0 (unregistering): (slave bridge1): Releasing active interface [ 479.776257][T12872] bond0 (unregistering): (slave bridge1): the permanent HWaddr of slave - fe:89:9c:ea:5a:06 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 479.783962][T12872] bridge1 (unregistering): left promiscuous mode [ 479.786333][T12872] bridge1 (unregistering): left allmulticast mode [ 479.917083][T12872] bond1 (unregistering): Released all slaves [ 479.998091][T12872] bond2 (unregistering): Released all slaves [ 480.002380][T12872] bond0 (unregistering): (slave bond3): Releasing active interface [ 480.005579][T12872] bond0 (unregistering): (slave bond5): Releasing active interface [ 480.008767][T12872] bond0 (unregistering): (slave bond6): Releasing active interface [ 480.012308][T12872] bond0 (unregistering): (slave bond7): Releasing active interface [ 480.015549][T12872] bond0 (unregistering): Released all slaves [ 480.092663][T12872] bond3 (unregistering): Released all slaves [ 480.165244][T12872] bond4 (unregistering): Released all slaves [ 480.236963][T12872] bond5 (unregistering): Released all slaves [ 480.323134][T12872] bond6 (unregistering): Released all slaves [ 480.417921][T12872] bond7 (unregistering): Released all slaves [ 480.460379][T12872] team0: Port device geneve0 removed [ 480.528873][T12872] bond0 (unregistering): (slave bridge1): Releasing active interface [ 480.532524][T12872] bond0 (unregistering): (slave bridge1): the permanent HWaddr of slave - fa:fe:7f:0d:3e:c1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 480.540436][T12872] bridge1 (unregistering): left promiscuous mode [ 480.543517][T12872] bridge1 (unregistering): left allmulticast mode [ 480.641341][T12872] bond0 (unregistering): (slave bond1): Releasing active interface [ 480.645269][T12872] bond0 (unregistering): Released all slaves [ 480.651476][T12872] bond1 (unregistering): Released all slaves [ 482.321539][T12872] tipc: Left network mode [ 482.323722][T12872] tipc: Left network mode [ 482.680044][T12872] hsr_slave_0: left promiscuous mode [ 482.683420][T12872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.686736][T12872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.690979][T12872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.694383][T12872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.701032][T12872] hsr_slave_0: left promiscuous mode [ 482.704165][T12872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.707407][T12872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.712587][T12872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.715948][T12872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.723208][T12872] veth1_macvtap: left promiscuous mode [ 482.725215][T12872] veth0_macvtap: left promiscuous mode [ 482.727458][T12872] veth1_vlan: left promiscuous mode [ 482.729444][T12872] veth0_vlan: left promiscuous mode [ 482.731487][T12872] veth1_macvtap: left promiscuous mode [ 482.733480][T12872] veth0_macvtap: left promiscuous mode [ 482.735586][T12872] veth1_vlan: left promiscuous mode [ 482.737550][T12872] veth0_vlan: left promiscuous mode [ 483.471658][T12872] team0 (unregistering): Port device team_slave_1 removed [ 483.527909][T12872] team0 (unregistering): Port device team_slave_0 removed [ 484.576031][T12872] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.665711][T12872] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.753776][T12872] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.814363][T12872] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.905009][T12872] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.966515][T12872] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.046105][T12872] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.134529][T12872] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.281221][T12872] bond0 (unregistering): (slave bridge1): Releasing active interface [ 485.284455][T12872] bridge1 (unregistering): left promiscuous mode [ 485.287149][T12872] bridge1 (unregistering): left allmulticast mode [ 485.361788][T12872] bond2 (unregistering): (slave bridge2): Releasing active interface [ 485.365185][T12872] bridge2 (unregistering): left promiscuous mode [ 485.367938][T12872] bridge2 (unregistering): left allmulticast mode [ 485.431211][T12872] bond3 (unregistering): (slave bridge3): Releasing active interface [ 485.434715][T12872] bridge3 (unregistering): left promiscuous mode [ 485.437516][T12872] bridge3 (unregistering): left allmulticast mode [ 485.492412][T12872] bond4 (unregistering): (slave bridge0): Releasing active interface [ 485.495913][T12872] bridge0 (unregistering): left promiscuous mode [ 485.498723][T12872] bridge0 (unregistering): left allmulticast mode [ 485.705553][T12872] bond1 (unregistering): Released all slaves [ 485.712039][T12872] bond0 (unregistering): Released all slaves [ 485.717947][T12872] bond2 (unregistering): Released all slaves [ 485.724356][T12872] bond3 (unregistering): Released all slaves [ 485.730315][T12872] bond4 (unregistering): Released all slaves [ 485.892778][T12872] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.896557][T12872] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.901564][T12872] .` (unregistering): Released all slaves [ 485.905609][T12872] bond0 (unregistering): Released all slaves [ 486.000729][T12872] tipc: Disabling bearer [ 486.003135][T12872] tipc: Left network mode [ 486.010623][T12872] tipc: Left network mode [ 486.181860][T12872] hsr_slave_0: left promiscuous mode [ 486.185135][T12872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.188376][T12872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.193272][T12872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.197115][T12872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.203467][T12872] hsr_slave_0: left promiscuous mode [ 486.207081][T12872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.210438][T12872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.214100][T12872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.217440][T12872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.228003][T12872] veth1_macvtap: left promiscuous mode [ 486.232789][T12872] veth0_macvtap: left promiscuous mode [ 486.235333][T12872] veth1_vlan: left promiscuous mode [ 486.237693][T12872] veth0_vlan: left promiscuous mode [ 486.241127][T12872] veth1_macvtap: left promiscuous mode [ 486.243753][T12872] veth0_macvtap: left promiscuous mode [ 486.246719][T12872] veth1_vlan: left promiscuous mode [ 486.249437][T12872] veth0_vlan: left promiscuous mode [ 486.354697][T12872] pim6reg (unregistering): left allmulticast mode [ 486.548964][T12872] team0 (unregistering): Port device team_slave_1 removed [ 486.607410][T12872] team0 (unregistering): Port device team_slave_0 removed [ 487.256814][T12872] team0 (unregistering): Port device team_slave_1 removed [ 487.307913][T12872] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 20:06:06 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b23b6c0 RCX=ffffffff81b06b13 RDX=ffff88801dad4900 RSI=ffffffff81b06aed RDI=0000000000000005 RBP=ffffc9000044fcf8 RSP=ffffc9000044fba0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c79e8e R12=1ffff92000089f7c R13=0000000000000003 R14=0000000000000001 R15=ffffed10056476d9 RIP=ffffffff81b06af3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809780d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c370559 CR3=0000000068976000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000d61d8c RBX=0000000000000001 RCX=ffffffff8b5d92a9 RDX=ffffed1005666656 RSI=ffffffff8bf07540 RDI=ffffffff8191bf0d RBP=ffffed1003b5f490 RSP=ffffc9000046fde8 R8 =0000000000000000 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801dafa480 R14=ffffffff908248d0 R15=0000000000000000 RIP=ffffffff8b5d7d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809790d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c29db4c CR3=000000005f57f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85269695 RDI=ffffffff9adc5de0 RBP=ffffffff9adc5da0 RSP=ffffc900043f70c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000005b R14=ffffffff9adc5da0 R15=ffffffff85269630 RIP=ffffffff852696bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097a0d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000d000 CR3=00000000651ac000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000005549b4 RBX=0000000000000003 RCX=ffffffff8b5d92a9 RDX=ffffed10056a6656 RSI=ffffffff8bf07540 RDI=ffffffff8191bf0d RBP=ffffed10037e5000 RSP=ffffc9000048fde8 R8 =0000000000000000 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801bf28000 R14=ffffffff908248d0 R15=0000000000000000 RIP=ffffffff8b5d7d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097b0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3f117a CR3=0000000068976000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000