last executing test programs: 7m50.644200287s ago: executing program 0 (id=426): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 7m49.812304324s ago: executing program 0 (id=432): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x10000, 0x0) renameat2(r1, &(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000500)='./bus\x00', 0x0) 7m49.730515698s ago: executing program 0 (id=433): mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 7m49.543289784s ago: executing program 0 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1a1011, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 7m49.542339376s ago: executing program 0 (id=439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m49.393209762s ago: executing program 0 (id=442): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) 7m49.338947869s ago: executing program 32 (id=442): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) 7.864339558s ago: executing program 1 (id=3551): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x5c}}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x52, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd604dd308001c0600fc010000000800", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70020100907800"], 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYRESHEX=r2], 0x0, 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000140)={0x3, 0xb}) 6.951005971s ago: executing program 4 (id=3556): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) move_pages(0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=[0x0], 0x2) r2 = inotify_init() syz_open_pts(0xffffffffffffffff, 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) r3 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r4, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r3, 0x0) 6.788997588s ago: executing program 1 (id=3561): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESDEC=r3, @ANYBLOB], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat$null(r6, &(0x7f0000000440)='./file0\x00', 0x4, 0x103) r7 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r7, 0x28, 0x3c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) vmsplice(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) sysinfo(0x0) 5.688807109s ago: executing program 1 (id=3562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0xad3394dc192dae8b, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5.688574028s ago: executing program 2 (id=3563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'ip6tnl0\x00', {0x2, 0x0, @private=0xfffffffe}}) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) ioctl$FIONCLEX(r0, 0x5450) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x640688d1) unshare(0x6a040000) mmap(&(0x7f0000595000/0x2000)=nil, 0x2000, 0x3, 0x2010, 0xffffffffffffffff, 0xec0fa000) 5.539914081s ago: executing program 3 (id=3564): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$midi(&(0x7f0000000100), 0xbe, 0x123000) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x900}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000680)='syzkaller\x00', 0xa, 0x1009, &(0x7f0000001cc0)=""/4105, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 5.362740411s ago: executing program 4 (id=3565): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.761581989s ago: executing program 2 (id=3566): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000080)={@broadcast, @multicast2, 0x1, "2e982c09ab15eb7cc2bb0a1eec919049d880907f99a9f17c7e9bd9a81fa77d7e", 0x7, 0x10001, 0x572, 0xfffffffb}, 0x3c) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0xe, 0x4) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, 0x0, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002340)=@newlink={0x48, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, 0x4982}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @ip6vti={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x14, 0x5, @remote}]}}}]}, 0x48}}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 4.610542091s ago: executing program 3 (id=3567): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 4.609349069s ago: executing program 2 (id=3575): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$pmem0(0xffffff9c, &(0x7f00000000c0), 0x165101, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 3.376514011s ago: executing program 3 (id=3568): socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000001080)={0x1, 0x1, [@multicast]}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000080)={{}, "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"}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r3 = socket$inet6(0xa, 0x3, 0x6) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x800008d, 0x0) 3.275395426s ago: executing program 4 (id=3569): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$can_bcm(0x1d, 0x2, 0x2) getpeername(r0, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x2, 0x156}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r1, 0x26c8, 0x0, 0x1, 0x0, 0x10) 3.003283226s ago: executing program 4 (id=3570): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.844517806s ago: executing program 1 (id=3571): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r3, r3, 0x0, 0x40008) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.803660126s ago: executing program 2 (id=3572): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESDEC=r3, @ANYBLOB], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat$null(r6, &(0x7f0000000440)='./file0\x00', 0x4, 0x103) r7 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r7, 0x28, 0x3c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) vmsplice(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) sysinfo(0x0) 1.800857598s ago: executing program 3 (id=3581): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3fff, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x400, 0x8000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000240)={0x2, 0xff}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0x8000000006, 0x0, 0xe448}) io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9", 0x2e0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af", 0x32}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x10, 0x29, 0x37}}, @ip_tos_u8={{0xd, 0x29, 0x37}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}, 0x0) 1.746937514s ago: executing program 1 (id=3573): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1.692940999s ago: executing program 4 (id=3574): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000080), 0x2000011a) 917.835238ms ago: executing program 2 (id=3576): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6(0xa, 0x800, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) 740.950166ms ago: executing program 3 (id=3577): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904000001030000000921050000013b05000905810300"], 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x4a, 0x0, &(0x7f0000cab000)) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0x9, 0x4) creat(&(0x7f0000000140)='./file0\x00', 0x5a) 72.865808ms ago: executing program 4 (id=3578): bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x3, 0x169, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000080), 0x0) splice(r5, 0x0, r6, 0x0, 0x408cd, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 72.544907ms ago: executing program 1 (id=3579): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept4$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x80800) r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r6, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 22.555891ms ago: executing program 3 (id=3580): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r3, 0x6e2, 0x620, 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=3582): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) syz_emit_ethernet(0x83, 0x0, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, &(0x7f0000000080)) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 273.162125][T11571] bond6: (slave macvlan2): failed to get link speed/duplex [ 273.268137][T11564] bond6: (slave macvlan2): failed to get link speed/duplex [ 273.333808][T12908] overlayfs: failed to clone upperpath [ 273.381415][T11564] bond6: (slave macvlan2): failed to get link speed/duplex [ 273.493154][T11564] bond6: (slave macvlan2): failed to get link speed/duplex [ 273.599870][T11564] bond6: (slave macvlan2): failed to get link speed/duplex [ 273.712784][T11571] bond6: (slave macvlan2): failed to get link speed/duplex [ 273.818014][T11571] bond6: (slave macvlan2): failed to get link speed/duplex [ 273.928227][T11580] bond6: (slave macvlan2): failed to get link speed/duplex [ 274.639578][T12932] overlayfs: failed to clone upperpath [ 274.764863][T12934] netlink: 'syz.2.2162': attribute type 39 has an invalid length. [ 274.770889][T12934] veth0_macvtap: left promiscuous mode [ 275.164415][T12943] netlink: 'syz.3.2165': attribute type 1 has an invalid length. [ 275.188489][T12943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.220094][T12943] vlan2: entered promiscuous mode [ 275.222726][T12943] bond0: entered promiscuous mode [ 275.226240][T12943] vlan2: entered allmulticast mode [ 275.229510][T12943] bond0: entered allmulticast mode [ 275.257992][T12943] bond0: (slave gretap1): making interface the new active one [ 275.260955][T12943] gretap1: entered promiscuous mode [ 275.262905][T12943] gretap1: entered allmulticast mode [ 275.267626][T12943] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 275.539389][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2168'. [ 275.545560][T12951] dummy0: entered promiscuous mode [ 275.550790][T12951] dummy0: left promiscuous mode [ 276.558854][ T40] audit: type=1326 audit(2000000126.467:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12964 comm="syz.2.2173" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb3579 code=0x0 [ 276.650377][ T40] audit: type=1800 audit(2000000126.557:256): pid=12973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2174" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 276.710596][T12975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2175'. [ 276.733353][T12975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2175'. [ 276.908070][T12977] overlayfs: failed to clone upperpath [ 276.990925][T12981] netlink: 'syz.4.2178': attribute type 1 has an invalid length. [ 277.017092][T12981] 8021q: adding VLAN 0 to HW filter on device bond4 [ 277.041737][T12981] 8021q: adding VLAN 0 to HW filter on device bond4 [ 277.044391][T12981] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 277.048723][T12981] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 277.099299][T12983] bond5: entered promiscuous mode [ 277.103838][T12983] 8021q: adding VLAN 0 to HW filter on device bond5 [ 277.107215][T12983] bond4: (slave bond5): Enslaving as an active interface with a down link [ 277.144768][T12981] macvlan3: entered promiscuous mode [ 277.146517][T12981] macvlan3: entered allmulticast mode [ 277.148970][T12981] bond4: entered promiscuous mode [ 277.151905][T12981] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 277.156494][T12981] bond4: left promiscuous mode [ 277.376778][T12994] overlayfs: failed to clone upperpath [ 277.977878][T11577] net_ratelimit: 34 callbacks suppressed [ 277.977891][T11577] bond6: (slave macvlan2): failed to get link speed/duplex [ 278.088863][T11596] bond6: (slave macvlan2): failed to get link speed/duplex [ 278.198120][T11577] bond6: (slave macvlan2): failed to get link speed/duplex [ 278.225216][T13009] lo speed is unknown, defaulting to 1000 [ 278.308061][ T1150] bond6: (slave macvlan2): failed to get link speed/duplex [ 278.427867][ T1146] bond6: (slave macvlan2): failed to get link speed/duplex [ 278.537961][ T1150] bond6: (slave macvlan2): failed to get link speed/duplex [ 278.650182][T11591] bond6: (slave macvlan2): failed to get link speed/duplex [ 278.769249][ T1150] bond6: (slave macvlan2): failed to get link speed/duplex [ 278.887980][ T1150] bond6: (slave macvlan2): failed to get link speed/duplex [ 278.977795][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.998489][ T1146] bond6: (slave macvlan2): failed to get link speed/duplex [ 280.083816][T13048] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2200'. [ 281.966562][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2209'. [ 281.979242][T13086] ip6gretap0: entered promiscuous mode [ 281.985587][T13086] ip6gretap0: left promiscuous mode [ 282.620037][T13095] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2212'. [ 282.626896][T13095] vlan3: entered promiscuous mode [ 282.629683][T13095] bridge0: entered promiscuous mode [ 283.067701][T11591] net_ratelimit: 32 callbacks suppressed [ 283.067714][T11591] bond6: (slave macvlan2): failed to get link speed/duplex [ 283.177614][T11570] bond6: (slave macvlan2): failed to get link speed/duplex [ 283.288256][T11577] bond6: (slave macvlan2): failed to get link speed/duplex [ 283.397977][T11591] bond6: (slave macvlan2): failed to get link speed/duplex [ 283.507574][T11591] bond6: (slave macvlan2): failed to get link speed/duplex [ 283.658590][ T1150] bond6: (slave macvlan2): failed to get link speed/duplex [ 283.700550][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'. [ 283.777500][T11591] bond6: (slave macvlan2): failed to get link speed/duplex [ 283.827923][T13130] netlink: 'syz.1.2224': attribute type 1 has an invalid length. [ 283.887756][T13130] 8021q: adding VLAN 0 to HW filter on device bond3 [ 283.925993][T13135] 8021q: adding VLAN 0 to HW filter on device bond3 [ 283.930336][T13135] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 283.943396][T13135] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 284.030927][T13130] bond4: entered promiscuous mode [ 284.036037][T13130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 284.042064][T13130] bond3: (slave bond4): Enslaving as an active interface with a down link [ 284.057997][ T1150] bond6: (slave macvlan2): failed to get link speed/duplex [ 284.111725][T13130] macvlan2: entered promiscuous mode [ 284.113813][T13130] macvlan2: entered allmulticast mode [ 284.116224][T13130] bond3: entered promiscuous mode [ 284.118652][T13130] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 284.123246][T13130] bond3: left promiscuous mode [ 284.167386][ T1150] bond6: (slave macvlan2): failed to get link speed/duplex [ 284.286634][ T1150] bond6: (slave macvlan2): failed to get link speed/duplex [ 286.083377][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2235'. [ 286.090203][T13172] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 286.095401][T13172] ip6gretap0: entered promiscuous mode [ 286.100192][T13172] bridge0: port 1(macvlan3) entered blocking state [ 286.102503][T13172] bridge0: port 1(macvlan3) entered disabled state [ 286.104799][T13172] macvlan3: entered allmulticast mode [ 286.106612][T13172] ip6gretap0: entered allmulticast mode [ 286.113278][T13172] bridge0: port 1(macvlan3) entered blocking state [ 286.116032][T13172] bridge0: port 1(macvlan3) entered forwarding state [ 286.175229][T13174] bridge: RTM_NEWNEIGH with invalid ether address [ 286.551642][T13182] wireguard0: entered promiscuous mode [ 286.553724][T13182] wireguard0: entered allmulticast mode [ 286.678206][T13189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2241'. [ 286.741431][T13189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2241'. [ 287.103748][T13200] netlink: 'syz.3.2243': attribute type 1 has an invalid length. [ 287.116226][T13200] 8021q: adding VLAN 0 to HW filter on device bond7 [ 287.138708][T13200] 8021q: adding VLAN 0 to HW filter on device bond7 [ 287.142207][T13200] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 287.146274][T13200] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 287.282884][T13200] bond8: entered promiscuous mode [ 287.285401][T13200] 8021q: adding VLAN 0 to HW filter on device bond8 [ 287.308618][T13200] bond7: (slave bond8): Enslaving as an active interface with a down link [ 287.349771][T13200] macvlan2: entered promiscuous mode [ 287.351769][T13200] macvlan2: entered allmulticast mode [ 287.353984][T13200] bond7: entered promiscuous mode [ 287.355899][T13200] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 287.460802][T13200] bond7: left promiscuous mode [ 288.137287][ T1150] net_ratelimit: 30 callbacks suppressed [ 288.137307][ T1150] bond6: (slave macvlan2): failed to get link speed/duplex [ 288.247111][T11570] bond6: (slave macvlan2): failed to get link speed/duplex [ 288.357323][T11570] bond6: (slave macvlan2): failed to get link speed/duplex [ 288.467318][T11591] bond6: (slave macvlan2): failed to get link speed/duplex [ 288.577574][ T1150] bond6: (slave macvlan2): failed to get link speed/duplex [ 288.730756][T11591] bond6: (slave macvlan2): failed to get link speed/duplex [ 288.871080][T11591] bond6: (slave macvlan2): failed to get link speed/duplex [ 288.977447][ T1150] bond6: (slave macvlan2): failed to get link speed/duplex [ 289.087630][T11570] bond6: (slave macvlan2): failed to get link speed/duplex [ 289.197112][ T1150] bond6: (slave macvlan2): failed to get link speed/duplex [ 291.918324][T13290] veth0_to_hsr: entered allmulticast mode [ 291.923082][T13289] veth0_to_hsr: left allmulticast mode [ 292.258548][T13297] bridge6: entered promiscuous mode [ 292.262071][T13297] bridge6: entered allmulticast mode [ 293.217908][T11547] net_ratelimit: 33 callbacks suppressed [ 293.217969][T11547] bond6: (slave macvlan2): failed to get link speed/duplex [ 293.237943][T13310] netlink: 'syz.2.2269': attribute type 1 has an invalid length. [ 293.346924][T13310] 8021q: adding VLAN 0 to HW filter on device bond8 [ 293.431895][T13315] Bluetooth: MGMT ver 1.23 [ 293.433437][T13315] Bluetooth: hci0: load_link_keys: too big key_count value 28530 [ 293.437850][T13312] 8021q: adding VLAN 0 to HW filter on device bond8 [ 293.443589][T13312] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 293.467166][T13312] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 293.479992][T13313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2269'. [ 293.540095][T13310] veth17: entered promiscuous mode [ 293.544174][T13310] bond8: (slave veth17): Enslaving as an active interface with a down link [ 293.547246][T13317] sch_tbf: burst 1821 is lower than device lo mtu (39799) ! [ 293.576122][T13313] 8021q: adding VLAN 0 to HW filter on device bond8 [ 293.586893][T13320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2271'. [ 293.607007][ T1150] bond6: (slave macvlan2): failed to get link speed/duplex [ 293.727723][ T1150] bond6: (slave macvlan2): failed to get link speed/duplex [ 293.800145][T13329] wireguard0: entered promiscuous mode [ 293.802338][T13329] wireguard0: entered allmulticast mode [ 293.837385][T11577] bond6: (slave macvlan2): failed to get link speed/duplex [ 293.947785][T11547] bond6: (slave macvlan2): failed to get link speed/duplex [ 294.057481][T11547] bond6: (slave macvlan2): failed to get link speed/duplex [ 294.167388][T11570] bond6: (slave macvlan2): failed to get link speed/duplex [ 294.277208][T11577] bond6: (slave macvlan2): failed to get link speed/duplex [ 294.336881][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.342055][T13335] netlink: 'syz.1.2276': attribute type 1 has an invalid length. [ 294.369106][T13335] 8021q: adding VLAN 0 to HW filter on device bond5 [ 294.394022][T13335] vlan4: entered allmulticast mode [ 294.397890][T13335] bond5: (slave vlan4): Error -34 calling dev_set_mtu [ 294.427033][T11570] bond6: (slave macvlan2): failed to get link speed/duplex [ 294.528625][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'. [ 294.537518][T11570] bond6: (slave macvlan2): failed to get link speed/duplex [ 294.541798][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'. [ 294.545928][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'. [ 294.928316][ T40] audit: type=1804 audit(2000000144.838:257): pid=13350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2281" name="file0" dev="ramfs" ino=51775 res=1 errno=0 [ 295.942203][T13375] netlink: 'syz.2.2287': attribute type 1 has an invalid length. [ 295.960911][T13375] 8021q: adding VLAN 0 to HW filter on device bond9 [ 295.988011][T13375] bond9: (slave geneve2): making interface the new active one [ 295.992712][T13375] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 296.026171][T13375] bond9: entered promiscuous mode [ 296.028472][T13375] geneve2: entered promiscuous mode [ 296.034017][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2288'. [ 296.039686][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2288'. [ 296.045397][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2288'. [ 296.540405][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2291'. [ 296.762324][ T5974] libceph: connect (1)[c::]:6789 error -101 [ 296.764962][ T5974] libceph: mon0 (1)[c::]:6789 connect error [ 296.817256][T13401] ceph: No mds server is up or the cluster is laggy [ 297.030780][T13408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2299'. [ 297.096332][T13410] bridge0: port 1(macvlan3) entered disabled state [ 297.396744][T11591] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.399509][T11591] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.402359][T11591] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.405165][T11591] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.431790][T13431] netlink: 'syz.3.2307': attribute type 1 has an invalid length. [ 297.494763][T13433] siw: device registration error -23 [ 297.647783][T13447] netlink: 'syz.1.2313': attribute type 1 has an invalid length. [ 297.663727][T13447] 8021q: adding VLAN 0 to HW filter on device bond6 [ 297.689555][T13447] bond6: (slave geneve2): making interface the new active one [ 297.708682][T13447] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 297.711932][ T1150] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.715733][ T1150] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.723269][ T1150] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.731068][ T1150] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.745988][T13447] bond6: entered promiscuous mode [ 297.751238][T13447] geneve2: entered promiscuous mode [ 298.212289][T13458] bridge10: entered promiscuous mode [ 298.214240][T13458] bridge10: entered allmulticast mode [ 298.563326][T13463] netlink: 'syz.4.2317': attribute type 1 has an invalid length. [ 298.587303][T13463] 8021q: adding VLAN 0 to HW filter on device bond6 [ 298.616365][T13463] 8021q: adding VLAN 0 to HW filter on device bond6 [ 298.621045][T13463] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 298.625284][T13463] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 298.672289][T13469] veth13: entered promiscuous mode [ 298.677948][T13469] bond6: (slave veth13): Enslaving as an active interface with a down link [ 298.729767][T13469] __nla_validate_parse: 6 callbacks suppressed [ 298.729780][T13469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2317'. [ 298.735052][T13469] 8021q: adding VLAN 0 to HW filter on device bond6 [ 299.384672][T13484] wireguard0: entered promiscuous mode [ 299.387466][T13484] wireguard0: entered allmulticast mode [ 299.957618][T13493] overlayfs: failed to clone upperpath [ 301.142021][T13511] MPI: mpi too large (124808 bits) [ 302.311732][T13539] wireguard0: entered promiscuous mode [ 302.313975][T13539] wireguard0: entered allmulticast mode [ 303.397992][T13555] wireguard1: entered promiscuous mode [ 303.399828][T13555] wireguard1: entered allmulticast mode [ 303.752478][T13558] siw: device registration error -23 [ 303.799610][T13560] bond6: (slave macvlan2): Releasing backup interface [ 303.805217][T13560] bond7: (slave gretap1): Releasing active interface [ 303.808610][T13560] macvlan3: left allmulticast mode [ 303.810489][T13560] bridge0: port 1(macvlan3) entered disabled state [ 303.818708][T13560] bond8: (slave veth17): Releasing active interface [ 303.830149][T13560] bond9: (slave geneve2): Releasing active interface [ 303.833198][T13560] geneve2: left promiscuous mode [ 303.833207][T13564] siw: device registration error -23 [ 303.908140][T13570] team0: Mode changed to "activebackup" [ 303.910899][T13570] tipc: Enabled bearer , priority 0 [ 304.890944][T13596] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 304.893066][T13596] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 304.895632][T13596] vhci_hcd vhci_hcd.0: Device attached [ 305.144840][ T5986] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 305.190242][T13602] siw: device registration error -23 [ 305.669219][T13597] vhci_hcd: connection reset by peer [ 305.671816][T11547] vhci_hcd: stop threads [ 305.673368][T11547] vhci_hcd: release socket [ 305.674828][T11547] vhci_hcd: disconnect device [ 306.206801][T13606] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2364'. [ 306.337225][T13606] bond0 (unregistering): Released all slaves [ 306.445615][T13617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2359'. [ 306.716136][ T2293] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 307.119817][ T2293] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 307.126384][ T2293] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 307.130049][ T2293] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 307.136097][ T2293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.144916][T13618] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 307.178688][ T2293] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 307.217988][T13630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2362'. [ 307.220798][T13630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2362'. [ 307.457953][T13646] netlink: 'syz.3.2370': attribute type 13 has an invalid length. [ 307.460474][T13646] netlink: 'syz.3.2370': attribute type 17 has an invalid length. [ 307.464465][T13646] tipc: Resetting bearer [ 307.468003][T13646] dummy0: left promiscuous mode [ 307.476298][T13646] net_ratelimit: 20 callbacks suppressed [ 307.476587][T13646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.425864][T13664] openvswitch: netlink: Flow key attr not present in new flow. [ 308.569322][T13668] Process accounting resumed [ 308.633798][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2376'. [ 308.918362][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2377'. [ 309.253245][T13677] 9pnet_fd: Insufficient options for proto=fd [ 309.417810][ T2293] usb 6-1: USB disconnect, device number 17 [ 310.256016][ T5986] vhci_hcd: vhci_device speed not set [ 310.353717][T13697] ªªªªª»: renamed from hsr0 [ 310.363059][T13688] syz.1.2381 (13688) used greatest stack depth: 19736 bytes left [ 311.679196][T13717] MPI: mpi too large (124808 bits) [ 312.272656][T13727] netlink: 'syz.1.2392': attribute type 5 has an invalid length. [ 312.285770][T13727] netlink: 'syz.1.2392': attribute type 7 has an invalid length. [ 312.366940][T13727] : entered promiscuous mode [ 312.644791][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2403'. [ 313.333941][T13752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2400'. [ 314.796642][T13774] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 316.738244][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.741139][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.212838][T13834] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 318.236018][T13834] cramfs: wrong magic [ 319.202018][ T40] audit: type=1800 audit(2000000169.109:258): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2422" name="nullb0" dev="tmpfs" ino=3547 res=0 errno=0 [ 319.933803][T13861] gretap0: entered allmulticast mode [ 320.899917][T13878] tipc: Enabled bearer , priority 10 [ 320.909729][T13878] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 321.659736][T13869] Set syz1 is full, maxelem 65536 reached [ 321.991990][T13890] 9p: Unknown Cache mode or invalid value fscach [ 322.591934][T13899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2439'. [ 323.091493][T13903] ªªªªª»: renamed from hsr0 [ 323.267488][T13907] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 323.333700][T13913] 9pnet_fd: Insufficient options for proto=fd [ 323.564962][T13917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2445'. [ 324.573755][T13930] tipc: Bearer : already 2 bearers with priority 10 [ 324.580444][T13930] tipc: Bearer : trying with adjusted priority [ 324.585306][T13930] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 326.297987][T13964] overlayfs: failed to clone upperpath [ 326.748094][T13973] tipc: Enabled bearer , priority 0 [ 326.782007][T13973] syzkaller0: entered promiscuous mode [ 326.783878][T13973] syzkaller0: entered allmulticast mode [ 327.050479][T13977] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 327.069433][T13977] picdev_read: 11 callbacks suppressed [ 327.069450][T13977] kvm: pic: non byte read [ 327.073620][T13977] pic_ioport_write: 8 callbacks suppressed [ 327.073629][T13977] kvm: pic: level sensitive irq not supported [ 327.076832][T13977] kvm: pic: non byte read [ 327.081272][T13977] kvm: pic: level sensitive irq not supported [ 327.081565][T13977] kvm: pic: non byte read [ 327.087097][T13977] kvm: pic: level sensitive irq not supported [ 327.087408][T13977] kvm: pic: non byte read [ 327.091755][T13977] kvm: pic: level sensitive irq not supported [ 327.092060][T13977] kvm: pic: non byte read [ 327.097714][T13977] kvm: pic: level sensitive irq not supported [ 327.098165][T13977] kvm: pic: non byte read [ 328.276815][T13975] tipc: Resetting bearer [ 328.299902][T13972] tipc: Resetting bearer [ 328.312423][T13972] tipc: Disabling bearer [ 328.319447][T13986] lo speed is unknown, defaulting to 1000 [ 329.266422][T14011] batman_adv: batadv0: Adding interface: dummy0 [ 329.268499][T14011] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 331.080953][ T40] audit: type=1326 audit(2000000180.990:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 331.092181][ T40] audit: type=1326 audit(2000000180.990:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 331.100875][T14053] overlayfs: failed to clone upperpath [ 331.103855][ T40] audit: type=1326 audit(2000000180.990:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 331.114845][ T40] audit: type=1326 audit(2000000180.990:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 331.128385][ T40] audit: type=1326 audit(2000000180.990:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 331.143077][ T40] audit: type=1326 audit(2000000180.990:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 331.153430][ T40] audit: type=1326 audit(2000000180.990:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 331.163635][ T40] audit: type=1326 audit(2000000180.990:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 331.171101][ T40] audit: type=1326 audit(2000000180.990:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 331.179544][ T40] audit: type=1326 audit(2000000181.000:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 331.251008][T14057] overlayfs: failed to clone upperpath [ 333.246481][T14094] fuse: Unknown parameter '18446744073709551615ÿ' [ 333.342181][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2499'. [ 333.639465][T14108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2500'. [ 335.959455][T14154] netlink: 'syz.1.2511': attribute type 1 has an invalid length. [ 336.340299][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 336.340312][ T40] audit: type=1326 audit(2000000186.250:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.4.2520" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 336.355836][ T40] audit: type=1326 audit(2000000186.260:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.4.2520" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 336.365418][ T40] audit: type=1326 audit(2000000186.260:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.4.2520" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 336.374125][ T40] audit: type=1326 audit(2000000186.270:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.4.2520" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 336.385889][ T40] audit: type=1326 audit(2000000186.270:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.4.2520" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 336.396211][ T40] audit: type=1326 audit(2000000186.270:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.4.2520" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 336.406166][ T40] audit: type=1326 audit(2000000186.270:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.4.2520" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 336.415448][ T40] audit: type=1326 audit(2000000186.270:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.4.2520" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 336.427073][ T40] audit: type=1326 audit(2000000186.270:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.4.2520" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 336.436642][ T40] audit: type=1326 audit(2000000186.270:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.4.2520" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 337.368850][T14171] lo speed is unknown, defaulting to 1000 [ 337.425935][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2516'. [ 337.747812][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2517'. [ 338.208389][T14189] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 338.560768][T14202] netlink: 'syz.4.2531': attribute type 1 has an invalid length. [ 338.583338][T14202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.636606][T14202] bond0: (slave veth15): Enslaving as an active interface with a down link [ 338.733036][T14202] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 338.745411][T14202] vlan4: entered allmulticast mode [ 338.747358][T14202] veth0_to_bond: entered allmulticast mode [ 338.749781][T14202] veth0_to_bond: entered promiscuous mode [ 338.752873][T14202] veth0_to_bond: left promiscuous mode [ 338.755161][T14202] veth0_to_bond: entered promiscuous mode [ 338.757196][T14202] bond0: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 338.764508][T14202] veth0_to_bond: left promiscuous mode [ 339.726605][ T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 339.874569][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 339.878031][ T10] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 339.880711][ T10] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 339.885357][ T10] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 339.889893][ T10] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 339.895251][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 339.899404][ T10] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 339.901947][ T10] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 339.904939][ T10] usb 8-1: Product: syz [ 339.906514][ T10] usb 8-1: Manufacturer: syz [ 339.907971][ T10] usb 8-1: SerialNumber: syz [ 339.911000][ T10] usb 8-1: config 0 descriptor?? [ 339.915757][ T10] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 339.922285][ T10] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 340.124212][ T2293] usb 8-1: USB disconnect, device number 15 [ 340.128717][ T2293] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 340.456455][T14231] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 340.684330][ T2293] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 340.854162][ T2293] usb 8-1: Using ep0 maxpacket: 32 [ 340.859062][ T2293] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 340.862590][ T2293] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 340.866710][ T2293] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 340.870280][ T2293] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 340.874396][ T2293] usb 8-1: config 0 interface 0 has no altsetting 0 [ 340.879174][ T2293] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 340.882682][ T2293] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 340.885833][ T2293] usb 8-1: Product: syz [ 340.887308][ T2293] usb 8-1: Manufacturer: syz [ 340.889116][ T2293] usb 8-1: SerialNumber: syz [ 340.893126][ T2293] usb 8-1: config 0 descriptor?? [ 340.897806][ T2293] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 340.901494][ T2293] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 340.999097][T14236] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 341.130152][ T5974] usb 8-1: USB disconnect, device number 16 [ 341.136238][ T5974] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 341.138203][T14242] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 341.238121][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2532'. [ 341.781020][T14260] tipc: Resetting bearer [ 341.786500][T14260] bond5: (slave veth0_to_bond): Releasing active interface [ 341.805412][T14260] bond5: (slave veth15): Releasing active interface [ 341.811947][T14260] bond0: (slave gretap1): Releasing active interface [ 341.814772][T14260] gretap1: left promiscuous mode [ 341.816471][T14260] gretap1: left allmulticast mode [ 341.830164][T14260] bond7: (slave bond8): Releasing active interface [ 341.835836][T14262] team0: Unable to change to the same mode the team is in [ 341.873101][T14260] tipc: Enabling of bearer rejected, already enabled [ 342.101046][T14267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2538'. [ 342.524555][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2544'. [ 343.074096][T14282] lo speed is unknown, defaulting to 1000 [ 343.306469][T14288] netlink: 'syz.2.2545': attribute type 5 has an invalid length. [ 343.310023][T14288] netlink: 'syz.2.2545': attribute type 7 has an invalid length. [ 343.387927][T14288] : entered promiscuous mode [ 344.328630][T14297] lo speed is unknown, defaulting to 1000 [ 344.699653][T14310] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2551'. [ 344.710613][ T40] kauditd_printk_skb: 248 callbacks suppressed [ 344.710629][ T40] audit: type=1326 audit(2000000194.590:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.1.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 344.734102][ T40] audit: type=1326 audit(2000000194.590:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.1.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 344.741223][ T40] audit: type=1326 audit(2000000194.590:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.1.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=275 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 344.777351][ T40] audit: type=1326 audit(2000000194.590:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.1.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 344.784723][ T40] audit: type=1326 audit(2000000194.590:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.1.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 344.791640][ T40] audit: type=1326 audit(2000000194.600:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.1.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 344.799764][ T40] audit: type=1326 audit(2000000194.600:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.1.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 344.808526][ T40] audit: type=1326 audit(2000000194.600:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.1.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 344.817338][ T40] audit: type=1326 audit(2000000194.600:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.1.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 344.827244][ T40] audit: type=1326 audit(2000000194.600:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.1.2551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 345.003044][T14318] bridge10: entered promiscuous mode [ 345.005094][T14318] bridge10: entered allmulticast mode [ 345.008737][T11570] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.012216][T11570] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.026966][T11547] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.030155][T11547] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.182880][T14322] netlink: 'syz.3.2564': attribute type 1 has an invalid length. [ 345.684123][T14334] netlink: 'syz.4.2560': attribute type 21 has an invalid length. [ 345.691610][T14334] netlink: 'syz.4.2560': attribute type 39 has an invalid length. [ 346.159736][T14344] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2900186945/2900186947 [ 346.172953][T14344] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2900186945/2900186947 [ 346.184079][T14344] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2900186945/2900186947 [ 347.003375][T14354] tipc: Enabled bearer , priority 0 [ 347.014980][T14354] syzkaller0: entered promiscuous mode [ 347.017309][T14354] syzkaller0: entered allmulticast mode [ 347.049875][T14354] tipc: Resetting bearer [ 347.057085][T14353] tipc: Resetting bearer [ 347.074476][T14353] tipc: Disabling bearer [ 347.285560][T14364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2570'. [ 347.340848][T14369] netlink: 'syz.1.2572': attribute type 21 has an invalid length. [ 347.349547][T14369] netlink: 'syz.1.2572': attribute type 39 has an invalid length. [ 348.334699][T14384] tipc: Resetting bearer [ 348.727868][T14394] 9p: Unknown Cache mode or invalid value fscach [ 349.408915][T14403] lo: left allmulticast mode [ 349.411134][T14403] tunl0: left allmulticast mode [ 349.413503][T14403] gre0: left allmulticast mode [ 349.416632][T14403] gretap0: left allmulticast mode [ 349.418519][T14403] erspan0: left allmulticast mode [ 349.420418][T14403] ip_vti0: left allmulticast mode [ 349.422377][T14403] sit0: left allmulticast mode [ 349.424307][T14403] ip6tnl0: left allmulticast mode [ 349.426201][T14403] ip6gre0: left allmulticast mode [ 349.428044][T14403] ip6gretap0: left allmulticast mode [ 349.430506][T14403] bond0: left allmulticast mode [ 349.433041][T14403] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 350.278089][T14418] netlink: 'syz.4.2581': attribute type 5 has an invalid length. [ 350.280614][T14418] netlink: 'syz.4.2581': attribute type 7 has an invalid length. [ 350.304244][ T40] kauditd_printk_skb: 273 callbacks suppressed [ 350.304262][ T40] audit: type=1326 audit(2000000200.211:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14417 comm="syz.1.2583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 350.316636][T14418] : entered promiscuous mode [ 350.322452][ T40] audit: type=1326 audit(2000000200.221:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14417 comm="syz.1.2583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 350.337946][ T40] audit: type=1326 audit(2000000200.221:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14417 comm="syz.1.2583" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 350.345314][ T40] audit: type=1326 audit(2000000200.221:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14417 comm="syz.1.2583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 350.352154][ T40] audit: type=1326 audit(2000000200.221:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14417 comm="syz.1.2583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 350.358911][ T40] audit: type=1326 audit(2000000200.221:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14417 comm="syz.1.2583" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 350.366461][ T40] audit: type=1326 audit(2000000200.221:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14417 comm="syz.1.2583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 350.382772][ T40] audit: type=1326 audit(2000000200.221:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14417 comm="syz.1.2583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 350.391598][ T40] audit: type=1326 audit(2000000200.241:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14417 comm="syz.1.2583" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 350.399009][ T40] audit: type=1326 audit(2000000200.241:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14417 comm="syz.1.2583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 351.233643][ T34] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 351.385962][ T34] usb 8-1: Using ep0 maxpacket: 32 [ 351.391933][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.395199][ T34] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 351.399939][ T34] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 351.402910][ T34] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 351.475015][T14434] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2590'. [ 351.523702][ T34] usb 8-1: Product: syz [ 351.525150][ T34] usb 8-1: Manufacturer: syz [ 351.526704][ T34] usb 8-1: SerialNumber: syz [ 351.531703][ T34] usb 8-1: config 0 descriptor?? [ 352.164221][ T6025] usb 8-1: USB disconnect, device number 17 [ 352.306132][T14446] lo speed is unknown, defaulting to 1000 [ 352.342865][T14447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2592'. [ 353.987170][T14473] batman_adv: batadv0: Removing interface: dummy0 [ 353.991535][T14473] bond2: (slave veth0_to_bond): Releasing active interface [ 353.998237][T14473] bond2: (slave veth9): Releasing active interface [ 354.002725][T14473] bond3: (slave bond4): Releasing active interface [ 354.010932][T14473] bond6: (slave geneve2): Releasing active interface [ 354.019519][T14473] geneve2: left promiscuous mode [ 354.037921][T14473] team0: Mode changed to "broadcast" [ 354.041405][T14473] vlan0: entered promiscuous mode [ 354.043128][T14473] vlan0: left allmulticast mode [ 354.048708][T14473] tipc: Enabling of bearer rejected, already enabled [ 355.112032][T14500] lo: entered allmulticast mode [ 355.150574][T14486] lo speed is unknown, defaulting to 1000 [ 356.799748][T14535] lo speed is unknown, defaulting to 1000 [ 358.150322][T14560] gretap0: left allmulticast mode [ 358.155551][T14560] vxcan1: left allmulticast mode [ 358.162740][T14560] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 358.584265][T14571] delete_channel: no stack [ 359.706770][T14594] overlayfs: failed to clone upperpath [ 359.750151][T14598] tipc: Enabling of bearer rejected, already enabled [ 359.754305][T14598] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 359.768123][T14598] tipc: Resetting bearer [ 360.740882][T14618] lo speed is unknown, defaulting to 1000 [ 362.295209][T14650] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 364.225862][T14683] wg1: left promiscuous mode [ 364.227921][T14683] wg1: left allmulticast mode [ 364.363164][T14683] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 364.928172][T14686] tipc: Enabled bearer , priority 0 [ 364.931386][T14686] syzkaller0: entered promiscuous mode [ 364.935181][T14686] syzkaller0: entered allmulticast mode [ 364.942641][T14686] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 364.956001][T14686] tipc: Resetting bearer [ 364.959951][T14685] tipc: Resetting bearer [ 364.972374][T14685] tipc: Disabling bearer [ 364.996287][T14690] tipc: Enabling of bearer rejected, already enabled [ 365.846111][T14708] tipc: Enabling of bearer rejected, already enabled [ 366.204929][T14715] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 366.213757][ T5974] lo speed is unknown, defaulting to 1000 [ 366.217414][ T5974] syz2: Port: 1 Link DOWN [ 368.190115][T14734] tipc: Enabling of bearer rejected, already enabled [ 368.459635][T14730] Set syz1 is full, maxelem 65536 reached [ 369.161614][T14745] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 370.360956][T14757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2677'. [ 371.112714][T14771] tipc: Enabled bearer , priority 0 [ 371.115557][T14771] syzkaller0: entered promiscuous mode [ 371.117793][T14771] syzkaller0: entered allmulticast mode [ 371.130451][T14771] tipc: Resetting bearer [ 371.133975][T14770] tipc: Resetting bearer [ 371.145074][T14770] tipc: Disabling bearer [ 371.341327][T14778] tipc: Enabled bearer , priority 0 [ 371.344750][T14778] syzkaller0: entered promiscuous mode [ 371.347056][T14778] syzkaller0: entered allmulticast mode [ 371.381415][T14778] tipc: Resetting bearer [ 371.389546][T14777] tipc: Resetting bearer [ 371.401349][T14777] tipc: Disabling bearer [ 371.773968][T14792] overlayfs: failed to clone upperpath [ 372.842032][ T40] kauditd_printk_skb: 353 callbacks suppressed [ 372.842051][ T40] audit: type=1326 audit(2000000222.722:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14807 comm="syz.4.2690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 372.853645][ T40] audit: type=1326 audit(2000000222.722:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14807 comm="syz.4.2690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 372.863968][ T40] audit: type=1326 audit(2000000222.722:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14807 comm="syz.4.2690" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 372.871042][ T40] audit: type=1326 audit(2000000222.722:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14807 comm="syz.4.2690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 372.879823][ T40] audit: type=1326 audit(2000000222.722:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14807 comm="syz.4.2690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 372.887953][ T40] audit: type=1326 audit(2000000222.722:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14807 comm="syz.4.2690" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 372.900060][ T40] audit: type=1326 audit(2000000222.722:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14807 comm="syz.4.2690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 372.908607][ T40] audit: type=1326 audit(2000000222.722:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14807 comm="syz.4.2690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 372.921682][ T40] audit: type=1326 audit(2000000222.722:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14807 comm="syz.4.2690" exe="/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 372.929093][ T40] audit: type=1326 audit(2000000451.739:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14807 comm="syz.4.2690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 372.975274][T14816] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 375.218730][T14851] netlink: 'syz.2.2704': attribute type 33 has an invalid length. [ 375.221604][T14851] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2704'. [ 375.230801][T14851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2704'. [ 375.695683][T14854] netlink: 'syz.4.2713': attribute type 33 has an invalid length. [ 375.698104][T14854] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2713'. [ 375.707100][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2713'. [ 376.483092][T14864] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 376.608159][T14877] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 377.468731][T14892] netlink: zone id is out of range [ 377.471237][T14892] netlink: zone id is out of range [ 377.475400][T14892] netlink: zone id is out of range [ 377.477627][T14892] netlink: zone id is out of range [ 377.490927][T14892] netlink: set zone limit has 4 unknown bytes [ 377.735055][T14903] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 378.186223][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.188736][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.296839][T14957] tipc: Enabling of bearer rejected, already enabled [ 381.644555][T14968] tipc: Enabling of bearer rejected, already enabled [ 381.649935][T14968] netem: change failed [ 383.479740][T14991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2746'. [ 383.494518][T14991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2746'. [ 383.499166][T14991] netlink: 50 bytes leftover after parsing attributes in process `syz.2.2746'. [ 384.732533][T15005] tipc: Enabling of bearer rejected, already enabled [ 385.720593][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 385.720605][ T40] audit: type=1326 audit(2000000464.630:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.2.2755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 385.730473][ T40] audit: type=1326 audit(2000000464.630:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.2.2755" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 385.744351][ T40] audit: type=1326 audit(2000000464.630:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.2.2755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 385.758991][ T40] audit: type=1326 audit(2000000464.640:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.2.2755" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 385.795289][ T40] audit: type=1326 audit(2000000464.640:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.2.2755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 385.811699][ T40] audit: type=1326 audit(2000000464.640:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.2.2755" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 385.826575][ T40] audit: type=1326 audit(2000000464.640:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.2.2755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 385.840097][ T40] audit: type=1326 audit(2000000464.640:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.2.2755" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 385.871791][ T40] audit: type=1326 audit(2000000464.640:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.2.2755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 385.880414][ T40] audit: type=1326 audit(2000000464.640:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.2.2755" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 385.940526][T15043] overlayfs: failed to clone upperpath [ 386.807671][T15056] netlink: 'syz.3.2765': attribute type 33 has an invalid length. [ 386.812538][T15056] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2765'. [ 386.817896][T15056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2765'. [ 390.462441][T15122] bridge_slave_0: default FDB implementation only supports local addresses [ 393.024997][T15157] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 393.583474][T15173] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.2791'. [ 394.217427][T15177] netlink: 'syz.3.2792': attribute type 10 has an invalid length. [ 394.377857][T15184] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 394.417362][T15182] vivid-000: ================= START STATUS ================= [ 394.422044][T15182] vivid-000: Test Pattern: 75% Colorbar [ 394.425167][T15182] vivid-000: Fill Percentage of Frame: 100 [ 394.428281][T15182] vivid-000: Horizontal Movement: No Movement [ 394.432539][T15182] vivid-000: Vertical Movement: No Movement [ 394.435851][T15182] vivid-000: OSD Text Mode: All [ 394.437908][T15182] vivid-000: Show Border: false [ 394.440275][T15182] vivid-000: Show Square: false [ 394.442781][T15182] vivid-000: Sensor Flipped Horizontally: false [ 394.445428][T15182] vivid-000: Sensor Flipped Vertically: false [ 394.448179][T15182] vivid-000: Insert SAV Code in Image: false [ 394.450713][T15182] vivid-000: Insert EAV Code in Image: false [ 394.453629][T15182] vivid-000: Insert Video Guard Band: false [ 394.456163][T15182] vivid-000: Reduced Framerate: true [ 394.458881][T15182] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 394.461893][T15182] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 394.464450][T15182] vivid-000: Enable Capture Cropping: true [ 394.466438][T15182] vivid-000: Enable Capture Composing: true [ 394.468710][T15182] vivid-000: Enable Capture Scaler: true [ 394.470543][T15182] vivid-000: Timestamp Source: End of Frame [ 394.472630][T15182] vivid-000: Colorspace: SMPTE 170M [ 394.474422][T15182] vivid-000: Transfer Function: Rec. 709 [ 394.476232][T15182] vivid-000: Y'CbCr Encoding: Default [ 394.478018][T15182] vivid-000: HSV Encoding: Hue 0-179 [ 394.479746][T15182] vivid-000: Quantization: Default [ 394.481839][T15182] vivid-000: Apply Alpha To Red Only: false [ 394.483963][T15182] vivid-000: Standard Aspect Ratio: 4x3 [ 394.486192][T15182] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 394.489281][T15182] vivid-000: DV Timings: 640x480p59 inactive [ 394.491609][T15182] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 394.494031][T15182] vivid-000: Maximum EDID Blocks: 2 [ 394.495841][T15182] vivid-000: Limited RGB Range (16-235): false [ 394.497879][T15182] vivid-000: Rx RGB Quantization Range: Automatic [ 394.500108][T15182] vivid-000: Power Present: 0x00000001 [ 394.502161][T15182] tpg source WxH: 720x576 (Y'CbCr) [ 394.538578][T15182] tpg field: 4 [ 394.540039][T15182] tpg crop: (0,0)/720x576 [ 394.556845][T15182] tpg compose: (0,0)/720x576 [ 394.565615][T15182] tpg colorspace: 1 [ 394.567301][T15182] tpg transfer function: 1/0 [ 394.569310][T15182] tpg Y'CbCr encoding: 0/0 [ 394.572660][T15182] tpg quantization: 0/0 [ 394.574446][T15182] tpg RGB range: 0/2 [ 394.576111][T15182] vivid-000: ================== END STATUS ================== [ 394.631936][T15194] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2796'. [ 394.645369][T15181] netlink: zone id is out of range [ 394.647185][T15181] netlink: zone id is out of range [ 394.649321][T15181] netlink: zone id is out of range [ 394.651332][T15181] netlink: zone id is out of range [ 394.663281][T15181] netlink: set zone limit has 4 unknown bytes [ 395.156884][T15201] tipc: Enabling of bearer rejected, already enabled [ 395.224647][T15203] tipc: Enabled bearer , priority 10 [ 395.341433][T15205] tipc: Enabling of bearer rejected, already enabled [ 395.621111][ T5974] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 395.772328][ T5974] usb 6-1: Using ep0 maxpacket: 8 [ 395.775570][ T5974] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 395.778980][ T5974] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 395.782645][ T5974] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 395.785873][ T5974] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.790319][ T5974] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 395.797649][ T5974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.037894][ T5974] usb 6-1: usb_control_msg returned -32 [ 396.043927][ T5974] usbtmc 6-1:16.0: can't read capabilities [ 396.433701][ T34] usb 6-1: USB disconnect, device number 18 [ 396.653418][T15221] netlink: 'syz.4.2812': attribute type 1 has an invalid length. [ 396.669109][T15221] 8021q: adding VLAN 0 to HW filter on device bond8 [ 396.735718][T15221] bond8: (slave veth17): Enslaving as an active interface with a down link [ 396.765684][T15221] vlan4: entered allmulticast mode [ 396.768434][T15221] veth0_to_bond: entered promiscuous mode [ 396.770902][T15221] veth0_to_bond: left promiscuous mode [ 396.773873][T15221] bond8: (slave vlan4): Enslaving as an active interface with a down link [ 399.199531][T15260] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2810'. [ 399.928697][T15275] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 400.801455][T15291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2823'. [ 400.805139][T15291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2823'. [ 400.811030][T15291] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2823'. [ 401.294283][T15299] tipc: Enabling of bearer rejected, already enabled [ 401.607305][T15302] tipc: Enabled bearer , priority 0 [ 401.612054][T15302] syzkaller0: entered promiscuous mode [ 401.614050][T15302] syzkaller0: entered allmulticast mode [ 401.648683][T15302] tipc: Resetting bearer [ 401.653308][T15301] tipc: Resetting bearer [ 401.672047][T15301] tipc: Disabling bearer [ 401.696961][T15307] syz_tun: entered allmulticast mode [ 401.702849][T15306] syz_tun: left allmulticast mode [ 403.810628][T15344] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2845'. [ 404.750453][T15350] tipc: Enabling of bearer rejected, already enabled [ 404.768061][T15352] tipc: Enabling of bearer rejected, already enabled [ 405.330280][T15377] tipc: Enabled bearer , priority 0 [ 405.334104][T15379] syzkaller0: entered promiscuous mode [ 405.360590][T15379] syzkaller0: entered allmulticast mode [ 405.394935][T15370] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 405.408507][T15370] tipc: Resetting bearer [ 405.412639][T15369] tipc: Resetting bearer [ 405.428076][T15369] tipc: Disabling bearer [ 405.550149][T15386] tipc: Enabled bearer , priority 0 [ 405.554308][T15386] syzkaller0: entered promiscuous mode [ 405.556582][T15386] syzkaller0: entered allmulticast mode [ 405.573957][T15386] tipc: Resetting bearer [ 405.578149][T15385] tipc: Resetting bearer [ 405.590095][T15385] tipc: Disabling bearer [ 406.861194][T15404] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 406.890224][T15402] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2850'. [ 407.596822][T15410] tipc: Enabling of bearer rejected, already enabled [ 407.622549][T15413] tipc: Resetting bearer [ 407.643234][T15413] xfrm0: left promiscuous mode [ 407.645057][T15413] xfrm0: left allmulticast mode [ 407.647333][T15413] vlan0: left promiscuous mode [ 407.655489][T15413] bond5: left promiscuous mode [ 407.657493][T15413] vlan3: left promiscuous mode [ 407.659140][T15413] bridge0: left promiscuous mode [ 407.661850][T15413] bridge6: left promiscuous mode [ 407.663458][T15413] bridge6: left allmulticast mode [ 407.666397][T15413] veth13: left promiscuous mode [ 407.669144][T15413] wireguard0: left promiscuous mode [ 407.671801][T15413] wireguard0: left allmulticast mode [ 407.675607][T15413] wireguard1: left promiscuous mode [ 407.677729][T15413] wireguard1: left allmulticast mode [ 407.680126][T15417] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 407.692003][T15413] vlan4: left allmulticast mode [ 408.562652][T15435] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2863'. [ 408.702549][T15435] bond0 (unregistering): Released all slaves [ 409.575951][T15454] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2865'. [ 411.451029][T15477] tipc: Enabling of bearer rejected, already enabled [ 411.754320][T15483] overlayfs: failed to clone upperpath [ 411.767763][T15485] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 412.400017][T15499] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2881'. [ 413.480589][T15518] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 413.605798][T15524] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 413.854206][T15536] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 413.877052][T15536] cramfs: wrong magic [ 414.643449][T15541] tipc: Enabling of bearer rejected, already enabled [ 414.650571][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2894'. [ 414.696545][T15544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2895'. [ 414.701980][T15544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2895'. [ 414.918635][T15552] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 416.772794][T15591] tipc: Enabling of bearer rejected, already enabled [ 419.521310][T15632] tipc: Enabled bearer , priority 0 [ 419.524379][T15632] syzkaller0: entered promiscuous mode [ 419.526225][T15632] syzkaller0: entered allmulticast mode [ 419.582508][T15632] tipc: Resetting bearer [ 419.585629][T15631] tipc: Resetting bearer [ 419.623511][T15631] tipc: Disabling bearer [ 420.156683][T15640] overlayfs: failed to clone upperpath [ 421.622939][T15676] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.2931'. [ 421.638703][T15676] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' already exists in 'ieee80211' [ 421.785136][T15682] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 422.062801][T15688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2933'. [ 422.383926][T15697] syz.1.2936 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 422.526055][T15698] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2934'. [ 423.493638][T15723] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 424.357247][T15743] tipc: Enabling of bearer rejected, already enabled [ 424.383130][T15744] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.2946'. [ 424.414797][T15744] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' already exists in 'ieee80211' [ 424.857131][T15756] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2950'. [ 425.168829][T15759] tipc: Enabling of bearer rejected, already enabled [ 425.234191][T15763] tipc: Enabling of bearer rejected, already enabled [ 426.098732][T15781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2957'. [ 427.004161][T15803] tipc: Enabling of bearer rejected, already enabled [ 428.889860][T15797] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 430.056518][T15825] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 430.056995][T15824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2971'. [ 430.058690][T15827] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 430.208087][T15842] tipc: Enabling of bearer rejected, already enabled [ 430.214437][T15842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2977'. [ 430.586899][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 430.586959][ T40] audit: type=1804 audit(2000000509.492:1254): pid=15857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2981" name="cgroup.controllers" dev="tmpfs" ino=4357 res=1 errno=0 [ 430.644248][ T40] audit: type=1800 audit(2000000509.492:1255): pid=15857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2981" name="cgroup.controllers" dev="tmpfs" ino=4357 res=0 errno=0 [ 430.652777][ T40] audit: type=1800 audit(2000000509.502:1256): pid=15857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2981" name="cgroup.controllers" dev="tmpfs" ino=4357 res=0 errno=0 [ 433.057987][T15914] tipc: Enabling of bearer rejected, already enabled [ 434.156026][T15940] vlan4: entered allmulticast mode [ 434.159493][T15940] batman_adv: batadv0: Adding interface: vlan4 [ 434.162006][T15940] batman_adv: batadv0: The MTU of interface vlan4 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1340 would solve the problem. [ 434.172846][T15940] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active [ 434.179664][T15941] tipc: Enabling of bearer rejected, failed to enable media [ 436.044523][T15986] bond0: (slave veth0_to_bond): Releasing active interface [ 436.050483][T15986] bond4: (slave bond5): Releasing active interface [ 436.056611][T15986] bond6: (slave veth13): Releasing active interface [ 436.062317][T15986] bond0: (slave veth15): Releasing active interface [ 436.066012][T15986] bond8: (slave veth17): Releasing active interface [ 436.068208][T15986] bond8: (slave veth17): the permanent HWaddr of slave - 02:e0:58:0b:0f:6c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 436.076625][T15986] bond8: (slave vlan4): Releasing active interface [ 436.423725][T15980] netlink: 'syz.3.3019': attribute type 1 has an invalid length. [ 436.946370][T16000] Set syz1 is full, maxelem 65536 reached [ 438.399090][T16028] vlan0: left promiscuous mode [ 438.416744][T16028] bond6: left allmulticast mode [ 438.419716][T16028] vlan2: left promiscuous mode [ 438.421516][T16028] bond0: left promiscuous mode [ 438.424223][T16028] vlan2: left allmulticast mode [ 438.426173][T16028] bond0: left allmulticast mode [ 438.429387][T16028] bond8: left promiscuous mode [ 438.431788][T16028] wireguard0: left promiscuous mode [ 438.433950][T16028] wireguard0: left allmulticast mode [ 439.614255][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.616284][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.052429][T16052] sp0: Synchronizing with TNC [ 440.059666][T16052] block nbd3: not configured, cannot reconfigure [ 440.116231][T16053] sp0: Found TNC [ 441.180113][ T40] audit: type=1800 audit(2000000520.083:1257): pid=16073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3045" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 441.365130][T16081] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.3044'. [ 441.371051][T16081] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' already exists in 'ieee80211' [ 441.799511][T16093] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 441.801619][T16093] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 441.809552][T16093] vhci_hcd vhci_hcd.0: Device attached [ 441.988614][ T2293] vhci_hcd: vhci_device speed not set [ 442.088631][ T2293] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 442.151919][T16095] vhci_hcd: connection reset by peer [ 442.158453][T11577] vhci_hcd: stop threads [ 442.161091][T11577] vhci_hcd: release socket [ 442.162833][T11577] vhci_hcd: disconnect device [ 442.315269][T16101] tipc: Enabling of bearer rejected, already enabled [ 442.763274][T16114] delete_channel: no stack [ 445.533935][T16167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3071'. [ 446.904190][T16188] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20001 [ 447.009372][ T5974] libceph: connect (1)[c::]:6789 error -101 [ 447.011361][ T5974] libceph: mon0 (1)[c::]:6789 connect error [ 447.155575][T16190] ceph: No mds server is up or the cluster is laggy [ 447.198316][ T2293] vhci_hcd: vhci_device speed not set [ 447.441405][T16209] geneve2: entered promiscuous mode [ 447.448245][T16209] geneve2: entered allmulticast mode [ 447.459414][T11577] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.465158][T11577] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.483427][T11577] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.485825][T11577] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.722075][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3102'. [ 450.727847][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3102'. [ 450.733085][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3102'. [ 450.764654][T16279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3103'. [ 450.769402][T16279] batman_adv: batadv0: Removing interface: vlan4 [ 450.992183][T16285] lo speed is unknown, defaulting to 1000 [ 451.193831][T16295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 451.196796][T16295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3104'. [ 451.214070][T11564] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.217521][T11564] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.220599][T11564] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.248500][T11547] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.930652][T16302] syz.1.3109 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 451.936923][T16302] CPU: 1 UID: 0 PID: 16302 Comm: syz.1.3109 Not tainted syzkaller #0 PREEMPT(full) [ 451.936949][T16302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 451.936962][T16302] Call Trace: [ 451.936969][T16302] [ 451.936977][T16302] dump_stack_lvl+0x16c/0x1f0 [ 451.937039][T16302] dump_header+0x101/0x930 [ 451.937067][T16302] oom_kill_process+0x272/0xa40 [ 451.937090][T16302] ? oom_cpuset_eligible.isra.0+0x199/0x2d0 [ 451.937116][T16302] out_of_memory+0x1405/0x1700 [ 451.937146][T16302] ? __pfx_out_of_memory+0x10/0x10 [ 451.937179][T16302] __alloc_frozen_pages_noprof+0x1d53/0x23f0 [ 451.937227][T16302] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 451.937252][T16302] ? mas_next_slot+0x12d3/0x21b0 [ 451.937288][T16302] ? nmi_uaccess_okay+0x78/0xb0 [ 451.937321][T16302] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 451.937349][T16302] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 451.937375][T16302] ? policy_nodemask+0xea/0x4e0 [ 451.937403][T16302] alloc_pages_mpol+0x1fb/0x550 [ 451.937431][T16302] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 451.937459][T16302] ? bpf_trace_run4+0x2c4/0x5b0 [ 451.937489][T16302] alloc_pages_noprof+0x131/0x390 [ 451.937515][T16302] pte_alloc_one+0x1c/0x3a0 [ 451.937536][T16302] __pte_alloc+0x6d/0x3c0 [ 451.937563][T16302] ? __pfx___pte_alloc+0x10/0x10 [ 451.937597][T16302] do_pte_missing+0x285a/0x3ba0 [ 451.937622][T16302] ? __lock_acquire+0x62e/0x1ce0 [ 451.937651][T16302] __handle_mm_fault+0x152a/0x2a50 [ 451.937680][T16302] ? __pfx___handle_mm_fault+0x10/0x10 [ 451.937699][T16302] ? find_held_lock+0x2b/0x80 [ 451.937718][T16302] ? mtree_load+0x309/0xa40 [ 451.937762][T16302] handle_mm_fault+0x589/0xd10 [ 451.937789][T16302] __get_user_pages+0x551/0x34a0 [ 451.937848][T16302] ? __pfx___get_user_pages+0x10/0x10 [ 451.937888][T16302] faultin_page_range+0x338/0x940 [ 451.937924][T16302] madvise_do_behavior+0x34c/0x530 [ 451.937955][T16302] ? __pfx_madvise_do_behavior+0x10/0x10 [ 451.937984][T16302] ? __pfx_futex_wait+0x10/0x10 [ 451.938031][T16302] do_madvise+0x176/0x240 [ 451.938056][T16302] ? __pfx_do_madvise+0x10/0x10 [ 451.938079][T16302] ? do_futex+0x122/0x350 [ 451.938122][T16302] ? xfd_validate_state+0x61/0x180 [ 451.938147][T16302] ? __pfx_kernel_set_mempolicy+0x10/0x10 [ 451.938176][T16302] __ia32_sys_madvise+0xa7/0x110 [ 451.938202][T16302] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 451.938228][T16302] __do_fast_syscall_32+0x7c/0x3a0 [ 451.938256][T16302] do_fast_syscall_32+0x32/0x80 [ 451.938281][T16302] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 451.938303][T16302] RIP: 0023:0xf703e579 [ 451.938317][T16302] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 451.938334][T16302] RSP: 002b:00000000f542e55c EFLAGS: 00000296 ORIG_RAX: 00000000000000db [ 451.938351][T16302] RAX: ffffffffffffffda RBX: 0000000080e3a000 RCX: 0000000000002000 [ 451.938362][T16302] RDX: 0000000000000017 RSI: 0000000000000000 RDI: 0000000000000000 [ 451.938372][T16302] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 451.938382][T16302] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 451.938392][T16302] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 451.938418][T16302] [ 452.219617][T16302] Mem-Info: [ 452.238408][T16302] active_anon:7720 inactive_anon:8357 isolated_anon:0 [ 452.238408][T16302] active_file:3214 inactive_file:7670 isolated_file:0 [ 452.238408][T16302] unevictable:3833 dirty:1395 writeback:256 [ 452.238408][T16302] slab_reclaimable:6693 slab_unreclaimable:79377 [ 452.238408][T16302] mapped:26480 shmem:16513 pagetables:1625 [ 452.238408][T16302] sec_pagetables:332 bounce:0 [ 452.238408][T16302] kernel_misc_reclaimable:0 [ 452.238408][T16302] free:43773 free_pcp:336 free_cma:0 [ 452.263241][T16302] Node 0 active_anon:112kB inactive_anon:700kB active_file:568kB inactive_file:136kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:4380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8728kB pagetables:1904kB sec_pagetables:1204kB all_unreclaimable? no Balloon:0kB [ 452.273140][T16302] Node 0 DMA free:2404kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:128kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 452.298906][T16302] lowmem_reserve[]: 0 288 288 288 288 [ 452.301316][T16302] Node 0 DMA32 free:30612kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:1196kB active_file:568kB inactive_file:136kB unevictable:3536kB writepending:0kB present:1032196kB managed:295140kB mlocked:0kB bounce:0kB free_pcp:1220kB local_pcp:320kB free_cma:0kB [ 452.311553][T16302] lowmem_reserve[]: 0 0 0 0 0 [ 452.320123][T16302] Node 0 DMA: 13*4kB (U) 8*8kB (UE) 7*16kB (UE) 14*32kB (UE) 3*64kB (UE) 0*128kB 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 2404kB [ 452.324874][T16302] Node 0 DMA32: 157*4kB (UME) 342*8kB (UME) 192*16kB (UM) 273*32kB (UM) 70*64kB (UM) 28*128kB (UM) 9*256kB (M) 4*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 29636kB [ 452.331749][T16302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 452.336005][T16302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 452.339222][T16302] 28083 total pagecache pages [ 452.340798][T16302] 699 pages in swap cache [ 452.342316][T16302] Free swap = 65828kB [ 452.361264][T16302] Total swap = 124996kB [ 452.363088][T16302] 524155 pages RAM [ 452.364778][T16302] 0 pages HighMem/MovableOnly [ 452.366763][T16302] 209475 pages reserved [ 452.378338][T16302] 0 pages cma reserved [ 452.380195][T16302] Unreclaimable slab info: [ 452.383976][T16302] Name Used Total [ 452.386687][T16302] pid_3 31KB 31KB [ 452.389368][T16302] pid_2 132KB 165KB [ 452.392051][T16302] bio-360 7KB 7KB [ 452.394565][T16302] bio-424 8KB 8KB [ 452.397023][T16302] bio-440 8KB 8KB [ 452.399787][T16302] bio-536 15KB 15KB [ 452.402582][T16302] afs_inode_cache 246KB 399KB [ 452.405115][T16302] zspage-zswap1 114KB 114KB [ 452.407626][T16302] zs_handle-zswap1 142KB 172KB [ 452.410363][T16302] zswap_entry 377KB 442KB [ 452.413157][T16302] AF_VSOCK 122KB 122KB [ 452.415836][T16302] batadv_tt_change_cache 16KB 16KB [ 452.418652][T16302] batadv_tl_cache 16KB 16KB [ 452.421218][T16302] ceph_osd_request 127KB 127KB [ 452.423324][T16302] ceph_msg 30KB 30KB [ 452.425936][T16302] IEEE-802.15.4-MAC 63KB 63KB [ 452.428650][T16302] p9_req_t 87KB 87KB [ 452.431274][T16302] INET_SMC 30KB 30KB [ 452.433683][T16302] SMC6 122KB 122KB [ 452.435953][T16302] SMC 122KB 122KB [ 452.438427][T16302] TIPC 123KB 123KB [ 452.440966][T16302] rds_tcp_connection 15KB 15KB [ 452.443710][T16302] RDS 128KB 128KB [ 452.446290][T16302] rds_connection 30KB 30KB [ 452.449059][T16302] SCTPv6 120KB 120KB [ 452.451738][T16302] SCTP 122KB 122KB [ 452.454405][T16302] sctp_chunk 93KB 109KB [ 452.456867][T16302] sctp_bind_bucket 16KB 16KB [ 452.459523][T16302] PNPIPE 123KB 123KB [ 452.462076][T16302] PHONET 31KB 31KB [ 452.464687][T16302] L2TP/IPv6 127KB 127KB [ 452.467268][T16302] L2TP/IP 60KB 60KB [ 452.469963][T16302] KCM 95KB 95KB [ 452.472653][T16302] kcm_mux 47KB 47KB [ 452.475074][T16302] RXRPC 124KB 124KB [ 452.477642][T16302] rxrpc_call_jar 255KB 255KB [ 452.480383][T16302] can_receiver 39KB 55KB [ 452.483046][T16302] net_bridge_fdb_entry 145KB 145KB [ 452.485224][T16302] nf-frags 39KB 79KB [ 452.487153][T16302] xfrm6_tunnel_spi 4KB 4KB [ 452.489193][T16302] MPTCPv6 125KB 125KB [ 452.491083][T16302] ip6-frags 15KB 15KB [ 452.493554][T16302] fib6_node 88KB 104KB [ 452.496116][T16302] ip6_dst_cache 101KB 187KB [ 452.498736][T16302] PINGv6 124KB 124KB [ 452.501290][T16302] RAWv6 155KB 155KB [ 452.503631][T16302] UDPLITEv6 127KB 127KB [ 452.505792][T16302] UDPv6 127KB 127KB [ 452.508333][T16302] tw_sock_TCPv6 31KB 31KB [ 452.510320][T16302] request_sock_TCPv6 7KB 7KB [ 452.512802][T16302] TCPv6 462KB 486KB [ 452.515374][T16302] ip_vs_conn 7KB 7KB [ 452.517312][T16302] nf_conntrack 94KB 133KB [ 452.519331][T16302] wg_peer 118KB 118KB [ 452.521385][T16302] allowedips_node 11KB 11KB [ 452.523996][T16302] t10_alua_lu_gp_cache 7KB 7KB [ 452.526639][T16302] scsi_sense_cache 44KB 44KB [ 452.529014][T16302] virtio_scsi_cmd 16KB 16KB [ 452.530940][T16302] bio-136 101KB 116KB [ 452.533051][T16302] io_kiocb 4329KB 4382KB [ 452.534950][T16302] bio-264 31KB 31KB [ 452.537116][T16302] mqueue_inode_cache 121KB 121KB [ 452.539176][T16302] f2fs_bio_post_read_ctx 23KB 23KB [ 452.541259][T16302] jfs_mp 7KB 7KB [ 452.543730][T16302] fuse_request 55KB 55KB [ 452.546295][T16302] cifs_small_rq 16KB 16KB [ 452.548933][T16302] cifs_request 67KB 67KB [ 452.551057][T16302] cifs_mpx_ids 7KB 7KB [ 452.553476][T16302] cifs_io_subrequest 39KB 39KB [ 452.556063][T16302] cifs_io_request 95KB 95KB [ 452.558636][T16302] nfs_commit_data 15KB 15KB [ 452.560586][T16302] nfs_write_data 63KB 63KB [ 452.562566][T16302] ecryptfs_sb_cache 15KB 15KB [ 452.564522][T16302] jbd2_inode 15KB 15KB [ 452.566455][T16302] ext4_system_zone 3KB 3KB [ 452.568638][T16302] ext4_io_end_vec 15KB 15KB [ 452.571285][T16302] kioctx 127KB 127KB [ 452.573412][T16302] aio_kiocb 31KB 31KB [ 452.575305][T16302] userfaultfd_ctx_cache 63KB 63KB [ 452.577325][T16302] fanotify_path_event 7KB 7KB [ 452.579573][T16302] fanotify_fid_event 35KB 35KB [ 452.582189][T16302] fanotify_mark 15KB 15KB [ 452.584838][T16302] dnotify_mark 7KB 7KB [ 452.586762][T16302] dnotify_struct 7KB 7KB [ 452.588993][T16302] fasync_cache 15KB 15KB [ 452.591252][T16302] pid_namespace 30KB 30KB [ 452.593252][T16302] kvm_async_pf 3KB 3KB [ 452.595198][T16302] kvm_vcpu 154KB 154KB [ 452.597173][T16302] kvm_mmu_page_header 112KB 131KB [ 452.599320][T16302] pte_list_desc 74KB 94KB [ 452.601622][T16302] x86_emulator 120KB 120KB [ 452.603905][T16302] rpc_buffers 63KB 63KB [ 452.605894][T16302] rpc_tasks 7KB 7KB [ 452.607981][T16302] UNIX-STREAM 259KB 414KB [ 452.609923][T16302] UNIX 427KB 605KB [ 452.611856][T16302] ip4-frags 31KB 31KB [ 452.613798][T16302] mfc_cache 8KB 8KB [ 452.615732][T16302] UDP-Lite 124KB 124KB [ 452.617924][T16302] MPTCP 117KB 117KB [ 452.619921][T16302] request_sock_subflow_v6 7KB 7KB [ 452.622011][T16302] request_sock_subflow_v4 30KB 30KB [ 452.624111][T16302] tcp_bind2_bucket 16KB 16KB [ 452.626210][T16302] tcp_bind_bucket 16KB 16KB [ 452.628543][T16302] inet_peer 12KB 12KB [ 452.630585][T16302] xfrm_state 292KB 605KB [ 452.632535][T16302] ip_fib_trie 24KB 24KB [ 452.634469][T16302] ip_fib_alias 70KB 75KB [ 452.636452][T16302] rtable 74KB 172KB [ 452.638685][T16302] PING 91KB 91KB [ 452.640948][T16302] RAW 151KB 151KB [ 452.643261][T16302] UDP 124KB 124KB [ 452.645969][T16302] tw_sock_TCP 15KB 15KB [ 452.649070][T16302] request_sock_TCP 15KB 15KB [ 452.652565][T16302] TCP 640KB 701KB [ 452.654941][T16302] hugetlbfs_inode_cache 126KB 126KB [ 452.657401][T16302] fscache_cookie_jar 30KB 30KB [ 452.667980][T16302] netfs_subrequest 54KB 54KB [ 452.670482][T16302] netfs_request 127KB 127KB [ 452.672940][T16302] bio-280 15KB 15KB [ 452.675370][T16302] ep_head 16KB 16KB [ 452.708008][T16302] eventpoll_pwq 23KB 23KB [ 452.710553][T16302] eventpoll_epi 78KB 90KB [ 452.713023][T16302] inotify_inode_mark 27KB 27KB [ 452.715850][T16302] sgpool-128 29KB 29KB [ 452.737916][T16302] sgpool-64 31KB 31KB [ 452.747979][T16302] sgpool-32 220KB 283KB [ 452.750076][T16302] sgpool-16 62KB 62KB [ 452.752196][T16302] sgpool-8 140KB 156KB [ 452.754093][T16302] bio_crypt_ctx 7KB 7KB [ 452.755977][T16302] bio_integrity_data 4KB 4KB [ 452.780390][T16302] request_queue 223KB 223KB [ 452.783102][T16302] blkdev_ioc 31KB 31KB [ 452.785357][T16302] bio-200 917KB 953KB [ 452.787704][T16302] biovec-max 892KB 1041KB [ 452.872015][T16302] biovec-64 283KB 346KB [ 452.874661][T16302] biovec-16 31KB 31KB [ 452.876577][T16302] khugepaged_mm_slot 15KB 15KB [ 452.878587][T16302] ksm_mm_slot 4KB 4KB [ 452.880502][T16302] uid_cache 31KB 31KB [ 452.882793][T16302] iommu_iova_magazine 1039KB 1039KB [ 452.885066][T16302] iommu_iova 256KB 256KB [ 452.886964][T16302] dmaengine-unmap-256 30KB 30KB [ 452.890933][T16302] dmaengine-unmap-128 30KB 30KB [ 452.892892][T16302] dmaengine-unmap-16 4KB 4KB [ 452.894809][T16302] dmaengine-unmap-2 4KB 4KB [ 452.896697][T16302] QIPCRTR 126KB 126KB [ 452.898658][T16302] audit_buffer 27KB 27KB [ 452.900561][T16302] skbuff_ext_cache 24KB 24KB [ 452.902835][T16302] skbuff_small_head 4030KB 4183KB [ 452.905071][T16302] skbuff_fclone_cache 481KB 546KB [ 452.906996][T16302] skbuff_head_cache 1960KB 1968KB [ 452.909032][T16302] configfs_dir_cache 16KB 16KB [ 452.910948][T16302] file_lease_cache 118KB 158KB [ 452.912953][T16302] file_lock_cache 79KB 126KB [ 452.915071][T16302] file_lock_ctx 19KB 19KB [ 452.916962][T16302] fsnotify_mark_connector 19KB 19KB [ 452.928009][T16302] posix_timers_cache 32KB 32KB [ 452.929996][T16302] taskstats 61KB 61KB [ 452.932129][T16302] mem_cgroup_per_node 111KB 123KB [ 452.934588][T16302] mem_cgroup 87KB 87KB [ 452.936706][T16302] proc_dir_entry 753KB 765KB [ 452.947875][T16302] pde_opener 15KB 15KB [ 452.949898][T16302] seq_file 93KB 132KB [ 452.951959][T16302] sigqueue 55KB 94KB [ 452.953824][T16302] shmem_inode_cache 8044KB 8128KB [ 452.955719][T16302] kernfs_iattrs_cache 15KB 15KB [ 452.957632][T16302] kernfs_node_cache 29907KB 29914KB [ 452.963287][T16302] mnt_cache 144KB 157KB [ 452.965531][T16302] bfilp 31KB 31KB [ 452.967468][T16302] filp 445KB 574KB [ 452.969718][T16302] names_cache 3727KB 4016KB [ 452.971845][T16302] net_namespace 135KB 135KB [ 452.973848][T16302] ima_iint_cache 55KB 55KB [ 452.976107][T16302] lsm_inode_cache 1412KB 1756KB [ 452.978687][T16302] lsm_file_cache 143KB 228KB [ 452.980705][T16302] key_jar 31KB 31KB [ 452.983188][T16302] uts_namespace 31KB 31KB [ 452.985374][T16302] nsproxy 15KB 15KB [ 452.987234][T16302] vm_area_struct 1023KB 1046KB [ 452.989179][T16302] fs_cache 74KB 92KB [ 452.991037][T16302] files_cache 257KB 382KB [ 452.993006][T16302] signal_cache 953KB 1761KB [ 452.994984][T16302] sighand_cache 1345KB 1954KB [ 452.996944][T16302] task_struct 5636KB 5763KB [ 452.998956][T16302] cred 184KB 304KB [ 453.000881][T16302] anon_vma_chain 315KB 338KB [ 453.003026][T16302] anon_vma 361KB 446KB [ 453.005046][T16302] pid 213KB 393KB [ 453.006915][T16302] Acpi-Operand 251KB 368KB [ 453.008936][T16302] Acpi-ParseExt 63KB 90KB [ 453.010844][T16302] Acpi-Parse 63KB 83KB [ 453.012767][T16302] Acpi-State 70KB 106KB [ 453.014668][T16302] Acpi-Namespace 56KB 56KB [ 453.259767][T16302] shared_policy_node 16KB 16KB [ 453.262654][T16302] numa_policy 15KB 15KB [ 453.265385][T16302] perf_event 31KB 31KB [ 453.268346][T16302] trace_event_file 540KB 540KB [ 453.270982][T16302] ftrace_event_field 1008KB 1008KB [ 453.276118][T16302] pool_workqueue 1977KB 2000KB [ 453.278830][T16302] maple_node 784KB 1336KB [ 453.281424][T16302] task_group 61KB 61KB [ 453.284050][T16302] mm_struct 435KB 591KB [ 453.286628][T16302] vmap_area 390KB 522KB [ 453.289506][T16302] debug_objects_cache 3092KB 3361KB [ 453.292072][T16302] page->ptl 200KB 208KB [ 453.294540][T16302] kmalloc-cg-8k 3088KB 3200KB [ 453.297103][T16302] kmalloc-cg-4k 16608KB 16672KB [ 453.299749][T16302] kmalloc-cg-2k 11632KB 11872KB [ 453.302247][T16302] kmalloc-cg-1k 2382KB 2688KB [ 453.304837][T16302] kmalloc-cg-512 1492KB 1520KB [ 453.307508][T16302] kmalloc-cg-256 576KB 656KB [ 453.310200][T16302] kmalloc-cg-128 256KB 284KB [ 453.313023][T16302] kmalloc-cg-64 115KB 204KB [ 453.315552][T16302] kmalloc-cg-32 88KB 196KB [ 453.318141][T16302] kmalloc-cg-16 38KB 68KB [ 453.320808][T16302] kmalloc-cg-8 29KB 32KB [ 453.323481][T16302] kmalloc-cg-192 92KB 124KB [ 453.326173][T16302] kmalloc-cg-96 68KB 120KB [ 453.329228][T16302] kmalloc-8k 4896KB 5088KB [ 453.331897][T16302] kmalloc-4k 15904KB 16224KB [ 453.334447][T16302] kmalloc-2k 16180KB 16224KB [ 453.337185][T16302] kmalloc-1k 8742KB 11168KB [ 453.339911][T16302] kmalloc-512 8378KB 9376KB [ 453.342285][T16302] kmalloc-256 4758KB 7120KB [ 453.344589][T16302] kmalloc-128 841KB 1064KB [ 453.347267][T16302] kmalloc-64 11720KB 13340KB [ 453.350329][T16302] kmalloc-32 2596KB 2988KB [ 453.354216][T16302] kmalloc-16 528KB 536KB [ 453.357081][T16302] kmalloc-8 472KB 488KB [ 453.360546][T16302] kmalloc-192 1930KB 1932KB [ 453.363328][T16302] kmalloc-96 1408KB 1664KB [ 453.365667][T16302] kmem_cache_node 220KB 224KB [ 453.368634][T16302] kmem_cache 195KB 195KB [ 453.371362][T16302] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz1,task=syz.1.3109,pid=16302,uid=0 [ 453.376995][T16302] Out of memory (oom_kill_allocating_task): Killed process 16302 (syz.1.3109) total-vm:103692kB, anon-rss:128kB, file-rss:22976kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 454.343183][T16334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3118'. [ 454.398519][T16337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.417823][T15091] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 454.567757][T15091] usb 8-1: Using ep0 maxpacket: 16 [ 454.573027][T15091] usb 8-1: config 33 has 0 interfaces, different from the descriptor's value: 9 [ 454.575894][T15091] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 454.578684][T15091] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.697824][ T2293] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 454.805990][T15091] usb 8-1: USB disconnect, device number 18 [ 454.859558][ T2293] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 454.863557][ T2293] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 454.866763][ T2293] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 454.869997][ T2293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.874428][T16336] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 454.878425][ T2293] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 455.126565][T15091] usb 6-1: USB disconnect, device number 19 [ 456.328357][ T40] audit: type=1326 audit(2000000535.234:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.3.3129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7fc00000 [ 456.898159][T16380] netlink: zone id is out of range [ 456.900804][T16380] netlink: zone id is out of range [ 456.904009][T16380] netlink: zone id is out of range [ 456.907324][T16380] netlink: zone id is out of range [ 456.931279][T16380] netlink: set zone limit has 4 unknown bytes [ 456.975345][T16380] netlink: del zone limit has 4 unknown bytes [ 457.000607][ T40] audit: type=1326 audit(2000000535.914:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16365 comm="syz.3.3129" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ee579 code=0x7fc00000 [ 457.136326][T16386] netlink: 'syz.1.3136': attribute type 10 has an invalid length. [ 458.274291][T16423] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 458.356359][T16427] netlink: 'syz.4.3143': attribute type 10 has an invalid length. [ 459.233466][T16446] netlink: 'syz.3.3149': attribute type 10 has an invalid length. [ 459.236480][T16446] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3149'. [ 459.248923][T16446] team0: Port device geneve0 added [ 460.168984][T16465] netlink: 'syz.1.3154': attribute type 10 has an invalid length. [ 461.327695][T16483] netlink: 'syz.2.3158': attribute type 1 has an invalid length. [ 461.342090][T16483] bond11: entered promiscuous mode [ 461.344072][T16483] 8021q: adding VLAN 0 to HW filter on device bond11 [ 461.348482][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3159'. [ 461.382156][T16483] 8021q: adding VLAN 0 to HW filter on device bond11 [ 461.384556][T16483] bond11: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 461.388172][T16483] bond11: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 461.394153][T16483] bond11: (slave ip6gre2): making interface the new active one [ 461.396712][T16483] ip6gre2: entered promiscuous mode [ 461.401562][T16483] bond11: (slave ip6gre2): Enslaving as an active interface with an up link [ 461.461753][T16488] lo speed is unknown, defaulting to 1000 [ 461.945142][T16496] tipc: Enabling of bearer rejected, already enabled [ 462.154280][T16504] bond11: (slave ip6gre2): Releasing backup interface [ 462.163642][T16504] ip6gre2: left promiscuous mode [ 462.210833][T16505] netlink: 'syz.2.3164': attribute type 10 has an invalid length. [ 462.438357][T16505] bond0: (slave wlan1): refused to change device type [ 462.543477][T16510] netlink: zone id is out of range [ 462.545454][T16510] netlink: zone id is out of range [ 462.547953][T16510] netlink: zone id is out of range [ 462.550523][T16510] netlink: zone id is out of range [ 462.575965][T16510] netlink: set zone limit has 4 unknown bytes [ 462.632864][T16510] netlink: del zone limit has 4 unknown bytes [ 463.873177][T16531] tipc: Enabled bearer , priority 0 [ 463.907642][T16531] syzkaller0: entered promiscuous mode [ 463.910035][T16531] syzkaller0: entered allmulticast mode [ 463.958224][T16531] tipc: Resetting bearer [ 463.963191][T16530] tipc: Resetting bearer [ 463.976217][T16530] tipc: Disabling bearer [ 464.037836][T16533] lo speed is unknown, defaulting to 1000 [ 464.095218][T16538] tipc: Enabled bearer , priority 0 [ 464.099006][T16538] syzkaller0: entered promiscuous mode [ 464.100834][T16538] syzkaller0: entered allmulticast mode [ 464.121354][T16538] tipc: Resetting bearer [ 464.130043][T16537] tipc: Resetting bearer [ 464.142679][T16537] tipc: Disabling bearer [ 464.527713][T15091] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 464.679074][T15091] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 464.683203][T15091] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 464.688571][T15091] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 464.693109][T15091] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 464.698782][T15091] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 464.702915][T15091] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.709500][T15091] usb 8-1: config 0 descriptor?? [ 464.712702][T16548] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 465.119625][T15091] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 465.124644][T15091] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 465.378798][T16548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3175'. [ 465.381678][T16548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3175'. [ 465.388892][T15091] usb 8-1: USB disconnect, device number 19 [ 466.016163][T16551] team0: Port device geneve0 removed [ 466.057428][T16551] netlink: 'syz.3.3176': attribute type 10 has an invalid length. [ 467.378666][T16591] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 469.175812][T16600] lo speed is unknown, defaulting to 1000 [ 469.481696][T16615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3198'. [ 469.485170][T16615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3198'. [ 469.616391][T11577] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.628581][T11577] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.727162][T11577] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.730728][T11577] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.888190][T15091] hid_parser_main: 7 callbacks suppressed [ 471.888202][T15091] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 471.897092][T15091] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 472.409157][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3201'. [ 473.194898][T16673] batman_adv: batadv0: Adding interface: gretap2 [ 473.197115][T16673] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 473.205713][T16673] batman_adv: batadv0: Interface activated: gretap2 [ 473.207250][T16679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3205'. [ 473.661509][T16679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3205'. [ 476.958978][T16954] tipc: Enabled bearer , priority 0 [ 476.959328][T16956] 9pnet_fd: Insufficient options for proto=fd [ 476.962782][T16954] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 476.967673][T16954] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 476.977655][T16954] tipc: Resetting bearer [ 478.003923][T16967] lo speed is unknown, defaulting to 1000 [ 478.408724][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3222'. [ 478.411689][T16979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3222'. [ 478.431326][T11570] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.441200][T11570] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.444595][T11570] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.447221][T11570] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.980528][T16994] netlink: zone id is out of range [ 479.982367][T16994] netlink: zone id is out of range [ 479.984557][T16994] netlink: zone id is out of range [ 479.997443][T16994] netlink: zone id is out of range [ 480.029543][T16994] netlink: set zone limit has 4 unknown bytes [ 480.067671][T16994] netlink: del zone limit has 4 unknown bytes [ 480.548543][T17008] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 480.559361][T17008] cramfs: wrong magic [ 482.339014][T17048] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 483.001997][T17067] lo speed is unknown, defaulting to 1000 [ 483.104276][T17071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3245'. [ 483.738073][T17082] tipc: Enabling of bearer rejected, already enabled [ 484.945764][T17084] kexec: Could not allocate control_code_buffer [ 485.194902][T17121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3257'. [ 485.198357][T17121] random: crng reseeded on system resumption [ 489.423431][T17200] tipc: Enabling of bearer rejected, already enabled [ 490.874054][T17212] qnx6: unable to read the first superblock [ 490.989904][T17220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3285'. [ 491.495783][ T29] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 491.645710][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 491.649771][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.654222][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.658340][ T29] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 491.662076][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.667848][ T29] usb 6-1: config 0 descriptor?? [ 491.742859][T17249] fuse: Bad value for 'fd' [ 491.946547][ T29] usbhid 6-1:0.0: can't add hid device: -71 [ 491.948575][ T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 491.952129][ T29] usb 6-1: USB disconnect, device number 20 [ 493.106282][T17271] netlink: 'syz.4.3301': attribute type 1 has an invalid length. [ 493.128578][T17274] tipc: Enabling of bearer rejected, already enabled [ 493.142902][T17271] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 493.154444][T17271] 8021q: adding VLAN 0 to HW filter on device bond9 [ 493.158126][T11547] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 493.187713][T17271] veth19: entered promiscuous mode [ 493.191512][T17271] bond9: (slave veth19): Enslaving as a backup interface with a down link [ 493.275972][T11547] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 494.261627][T17294] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 494.655906][T17312] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 494.658390][T17312] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 494.661368][T17312] vhci_hcd vhci_hcd.0: Device attached [ 494.925605][ T29] usb 40-1: SetAddress Request (2) to port 0 [ 494.927972][ T29] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 495.280561][T17313] vhci_hcd: connection reset by peer [ 495.282597][T11570] vhci_hcd: stop threads [ 495.284444][T11570] vhci_hcd: release socket [ 495.287417][T11570] vhci_hcd: disconnect device [ 495.383495][T17325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.402218][ T40] audit: type=1804 audit(2000000574.316:1260): pid=17323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3313" name="bus" dev="tmpfs" ino=4391 res=1 errno=0 [ 497.601686][T17356] netlink: 'syz.2.3326': attribute type 1 has an invalid length. [ 497.623911][T17361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3327'. [ 497.628431][T17356] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 497.633232][T17356] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 497.640877][T17361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3327'. [ 497.668975][T17361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3327'. [ 497.740655][T17362] gretap2: entered promiscuous mode [ 497.744743][T17362] bond12: (slave gretap2): making interface the new active one [ 497.748255][T17362] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 497.754584][T17356] macvlan4: entered promiscuous mode [ 497.756651][T17356] macvlan4: entered allmulticast mode [ 497.759518][T17356] bond12: entered promiscuous mode [ 497.763954][T17356] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 497.770739][T17356] bond12: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 497.777732][T17356] bond12: left promiscuous mode [ 498.376055][T17368] netlink: 'syz.2.3330': attribute type 1 has an invalid length. [ 500.165231][ T29] usb 40-1: device descriptor read/8, error -110 [ 500.555791][ T29] usb usb40-port1: attempt power cycle [ 500.709438][ T839] libceph: connect (1)[c::]:6789 error -22 [ 500.711403][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 500.853474][T17411] ceph: No mds server is up or the cluster is laggy [ 500.887153][T17412] netlink: 'syz.4.3342': attribute type 1 has an invalid length. [ 501.050122][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.052535][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.191094][ T29] usb usb40-port1: unable to enumerate USB device [ 501.333625][T17435] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 501.736496][T17455] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3351'. [ 504.048270][T17473] infiniband syz1: set down [ 504.050434][T17473] infiniband syz1: added syz_tun [ 504.072570][T17473] RDS/IB: syz1: added [ 504.074516][T17473] smc: adding ib device syz1 with port count 1 [ 504.079444][T17473] smc: ib device syz1 port 1 has pnetid [ 504.105744][T17469] netlink: 'syz.1.3355': attribute type 1 has an invalid length. [ 506.133722][T17477] Set syz1 is full, maxelem 65536 reached [ 507.499330][T17552] delete_channel: no stack [ 508.101226][T17564] veth19: left promiscuous mode [ 508.103645][T11547] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.107270][T11547] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.109904][T11547] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.112644][T11547] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.644308][T17597] bond12: (slave gretap2): Releasing active interface [ 515.443737][T17697] netlink: 'syz.3.3420': attribute type 2 has an invalid length. [ 515.449005][T17697] netlink: 'syz.3.3420': attribute type 11 has an invalid length. [ 515.452442][T17697] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3420'. [ 521.170813][T17791] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 522.268323][T17820] dummy0: left allmulticast mode [ 522.270258][T17820] nlmon0: left allmulticast mode [ 522.272947][T17820] caif0: left allmulticast mode [ 522.275787][T17820] veth0: left allmulticast mode [ 522.277897][T17820] wg1: left allmulticast mode [ 522.279799][T17820] wg2: left allmulticast mode [ 522.281573][T17820] veth0_to_bridge: left allmulticast mode [ 522.283653][T17820] bridge_slave_0: left allmulticast mode [ 522.285883][T17820] veth1_to_bridge: left allmulticast mode [ 522.287975][T17820] bridge_slave_1: left allmulticast mode [ 522.290151][T17820] bond_slave_0: left allmulticast mode [ 522.292501][T17820] veth1_to_bond: left allmulticast mode [ 522.294914][T17820] bond_slave_1: left allmulticast mode [ 522.296884][T17820] veth0_to_team: left allmulticast mode [ 522.298963][T17820] team_slave_0: left allmulticast mode [ 522.301136][T17820] veth1_to_team: left allmulticast mode [ 522.303435][T17820] team_slave_1: left allmulticast mode [ 522.306604][T17820] veth0_to_batadv: left allmulticast mode [ 522.309949][T17820] batadv_slave_0: left allmulticast mode [ 522.313312][T17820] veth1_to_batadv: left allmulticast mode [ 522.316942][T17820] batadv_slave_1: left allmulticast mode [ 522.320322][T17820] xfrm0: left allmulticast mode [ 522.323248][T17820] veth0_to_hsr: left allmulticast mode [ 522.327583][T17820] hsr0: left allmulticast mode [ 522.329716][T17820] hsr_slave_0: left allmulticast mode [ 522.331899][T17820] veth1_virt_wifi: left allmulticast mode [ 522.334437][T17820] veth0_virt_wifi: left allmulticast mode [ 522.336746][T17820] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 522.339698][T17820] veth1_vlan: left allmulticast mode [ 522.342145][T17820] vlan0: left promiscuous mode [ 522.344715][T17820] vlan1: left allmulticast mode [ 522.346562][T17820] macvlan0: left allmulticast mode [ 522.348586][T17820] macvlan1: left allmulticast mode [ 522.350596][T17820] ipvlan0: left allmulticast mode [ 522.352655][T17820] veth1_macvtap: left allmulticast mode [ 522.354947][T17820] veth0_macvtap: left allmulticast mode [ 522.357201][T17820] macvtap0: left allmulticast mode [ 522.359509][T17820] geneve0: left allmulticast mode [ 522.362182][T17820] geneve1: left allmulticast mode [ 522.368038][T17820] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 522.370755][T17820] gre1: left allmulticast mode [ 522.372866][T17820] gre2: left allmulticast mode [ 522.375637][T17820] gre3: left allmulticast mode [ 522.377515][T17820] bridge1: left allmulticast mode [ 522.379381][T17820] gre4: left allmulticast mode [ 522.381615][T17820] gre5: left allmulticast mode [ 522.383693][T17820] syztnl0: left allmulticast mode [ 522.385618][T17820] gre6: left allmulticast mode [ 522.387439][T17820] bridge2: left allmulticast mode [ 522.389386][T17820] bridge3: left allmulticast mode [ 522.391376][T17820] bridge4: left allmulticast mode [ 522.393306][T17820] bridge5: left allmulticast mode [ 522.395441][T17820] veth2: left allmulticast mode [ 522.397248][T17820] veth3: left allmulticast mode [ 522.399200][T17820] bridge0: left allmulticast mode [ 522.401462][T17820] veth4: left allmulticast mode [ 522.404843][T17820] veth5: left allmulticast mode [ 522.407886][T17820] bridge6: left allmulticast mode [ 522.410789][T17820] veth6: left allmulticast mode [ 522.413821][T17820] veth7: left allmulticast mode [ 522.416939][T17820] gre7: left allmulticast mode [ 522.419925][T17820] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 522.422956][T17820] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 522.427040][T17820] bond1: left allmulticast mode [ 522.429898][T17820] bridge7: left allmulticast mode [ 522.433060][T17820] vlan2: left allmulticast mode [ 522.435275][T17820] team0: left allmulticast mode [ 522.438290][T17820] bridge8: left allmulticast mode [ 522.441252][T17820] vlan3: left allmulticast mode [ 522.443573][T17820] macsec0: left allmulticast mode [ 522.451718][T17820] bond4: left promiscuous mode [ 522.455202][T17820] bond6: left promiscuous mode [ 522.458732][T17820] bridge10: left promiscuous mode [ 522.460986][T17820] bridge10: left allmulticast mode [ 522.464124][T17820] wireguard0: left promiscuous mode [ 522.466404][T17820] wireguard0: left allmulticast mode [ 522.673830][T17820] vlan4: left allmulticast mode [ 522.745801][T11547] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.748522][T11547] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.751084][T11547] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.753541][T11547] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.146474][T17825] lo speed is unknown, defaulting to 1000 [ 523.334386][T17839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3448'. [ 523.504427][T17843] tipc: Bearer : already 2 bearers with priority 10 [ 523.507151][T17843] tipc: Bearer : trying with adjusted priority [ 523.509551][T17843] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 525.523532][T17882] veth0_vlan: left allmulticast mode [ 525.548342][T17882] wireguard0: left promiscuous mode [ 525.552006][T17882] wireguard0: left allmulticast mode [ 525.557538][T17882] veth17: left promiscuous mode [ 525.560336][T17882] bond9: left promiscuous mode [ 525.575730][T17882] bridge10: left promiscuous mode [ 525.577435][T17882] bridge10: left allmulticast mode [ 525.686597][T17882] bond11: left promiscuous mode [ 525.689507][T17882] gretap2: left promiscuous mode [ 525.694390][ T40] audit: type=1326 audit(2000000604.617:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17883 comm="syz.4.3458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 525.702029][ T40] audit: type=1326 audit(2000000604.617:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17883 comm="syz.4.3458" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 525.716838][ T40] audit: type=1326 audit(2000000604.617:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17883 comm="syz.4.3458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 525.726631][ T40] audit: type=1326 audit(2000000604.617:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17883 comm="syz.4.3458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 525.735557][ T40] audit: type=1326 audit(2000000604.617:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17883 comm="syz.4.3458" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 525.742828][ T40] audit: type=1326 audit(2000000604.617:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17883 comm="syz.4.3458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 525.750178][ T40] audit: type=1326 audit(2000000604.617:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17883 comm="syz.4.3458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 525.757446][ T40] audit: type=1326 audit(2000000604.617:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17883 comm="syz.4.3458" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 525.768240][ T40] audit: type=1326 audit(2000000604.617:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17883 comm="syz.4.3458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 525.775231][ T40] audit: type=1326 audit(2000000604.617:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17883 comm="syz.4.3458" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 527.743866][T17911] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 531.214977][T17960] lo speed is unknown, defaulting to 1000 [ 532.260913][T17972] sp0: Synchronizing with TNC [ 532.301201][T17972] block nbd1: not configured, cannot reconfigure [ 532.358339][T17977] sp0: Found TNC [ 534.036373][T17996] 9pnet: Unknown protocol version 9 [ 537.573381][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 537.573396][ T40] audit: type=1326 audit(2000000616.498:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18041 comm="syz.3.3500" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7fc00000 [ 538.132339][ T40] audit: type=1326 audit(2000000617.048:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18041 comm="syz.3.3500" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ee579 code=0x7fc00000 [ 541.409534][T18103] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 541.610384][ T40] audit: type=1804 audit(2000000620.528:1303): pid=18116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3520" name="cgroup.controllers" dev="tmpfs" ino=4423 res=1 errno=0 [ 541.617192][ T40] audit: type=1800 audit(2000000620.528:1304): pid=18116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3520" name="cgroup.controllers" dev="tmpfs" ino=4423 res=0 errno=0 [ 541.624241][ T40] audit: type=1800 audit(2000000620.528:1305): pid=18116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3520" name="cgroup.controllers" dev="tmpfs" ino=4423 res=0 errno=0 [ 543.613203][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3524'. [ 543.616548][T18145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3524'. [ 547.355982][T18185] netlink: 'syz.3.3537': attribute type 1 has an invalid length. [ 547.403896][T18185] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 547.407745][T18185] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 547.455631][T18196] gretap3: entered promiscuous mode [ 547.462794][T18196] bond10: (slave gretap3): making interface the new active one [ 547.465645][T18196] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 547.482250][T18196] macvlan2: entered promiscuous mode [ 547.485469][T18196] macvlan2: entered allmulticast mode [ 547.487587][T18196] bond10: entered promiscuous mode [ 547.489724][T18196] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 547.500088][T18196] bond10: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 547.517590][T18196] bond10: left promiscuous mode [ 547.580853][T18293] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 547.583353][T18293] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 547.586381][T18293] vhci_hcd vhci_hcd.0: Device attached [ 547.645623][T18299] vhci_hcd: connection closed [ 547.645983][ T1150] vhci_hcd: stop threads [ 547.649875][ T1150] vhci_hcd: release socket [ 547.651764][ T1150] vhci_hcd: disconnect device [ 548.132150][T18383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.061217][T18388] delete_channel: no stack [ 549.562596][ T29] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 549.752507][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 549.781581][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 549.802971][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 549.813172][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 549.824484][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 549.889876][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 549.892967][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.115278][ T29] usb 6-1: GET_CAPABILITIES returned 0 [ 550.117042][ T29] usbtmc 6-1:16.0: can't read capabilities [ 550.179092][T18415] netlink: 'syz.4.3550': attribute type 1 has an invalid length. [ 550.215468][T18415] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 550.244885][T18415] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 550.262537][T18417] gretap1: entered promiscuous mode [ 550.267443][T18417] bond10: (slave gretap1): making interface the new active one [ 550.274433][T18417] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 550.298492][T18417] macvlan2: entered promiscuous mode [ 550.300742][T18417] macvlan2: entered allmulticast mode [ 550.303704][T18417] bond10: entered promiscuous mode [ 550.305777][T18417] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 550.312998][T18417] bond10: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 550.317765][T18417] bond10: left promiscuous mode [ 550.318214][ T40] audit: type=1326 audit(2000000629.239:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18404 comm="syz.1.3547" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 550.326266][ T40] audit: type=1326 audit(2000000629.239:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18404 comm="syz.1.3547" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 550.333143][ T40] audit: type=1326 audit(2000000629.239:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18404 comm="syz.1.3547" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 550.339840][ T40] audit: type=1326 audit(2000000629.239:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18404 comm="syz.1.3547" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 550.347956][ T40] audit: type=1326 audit(2000000629.239:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18404 comm="syz.1.3547" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 550.355054][ T40] audit: type=1326 audit(2000000629.239:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18404 comm="syz.1.3547" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 550.361741][ T40] audit: type=1326 audit(2000000629.239:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18404 comm="syz.1.3547" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 552.341573][ T5974] usb 6-1: USB disconnect, device number 21 [ 552.384011][T18426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3560'. [ 552.392902][T18426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3560'. [ 552.422695][T18426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3560'. [ 553.319059][T18440] 9pnet: Unknown protocol version 9 [ 553.788354][ T40] audit: type=1804 audit(2000000632.669:1313): pid=18456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3556" name="bus" dev="tmpfs" ino=4484 res=1 errno=0 [ 554.708669][T18469] lo speed is unknown, defaulting to 1000 [ 555.558806][T18484] macvlan0: entered promiscuous mode [ 555.560639][T18484] netlink: 'syz.2.3566': attribute type 1 has an invalid length. [ 555.564325][T18484] netlink: 'syz.2.3566': attribute type 2 has an invalid length. [ 559.734017][ T40] audit: type=1800 audit(2000000638.659:1314): pid=18531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3576" name="nullb0" dev="tmpfs" ino=3547 res=0 errno=0 [ 560.222760][ T1183] ------------[ cut here ]------------ [ 560.225463][ T1183] WARNING: CPU: 3 PID: 1183 at io_uring/io_uring.c:2982 io_ring_exit_work+0x3fc/0x10a0 [ 560.228662][ T1183] Modules linked in: [ 560.230169][ T1183] CPU: 3 UID: 0 PID: 1183 Comm: kworker/u32:10 Not tainted syzkaller #0 PREEMPT(full) [ 560.235867][ T1183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 560.239590][ T1183] Workqueue: iou_exit io_ring_exit_work [ 560.241529][ T1183] RIP: 0010:io_ring_exit_work+0x3fc/0x10a0 [ 560.243794][ T1183] Code: 0f 85 b6 0a 00 00 48 8b 05 c1 df 4b 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 af d1 e5 fc 4d 85 f6 79 12 e8 35 d6 e5 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 23 d6 e5 fc 48 8b 74 24 60 [ 560.249844][ T1183] RSP: 0018:ffffc90007267a90 EFLAGS: 00010293 [ 560.251911][ T1183] RAX: 0000000000000000 RBX: ffff888025b4a6c8 RCX: ffffffff84d53251 [ 560.254366][ T1183] RDX: ffff8880214f2440 RSI: ffffffff84d5325b RDI: 0000000000000007 [ 560.257124][ T1183] RBP: ffffc90007267c50 R08: 0000000000000007 R09: 0000000000000000 [ 560.259717][ T1183] R10: fffffffffffffffb R11: 0000000000000000 R12: ffff888025b4a000 [ 560.262307][ T1183] R13: dffffc0000000000 R14: fffffffffffffffb R15: ffff888025b4a040 [ 560.264816][ T1183] FS: 0000000000000000(0000) GS:ffff8880977c3000(0000) knlGS:0000000000000000 [ 560.267746][ T1183] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.270284][ T1183] CR2: 00000000f7fa55c0 CR3: 0000000069a2f000 CR4: 0000000000352ef0 [ 560.274975][ T1183] DR0: 0000040000000000 DR1: 000000000000064f DR2: 0000000000000006 [ 560.278269][ T1183] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 560.281558][ T1183] Call Trace: [ 560.283504][ T1183] [ 560.284807][ T1183] ? do_raw_spin_lock+0x12c/0x2b0 [ 560.287047][ T1183] ? __pfx_io_ring_exit_work+0x10/0x10 [ 560.289375][ T1183] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 560.292210][ T1183] ? debug_object_deactivate+0x1ec/0x3a0 [ 560.294935][ T1183] ? rcu_is_watching+0x12/0xc0 [ 560.296942][ T1183] process_one_work+0x9cf/0x1b70 [ 560.299107][ T1183] ? __pfx_process_one_work+0x10/0x10 [ 560.301359][ T1183] ? assign_work+0x1a0/0x250 [ 560.303612][ T1183] worker_thread+0x6c8/0xf10 [ 560.305226][ T1183] ? __kthread_parkme+0x19e/0x250 [ 560.306859][ T1183] ? __pfx_worker_thread+0x10/0x10 [ 560.308682][ T1183] kthread+0x3c5/0x780 [ 560.310273][ T1183] ? __pfx_kthread+0x10/0x10 [ 560.312473][ T1183] ? rcu_is_watching+0x12/0xc0 [ 560.314331][ T1183] ? __pfx_kthread+0x10/0x10 [ 560.316283][ T1183] ret_from_fork+0x5d4/0x6f0 [ 560.317934][ T1183] ? __pfx_kthread+0x10/0x10 [ 560.319825][ T1183] ret_from_fork_asm+0x1a/0x30 [ 560.321479][ T1183] [ 560.322655][ T1183] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 560.325061][ T1183] CPU: 3 UID: 0 PID: 1183 Comm: kworker/u32:10 Not tainted syzkaller #0 PREEMPT(full) [ 560.328088][ T1183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 560.331572][ T1183] Workqueue: iou_exit io_ring_exit_work [ 560.333325][ T1183] Call Trace: [ 560.334396][ T1183] [ 560.335358][ T1183] dump_stack_lvl+0x3d/0x1f0 [ 560.336827][ T1183] vpanic+0x6e8/0x7a0 [ 560.338158][ T1183] ? __pfx_vpanic+0x10/0x10 [ 560.340185][ T1183] ? io_ring_exit_work+0x3fc/0x10a0 [ 560.342215][ T1183] panic+0xca/0xd0 [ 560.343696][ T1183] ? __pfx_panic+0x10/0x10 [ 560.345551][ T1183] ? check_panic_on_warn+0x1f/0xb0 [ 560.347609][ T1183] check_panic_on_warn+0xab/0xb0 [ 560.349477][ T1183] __warn+0xf6/0x3c0 [ 560.351262][ T1183] ? io_ring_exit_work+0x3fc/0x10a0 [ 560.353222][ T1183] report_bug+0x3c3/0x580 [ 560.354929][ T1183] ? io_ring_exit_work+0x3fc/0x10a0 [ 560.357175][ T1183] handle_bug+0x184/0x210 [ 560.359114][ T1183] exc_invalid_op+0x17/0x50 [ 560.360843][ T1183] asm_exc_invalid_op+0x1a/0x20 [ 560.363163][ T1183] RIP: 0010:io_ring_exit_work+0x3fc/0x10a0 [ 560.365386][ T1183] Code: 0f 85 b6 0a 00 00 48 8b 05 c1 df 4b 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 af d1 e5 fc 4d 85 f6 79 12 e8 35 d6 e5 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 23 d6 e5 fc 48 8b 74 24 60 [ 560.371652][ T1183] RSP: 0018:ffffc90007267a90 EFLAGS: 00010293 [ 560.373778][ T1183] RAX: 0000000000000000 RBX: ffff888025b4a6c8 RCX: ffffffff84d53251 [ 560.376301][ T1183] RDX: ffff8880214f2440 RSI: ffffffff84d5325b RDI: 0000000000000007 [ 560.378892][ T1183] RBP: ffffc90007267c50 R08: 0000000000000007 R09: 0000000000000000 [ 560.381376][ T1183] R10: fffffffffffffffb R11: 0000000000000000 R12: ffff888025b4a000 [ 560.383878][ T1183] R13: dffffc0000000000 R14: fffffffffffffffb R15: ffff888025b4a040 [ 560.386366][ T1183] ? io_ring_exit_work+0x3f1/0x10a0 [ 560.388061][ T1183] ? io_ring_exit_work+0x3fb/0x10a0 [ 560.389701][ T1183] ? do_raw_spin_lock+0x12c/0x2b0 [ 560.391315][ T1183] ? __pfx_io_ring_exit_work+0x10/0x10 [ 560.393036][ T1183] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 560.394889][ T1183] ? debug_object_deactivate+0x1ec/0x3a0 [ 560.396658][ T1183] ? rcu_is_watching+0x12/0xc0 [ 560.398191][ T1183] process_one_work+0x9cf/0x1b70 [ 560.399790][ T1183] ? __pfx_process_one_work+0x10/0x10 [ 560.401505][ T1183] ? assign_work+0x1a0/0x250 [ 560.402985][ T1183] worker_thread+0x6c8/0xf10 [ 560.404471][ T1183] ? __kthread_parkme+0x19e/0x250 [ 560.406074][ T1183] ? __pfx_worker_thread+0x10/0x10 [ 560.407735][ T1183] kthread+0x3c5/0x780 [ 560.409089][ T1183] ? __pfx_kthread+0x10/0x10 [ 560.410588][ T1183] ? rcu_is_watching+0x12/0xc0 [ 560.412143][ T1183] ? __pfx_kthread+0x10/0x10 [ 560.413622][ T1183] ret_from_fork+0x5d4/0x6f0 [ 560.415147][ T1183] ? __pfx_kthread+0x10/0x10 [ 560.416634][ T1183] ret_from_fork_asm+0x1a/0x30 [ 560.418204][ T1183] [ 560.419956][ T1183] Kernel Offset: disabled [ 560.421290][ T1183] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:24:51 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000001 RBX=ffffc900034af918 RCX=ffffffff8b8eae2a RDX=ffff88802429a440 RSI=000000000000003f RDI=0000000000000001 RBP=ffff88805314fc82 RSP=ffffc900034af870 R8 =0000000000000001 R9 =000000000000003f R10=0000000000000006 R11=ffff88801daa0048 R12=00000000000005bb R13=ffffc900034af930 R14=0000000000000006 R15=ffffffff90abab34 RIP=ffffffff81bb0228 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000320dfffc CR3=0000000028a4e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=0000000000000235 RCX=ffffffff81f1610b RDX=ffff888012398000 RSI=ffffffff81f15e3f RDI=0000000000000001 RBP=0000000000000235 RSP=ffffc9000344f6c0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffea0001ced3c0 R14=ffffc9000344f9e0 R15=dffffc0000000000 RIP=ffffffff81bb08d6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7397800 CR3=0000000028ac7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000000 RBX=0000000000000002 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8df3fab9 RDI=ffffffff8c162d00 RBP=0000000000000002 RSP=ffffc90002df7030 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000011d77 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b90a3ad RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb0b1b84300 ffffffff 00c00000 GS =0000 ffff8880976c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800bd01c CR3=00000000511e2000 CR4=00352ef0 DR0=0000040000000000 DR1=000000000000064f DR2=0000000000000006 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85616d85 RDI=ffffffff9b0f9700 RBP=ffffffff9b0f96c0 RSP=ffffc90007267400 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000069 R14=ffffffff9b0f96c0 R15=ffffffff85616d20 RIP=ffffffff85616daf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fa55c0 CR3=0000000069a2f000 CR4=00352ef0 DR0=0000040000000000 DR1=000000000000064f DR2=0000000000000006 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000