last executing test programs: 5m49.163032631s ago: executing program 3 (id=115): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2, 0x0, r0}, 0x10) 5m49.103856471s ago: executing program 3 (id=116): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x3) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x0, r3}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) 5m49.068152033s ago: executing program 3 (id=117): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x19d1, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x8000000, 0x8000000}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) shutdown(r0, 0x1) 5m48.199208819s ago: executing program 3 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 5m48.196806787s ago: executing program 3 (id=136): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000680)=r1, 0x4) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) 5m48.002870943s ago: executing program 3 (id=140): r0 = syz_io_uring_setup(0x10d5, &(0x7f00000002c0)={0x0, 0x7734, 0x10, 0x0, 0x10034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5m47.967582598s ago: executing program 32 (id=140): r0 = syz_io_uring_setup(0x10d5, &(0x7f00000002c0)={0x0, 0x7734, 0x10, 0x0, 0x10034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5m39.302740559s ago: executing program 2 (id=287): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r4, 0x8000, 0x0, 0xffffffff, 0x804, {0xac7c, 0x2, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 5m39.220874762s ago: executing program 2 (id=288): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) 5m39.219785653s ago: executing program 2 (id=289): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x1000000000000000) 5m38.342006832s ago: executing program 2 (id=300): io_uring_setup(0x51d2, &(0x7f0000000100)={0x0, 0x6316, 0x2, 0xfffffffe, 0x14f}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r2, 0x10886}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x10820, 0x343}}}}}}]}, 0x48}}, 0x0) 5m38.312964924s ago: executing program 2 (id=301): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0) 5m38.243892215s ago: executing program 2 (id=302): r0 = syz_io_uring_setup(0x6447, &(0x7f0000000200)={0x0, 0x7b23, 0x10100, 0x0, 0x22a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000003, 0x0, {0xfffe}}) io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x0) 5m23.265201878s ago: executing program 33 (id=302): r0 = syz_io_uring_setup(0x6447, &(0x7f0000000200)={0x0, 0x7b23, 0x10100, 0x0, 0x22a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000003, 0x0, {0xfffe}}) io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x0) 5m23.092157724s ago: executing program 4 (id=468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 5m20.629961328s ago: executing program 4 (id=478): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fsync(r3) 5m20.570510676s ago: executing program 4 (id=470): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x40001) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1}], 0x1, 0x40000042, 0x0) 5m20.515782457s ago: executing program 4 (id=471): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 5m20.512301568s ago: executing program 4 (id=472): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000980)={0x1, 0xffffffff, 0x8001, 0x5, 0x1, 0x5}) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x81, &(0x7f0000000900)=@string={0x81, 0x3, "38352b7d2ba12d6548575262629fdae029ec0d851ca62ddfd65201d233673eb5baeafe898c51e7ebbf876533abdb40b5c3353536fdced8485323e8a6839830f3f13add0eeae5d37c17e4eda5ae8dd0c9c77c15c5f2d760a755037d5efcaff97f7fe9d120948530c8d4b0fe51dfb527d757d9c32db28e4848bc538a67485fc7"}}]}) 5m20.221633593s ago: executing program 4 (id=487): setreuid(0x0, 0xee01) r0 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r0, 0x2, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, &(0x7f0000000080)) 5m20.16939968s ago: executing program 34 (id=487): setreuid(0x0, 0xee01) r0 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r0, 0x2, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, &(0x7f0000000080)) 3m44.48748882s ago: executing program 5 (id=2472): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", '\x00', "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000180)="b77d42", 0x3}], 0x1) shutdown(r0, 0x1) 3m44.343179254s ago: executing program 5 (id=2473): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f00000029c0)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}], 0x1, 0x48800) shutdown(r0, 0x1) 3m44.243637308s ago: executing program 5 (id=2477): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "feeeff000000001b"}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 3m44.015985414s ago: executing program 5 (id=2481): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1a1011, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 3m44.000897545s ago: executing program 5 (id=2483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) 3m43.700561954s ago: executing program 5 (id=2490): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 3m43.675139452s ago: executing program 35 (id=2490): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 5.046607358s ago: executing program 0 (id=4491): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt(r3, 0x5, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 4.776408829s ago: executing program 1 (id=4493): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0xef92, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 4.43091319s ago: executing program 1 (id=4495): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x9, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 4.033208636s ago: executing program 0 (id=4497): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000040)="319af0e95ce200002f0000000000", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x4, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r6, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x2c}}, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 3.955232831s ago: executing program 6 (id=4498): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000280), 0x2, &(0x7f00000004c0)={'trans=virtio,', {[{@access_user}]}}) 3.640404091s ago: executing program 0 (id=4499): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x6}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x801, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x8028}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x0) 3.572321424s ago: executing program 1 (id=4500): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) memfd_create(&(0x7f0000019080)='@@\x00', 0x1) r2 = dup(r1) syz_usb_connect$hid(0x4, 0xffffffffffffff33, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) 3.084725854s ago: executing program 6 (id=4501): timerfd_create(0x0, 0x80000) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x84c0, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000000)) r3 = syz_io_uring_setup(0x48be, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000000), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2a31, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, 0x0, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.020457552s ago: executing program 7 (id=4502): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) listen(r0, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6}) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 2.843511521s ago: executing program 6 (id=4503): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2801c1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$inet_smc(0x2b, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) fanotify_init(0x200, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfe00000, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) 2.841632818s ago: executing program 7 (id=4511): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x6, 0xfffff417) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000280)={0x2, 0xc0, 0x340, &(0x7f00000005c0)=[0x9, 0x6, 0x3, 0x2bdebfaf, 0x1, 0x8000000000000001, 0x3, 0x1, 0x1, 0x7, 0x401, 0xf, 0x4a, 0x8, 0x7, 0x8, 0x1, 0x6, 0x0, 0x40, 0x10001, 0x9, 0x5, 0x87c, 0x40, 0xfffffffffffffffc, 0x2, 0x4, 0x1ff, 0x8, 0x6, 0x8000, 0xa, 0x0, 0x10000, 0x9, 0x9, 0x7, 0xf4b, 0x4, 0x1ceb6868, 0x81, 0x80000000, 0x2, 0x6, 0xffffffff, 0x10001, 0x7fffffff, 0x5, 0xffffffffffffffff, 0x1, 0x8001, 0x5, 0x59, 0x50, 0x7fff, 0x7fff, 0x8, 0x2, 0x0, 0x8, 0x1, 0x7, 0x5, 0x4, 0x5, 0x2, 0x5, 0x7, 0x5, 0x1, 0x2, 0x3, 0x3, 0xfff, 0x401, 0x8, 0x4, 0x401, 0x8, 0x9b9d, 0xb60, 0xe000000000, 0x101, 0x7, 0xfffffffffffffffa, 0xe, 0x4, 0x2, 0x800, 0x875, 0x7de, 0xe9, 0x8000000000000001, 0x6, 0x6f0d, 0x1, 0xcc3d, 0xa75, 0x2, 0xb, 0x27a3, 0x6, 0x8, 0x7, 0x9, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff9, 0x6, 0x2, 0x3, 0x20000000000000, 0x9, 0x8, 0xfffffffffffffffb, 0x3, 0x7fffffff, 0x1000, 0x5, 0x9, 0x9, 0x0, 0x2, 0x7, 0xbe9, 0x2]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) syz_io_uring_setup(0x74b9, &(0x7f0000000140)={0x0, 0xe8d8, 0x40, 0x3, 0x14c}, &(0x7f00000000c0), &(0x7f00000001c0)) 2.742724744s ago: executing program 0 (id=4504): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) socket(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(0x0, 0x92) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) io_uring_enter(0xffffffffffffffff, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) 2.49051545s ago: executing program 1 (id=4505): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}], 0x20) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1.892275065s ago: executing program 7 (id=4506): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@host, 0x9}, 0x1, 0x2, 0x5}) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRES8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRES64=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000004c0)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5a1b47b6806323deb3", 0xb8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @private0, 0x4}, 0x1c) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000000)={0x14}, 0x14) 1.874179237s ago: executing program 6 (id=4507): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) poll(0x0, 0x0, 0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 1.828793309s ago: executing program 7 (id=4508): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x31, 0x82, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67b", &(0x7f0000000500)=""/130, 0x0, 0x0, 0x0, 0x86, &(0x7f0000000840), &(0x7f00000005c0)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac673610", 0x1, 0x8000, 0x1}, 0x4c) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) pipe(0x0) read$alg(0xffffffffffffffff, &(0x7f0000000200)=""/96, 0x60) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) write(0xffffffffffffffff, &(0x7f0000000700), 0x0) splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x6, 0x0) open_by_handle_at(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="280000004e002e5620b3a70c5c7f00000b000000000000007b070000005c4000100000007b3300000000f71c61b4"], 0x143000) r3 = socket$nl_generic(0x10, 0x3, 0x10) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x40, 0x2b, 0xb, 0x8000000, 0x0, {0x7}, [@typed={0x8, 0xe0, 0x0, 0x0, @u32=0x8}, @nested={0x10, 0x133, 0x0, 0x1, [@typed={0xc, 0xb5, 0x0, 0x0, @u64=0xbae7}]}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x40}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r4, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) 1.738744515s ago: executing program 7 (id=4509): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'batadv0\x00', &(0x7f0000000000)=@ethtool_stats}) 1.737229609s ago: executing program 0 (id=4510): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000005"]) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000740)=ANY=[], 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.393583055s ago: executing program 1 (id=4512): socket$inet_smc(0x2b, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) fanotify_init(0x200, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) 941.531429ms ago: executing program 6 (id=4513): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x4c, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x10, 0xfc, 0x0, 0x1, [@typed={0xc, 0x5, 0x0, 0x0, @u64=0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="c4139b78"]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 935.090535ms ago: executing program 0 (id=4521): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r2, 0x0, 0x0}, 0x20) socket$inet6_sctp(0xa, 0x4, 0x84) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800) 760.212731ms ago: executing program 7 (id=4514): prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1a22, &(0x7f0000000740)={0x0, 0xf350, 0x400, 0x0, 0x20e}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000000c0)=0x6f) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000001400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001380)={0x1c, 0x0, 0x208, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000040) syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0xfffffffffffffffe, 0x4000000) 486.469161ms ago: executing program 1 (id=4515): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x4, 0x1000, 0x40048}, 0x2c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) io_uring_enter(0xffffffffffffffff, 0x53d1, 0x0, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 0s ago: executing program 6 (id=4516): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) kernel console output (not intermixed with test programs): lation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 218.771379][T14244] overlayfs: failed to clone upperpath [ 218.773090][ T7464] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 218.975684][ T6443] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 218.980011][ T6443] em28xx 6-1:0.0: board has no eeprom [ 218.986989][T14266] netlink: 129704 bytes leftover after parsing attributes in process `syz.0.3135'. [ 219.026460][T14223] lo speed is unknown, defaulting to 1000 [ 219.031886][T14223] lo speed is unknown, defaulting to 1000 [ 219.035692][T14223] lo speed is unknown, defaulting to 1000 [ 219.043694][ T6443] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 219.046465][ T6443] em28xx 6-1:0.0: dvb set to bulk mode. [ 219.049101][ T840] em28xx 6-1:0.0: Binding DVB extension [ 219.058598][ T6443] usb 6-1: USB disconnect, device number 16 [ 219.067687][ T6443] em28xx 6-1:0.0: Disconnecting em28xx [ 219.109024][T14271] overlayfs: failed to clone upperpath [ 219.117461][ T840] em28xx 6-1:0.0: Registering input extension [ 219.120649][ T6443] em28xx 6-1:0.0: Closing input extension [ 219.143241][ T6443] em28xx 6-1:0.0: Freeing device [ 219.190943][T14223] infiniband syz0: set active [ 219.193537][T14223] infiniband syz0: added lo [ 219.196201][ T7464] lo speed is unknown, defaulting to 1000 [ 219.239925][T14223] RDS/IB: syz0: added [ 219.243525][T14223] smc: adding ib device syz0 with port count 1 [ 219.245961][T14223] smc: ib device syz0 port 1 has pnetid [ 219.250316][ T59] lo speed is unknown, defaulting to 1000 [ 219.254797][T14223] lo speed is unknown, defaulting to 1000 [ 219.273887][ T60] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 219.365704][T14223] lo speed is unknown, defaulting to 1000 [ 219.451950][T14223] lo speed is unknown, defaulting to 1000 [ 219.538589][T14223] lo speed is unknown, defaulting to 1000 [ 219.628645][ T10] usb 11-1: USB disconnect, device number 15 [ 219.787117][ T1238] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 219.967535][T14286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3150'. [ 220.013859][ T5986] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 220.017573][ T5986] Bluetooth: hci0: Injecting HCI hardware error event [ 220.022488][ T63] Bluetooth: hci0: hardware error 0x00 [ 220.297732][ T1250] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 220.803874][ T1250] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 220.903752][ T34] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 221.057285][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3164'. [ 221.065586][T14320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3164'. [ 221.073703][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 221.086493][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 221.091376][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 221.095882][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.100105][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.105939][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.109682][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.148412][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3156'. [ 221.229556][T14328] overlayfs: failed to clone upperpath [ 221.315152][ T71] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 221.325365][ T34] usb 6-1: GET_CAPABILITIES returned 0 [ 221.327127][ T34] usbtmc 6-1:16.0: can't read capabilities [ 221.630261][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 221.636070][T14309] usbtmc 6-1:16.0: Unable to send data, error -71 [ 221.650655][ T34] usb 6-1: USB disconnect, device number 17 [ 221.823841][ T1238] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 222.093737][ T63] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 222.185952][ T40] audit: type=1800 audit(1756975015.871:132): pid=14345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3166" name="/" dev="fuse" ino=0 res=0 errno=0 [ 222.345740][ T1250] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 222.853871][ T1250] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 223.146429][T14394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.151789][T14394] bond0: (slave rose0): Enslaving as an active interface with an up link [ 223.246217][T14406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3179'. [ 223.274919][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3179'. [ 223.373749][ T1163] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 223.405196][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'. [ 223.410125][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'. [ 223.414174][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'. [ 223.417919][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'. [ 223.422072][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'. [ 223.424922][T14416] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 223.884812][ T1250] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 224.408330][ T1163] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 224.914679][ T1163] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 225.079839][T14487] netlink: 'syz.1.3205': attribute type 4 has an invalid length. [ 225.133997][ C1] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 225.173395][T14491] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 225.290818][T14500] netlink: 'syz.0.3211': attribute type 1 has an invalid length. [ 225.341451][T14500] 8021q: adding VLAN 0 to HW filter on device bond6 [ 225.346236][T14500] bond5: (slave bond6): making interface the new active one [ 225.349894][T14500] bond5: (slave bond6): Enslaving as an active interface with an up link [ 225.382081][T14500] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 225.387297][T14500] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 225.526890][T14512] netlink: 'syz.0.3215': attribute type 4 has an invalid length. [ 225.538669][T14512] netlink: 'syz.0.3215': attribute type 4 has an invalid length. [ 225.934725][ T1250] net_ratelimit: 1 callbacks suppressed [ 225.934738][ T1250] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 226.253770][T14541] __nla_validate_parse: 4 callbacks suppressed [ 226.253788][T14541] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3224'. [ 226.445055][ T1163] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 226.828615][ T40] audit: type=1804 audit(1756975020.511:133): pid=14558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3231" name="file0" dev="tmpfs" ino=4982 res=1 errno=0 [ 226.829898][T14558] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1 [ 226.838092][T14558] ref_ctr increment failed for inode: 0x1376 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802601ab00 [ 226.964064][ T1238] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 227.084631][T14583] comedi comedi0: Minor 3 could not be opened [ 227.097172][T14582] wg2: entered promiscuous mode [ 227.099381][T14582] wg2: entered allmulticast mode [ 227.135926][T14585] overlayfs: failed to clone upperpath [ 227.196780][T14587] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3242'. [ 227.262337][T14580] cgroup: fork rejected by pids controller in /syz7 [ 227.484726][ T1238] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 227.997676][ T71] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 228.213207][T14654] netlink: 'syz.0.3252': attribute type 1 has an invalid length. [ 228.216068][T14654] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.3252'. [ 228.304258][ T6207] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 228.308520][ T6207] hid-generic 0000:0000:0000.000E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 228.504259][ T1238] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 229.023894][ T13] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 229.533757][ T71] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 230.001283][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3271'. [ 230.046421][ T13] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 230.166125][T14714] vlan3: entered allmulticast mode [ 230.167942][T14714] bridge_slave_0: entered allmulticast mode [ 230.333035][T14724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3279'. [ 230.429309][T14724] team0 (unregistering): Port device team_slave_0 removed [ 230.437275][T14724] team0 (unregistering): Port device team_slave_1 removed [ 230.449339][T14724] team0 (unregistering): Port device geneve0 removed [ 230.554918][ T71] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 230.949504][T14742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3286'. [ 231.064604][ T71] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 231.574204][ T13] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 231.751146][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3293'. [ 231.766789][T14764] sch_tbf: burst 6 is lower than device bridge7 mtu (1514) ! [ 231.855500][T14770] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3296'. [ 231.859951][T14770] veth0_macvtap: left promiscuous mode [ 232.037291][T14781] netlink: 'syz.1.3298': attribute type 3 has an invalid length. [ 232.040546][T14781] netlink: 'syz.1.3298': attribute type 3 has an invalid length. [ 232.043888][T14781] netlink: 'syz.1.3298': attribute type 3 has an invalid length. [ 232.047513][T14781] netlink: 'syz.1.3298': attribute type 3 has an invalid length. [ 232.051049][T14781] netlink: 'syz.1.3298': attribute type 3 has an invalid length. [ 232.054080][T14781] netlink: 'syz.1.3298': attribute type 3 has an invalid length. [ 232.056713][T14781] netlink: 'syz.1.3298': attribute type 3 has an invalid length. [ 232.059271][T14781] netlink: 'syz.1.3298': attribute type 3 has an invalid length. [ 232.061896][T14781] netlink: 'syz.1.3298': attribute type 3 has an invalid length. [ 232.064962][T14781] netlink: 'syz.1.3298': attribute type 3 has an invalid length. [ 232.084084][ T71] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 232.594161][ T1250] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 233.114650][ T1163] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 233.624156][ T71] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 233.840932][ T40] audit: type=1326 audit(1756975027.521:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14813 comm="syz.7.3311" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x0 [ 234.134792][ T1163] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 234.653893][ T1163] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 234.784169][T14840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3319'. [ 234.855328][T14842] netlink: 240 bytes leftover after parsing attributes in process `syz.7.3317'. [ 235.083878][T14860] tipc: Started in network mode [ 235.085522][T14860] tipc: Node identity ac1414aa, cluster identity 4711 [ 235.088226][T14860] tipc: Enabled bearer , priority 10 [ 235.167285][ T1163] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 235.673813][ T1250] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 236.072090][T14884] kvm: pic: non byte read [ 236.075076][T14884] kvm: pic: non byte read [ 236.077683][T14884] kvm: pic: non byte read [ 236.080192][T14884] kvm: pic: non byte read [ 236.087639][T14884] kvm: pic: non byte read [ 236.089952][T14884] kvm: pic: single mode not supported [ 236.090211][T14884] kvm: pic: non byte read [ 236.096056][ T34] tipc: Node number set to 2886997162 [ 236.099554][T14884] kvm: pic: non byte read [ 236.102943][T14884] kvm: pic: non byte read [ 236.106583][T14884] kvm: pic: non byte read [ 236.191082][ T13] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 236.275916][T14903] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 236.630913][ T40] audit: type=1326 audit(1756975030.311:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14879 comm="syz.6.3332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7fc00000 [ 236.704132][ T93] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 236.815191][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3349'. [ 236.819592][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3349'. [ 236.823097][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3349'. [ 236.828909][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3349'. [ 236.832541][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3349'. [ 237.223941][ T1250] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 237.735536][ T71] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 238.243864][ T1238] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 238.578132][ T40] audit: type=1804 audit(1756975032.261:136): pid=14959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3364" name="file0" dev="tmpfs" ino=5235 res=1 errno=0 [ 238.586464][ T40] audit: type=1804 audit(1756975032.261:137): pid=14961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3365" name="file0" dev="ramfs" ino=52739 res=1 errno=0 [ 238.760151][ T1250] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 239.284291][ T93] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 239.670849][ T40] audit: type=1326 audit(1756975033.351:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.7.3372" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x0 [ 239.794905][ T1163] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 240.313753][ T71] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 240.825778][ T71] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 240.859229][T15006] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3381'. [ 241.345739][ T60] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 241.473718][ T34] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 241.635818][ T34] usb 11-1: config 0 has no interfaces? [ 241.638197][ T34] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.642129][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.652563][ T34] usb 11-1: config 0 descriptor?? [ 241.809733][ T6443] IPVS: starting estimator thread 0... [ 241.854060][ T71] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 241.858390][ T34] usb 11-1: USB disconnect, device number 16 [ 241.904368][T15034] IPVS: using max 46 ests per chain, 110400 per kthread [ 241.986673][T15039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3394'. [ 242.335116][ T6207] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 242.363870][ T93] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 242.369260][T15057] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 242.375094][T15057] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 242.403197][T15063] Invalid ELF header magic: != ELF [ 242.464040][T15069] batadv_slave_1: entered promiscuous mode [ 242.558721][T15067] batadv_slave_1: left promiscuous mode [ 242.629231][T15079] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3406'. [ 242.745616][T15079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.751754][T15079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.757295][T15079] bond0 (unregistering): Released all slaves [ 242.875649][ T60] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 243.293850][ T6207] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 243.380295][T15109] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 243.387516][ T93] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 243.894850][ T71] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 243.978076][T15116] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3422'. [ 244.413829][ T13] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 244.923754][ T13] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 245.342993][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3431'. [ 246.013739][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 246.013797][ T5986] Bluetooth: hci4: command 0x1003 tx timeout [ 246.062895][T15157] futex_wake_op: syz.1.3437 tries to shift op by -1; fix this program [ 246.245403][ T840] lo speed is unknown, defaulting to 1000 [ 246.248813][T15163] syz_tun: entered promiscuous mode [ 246.342615][T15164] syzkaller0: entered promiscuous mode [ 246.348830][T15164] syzkaller0: entered allmulticast mode [ 246.409516][T15172] netlink: 1343 bytes leftover after parsing attributes in process `syz.1.3443'. [ 246.464094][ T13] net_ratelimit: 2 callbacks suppressed [ 246.464104][ T13] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 246.547118][T15173] lo speed is unknown, defaulting to 1000 [ 246.988309][ T46] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 247.169196][T15217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3455'. [ 247.210182][T15217] 8021q: adding VLAN 0 to HW filter on device bond7 [ 247.213073][T15217] bond0: (slave bond7): Enslaving as an active interface with an up link [ 247.229594][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3455'. [ 247.234384][T15217] bond0 (unregistering): (slave bond7): Releasing backup interface [ 247.244079][T15217] bond0 (unregistering): Released all slaves [ 247.375940][T15221] ceph: No mds server is up or the cluster is laggy [ 247.376396][T15227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.380976][T15227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.391739][T15227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.395953][T15227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.406628][T15227] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 247.409428][T15227] batman_adv: batadv0: Removing interface: ip6gretap1 [ 247.416736][T15227] bond2: (slave bridge1): Releasing active interface [ 247.430303][T15227] bond5: (slave bond6): Releasing backup interface [ 247.460492][T15229] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 247.513728][ T93] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 247.759716][T15249] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3464'. [ 247.787854][T15248] lo speed is unknown, defaulting to 1000 [ 247.791641][T15248] lo speed is unknown, defaulting to 1000 [ 247.797434][T15248] lo speed is unknown, defaulting to 1000 [ 247.811115][T15248] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 247.843394][T15248] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 247.902852][T15248] lo speed is unknown, defaulting to 1000 [ 247.915181][T15248] lo speed is unknown, defaulting to 1000 [ 247.920898][T15248] lo speed is unknown, defaulting to 1000 [ 247.926314][T15248] lo speed is unknown, defaulting to 1000 [ 248.039143][ T13] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 248.554359][ T60] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 249.064836][ T46] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 249.588609][ T93] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 249.617728][T15300] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 249.619950][T15300] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 249.623343][T15300] validate_nla: 8 callbacks suppressed [ 249.623352][T15300] netlink: 'syz.1.3483': attribute type 10 has an invalid length. [ 249.633583][T15300] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 250.036565][T15319] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3492'. [ 250.079409][T15322] netlink: 'syz.6.3491': attribute type 27 has an invalid length. [ 250.119808][ T1163] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 250.128411][T15322] sit0: left promiscuous mode [ 250.150485][T15322] tipc: Resetting bearer [ 250.226367][T15322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.325406][T15322] gtp0: left promiscuous mode [ 250.362269][T15322] vlan0: left allmulticast mode [ 250.363959][T15322] batadv0: left allmulticast mode [ 250.369700][ T24] lo speed is unknown, defaulting to 1000 [ 250.371505][ T24] syz0: Port: 1 Link DOWN [ 250.375783][ T24] lo speed is unknown, defaulting to 1000 [ 250.392311][T15326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.399112][T15326] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.401468][T15326] tipc: Resetting bearer [ 250.404606][T15326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.409909][ T1163] tipc: Resetting bearer [ 250.414349][ T1149] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.417471][ T1149] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.422027][ T24] lo speed is unknown, defaulting to 1000 [ 250.424427][ T24] syz0: Port: 1 Link ACTIVE [ 250.426868][ T1149] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.431017][ T1149] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.434799][ T24] lo speed is unknown, defaulting to 1000 [ 250.553377][T15340] bridge_slave_0: left allmulticast mode [ 250.555566][T15340] bridge_slave_0: left promiscuous mode [ 250.557742][T15340] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.563982][T15340] bridge_slave_1: left allmulticast mode [ 250.566023][T15340] bridge_slave_1: left promiscuous mode [ 250.568000][T15340] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.572969][T15340] bond0: (slave bond_slave_0): Releasing backup interface [ 250.578515][T15340] bond0: (slave bond_slave_1): Releasing backup interface [ 250.586183][T15340] team0: Port device team_slave_0 removed [ 250.592822][T15340] team0: Port device team_slave_1 removed [ 250.595373][T15340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.598240][T15340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.601717][T15340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.605558][T15340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.613864][T15340] bond1: (slave veth3): Releasing active interface [ 250.874358][T15347] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3497'. [ 251.674118][ T60] net_ratelimit: 3 callbacks suppressed [ 251.674131][ T60] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 252.075673][T15384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 252.108039][T15384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 252.112386][T15384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 252.118937][T15384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 252.124429][T15384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 252.186686][ T1149] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 252.694292][ T93] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 253.106359][T15403] netlink: 'syz.1.3514': attribute type 1 has an invalid length. [ 253.110899][T15403] netlink: 'syz.1.3514': attribute type 4 has an invalid length. [ 253.115609][T15403] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.3514'. [ 253.204835][ T13] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 253.713820][ T1163] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 254.115051][T15421] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3523'. [ 254.215038][T15427] lo: entered allmulticast mode [ 254.221580][T15427] dvmrp8: entered allmulticast mode [ 254.224210][ T13] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 254.229249][T15427] lo: left allmulticast mode [ 254.230832][T15427] dvmrp8: left allmulticast mode [ 254.336508][T15429] ptrace attach of "/syz-executor exec"[12501] was attempted by "/syz-executor exec"[15429] [ 254.402024][T15433] dvmrp8: entered allmulticast mode [ 254.411394][T15433] dvmrp8: left allmulticast mode [ 254.734713][ T1163] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 254.866406][T15437] netlink: 'syz.6.3528': attribute type 10 has an invalid length. [ 254.871723][T15437] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 255.216348][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.218862][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.233096][T15447] ptrace attach of "/syz-executor exec"[5982] was attempted by "/syz-executor exec"[15447] [ 255.246451][ T93] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 255.361461][T15457] overlayfs: failed to clone upperpath [ 255.753754][ T1163] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 255.931794][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3542'. [ 255.944205][T15471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3542'. [ 256.273774][ T1149] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 256.635412][T15488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3547'. [ 256.785059][ T60] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 257.515083][T15507] netlink: zone id is out of range [ 257.517712][T15507] netlink: zone id is out of range [ 257.547014][T15507] netlink: set zone limit has 4 unknown bytes [ 257.686737][ T1149] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 258.213878][ T13] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 258.345822][T15538] wg2: left promiscuous mode [ 258.347336][T15538] wg2: left allmulticast mode [ 258.355245][T15538] wg2: entered promiscuous mode [ 258.357103][T15538] wg2: entered allmulticast mode [ 258.413748][ T63] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 258.417653][ T63] Bluetooth: hci3: Injecting HCI hardware error event [ 258.423084][ T63] Bluetooth: hci3: hardware error 0x00 [ 258.497075][T15547] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3568'. [ 258.724983][ T60] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 259.226841][ T5990] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 259.231696][ T5990] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 259.233812][ T93] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 259.236264][ T5990] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 259.242651][ T5990] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 259.246136][ T5990] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 259.278199][T15560] lo speed is unknown, defaulting to 1000 [ 259.343919][T15566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3576'. [ 259.374461][T15560] lo speed is unknown, defaulting to 1000 [ 259.464903][T15560] chnl_net:caif_netlink_parms(): no params data found [ 259.554115][T15560] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.556480][T15560] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.558757][T15560] bridge_slave_0: entered allmulticast mode [ 259.561791][T15560] bridge_slave_0: entered promiscuous mode [ 259.565760][T15560] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.568833][T15560] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.571625][T15560] bridge_slave_1: entered allmulticast mode [ 259.575495][T15560] bridge_slave_1: entered promiscuous mode [ 259.617332][T15560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.624267][T15560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.666197][T15560] team0: Port device team_slave_0 added [ 259.671059][T15560] team0: Port device team_slave_1 added [ 259.726538][T15560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.729131][T15560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.738337][T15560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.742927][T15560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.745901][T15560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.753998][T15560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.754062][ T93] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 259.798433][T15560] hsr_slave_0: entered promiscuous mode [ 259.801573][T15560] hsr_slave_1: entered promiscuous mode [ 259.804564][T15560] debugfs: 'hsr0' already exists in 'hsr' [ 259.806977][T15560] Cannot create hsr debugfs directory [ 260.243567][T15560] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 260.257630][T15560] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 260.264746][ T1163] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 260.272276][T15560] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 260.282510][T15560] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 260.370116][T15560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.396572][T15560] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.410183][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.413105][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.423667][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.426776][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.494542][ T63] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 260.649779][T15560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.799556][T15560] veth0_vlan: entered promiscuous mode [ 260.804840][T15560] veth1_vlan: entered promiscuous mode [ 260.821050][T15560] veth0_macvtap: entered promiscuous mode [ 260.828156][T15560] veth1_macvtap: entered promiscuous mode [ 260.837595][T15560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.845825][T15560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.856400][ T1149] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.859391][ T1149] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.862187][ T1149] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.866680][ T1149] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.911194][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.916218][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.937310][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.939750][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.303988][ T63] Bluetooth: hci2: command tx timeout [ 261.816058][ T1163] net_ratelimit: 2 callbacks suppressed [ 261.816071][ T1163] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 262.291234][T15649] overlayfs: failed to clone upperpath [ 262.326988][ T93] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 262.553345][T15659] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 262.846306][ T1163] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 262.947608][ T40] audit: type=1326 audit(1756975056.631:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15691 comm="syz.0.3611" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f11579 code=0x0 [ 263.373756][ T63] Bluetooth: hci2: command tx timeout [ 263.374401][ T46] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 263.851014][T15713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3614'. [ 263.885431][ T1149] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 264.063128][ T63] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 264.404886][ T46] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 264.914584][ T46] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 265.423836][ T60] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 265.454198][ T63] Bluetooth: hci2: command tx timeout [ 265.892821][T15774] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 265.934496][ T1238] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 265.961392][T15778] capability: warning: `syz.0.3638' uses 32-bit capabilities (legacy support in use) [ 266.151110][T15780] netlink: 'syz.0.3639': attribute type 12 has an invalid length. [ 266.356545][T15789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3642'. [ 266.460499][ T1238] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 266.986713][ T60] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 267.358614][T15820] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3654'. [ 267.494055][ T93] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 267.533855][ T63] Bluetooth: hci2: command tx timeout [ 267.616931][T15834] overlayfs: upper fs does not support file handles, falling back to index=off. [ 267.736330][T15838] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 267.745022][T15840] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 268.024943][ T60] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 268.221821][T15848] batman_adv: batadv0: Interface deactivated: dummy0 [ 268.544007][ T911] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 268.584847][T15853] netlink: 'syz.7.3667': attribute type 12 has an invalid length. [ 268.693801][ T911] usb 6-1: Using ep0 maxpacket: 8 [ 268.698579][ T911] usb 6-1: unable to get BOS descriptor or descriptor too short [ 268.710496][ T911] usb 6-1: config 4 interface 0 has no altsetting 0 [ 268.718986][ T911] usb 6-1: string descriptor 0 read error: -22 [ 268.721685][ T911] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 268.726222][ T911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.741650][ T911] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 268.754116][ T911] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 268.758546][ T911] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 268.770202][ T911] usb 6-1: media controller created [ 268.787662][ T911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 268.942755][ T911] zl10353_read_register: readreg error (reg=127, ret==0) [ 268.980370][T15864] overlayfs: upper fs does not support file handles, falling back to index=off. [ 269.033210][ T911] usb 6-1: USB disconnect, device number 18 [ 269.613729][ T911] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 269.786185][ T911] usb 11-1: Using ep0 maxpacket: 16 [ 269.790470][ T911] usb 11-1: config 0 has no interfaces? [ 269.795901][ T911] usb 11-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 269.799724][ T911] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.803270][ T911] usb 11-1: Product: syz [ 269.806844][ T911] usb 11-1: Manufacturer: syz [ 269.810752][ T911] usb 11-1: SerialNumber: syz [ 269.819872][ T911] usb 11-1: config 0 descriptor?? [ 270.555231][ T911] usb 11-1: USB disconnect, device number 17 [ 270.948215][ T1474] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 270.957333][ T1474] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 271.366413][T15933] syzkaller0: entered promiscuous mode [ 271.368191][T15933] syzkaller0: entered allmulticast mode [ 272.792522][T15997] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3720'. [ 273.496449][T15990] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 273.533898][T16024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3726'. [ 273.951191][T16028] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 274.630464][T16024] Set syz1 is full, maxelem 65536 reached [ 274.849138][T16049] netlink: 'syz.0.3736': attribute type 1 has an invalid length. [ 275.571536][T16044] bridge_slave_0: left allmulticast mode [ 275.573458][T16044] bridge_slave_0: left promiscuous mode [ 275.575961][T16044] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.580876][T16044] bridge_slave_1: left allmulticast mode [ 275.582664][T16044] bridge_slave_1: left promiscuous mode [ 275.585637][T16044] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.590320][T16044] bond0: (slave bond_slave_0): Releasing backup interface [ 275.595880][T16044] bond0: (slave bond_slave_1): Releasing backup interface [ 275.602298][T16044] team0: Port device team_slave_0 removed [ 275.607438][T16044] team0: Port device team_slave_1 removed [ 275.609651][T16044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.611910][T16044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.615919][T16044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.618314][T16044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.626049][T16045] team0: Mode changed to "broadcast" [ 275.639999][T16046] vlan0: entered promiscuous mode [ 275.647102][T16046] team0: Port device vlan0 added [ 275.662420][T16049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.669367][T16050] bond0: (slave ip6gretap2): making interface the new active one [ 275.672767][T16050] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 275.699862][T16051] veth15: entered promiscuous mode [ 275.706448][T16051] bond0: (slave veth15): Enslaving as an active interface with a down link [ 275.710086][T16047] tipc: Started in network mode [ 275.712142][T16047] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 275.715098][T16047] tipc: Enabled bearer , priority 0 [ 275.955372][T16073] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 275.961779][T16073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3746'. [ 275.975175][ T840] libceph: connect (1)[c::]:6789 error -101 [ 275.977193][ T840] libceph: mon0 (1)[c::]:6789 connect error [ 276.128980][T16078] ceph: No mds server is up or the cluster is laggy [ 276.252311][T16094] lo speed is unknown, defaulting to 1000 [ 276.384322][T16094] lo speed is unknown, defaulting to 1000 [ 276.713831][T15334] tipc: Node number set to 11578026 [ 276.827653][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3754'. [ 276.831945][T16107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3754'. [ 277.086580][T16122] team0: Port device vlan0 removed [ 277.090703][ T1163] tipc: Resetting bearer [ 277.380652][T16143] netlink: 'syz.6.3768': attribute type 1 has an invalid length. [ 277.382624][T16141] lo speed is unknown, defaulting to 1000 [ 277.392272][T16143] bond1: entered promiscuous mode [ 277.393982][T16143] bond1: entered allmulticast mode [ 277.413256][T16143] bond1: (slave erspan1): making interface the new active one [ 277.416411][T16143] erspan1: entered promiscuous mode [ 277.418106][T16143] erspan1: entered allmulticast mode [ 277.420253][T16143] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 277.434277][T16143] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3768'. [ 277.440223][T16143] bond1: left promiscuous mode [ 277.441951][T16143] erspan1: left promiscuous mode [ 277.444502][T16143] bond1: left allmulticast mode [ 277.446517][T16143] erspan1: left allmulticast mode [ 277.449122][T16143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.465603][T16141] lo speed is unknown, defaulting to 1000 [ 277.636633][ T40] audit: type=1326 audit(1756975071.321:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16146 comm="syz.6.3770" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7fc00000 [ 277.700933][ T40] audit: type=1804 audit(1756975071.381:141): pid=16155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3771" name="bus" dev="ramfs" ino=58151 res=1 errno=0 [ 277.709622][ T40] audit: type=1804 audit(1756975071.381:142): pid=16155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3771" name="bus" dev="ramfs" ino=58151 res=1 errno=0 [ 278.016287][ T5968] page_pool_release_retry() stalled pool shutdown: id 57, 3329 inflight 120 sec [ 278.048830][T16172] netlink: 'syz.0.3774': attribute type 14 has an invalid length. [ 278.058379][T16172] netlink: 'syz.0.3774': attribute type 4 has an invalid length. [ 278.068342][T16172] netlink: 'syz.0.3774': attribute type 4 has an invalid length. [ 278.322378][ T40] audit: type=1326 audit(1756975072.001:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16146 comm="syz.6.3770" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fd4579 code=0x7fc00000 [ 278.329271][ T40] audit: type=1326 audit(1756975072.001:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16146 comm="syz.6.3770" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7fc00000 [ 278.338556][ T40] audit: type=1326 audit(1756975072.001:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16146 comm="syz.6.3770" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7fc00000 [ 278.345255][ T40] audit: type=1326 audit(1756975072.001:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16146 comm="syz.6.3770" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7fc00000 [ 278.351356][T16184] lo speed is unknown, defaulting to 1000 [ 278.351841][ T40] audit: type=1326 audit(1756975072.001:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16146 comm="syz.6.3770" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7fc00000 [ 278.360451][ T40] audit: type=1326 audit(1756975072.001:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16146 comm="syz.6.3770" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7fc00000 [ 278.367037][ T40] audit: type=1326 audit(1756975072.001:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16146 comm="syz.6.3770" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7fc00000 [ 278.437478][T16184] lo speed is unknown, defaulting to 1000 [ 278.542687][T16190] overlayfs: failed to clone upperpath [ 278.634653][ T6207] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 278.795209][ T6207] usb 11-1: config 0 has no interfaces? [ 278.799209][ T6207] usb 11-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 278.802759][ T6207] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.806741][ T6207] usb 11-1: Product: syz [ 278.809250][ T6207] usb 11-1: Manufacturer: syz [ 278.811165][ T6207] usb 11-1: SerialNumber: syz [ 278.815358][ T6207] usb 11-1: config 0 descriptor?? [ 279.105680][T15334] usb 11-1: USB disconnect, device number 18 [ 279.812276][T16230] batman_adv: batadv0: Removing interface: dummy0 [ 279.817493][T16230] bond0: (slave batadv0): Releasing backup interface [ 279.822738][T16230] bridge_slave_0: left allmulticast mode [ 279.827681][T16230] bridge_slave_0: left promiscuous mode [ 279.831224][T16230] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.835006][T16230] bridge_slave_1: left allmulticast mode [ 279.837094][T16230] bridge_slave_1: left promiscuous mode [ 279.839393][T16230] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.843315][T16230] bond0: (slave bond_slave_0): Releasing backup interface [ 279.847703][T16230] team0: Port device team_slave_0 removed [ 279.850715][T16230] team0: Port device team_slave_1 removed [ 279.852668][T16230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.855659][T16230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.859506][T16230] bond0: (slave wlan1): Releasing backup interface [ 279.862908][T16230] bond1: (slave gretap2): Releasing active interface [ 279.868201][T16230] bond4: (slave bridge2): Releasing active interface [ 279.923281][T16234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3790'. [ 279.928228][T16234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3790'. [ 279.932231][T16234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3790'. [ 279.936738][T16234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3790'. [ 280.013180][T16240] netlink: 'syz.1.3794': attribute type 2 has an invalid length. [ 280.283752][ T840] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 280.434987][ T840] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.438138][ T840] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 280.442636][ T840] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 280.445710][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 280.448235][ T840] usb 6-1: Product: syz [ 280.449543][ T840] usb 6-1: Manufacturer: syz [ 280.450996][ T840] usb 6-1: SerialNumber: syz [ 280.453866][ T840] usb 6-1: config 0 descriptor?? [ 280.494212][T16246] bridge0: port 1(vxlan0) entered blocking state [ 280.496290][T16246] bridge0: port 1(vxlan0) entered disabled state [ 280.498365][T16246] vxlan0: entered allmulticast mode [ 280.501671][T16246] vxlan0: entered promiscuous mode [ 280.670289][ T1474] usb 6-1: USB disconnect, device number 19 [ 281.201564][T16256] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3799'. [ 281.384851][T16269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3803'. [ 283.155047][T16300] : entered promiscuous mode [ 283.180255][T16300] : left promiscuous mode [ 283.516426][T16305] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3815'. [ 283.664705][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3815'. [ 283.782017][T16308] netlink: 'syz.0.3816': attribute type 1 has an invalid length. [ 283.793411][T16308] 8021q: adding VLAN 0 to HW filter on device bond8 [ 283.836387][T16308] bond8: (slave veth17): Enslaving as an active interface with a down link [ 283.886858][T16308] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 283.921794][T16308] vlan3: entered allmulticast mode [ 283.923426][T16308] bond8: entered allmulticast mode [ 283.934851][T16308] bond8: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 284.308337][T16327] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3821'. [ 284.402957][T16330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3822'. [ 284.770244][T16336] overlayfs: failed to clone lowerpath [ 284.790174][T16336] overlayfs: failed to clone upperpath [ 284.926553][T16340] dvmrp1: entered allmulticast mode [ 285.016560][T16345] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 285.020165][T16345] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3827'. [ 285.601382][T16352] team0: Mode changed to "random" [ 285.604235][T16352] vlan0: entered promiscuous mode [ 285.609284][T16352] team0: Port device vlan0 added [ 285.616448][T16352] tipc: Enabled bearer , priority 0 [ 285.954003][ T59] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 286.010961][T16367] syz_tun: entered allmulticast mode [ 286.023483][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 286.023493][ T40] audit: type=1326 audit(1756975079.701:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.7.3836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 286.033114][ T40] audit: type=1326 audit(1756975079.701:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.7.3836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 286.033983][T16367] dvmrp1: entered allmulticast mode [ 286.041600][ T40] audit: type=1326 audit(1756975079.721:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.7.3836" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 286.049280][ T40] audit: type=1326 audit(1756975079.721:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.7.3836" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 286.055948][ T40] audit: type=1326 audit(1756975079.721:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.7.3836" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 286.062599][ T40] audit: type=1326 audit(1756975079.721:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.7.3836" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 286.066187][T16366] syz_tun: left allmulticast mode [ 286.069606][ T40] audit: type=1326 audit(1756975079.721:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.7.3836" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 286.123866][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 286.127105][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 286.129293][ T59] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 286.132148][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.135895][ T40] audit: type=1326 audit(1756975079.821:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.7.3836" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 286.137640][ T59] usb 6-1: config 0 descriptor?? [ 286.205472][ T40] audit: type=1326 audit(1756975079.891:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.7.3836" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 286.263820][ T1474] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 286.266825][ T40] audit: type=1326 audit(1756975079.951:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.7.3836" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 286.413766][ T1474] usb 12-1: Using ep0 maxpacket: 16 [ 286.418448][ T1474] usb 12-1: unable to get BOS descriptor or descriptor too short [ 286.422461][ T1474] usb 12-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 286.425956][ T1474] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 597 [ 286.429098][ T1474] usb 12-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.437099][ T1474] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.440055][ T1474] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.442614][ T1474] usb 12-1: Product: syz [ 286.444090][ T1474] usb 12-1: Manufacturer: syz [ 286.445617][ T1474] usb 12-1: SerialNumber: syz [ 286.559194][ T59] mcp2221 0003:04D8:00DD.0010: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 286.733646][ T1474] cdc_ncm 12-1:1.0: bind() failure [ 286.738137][ T1474] cdc_ncm 12-1:1.1: CDC Union missing and no IAD found [ 286.740603][ T1474] cdc_ncm 12-1:1.1: bind() failure [ 286.746481][ T1474] usb 12-1: USB disconnect, device number 3 [ 286.767874][T16356] tipc: Invalid UDP bearer configuration [ 286.767899][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 286.773380][ T6207] usb 6-1: USB disconnect, device number 20 [ 287.314891][T16397] netlink: 'syz.1.3847': attribute type 4 has an invalid length. [ 287.317781][T16397] netlink: 'syz.1.3847': attribute type 4 has an invalid length. [ 287.325493][ T5968] lo speed is unknown, defaulting to 1000 [ 287.327434][ T5968] syz2: Port: 1 Link ACTIVE [ 287.502332][T16413] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3853'. [ 287.507621][T16413] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3853'. [ 287.522712][T16413] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3853'. [ 287.699525][T16420] overlayfs: failed to clone upperpath [ 289.718765][T16478] netlink: 'syz.7.3875': attribute type 4 has an invalid length. [ 289.740585][T16478] netlink: 'syz.7.3875': attribute type 4 has an invalid length. [ 289.978025][T16497] lo speed is unknown, defaulting to 1000 [ 290.076586][T16497] lo speed is unknown, defaulting to 1000 [ 290.225822][T16495] md2: using deprecated bitmap file support [ 290.228132][T16495] md2: error: bitmap file must open for write [ 290.243514][T16501] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 290.336036][T16511] netlink: 'syz.0.3888': attribute type 3 has an invalid length. [ 290.339003][T16511] netlink: 'syz.0.3888': attribute type 3 has an invalid length. [ 290.346716][T16514] veth1_macvtap: left promiscuous mode [ 290.348518][T16514] macsec0: entered promiscuous mode [ 290.350178][T16514] macsec0: entered allmulticast mode [ 290.362679][T16514] macsec0: left allmulticast mode [ 290.467532][T16519] tipc: Resetting bearer [ 290.626496][ T1250] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.632607][ T1250] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.646437][ T1250] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.649701][ T1250] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.167519][T16552] netlink: 'syz.7.3900': attribute type 3 has an invalid length. [ 291.169988][T16552] netlink: 'syz.7.3900': attribute type 3 has an invalid length. [ 291.280216][T16555] netlink: 161716 bytes leftover after parsing attributes in process `syz.7.3901'. [ 291.283150][T16555] netlink: zone id is out of range [ 291.285111][T16555] netlink: zone id is out of range [ 291.286961][T16555] netlink: zone id is out of range [ 292.337105][ T1250] wlan1: Trigger new scan to find an IBSS to join [ 293.284559][ T5968] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 293.295049][T16597] ubi0: attaching mtd0 [ 293.433715][ T5968] usb 12-1: Using ep0 maxpacket: 8 [ 293.436919][ T5968] usb 12-1: config 0 interface 0 has no altsetting 0 [ 293.439038][ T5968] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 293.442431][ T5968] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.454431][ T5968] usb 12-1: config 0 descriptor?? [ 293.885369][ T5968] mcp2221 0003:04D8:00DD.0011: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 293.917793][T16621] loop7: detected capacity change from 0 to 16384 [ 294.079037][T16589] tipc: Invalid UDP bearer configuration [ 294.079081][T16589] tipc: Enabling of bearer rejected, failed to enable media [ 294.087144][ T6207] usb 12-1: USB disconnect, device number 4 [ 295.374232][ T46] wlan1: Trigger new scan to find an IBSS to join [ 295.832000][ T5968] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 295.835032][ T5968] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 295.837659][ T5968] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 295.840185][ T5968] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 295.843122][ T5968] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 295.846197][ T5968] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 295.848615][ T5968] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 295.851066][ T5968] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 295.853808][ T5968] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 295.856311][ T5968] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 295.864368][ T5968] hid-generic 0006:0004:0009.0012: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 295.906044][T16656] fido_id[16656]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 297.494746][T16688] 8021q: adding VLAN 0 to HW filter on device bond9 [ 297.541671][T16688] ip6gretap2: entered promiscuous mode [ 297.544590][T16688] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 297.550990][T16688] bond9: (slave macvlan2): Enslaving as a backup interface with an up link [ 297.605579][ T93] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 297.627004][ T93] bond9: (slave macvlan2): link status up again after 0 ms [ 297.629426][ T93] bond9: (slave macvlan2): failed to get link speed/duplex [ 297.745086][ T93] bond9: (slave macvlan2): failed to get link speed/duplex [ 297.747473][ T93] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 297.855653][ T60] bond9: (slave macvlan2): failed to get link speed/duplex [ 298.024547][ T1250] bond9: (slave macvlan2): failed to get link speed/duplex [ 298.137233][ T93] bond9: (slave macvlan2): failed to get link speed/duplex [ 298.244104][ T13] bond9: (slave macvlan2): failed to get link speed/duplex [ 298.334191][ T13] wlan1: Creating new IBSS network, BSSID a2:17:b5:73:18:70 [ 298.356767][ T93] bond9: (slave macvlan2): failed to get link speed/duplex [ 298.757576][T16716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3949'. [ 298.909326][ T13] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.913178][ T13] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.919090][ T13] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.922690][ T13] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.995438][T14396] hid-generic 0006:0004:0009.0013: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 300.070146][T16734] fido_id[16734]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 300.990469][T16753] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 301.034949][T16755] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3962'. [ 301.506576][T16770] bond7: entered allmulticast mode [ 301.509708][T16770] 8021q: adding VLAN 0 to HW filter on device bond7 [ 302.563728][ T5968] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 302.714146][ T13] net_ratelimit: 31 callbacks suppressed [ 302.714172][ T13] bond9: (slave macvlan2): failed to get link speed/duplex [ 302.720608][ T5968] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.727323][ T5968] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.731278][ T5968] usb 11-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 302.735276][ T5968] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.741266][ T5968] usb 11-1: config 0 descriptor?? [ 302.825957][ T13] bond9: (slave macvlan2): failed to get link speed/duplex [ 302.943779][ T93] bond9: (slave macvlan2): failed to get link speed/duplex [ 303.038316][T16801] lo: entered allmulticast mode [ 303.040167][T16801] tunl0: entered allmulticast mode [ 303.042239][T16801] gre0: entered allmulticast mode [ 303.044193][T16801] gretap0: entered allmulticast mode [ 303.047196][T16801] erspan0: entered allmulticast mode [ 303.049119][T16801] ip_vti0: entered allmulticast mode [ 303.050954][T16801] ip6_vti0: entered allmulticast mode [ 303.052829][T16801] sit0: entered allmulticast mode [ 303.054759][T16801] ip6tnl0: entered allmulticast mode [ 303.056693][T16801] ip6gre0: entered allmulticast mode [ 303.058682][T16801] ip6gretap0: entered allmulticast mode [ 303.061088][T16801] bridge0: entered allmulticast mode [ 303.063373][T16801] vcan0: entered allmulticast mode [ 303.065751][T16801] bond0: entered allmulticast mode [ 303.068057][T16801] team0: entered allmulticast mode [ 303.070374][T16801] dummy0: left promiscuous mode [ 303.072380][T16801] dummy0: entered allmulticast mode [ 303.074776][T16801] nlmon0: entered allmulticast mode [ 303.077090][T16801] caif0: entered allmulticast mode [ 303.079370][T16801] batadv0: entered allmulticast mode [ 303.081695][T16801] vxcan0: entered allmulticast mode [ 303.084254][T16801] vxcan1: entered allmulticast mode [ 303.086504][T16801] veth0: entered allmulticast mode [ 303.088811][T16801] veth1: entered allmulticast mode [ 303.091078][T16801] wg0: entered allmulticast mode [ 303.093333][T16801] wg1: entered allmulticast mode [ 303.095649][T16801] wg2: entered allmulticast mode [ 303.097891][T16801] veth0_to_bridge: entered allmulticast mode [ 303.100578][T16801] bridge_slave_0: entered allmulticast mode [ 303.103260][T16801] veth1_to_bridge: entered allmulticast mode [ 303.106057][T16801] bridge_slave_1: entered allmulticast mode [ 303.108666][T16801] veth0_to_bond: entered allmulticast mode [ 303.111258][T16801] bond_slave_0: entered allmulticast mode [ 303.113952][T16801] veth1_to_bond: entered allmulticast mode [ 303.116585][T16801] bond_slave_1: entered allmulticast mode [ 303.119176][T16801] veth0_to_team: entered allmulticast mode [ 303.121810][T16801] team_slave_0: entered allmulticast mode [ 303.124475][T16801] veth1_to_team: entered allmulticast mode [ 303.126984][T16801] team_slave_1: entered allmulticast mode [ 303.129557][T16801] veth0_to_batadv: entered allmulticast mode [ 303.132238][T16801] batadv_slave_0: entered allmulticast mode [ 303.134985][T16801] veth1_to_batadv: entered allmulticast mode [ 303.137595][T16801] batadv_slave_1: entered allmulticast mode [ 303.140272][T16801] xfrm0: entered allmulticast mode [ 303.142595][T16801] veth0_to_hsr: entered allmulticast mode [ 303.145367][T16801] hsr_slave_0: entered allmulticast mode [ 303.147936][T16801] veth1_to_hsr: entered allmulticast mode [ 303.150523][T16801] hsr_slave_1: entered allmulticast mode [ 303.153095][T16801] hsr0: entered allmulticast mode [ 303.155690][T16801] veth1_virt_wifi: entered allmulticast mode [ 303.158477][T16801] veth0_virt_wifi: entered allmulticast mode [ 303.161122][T16801] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 303.164325][T16801] veth1_vlan: entered allmulticast mode [ 303.166826][T16801] veth0_vlan: entered allmulticast mode [ 303.169396][T16801] vlan0: entered allmulticast mode [ 303.171725][T16801] vlan1: entered allmulticast mode [ 303.173562][T16801] macvlan0: entered allmulticast mode [ 303.175924][T16801] macvlan1: entered allmulticast mode [ 303.177723][T16801] ipvlan0: entered allmulticast mode [ 303.179499][T16801] veth1_macvtap: entered allmulticast mode [ 303.181440][T16801] veth0_macvtap: entered allmulticast mode [ 303.183406][T16801] macsec0: entered allmulticast mode [ 303.185646][T16801] geneve0: entered allmulticast mode [ 303.187619][T16801] geneve1: entered allmulticast mode [ 303.189412][T16801] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 303.191841][T16801] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 303.194373][T16801] bridge1: entered allmulticast mode [ 303.196482][T16801] gre1: entered allmulticast mode [ 303.198855][T16801] gre2: entered allmulticast mode [ 303.201171][T16801] netdevsim netdevsim7 eth0: entered allmulticast mode [ 303.204382][T16801] netdevsim netdevsim7 eth1: entered allmulticast mode [ 303.207511][T16801] netdevsim netdevsim7 eth2: entered allmulticast mode [ 303.210555][T16801] netdevsim netdevsim7 eth3: entered allmulticast mode [ 303.213383][T16801] gre3: entered allmulticast mode [ 303.215259][T16801] gre4: entered allmulticast mode [ 303.216993][T16801] bridge2: entered allmulticast mode [ 303.218791][T16801] bridge3: entered allmulticast mode [ 303.220626][T16801] ip6erspan0: entered allmulticast mode [ 303.222515][T16801] gre5: entered allmulticast mode [ 303.224352][T16801] bond1: entered allmulticast mode [ 303.226089][T16801] veth2: entered allmulticast mode [ 303.227883][T16801] veth3: entered allmulticast mode [ 303.229600][T16801] bridge4: entered allmulticast mode [ 303.231375][T16801] bridge5: entered allmulticast mode [ 303.233170][T16801] bridge6: entered allmulticast mode [ 303.234998][T16801] bridge7: entered allmulticast mode [ 303.236784][T16801] veth4: entered allmulticast mode [ 303.238550][T16801] veth5: entered allmulticast mode [ 303.240318][T16801] veth6: entered allmulticast mode [ 303.242060][T16801] veth7: entered allmulticast mode [ 303.243911][T16801] veth8: entered allmulticast mode [ 303.245664][T16801] veth9: entered allmulticast mode [ 303.247411][T16801] bridge8: entered allmulticast mode [ 303.253767][ T13] bond9: (slave macvlan2): failed to get link speed/duplex [ 303.364431][ T93] bond9: (slave macvlan2): failed to get link speed/duplex [ 303.435137][T16808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3978'. [ 303.476363][ T46] bond9: (slave macvlan2): failed to get link speed/duplex [ 303.514562][T16803] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 303.518031][T16803] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 303.522939][T16811] bond8: (slave veth0_to_bond): Releasing active interface [ 303.524913][T16803] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 303.551817][T16811] bond0: (slave ip6gretap2): Releasing active interface [ 303.556120][T16811] bond0: (slave ip6gretap2): the permanent HWaddr of slave - 4a:3d:a5:da:6b:fd - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 303.578369][T16811] ip6gretap2: left promiscuous mode [ 303.593959][T16811] bond0: (slave veth15): Releasing active interface [ 303.602120][T16811] bond8: (slave veth17): Releasing active interface [ 303.612738][T16811] bond9: (slave macvlan2): Removing an active aggregator [ 303.616718][T16811] bond9: (slave macvlan2): Releasing backup interface [ 303.679897][T16811] vlan0: entered promiscuous mode [ 303.687830][T16811] tipc: Enabling of bearer rejected, failed to enable media [ 303.720429][T16827] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 304.223207][ T5968] uclogic 0003:256C:006D.0014: v1 frame probing failed: -71 [ 304.277988][ T5968] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 304.281231][ T5968] uclogic 0003:256C:006D.0014: probe with driver uclogic failed with error -71 [ 304.307896][ T5968] usb 11-1: USB disconnect, device number 19 [ 304.640608][T16844] overlayfs: failed to clone upperpath [ 304.807639][T16851] netlink: 'syz.6.3992': attribute type 12 has an invalid length. [ 305.545736][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 307.301298][T16894] pim6reg1: entered promiscuous mode [ 307.303518][T16894] pim6reg1: entered allmulticast mode [ 307.623725][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 309.353642][T16920] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4011'. [ 309.362252][T16923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4012'. [ 309.409289][T16923] sch_tbf: burst 88 is lower than device veth19 mtu (1514) ! [ 309.665029][T16936] xfrm0: entered promiscuous mode [ 309.666739][T16936] xfrm0: entered allmulticast mode [ 309.701113][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 310.328555][T16952] binder: 16951:16952 ioctl c0306201 800002c0 returned -14 [ 310.775940][T16969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4028'. [ 310.778786][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4028'. [ 312.343536][T16998] bridge0: port 2(syz_tun) entered blocking state [ 312.346886][T16998] bridge0: port 2(syz_tun) entered disabled state [ 312.349977][T16998] syz_tun: entered allmulticast mode [ 312.354268][T16998] syz_tun: entered promiscuous mode [ 312.371921][T16998] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4038'. [ 312.376060][T16998] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4038'. [ 313.704908][T17025] Set syz1 is full, maxelem 65536 reached [ 314.871883][T17047] erspan0: left allmulticast mode [ 314.879914][T17047] netlink: 'syz.7.4053': attribute type 10 has an invalid length. [ 314.882498][T17047] mac80211_hwsim hwsim22 wlan1: left allmulticast mode [ 314.887709][T17047] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 314.942285][T17049] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4054'. [ 315.363854][ T911] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 315.525516][ T911] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.529101][ T911] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.533270][ T911] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 315.538131][ T911] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 315.541090][ T911] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.546503][ T911] usb 12-1: config 0 descriptor?? [ 315.923716][ T7464] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 315.968276][ T911] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 316.073740][ T7464] usb 11-1: Using ep0 maxpacket: 16 [ 316.077232][ T7464] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 316.081864][ T7464] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 316.084929][ T7464] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.087448][ T7464] usb 11-1: Product: syz [ 316.088791][ T7464] usb 11-1: Manufacturer: syz [ 316.090277][ T7464] usb 11-1: SerialNumber: syz [ 316.093999][ T7464] usb 11-1: config 0 descriptor?? [ 316.097502][ T7464] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 316.100422][ T7464] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 316.321570][ C0] plantronics 0003:047F:FFFF.0015: hid_field_extract() called with n (132) > 32! (swapper/0) [ 316.586202][T17089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4061'. [ 316.610158][T17089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4061'. [ 316.613052][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4061'. [ 316.668542][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.671120][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.709169][ T7464] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 317.121955][ T7464] em28xx 11-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 317.124827][ T7464] em28xx 11-1:0.0: board has no eeprom [ 317.414281][ T6230] usb 12-1: reset high-speed USB device number 5 using dummy_hcd [ 318.175834][T17080] em28xx 11-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 318.233694][ T7464] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 318.236255][ T7464] em28xx 11-1:0.0: dvb set to bulk mode. [ 318.239026][ T911] em28xx 11-1:0.0: Binding DVB extension [ 318.256081][ T7464] usb 11-1: USB disconnect, device number 20 [ 318.260389][ T7464] em28xx 11-1:0.0: Disconnecting em28xx [ 318.286384][ T911] em28xx 11-1:0.0: Registering input extension [ 318.291114][ T7464] em28xx 11-1:0.0: Closing input extension [ 318.307021][ T7464] em28xx 11-1:0.0: Freeing device [ 318.912423][T14396] usb 12-1: USB disconnect, device number 5 [ 319.108139][ T40] kauditd_printk_skb: 87 callbacks suppressed [ 319.108155][ T40] audit: type=1326 audit(1756975112.791:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.1.4074" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 319.118465][ T40] audit: type=1326 audit(1756975112.791:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.1.4074" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 319.122776][T17141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4074'. [ 319.127702][ T40] audit: type=1326 audit(1756975112.791:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.1.4074" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 319.136986][ T40] audit: type=1326 audit(1756975112.791:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.1.4074" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 319.146475][ T40] audit: type=1326 audit(1756975112.791:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.1.4074" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 319.153460][ T40] audit: type=1326 audit(1756975112.791:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.1.4074" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 319.161693][ T40] audit: type=1326 audit(1756975112.791:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.1.4074" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 319.169253][ T40] audit: type=1326 audit(1756975112.791:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.1.4074" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 319.176527][ T40] audit: type=1326 audit(1756975112.791:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.1.4074" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 319.185894][ T40] audit: type=1326 audit(1756975112.791:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17140 comm="syz.1.4074" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 319.363982][T17143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4076'. [ 319.367714][T17143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4076'. [ 319.604671][T17155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4080'. [ 319.634738][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4080'. [ 322.591365][T17202] netlink: 220 bytes leftover after parsing attributes in process `syz.7.4093'. [ 322.595291][T17202] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4093'. [ 322.598974][T17202] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4093'. [ 322.602992][T17202] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4093'. [ 322.620558][T17202] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4093'. [ 322.630980][T17202] netlink: 27 bytes leftover after parsing attributes in process `syz.7.4093'. [ 322.652369][T17206] Set syz1 is full, maxelem 65536 reached [ 322.818005][T17211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4097'. [ 323.696792][T17234] syzkaller0: entered promiscuous mode [ 323.698860][T17234] syzkaller0: entered allmulticast mode [ 326.314026][ T61] libceph: connect (1)[c::]:6789 error -97 [ 326.316060][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 326.318686][T17332] ceph: No mds server is up or the cluster is laggy [ 326.414707][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4116'. [ 326.496172][T17342] batman_adv: batadv0: Adding interface: dummy0 [ 326.498181][T17342] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.508493][T17342] batman_adv: batadv0: Interface activated: dummy0 [ 326.526628][T17342] batadv0: mtu less than device minimum [ 326.529648][T17342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.534205][T17342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.537919][T17342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.541592][T17342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.545346][T17342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.549002][T17342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.552624][T17342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.556447][T17342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.867356][T17351] : entered promiscuous mode [ 326.906996][T17353] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4121'. [ 326.909836][T17353] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4121'. [ 327.404929][ T7464] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 327.475282][T17298] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 327.481233][T17298] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 327.503793][ T61] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 327.554865][ T7464] usb 6-1: config 0 has no interfaces? [ 327.556695][ T7464] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 327.559693][ T7464] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.564359][ T7464] usb 6-1: config 0 descriptor?? [ 327.814351][ T6207] usb 6-1: USB disconnect, device number 21 [ 327.846826][T17375] macsec1: entered promiscuous mode [ 327.853117][T17375] macsec1: entered allmulticast mode [ 328.413761][ T7464] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 328.417757][ T840] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 328.428237][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 328.428247][ T40] audit: type=1326 audit(1756975122.111:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.0.4133" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x0 [ 330.754301][T17445] netlink: 'syz.1.4151': attribute type 4 has an invalid length. [ 330.761735][ T7464] lo speed is unknown, defaulting to 1000 [ 330.764742][ T7464] syz2: Port: 1 Link DOWN [ 331.463700][ C3] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 331.509059][T17452] __nla_validate_parse: 5 callbacks suppressed [ 331.509071][T17452] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4155'. [ 331.592627][T17456] siw: device registration error -23 [ 331.596599][T17456] smc: removing ib device syz0 [ 331.741899][T17460] netlink: 'syz.1.4158': attribute type 13 has an invalid length. [ 331.747055][T17460] netlink: 'syz.1.4158': attribute type 17 has an invalid length. [ 331.885280][T17460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.894866][T17460] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.901054][T17460] net_ratelimit: 11 callbacks suppressed [ 331.901061][T17460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.934921][T14396] lo speed is unknown, defaulting to 1000 [ 331.936791][T14396] syz2: Port: 1 Link ACTIVE [ 332.278894][T17466] fuse: Unknown parameter '' [ 332.661631][T17482] netlink: 'syz.7.4166': attribute type 1 has an invalid length. [ 332.696011][T17482] bond2: (slave bridge9): making interface the new active one [ 332.698632][T17482] bond2: (slave bridge9): Enslaving as an active interface with an up link [ 333.272079][T17501] lo speed is unknown, defaulting to 1000 [ 333.308540][ T40] audit: type=1804 audit(1756975126.991:355): pid=17503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4173" name="file0" dev="ramfs" ino=64366 res=1 errno=0 [ 335.148806][T14396] libceph: connect (1)[c::]:6789 error -101 [ 335.151760][T14396] libceph: mon0 (1)[c::]:6789 connect error [ 335.234728][T17528] ceph: No mds server is up or the cluster is laggy [ 335.545020][T17542] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 335.826465][T17562] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4189'. [ 336.745927][ T6207] libceph: connect (1)[c::]:6789 error -101 [ 336.751091][ T6207] libceph: mon0 (1)[c::]:6789 connect error [ 336.756497][T17581] lo speed is unknown, defaulting to 1000 [ 336.847523][T17582] ceph: No mds server is up or the cluster is laggy [ 336.941915][T17596] netlink: 'syz.7.4196': attribute type 4 has an invalid length. [ 338.493799][ T840] page_pool_release_retry() stalled pool shutdown: id 57, 3329 inflight 181 sec [ 339.693711][ C3] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 339.716049][ T7464] libceph: connect (1)[c::]:6789 error -101 [ 339.718152][ T7464] libceph: mon0 (1)[c::]:6789 connect error [ 339.928933][T17649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4208'. [ 339.974822][ T7464] libceph: connect (1)[c::]:6789 error -101 [ 339.977530][ T7464] libceph: mon0 (1)[c::]:6789 connect error [ 340.487765][ T7464] libceph: connect (1)[c::]:6789 error -101 [ 340.491334][T17643] ceph: No mds server is up or the cluster is laggy [ 340.497565][ T7464] libceph: mon0 (1)[c::]:6789 connect error [ 341.201813][T17664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4215'. [ 341.224743][T17665] bridge: RTM_NEWNEIGH with invalid ether address [ 344.533893][T17720] netlink: 'syz.0.4231': attribute type 1 has an invalid length. [ 344.608546][T17720] 8021q: adding VLAN 0 to HW filter on device bond10 [ 344.620871][T17725] bond10: (slave geneve2): making interface the new active one [ 344.627664][T17725] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 347.037435][T17763] lo speed is unknown, defaulting to 1000 [ 347.094687][T17765] lo speed is unknown, defaulting to 1000 [ 347.185879][T17763] netlink: 'syz.0.4249': attribute type 13 has an invalid length. [ 347.192886][T17763] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 347.271559][T17770] netlink: 'syz.1.4243': attribute type 1 has an invalid length. [ 347.320616][T17770] 8021q: adding VLAN 0 to HW filter on device bond8 [ 347.340645][T17770] vlan1: entered promiscuous mode [ 347.342614][T17770] bond8: entered promiscuous mode [ 347.346208][T17770] vlan1: entered allmulticast mode [ 347.348482][T17770] bond8: entered allmulticast mode [ 347.640815][T17782] tipc: Enabled bearer , priority 0 [ 347.644528][T17781] tipc: Resetting bearer [ 348.521247][T17795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4251'. [ 348.627695][T17799] netlink: 'syz.1.4248': attribute type 1 has an invalid length. [ 348.631117][T17799] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4248'. [ 348.764562][ T24] tipc: Node number set to 1528469640 [ 349.489639][T17781] tipc: Disabling bearer [ 349.499927][T17789] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 349.503183][T17789] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 349.506489][T17789] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 349.676537][T17806] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4254'. [ 349.694618][T17806] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4254'. [ 350.317282][T17817] ubi31: attaching mtd0 [ 350.325755][T17817] ubi31: scanning is finished [ 350.327457][T17817] ubi31: empty MTD device detected [ 350.437661][T17817] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 350.441297][T17817] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 350.444908][T17817] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 350.448136][T17817] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 350.451721][T17817] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 350.454363][T17817] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 350.457046][T17817] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2475323403 [ 350.460417][T17817] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 350.465951][T17819] ubi31: background thread "ubi_bgt31d" started, PID 17819 [ 351.996104][T17841] lo speed is unknown, defaulting to 1000 [ 352.749054][ T6207] libceph: connect (1)[c::]:6789 error -101 [ 352.751150][ T6207] libceph: mon0 (1)[c::]:6789 connect error [ 352.808095][T17854] ceph: No mds server is up or the cluster is laggy [ 353.076314][T17873] veth0_to_hsr: entered promiscuous mode [ 353.079197][T17873] veth0_to_hsr: entered allmulticast mode [ 353.083233][T17872] veth0_to_hsr: left allmulticast mode [ 353.088171][T17872] veth0_to_hsr: left promiscuous mode [ 353.125823][T17875] lo speed is unknown, defaulting to 1000 [ 353.896570][T17884] netlink: 'syz.6.4274': attribute type 1 has an invalid length. [ 353.982168][T17884] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.036192][T17886] bond2: (slave geneve2): making interface the new active one [ 354.065969][T17886] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 354.084021][T17315] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.087702][T17315] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.091377][T17315] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.096026][T17315] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.197416][T17884] bond2: entered promiscuous mode [ 354.199260][T17884] geneve2: entered promiscuous mode [ 354.565503][T17897] ceph: No mds server is up or the cluster is laggy [ 355.795256][ T5990] Bluetooth: hci2: unexpected event for opcode 0x0c05 [ 355.800940][T17918] veth0_to_hsr: entered allmulticast mode [ 355.804667][T17918] veth0_to_hsr: left allmulticast mode [ 355.912679][T17923] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.076986][T17923] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.153408][T17923] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.282128][T17923] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.343734][ C3] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 356.405388][ T1238] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.411899][ T1238] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.435155][ T1238] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.442834][T17934] ubi: mtd0 is already attached to ubi31 [ 356.444424][T17309] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.517412][T17936] lo speed is unknown, defaulting to 1000 [ 356.673258][T17940] netlink: 'syz.0.4288': attribute type 1 has an invalid length. [ 356.689118][T17940] 8021q: adding VLAN 0 to HW filter on device bond11 [ 356.730974][T17940] bond11: entered promiscuous mode [ 357.719912][T17952] input: syz1 as /devices/virtual/input/input17 [ 358.509295][T17959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4297'. [ 358.578314][T17959] syz_tun (unregistering): left allmulticast mode [ 358.585992][T17959] syz_tun (unregistering): left promiscuous mode [ 358.590860][T17959] bridge0: port 2(syz_tun) entered disabled state [ 359.436786][T17977] netlink: 'syz.0.4301': attribute type 4 has an invalid length. [ 360.207138][T17993] tipc: Resetting bearer [ 360.222553][ T6207] lo speed is unknown, defaulting to 1000 [ 360.228606][ T6207] syz2: Port: 1 Link DOWN [ 362.098457][T18916] wireguard0: entered promiscuous mode [ 362.101528][T18916] wireguard0: entered allmulticast mode [ 362.111430][ T63] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 362.192664][T18921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4313'. [ 362.196814][T18921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4313'. [ 363.732009][T18940] netlink: 'syz.7.4319': attribute type 5 has an invalid length. [ 363.835986][T18943] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 364.172876][ T40] audit: type=1326 audit(1756975157.851:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18945 comm="syz.0.4321" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f11579 code=0x0 [ 364.802377][T18962] ceph: No mds server is up or the cluster is laggy [ 364.875680][T18972] netlink: 'syz.6.4328': attribute type 1 has an invalid length. [ 364.892936][T18972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 364.915237][T18972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 364.917954][T18972] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 364.922239][T18972] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 364.987911][T18975] veth7: entered promiscuous mode [ 364.994522][T18975] bond3: (slave veth7): Enslaving as an active interface with a down link [ 365.043454][T18972] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4328'. [ 365.047038][T18972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 365.143369][T18981] MPI: mpi too large (124808 bits) [ 366.094499][T18999] bridge21: entered promiscuous mode [ 366.096531][T18999] bridge21: entered allmulticast mode [ 366.175617][ T63] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 366.178892][ T63] Bluetooth: hci2: Injecting HCI hardware error event [ 366.184869][ T63] Bluetooth: hci2: hardware error 0x00 [ 366.341541][T19001] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 366.356588][ T7464] IPVS: starting estimator thread 0... [ 366.443772][T19002] IPVS: using max 46 ests per chain, 110400 per kthread [ 367.587337][T19035] netlink: 'syz.7.4345': attribute type 1 has an invalid length. [ 367.589790][T19035] netlink: 'syz.7.4345': attribute type 4 has an invalid length. [ 367.592196][T19035] netlink: 15334 bytes leftover after parsing attributes in process `syz.7.4345'. [ 368.253703][ T63] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 368.423181][T19047] cgroup: noprefix used incorrectly [ 369.097662][T19062] netlink: 'syz.1.4355': attribute type 1 has an invalid length. [ 369.139283][T19064] netlink: 'syz.0.4354': attribute type 39 has an invalid length. [ 369.144545][T19064] veth0_macvtap: left promiscuous mode [ 369.287014][T19068] MPI: mpi too large (124808 bits) [ 369.913706][ T24] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 370.063879][ T24] usb 12-1: Using ep0 maxpacket: 32 [ 370.069353][ T24] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.073110][ T24] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.076989][ T24] usb 12-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 370.080121][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.095598][ T24] usb 12-1: config 0 descriptor?? [ 370.245085][T19091] netlink: 'syz.6.4362': attribute type 298 has an invalid length. [ 370.318854][T19096] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.407209][T19096] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.481634][T19096] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.579280][T19096] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.660778][T17321] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.670035][T17321] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.680677][T17317] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.693345][T17317] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.020604][ T24] usbhid 12-1:0.0: can't add hid device: -71 [ 371.023181][ T24] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 371.033936][ T24] usb 12-1: USB disconnect, device number 6 [ 371.044834][T19109] netlink: 'syz.0.4375': attribute type 1 has an invalid length. [ 371.057951][T19109] 8021q: adding VLAN 0 to HW filter on device bond12 [ 371.061333][T19107] lo speed is unknown, defaulting to 1000 [ 371.086648][T19109] 8021q: adding VLAN 0 to HW filter on device bond12 [ 371.089102][T19109] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address [ 371.092992][T19109] bond12: (slave vxcan1): Error -95 calling set_mac_address [ 371.143396][T19113] veth23: entered promiscuous mode [ 371.146862][T19113] bond12: (slave veth23): Enslaving as an active interface with a down link [ 371.193097][T19109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4375'. [ 371.197859][T19109] 8021q: adding VLAN 0 to HW filter on device bond12 [ 371.546725][T19124] lo speed is unknown, defaulting to 1000 [ 371.635370][T19125] lo speed is unknown, defaulting to 1000 [ 372.261500][ T911] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 372.413659][ T911] usb 11-1: Using ep0 maxpacket: 32 [ 372.416955][ T911] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.420332][ T911] usb 11-1: config 0 has no interfaces? [ 372.422198][ T911] usb 11-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 372.427231][ T911] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.431315][ T911] usb 11-1: config 0 descriptor?? [ 372.631199][T19141] siw: device registration error -23 [ 372.659880][T14396] usb 11-1: USB disconnect, device number 21 [ 373.898591][T19174] lo speed is unknown, defaulting to 1000 [ 374.444125][T19189] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.600710][T19189] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.675960][T19189] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.765182][T19189] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.936622][T17272] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.966919][T17321] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.981527][T19198] tipc: Enabled bearer , priority 0 [ 374.983972][T17321] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.990898][T19198] syzkaller0: entered promiscuous mode [ 374.992622][T19198] syzkaller0: entered allmulticast mode [ 374.995542][T17321] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.011817][T19198] tipc: Resetting bearer [ 375.023445][T19197] tipc: Resetting bearer [ 375.052536][T19197] tipc: Disabling bearer [ 375.100497][T19199] bridge11: entered promiscuous mode [ 375.102417][T19199] bridge11: entered allmulticast mode [ 376.321781][T19218] lo speed is unknown, defaulting to 1000 [ 376.441810][T19218] lo speed is unknown, defaulting to 1000 [ 376.515892][T19227] netlink: 'syz.7.4394': attribute type 1 has an invalid length. [ 376.518401][T19227] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4394'. [ 376.912511][T19236] netlink: 'syz.0.4406': attribute type 1 has an invalid length. [ 376.927988][T19236] 8021q: adding VLAN 0 to HW filter on device bond13 [ 376.975748][T19236] 8021q: adding VLAN 0 to HW filter on device bond13 [ 376.982626][T19236] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address [ 376.991544][T19236] bond13: (slave vxcan1): Error -95 calling set_mac_address [ 377.028289][T19240] bond14: entered promiscuous mode [ 377.030885][T19240] 8021q: adding VLAN 0 to HW filter on device bond14 [ 377.034371][T19240] bond13: (slave bond14): Enslaving as an active interface with a down link [ 377.062912][T19240] macvlan3: entered promiscuous mode [ 377.065143][T19240] macvlan3: entered allmulticast mode [ 377.067863][T19240] bond13: entered promiscuous mode [ 377.069839][T19240] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 377.076795][T19240] bond13: left promiscuous mode [ 378.096007][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.630015][T19271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4407'. [ 380.754646][T19277] lo speed is unknown, defaulting to 1000 [ 380.801247][T19280] lo speed is unknown, defaulting to 1000 [ 380.911877][ T40] audit: type=1326 audit(1756975174.591:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19284 comm="syz.6.4410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 380.931787][ T40] audit: type=1326 audit(1756975174.591:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19284 comm="syz.6.4410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 380.941757][ T40] audit: type=1326 audit(1756975174.611:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19284 comm="syz.6.4410" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 380.973746][ T40] audit: type=1326 audit(1756975174.611:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19284 comm="syz.6.4410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 381.001212][ T40] audit: type=1326 audit(1756975174.611:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19284 comm="syz.6.4410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 381.041931][ T40] audit: type=1326 audit(1756975174.611:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19284 comm="syz.6.4410" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 381.073669][ T40] audit: type=1326 audit(1756975174.611:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19284 comm="syz.6.4410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 381.081956][ T40] audit: type=1326 audit(1756975174.611:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19284 comm="syz.6.4410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 381.110665][ T40] audit: type=1326 audit(1756975174.611:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19284 comm="syz.6.4410" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 381.118911][ T40] audit: type=1326 audit(1756975174.611:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19284 comm="syz.6.4410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 382.701289][T19313] netlink: 'syz.7.4419': attribute type 1 has an invalid length. [ 382.719790][T19313] 8021q: adding VLAN 0 to HW filter on device bond3 [ 382.749841][T19313] 8021q: adding VLAN 0 to HW filter on device bond3 [ 382.752131][T19313] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 382.756991][T19313] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 382.893570][T19322] bond4: entered promiscuous mode [ 382.896076][T19322] 8021q: adding VLAN 0 to HW filter on device bond4 [ 382.899197][T19322] bond3: (slave bond4): Enslaving as an active interface with a down link [ 383.147602][T19327] macvlan2: entered promiscuous mode [ 383.165742][T19327] macvlan2: entered allmulticast mode [ 383.217203][T19327] bond3: entered promiscuous mode [ 383.308490][T19327] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 383.342944][T19327] bond3: left promiscuous mode [ 383.771762][T19338] tipc: Enabling of bearer rejected, failed to enable media [ 384.497420][T19354] lo speed is unknown, defaulting to 1000 [ 384.638404][T19356] lo speed is unknown, defaulting to 1000 [ 385.283538][T19369] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 385.285834][T19369] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 385.288002][T19369] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 385.290147][T19369] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 385.292292][T19369] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 385.294613][T19369] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 385.296723][T19369] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 385.298916][T19369] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 385.300983][T19369] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 385.303042][T19369] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 385.305269][T19369] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 385.307445][T19369] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 385.309513][T19369] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 385.311639][T19369] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 385.314180][T19369] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 385.926821][T19374] netlink: 'syz.0.4434': attribute type 1 has an invalid length. [ 386.631078][T19391] netlink: 'syz.0.4437': attribute type 10 has an invalid length. [ 387.188433][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 387.188491][ T40] audit: type=1326 audit(1756975180.751:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.0.4438" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 387.281821][ T40] audit: type=1326 audit(1756975180.751:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.0.4438" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 387.294772][ T40] audit: type=1326 audit(1756975180.751:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.0.4438" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 387.313483][ T40] audit: type=1326 audit(1756975180.751:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.0.4438" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 387.336162][ T40] audit: type=1326 audit(1756975180.751:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.0.4438" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 387.347127][ T40] audit: type=1326 audit(1756975180.751:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.0.4438" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 387.365889][ T40] audit: type=1326 audit(1756975180.751:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.0.4438" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f11598 code=0x7ffc0000 [ 387.378841][ T40] audit: type=1326 audit(1756975180.751:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.0.4438" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f11598 code=0x7ffc0000 [ 387.393032][ T40] audit: type=1326 audit(1756975180.751:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.0.4438" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f11598 code=0x7ffc0000 [ 387.469840][ T40] audit: type=1326 audit(1756975180.751:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.0.4438" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f11598 code=0x7ffc0000 [ 388.257015][T19413] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 388.259117][T19413] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 388.266475][T19413] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 388.299083][T19413] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 388.301607][T19413] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 388.304520][T19413] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 388.312347][T19413] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 388.315321][T19413] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 388.317975][T19413] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 388.327826][T19413] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 388.336461][T19413] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 388.339775][T19413] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 388.343127][T19413] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 388.356289][T19413] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 388.365804][T19413] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 389.942635][T19449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4453'. [ 390.253703][ C3] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 390.887265][T19464] netlink: 'syz.0.4457': attribute type 5 has an invalid length. [ 390.895824][T19464] netlink: 'syz.0.4457': attribute type 7 has an invalid length. [ 390.926321][T19464] : entered promiscuous mode [ 391.814112][T19474] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4460'. [ 392.493889][T15334] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 392.643712][T15334] usb 11-1: Using ep0 maxpacket: 32 [ 392.652753][T15334] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 392.656622][T15334] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 392.660938][T15334] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 392.694170][T15334] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 392.699729][T15334] usb 11-1: config 0 interface 0 has no altsetting 0 [ 392.710224][T15334] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 392.713236][T15334] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 392.717009][T15334] usb 11-1: Product: syz [ 392.718664][T15334] usb 11-1: Manufacturer: syz [ 392.720298][T15334] usb 11-1: SerialNumber: syz [ 392.728030][T15334] usb 11-1: config 0 descriptor?? [ 392.736965][T15334] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 392.741271][T15334] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 393.046692][T19489] ldusb 11-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 393.046827][ T6033] usb 11-1: USB disconnect, device number 22 [ 393.049188][ C3] ldusb 11-1:0.0: usb_submit_urb failed (-19) [ 393.055263][ T6033] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 393.605430][ T6033] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 393.763724][ T6033] usb 11-1: Using ep0 maxpacket: 32 [ 393.770621][ T6033] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 393.773273][ T6033] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 393.795732][ T6033] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 393.800466][ T6033] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 393.806259][ T6033] usb 11-1: config 0 interface 0 has no altsetting 0 [ 393.811716][ T6033] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 393.815842][ T6033] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 393.819400][ T6033] usb 11-1: Product: syz [ 393.821221][ T6033] usb 11-1: Manufacturer: syz [ 393.823181][ T6033] usb 11-1: SerialNumber: syz [ 393.832914][ T6033] usb 11-1: config 0 descriptor?? [ 393.839866][ T6033] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 393.846999][ T6033] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 394.044705][T14396] usb 11-1: USB disconnect, device number 23 [ 394.049379][T14396] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 394.239216][T19522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4471'. [ 394.387287][T19527] lo speed is unknown, defaulting to 1000 [ 394.698425][T19534] tipc: Resetting bearer [ 394.769571][T19541] netlink: 'syz.1.4478': attribute type 1 has an invalid length. [ 394.781622][T19541] 8021q: adding VLAN 0 to HW filter on device bond9 [ 394.828850][T19541] bond9: (slave veth21): Enslaving as an active interface with a down link [ 394.980580][T19541] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 395.188711][T19541] vlan2: entered allmulticast mode [ 395.190550][T19541] veth0_to_bond: entered allmulticast mode [ 395.196348][T19541] veth0_to_bond: entered promiscuous mode [ 395.210065][T19541] veth0_to_bond: left promiscuous mode [ 395.225104][T19541] veth0_to_bond: entered promiscuous mode [ 395.230068][T19541] bond9: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 395.245609][T19541] veth0_to_bond: left promiscuous mode [ 395.513198][T19551] wireguard0: entered promiscuous mode [ 395.516196][T19551] wireguard0: entered allmulticast mode [ 396.005646][ T40] kauditd_printk_skb: 121 callbacks suppressed [ 396.005665][ T40] audit: type=1326 audit(1756975189.691:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.1.4483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 396.017715][ T40] audit: type=1326 audit(1756975189.691:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.1.4483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 396.025178][ T40] audit: type=1326 audit(1756975189.691:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.1.4483" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 396.032066][ T40] audit: type=1326 audit(1756975189.691:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.1.4483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 396.040645][ T40] audit: type=1326 audit(1756975189.691:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.1.4483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 396.048232][ T40] audit: type=1326 audit(1756975189.691:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.1.4483" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 396.055067][ T40] audit: type=1326 audit(1756975189.691:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.1.4483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 396.058725][T19564] overlayfs: failed to get inode (-116) [ 396.061909][ T40] audit: type=1326 audit(1756975189.691:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.1.4483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 396.061933][ T40] audit: type=1326 audit(1756975189.691:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.1.4483" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 396.061957][ T40] audit: type=1326 audit(1756975189.691:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.1.4483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 396.064476][T19564] overlayfs: failed to look up (bus) for ino (-116) [ 396.178159][T19570] netlink: 'syz.1.4485': attribute type 1 has an invalid length. [ 396.190224][T19570] 8021q: adding VLAN 0 to HW filter on device bond10 [ 396.230504][T19570] 8021q: adding VLAN 0 to HW filter on device bond10 [ 396.233290][T19570] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 396.240526][T19570] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 396.298227][T19574] bond11: entered promiscuous mode [ 396.303403][T19574] 8021q: adding VLAN 0 to HW filter on device bond11 [ 396.307960][T19574] bond10: (slave bond11): Enslaving as an active interface with a down link [ 396.331293][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4487'. [ 396.334584][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4487'. [ 396.364514][T19570] macvlan0: entered promiscuous mode [ 396.366322][T19570] macvlan0: entered allmulticast mode [ 396.368501][T19570] bond10: entered promiscuous mode [ 396.370513][T19570] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 396.375830][T19570] bond10: left promiscuous mode [ 396.502072][T19585] netlink: 'syz.6.4490': attribute type 1 has an invalid length. [ 396.515928][T19585] 8021q: adding VLAN 0 to HW filter on device bond4 [ 396.685123][T19585] bond4: (slave veth9): Enslaving as an active interface with a down link [ 396.691331][T19590] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 396.751031][T19585] vlan0: entered allmulticast mode [ 396.757130][T19585] veth0_to_bond: entered allmulticast mode [ 396.765026][T19585] veth0_to_bond: entered promiscuous mode [ 396.768023][T19585] veth0_to_bond: left promiscuous mode [ 396.770574][T19585] veth0_to_bond: entered promiscuous mode [ 396.773328][T19585] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 396.788097][T19585] veth0_to_bond: left promiscuous mode [ 398.453758][T19617] bridge10: entered promiscuous mode [ 398.456064][T19617] bridge10: entered allmulticast mode [ 398.480271][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4498'. [ 398.483217][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4498'. [ 399.046068][T19629] batman_adv: batadv0: Interface deactivated: dummy0 [ 399.050067][T19629] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 399.179529][ T61] page_pool_release_retry() stalled pool shutdown: id 57, 3329 inflight 241 sec [ 399.721094][T19645] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 399.735481][T19645] cramfs: wrong magic [ 400.489680][T19652] fuse: Unknown parameter '18446744073709551615ÿ' [ 400.547090][T19656] »»»»»»×[SRëåWß: renamed from lo [ 400.709822][T19662] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.742700][T19664] wireguard0: entered promiscuous mode [ 400.745248][T19664] wireguard0: entered allmulticast mode [ 400.817945][T19662] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.922534][T19662] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.041891][T19662] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.122287][T17267] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.136286][T17321] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.144318][T17321] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.156163][T17321] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.430773][T19675] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.536610][T19675] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.620422][T19675] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.681950][T19675] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.725337][T19683] netlink: 'syz.6.4513': attribute type 5 has an invalid length. [ 401.729150][T19683] netlink: 'syz.6.4513': attribute type 7 has an invalid length. [ 401.771185][T19683] : entered promiscuous mode [ 401.947509][T19685] tipc: Enabling of bearer rejected, already enabled [ 404.469092][ T5692] BUG: sleeping function called from invalid context at mm/vmalloc.c:3409 [ 404.472579][ T5692] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5692, name: dhcpcd [ 404.478207][ T5692] preempt_count: 1, expected: 0 [ 404.479795][ T5692] RCU nest depth: 0, expected: 0 [ 404.481362][ T5692] no locks held by dhcpcd/5692. [ 404.483331][ T5692] Preemption disabled at: [ 404.483337][ T5692] [] schedule+0xe0/0x3a0 [ 404.487614][ T5692] CPU: 3 UID: 101 PID: 5692 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 404.487634][ T5692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 404.487644][ T5692] Call Trace: [ 404.487650][ T5692] [ 404.487657][ T5692] dump_stack_lvl+0x16c/0x1f0 [ 404.487684][ T5692] __might_resched+0x3c0/0x5e0 [ 404.487704][ T5692] ? __pfx___might_resched+0x10/0x10 [ 404.487719][ T5692] ? pcpu_block_update+0x562/0x660 [ 404.487746][ T5692] ? find_held_lock+0x2b/0x80 [ 404.487765][ T5692] vfree+0x75/0xb50 [ 404.487800][ T5692] ? rcu_is_watching+0x12/0xc0 [ 404.487818][ T5692] ? kfree+0x24f/0x4d0 [ 404.487833][ T5692] ? free_percpu+0x6db/0x13c0 [ 404.487856][ T5692] futex_hash_free+0x98/0xc0 [ 404.487877][ T5692] __mmdrop+0x33f/0x580 [ 404.487895][ T5692] ? rcu_is_watching+0x12/0xc0 [ 404.487914][ T5692] finish_task_switch.isra.0+0x7a4/0xc10 [ 404.487931][ T5692] ? __switch_to+0x7a5/0x11a0 [ 404.487954][ T5692] __schedule+0x1198/0x5de0 [ 404.487972][ T5692] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 404.487999][ T5692] ? debug_object_activate+0x2ec/0x4c0 [ 404.488024][ T5692] ? __lock_acquire+0x62e/0x1ce0 [ 404.488052][ T5692] ? __pfx___schedule+0x10/0x10 [ 404.488085][ T5692] ? find_held_lock+0x2b/0x80 [ 404.488102][ T5692] ? schedule+0x2d7/0x3a0 [ 404.488125][ T5692] schedule+0xe7/0x3a0 [ 404.488145][ T5692] schedule_hrtimeout_range_clock+0x217/0x320 [ 404.488165][ T5692] ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10 [ 404.488183][ T5692] ? lockdep_hardirqs_on+0x7c/0x110 [ 404.488208][ T5692] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 404.488235][ T5692] ? __pfx___pollwait+0x10/0x10 [ 404.488251][ T5692] ? unix_dgram_poll+0x364/0x770 [ 404.488280][ T5692] poll_schedule_timeout.constprop.0+0xc4/0x1c0 [ 404.488300][ T5692] do_sys_poll+0xae8/0xdf0 [ 404.488326][ T5692] ? __pfx_do_sys_poll+0x10/0x10 [ 404.488376][ T5692] ? __pfx_pollwake+0x10/0x10 [ 404.488395][ T5692] ? __pfx_pollwake+0x10/0x10 [ 404.488414][ T5692] ? __pfx_pollwake+0x10/0x10 [ 404.488433][ T5692] ? __pfx_pollwake+0x10/0x10 [ 404.488452][ T5692] ? __pfx_pollwake+0x10/0x10 [ 404.488487][ T5692] ? rcu_is_watching+0x12/0xc0 [ 404.488504][ T5692] ? _raw_spin_unlock_irq+0x23/0x50 [ 404.488523][ T5692] ? lockdep_hardirqs_on+0x7c/0x110 [ 404.488544][ T5692] ? _raw_spin_unlock_irq+0x2e/0x50 [ 404.488563][ T5692] ? set_user_sigmask+0x21b/0x2b0 [ 404.488581][ T5692] ? __pfx_set_user_sigmask+0x10/0x10 [ 404.488603][ T5692] __x64_sys_ppoll+0x254/0x2d0 [ 404.488623][ T5692] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 404.488646][ T5692] ? __secure_computing+0x21c/0x320 [ 404.488670][ T5692] do_syscall_64+0xcd/0x490 [ 404.488695][ T5692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.488712][ T5692] RIP: 0033:0x7f77c43e8407 [ 404.488726][ T5692] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 404.488741][ T5692] RSP: 002b:00007ffd724e6ea0 EFLAGS: 00000202 ORIG_RAX: 000000000000010f [ 404.488757][ T5692] RAX: ffffffffffffffda RBX: 00007f77c435e740 RCX: 00007f77c43e8407 [ 404.488767][ T5692] RDX: 00007ffd724e6ee0 RSI: 0000000000000005 RDI: 0000562bdc49bc10 [ 404.488776][ T5692] RBP: 00007ffd724e71e0 R08: 0000000000000008 R09: 0000000000000000 [ 404.488785][ T5692] R10: 00007ffd724e71e0 R11: 0000000000000202 R12: 0000562bba9195e0 [ 404.488794][ T5692] R13: 0000562bdc4b3d90 R14: 0000000000000000 R15: 00007ffd724e6f90 [ 404.488817][ T5692] [ 405.072383][T17267] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.080509][T17293] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.090733][T17272] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.100593][T17272] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 VM DIAGNOSIS: 07:46:38 Registers: info registers vcpu 0 CPU#0 RAX=00000000006eae0d RBX=0000000000000000 RCX=ffffffff8b90dbf9 RDX=0000000000000000 RSI=ffffffff8de4d2e1 RDI=ffffffff8c162e00 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab8890 R15=0000000000000000 RIP=ffffffff8b90c75f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f20dd438 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7484ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000007a49b7 RBX=0000000000000001 RCX=ffffffff8b90dbf9 RDX=0000000000000000 RSI=ffffffff8de4d2e1 RDI=ffffffff8c162e00 RBP=ffffed1003a58488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801d2c2440 R14=ffffffff90ab8890 R15=0000000000000000 RIP=ffffffff8b90c75f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffaf1eec CR3=0000000064e85000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000066c501 RBX=0000000000000002 RCX=ffffffff8b90dbf9 RDX=0000000000000000 RSI=ffffffff8de4d2e1 RDI=ffffffff8c162e00 RBP=ffffed1003a58910 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801d2c4880 R14=ffffffff90ab8890 R15=0000000000000000 RIP=ffffffff8b90c75f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055602a215f40 CR3=000000004cb0d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=1ed2c3f543fd95ba d3c7eb1025e42097 1ed2c3f543fd95ba d3c7eb1025e42097 1ed2c3f543fd95ba d3c7eb1025e42097 1ed2c3f543fd95ba d3c7eb1025e42097 ZMM18=7f9b03b3c2d535ed a54af409c6622126 7f9b03b3c2d535ed a54af409c6622126 7f9b03b3c2d535ed a54af409c6622126 7f9b03b3c2d535ed a54af409c6622126 ZMM19=2820000000000000 0000000000000004 2820000000000000 0000000000000003 2820000000000000 0000000000000002 2820000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7245ffffffff89ab f261ffffffff815f e95fffffffff8930 bcb9ffffffff8930 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ab83ffffffff81a7 a437ffffffff89ae ad9fffffffff89ae af2cffffffff8238 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3303ffffffff89b5 a03dffffffff8177 914affffffff820f 2c54ffffffff8930 ZMM24=0397872803978728 0397872803978728 0397872803978728 0397872803978728 0397872803978728 0397872803978728 0397872803978728 0397872803978728 ZMM25=0e2e1bcb0e2e1bcb 0e2e1bcb0e2e1bcb 0e2e1bcb0e2e1bcb 0e2e1bcb0e2e1bcb 0e2e1bcb0e2e1bcb 0e2e1bcb0e2e1bcb 0e2e1bcb0e2e1bcb 0e2e1bcb0e2e1bcb ZMM26=34f8fc5734f8fc57 34f8fc5734f8fc57 34f8fc5734f8fc57 34f8fc5734f8fc57 34f8fc5734f8fc57 34f8fc5734f8fc57 34f8fc5734f8fc57 34f8fc5734f8fc57 ZMM27=4b574afc4b574afc 4b574afc4b574afc 4b574afc4b574afc 4b574afc4b574afc 4b574afc4b574afc 4b574afc4b574afc 4b574afc4b574afc 4b574afc4b574afc ZMM28=000000c0000000bf 000000be000000bd 000000bc000000bb 000000ba000000b9 000000b8000000b7 000000b6000000b5 000000b4000000b3 000000b2000000b1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0f3600000f360000 0f3600000f360000 0f3600000f360000 0f3600000f360000 0f3600000f360000 0f3600000f360000 0f3600000f360000 0f3600000f360000 info registers vcpu 3 CPU#3 RAX=00000001000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fb RDI=0000000000000001 RBP=ffff88802b23a4a0 RSP=ffffc900005e8bc8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=1ffff920000bd17c R14=1ffff11005647401 R15=0000000000000000 RIP=ffffffff81695748 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f77c435e740 ffffffff 00c00000 GS =0000 ffff8880977c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055edc7a70120 CR3=0000000049b25000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000000000000 Opmask02=000000003f3f3dff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000002b6ee308 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562bdc4a9be0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77c4532b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b20657479622d32 3320646e61707865 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 92e788fa00000000 0000000000000000 0000000000003e01 efb49f4100060101 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 39773b3a3633211c 1a0f0c060379010e 3701013563538263 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 0101910101740050 878256ff9702650a 4830010001004d74 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 92e7ff133dd00502 39773b3a3633211c 1a0f0c060379010e 3701013563538263 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562e0065616c 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000