last executing test programs: 5.23605673s ago: executing program 2 (id=1197): socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000002240)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x600, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x3, 0x2c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$6lowpan_enable(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x5452, &(0x7f0000000100)={'veth1\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='\n\a\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002300)={0x11, 0x6, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000040)=0xd) unshare(0x62040200) 5.228442172s ago: executing program 3 (id=1198): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB='&'], 0x10) close(0x3) close(r2) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = userfaultfd(0x80001) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000200"/21, @ANYRES32, @ANYBLOB="bdf6912667c0f58073875931027d14627351d20faee4e26780748ed835cb7f924655888f75829e103262ef89684d4efb91963729a1941865c79c990d09c6156706397d11deb37de01fd2235651927980f26972b1c97ed3c5037cd6b6d4803396154fb3374a22183820f43c160f47d31b273b"], 0x50) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shutdown(r4, 0x2) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) socket$netlink(0x10, 0x3, 0x12) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x3}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 4.621790706s ago: executing program 1 (id=1201): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$packet(0x11, 0x3, 0x300) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300080e00000000000000fedbdf2505001a00ff020000000000000000000000000001fc0100000000000000000000000000000a0010100200010000000000000000010005000500000000000a00000000000000fe8000000000000000000000000000bb00"/112], 0x70}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8911, &(0x7f0000000280)={'vxcan1\x00', @ifru_addrs=@sco}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) r4 = socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffffff, 0x0, 0x2000, 0x103) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES64], 0x44}}, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r6, 0xffffffffffffffff}) close(r7) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000280)=0x8000) ioctl$SYNC_IOC_MERGE(r9, 0x40103e05, &(0x7f0000000080)={"df000000000000000000000000000000000000002000a400", r9}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, &(0x7f0000000240)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4.35304669s ago: executing program 1 (id=1202): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r4, 0xc4fc9e906872378b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8048}, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000000), 0x800, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x4f6a, &(0x7f0000000480)={0x0, 0x354d, 0x2, 0x0, 0xc5, 0x0, r5}, &(0x7f0000000500), &(0x7f0000000540)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x20010, r5, 0x10000000) r6 = socket$igmp6(0xa, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, 0x0) r7 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r10 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r10, 0xffffffffffffffff, 0xfffffffdffffffff) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.312992149s ago: executing program 2 (id=1203): socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000002240)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x600, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$6lowpan_enable(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x5452, &(0x7f0000000100)={'veth1\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='\n\a\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002300)={0x11, 0x6, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000040)=0xd) unshare(0x62040200) 4.202731854s ago: executing program 3 (id=1204): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$incfs(0xffffffffffffff9c, 0x0, 0x100, 0x1c4) openat(r5, &(0x7f0000000040)='./file0\x00', 0x18801, 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="df", 0x1}], 0x1}}], 0x1, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) 3.692928464s ago: executing program 0 (id=1205): unshare(0x18040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fsopen(&(0x7f0000000080)='fuse\x00', 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.583108388s ago: executing program 0 (id=1206): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$usbfs(0x0, 0x80, 0x5a840) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) write$bt_hci(r5, &(0x7f0000000140)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "45542f745866c700", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 3.133026539s ago: executing program 3 (id=1207): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$usbfs(0x0, 0x80, 0x5a840) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) write$bt_hci(r5, &(0x7f0000000140)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x2d, 0xfffffffffffffff9) keyctl$instantiate(0xc, 0x0, 0x0, 0x19, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c0002800500010000000000140001800800010000000000080002"], 0xe4}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "45542f745866c700", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 3.090896089s ago: executing program 2 (id=1208): socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000002240)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x600, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x3, 0x2c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$6lowpan_enable(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x5452, &(0x7f0000000100)={'veth1\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='\n\a\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002300)={0x11, 0x6, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000040)=0xd) unshare(0x62040200) 2.837398973s ago: executing program 1 (id=1209): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) write$bt_hci(r5, &(0x7f0000000140)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x2d, 0xfffffffffffffff9) keyctl$instantiate(0xc, 0x0, 0x0, 0x19, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff010000"], 0xe4}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "45542f745866c700", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 2.682947634s ago: executing program 0 (id=1210): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$packet(0x11, 0x3, 0x300) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300080e00000000000000fedbdf2505001a00ff020000000000000000000000000001fc0100000000000000000000000000000a0010100200010000000000000000010005000500000000000a00000000000000fe8000000000000000000000000000bb00"/112], 0x70}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8911, &(0x7f0000000280)={'vxcan1\x00', @ifru_addrs=@sco}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) r4 = socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffffff, 0x0, 0x2000, 0x103) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES64], 0x44}}, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r6, 0xffffffffffffffff}) close(r7) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000280)=0x8000) ioctl$SYNC_IOC_MERGE(r9, 0x40103e05, &(0x7f0000000080)={"df000000000000000000000000000000000000002000a400", r9}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, &(0x7f0000000240)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.532536006s ago: executing program 3 (id=1211): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r4, 0xc4fc9e906872378b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8048}, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000000), 0x800, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x4f6a, &(0x7f0000000480)={0x0, 0x354d, 0x2, 0x0, 0xc5, 0x0, r5}, &(0x7f0000000500), &(0x7f0000000540)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x20010, r5, 0x10000000) r6 = socket$igmp6(0xa, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, 0x0) r7 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r10 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r10, 0xffffffffffffffff, 0xfffffffdffffffff) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.162809567s ago: executing program 0 (id=1212): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB='&'], 0x10) close(0x3) close(r2) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = userfaultfd(0x80001) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000200"/21, @ANYRES32, @ANYBLOB="bdf6912667c0f58073875931027d14627351d20faee4e26780748ed835cb7f924655888f75829e103262ef89684d4efb91963729a1941865c79c990d09c6156706397d11deb37de01fd2235651927980f26972b1c97ed3c5037cd6b6d4803396154fb3374a22183820f43c160f47d31b273b"], 0x50) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shutdown(r4, 0x2) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) socket$netlink(0x10, 0x3, 0x12) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x3}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 2.102896275s ago: executing program 2 (id=1213): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0xa206}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x2000000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x50}}, 0x0) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './bus\x00'}, 0x6e) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1048c, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) 2.011579349s ago: executing program 1 (id=1214): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$incfs(0xffffffffffffff9c, 0x0, 0x100, 0x1c4) openat(r5, &(0x7f0000000040)='./file0\x00', 0x18801, 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="df", 0x1}], 0x1}}], 0x1, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) 1.543896261s ago: executing program 2 (id=1215): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$incfs(0xffffffffffffff9c, 0x0, 0x100, 0x1c4) openat(r5, &(0x7f0000000040)='./file0\x00', 0x18801, 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="df", 0x1}], 0x1}}], 0x1, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) 1.182869936s ago: executing program 0 (id=1216): unshare(0x18040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000000c0)={[{0x4, 0xc63, 0x2, 0x8, 0x1, 0x4, 0xf, 0xc, 0x9, 0x2, 0x0, 0x4, 0xb}, {0x3, 0x8, 0x0, 0x1, 0x7f, 0xc2, 0x1, 0x8, 0x9, 0x4, 0x6, 0xf7, 0x2}, {0xff, 0x7, 0x2, 0x3, 0xe, 0x27, 0x5, 0x0, 0x1, 0x8e, 0x6, 0x9}], 0xfffffffa}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fsopen(&(0x7f0000000080)='fuse\x00', 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3], 0x0, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = eventfd(0x6) r8 = eventfd(0xf7) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r7}) r9 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r9, 0x28, 0x0, &(0x7f0000000000), 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 981.930819ms ago: executing program 1 (id=1217): socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000002240)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x600, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x3, 0x2c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$6lowpan_enable(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x5452, &(0x7f0000000100)={'veth1\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='\n\a\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002300)={0x11, 0x6, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000040)=0xd) unshare(0x62040200) 793.792811ms ago: executing program 3 (id=1218): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$usbfs(0x0, 0x80, 0x5a840) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) write$bt_hci(r5, &(0x7f0000000140)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "45542f745866c700", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 312.796116ms ago: executing program 2 (id=1219): socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000002240)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x600, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$6lowpan_enable(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x5452, &(0x7f0000000100)={'veth1\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='\n\a\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002300)={0x11, 0x6, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000040)=0xd) unshare(0x62040200) 276.324958ms ago: executing program 0 (id=1220): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$packet(0x11, 0x3, 0x300) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300080e00000000000000fedbdf2505001a00ff020000000000000000000000000001fc0100000000000000000000000000000a0010100200010000000000000000010005000500000000000a00000000000000fe8000000000000000000000000000bb00"/112], 0x70}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8911, &(0x7f0000000280)={'vxcan1\x00', @ifru_addrs=@sco}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) r4 = socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x103) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r6, 0xffffffffffffffff}) close(r7) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000280)=0x8000) ioctl$SYNC_IOC_MERGE(r9, 0x40103e05, &(0x7f0000000080)={"df000000000000000000000000000000000000002000a400", r9}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, &(0x7f0000000240)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 181.659619ms ago: executing program 3 (id=1221): socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000002240)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x600, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$6lowpan_enable(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x5452, &(0x7f0000000100)={'veth1\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='\n\a\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002300)={0x11, 0x6, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000040)=0xd) unshare(0x62040200) 0s ago: executing program 1 (id=1222): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0xa206}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x50}}, 0x0) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './bus\x00'}, 0x6e) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1048c, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 45.402389][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.404771][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.407013][ T5957] bridge_slave_1: entered allmulticast mode [ 45.409801][ T5957] bridge_slave_1: entered promiscuous mode [ 45.440150][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.442576][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.444839][ T5959] bridge_slave_0: entered allmulticast mode [ 45.447403][ T5959] bridge_slave_0: entered promiscuous mode [ 45.450724][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.452960][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.455183][ T5959] bridge_slave_1: entered allmulticast mode [ 45.457723][ T5959] bridge_slave_1: entered promiscuous mode [ 45.497728][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.554130][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.597389][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.603100][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.726388][ T5964] chnl_net:caif_netlink_parms(): no params data found [ 45.735994][ T5957] team0: Port device team_slave_0 added [ 45.741416][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.744315][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.747224][ T5958] bridge_slave_0: entered allmulticast mode [ 45.751181][ T5958] bridge_slave_0: entered promiscuous mode [ 45.756704][ T5959] team0: Port device team_slave_0 added [ 45.765115][ T5957] team0: Port device team_slave_1 added [ 45.790693][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.793589][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.796490][ T5958] bridge_slave_1: entered allmulticast mode [ 45.800233][ T5958] bridge_slave_1: entered promiscuous mode [ 45.804228][ T5959] team0: Port device team_slave_1 added [ 45.893798][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.896634][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.908036][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.928317][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.931049][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.940986][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.947121][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.949507][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.957266][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.965516][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.968555][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.978686][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.985417][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.994356][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.092176][ T5958] team0: Port device team_slave_0 added [ 46.144747][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.147798][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.151099][ T5964] bridge_slave_0: entered allmulticast mode [ 46.153703][ T5964] bridge_slave_0: entered promiscuous mode [ 46.180368][ T5958] team0: Port device team_slave_1 added [ 46.184585][ T5957] hsr_slave_0: entered promiscuous mode [ 46.186813][ T5957] hsr_slave_1: entered promiscuous mode [ 46.190533][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.193070][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.195867][ T5964] bridge_slave_1: entered allmulticast mode [ 46.198956][ T5964] bridge_slave_1: entered promiscuous mode [ 46.221144][ T5959] hsr_slave_0: entered promiscuous mode [ 46.223328][ T5959] hsr_slave_1: entered promiscuous mode [ 46.225412][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.227847][ T5959] Cannot create hsr debugfs directory [ 46.305033][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.307863][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.318430][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.324677][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.340680][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.343586][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.355488][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.382057][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.470222][ T5964] team0: Port device team_slave_0 added [ 46.476248][ T5964] team0: Port device team_slave_1 added [ 46.493996][ T5958] hsr_slave_0: entered promiscuous mode [ 46.496033][ T5958] hsr_slave_1: entered promiscuous mode [ 46.497968][ T5958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.500159][ T5958] Cannot create hsr debugfs directory [ 46.572561][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.574925][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.582801][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.610115][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.612277][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.620379][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.706467][ T5964] hsr_slave_0: entered promiscuous mode [ 46.709304][ T5964] hsr_slave_1: entered promiscuous mode [ 46.711348][ T5964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.713716][ T5964] Cannot create hsr debugfs directory [ 46.798231][ T5957] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.806413][ T5957] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.814339][ T5957] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.818824][ T5957] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.874167][ T5959] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.880168][ T5959] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.885360][ T5959] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.893935][ T5959] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.922012][ T5958] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.927811][ T5958] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.932164][ T5958] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.941768][ T5958] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.983470][ T5964] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.989309][ T5964] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.996323][ T5964] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.000900][ T5964] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.008759][ T5308] Bluetooth: hci2: command tx timeout [ 47.008773][ T67] Bluetooth: hci0: command tx timeout [ 47.008820][ T5963] Bluetooth: hci1: command tx timeout [ 47.012751][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.018627][ T67] Bluetooth: hci3: command tx timeout [ 47.028971][ T5957] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.052679][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.055127][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.076349][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.079228][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.086236][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.107067][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.121552][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.123813][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.133766][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.136156][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.141230][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.157065][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.174408][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.177326][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.189939][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.193869][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.196149][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.220568][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.230428][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.232677][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.244466][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.246685][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.269669][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.300760][ T5957] veth0_vlan: entered promiscuous mode [ 47.303965][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.318114][ T5957] veth1_vlan: entered promiscuous mode [ 47.333476][ T5959] veth0_vlan: entered promiscuous mode [ 47.344989][ T5959] veth1_vlan: entered promiscuous mode [ 47.349796][ T5957] veth0_macvtap: entered promiscuous mode [ 47.359570][ T5957] veth1_macvtap: entered promiscuous mode [ 47.373240][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.380921][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.385805][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.392932][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.397033][ T5957] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.400177][ T5957] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.402945][ T5957] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.405654][ T5957] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.426268][ T5959] veth0_macvtap: entered promiscuous mode [ 47.432190][ T5959] veth1_macvtap: entered promiscuous mode [ 47.463351][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.466013][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.475935][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.479854][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.483653][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.500295][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.503515][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.507228][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.510581][ T5964] veth0_vlan: entered promiscuous mode [ 47.513115][ T5958] veth0_vlan: entered promiscuous mode [ 47.516672][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.518328][ T5959] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.519651][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.522101][ T5959] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.527098][ T5959] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.530335][ T5959] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.540701][ T5964] veth1_vlan: entered promiscuous mode [ 47.544097][ T5958] veth1_vlan: entered promiscuous mode [ 47.578944][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.581597][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.591022][ T5964] veth0_macvtap: entered promiscuous mode [ 47.595818][ T5964] veth1_macvtap: entered promiscuous mode [ 47.596493][ T5957] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.607076][ T5958] veth0_macvtap: entered promiscuous mode [ 47.610981][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.611377][ T5958] veth1_macvtap: entered promiscuous mode [ 47.614807][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.625350][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.629047][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.632648][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.636495][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.643052][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.648051][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.652100][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.655859][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.661662][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.666358][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.669721][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.673107][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.676201][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.681717][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.684739][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.688418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.688814][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.695032][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.709800][ T5958] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.712704][ T5958] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.715868][ T5958] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.718832][ T5958] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.723399][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.727086][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.731041][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.734328][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.738444][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.741968][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.746447][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.773135][ T5964] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.776191][ T5964] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.798069][ T5964] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.801276][ T5964] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.862948][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.865865][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.868951][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.874322][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.896171][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.899548][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.907378][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.910672][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.096098][ T6036] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 48.104420][ T6036] UDF-fs: Scanning with blocksize 2048 failed [ 48.108519][ T6036] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 48.110892][ T6036] UDF-fs: Scanning with blocksize 4096 failed [ 48.438459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.441364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.444071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.446935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.450035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.088609][ T67] Bluetooth: hci2: command tx timeout [ 49.090401][ T67] Bluetooth: hci3: command tx timeout [ 49.092177][ T67] Bluetooth: hci0: command tx timeout [ 49.093865][ T67] Bluetooth: hci1: command tx timeout [ 50.536294][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 50.541611][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 50.544948][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 50.548381][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 50.551238][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 50.554081][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 50.557175][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 50.560740][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 50.563541][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 50.566324][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 50.846726][ T6078] process 'syz.2.14' launched '/dev/fd/9' with NULL argv: empty string added [ 50.858776][ T6078] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 50.862624][ T6078] syz.2.14: attempt to access beyond end of device [ 50.862624][ T6078] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 50.866530][ T6078] exFAT-fs (nbd2): unable to read boot sector [ 50.868561][ T6078] exFAT-fs (nbd2): failed to read boot sector [ 50.870491][ T6078] exFAT-fs (nbd2): failed to recognize exfat type [ 51.178517][ T5308] Bluetooth: hci1: command tx timeout [ 51.178690][ T5963] Bluetooth: hci3: command tx timeout [ 51.178714][ T5973] Bluetooth: hci2: command tx timeout [ 51.182524][ T67] Bluetooth: hci0: command tx timeout [ 51.438079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 51.440876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.818502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.821667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.768727][ T6115] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 53.248261][ T67] Bluetooth: hci0: command tx timeout [ 53.250028][ T67] Bluetooth: hci3: command tx timeout [ 53.251835][ T67] Bluetooth: hci1: command tx timeout [ 53.252230][ T5963] Bluetooth: hci2: command tx timeout [ 54.253117][ T6141] syz.2.32 uses obsolete (PF_INET,SOCK_PACKET) [ 54.669146][ T6149] bridge0: port 3(vlan2) entered blocking state [ 54.671341][ T6149] bridge0: port 3(vlan2) entered disabled state [ 54.673641][ T6149] vlan2: entered allmulticast mode [ 54.675369][ T6149] bridge0: entered allmulticast mode [ 54.687312][ T6149] vlan2: left allmulticast mode [ 54.688992][ T6149] bridge0: left allmulticast mode [ 56.301949][ T6183] loop7: detected capacity change from 0 to 16384 [ 56.498408][ T6184] loop7: detected capacity change from 16384 to 16383 [ 58.160903][ T6210] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 58.167652][ T6210] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 59.203890][ T6224] Zero length message leads to an empty skb [ 60.785940][ T6258] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 61.140546][ T40] audit: type=1804 audit(1745026965.710:2): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.61" name="/newroot/13/file0" dev="tmpfs" ino=95 res=1 errno=0 [ 61.257403][ T6270] input: syz1 as /devices/virtual/input/input5 [ 62.508634][ T6280] __nla_validate_parse: 26 callbacks suppressed [ 62.508646][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'. [ 65.234442][ T6334] ALSA: mixer_oss: invalid OSS volume '' [ 66.250776][ T40] audit: type=1804 audit(1745026970.810:3): pid=6347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.83" name="/newroot/18/file0/file0" dev="9p" ino=36831369 res=1 errno=0 [ 67.493799][ T6370] netlink: 'syz.2.92': attribute type 2 has an invalid length. [ 67.496940][ T6370] netlink: 244 bytes leftover after parsing attributes in process `syz.2.92'. [ 67.885291][ T6374] netlink: 32 bytes leftover after parsing attributes in process `syz.2.92'. [ 68.549391][ T6384] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 68.918117][ T6384] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.536331][ T6384] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.620375][ T6384] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.683666][ T6384] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.785730][ T6384] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.792189][ T6384] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.799252][ T6384] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.805704][ T6384] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.846765][ T6437] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.851408][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.852824][ T6437] netlink: 68 bytes leftover after parsing attributes in process `syz.2.103'. [ 70.853605][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.046649][ T6453] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 72.600748][ T6461] netlink: 'syz.0.108': attribute type 2 has an invalid length. [ 72.603183][ T6461] netlink: 244 bytes leftover after parsing attributes in process `syz.0.108'. [ 72.843788][ T6464] netlink: 32 bytes leftover after parsing attributes in process `syz.0.108'. [ 73.856444][ T40] audit: type=1804 audit(1745026978.420:4): pid=6487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.110" name="/newroot/25/file0" dev="tmpfs" ino=145 res=1 errno=0 [ 74.647369][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 75.166637][ T6523] netlink: 'syz.2.116': attribute type 2 has an invalid length. [ 75.170071][ T6523] netlink: 244 bytes leftover after parsing attributes in process `syz.2.116'. [ 75.568360][ T6526] netlink: 32 bytes leftover after parsing attributes in process `syz.2.116'. [ 76.408743][ T6543] netlink: 'syz.3.120': attribute type 2 has an invalid length. [ 76.411159][ T6543] netlink: 244 bytes leftover after parsing attributes in process `syz.3.120'. [ 76.892378][ T6557] netlink: 32 bytes leftover after parsing attributes in process `syz.3.120'. [ 77.302921][ T6571] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.584754][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'. [ 79.779448][ T40] audit: type=1804 audit(1745026984.350:5): pid=6620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.132" name="/newroot/34/file0/file0" dev="9p" ino=36831369 res=1 errno=0 [ 80.451338][ T6635] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.090742][ T29] cfg80211: failed to load regulatory.db [ 81.213741][ T6646] netlink: 'syz.2.140': attribute type 2 has an invalid length. [ 81.216815][ T6646] netlink: 244 bytes leftover after parsing attributes in process `syz.2.140'. [ 81.418493][ T6649] netlink: 32 bytes leftover after parsing attributes in process `syz.2.140'. [ 82.704043][ T6671] netlink: 'syz.0.146': attribute type 2 has an invalid length. [ 82.706802][ T6671] netlink: 244 bytes leftover after parsing attributes in process `syz.0.146'. [ 83.135303][ T6673] netlink: 52 bytes leftover after parsing attributes in process `syz.0.146'. [ 83.448756][ T6680] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.997595][ T6689] netlink: 'syz.2.151': attribute type 2 has an invalid length. [ 84.000477][ T6689] netlink: 244 bytes leftover after parsing attributes in process `syz.2.151'. [ 84.272172][ T6697] netlink: 32 bytes leftover after parsing attributes in process `syz.2.151'. [ 85.526618][ T6722] netlink: 'syz.3.159': attribute type 2 has an invalid length. [ 85.529299][ T6722] netlink: 244 bytes leftover after parsing attributes in process `syz.3.159'. [ 85.970560][ T6724] netlink: 52 bytes leftover after parsing attributes in process `syz.3.159'. [ 86.482501][ T6733] ieee802154 phy0 wpan0: encryption failed: -22 [ 86.899780][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.164'. [ 86.940046][ T6742] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 86.951633][ T6742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.164'. [ 86.955156][ T6742] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.417335][ T6768] netlink: 'syz.1.171': attribute type 2 has an invalid length. [ 88.419948][ T6768] netlink: 244 bytes leftover after parsing attributes in process `syz.1.171'. [ 88.744339][ T6779] netlink: 52 bytes leftover after parsing attributes in process `syz.1.171'. [ 91.201371][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'. [ 91.231049][ T6845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.181'. [ 91.234692][ T6845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.463553][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 94.037565][ T6922] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.050186][ T6922] netlink: 68 bytes leftover after parsing attributes in process `syz.3.193'. [ 96.329245][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 96.532642][ T6991] ieee802154 phy0 wpan0: encryption failed: -22 [ 96.539936][ T6991] netlink: 68 bytes leftover after parsing attributes in process `syz.0.204'. [ 99.572179][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 100.032193][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 100.185998][ T7081] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.508751][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.221'. [ 101.741288][ T7111] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.751982][ T7111] netlink: 68 bytes leftover after parsing attributes in process `syz.2.226'. [ 101.913766][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 107.792400][ T7244] netlink: 'syz.1.254': attribute type 2 has an invalid length. [ 107.794843][ T7244] netlink: 244 bytes leftover after parsing attributes in process `syz.1.254'. [ 108.073048][ T7247] netlink: 32 bytes leftover after parsing attributes in process `syz.1.254'. [ 109.399971][ T7263] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.997630][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'. [ 111.055673][ T7330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.268'. [ 111.942188][ T7345] netlink: 'syz.1.272': attribute type 2 has an invalid length. [ 111.944647][ T7345] netlink: 244 bytes leftover after parsing attributes in process `syz.1.272'. [ 112.240228][ T7351] netlink: 32 bytes leftover after parsing attributes in process `syz.1.272'. [ 114.918529][ T7399] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.936883][ T7399] netlink: 68 bytes leftover after parsing attributes in process `syz.3.284'. [ 115.598440][ T7404] netlink: 'syz.2.285': attribute type 2 has an invalid length. [ 115.601697][ T7404] netlink: 244 bytes leftover after parsing attributes in process `syz.2.285'. [ 116.378799][ T7409] netlink: 32 bytes leftover after parsing attributes in process `syz.2.285'. [ 117.677793][ T7435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.292'. [ 117.739540][ T7438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.292'. [ 118.328651][ T7448] ieee802154 phy0 wpan0: encryption failed: -22 [ 118.343899][ T7448] netlink: 68 bytes leftover after parsing attributes in process `syz.3.295'. [ 122.001763][ T7530] ieee802154 phy0 wpan0: encryption failed: -22 [ 122.014415][ T7530] netlink: 68 bytes leftover after parsing attributes in process `syz.2.308'. [ 123.240038][ T7561] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.097069][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 128.713012][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.343'. [ 129.025639][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 129.056779][ T7727] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 129.069363][ T7727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.345'. [ 129.134094][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.346'. [ 129.769983][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 130.072121][ T7758] netlink: 'syz.0.355': attribute type 2 has an invalid length. [ 130.074361][ T7758] netlink: 244 bytes leftover after parsing attributes in process `syz.0.355'. [ 130.299835][ T7760] netlink: 32 bytes leftover after parsing attributes in process `syz.0.355'. [ 130.940916][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 131.148485][ T7795] netlink: 128 bytes leftover after parsing attributes in process `syz.0.360'. [ 132.290459][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.293097][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.583679][ T7833] netlink: 'syz.2.367': attribute type 2 has an invalid length. [ 132.585887][ T7833] __nla_validate_parse: 3 callbacks suppressed [ 132.585894][ T7833] netlink: 244 bytes leftover after parsing attributes in process `syz.2.367'. [ 132.819995][ T7839] netlink: 32 bytes leftover after parsing attributes in process `syz.2.367'. [ 133.617637][ T7856] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.626666][ T7856] netlink: 68 bytes leftover after parsing attributes in process `syz.1.371'. [ 134.165189][ T7868] netlink: 128 bytes leftover after parsing attributes in process `syz.0.375'. [ 134.169185][ T7868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.375'. [ 134.451605][ T7872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'. [ 134.547537][ T7877] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 134.575647][ T7872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.377'. [ 134.652527][ T7886] netlink: 'syz.3.381': attribute type 2 has an invalid length. [ 134.654912][ T7886] netlink: 244 bytes leftover after parsing attributes in process `syz.3.381'. [ 134.687166][ T7889] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.703087][ T7889] netlink: 68 bytes leftover after parsing attributes in process `syz.2.380'. [ 135.036113][ T7896] netlink: 32 bytes leftover after parsing attributes in process `syz.3.381'. [ 135.904944][ T7928] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.515375][ T7967] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 137.550514][ T7967] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 137.557861][ T7967] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 137.571221][ T7967] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 137.597191][ T7967] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 137.637242][ T7967] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 137.705189][ T7974] __nla_validate_parse: 5 callbacks suppressed [ 137.705206][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.392'. [ 137.757749][ T7974] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 137.782138][ T7974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.392'. [ 137.785788][ T7974] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.670727][ T8007] netlink: 128 bytes leftover after parsing attributes in process `syz.3.397'. [ 138.673692][ T8007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.397'. [ 138.732153][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.746000][ T8008] netlink: 68 bytes leftover after parsing attributes in process `syz.1.396'. [ 139.540780][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 139.803194][ T8044] netlink: 128 bytes leftover after parsing attributes in process `syz.1.402'. [ 139.806732][ T8044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.402'. [ 140.001089][ T8046] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 140.027564][ T8046] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 140.032188][ T8046] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 140.035881][ T8046] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 140.463865][ T8063] netlink: 128 bytes leftover after parsing attributes in process `syz.0.406'. [ 140.466624][ T8063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.406'. [ 141.823093][ T8094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.008053][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 142.157953][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 142.162385][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.165621][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 142.182063][ T10] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 142.184878][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.187359][ T10] usb 7-1: Product: syz [ 142.188756][ T10] usb 7-1: Manufacturer: syz [ 142.190225][ T10] usb 7-1: SerialNumber: syz [ 142.199742][ T10] usb 7-1: config 0 descriptor?? [ 142.787591][ T8113] vivid-007: ================= START STATUS ================= [ 142.791417][ T8113] vivid-007: Enable Output Cropping: true [ 142.794101][ T8113] vivid-007: Enable Output Composing: true [ 142.796655][ T8113] vivid-007: Enable Output Scaler: true [ 142.801549][ T8113] vivid-007: Tx RGB Quantization Range: Automatic [ 142.804341][ T8113] vivid-007: Transmit Mode: HDMI [ 142.806477][ T8113] vivid-007: Hotplug Present: 0x00000000 [ 142.810373][ T8113] vivid-007: RxSense Present: 0x00000000 [ 142.812564][ T8113] vivid-007: EDID Present: 0x00000000 [ 142.818355][ T8113] vivid-007: ================== END STATUS ================== [ 143.161938][ T8126] __nla_validate_parse: 6 callbacks suppressed [ 143.161948][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'. [ 144.462532][ T8136] netlink: 128 bytes leftover after parsing attributes in process `syz.1.424'. [ 144.466063][ T8136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.424'. [ 144.484640][ T8133] create_pit_timer: 54 callbacks suppressed [ 144.484649][ T8133] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 144.600188][ T8141] netlink: 128 bytes leftover after parsing attributes in process `syz.0.425'. [ 144.606779][ T8141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.425'. [ 144.666109][ T8146] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 144.672305][ T8146] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 144.821607][ T64] usb 7-1: USB disconnect, device number 2 [ 145.135076][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 145.279199][ T8153] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 145.282382][ T8153] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 145.385294][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 145.702880][ T8166] netlink: 128 bytes leftover after parsing attributes in process `syz.0.431'. [ 145.706900][ T8166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.431'. [ 145.825379][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 145.865905][ T8169] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 145.868855][ T8169] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 146.446967][ T8178] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 146.450031][ T8178] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 147.109934][ T8194] netlink: 'syz.3.439': attribute type 2 has an invalid length. [ 147.865813][ T8205] netlink: 'syz.0.442': attribute type 2 has an invalid length. [ 148.350346][ T8210] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 148.353108][ T8210] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 148.442019][ T8212] __nla_validate_parse: 10 callbacks suppressed [ 148.442029][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 148.733752][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 148.748073][ T8221] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 148.750547][ T8221] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 149.849733][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'. [ 149.869703][ T8266] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 149.872567][ T8266] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 150.101699][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 150.151233][ T8270] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 150.153993][ T8270] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 150.434861][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 150.492004][ T8273] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 150.494794][ T8273] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 150.506404][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 150.958393][ T8299] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 151.565071][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 151.605486][ T8317] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 151.608780][ T8317] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 152.130393][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 152.202239][ T8337] netlink: 128 bytes leftover after parsing attributes in process `syz.1.462'. [ 152.205258][ T8337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.462'. [ 152.918045][ T6000] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 153.042618][ T8352] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 153.045429][ T8352] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 153.099125][ T6000] usb 6-1: Using ep0 maxpacket: 16 [ 153.104304][ T6000] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.108068][ T6000] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 153.119993][ T6000] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 153.124407][ T6000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.126907][ T6000] usb 6-1: Product: syz [ 153.129620][ T6000] usb 6-1: Manufacturer: syz [ 153.131509][ T6000] usb 6-1: SerialNumber: syz [ 153.139746][ T6000] usb 6-1: config 0 descriptor?? [ 153.186265][ T8355] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 153.190393][ T8355] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 153.617943][ T8362] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.627076][ T8362] __nla_validate_parse: 2 callbacks suppressed [ 153.627089][ T8362] netlink: 68 bytes leftover after parsing attributes in process `syz.3.469'. [ 153.680160][ T8358] vivid-007: ================= START STATUS ================= [ 153.683040][ T8358] vivid-007: Enable Output Cropping: true [ 153.685990][ T8358] vivid-007: Enable Output Composing: true [ 153.688122][ T8358] vivid-007: Enable Output Scaler: true [ 153.689966][ T8358] vivid-007: Tx RGB Quantization Range: Automatic [ 153.691990][ T8358] vivid-007: Transmit Mode: HDMI [ 153.693531][ T8358] vivid-007: Hotplug Present: 0x00000000 [ 153.695179][ T8358] vivid-007: RxSense Present: 0x00000000 [ 153.696963][ T8358] vivid-007: EDID Present: 0x00000000 [ 153.699391][ T8358] vivid-007: ================== END STATUS ================== [ 154.232390][ T8375] netlink: 'syz.3.472': attribute type 2 has an invalid length. [ 154.234764][ T8375] netlink: 244 bytes leftover after parsing attributes in process `syz.3.472'. [ 154.805490][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'. [ 154.892348][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 154.898366][ T8383] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 154.901562][ T8383] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 155.681745][ T8386] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 155.751029][ T6000] usb 6-1: USB disconnect, device number 2 [ 155.861220][ T8408] netlink: 128 bytes leftover after parsing attributes in process `syz.0.478'. [ 155.865045][ T8408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.478'. [ 155.962286][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 156.035898][ T8421] netlink: 128 bytes leftover after parsing attributes in process `syz.3.477'. [ 156.036498][ T8414] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 156.039387][ T8421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.477'. [ 156.042099][ T8414] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 156.396038][ T8431] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.441287][ T6000] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 156.444191][ T8431] netlink: 68 bytes leftover after parsing attributes in process `syz.2.480'. [ 156.587989][ T6000] usb 5-1: Using ep0 maxpacket: 16 [ 156.605197][ T6000] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.608539][ T6000] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 156.613069][ T6000] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 156.615968][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.618613][ T6000] usb 5-1: Product: syz [ 156.623564][ T6000] usb 5-1: Manufacturer: syz [ 156.635188][ T6000] usb 5-1: SerialNumber: syz [ 156.645276][ T6000] usb 5-1: config 0 descriptor?? [ 157.018741][ T8450] netlink: 'syz.2.484': attribute type 2 has an invalid length. [ 157.069360][ T8446] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 157.072421][ T8446] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 157.558069][ T8447] vivid-007: ================= START STATUS ================= [ 157.566600][ T8447] vivid-007: Enable Output Cropping: true [ 157.568842][ T8447] vivid-007: Enable Output Composing: true [ 157.570673][ T8447] vivid-007: Enable Output Scaler: true [ 157.572425][ T8447] vivid-007: Tx RGB Quantization Range: Automatic [ 157.574425][ T8447] vivid-007: Transmit Mode: HDMI [ 157.576157][ T8447] vivid-007: Hotplug Present: 0x00000000 [ 157.578591][ T8447] vivid-007: RxSense Present: 0x00000000 [ 157.580408][ T8447] vivid-007: EDID Present: 0x00000000 [ 157.582094][ T8447] vivid-007: ================== END STATUS ================== [ 158.825732][ T8478] __nla_validate_parse: 2 callbacks suppressed [ 158.825741][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 158.837355][ T8478] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.840990][ T8478] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.938945][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 159.097978][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 159.101790][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.105077][ T10] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 159.111851][ T10] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 159.114535][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.117110][ T10] usb 8-1: Product: syz [ 159.123043][ T10] usb 8-1: Manufacturer: syz [ 159.125042][ T10] usb 8-1: SerialNumber: syz [ 159.138393][ T10] usb 8-1: config 0 descriptor?? [ 159.210132][ T6000] usb 5-1: USB disconnect, device number 2 [ 159.372813][ T8516] netlink: 'syz.2.491': attribute type 2 has an invalid length. [ 159.376104][ T8516] netlink: 244 bytes leftover after parsing attributes in process `syz.2.491'. [ 159.484504][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 159.602090][ T8532] netlink: 32 bytes leftover after parsing attributes in process `syz.2.491'. [ 159.800871][ T8527] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 159.805851][ T8527] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 159.873833][ T8526] vivid-007: ================= START STATUS ================= [ 159.877138][ T8526] vivid-007: Enable Output Cropping: true [ 159.881982][ T8526] vivid-007: Enable Output Composing: true [ 159.884689][ T8526] vivid-007: Enable Output Scaler: true [ 159.887278][ T8526] vivid-007: Tx RGB Quantization Range: Automatic [ 159.890600][ T8526] vivid-007: Transmit Mode: HDMI [ 159.892795][ T8526] vivid-007: Hotplug Present: 0x00000000 [ 159.895184][ T8526] vivid-007: RxSense Present: 0x00000000 [ 159.897590][ T8526] vivid-007: EDID Present: 0x00000000 [ 159.901609][ T8526] vivid-007: ================== END STATUS ================== [ 160.399611][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'. [ 160.565814][ T8537] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 160.569527][ T8537] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 161.090887][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 161.161372][ T8540] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 161.164196][ T8540] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 161.460232][ T65] usb 8-1: USB disconnect, device number 2 [ 161.469455][ T8544] netlink: 128 bytes leftover after parsing attributes in process `syz.0.495'. [ 161.472737][ T8544] netlink: 20 bytes leftover after parsing attributes in process `syz.0.495'. [ 161.525019][ T8547] netlink: 'syz.1.496': attribute type 2 has an invalid length. [ 161.527442][ T8547] netlink: 244 bytes leftover after parsing attributes in process `syz.1.496'. [ 162.212501][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.498'. [ 162.315213][ T8558] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 162.320656][ T8558] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 162.425697][ T8568] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 162.428705][ T8568] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 162.811206][ T8585] netlink: 'syz.3.502': attribute type 2 has an invalid length. [ 164.079079][ T8614] __nla_validate_parse: 5 callbacks suppressed [ 164.079094][ T8614] netlink: 128 bytes leftover after parsing attributes in process `syz.3.507'. [ 164.085388][ T8614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.507'. [ 164.192263][ T8617] netlink: 'syz.2.509': attribute type 2 has an invalid length. [ 164.194706][ T8617] netlink: 244 bytes leftover after parsing attributes in process `syz.2.509'. [ 164.290441][ T8620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.510'. [ 164.701213][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 164.712689][ T8628] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 164.715774][ T8628] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 165.034694][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 165.199378][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'. [ 165.205815][ T8639] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 165.208828][ T8639] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 165.756865][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'. [ 165.876299][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'. [ 165.924964][ T8654] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 165.928143][ T8654] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 166.029200][ T8657] netlink: 128 bytes leftover after parsing attributes in process `syz.3.521'. [ 166.141335][ T8660] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 166.144209][ T8660] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 166.204793][ T8662] netlink: 'syz.0.523': attribute type 2 has an invalid length. [ 167.740304][ T8687] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 167.743187][ T8687] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 167.910708][ T8694] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 167.913463][ T8694] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 169.040202][ T8722] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 169.192538][ T8729] __nla_validate_parse: 5 callbacks suppressed [ 169.192550][ T8729] netlink: 128 bytes leftover after parsing attributes in process `syz.1.537'. [ 169.197582][ T8729] netlink: 20 bytes leftover after parsing attributes in process `syz.1.537'. [ 170.018089][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 170.043288][ T8746] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 170.047132][ T8746] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 170.208037][ T5974] Bluetooth: hci0: command 0x0406 tx timeout [ 170.218478][ T5963] Bluetooth: hci2: command 0x0406 tx timeout [ 170.218523][ T5308] Bluetooth: hci1: command 0x0406 tx timeout [ 170.220463][ T5974] Bluetooth: hci3: command 0x0405 tx timeout [ 171.500414][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'. [ 171.523535][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 171.863115][ T8791] netlink: 'syz.2.551': attribute type 2 has an invalid length. [ 171.865612][ T8791] netlink: 244 bytes leftover after parsing attributes in process `syz.2.551'. [ 171.891184][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'. [ 172.561223][ T8800] netlink: 32 bytes leftover after parsing attributes in process `syz.2.551'. [ 172.570395][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 172.946097][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 173.094727][ T8821] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 173.099494][ T8821] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 173.325263][ T8835] netlink: 'syz.0.557': attribute type 2 has an invalid length. [ 174.250578][ T8859] __nla_validate_parse: 6 callbacks suppressed [ 174.250588][ T8859] netlink: 128 bytes leftover after parsing attributes in process `syz.3.561'. [ 174.255411][ T8859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.561'. [ 174.427493][ T8864] netlink: 128 bytes leftover after parsing attributes in process `syz.2.562'. [ 174.441577][ T8864] netlink: 20 bytes leftover after parsing attributes in process `syz.2.562'. [ 174.765596][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 174.774827][ T8877] overlayfs: failed to resolve './file0': -2 [ 175.004412][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'. [ 175.092378][ T8894] netlink: 128 bytes leftover after parsing attributes in process `syz.2.566'. [ 175.095246][ T8894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.566'. [ 175.168573][ T8898] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.174731][ T8898] netlink: 68 bytes leftover after parsing attributes in process `syz.1.564'. [ 175.409564][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 176.166273][ T8924] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 176.169367][ T8924] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 176.686320][ T8945] netlink: 'syz.0.572': attribute type 2 has an invalid length. [ 177.117836][ T8961] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 177.121753][ T8961] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 177.648100][ T2187] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 177.807943][ T2187] usb 6-1: Using ep0 maxpacket: 16 [ 177.815024][ T2187] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.819030][ T2187] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 177.823930][ T2187] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 177.826725][ T2187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.830656][ T2187] usb 6-1: Product: syz [ 177.831959][ T2187] usb 6-1: Manufacturer: syz [ 177.833598][ T2187] usb 6-1: SerialNumber: syz [ 177.837323][ T2187] usb 6-1: config 0 descriptor?? [ 178.008541][ T8973] netlink: 'syz.2.580': attribute type 2 has an invalid length. [ 178.198970][ T8979] netlink: 'syz.3.581': attribute type 2 has an invalid length. [ 178.275377][ T8974] vivid-007: ================= START STATUS ================= [ 178.277733][ T8974] vivid-007: Enable Output Cropping: true [ 178.279955][ T8974] vivid-007: Enable Output Composing: true [ 178.281790][ T8974] vivid-007: Enable Output Scaler: true [ 178.283537][ T8974] vivid-007: Tx RGB Quantization Range: Automatic [ 178.285735][ T8974] vivid-007: Transmit Mode: HDMI [ 178.287334][ T8974] vivid-007: Hotplug Present: 0x00000000 [ 178.289614][ T8974] vivid-007: RxSense Present: 0x00000000 [ 178.291389][ T8974] vivid-007: EDID Present: 0x00000000 [ 178.293068][ T8974] vivid-007: ================== END STATUS ================== [ 178.387963][ T78] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 178.547951][ T78] usb 5-1: Using ep0 maxpacket: 16 [ 178.559594][ T78] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.563377][ T78] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 178.568918][ T78] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 178.571714][ T78] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.574178][ T78] usb 5-1: Product: syz [ 178.575502][ T78] usb 5-1: Manufacturer: syz [ 178.576973][ T78] usb 5-1: SerialNumber: syz [ 178.588956][ T78] usb 5-1: config 0 descriptor?? [ 178.994979][ T8985] vivid-007: ================= START STATUS ================= [ 178.998022][ T8985] vivid-007: Enable Output Cropping: true [ 179.000305][ T8985] vivid-007: Enable Output Composing: true [ 179.002615][ T8985] vivid-007: Enable Output Scaler: true [ 179.004795][ T8985] vivid-007: Tx RGB Quantization Range: Automatic [ 179.007315][ T8985] vivid-007: Transmit Mode: HDMI [ 179.009595][ T8985] vivid-007: Hotplug Present: 0x00000000 [ 179.011797][ T8985] vivid-007: RxSense Present: 0x00000000 [ 179.013988][ T8985] vivid-007: EDID Present: 0x00000000 [ 179.016131][ T8985] vivid-007: ================== END STATUS ================== [ 180.019839][ T8998] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.243908][ T9002] __nla_validate_parse: 18 callbacks suppressed [ 180.243921][ T9002] netlink: 128 bytes leftover after parsing attributes in process `syz.3.586'. [ 180.249452][ T9002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.586'. [ 180.436162][ T6000] usb 6-1: USB disconnect, device number 3 [ 180.528717][ T9004] netlink: 'syz.1.587': attribute type 2 has an invalid length. [ 180.531708][ T9004] netlink: 244 bytes leftover after parsing attributes in process `syz.1.587'. [ 180.789721][ T9012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.587'. [ 181.161174][ T2187] usb 5-1: USB disconnect, device number 3 [ 181.280961][ T9017] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 181.293803][ T9017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 181.297487][ T9017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 181.301831][ T9017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 181.305650][ T9017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 181.309990][ T9017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 181.313748][ T9017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 181.317520][ T9017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 181.321306][ T9017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 181.325474][ T9017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 181.496699][ T9023] netlink: 'syz.0.591': attribute type 2 has an invalid length. [ 181.501326][ T9023] netlink: 244 bytes leftover after parsing attributes in process `syz.0.591'. [ 181.507566][ T9025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.592'. [ 181.588721][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'. [ 181.724943][ T9031] netlink: 64 bytes leftover after parsing attributes in process `syz.0.591'. [ 182.129722][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.595'. [ 182.135417][ T9040] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 182.138304][ T9040] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 182.210541][ T9042] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.540515][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 182.562135][ T9046] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 182.565039][ T9046] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 182.677025][ T9051] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 182.680351][ T9051] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 182.834188][ T9054] overlayfs: failed to resolve './file0': -2 [ 183.024776][ T9057] netlink: 'syz.3.601': attribute type 2 has an invalid length. [ 183.209083][ T9060] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 183.211939][ T9060] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 184.763027][ T9097] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.260511][ T9105] overlayfs: failed to resolve './file0': -2 [ 185.382163][ T9112] netlink: 'syz.0.613': attribute type 2 has an invalid length. [ 185.384646][ T9112] __nla_validate_parse: 6 callbacks suppressed [ 185.384652][ T9112] netlink: 244 bytes leftover after parsing attributes in process `syz.0.613'. [ 185.611260][ T9120] netlink: 32 bytes leftover after parsing attributes in process `syz.0.613'. [ 186.014093][ T9134] netlink: 128 bytes leftover after parsing attributes in process `syz.3.614'. [ 186.017759][ T9134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.614'. [ 186.392495][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 186.643767][ T9154] netlink: 'syz.2.618': attribute type 2 has an invalid length. [ 186.647002][ T9154] netlink: 244 bytes leftover after parsing attributes in process `syz.2.618'. [ 186.932501][ T9154] netlink: 52 bytes leftover after parsing attributes in process `syz.2.618'. [ 187.031861][ T9173] netlink: 'syz.2.620': attribute type 2 has an invalid length. [ 187.034549][ T9173] netlink: 244 bytes leftover after parsing attributes in process `syz.2.620'. [ 187.255399][ T9187] netlink: 32 bytes leftover after parsing attributes in process `syz.2.620'. [ 187.406399][ T9189] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.718377][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 187.932851][ T9212] netlink: 'syz.3.625': attribute type 2 has an invalid length. [ 188.961141][ T9234] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 188.964109][ T9234] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 189.380931][ T9241] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 189.383772][ T9241] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 189.470867][ T9243] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 189.473687][ T9243] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 190.010849][ T9248] netlink: 'syz.2.635': attribute type 2 has an invalid length. [ 190.423923][ T9258] netlink: 'syz.0.638': attribute type 2 has an invalid length. [ 190.426891][ T9258] __nla_validate_parse: 11 callbacks suppressed [ 190.426898][ T9258] netlink: 244 bytes leftover after parsing attributes in process `syz.0.638'. [ 190.659258][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 190.897271][ T9268] netlink: 32 bytes leftover after parsing attributes in process `syz.0.638'. [ 191.440145][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.642'. [ 191.461716][ T9279] overlayfs: failed to resolve './file0': -2 [ 191.523150][ T9281] netlink: 'syz.1.644': attribute type 2 has an invalid length. [ 191.525624][ T9281] netlink: 244 bytes leftover after parsing attributes in process `syz.1.644'. [ 191.659495][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 191.672596][ T9282] overlayfs: failed to resolve './file0': -2 [ 191.812819][ T9284] netlink: 32 bytes leftover after parsing attributes in process `syz.1.644'. [ 192.810557][ T9315] netlink: 'syz.1.649': attribute type 2 has an invalid length. [ 192.813314][ T9315] netlink: 244 bytes leftover after parsing attributes in process `syz.1.649'. [ 193.366077][ T9316] netlink: 32 bytes leftover after parsing attributes in process `syz.1.649'. [ 193.655261][ T9340] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.656517][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.651'. [ 193.732491][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.735162][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.247093][ T9355] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 194.250009][ T9355] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 194.272941][ T9356] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 194.275686][ T9356] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 194.398829][ T9358] create_pit_timer: 7 callbacks suppressed [ 194.398838][ T9358] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 195.103857][ T9373] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 195.111942][ T9373] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 195.135321][ T9376] netlink: 'syz.1.661': attribute type 2 has an invalid length. [ 195.499491][ T9386] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 195.502280][ T9386] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 196.594008][ T9404] __nla_validate_parse: 7 callbacks suppressed [ 196.594018][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 196.638848][ T9404] overlayfs: failed to resolve './file0': -2 [ 197.124056][ T9428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.671'. [ 198.302934][ T9473] netlink: 'syz.3.675': attribute type 2 has an invalid length. [ 198.305830][ T9473] netlink: 244 bytes leftover after parsing attributes in process `syz.3.675'. [ 198.597499][ T9475] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 198.600344][ T9475] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 198.718197][ T9473] netlink: 32 bytes leftover after parsing attributes in process `syz.3.675'. [ 199.176846][ T9486] netlink: 128 bytes leftover after parsing attributes in process `syz.0.678'. [ 199.180742][ T9486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.678'. [ 199.378417][ T9494] netlink: 128 bytes leftover after parsing attributes in process `syz.3.679'. [ 199.381482][ T9494] netlink: 20 bytes leftover after parsing attributes in process `syz.3.679'. [ 199.662706][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.680'. [ 199.883385][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.682'. [ 199.892929][ T9512] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 199.898098][ T9512] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 199.986190][ T9518] netlink: 'syz.3.685': attribute type 2 has an invalid length. [ 200.735528][ T9526] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 200.750990][ T9526] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 200.839820][ T9529] overlayfs: failed to resolve './file0': -2 [ 200.979546][ T9532] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 200.982643][ T9532] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 202.190358][ T9548] __nla_validate_parse: 4 callbacks suppressed [ 202.190372][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 202.451757][ T9548] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 202.454690][ T9548] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 202.600151][ T9559] netlink: 128 bytes leftover after parsing attributes in process `syz.2.694'. [ 202.602960][ T9559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.694'. [ 202.780699][ T9563] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 202.788150][ T9563] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 203.079294][ T9574] netlink: 'syz.2.697': attribute type 2 has an invalid length. [ 203.082491][ T9574] netlink: 244 bytes leftover after parsing attributes in process `syz.2.697'. [ 203.401424][ T9589] netlink: 32 bytes leftover after parsing attributes in process `syz.2.697'. [ 203.989879][ T9600] netlink: 128 bytes leftover after parsing attributes in process `syz.0.699'. [ 203.993427][ T9600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.699'. [ 204.358349][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'. [ 204.363851][ T9606] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 204.367168][ T9606] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 205.301823][ T9622] netlink: 'syz.1.705': attribute type 2 has an invalid length. [ 205.304910][ T9622] netlink: 244 bytes leftover after parsing attributes in process `syz.1.705'. [ 205.593768][ T9628] netlink: 32 bytes leftover after parsing attributes in process `syz.1.705'. [ 207.263988][ T9656] __nla_validate_parse: 2 callbacks suppressed [ 207.264002][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 207.364245][ T9656] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 207.365816][ T9662] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 207.370614][ T9656] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 207.374673][ T9662] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 208.018673][ T9670] netlink: 'syz.3.717': attribute type 2 has an invalid length. [ 208.021106][ T9670] netlink: 244 bytes leftover after parsing attributes in process `syz.3.717'. [ 208.095687][ T9672] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 208.099104][ T9672] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 208.281010][ T9677] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 208.284657][ T9677] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 208.373957][ T9680] netlink: 32 bytes leftover after parsing attributes in process `syz.3.717'. [ 209.903216][ T9722] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 210.247977][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 210.408190][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 210.412178][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.416344][ T34] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 210.424264][ T34] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 210.428483][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.436006][ T34] usb 8-1: Product: syz [ 210.439472][ T34] usb 8-1: Manufacturer: syz [ 210.442449][ T34] usb 8-1: SerialNumber: syz [ 210.448586][ T34] usb 8-1: config 0 descriptor?? [ 210.513550][ T9747] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 210.516464][ T9747] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 211.377494][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'. [ 211.578143][ T9752] vivid-007: ================= START STATUS ================= [ 211.581343][ T9752] vivid-007: Enable Output Cropping: true [ 211.583769][ T9752] vivid-007: Enable Output Composing: true [ 211.586226][ T9752] vivid-007: Enable Output Scaler: true [ 211.589067][ T9752] vivid-007: Tx RGB Quantization Range: Automatic [ 211.591817][ T9752] vivid-007: Transmit Mode: HDMI [ 211.593926][ T9752] vivid-007: Hotplug Present: 0x00000000 [ 211.596282][ T9752] vivid-007: RxSense Present: 0x00000000 [ 211.604306][ T9752] vivid-007: EDID Present: 0x00000000 [ 211.606634][ T9752] vivid-007: ================== END STATUS ================== [ 212.295535][ T9769] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 212.321856][ T9769] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 212.326269][ T9769] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 212.332320][ T9769] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 212.336524][ T9769] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 212.342477][ T9769] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 212.346293][ T9769] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 212.351571][ T9769] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 212.355375][ T9769] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 212.499573][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 212.510723][ T9774] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 212.520126][ T9774] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 213.045167][ T34] usb 8-1: USB disconnect, device number 3 [ 213.365036][ T9788] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 213.369825][ T9788] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 213.668613][ T9791] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 213.672261][ T9791] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 214.115127][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'. [ 214.125608][ T9798] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 214.128494][ T9798] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 214.310652][ T9806] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 214.314239][ T9806] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 214.333814][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'. [ 215.891230][ T9851] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 215.893961][ T9851] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 215.993863][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'. [ 216.049444][ T9862] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 216.052791][ T9862] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 216.161189][ T9864] netlink: 128 bytes leftover after parsing attributes in process `syz.1.750'. [ 216.179301][ T9864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.750'. [ 216.401636][ T9868] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 216.404402][ T9868] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 216.473941][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 216.576317][ T9871] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 216.586153][ T9871] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 216.920608][ T9876] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 216.925392][ T9876] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 217.469301][ T9887] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 217.472035][ T9887] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 217.620448][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 217.649326][ T9890] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 217.652329][ T9890] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 218.040728][ T9899] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.047256][ T9899] netlink: 68 bytes leftover after parsing attributes in process `syz.3.759'. [ 219.423473][ T9937] netlink: 128 bytes leftover after parsing attributes in process `syz.2.764'. [ 219.426285][ T9937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.764'. [ 220.193994][ T9956] netlink: 128 bytes leftover after parsing attributes in process `syz.1.768'. [ 220.196851][ T9956] netlink: 20 bytes leftover after parsing attributes in process `syz.1.768'. [ 221.691068][ T9989] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 221.694129][ T9989] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 222.357261][T10005] netlink: 128 bytes leftover after parsing attributes in process `syz.0.778'. [ 222.360274][T10005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.778'. [ 223.873485][T10031] create_pit_timer: 1 callbacks suppressed [ 223.873494][T10031] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 223.906039][T10031] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 223.916322][T10031] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 223.921086][T10031] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 223.925069][T10031] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 223.929504][T10031] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 223.933045][T10031] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 223.936869][T10031] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 223.942175][T10031] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 224.035666][T10031] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 224.108934][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 224.364195][T10047] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 224.368061][T10047] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 224.542353][T10052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.789'. [ 224.692070][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.791'. [ 224.714309][T10057] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 224.718275][T10057] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 225.635711][T10080] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 225.638915][T10080] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 226.207228][T10100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.799'. [ 227.458392][T10127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 227.505167][T10127] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 227.508125][T10127] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 227.944696][T10146] netlink: 128 bytes leftover after parsing attributes in process `syz.3.807'. [ 227.949776][T10146] netlink: 20 bytes leftover after parsing attributes in process `syz.3.807'. [ 228.664067][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'. [ 228.716929][T10166] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 228.727186][T10166] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.234914][T10180] netlink: 128 bytes leftover after parsing attributes in process `syz.2.813'. [ 229.237735][T10180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.813'. [ 231.219512][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'. [ 231.292417][T10233] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 231.295280][T10233] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 231.873288][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 231.880366][T10245] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 231.885581][T10245] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 231.895791][T10247] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 231.899275][T10247] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 231.936640][T10248] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 231.939805][T10248] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 232.231680][T10251] netlink: 128 bytes leftover after parsing attributes in process `syz.3.826'. [ 232.234856][T10251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.826'. [ 232.472497][T10256] netlink: 128 bytes leftover after parsing attributes in process `syz.2.827'. [ 232.475370][T10256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.827'. [ 232.576694][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'. [ 232.633066][T10257] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 232.656595][T10257] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 233.241273][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'. [ 233.267164][T10268] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 233.270978][T10268] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 233.891396][T10280] netlink: 'syz.1.835': attribute type 2 has an invalid length. [ 234.451797][T10284] netlink: 'syz.2.836': attribute type 2 has an invalid length. [ 234.454213][T10284] __nla_validate_parse: 2 callbacks suppressed [ 234.454220][T10284] netlink: 244 bytes leftover after parsing attributes in process `syz.2.836'. [ 235.005833][T10290] netlink: 32 bytes leftover after parsing attributes in process `syz.2.836'. [ 235.409967][T10297] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 235.413832][T10297] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 235.438264][T10299] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.278553][T10324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.842'. [ 236.320343][T10326] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 236.388118][T10330] netlink: 128 bytes leftover after parsing attributes in process `syz.3.843'. [ 236.390914][T10330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.843'. [ 237.275020][T10359] netlink: 'syz.3.847': attribute type 2 has an invalid length. [ 237.277473][T10359] netlink: 244 bytes leftover after parsing attributes in process `syz.3.847'. [ 238.078631][T10375] ieee802154 phy0 wpan0: encryption failed: -22 [ 239.014351][T10389] netlink: 'syz.2.855': attribute type 2 has an invalid length. [ 239.016826][T10389] netlink: 244 bytes leftover after parsing attributes in process `syz.2.855'. [ 239.499329][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.854'. [ 239.538227][T10392] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 239.541380][T10392] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 239.549302][T10391] netlink: 32 bytes leftover after parsing attributes in process `syz.2.855'. [ 239.575843][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 239.590288][T10397] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 239.593072][T10397] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 240.416276][T10412] netlink: 'syz.2.861': attribute type 2 has an invalid length. [ 240.419426][T10412] netlink: 244 bytes leftover after parsing attributes in process `syz.2.861'. [ 240.831892][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.863'. [ 241.311859][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'. [ 241.432067][T10428] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 241.434934][T10428] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 241.464376][T10430] netlink: 'syz.0.865': attribute type 2 has an invalid length. [ 241.467668][T10430] netlink: 244 bytes leftover after parsing attributes in process `syz.0.865'. [ 241.669423][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 241.687650][T10435] netlink: 32 bytes leftover after parsing attributes in process `syz.0.865'. [ 241.702129][T10434] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 241.704981][T10434] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 242.049389][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.867'. [ 242.109834][T10440] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 242.112587][T10440] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 242.617598][T10455] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 242.623048][T10455] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 242.913259][T10460] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 242.916067][T10460] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 242.964714][T10462] netlink: 'syz.2.874': attribute type 2 has an invalid length. [ 244.237055][T10488] netlink: 'syz.3.881': attribute type 2 has an invalid length. [ 244.243696][T10484] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 244.265337][T10484] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 244.269769][T10484] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 244.273614][T10484] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 244.277503][T10484] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 244.281179][T10484] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 244.284868][T10484] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 244.289053][T10484] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 244.293030][T10484] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 244.296963][T10484] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 244.738173][T10499] __nla_validate_parse: 5 callbacks suppressed [ 244.738184][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 244.820390][T10502] netlink: 32 bytes leftover after parsing attributes in process `syz.3.881'. [ 245.491732][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 245.503503][T10513] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 245.506299][T10513] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 245.922146][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'. [ 245.958080][T10518] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 245.961328][T10518] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 247.343623][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 247.574248][T10570] netlink: 'syz.0.894': attribute type 2 has an invalid length. [ 247.576667][T10570] netlink: 244 bytes leftover after parsing attributes in process `syz.0.894'. [ 247.607088][T10571] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 247.610581][T10571] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 247.714053][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'. [ 247.826378][T10577] netlink: 32 bytes leftover after parsing attributes in process `syz.0.894'. [ 248.286563][T10585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 248.306077][T10585] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 248.309005][T10585] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 248.557185][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.898'. [ 248.607291][T10589] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 248.615576][T10589] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 248.808350][T10598] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 248.811131][T10598] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 250.881041][T10622] __nla_validate_parse: 1 callbacks suppressed [ 250.881051][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.907'. [ 250.890602][T10622] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 250.893456][T10622] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 251.176967][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 251.201124][T10636] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 251.203914][T10636] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 251.559222][T10643] netlink: 'syz.0.913': attribute type 2 has an invalid length. [ 251.561787][T10643] netlink: 244 bytes leftover after parsing attributes in process `syz.0.913'. [ 252.283497][T10654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.913'. [ 252.359823][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.915'. [ 252.372858][T10655] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 252.376529][T10655] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 252.594991][T10661] netlink: 128 bytes leftover after parsing attributes in process `syz.0.917'. [ 252.597799][T10661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.917'. [ 253.662528][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 253.954519][T10690] netlink: 'syz.3.925': attribute type 2 has an invalid length. [ 253.957810][T10690] netlink: 244 bytes leftover after parsing attributes in process `syz.3.925'. [ 254.586889][T10698] netlink: 32 bytes leftover after parsing attributes in process `syz.3.925'. [ 255.240536][T10720] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 255.244046][T10720] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 255.250764][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.253147][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.871564][T10739] __nla_validate_parse: 1 callbacks suppressed [ 256.871574][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 256.894881][T10739] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 256.897699][T10739] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 256.976407][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'. [ 256.999269][T10742] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 257.003325][T10742] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 257.092200][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.936'. [ 257.206772][T10744] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 257.212206][T10744] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 257.297559][T10748] netlink: 'syz.2.938': attribute type 2 has an invalid length. [ 257.300231][T10748] netlink: 244 bytes leftover after parsing attributes in process `syz.2.938'. [ 257.683760][T10753] netlink: 32 bytes leftover after parsing attributes in process `syz.2.938'. [ 258.271621][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.942'. [ 258.294104][T10767] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 258.296880][T10767] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 258.350370][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'. [ 258.912723][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 258.935792][T10779] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 258.938740][T10779] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 258.942778][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 258.970526][T10781] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 258.978018][T10781] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 259.802448][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 259.802689][T10800] netlink: 'syz.0.952': attribute type 2 has an invalid length. [ 259.823231][T10798] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 259.826167][T10798] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 260.736768][T10817] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 260.742518][T10817] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 260.873956][T10821] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 260.876736][T10821] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 261.292417][T10832] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 261.295180][T10832] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 261.578596][T10835] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 261.581269][T10835] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 261.806288][T10840] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 261.809151][T10840] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 262.224542][T10848] netlink: 'syz.0.965': attribute type 2 has an invalid length. [ 262.227515][T10848] __nla_validate_parse: 9 callbacks suppressed [ 262.227524][T10848] netlink: 244 bytes leftover after parsing attributes in process `syz.0.965'. [ 262.320884][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 262.342807][T10850] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 262.345564][T10850] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 262.434849][T10854] netlink: 32 bytes leftover after parsing attributes in process `syz.0.965'. [ 262.520888][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 262.526472][T10857] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 262.549552][T10857] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 262.807206][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.970'. [ 262.821804][T10865] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.828418][T10865] netlink: 68 bytes leftover after parsing attributes in process `syz.1.969'. [ 263.263038][T10864] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 263.265802][T10864] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 263.530531][T10897] netlink: 128 bytes leftover after parsing attributes in process `syz.3.974'. [ 263.533428][T10897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.974'. [ 263.666391][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 263.719144][T10900] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 263.729100][T10900] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 264.640010][T10943] netlink: 'syz.2.980': attribute type 2 has an invalid length. [ 264.642497][T10943] netlink: 244 bytes leftover after parsing attributes in process `syz.2.980'. [ 266.605231][T10996] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 266.610748][T10996] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 266.637863][T10998] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 266.641157][T10998] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 266.920828][T11006] create_pit_timer: 11 callbacks suppressed [ 266.920838][T11006] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 266.943289][T11006] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 266.946822][T11006] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 266.950958][T11006] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 266.955137][T11006] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 266.972559][T11006] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 266.984377][T11006] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 266.995996][T11006] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 267.003394][T11006] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 267.013139][T11006] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 267.027954][ T6000] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 267.191301][ T6000] usb 6-1: Using ep0 maxpacket: 16 [ 267.194167][ T6000] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.197349][ T6000] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 267.201945][ T6000] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 267.204846][ T6000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.207361][ T6000] usb 6-1: Product: syz [ 267.208753][ T6000] usb 6-1: Manufacturer: syz [ 267.210243][ T6000] usb 6-1: SerialNumber: syz [ 267.212995][ T6000] usb 6-1: config 0 descriptor?? [ 267.351206][T11033] __nla_validate_parse: 5 callbacks suppressed [ 267.351217][T11033] netlink: 128 bytes leftover after parsing attributes in process `syz.2.996'. [ 267.356144][T11033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.996'. [ 268.023553][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 268.066204][T11040] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 268.069054][T11040] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 268.142679][T11035] vivid-007: ================= START STATUS ================= [ 268.145094][T11035] vivid-007: Enable Output Cropping: true [ 268.146928][T11035] vivid-007: Enable Output Composing: true [ 268.150166][T11035] vivid-007: Enable Output Scaler: true [ 268.151923][T11035] vivid-007: Tx RGB Quantization Range: Automatic [ 268.158674][T11035] vivid-007: Transmit Mode: HDMI [ 268.160272][T11035] vivid-007: Hotplug Present: 0x00000000 [ 268.162050][T11035] vivid-007: RxSense Present: 0x00000000 [ 268.163821][T11035] vivid-007: EDID Present: 0x00000000 [ 268.165600][T11035] vivid-007: ================== END STATUS ================== [ 268.852597][T11053] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1000'. [ 268.855440][T11053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1000'. [ 269.195595][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 269.914042][T11099] netlink: 'syz.3.1004': attribute type 2 has an invalid length. [ 269.916996][T11099] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1004'. [ 269.963458][ T834] usb 6-1: USB disconnect, device number 4 [ 270.807998][ T6004] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 270.967981][ T6004] usb 5-1: Using ep0 maxpacket: 16 [ 270.970851][ T6004] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.975087][ T6004] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 270.981267][ T6004] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 270.984112][ T6004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.986626][ T6004] usb 5-1: Product: syz [ 270.988773][ T6004] usb 5-1: Manufacturer: syz [ 270.990263][ T6004] usb 5-1: SerialNumber: syz [ 270.994225][ T6004] usb 5-1: config 0 descriptor?? [ 272.046860][T11136] vivid-007: ================= START STATUS ================= [ 272.109011][T11136] vivid-007: Enable Output Cropping: true [ 272.110906][T11136] vivid-007: Enable Output Composing: true [ 272.112802][T11136] vivid-007: Enable Output Scaler: true [ 272.116554][T11136] vivid-007: Tx RGB Quantization Range: Automatic [ 272.156400][T11136] vivid-007: Transmit Mode: HDMI [ 272.213076][T11136] vivid-007: Hotplug Present: 0x00000000 [ 272.215223][T11136] vivid-007: RxSense Present: 0x00000000 [ 272.217120][T11136] vivid-007: EDID Present: 0x00000000 [ 272.224542][T11136] vivid-007: ================== END STATUS ================== [ 272.795763][T11156] netlink: 'syz.3.1016': attribute type 2 has an invalid length. [ 272.799696][T11156] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1016'. [ 273.341900][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'. [ 273.350930][T11161] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 273.354827][T11161] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 273.503760][ T6000] usb 5-1: USB disconnect, device number 4 [ 273.591878][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1018'. [ 273.602590][T11163] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 273.606111][T11163] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 273.621430][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1019'. [ 273.656504][T11165] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 273.660414][T11165] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 273.954178][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'. [ 274.334051][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1025'. [ 274.348530][T11185] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 274.351373][T11185] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 274.458978][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1026'. [ 274.476936][T11187] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 274.479913][T11187] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 275.791900][T11210] netlink: 'syz.0.1033': attribute type 2 has an invalid length. [ 275.794351][T11210] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1033'. [ 276.019028][T11219] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1033'. [ 276.631432][ T65] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 276.799379][ T65] usb 7-1: Using ep0 maxpacket: 16 [ 276.802532][ T65] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.805567][ T65] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 276.810676][ T65] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 276.813479][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.816067][ T65] usb 7-1: Product: syz [ 276.817426][ T65] usb 7-1: Manufacturer: syz [ 276.820479][ T65] usb 7-1: SerialNumber: syz [ 276.823335][ T65] usb 7-1: config 0 descriptor?? [ 277.198590][T11245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 277.332678][T11249] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 277.335488][T11249] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 277.417285][T11252] netlink: 'syz.3.1038': attribute type 2 has an invalid length. [ 277.461696][T11244] vivid-007: ================= START STATUS ================= [ 277.465105][T11244] vivid-007: Enable Output Cropping: true [ 277.466966][T11244] vivid-007: Enable Output Composing: true [ 277.474767][T11244] vivid-007: Enable Output Scaler: true [ 277.476622][T11244] vivid-007: Tx RGB Quantization Range: Automatic [ 277.481991][T11244] vivid-007: Transmit Mode: HDMI [ 277.484947][T11244] vivid-007: Hotplug Present: 0x00000000 [ 277.492167][T11244] vivid-007: RxSense Present: 0x00000000 [ 277.501105][T11244] vivid-007: EDID Present: 0x00000000 [ 277.502965][T11244] vivid-007: ================== END STATUS ================== [ 278.005312][T11265] __nla_validate_parse: 2 callbacks suppressed [ 278.005322][T11265] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1039'. [ 278.232445][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1040'. [ 278.249734][T11272] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 278.255981][T11272] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 279.140842][T11284] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1043'. [ 279.144165][T11284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1043'. [ 279.448518][ T64] usb 7-1: USB disconnect, device number 3 [ 279.583631][T11289] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1044'. [ 279.666868][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1045'. [ 279.716599][T11290] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 279.724326][T11290] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 279.756137][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1046'. [ 279.764724][T11293] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 279.768378][T11293] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 280.192220][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1047'. [ 280.211368][T11297] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 280.214217][T11297] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 280.428623][T11305] netlink: 'syz.2.1050': attribute type 2 has an invalid length. [ 280.431677][T11305] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1050'. [ 280.451254][T11302] create_pit_timer: 25 callbacks suppressed [ 280.451263][T11302] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 280.645263][T11310] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 280.698587][T11313] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1050'. [ 280.902322][T11318] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 280.905067][T11318] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 281.033421][T11324] netlink: 'syz.0.1055': attribute type 2 has an invalid length. [ 281.097993][ T6004] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 281.258006][ T6004] usb 6-1: Using ep0 maxpacket: 16 [ 281.264319][ T6004] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.270351][ T6004] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 281.277038][ T6004] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 281.280219][ T6004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.284680][ T6004] usb 6-1: Product: syz [ 281.287280][ T6004] usb 6-1: Manufacturer: syz [ 281.290682][ T6004] usb 6-1: SerialNumber: syz [ 281.296953][ T6004] usb 6-1: config 0 descriptor?? [ 281.531643][T11334] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 281.534753][T11334] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 281.806152][T11336] vivid-007: ================= START STATUS ================= [ 281.808774][T11336] vivid-007: Enable Output Cropping: true [ 281.814261][T11336] vivid-007: Enable Output Composing: true [ 281.816112][T11336] vivid-007: Enable Output Scaler: true [ 281.817867][T11336] vivid-007: Tx RGB Quantization Range: Automatic [ 281.821336][T11336] vivid-007: Transmit Mode: HDMI [ 281.824096][T11336] vivid-007: Hotplug Present: 0x00000000 [ 281.825847][T11336] vivid-007: RxSense Present: 0x00000000 [ 281.827618][T11336] vivid-007: EDID Present: 0x00000000 [ 281.833836][T11336] vivid-007: ================== END STATUS ================== [ 283.089344][T11346] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 283.092143][T11346] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 283.104191][T11347] __nla_validate_parse: 7 callbacks suppressed [ 283.110785][T11347] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1061'. [ 283.117443][T11347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1061'. [ 283.869080][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'. [ 283.924949][ T34] usb 6-1: USB disconnect, device number 5 [ 283.928544][T11355] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 283.931495][T11355] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 283.932522][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1063'. [ 283.995711][T11357] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 284.003500][T11357] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 284.111530][T11361] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1065'. [ 284.114526][T11361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1065'. [ 284.144585][T11363] netlink: 'syz.3.1066': attribute type 2 has an invalid length. [ 284.147086][T11363] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1066'. [ 284.331314][T11366] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 284.362241][T11369] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1066'. [ 284.703225][T11373] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1068'. [ 284.706609][T11373] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1068'. [ 284.998166][ T78] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 285.158004][ T78] usb 5-1: Using ep0 maxpacket: 16 [ 285.162139][ T78] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.165787][ T78] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 285.173975][ T78] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 285.177459][ T78] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.181880][ T78] usb 5-1: Product: syz [ 285.183337][ T78] usb 5-1: Manufacturer: syz [ 285.184881][ T78] usb 5-1: SerialNumber: syz [ 285.191805][ T78] usb 5-1: config 0 descriptor?? [ 285.194612][T11390] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 285.539492][T11398] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 285.762673][T11404] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 285.766094][T11404] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 285.861364][T11396] vivid-007: ================= START STATUS ================= [ 285.864144][T11396] vivid-007: Enable Output Cropping: true [ 285.866117][T11396] vivid-007: Enable Output Composing: true [ 285.868272][T11396] vivid-007: Enable Output Scaler: true [ 285.870452][T11396] vivid-007: Tx RGB Quantization Range: Automatic [ 285.872702][T11396] vivid-007: Transmit Mode: HDMI [ 285.874324][T11396] vivid-007: Hotplug Present: 0x00000000 [ 285.876371][T11396] vivid-007: RxSense Present: 0x00000000 [ 285.881117][T11396] vivid-007: EDID Present: 0x00000000 [ 285.891622][T11396] vivid-007: ================== END STATUS ================== [ 286.970958][T11415] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 286.974691][T11415] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 287.050047][T11420] netlink: 'syz.1.1080': attribute type 2 has an invalid length. [ 287.854636][ T78] usb 5-1: USB disconnect, device number 5 [ 288.108824][T11439] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 288.111578][T11439] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 288.762462][T11452] __nla_validate_parse: 7 callbacks suppressed [ 288.762480][T11452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1088'. [ 288.824470][T11452] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 288.828572][T11452] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 289.041470][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1090'. [ 289.103196][T11457] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 289.106086][T11457] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 289.548746][T11471] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 289.705870][T11474] netlink: 'syz.1.1093': attribute type 2 has an invalid length. [ 289.710140][T11474] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1093'. [ 289.966534][T11479] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1093'. [ 290.213583][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1095'. [ 290.223071][T11485] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 290.225833][T11485] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 290.564320][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1097'. [ 290.895344][T11502] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.905904][T11502] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1100'. [ 291.699171][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 291.766750][T11542] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 291.786688][T11542] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 292.295496][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1108'. [ 292.324757][T11563] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 292.328428][T11563] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 292.569494][T11570] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1110'. [ 293.033876][T11575] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 293.038461][T11575] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 293.112751][T11582] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 293.115441][T11582] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 294.484938][T11619] __nla_validate_parse: 4 callbacks suppressed [ 294.485053][T11619] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1120'. [ 294.611136][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 294.671462][T11622] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 294.674335][T11622] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 296.014192][T11663] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1128'. [ 296.017003][T11663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1128'. [ 297.755677][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'. [ 298.408989][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1142'. [ 298.424198][T11758] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 298.427823][T11758] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 298.534860][T11760] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 298.554504][T11760] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 298.559023][T11760] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 298.562762][T11760] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 298.566308][T11760] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 298.570133][T11760] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 298.574003][T11760] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 298.577876][T11760] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 298.581599][T11760] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 298.585487][T11760] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 300.118040][ T1453] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 300.270611][ T1453] usb 5-1: Using ep0 maxpacket: 16 [ 300.276960][ T1453] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.280306][ T1453] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 300.287515][ T1453] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 300.291042][ T1453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.293534][ T1453] usb 5-1: Product: syz [ 300.294884][ T1453] usb 5-1: Manufacturer: syz [ 300.301786][ T1453] usb 5-1: SerialNumber: syz [ 300.316135][ T1453] usb 5-1: config 0 descriptor?? [ 300.339795][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 300.345513][T11810] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 300.348310][T11810] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 300.779395][T11819] vivid-007: ================= START STATUS ================= [ 300.782047][T11819] vivid-007: Enable Output Cropping: true [ 300.783944][T11819] vivid-007: Enable Output Composing: true [ 300.785885][T11819] vivid-007: Enable Output Scaler: true [ 300.787693][T11819] vivid-007: Tx RGB Quantization Range: Automatic [ 300.791405][T11819] vivid-007: Transmit Mode: HDMI [ 300.793084][T11819] vivid-007: Hotplug Present: 0x00000000 [ 300.795036][T11819] vivid-007: RxSense Present: 0x00000000 [ 300.796864][T11819] vivid-007: EDID Present: 0x00000000 [ 300.800205][T11819] vivid-007: ================== END STATUS ================== [ 301.184599][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'. [ 301.246904][T11837] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 301.252223][T11837] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 302.880014][ T64] usb 5-1: USB disconnect, device number 6 [ 305.640719][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'. [ 306.223912][T11945] create_pit_timer: 9 callbacks suppressed [ 306.223921][T11945] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 306.249424][T11945] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 306.252944][T11945] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 306.257122][T11945] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 306.262946][T11945] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 306.267073][T11945] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 306.271651][T11945] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 306.276041][T11945] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 306.281121][T11945] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 306.285640][T11945] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 306.794178][ T1453] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 306.987987][ T1453] usb 7-1: Using ep0 maxpacket: 16 [ 306.992299][ T1453] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.995438][ T1453] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 307.001844][ T1453] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 307.004656][ T1453] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.007127][ T1453] usb 7-1: Product: syz [ 307.010141][ T1453] usb 7-1: Manufacturer: syz [ 307.011730][ T1453] usb 7-1: SerialNumber: syz [ 307.019856][ T1453] usb 7-1: config 0 descriptor?? [ 307.127086][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1176'. [ 307.135055][T11972] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 307.137819][T11972] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 307.437143][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1178'. [ 307.448983][T11975] vivid-007: ================= START STATUS ================= [ 307.452035][T11975] vivid-007: Enable Output Cropping: true [ 307.453959][T11975] vivid-007: Enable Output Composing: true [ 307.455720][T11975] vivid-007: Enable Output Scaler: true [ 307.457388][T11975] vivid-007: Tx RGB Quantization Range: Automatic [ 307.459821][T11975] vivid-007: Transmit Mode: HDMI [ 307.461411][T11975] vivid-007: Hotplug Present: 0x00000000 [ 307.463388][T11975] vivid-007: RxSense Present: 0x00000000 [ 307.465609][T11975] vivid-007: EDID Present: 0x00000000 [ 307.467778][T11975] vivid-007: ================== END STATUS ================== [ 307.514032][T11981] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 307.516770][T11981] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 309.581562][ T834] usb 7-1: USB disconnect, device number 4 [ 309.718081][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'. [ 309.741116][T12020] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 309.744014][T12020] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 309.937732][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'. [ 309.949443][T12024] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 309.952365][T12024] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 310.431256][T12036] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 310.434035][T12036] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 311.802574][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'. [ 311.812753][T12064] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 311.815573][T12064] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 312.018186][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1201'. [ 313.580961][T12123] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1207'. [ 313.929528][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 314.060763][T12134] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1209'. [ 314.064008][T12134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1209'. [ 314.627025][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1213'. [ 314.640904][T12159] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 314.644412][T12159] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 315.479345][T12187] create_pit_timer: 6 callbacks suppressed [ 315.479355][T12187] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 316.611273][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.613412][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.616396][ T1415] ================================================================== [ 316.618904][ T1415] BUG: KASAN: slab-use-after-free in tty_write_room+0x7d/0x90 [ 316.621168][ T1415] Read of size 8 at addr ffff888023b99020 by task aoe_tx0/1415 [ 316.624547][ T1415] [ 316.625945][ T1415] CPU: 3 UID: 0 PID: 1415 Comm: aoe_tx0 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 316.625959][ T1415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 316.625965][ T1415] Call Trace: [ 316.625973][ T1415] [ 316.625977][ T1415] dump_stack_lvl+0x116/0x1f0 [ 316.625998][ T1415] print_report+0xc3/0x670 [ 316.626011][ T1415] ? __virt_addr_valid+0x5e/0x590 [ 316.626025][ T1415] ? __phys_addr+0xc6/0x150 [ 316.626037][ T1415] ? tty_write_room+0x7d/0x90 [ 316.626049][ T1415] kasan_report+0xe0/0x110 [ 316.626061][ T1415] ? tty_write_room+0x7d/0x90 [ 316.626074][ T1415] tty_write_room+0x7d/0x90 [ 316.626086][ T1415] handle_tx+0x14f/0x630 [ 316.626101][ T1415] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 316.626116][ T1415] dev_hard_start_xmit+0x93/0x740 [ 316.626128][ T1415] __dev_queue_xmit+0x7eb/0x43e0 [ 316.626139][ T1415] ? lockdep_hardirqs_on+0x7c/0x110 [ 316.626153][ T1415] ? rcu_is_watching+0x12/0xc0 [ 316.626163][ T1415] ? __pfx___dev_queue_xmit+0x10/0x10 [ 316.626173][ T1415] ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0 [ 316.626188][ T1415] ? __lock_acquire+0xaa4/0x1ba0 [ 316.626201][ T1415] ? __lock_acquire+0xaa4/0x1ba0 [ 316.626215][ T1415] ? do_raw_spin_lock+0x12c/0x2b0 [ 316.626224][ T1415] ? find_held_lock+0x2b/0x80 [ 316.626234][ T1415] ? skb_dequeue+0x126/0x180 [ 316.626243][ T1415] ? find_held_lock+0x2b/0x80 [ 316.626253][ T1415] ? rcu_is_watching+0x12/0xc0 [ 316.626263][ T1415] tx+0xcc/0x190 [ 316.626277][ T1415] ? __pfx_tx+0x10/0x10 [ 316.626290][ T1415] kthread+0x1e1/0x3e0 [ 316.626303][ T1415] ? find_held_lock+0x2b/0x80 [ 316.626312][ T1415] ? __pfx_kthread+0x10/0x10 [ 316.626324][ T1415] ? __pfx_default_wake_function+0x10/0x10 [ 316.626335][ T1415] ? lockdep_hardirqs_on+0x7c/0x110 [ 316.626348][ T1415] ? __kthread_parkme+0x19e/0x250 [ 316.626360][ T1415] ? __pfx_kthread+0x10/0x10 [ 316.626372][ T1415] kthread+0x3c2/0x780 [ 316.626387][ T1415] ? __pfx_kthread+0x10/0x10 [ 316.626400][ T1415] ? __pfx_kthread+0x10/0x10 [ 316.626413][ T1415] ? __pfx_kthread+0x10/0x10 [ 316.626427][ T1415] ? __pfx_kthread+0x10/0x10 [ 316.626440][ T1415] ? rcu_is_watching+0x12/0xc0 [ 316.626449][ T1415] ? __pfx_kthread+0x10/0x10 [ 316.626463][ T1415] ret_from_fork+0x45/0x80 [ 316.626472][ T1415] ? __pfx_kthread+0x10/0x10 [ 316.626486][ T1415] ret_from_fork_asm+0x1a/0x30 [ 316.626506][ T1415] [ 316.626510][ T1415] [ 316.700909][ T1415] Allocated by task 12183: [ 316.702445][ T1415] kasan_save_stack+0x33/0x60 [ 316.703930][ T1415] kasan_save_track+0x14/0x30 [ 316.705373][ T1415] __kasan_kmalloc+0xaa/0xb0 [ 316.706946][ T1415] alloc_tty_struct+0x96/0x8c0 [ 316.708587][ T1415] tty_init_dev.part.0+0x1e/0x500 [ 316.710240][ T1415] tty_init_dev+0x60/0x80 [ 316.711608][ T1415] ptmx_open+0x10d/0x360 [ 316.712954][ T1415] chrdev_open+0x231/0x6a0 [ 316.714386][ T1415] do_dentry_open+0x741/0x1c10 [ 316.715895][ T1415] vfs_open+0x82/0x3f0 [ 316.717245][ T1415] path_openat+0x1e5e/0x2d40 [ 316.718821][ T1415] do_filp_open+0x20b/0x470 [ 316.720598][ T1415] do_sys_openat2+0x11b/0x1d0 [ 316.722455][ T1415] __ia32_compat_sys_openat+0x16d/0x210 [ 316.724584][ T1415] __do_fast_syscall_32+0x73/0x120 [ 316.726213][ T1415] do_fast_syscall_32+0x32/0x80 [ 316.727665][ T1415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.729539][ T1415] [ 316.730331][ T1415] Freed by task 58: [ 316.731554][ T1415] kasan_save_stack+0x33/0x60 [ 316.733033][ T1415] kasan_save_track+0x14/0x30 [ 316.734512][ T1415] kasan_save_free_info+0x3b/0x60 [ 316.736088][ T1415] __kasan_slab_free+0x51/0x70 [ 316.737610][ T1415] kfree+0x2b6/0x4d0 [ 316.738798][ T1415] process_one_work+0x9cc/0x1b70 [ 316.740304][ T1415] worker_thread+0x6c8/0xf10 [ 316.741747][ T1415] kthread+0x3c2/0x780 [ 316.743198][ T1415] ret_from_fork+0x45/0x80 [ 316.744737][ T1415] ret_from_fork_asm+0x1a/0x30 [ 316.746259][ T1415] [ 316.747051][ T1415] Last potentially related work creation: [ 316.748911][ T1415] kasan_save_stack+0x33/0x60 [ 316.750726][ T1415] kasan_record_aux_stack+0xb8/0xd0 [ 316.752483][ T1415] insert_work+0x36/0x230 [ 316.754007][ T1415] __queue_work+0x97e/0x10f0 [ 316.755496][ T1415] queue_work_on+0x1a4/0x1f0 [ 316.756957][ T1415] release_tty+0x4de/0x5d0 [ 316.758626][ T1415] tty_release_struct+0xb7/0xe0 [ 316.760169][ T1415] tty_release+0xe2d/0x1430 [ 316.761623][ T1415] __fput+0x3ff/0xb70 [ 316.762905][ T1415] task_work_run+0x14d/0x240 [ 316.764372][ T1415] do_exit+0xafb/0x2c30 [ 316.765697][ T1415] do_group_exit+0xd3/0x2a0 [ 316.767131][ T1415] get_signal+0x2673/0x26d0 [ 316.768557][ T1415] arch_do_signal_or_restart+0x8f/0x7a0 [ 316.770290][ T1415] irqentry_exit_to_user_mode+0x13f/0x280 [ 316.772064][ T1415] asm_exc_page_fault+0x26/0x30 [ 316.773591][ T1415] [ 316.774356][ T1415] The buggy address belongs to the object at ffff888023b99000 [ 316.774356][ T1415] which belongs to the cache kmalloc-cg-2k of size 2048 [ 316.778725][ T1415] The buggy address is located 32 bytes inside of [ 316.778725][ T1415] freed 2048-byte region [ffff888023b99000, ffff888023b99800) [ 316.782920][ T1415] [ 316.783693][ T1415] The buggy address belongs to the physical page: [ 316.785709][ T1415] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23b98 [ 316.788407][ T1415] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 316.791025][ T1415] memcg:ffff888026200081 [ 316.792361][ T1415] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 316.794830][ T1415] page_type: f5(slab) [ 316.796092][ T1415] raw: 00fff00000000040 ffff88801b44c140 0000000000000000 dead000000000001 [ 316.798766][ T1415] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888026200081 [ 316.801409][ T1415] head: 00fff00000000040 ffff88801b44c140 0000000000000000 dead000000000001 [ 316.804101][ T1415] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888026200081 [ 316.806745][ T1415] head: 00fff00000000003 ffffea00008ee601 00000000ffffffff 00000000ffffffff [ 316.809380][ T1415] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 316.812052][ T1415] page dumped because: kasan: bad access detected [ 316.814030][ T1415] page_owner tracks the page as allocated [ 316.815797][ T1415] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11900, tgid 11892 (syz.3.1163), ts 304309980538, free_ts 304016547211 [ 316.822324][ T1415] post_alloc_hook+0x181/0x1b0 [ 316.823832][ T1415] get_page_from_freelist+0x135c/0x3920 [ 316.825570][ T1415] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 316.827434][ T1415] alloc_pages_mpol+0x1fb/0x550 [ 316.828964][ T1415] new_slab+0x244/0x340 [ 316.830277][ T1415] ___slab_alloc+0xd9c/0x1940 [ 316.831749][ T1415] __slab_alloc.constprop.0+0x56/0xb0 [ 316.833421][ T1415] __kmalloc_cache_noprof+0xfb/0x3e0 [ 316.835080][ T1415] ipv6_add_dev+0x1c9/0x15f0 [ 316.836545][ T1415] addrconf_notify+0x53e/0x19e0 [ 316.838079][ T1415] notifier_call_chain+0xb9/0x410 [ 316.839658][ T1415] call_netdevice_notifiers_info+0xbe/0x140 [ 316.841507][ T1415] register_netdevice+0x182e/0x2270 [ 316.843152][ T1415] register_netdev+0x34/0x50 [ 316.844605][ T1415] sit_init_net+0x286/0x630 [ 316.846045][ T1415] ops_init+0x1df/0x5f0 [ 316.847360][ T1415] page last free pid 11896 tgid 11896 stack trace: [ 316.849362][ T1415] __free_frozen_pages+0x69d/0xff0 [ 316.851019][ T1415] qlist_free_all+0x4e/0x120 [ 316.852754][ T1415] kasan_quarantine_reduce+0x195/0x1e0 [ 316.854492][ T1415] __kasan_slab_alloc+0x69/0x90 [ 316.856050][ T1415] __kmalloc_noprof+0x1d4/0x510 [ 316.857573][ T1415] load_elf_phdrs+0x102/0x210 [ 316.859073][ T1415] load_elf_binary+0x1fa/0x4f80 [ 316.860718][ T1415] bprm_execve+0x8c0/0x1650 [ 316.862418][ T1415] do_execveat_common.isra.0+0x4a5/0x610 [ 316.864463][ T1415] __x64_sys_execve+0x8e/0xb0 [ 316.866226][ T1415] do_syscall_64+0xcd/0x230 [ 316.867967][ T1415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.870060][ T1415] [ 316.870826][ T1415] Memory state around the buggy address: [ 316.872571][ T1415] ffff888023b98f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 316.875081][ T1415] ffff888023b98f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 316.875089][ T1415] >ffff888023b99000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.875094][ T1415] ^ [ 316.875099][ T1415] ffff888023b99080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.875106][ T1415] ffff888023b99100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.875111][ T1415] ================================================================== [ 316.875215][ T1415] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 316.875225][ T1415] CPU: 3 UID: 0 PID: 1415 Comm: aoe_tx0 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 316.875237][ T1415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 316.875244][ T1415] Call Trace: [ 316.875249][ T1415] [ 316.875253][ T1415] dump_stack_lvl+0x3d/0x1f0 [ 316.875269][ T1415] panic+0x71c/0x800 [ 316.875284][ T1415] ? __pfx_panic+0x10/0x10 [ 316.875298][ T1415] ? mark_held_locks+0x49/0x80 [ 316.875312][ T1415] ? tty_write_room+0x7d/0x90 [ 316.875326][ T1415] ? check_panic_on_warn+0x1f/0xb0 [ 316.875341][ T1415] ? tty_write_room+0x7d/0x90 [ 316.875352][ T1415] check_panic_on_warn+0xab/0xb0 [ 316.875368][ T1415] end_report+0x107/0x170 [ 316.875380][ T1415] kasan_report+0xee/0x110 [ 316.875393][ T1415] ? tty_write_room+0x7d/0x90 [ 316.875406][ T1415] tty_write_room+0x7d/0x90 [ 316.875418][ T1415] handle_tx+0x14f/0x630 [ 316.875433][ T1415] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 316.875447][ T1415] dev_hard_start_xmit+0x93/0x740 [ 316.875460][ T1415] __dev_queue_xmit+0x7eb/0x43e0 [ 316.875472][ T1415] ? lockdep_hardirqs_on+0x7c/0x110 [ 316.875485][ T1415] ? rcu_is_watching+0x12/0xc0 [ 316.875496][ T1415] ? __pfx___dev_queue_xmit+0x10/0x10 [ 316.875506][ T1415] ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0 [ 316.875521][ T1415] ? __lock_acquire+0xaa4/0x1ba0 [ 316.875534][ T1415] ? __lock_acquire+0xaa4/0x1ba0 [ 316.875548][ T1415] ? do_raw_spin_lock+0x12c/0x2b0 [ 316.875557][ T1415] ? find_held_lock+0x2b/0x80 [ 316.875567][ T1415] ? skb_dequeue+0x126/0x180 [ 316.875577][ T1415] ? find_held_lock+0x2b/0x80 [ 316.875587][ T1415] ? rcu_is_watching+0x12/0xc0 [ 316.875597][ T1415] tx+0xcc/0x190 [ 316.875612][ T1415] ? __pfx_tx+0x10/0x10 [ 316.875625][ T1415] kthread+0x1e1/0x3e0 [ 316.875638][ T1415] ? find_held_lock+0x2b/0x80 [ 316.875647][ T1415] ? __pfx_kthread+0x10/0x10 [ 316.875660][ T1415] ? __pfx_default_wake_function+0x10/0x10 [ 316.875671][ T1415] ? lockdep_hardirqs_on+0x7c/0x110 [ 316.875684][ T1415] ? __kthread_parkme+0x19e/0x250 [ 316.875697][ T1415] ? __pfx_kthread+0x10/0x10 [ 316.875709][ T1415] kthread+0x3c2/0x780 [ 316.875724][ T1415] ? __pfx_kthread+0x10/0x10 [ 316.875737][ T1415] ? __pfx_kthread+0x10/0x10 [ 316.875751][ T1415] ? __pfx_kthread+0x10/0x10 [ 316.875765][ T1415] ? __pfx_kthread+0x10/0x10 [ 316.875778][ T1415] ? rcu_is_watching+0x12/0xc0 [ 316.875788][ T1415] ? __pfx_kthread+0x10/0x10 [ 316.875802][ T1415] ret_from_fork+0x45/0x80 [ 316.875812][ T1415] ? __pfx_kthread+0x10/0x10 [ 316.875826][ T1415] ret_from_fork_asm+0x1a/0x30 [ 316.875843][ T1415] [ 316.878362][ T1415] Kernel Offset: disabled VM DIAGNOSIS: 01:47:01 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b53f880 RCX=ffffffff81ae9b89 RDX=ffff8880259d0000 RSI=ffffffff81ae9b63 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900070af938 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed10056a7f11 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88802b23b180 RIP=ffffffff81ae9b65 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977bf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f72337f0 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6be701b71ef684e1 7a6cb174c3f24f72 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfe7bf57f9d074c7 c5e32635b5936aac ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f7bc0d3d49633472 624f7178e48ccc23 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 eadd5d46e1dd89b8 2c5b428a1d90596d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dc1aa6f999a03a9a adac157e3bde9bc0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 53b578c5c870f292 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f80d772fa6fbac0 e56fd75d2ac853de ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 97826b1700000000 48476992f8d5ae2d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 94203889191f214d 9b5db1e53c5cdc64 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7b143a2360c96fde 83f4bfd46b61c577 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=ffffc9000e85fd60 RCX=ffffc9000d005000 RDX=ffff88802500c880 RSI=ffffffff8963e281 RDI=ffffc9000e85fda8 RBP=ffffc9000e85fa90 RSP=ffffc9000e85fa38 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffc9000e85fb70 R14=0000000000000000 R15=000000008002ac00 RIP=ffffffff81baa9d6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978bf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000030613ffc CR3=000000004f8e8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000005d44b5 RBX=0000000000000002 RCX=ffffffff8b6ef3e9 RDX=0000000000000000 RSI=ffffffff8dbe9821 RDI=ffffffff8bf44e00 RBP=ffffed1003b58910 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =ffffed10056865bd R10=ffff88802b432deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801dac4880 R14=ffffffff90866410 R15=0000000000000000 RIP=ffffffff8b6edc7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979bf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000803f4000 CR3=000000006bb28000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0ffe000 Opmask01=000000000000001c Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002075676f008786 8a8984828183883a ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000084 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0f0e0d0c0b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2075676f0087868a 8984828183883a3d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f73657201828800 000000843d736563 61667265746e6900 883d656d616e6669 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 524e584f01828800 00000084004e585e 5c5b4f5849535400 880058505c535b54 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854ade35 RDI=ffffffff9ae0cb80 RBP=ffffffff9ae0cb40 RSP=ffffc900078bf440 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000031343154 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9ae0cb40 R15=ffffffff854addd0 RIP=ffffffff854ade5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097abf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003011eff8 CR3=000000006bb28000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000