last executing test programs: 1m31.720728575s ago: executing program 3 (id=4): write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000000c0)={0xc8, 0xfffffffffffffff5, 0x3, [{{0x3, 0x3, 0xfffffffffffffff8, 0x5, 0x547, 0xc, {0x5, 0x7fffffffffffffff, 0x1000, 0x0, 0x6920, 0x1010, 0x6, 0x6, 0x1, 0x2000, 0x8, 0x0, 0x0, 0xff, 0xff}}, {0x2, 0x45, 0x1c, 0x8, '/dev/dvb/adapter#/frontend#\x00'}}]}, 0xc8) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x7f, 0x2d7, 0x7d, 0x8000000000000000, 0x5, 0x0, 0x9, 0x401, 0x2, 0x2, 0x8d], 0xeeee8000, 0x201e87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10002, 0x1, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m31.483173443s ago: executing program 3 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x21c, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x170, 0x2a8, 0x2a8, 0x170, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x7fffffff, {0x8000}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, 0x0, 0xff, 'vlan0\x00', 'vcan0\x00', {0xff}, {}, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @unspec=@CT0={0x0, 'CT\x00', 0x0, {0x1, 0x3, 0x3, 0x5, 'pptp\x00', {0x9f4}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x1a3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000240)=[{0x3, 0x0, {0x1, 0x70, 0x1}, {0x1, 0x0, 0x4}, 0x1, 0xfd}, {0x0, 0x3, {0x0, 0xf0}, {0x0, 0x1}, 0x0, 0xfe}], 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x41, 0x107, 0xfffffffe, 0x1, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c855}, 0xc000) 1m30.640407119s ago: executing program 3 (id=17): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$igmp(0x2, 0x3, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000240)="aa02b3d08e7f1e7bedd880518790c73788a1284eca25a235163b0a967d5f08b2078003dfbbfe730f7e54d7dc67cb5fdf01a7746decbb94a650b313e6b42e5061fd79d759dfe4448387e3321a09d99287"}) dup3(r2, r1, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000740)=[@request_death], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) 1m30.545081066s ago: executing program 3 (id=18): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) fsopen(0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) chdir(&(0x7f0000000080)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r1, &(0x7f0000000540)=0xffffffffffffffff, 0x74) 1m30.154417385s ago: executing program 3 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x4000, 0x0) mkdirat(r0, &(0x7f00000002c0)='./file1\x00', 0x42) mount$bind(&(0x7f0000000540)='./file1\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x5040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m29.715771517s ago: executing program 3 (id=23): io_uring_setup(0x68f7, &(0x7f00000002c0)={0x0, 0x48c7, 0x80, 0x0, 0x8100016b}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x0, 0x0, 0xb45, 0x1, 0xb, 0x0, 0x3}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000203050000000000000000000a000000efff0540000000000900020000000006000000000900020000000000000000000800034000000006080001"], 0x68}}, 0x8000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x4000002) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m14.685666082s ago: executing program 32 (id=23): io_uring_setup(0x68f7, &(0x7f00000002c0)={0x0, 0x48c7, 0x80, 0x0, 0x8100016b}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x0, 0x0, 0xb45, 0x1, 0xb, 0x0, 0x3}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000203050000000000000000000a000000efff0540000000000900020000000006000000000900020000000000000000000800034000000006080001"], 0x68}}, 0x8000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x4000002) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 52.872787174s ago: executing program 1 (id=226): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x88000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) prlimit64(r1, 0xd, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) socket(0x10, 0x3, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 52.52345768s ago: executing program 1 (id=228): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000003c0)=0x800, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x513000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x1, r3, 0x1, r2}, 0x10) 52.417917958s ago: executing program 1 (id=230): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000001680), 0x2) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) 50.915027608s ago: executing program 1 (id=243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000070000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000800)="000a18000ce0ff0000eb55000000000100aa34745a1945da911324df073fcb7a85a47d87c24ede12c488758814f2a966", 0x30, 0x4000000, &(0x7f0000000380)={0x11, 0x1, r6, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) 50.496546647s ago: executing program 1 (id=240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd22, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xe, 0xb}, {0xc, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x85c}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="000a180000edffffffea55000000", 0xe, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r5, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 50.417823818s ago: executing program 1 (id=242): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2', 0x5) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 35.155723004s ago: executing program 33 (id=242): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2', 0x5) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 6.797650598s ago: executing program 0 (id=468): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000240)) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b455220274344204361707475726527203030303030303030313337343338"], 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 5.453236786s ago: executing program 0 (id=479): sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000050) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4.287384706s ago: executing program 0 (id=487): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) syz_emit_ethernet(0x2e, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.99316344s ago: executing program 4 (id=488): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) request_key(0x0, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffe, 0x3, 0x7f, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="425fce", 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote, 0x6400}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) 3.343091804s ago: executing program 2 (id=491): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 3.189554102s ago: executing program 0 (id=492): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) fadvise64(0xffffffffffffffff, 0xff, 0x0, 0x1) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r2, &(0x7f00000002c0)=@random={'trusted.', 'system.posix_acl_default\x00'}) 3.054405991s ago: executing program 4 (id=493): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) setreuid(0xee01, 0xee01) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r3, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) getpid() 2.701977523s ago: executing program 4 (id=496): sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000050) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.694024506s ago: executing program 5 (id=504): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_gettime(r0, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) setreuid(0x0, 0x0) acct(&(0x7f0000000040)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000140)={{0x77359400}, {r1, r2+60000000}}, &(0x7f0000000180)) 2.411376216s ago: executing program 2 (id=497): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) socket(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) socket$inet6(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB="0790cc1d2ef065"], 0x0) 2.177758527s ago: executing program 5 (id=498): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000080)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) 1.993047502s ago: executing program 0 (id=499): symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x30000, 0x100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r4}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x24000840) close(0x3) 1.933421869s ago: executing program 0 (id=500): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) epoll_wait(r0, &(0x7f0000000240)=[{}], 0x1, 0x404) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_OFF(r3, 0x7004) 1.869654571s ago: executing program 2 (id=501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a540500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000028050380180000800c00018006000100d10300000800034000000001"], 0x57c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 1.809014955s ago: executing program 2 (id=502): setresuid(0x0, 0xee01, 0x0) prctl$PR_SCHED_CORE(0x26, 0x100006, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000040)="a8", 0x1, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) keyctl$set_timeout(0xf, r0, 0xd82f) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 1.704167867s ago: executing program 4 (id=503): socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000940)=0x60, 0x4) openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0x4b9, &(0x7f0000000100)={0x0, 0x0, 0x7fc, 0x1, 0x9e}, &(0x7f0000ff0000), 0x0, 0x0) 1.70139236s ago: executing program 2 (id=505): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r3, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r4, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r5, 0x1) 1.183400519s ago: executing program 5 (id=506): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r1) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x6}}, 0x20) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xef}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x80000005, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x8, 0xac, 0x7d, 0x4}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x10003f4, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 477.444215ms ago: executing program 2 (id=507): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) 477.073544ms ago: executing program 4 (id=508): unshare(0x28000600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0xfe6c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x6101, 0x4) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = eventfd2(0xffff, 0x801) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0xffffff01, 0x2, r4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x1, @host}, 0x10) 468.751814ms ago: executing program 5 (id=515): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000880)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) 419.206132ms ago: executing program 4 (id=509): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0x6f2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 404.278002ms ago: executing program 5 (id=510): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "726b1605e7bab91d", "67a39e9f0f359c798aaa3b97630f25a7", "ae420e9b", "8550f65b20a68537"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) close(r0) 0s ago: executing program 5 (id=511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x6, 0xffe0}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x92, 0x7, 0x4, 0xfffffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:18693' (ED25519) to the list of known hosts. [ 41.267215][ T5728] cgroup: Unknown subsys name 'net' [ 41.392896][ T5728] cgroup: Unknown subsys name 'cpuset' [ 41.396884][ T5728] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.285029][ T5728] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.976085][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.979317][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.983946][ T5759] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.987889][ T5761] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.989473][ T5753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.991490][ T5761] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.992615][ T5756] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.993604][ T5753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.993965][ T5753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.994562][ T5760] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.994658][ T5753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.995374][ T5760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.995820][ T5761] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.995987][ T5761] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.008132][ T5756] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.011279][ T5760] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.015372][ T5756] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.016239][ T5760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.018693][ T5756] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.026196][ T5756] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.546538][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.549684][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.552024][ T5744] bridge_slave_0: entered allmulticast mode [ 46.554701][ T5744] bridge_slave_0: entered promiscuous mode [ 46.558728][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.561009][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.563294][ T5744] bridge_slave_1: entered allmulticast mode [ 46.565763][ T5744] bridge_slave_1: entered promiscuous mode [ 46.621117][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.624310][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.626653][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.629031][ T5750] bridge_slave_0: entered allmulticast mode [ 46.631788][ T5750] bridge_slave_0: entered promiscuous mode [ 46.635375][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.637735][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.640803][ T5750] bridge_slave_1: entered allmulticast mode [ 46.643498][ T5750] bridge_slave_1: entered promiscuous mode [ 46.658183][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.660813][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.663111][ T5745] bridge_slave_0: entered allmulticast mode [ 46.665709][ T5745] bridge_slave_0: entered promiscuous mode [ 46.670325][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.696262][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.698456][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.700946][ T5745] bridge_slave_1: entered allmulticast mode [ 46.703600][ T5745] bridge_slave_1: entered promiscuous mode [ 46.720529][ T5744] team0: Port device team_slave_0 added [ 46.724020][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.728415][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.747906][ T5744] team0: Port device team_slave_1 added [ 46.762274][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.771561][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.789082][ T5750] team0: Port device team_slave_0 added [ 46.792408][ T5750] team0: Port device team_slave_1 added [ 46.807737][ T5757] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.810295][ T5757] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.812675][ T5757] bridge_slave_0: entered allmulticast mode [ 46.815650][ T5757] bridge_slave_0: entered promiscuous mode [ 46.841282][ T5745] team0: Port device team_slave_0 added [ 46.845492][ T5757] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.847907][ T5757] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.850425][ T5757] bridge_slave_1: entered allmulticast mode [ 46.853180][ T5757] bridge_slave_1: entered promiscuous mode [ 46.856358][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.859241][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.869108][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.874367][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.877550][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.887582][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.893048][ T5745] team0: Port device team_slave_1 added [ 46.904265][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.907018][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.917330][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.926314][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.930326][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.938002][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.969258][ T5757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.994928][ T5757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.003623][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.005796][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.013907][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.039627][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.041850][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.049852][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.056616][ T5744] hsr_slave_0: entered promiscuous mode [ 47.059620][ T5744] hsr_slave_1: entered promiscuous mode [ 47.070301][ T5757] team0: Port device team_slave_0 added [ 47.079494][ T5757] team0: Port device team_slave_1 added [ 47.084504][ T5750] hsr_slave_0: entered promiscuous mode [ 47.087176][ T5750] hsr_slave_1: entered promiscuous mode [ 47.089777][ T5750] debugfs: 'hsr0' already exists in 'hsr' [ 47.092105][ T5750] Cannot create hsr debugfs directory [ 47.122407][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.124599][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.132518][ T5757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.154048][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.156218][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.164069][ T5757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.180833][ T5745] hsr_slave_0: entered promiscuous mode [ 47.183102][ T5745] hsr_slave_1: entered promiscuous mode [ 47.185191][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 47.186969][ T5745] Cannot create hsr debugfs directory [ 47.274682][ T5757] hsr_slave_0: entered promiscuous mode [ 47.278049][ T5757] hsr_slave_1: entered promiscuous mode [ 47.280467][ T5757] debugfs: 'hsr0' already exists in 'hsr' [ 47.282345][ T5757] Cannot create hsr debugfs directory [ 47.488419][ T5744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.498826][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.502691][ T5744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.510071][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.521799][ T5744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.528099][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.534231][ T5744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.538141][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.614694][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.623289][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.627209][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.634938][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.638326][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.642812][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.652101][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.658272][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.702786][ T5750] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.706607][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.709432][ T5750] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.713094][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.719710][ T5750] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.724456][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.727801][ T5750] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.732001][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.763515][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.781339][ T5757] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.786554][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.792404][ T5757] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.799820][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.802625][ T5757] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.808754][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.811819][ T5757] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.818039][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.842711][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.857449][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.860876][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.874021][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.876535][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.914085][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.947813][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.954763][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.968313][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.970527][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.983738][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.988522][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.991632][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.998496][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.010233][ T5756] Bluetooth: hci1: command tx timeout [ 48.010388][ T5749] Bluetooth: hci2: command tx timeout [ 48.011852][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.011907][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.022387][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.025258][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.041952][ T5757] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.059995][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.063105][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.078916][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.081469][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.089330][ T5749] Bluetooth: hci0: command tx timeout [ 48.099816][ T5749] Bluetooth: hci3: command tx timeout [ 48.217480][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.267366][ T5744] veth0_vlan: entered promiscuous mode [ 48.274691][ T5744] veth1_vlan: entered promiscuous mode [ 48.293852][ T5744] veth0_macvtap: entered promiscuous mode [ 48.300843][ T5744] veth1_macvtap: entered promiscuous mode [ 48.310599][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.316762][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.326653][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.334462][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.352976][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.369855][ T5824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.394871][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.398239][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.414161][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.417442][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.432166][ T5745] veth0_vlan: entered promiscuous mode [ 48.436746][ T5750] veth0_vlan: entered promiscuous mode [ 48.448032][ T5745] veth1_vlan: entered promiscuous mode [ 48.456580][ T5757] veth0_vlan: entered promiscuous mode [ 48.461723][ T5750] veth1_vlan: entered promiscuous mode [ 48.463115][ T5744] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.470627][ T5757] veth1_vlan: entered promiscuous mode [ 48.474557][ T5744] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.479968][ T5744] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.485121][ T5744] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.488295][ T5750] veth0_macvtap: entered promiscuous mode [ 48.492327][ T5745] veth0_macvtap: entered promiscuous mode [ 48.497018][ T5744] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.499888][ T5750] veth1_macvtap: entered promiscuous mode [ 48.506645][ T5745] veth1_macvtap: entered promiscuous mode [ 48.531642][ T5757] veth0_macvtap: entered promiscuous mode [ 48.543197][ T5757] veth1_macvtap: entered promiscuous mode [ 48.551486][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.558578][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.566332][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.572710][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.591477][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.599322][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.610072][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.620108][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.639430][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.685534][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.688075][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.703947][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.708459][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.729634][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.729659][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.734759][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.735080][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.743006][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5'. [ 48.770502][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.773022][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.780442][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.788485][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.798378][ T5902] openvswitch: netlink: ct_state flags 0001010a unsupported [ 48.800910][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.800950][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.800969][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.800986][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.801004][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.801229][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.821990][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.825033][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.830044][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.849094][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.853361][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.858733][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.909172][ T5907] null_blk: nullb1: using native zone append [ 48.935917][ T24] IPVS: starting estimator thread 0... [ 48.937648][ T5907] null_blk: disk nullb1 created [ 48.997843][ T5915] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 49.019066][ T5911] IPVS: using max 42 ests per chain, 100800 per kthread [ 49.056703][ T5916] @0Ù: renamed from bond_slave_1 (while UP) [ 49.069372][ T5905] block nbd0: server does not support multiple connections per device. [ 49.079665][ T5905] block nbd0: shutting down sockets [ 49.220907][ T5922] syzkaller0: entered promiscuous mode [ 49.222903][ T5922] syzkaller0: entered allmulticast mode [ 49.378328][ T5933] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.13'. [ 49.606425][ T5941] syzkaller0: entered promiscuous mode [ 49.608203][ T5941] syzkaller0: entered allmulticast mode [ 49.889784][ T5949] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 49.907216][ T5949] bond1 (unregistering): Released all slaves [ 50.089213][ T5749] Bluetooth: hci2: command tx timeout [ 50.090050][ T5756] Bluetooth: hci1: command tx timeout [ 50.169710][ T5756] Bluetooth: hci3: command tx timeout [ 50.169745][ T5749] Bluetooth: hci0: command tx timeout [ 50.446334][ T5961] ======================================================= [ 50.446334][ T5961] WARNING: The mand mount option has been deprecated and [ 50.446334][ T5961] and is ignored by this kernel. Remove the mand [ 50.446334][ T5961] option from the mount to silence this warning. [ 50.446334][ T5961] ======================================================= [ 51.634092][ T5968] e1000e 0000:00:02.0 eth1: removed PHC [ 51.753646][ T5968] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 52.041995][ T5833] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.169975][ T5756] Bluetooth: hci2: command tx timeout [ 52.170535][ T5749] Bluetooth: hci1: command tx timeout [ 52.189020][ T5833] usb 5-1: Using ep0 maxpacket: 8 [ 52.195444][ T5833] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 52.199293][ T5833] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 52.202161][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.249145][ T5749] Bluetooth: hci0: command tx timeout [ 52.251004][ T5756] Bluetooth: hci3: command tx timeout [ 53.083995][ T6032] tipc: Started in network mode [ 53.086284][ T6032] tipc: Node identity ac14140f, cluster identity 4711 [ 53.088884][ T6032] tipc: New replicast peer: 255.255.255.255 [ 53.091595][ T6032] tipc: Enabled bearer , priority 10 [ 53.432807][ T6052] evm: overlay not supported [ 53.639030][ T41] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 53.753402][ T6068] Zero length message leads to an empty skb [ 53.809062][ T41] usb 7-1: Using ep0 maxpacket: 8 [ 53.816018][ T41] usb 7-1: config 0 has no interfaces? [ 53.819435][ T41] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 53.823638][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.831780][ T41] usb 7-1: config 0 descriptor?? [ 53.879639][ T6072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.933242][ T5833] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 53.937399][ T5833] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 53.940917][ T1167] wlan1: authenticated [ 53.941472][ T6074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.952533][ T6072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.953819][ T1167] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 53.958850][ T1167] wlan1: associated [ 54.084273][ T5901] usb 7-1: USB disconnect, device number 2 [ 54.110707][ T150] tipc: Node number set to 2886997007 [ 54.249261][ T5756] Bluetooth: hci2: command tx timeout [ 54.249345][ T5749] Bluetooth: hci1: command tx timeout [ 54.329076][ T5749] Bluetooth: hci0: command tx timeout [ 54.329138][ T5756] Bluetooth: hci3: command tx timeout [ 54.819479][ T41] usb 5-1: USB disconnect, device number 2 [ 56.100432][ T6124] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 56.422639][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 56.719008][ T150] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.889055][ T150] usb 6-1: Using ep0 maxpacket: 32 [ 56.893158][ T150] usb 6-1: New USB device found, idVendor=0582, idProduct=0075, bcdDevice= 0.40 [ 56.893174][ T150] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.893185][ T150] usb 6-1: Product: syz [ 56.893193][ T150] usb 6-1: Manufacturer: syz [ 56.893200][ T150] usb 6-1: SerialNumber: syz [ 57.438297][ T150] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 57.445326][ T150] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 57.464452][ T150] usb 6-1: USB disconnect, device number 2 [ 57.468156][ T6144] syzkaller0: entered promiscuous mode [ 57.470138][ T6144] syzkaller0: entered allmulticast mode [ 57.608189][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.611367][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.654415][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.662393][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.719162][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.722304][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.725085][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.727843][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.809278][ T5841] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 57.924216][ T6151] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3274253577/3274253578 [ 57.929364][ T6151] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3274253577/3274253578 [ 57.932766][ T6152] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3895960718/3895960720 [ 57.969024][ T5841] usb 5-1: Using ep0 maxpacket: 32 [ 57.975395][ T5841] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 57.978016][ T5841] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 57.986015][ T5841] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 57.994639][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 58.003622][ T5841] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 58.011113][ T5841] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.015232][ T5841] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 58.021700][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.026080][ T5841] usb 5-1: config 0 descriptor?? [ 58.244955][ T5841] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 58.458564][ T1043] usb 5-1: USB disconnect, device number 3 [ 58.481457][ T1043] usblp0: removed [ 58.738483][ T6165] netlink: 'syz.2.58': attribute type 1 has an invalid length. [ 59.103610][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 59.279032][ T5841] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 59.449062][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 59.452212][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.455852][ T5841] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 59.460503][ T5841] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 59.463436][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.468464][ T5841] usb 5-1: config 0 descriptor?? [ 59.860598][ T5841] usbhid 5-1:0.0: can't add hid device: -71 [ 59.864189][ T5841] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 59.870539][ T5841] usb 5-1: USB disconnect, device number 4 [ 60.190050][ T6186] netlink: 'syz.1.66': attribute type 11 has an invalid length. [ 60.280079][ T6186] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 60.282404][ T6186] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 60.428888][ T6191] syzkaller0: entered promiscuous mode [ 60.430791][ T6191] syzkaller0: entered allmulticast mode [ 60.934137][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'. [ 60.994313][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 62.314503][ T6267] faux_driver vkms: [drm] Unknown color mode 257; guessing buffer size. [ 62.416859][ T6270] kvm: pic: level sensitive irq not supported [ 62.519215][ T6276] netlink: 72 bytes leftover after parsing attributes in process `syz.1.80'. [ 62.723887][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'. [ 62.810914][ T1043] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.969251][ T1043] usb 6-1: Using ep0 maxpacket: 8 [ 62.981057][ T1043] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.984429][ T1043] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 62.987597][ T1043] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 62.991365][ T1043] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 62.994941][ T1043] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 62.998091][ T1043] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.003989][ T1043] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 63.008066][ T1043] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.221055][ T1043] usb 6-1: GET_CAPABILITIES returned 0 [ 63.222912][ T1043] usbtmc 6-1:16.0: can't read capabilities [ 63.291788][ T5826] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 63.380702][ T6290] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 63.383178][ T6290] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 63.389519][ T6290] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 63.395102][ T6290] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 63.397134][ T6290] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 63.401441][ T6290] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 63.404050][ T6290] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 63.406283][ T6290] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 63.409996][ T6290] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 63.413456][ T6290] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 63.415424][ T6290] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 63.417991][ T6290] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 63.431690][ T1043] usb 6-1: USB disconnect, device number 3 [ 63.442344][ T5826] usb 5-1: config 0 has no interfaces? [ 63.444358][ T5826] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 63.447363][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.451743][ T5826] usb 5-1: config 0 descriptor?? [ 63.465753][ T6293] netlink: 'syz.2.87': attribute type 1 has an invalid length. [ 63.478619][ T6293] bond1: entered promiscuous mode [ 63.482437][ T6293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.502604][ T6293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.87'. [ 63.506486][ T6293] bond1: entered allmulticast mode [ 63.520269][ T6293] bond1: (slave bridge1): making interface the new active one [ 63.522669][ T6293] bridge1: entered promiscuous mode [ 63.524462][ T6293] bridge1: entered allmulticast mode [ 63.527330][ T6293] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 63.691378][ T5826] usb 5-1: USB disconnect, device number 5 [ 65.459574][ T5756] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.461606][ T5756] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.463584][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.465594][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.612097][ T5756] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.615860][ T5756] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.620131][ T5756] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.624010][ T5756] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.626595][ T5756] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.066094][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.117486][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 66.124400][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.131449][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.138540][ T6323] bridge_slave_0: entered allmulticast mode [ 66.148679][ T6323] bridge_slave_0: entered promiscuous mode [ 66.163192][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.169743][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.175949][ T6323] bridge_slave_1: entered allmulticast mode [ 66.185694][ T6323] bridge_slave_1: entered promiscuous mode [ 66.230520][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.256388][ T6323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.262232][ T6323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.292302][ T6323] team0: Port device team_slave_0 added [ 66.301900][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.308937][ T6323] team0: Port device team_slave_1 added [ 66.324058][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.326297][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.336916][ T6323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.346950][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.351725][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.366310][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.102'. [ 66.367813][ T6323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.396386][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.430615][ T6352] vlan2: entered allmulticast mode [ 66.432311][ T6352] bridge1: entered allmulticast mode [ 66.440406][ T6352] bridge1: port 1(erspan0) entered blocking state [ 66.442626][ T6352] bridge1: port 1(erspan0) entered disabled state [ 66.444612][ T6352] erspan0: entered allmulticast mode [ 66.447014][ T6352] erspan0: entered promiscuous mode [ 66.449210][ T6352] bridge1: port 1(erspan0) entered blocking state [ 66.451241][ T6352] bridge1: port 1(erspan0) entered forwarding state [ 66.466874][ T6323] hsr_slave_0: entered promiscuous mode [ 66.469306][ T6323] hsr_slave_1: entered promiscuous mode [ 66.471472][ T6323] debugfs: 'hsr0' already exists in 'hsr' [ 66.473281][ T6323] Cannot create hsr debugfs directory [ 66.662980][ T12] bridge_slave_1: left allmulticast mode [ 66.665105][ T12] bridge_slave_1: left promiscuous mode [ 66.668084][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.673633][ T12] bridge_slave_0: left allmulticast mode [ 66.675487][ T12] bridge_slave_0: left promiscuous mode [ 66.677338][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.745636][ T42] audit: type=1326 audit(1785536497.258:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.1.103" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x0 [ 66.775521][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.781167][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.785311][ T12] bond0 (unregistering): Released all slaves [ 66.875857][ T6323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.884406][ T6323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.888234][ T6323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.913775][ T6323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.979610][ T6323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.988556][ T6323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.999628][ T6323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.006279][ T6323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.118681][ T5458] 8021q: adding VLAN 0 to HW filter on device eth1 [ 67.147361][ T6323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.156909][ T6323] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.163352][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.165670][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.178171][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.180377][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.283244][ T5458] 8021q: adding VLAN 0 to HW filter on device eth2 [ 67.512136][ T5458] 8021q: adding VLAN 0 to HW filter on device eth3 [ 67.529278][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.539772][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 67.541791][ T5749] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.691638][ T5749] Bluetooth: hci4: command tx timeout [ 68.947286][ T5458] 8021q: adding VLAN 0 to HW filter on device eth4 [ 68.995505][ T12] hsr_slave_0: left promiscuous mode [ 69.005894][ T12] hsr_slave_1: left promiscuous mode [ 69.010819][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.017149][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.031446][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.036464][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.044942][ T12] veth1_macvtap: left promiscuous mode [ 69.047241][ T12] veth0_macvtap: left promiscuous mode [ 69.048478][ T6420] netlink: 'syz.0.111': attribute type 1 has an invalid length. [ 69.051491][ T12] veth1_vlan: left promiscuous mode [ 69.054034][ T12] veth0_vlan: left promiscuous mode [ 69.182009][ T12] team0 (unregistering): Port device team_slave_1 removed [ 69.189887][ T12] team0 (unregistering): Port device team_slave_0 removed [ 69.269385][ T6420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.285532][ T6426] bond1: (slave gretap1): making interface the new active one [ 69.289961][ T6426] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 69.296084][ T6323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.304221][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 69.371510][ T6438] netlink: 'syz.0.113': attribute type 1 has an invalid length. [ 69.386340][ T6438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.408376][ T6438] bond2: (slave veth0_to_bond): making interface the new active one [ 69.412340][ T6438] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 69.432491][ T6438] bond2: entered promiscuous mode [ 69.434394][ T6438] veth0_to_bond: entered promiscuous mode [ 69.436448][ T6438] bond2: entered allmulticast mode [ 69.438234][ T6438] veth0_to_bond: entered allmulticast mode [ 69.460832][ T6438] macvlan2: entered promiscuous mode [ 69.463026][ T6438] macvlan2: entered allmulticast mode [ 69.467101][ T6438] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 69.471614][ T6438] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 69.498641][ T6323] veth0_vlan: entered promiscuous mode [ 69.506400][ T6323] veth1_vlan: entered promiscuous mode [ 69.524161][ T6323] veth0_macvtap: entered promiscuous mode [ 69.527923][ T6323] veth1_macvtap: entered promiscuous mode [ 69.537540][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.543424][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.563910][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.583311][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.585832][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.597873][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.600641][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.614584][ T5756] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.614615][ T5760] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.616546][ T5749] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.621614][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.621639][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.621657][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.752487][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.754969][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.771229][ T5749] Bluetooth: hci4: command tx timeout [ 69.790952][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.795265][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.859609][ T50] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 69.889090][ T5824] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.892750][ T5824] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.898619][ T5824] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.903674][ T5824] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.020820][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.024392][ T50] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 70.027236][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.031743][ T50] usb 5-1: config 0 descriptor?? [ 70.239092][ T5833] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 70.304424][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'. [ 70.381548][ T6471] netlink: 'syz.1.121': attribute type 1 has an invalid length. [ 70.406809][ T6471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.421336][ T5833] usb 9-1: Using ep0 maxpacket: 16 [ 70.424447][ T5833] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.427948][ T5833] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 70.432032][ T5833] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 70.434943][ T5833] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.441872][ T5833] usb 9-1: config 0 descriptor?? [ 70.444744][ T6471] bond2: (slave gretap1): making interface the new active one [ 70.448726][ T6471] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 70.501660][ T50] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 70.514121][ T50] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input5 [ 70.591675][ T50] keytouch 0003:0926:3333.0002: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 70.739058][ T6356] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 70.836359][ T5833] usbhid 9-1:0.0: can't add hid device: -71 [ 70.838382][ T5833] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 70.846852][ T5833] usb 9-1: USB disconnect, device number 2 [ 70.891453][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.893940][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.896265][ T6356] usb 6-1: Using ep0 maxpacket: 32 [ 70.900798][ T6356] usb 6-1: unable to get BOS descriptor or descriptor too short [ 70.904052][ T6356] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 70.906626][ T6356] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 70.909668][ T6356] usb 6-1: config 14 has no interface number 0 [ 70.911667][ T6356] usb 6-1: config 14 has no interface number 1 [ 70.913646][ T6356] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 70.916947][ T6356] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 70.920949][ T6356] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 70.924405][ T6356] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 70.927879][ T6356] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 70.931355][ T6356] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.935375][ T6356] usb 6-1: config 14 interface 57 has no altsetting 0 [ 70.937467][ T6356] usb 6-1: config 14 interface 228 has no altsetting 0 [ 70.941672][ T6356] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 70.944497][ T6356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.946953][ T6356] usb 6-1: Product: syz [ 70.948239][ T6356] usb 6-1: Manufacturer: syz [ 70.949735][ T6356] usb 6-1: SerialNumber: syz [ 71.007578][ T847] usb 5-1: USB disconnect, device number 6 [ 71.371265][ T6356] legousbtower 6-1:14.57: interrupt endpoints not found [ 71.545024][ T6487] syz_tun: entered allmulticast mode [ 71.576417][ T6489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.581406][ T6489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.584917][ T6489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.589883][ T6489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.593393][ T6489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.596812][ T6489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.600540][ T6489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.606743][ T6489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.611344][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.690329][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.773123][ T6356] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 71.784441][ T6356] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 71.850456][ T5749] Bluetooth: hci4: command tx timeout [ 72.378388][ T6506] netlink: 'syz.2.132': attribute type 1 has an invalid length. [ 72.456445][ T6506] bridge2: entered promiscuous mode [ 72.460850][ T6506] bond2: (slave bridge2): making interface the new active one [ 72.464547][ T6506] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 72.559088][ T5901] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 72.657760][ T6515] syz_tun: entered allmulticast mode [ 72.664589][ T6514] syz_tun: left allmulticast mode [ 72.709025][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 72.713145][ T5901] usb 5-1: config 0 has no interfaces? [ 72.715606][ T5901] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 72.719430][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.722066][ T6517] batman_adv: batadv0: Adding interface: dummy0 [ 72.723634][ T5901] usb 5-1: config 0 descriptor?? [ 72.724433][ T6517] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.734196][ T6517] batman_adv: batadv0: Interface activated: dummy0 [ 72.750243][ T6517] ptrace attach of "/syz-executor exec"[6323] was attempted by "/syz-executor exec"[6517] [ 72.759127][ T5841] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 72.909013][ T5841] usb 7-1: Using ep0 maxpacket: 16 [ 72.912138][ T5841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.915539][ T5841] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 72.919726][ T5841] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 72.922614][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.927338][ T5841] usb 7-1: config 0 descriptor?? [ 72.967528][ T6356] usb 5-1: USB disconnect, device number 7 [ 73.272971][ T5841] usbhid 7-1:0.0: can't add hid device: -71 [ 73.274930][ T5841] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 73.282898][ T5841] usb 7-1: USB disconnect, device number 3 [ 73.369354][ T6504] usb 6-1: LEGO USB Tower reset control request failed [ 73.375080][ T6475] usb 6-1: LEGO USB Tower reset control request failed [ 73.380450][ T5901] usb 6-1: USB disconnect, device number 4 [ 73.392077][ T5901] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 73.929365][ T5749] Bluetooth: hci4: command tx timeout [ 75.488032][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.490630][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.497287][ T6604] netlink: 192 bytes leftover after parsing attributes in process `syz.1.153'. [ 75.547467][ T6602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.556962][ T6602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.638873][ T6602] bond2: left promiscuous mode [ 75.642047][ T6602] veth0_to_bond: left promiscuous mode [ 75.646334][ T6602] bond2: left allmulticast mode [ 75.647939][ T6602] veth0_to_bond: left allmulticast mode [ 75.660081][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.665185][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.668125][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.672139][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.756469][ T6614] syzkaller0: entered promiscuous mode [ 75.758425][ T6614] syzkaller0: entered allmulticast mode [ 75.884113][ T6619] overlayfs: failed to resolve './file2': -2 [ 76.125522][ T6622] syz.2.158 uses obsolete (PF_INET,SOCK_PACKET) [ 76.318618][ T6630] netlink: 'syz.2.161': attribute type 1 has an invalid length. [ 76.357091][ T6630] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 76.362197][ T6630] bond5 (unregistering): Released all slaves [ 76.404383][ T6633] bridge3: entered promiscuous mode [ 76.411002][ T6633] bond4: (slave bridge3): making interface the new active one [ 76.413825][ T6633] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 77.373863][ T6656] bridge_slave_0: left allmulticast mode [ 77.375800][ T6656] bridge_slave_0: left promiscuous mode [ 77.378624][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.383787][ T6656] bridge_slave_1: left allmulticast mode [ 77.385660][ T6656] bridge_slave_1: left promiscuous mode [ 77.387993][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.393800][ T6656] bond0: (slave bond_slave_0): Releasing backup interface [ 77.398399][ T6656] bond0: (slave bond_slave_1): Releasing backup interface [ 77.407243][ T6656] team0: Port device team_slave_0 removed [ 77.412696][ T6656] team0: Port device team_slave_1 removed [ 77.415510][ T6656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.419375][ T6656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.423104][ T6656] net_ratelimit: 39 callbacks suppressed [ 77.423117][ T6656] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 77.452096][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'. [ 77.455708][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 77.920140][ T6664] netlink: 'syz.4.170': attribute type 1 has an invalid length. [ 77.924944][ T6664] batman_adv: batadv0: Interface deactivated: dummy0 [ 77.929642][ T6664] batman_adv: batadv0: Removing interface: dummy0 [ 78.157171][ T6671] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 78.432066][ T6674] syzkaller0: entered promiscuous mode [ 78.433881][ T6674] syzkaller0: entered allmulticast mode [ 78.700532][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 79.199028][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 79.201900][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.205298][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 79.209340][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 79.214679][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.218525][ T10] usb 6-1: config 0 descriptor?? [ 79.758293][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 79.760299][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 79.773536][ T10] usb 6-1: USB disconnect, device number 5 [ 81.136291][ T62] cfg80211: failed to load regulatory.db [ 81.542769][ T6728] netlink: 192 bytes leftover after parsing attributes in process `syz.4.186'. [ 82.791693][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.194'. [ 82.794726][ T6754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.193'. [ 82.805278][ T6756] binder: 6755:6756 unknown command 0 [ 82.807114][ T6756] binder: 6755:6756 ioctl c0306201 800001c0 returned -22 [ 82.904386][ T6763] netlink: 'syz.4.198': attribute type 3 has an invalid length. [ 83.853058][ T6779] netlink: 'syz.2.204': attribute type 2 has an invalid length. [ 83.855628][ T42] audit: type=1326 audit(1785536514.368:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6782 comm="syz.0.211" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f53fec code=0x0 [ 84.844185][ T6798] netlink: 68 bytes leftover after parsing attributes in process `syz.1.208'. [ 84.992923][ T6807] syzkaller0: entered promiscuous mode [ 84.994926][ T6807] syzkaller0: entered allmulticast mode [ 85.129045][ T6356] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 85.291892][ T6356] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 85.296181][ T6356] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 85.302098][ T6356] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.309280][ T6356] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 85.312923][ T6356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 85.315997][ T6356] usb 6-1: Product: syz [ 85.317882][ T6356] usb 6-1: Manufacturer: syz [ 85.320094][ T6356] usb 6-1: SerialNumber: syz [ 85.542246][ T6356] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 85.633168][ T6821] syzkaller0: entered promiscuous mode [ 85.634951][ T6821] syzkaller0: entered allmulticast mode [ 85.745912][ T10] usb 6-1: USB disconnect, device number 6 [ 85.755001][ T10] usblp0: removed [ 86.317022][ T6836] netlink: 'syz.1.220': attribute type 1 has an invalid length. [ 86.328668][ T6836] bond3: entered promiscuous mode [ 86.332154][ T6836] 8021q: adding VLAN 0 to HW filter on device bond3 [ 86.358545][ T6836] macvtap1: entered allmulticast mode [ 86.376390][ T6836] bond3: (slave bridge2): making interface the new active one [ 86.378901][ T6836] bridge2: entered promiscuous mode [ 86.384001][ T6836] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 86.585456][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.222'. [ 87.179022][ T847] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 87.363448][ T847] usb 9-1: config 0 has no interfaces? [ 87.365924][ T847] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 87.369487][ T847] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.375435][ T847] usb 9-1: config 0 descriptor?? [ 87.615853][ T6356] usb 9-1: USB disconnect, device number 3 [ 87.735743][ T6868] syzkaller0: entered promiscuous mode [ 87.737484][ T6868] syzkaller0: entered allmulticast mode [ 87.928047][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 87.959558][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 88.356901][ T6886] netlink: 'syz.0.235': attribute type 2 has an invalid length. [ 89.264011][ T6890] binder: 6889:6890 unknown command 0 [ 89.265823][ T6890] binder: 6889:6890 ioctl c0306201 800001c0 returned -22 [ 89.769603][ T6903] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 89.772029][ T6903] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 89.971629][ T6913] capability: warning: `syz.4.244' uses deprecated v2 capabilities in a way that may be insecure [ 105.135553][ T5760] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.145425][ T5760] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.149818][ T5760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.157678][ T5760] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.161682][ T5760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.358993][ T42] audit: type=1800 audit(1785536535.868:4): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.250" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 105.674730][ T6927] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.681150][ T6927] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.684011][ T6927] bridge_slave_0: entered allmulticast mode [ 105.691966][ T6927] bridge_slave_0: entered promiscuous mode [ 105.697689][ T6927] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.700852][ T6927] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.703802][ T6927] bridge_slave_1: entered allmulticast mode [ 105.706605][ T6927] bridge_slave_1: entered promiscuous mode [ 105.726681][ T6927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.731191][ T6927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.775865][ T6927] team0: Port device team_slave_0 added [ 105.783275][ T6927] team0: Port device team_slave_1 added [ 105.805928][ T6964] syzkaller0: entered promiscuous mode [ 105.807605][ T6964] syzkaller0: entered allmulticast mode [ 105.810821][ T6927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.814831][ T6927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.827892][ T6927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.855364][ T6927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.859258][ T6927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.872626][ T6927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.915502][ T6927] hsr_slave_0: entered promiscuous mode [ 105.918771][ T6927] hsr_slave_1: entered promiscuous mode [ 106.161239][ T6927] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.190045][ T6927] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.193508][ T6927] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.218033][ T6927] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.220865][ T6927] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.254609][ T6927] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.342601][ T62] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 106.389138][ T6927] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.393262][ T6927] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.431789][ T6927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.440682][ T6927] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.445654][ T6584] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.447930][ T6584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.455278][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.457567][ T6584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.549001][ T62] usb 9-1: Using ep0 maxpacket: 32 [ 106.552475][ T62] usb 9-1: unable to get BOS descriptor or descriptor too short [ 106.557892][ T62] usb 9-1: string descriptor 0 read error: -22 [ 106.559973][ T62] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 106.563044][ T62] usb 9-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 106.568830][ T62] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 106.572793][ T62] dw2102: su3000_power_ctrl: 1, initialized 0 [ 106.577115][ T62] dvb-usb: bulk message failed: -22 (2/0) [ 106.587802][ T62] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.593569][ T62] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 106.596267][ T62] usb 9-1: media controller created [ 106.598085][ T62] dvb-usb: bulk message failed: -22 (6/0) [ 106.600666][ T62] dw2102: i2c transfer failed. [ 106.602842][ T62] dvb-usb: bulk message failed: -22 (6/0) [ 106.605054][ T62] dw2102: i2c transfer failed. [ 106.606594][ T62] dvb-usb: bulk message failed: -22 (6/0) [ 106.608372][ T62] dw2102: i2c transfer failed. [ 106.611439][ T62] dvb-usb: bulk message failed: -22 (6/0) [ 106.613258][ T62] dw2102: i2c transfer failed. [ 106.615469][ T62] dvb-usb: bulk message failed: -22 (6/0) [ 106.617189][ T62] dw2102: i2c transfer failed. [ 106.618717][ T62] dvb-usb: bulk message failed: -22 (6/0) [ 106.621282][ T62] dw2102: i2c transfer failed. [ 106.622832][ T62] dvb-usb: MAC address: 02:02:02:02:02:02 [ 106.627420][ T6922] Set syz1 is full, maxelem 65536 reached [ 106.632428][ T62] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.649143][ T62] dvb-usb: bulk message failed: -22 (3/0) [ 106.652754][ T62] dw2102: command 0x0e transfer failed. [ 106.655012][ T62] dvb-usb: bulk message failed: -22 (3/0) [ 106.656846][ T62] dw2102: command 0x0e transfer failed. [ 106.698510][ T6927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.715321][ T6991] overlayfs: failed to clone upperpath [ 106.823727][ T6927] veth0_vlan: entered promiscuous mode [ 106.829643][ T6927] veth1_vlan: entered promiscuous mode [ 106.830373][ T7000] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.845313][ T6927] veth0_macvtap: entered promiscuous mode [ 106.849459][ T6927] veth1_macvtap: entered promiscuous mode [ 106.858083][ T6927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.864811][ T6927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.899116][ T5825] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.902021][ T5825] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.907382][ T6562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.910679][ T6562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.919039][ T50] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 106.924966][ T6117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.927978][ T6117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.939425][ T5825] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.942417][ T5825] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.961605][ T62] dvb-usb: bulk message failed: -22 (3/0) [ 106.963481][ T62] dw2102: command 0x0e transfer failed. [ 106.965214][ T62] dvb-usb: bulk message failed: -22 (3/0) [ 106.967010][ T62] dw2102: command 0x0e transfer failed. [ 106.968743][ T62] dvb-usb: bulk message failed: -22 (1/0) [ 106.973435][ T62] dw2102: command 0x51 transfer failed. [ 106.975944][ T6966] dvb-usb: bulk message failed: -22 (4/0) [ 106.978438][ T6966] dw2102: i2c transfer failed. [ 107.010940][ T62] DVB: Unable to find symbol ds3000_attach() [ 107.012874][ T62] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 107.059075][ T62] rc_core: IR keymap rc-su3000 not found [ 107.060908][ T62] Registered IR keymap rc-empty [ 107.064428][ T62] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 107.073928][ T62] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input6 [ 107.079088][ T50] usb 5-1: Using ep0 maxpacket: 16 [ 107.082753][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.087268][ T50] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.092336][ T50] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 107.096213][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.103601][ T50] usb 5-1: config 0 descriptor?? [ 107.114706][ T62] dvb-usb: schedule remote query interval to 150 msecs. [ 107.116838][ T62] dw2102: su3000_power_ctrl: 0, initialized 1 [ 107.119062][ T62] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 107.123854][ T62] usb 9-1: USB disconnect, device number 4 [ 107.151635][ T62] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 107.219163][ T5749] Bluetooth: hci0: command tx timeout [ 107.310174][ T5749] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 107.394632][ T7015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.398789][ T7015] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.404429][ T7015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.434073][ T7015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.437853][ T7015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.444125][ T7015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.447450][ T7015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.454605][ T7015] veth1_vlan: left promiscuous mode [ 107.456944][ T7015] veth0_vlan: left promiscuous mode [ 107.460571][ T7015] veth0_vlan: entered promiscuous mode [ 107.463692][ T7015] veth1_vlan: entered promiscuous mode [ 107.468452][ T7015] veth1_macvtap: left promiscuous mode [ 107.471263][ T7015] veth0_macvtap: left promiscuous mode [ 107.473704][ T7015] veth0_macvtap: entered promiscuous mode [ 107.476331][ T7015] veth1_macvtap: entered promiscuous mode [ 107.481508][ T7015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.484411][ T7015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.487876][ T7015] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.491676][ T7015] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.497468][ T7015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.512619][ T7015] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.515521][ T847] gretap1: entered promiscuous mode [ 107.523010][ T6117] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.525406][ T6117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.529355][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.531721][ T6117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.549298][ T50] usbhid 5-1:0.0: can't add hid device: -71 [ 107.551548][ T50] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 107.559293][ T50] usb 5-1: USB disconnect, device number 8 [ 107.579349][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.582704][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.585470][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.588197][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.756712][ T7020] syzkaller0: entered promiscuous mode [ 107.758503][ T7020] syzkaller0: entered allmulticast mode [ 107.891318][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 107.925715][ T7026] netlink: 'syz.4.267': attribute type 1 has an invalid length. [ 107.940006][ T7026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.026512][ T7026] gretap1: entered promiscuous mode [ 108.031972][ T7026] bond1: (slave gretap1): making interface the new active one [ 108.035726][ T7026] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 108.055948][ T7026] macvlan2: entered promiscuous mode [ 108.057740][ T7026] macvlan2: entered allmulticast mode [ 108.060019][ T7026] bond1: entered promiscuous mode [ 108.064470][ T7026] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 108.067787][ T7026] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 108.075644][ T7026] bond1: left promiscuous mode [ 108.187626][ T7036] team0: entered allmulticast mode [ 108.189430][ T7036] team_slave_0: entered allmulticast mode [ 108.191723][ T7036] team_slave_1: entered allmulticast mode [ 108.309016][ T42] audit: type=1326 audit(1785536538.818:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.0.272" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x0 [ 108.568799][ T50] IPVS: starting estimator thread 0... [ 108.659493][ T7052] IPVS: using max 43 ests per chain, 103200 per kthread [ 108.719546][ T7060] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 108.733730][ T7060] 8021q: adding VLAN 0 to HW filter on device bond5 [ 108.750708][ T7060] bond5: entered promiscuous mode [ 108.752455][ T7060] bond5: entered allmulticast mode [ 108.760934][ T7060] macvlan2: entered promiscuous mode [ 108.762732][ T7060] macvlan2: entered allmulticast mode [ 108.767633][ T7060] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 109.291178][ T5749] Bluetooth: hci0: command tx timeout [ 109.369026][ T41] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 109.519968][ T41] usb 9-1: Using ep0 maxpacket: 16 [ 109.527287][ T41] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.536381][ T41] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.550819][ T41] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 109.563917][ T41] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 109.569754][ T41] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.579153][ T41] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 109.585105][ T41] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 109.588552][ T41] usb 9-1: Manufacturer: syz [ 109.602657][ T41] usb 9-1: config 0 descriptor?? [ 109.820919][ T7098] process 'syz.2.287' launched './file1' with NULL argv: empty string added [ 109.851244][ T7103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.288'. [ 110.559003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.874686][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.292'. [ 110.889072][ T7120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.933817][ T7120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.337970][ T7137] lo: entered allmulticast mode [ 111.345357][ T7137] lo: left allmulticast mode [ 111.369049][ T5749] Bluetooth: hci0: command tx timeout [ 111.418977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 111.472653][ T42] audit: type=1804 audit(1785536541.988:6): pid=7141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.299" name="/newroot/69/file0" dev="tmpfs" ino=375 res=1 errno=0 [ 111.473274][ T7141] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -32012, delta: 1 [ 111.482843][ T7141] ref_ctr increment failed for inode: 0x177 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888029c572c0 [ 111.500973][ T7141] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -32012, delta: -1 [ 111.504894][ T7141] ref_ctr decrement failed for inode: 0x177 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888029c572c0 [ 111.508250][ T7141] uprobe: syz.0.299:7141 failed to unregister, leaking uprobe [ 111.979003][ T41] rc_core: IR keymap rc-hauppauge not found [ 111.980931][ T41] Registered IR keymap rc-empty [ 111.986262][ T41] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 112.009456][ T41] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 112.031894][ T41] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 112.036954][ T41] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input7 [ 112.044819][ T41] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 112.069020][ T41] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 112.090942][ T41] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 112.109818][ T41] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 112.129025][ T41] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 112.130246][ T7157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'. [ 112.149030][ T41] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 112.171902][ T41] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 112.189040][ T41] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 112.209049][ T41] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 112.229051][ T41] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 112.250685][ T41] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 112.253240][ T41] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 112.261276][ T41] usb 9-1: USB disconnect, device number 5 [ 112.356223][ T7158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.359420][ T7158] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.363994][ T7158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.385653][ T7158] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.388969][ T7158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.395203][ T7158] veth1_vlan: left promiscuous mode [ 112.397482][ T7158] veth0_vlan: left promiscuous mode [ 112.399969][ T7158] veth0_vlan: entered promiscuous mode [ 112.402695][ T7158] veth1_vlan: entered promiscuous mode [ 112.406848][ T7158] veth1_macvtap: left promiscuous mode [ 112.409198][ T7158] veth0_macvtap: left promiscuous mode [ 112.411449][ T7158] veth0_macvtap: entered promiscuous mode [ 112.413766][ T7158] veth1_macvtap: entered promiscuous mode [ 112.420170][ T7158] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.423148][ T7158] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.425993][ T7158] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.428622][ T7158] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.432494][ T7158] bond1: left promiscuous mode [ 112.434132][ T7158] bridge1: left promiscuous mode [ 112.435895][ T7158] bond1: left allmulticast mode [ 112.437504][ T7158] bridge1: left allmulticast mode [ 112.441146][ T7158] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.444311][ T7158] 8021q: adding VLAN 0 to HW filter on device bond3 [ 112.446847][ T7158] bridge2: left promiscuous mode [ 112.450085][ T7158] 8021q: adding VLAN 0 to HW filter on device bond4 [ 112.452649][ T7158] bridge3: left promiscuous mode [ 112.456986][ T7158] bond5: left promiscuous mode [ 112.458753][ T7158] bond5: left allmulticast mode [ 112.461198][ T7158] 8021q: adding VLAN 0 to HW filter on device bond5 [ 112.539091][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.542453][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.560145][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.565248][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.601541][ T42] audit: type=1326 audit(1785536543.118:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.5.306" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x0 [ 112.608325][ T7165] netlink: 'syz.4.307': attribute type 1 has an invalid length. [ 112.643114][ T7165] 8021q: adding VLAN 0 to HW filter on device bond3 [ 112.646599][ T7165] bond2: (slave bond3): making interface the new active one [ 112.650097][ T7165] bond2: (slave bond3): Enslaving as an active interface with an up link [ 112.688785][ T7165] bond2: (slave gretap2): Enslaving as a backup interface with an up link [ 112.956549][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'. [ 113.449133][ T5749] Bluetooth: hci0: command tx timeout [ 113.519041][ T50] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 113.590021][ T7194] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 113.594161][ T7196] netlink: 24 bytes leftover after parsing attributes in process `syz.5.317'. [ 113.599154][ T5824] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.603025][ T5824] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.619149][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.622893][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.692876][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 113.696291][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 113.699606][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 113.702921][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 113.708319][ T50] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 113.711632][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.714218][ T50] usb 5-1: Product: syz [ 113.715562][ T50] usb 5-1: Manufacturer: syz [ 113.717096][ T50] usb 5-1: SerialNumber: syz [ 113.723788][ T50] usb 5-1: config 0 descriptor?? [ 113.932409][ T50] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 114.083207][ T7209] fuse: Unknown parameter 'fd0x0000000000000005' [ 114.135802][ T6430] usb 5-1: USB disconnect, device number 9 [ 114.230978][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'. [ 114.252547][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'. [ 114.284518][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.328'. [ 114.314795][ T7220] fuse: fd is not a fuse device [ 114.534870][ T7232] syz.5.330 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 114.712039][ T7237] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.725519][ T7237] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 114.935299][ T7243] fuse: fd is not a fuse device [ 115.207251][ T7251] Need at least one configuration in g1. [ 115.209624][ T7251] udc dummy_udc.0: failed to start g1: -22 [ 115.211922][ T7251] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 115.217359][ T7251] UDC core: g1: couldn't find an available UDC or it's busy [ 115.672668][ T7264] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.675228][ T7264] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.715599][ T7264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.779479][ T5824] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.782448][ T5824] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.785266][ T5824] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.788037][ T5824] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.279807][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 116.315599][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'. [ 116.338574][ T7278] veth5: entered allmulticast mode [ 116.344905][ T7278] bond3: (slave veth5): Enslaving as an active interface with an up link [ 116.376592][ T7278] bond3 (unregistering): (slave veth5): Releasing backup interface [ 116.382795][ T7278] bond3 (unregistering): Released all slaves [ 116.562331][ T7283] smpboot: CPU 1 is now offline [ 116.652939][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 116.861963][ T7269] process 7270 (syz.2.343) no longer affine to cpu1 [ 116.908776][ T7294] veth5: left allmulticast mode [ 117.594478][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.355'. [ 117.665361][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'. [ 117.742044][ T7313] veth5: entered allmulticast mode [ 117.755194][ T7313] bond6: (slave veth5): Enslaving as an active interface with an up link [ 117.770516][ T7319] bond6 (unregistering): (slave veth5): Releasing backup interface [ 117.787165][ T7319] bond6 (unregistering): Released all slaves [ 118.777464][ T7338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.784240][ T7338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.839688][ T7338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.068413][ T7355] tipc: Enabling of bearer rejected, failed to enable media [ 120.546593][ T24] libceph: connect (1)[c::]:6789 error -101 [ 120.553940][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 120.671343][ T7380] ceph: No mds server is up or the cluster is laggy [ 121.789769][ T7407] netlink: 'syz.4.383': attribute type 1 has an invalid length. [ 121.825058][ T7407] 8021q: adding VLAN 0 to HW filter on device bond5 [ 121.829297][ T7407] bond4: (slave bond5): making interface the new active one [ 121.831963][ T7407] bond4: (slave bond5): Enslaving as an active interface with an up link [ 121.853990][ T7407] __nla_validate_parse: 1 callbacks suppressed [ 121.854002][ T7407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.383'. [ 121.862581][ T7407] bond4: entered promiscuous mode [ 121.864185][ T7407] bond5: entered promiscuous mode [ 121.868885][ T7407] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.213715][ T7428] syzkaller0: entered promiscuous mode [ 122.215463][ T7428] syzkaller0: entered allmulticast mode [ 122.235373][ T7430] fuse: fd is not a fuse device [ 122.359408][ T7434] syzkaller0: entered promiscuous mode [ 122.363806][ T7434] syzkaller0: entered allmulticast mode [ 123.006455][ T7447] netlink: 'syz.4.394': attribute type 1 has an invalid length. [ 123.025085][ T7447] 8021q: adding VLAN 0 to HW filter on device bond6 [ 123.064513][ T7447] vlan2: entered promiscuous mode [ 123.066162][ T7447] bond6: entered promiscuous mode [ 123.069327][ T7447] vlan2: entered allmulticast mode [ 123.071088][ T7447] bond6: entered allmulticast mode [ 123.087357][ T7447] bond6: (slave bridge2): making interface the new active one [ 123.089922][ T7447] bridge2: entered promiscuous mode [ 123.091658][ T7447] bridge2: entered allmulticast mode [ 123.094041][ T7447] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 123.749400][ T7458] tipc: Enabling of bearer rejected, failed to enable media [ 124.194319][ T7476] mmap: syz.4.404 (7476) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.410434][ T7485] Process accounting resumed [ 124.474468][ T7488] syz_tun (unregistering): left allmulticast mode [ 124.491736][ T7490] team0: Port device gretap2 added [ 125.727557][ T41] IPVS: starting estimator thread 0... [ 125.819016][ T7530] IPVS: using max 42 ests per chain, 100800 per kthread [ 125.971746][ T7535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.029495][ T7536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.034965][ T7536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.464183][ T7545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.494324][ T7545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.551781][ T7549] syzkaller0: entered promiscuous mode [ 126.554961][ T7545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.558443][ T7549] syzkaller0: entered allmulticast mode [ 127.332914][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.428'. [ 127.363042][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 127.402483][ T7559] veth3: entered allmulticast mode [ 127.427062][ T7559] bond7: (slave veth3): Enslaving as an active interface with an up link [ 127.454744][ T7564] bond7 (unregistering): (slave veth3): Releasing backup interface [ 127.474951][ T7564] bond7 (unregistering): Released all slaves [ 128.354410][ T7590] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 128.357350][ T7590] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 128.555880][ T7598] syzkaller0: entered promiscuous mode [ 128.557985][ T7598] syzkaller0: entered allmulticast mode [ 128.827087][ T7610] fuse: fd is not a fuse device [ 129.182773][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.442'. [ 129.250761][ T7619] tipc: Started in network mode [ 129.252521][ T7619] tipc: Node identity 5e6125111819, cluster identity 4711 [ 129.254860][ T7619] tipc: Enabled bearer , priority 0 [ 129.257933][ T7619] syzkaller0: entered promiscuous mode [ 129.262423][ T7619] syzkaller0: entered allmulticast mode [ 129.283618][ T7619] tipc: Resetting bearer [ 129.288617][ T7618] tipc: Resetting bearer [ 129.302847][ T7618] tipc: Disabling bearer [ 129.476361][ T7640] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 129.480600][ T7638] IPVS: stopping backup sync thread 7640 ... [ 131.520735][ T6430] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 131.669786][ T6430] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 131.678175][ T6430] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.685007][ T6430] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.694677][ T6430] usb 10-1: config 0 interface 0 has no altsetting 0 [ 131.702185][ T6430] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.708055][ T6430] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.715436][ T6430] usb 10-1: config 0 interface 0 has no altsetting 0 [ 131.725937][ T6430] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.734485][ T6430] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.738477][ T6430] usb 10-1: config 0 interface 0 has no altsetting 0 [ 131.742464][ T6430] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.746388][ T6430] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.751498][ T6430] usb 10-1: config 0 interface 0 has no altsetting 0 [ 131.755796][ T6430] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.760067][ T6430] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.764518][ T6430] usb 10-1: config 0 interface 0 has no altsetting 0 [ 131.768296][ T6430] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.772550][ T6430] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.776315][ T6430] usb 10-1: config 0 interface 0 has no altsetting 0 [ 131.780445][ T6430] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.783210][ T6430] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.786908][ T6430] usb 10-1: config 0 interface 0 has no altsetting 0 [ 131.790894][ T6430] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.794290][ T6430] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.799117][ T6430] usb 10-1: config 0 interface 0 has no altsetting 0 [ 131.806343][ T6430] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 131.812062][ T6430] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 131.815475][ T6430] usb 10-1: Product: syz [ 131.817204][ T6430] usb 10-1: Manufacturer: syz [ 131.819615][ T6430] usb 10-1: SerialNumber: syz [ 131.827315][ T6430] usb 10-1: config 0 descriptor?? [ 131.854361][ T6430] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 132.331734][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.334828][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.606397][ T6356] usb 10-1: USB disconnect, device number 2 [ 132.614088][ T6356] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 133.560229][ T6356] vxlan0: entered promiscuous mode [ 133.563475][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 133.566409][ T6356] vxlan0: left promiscuous mode [ 133.689231][ T41] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 133.840588][ T41] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 133.843516][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.848688][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.854125][ T41] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.858360][ T41] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.861621][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.865386][ T41] usb 5-1: config 0 descriptor?? [ 134.196667][ T7691] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 134.201000][ T7691] ALSA: mixer_oss: invalid index 137438 [ 134.212977][ T41] usbhid 5-1:0.0: can't add hid device: -71 [ 134.215496][ T41] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 134.220492][ T41] usb 5-1: USB disconnect, device number 10 [ 136.410937][ T5749] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 136.417373][ T5749] Bluetooth: hci4: Injecting HCI hardware error event [ 136.421450][ T5760] Bluetooth: hci4: hardware error 0x00 [ 137.308645][ T7797] ip6gre1: entered allmulticast mode [ 137.313080][ T5797] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 138.034747][ T7801] Process accounting resumed [ 138.659107][ T5760] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 139.775699][ T7839] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 139.780390][ T7839] overlayfs: failed to clone lowerpath [ 140.251875][ T7850] BUG: unable to handle page fault for address: fffffffffffffc10 [ 140.254331][ T7850] #PF: supervisor read access in kernel mode [ 140.256486][ T7850] #PF: error_code(0x0000) - not-present page [ 140.259597][ T7850] PGD e997067 P4D e997067 PUD e999067 PMD 0 [ 140.261492][ T7850] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 140.263223][ T7850] CPU: 0 UID: 0 PID: 7850 Comm: syz.5.511 Not tainted syzkaller #0 PREEMPT(full) [ 140.266490][ T7850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.270211][ T7850] RIP: 0010:strnlen+0x4b/0x80 [ 140.272142][ T7850] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 140.279432][ T7850] RSP: 0018:ffffc900076570e8 EFLAGS: 00010246 [ 140.281443][ T7850] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 140.283894][ T7850] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 140.286725][ T7850] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 140.289531][ T7850] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 140.292296][ T7850] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 140.295366][ T7850] FS: 0000000000000000(0000) GS:ffff888096be1000(0063) knlGS:00000000f5466b40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 140.298569][ T7850] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 140.300746][ T7850] CR2: fffffffffffffc10 CR3: 0000000057ffa000 CR4: 0000000000352ef0 [ 140.303231][ T7850] Call Trace: [ 140.304286][ T7850] [ 140.305191][ T7850] ? look_up_lock_class+0x55/0x120 [ 140.306791][ T7850] trace_event_raw_event_drv_net_setup_tc+0x100/0x5d0 [ 140.309154][ T7850] ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10 [ 140.311824][ T7850] ? __pfx___might_resched+0x10/0x10 [ 140.313519][ T7850] ? __mutex_lock+0x26d/0x1bd0 [ 140.315278][ T7850] ieee80211_netdev_setup_tc+0x2c6/0x3e0 [ 140.317478][ T7850] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 140.319539][ T7850] tcf_block_offload_cmd.isra.0+0x1c4/0x310 [ 140.321822][ T7850] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 140.323801][ T7850] ? __pfx_down_write+0x10/0x10 [ 140.325333][ T7850] tcf_block_get_ext+0x7ed/0x1950 [ 140.326895][ T7850] tcf_block_get+0xa8/0x100 [ 140.328318][ T7850] ? __pfx_tcf_block_get+0x10/0x10 [ 140.329925][ T7850] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 140.331899][ T7850] ? lockdep_init_map_type+0x5c/0x250 [ 140.333648][ T7850] fq_codel_init+0x4ff/0xa50 [ 140.335409][ T7850] ? qdisc_alloc+0x81b/0xb30 [ 140.336963][ T7850] ? __pfx_fq_codel_init+0x10/0x10 [ 140.338582][ T7850] qdisc_create+0x47b/0x1060 [ 140.340036][ T7850] tc_modify_qdisc+0xdcf/0x2120 [ 140.341588][ T7850] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 140.343240][ T7850] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 140.344888][ T7850] rtnetlink_rcv_msg+0x3c9/0xe90 [ 140.346446][ T7850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.348149][ T7850] ? __lock_acquire+0x49f/0x1a40 [ 140.349729][ T7850] netlink_rcv_skb+0x159/0x420 [ 140.351250][ T7850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.352963][ T7850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.354605][ T7850] ? netlink_deliver_tap+0x1ae/0xcc0 [ 140.356253][ T7850] netlink_unicast+0x585/0x850 [ 140.357942][ T7850] ? __pfx_netlink_unicast+0x10/0x10 [ 140.359667][ T7850] netlink_sendmsg+0x8b0/0xda0 [ 140.361562][ T7850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.363481][ T7850] ? apparmor_socket_sendmsg+0x15b/0x270 [ 140.365512][ T7850] ____sys_sendmsg+0xa4d/0xbe0 [ 140.367267][ T7850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.368922][ T7850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.370582][ T7850] ___sys_sendmsg+0x190/0x1e0 [ 140.372102][ T7850] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.373738][ T7850] ? futex_wait+0x11e/0x370 [ 140.375169][ T7850] ? find_held_lock+0x2b/0x80 [ 140.376651][ T7850] __sys_sendmsg+0x160/0x210 [ 140.378113][ T7850] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.379720][ T7850] __do_fast_syscall_32+0xe7/0x970 [ 140.381331][ T7850] do_fast_syscall_32+0x32/0x70 [ 140.382863][ T7850] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.384826][ T7850] RIP: 0023:0xf7fa4fec [ 140.386119][ T7850] Code: Unable to access opcode bytes at 0xf7fa4fc2. [ 140.388172][ T7850] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 140.390745][ T7850] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800012c0 [ 140.393194][ T7850] RDX: 0000000000000400 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.395634][ T7850] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.398054][ T7850] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 140.400489][ T7850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.402970][ T7850] [ 140.403950][ T7850] Modules linked in: [ 140.405177][ T7850] CR2: fffffffffffffc10 [ 140.406485][ T7850] ---[ end trace 0000000000000000 ]--- [ 140.408177][ T7850] RIP: 0010:strnlen+0x4b/0x80 [ 140.409674][ T7850] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 140.415636][ T7850] RSP: 0018:ffffc900076570e8 EFLAGS: 00010246 [ 140.417530][ T7850] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 140.420159][ T7850] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 140.422650][ T7850] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 140.425549][ T7850] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 140.428588][ T7850] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 140.431551][ T7850] FS: 0000000000000000(0000) GS:ffff888096be1000(0063) knlGS:00000000f5466b40 [ 140.434818][ T7850] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 140.437421][ T7850] CR2: 00000000f7fa5000 CR3: 0000000057ffa000 CR4: 0000000000352ef0 [ 140.440503][ T7850] Kernel panic - not syncing: Fatal exception [ 140.443447][ T7850] Kernel Offset: disabled [ 140.445185][ T7850] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:22:50 Registers: info registers vcpu 0 CPU#0 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a13375 RDI=ffffffff9b9f51a0 RBP=ffffffff9b9f5160 RSP=ffffc90007656940 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=000000000000005b R14=ffffffff9b6f51e0 R15=ffffffff85a13310 RIP=ffffffff85a1339f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096be1000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=fffffffffffffc10 CR3=0000000057ffa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c742540 RSI=ffffffff81b51ece RDI=ffff88801c742540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ce1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c36fe3f CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000002ec00000000 0000000a00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81fd1d52 RDX=ffff888000598000 RSI=ffffffff81fd1d2c RDI=ffff888000598000 RBP=ffff88802b243360 RSP=ffffc90003917440 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000003 R13=ffffed100564866d R14=0000000000000001 R15=ffff88802b43c9c0 RIP=ffffffff81fd1d33 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096de1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f46ec0 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001a715c RBX=ffff88801c7fa540 RCX=ffffffff8bb912d5 RDX=0000000000000001 RSI=ffffffff8c400a00 RDI=ffffffff81de9497 RBP=ffffed10038ff4a8 RSP=ffffc9000048fe00 R8 =0000000000000000 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=00000020a7f17400 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bb8f89f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ee1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002da00ff8 CR3=0000000057f8e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001e800000000 0000000800000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000