last executing test programs: 2m45.036858847s ago: executing program 3 (id=157): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 2m45.036689643s ago: executing program 3 (id=158): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xdff9, 0x800, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m44.891900468s ago: executing program 3 (id=162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r4, 0x300000b, 0x11, r2, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000, 0x3000, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x4}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, {0x100000, 0x2, 0x0, 0x0, 0x0, 0x8f, 0xc2, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9}, {0x0, 0x0, 0x0, 0x82}, {0x5fff}, {0x1, 0xfffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x900, [0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m44.642031171s ago: executing program 3 (id=167): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 2m44.641778303s ago: executing program 3 (id=168): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='io\x00') syz_fuse_handle_req(r2, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m44.311477498s ago: executing program 3 (id=174): r0 = io_uring_setup(0x357b, &(0x7f0000000180)={0x0, 0xfffffffa, 0x100, 0xb733, 0x260}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r2, &(0x7f0000000740), 0xff67) sendfile(r1, r2, &(0x7f00000000c0), 0xfffb) fcntl$addseals(r2, 0x409, 0x8) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="d3", 0x1}], 0x1, 0x1, 0x400) close_range(r0, 0xffffffffffffffff, 0x0) 2m44.263266289s ago: executing program 32 (id=174): r0 = io_uring_setup(0x357b, &(0x7f0000000180)={0x0, 0xfffffffa, 0x100, 0xb733, 0x260}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r2, &(0x7f0000000740), 0xff67) sendfile(r1, r2, &(0x7f00000000c0), 0xfffb) fcntl$addseals(r2, 0x409, 0x8) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="d3", 0x1}], 0x1, 0x1, 0x400) close_range(r0, 0xffffffffffffffff, 0x0) 1m34.011598367s ago: executing program 0 (id=955): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d7677", 0x1e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="a7e567b2636537bddd22b9766961745ea30fabb8c8a975be7f2b486aa0cabad3263c0b5efbbcf4c3be9855acd40b1ba459fd219c3c6f892cd7fb0e356e999e75b8f75a3cf4b656907cc4066905e2dfdb304140786387b97829614b21baeb704db3dfb62275490fbb1a58ec4129546185bfe6e01b6b3a018c67c3e22876b2dcbf03e84d4aa13cf6bfc5ba879bd8205a948dc6eac9a9ef788fcff78b3e9e6f2e2876f4033b8a97d88f1ad96ab8e0b121f12bb76157410dd51ab6cf54ac4879ad6d0420331ec560675668f6ed1f4582bb41cc2e845f3f1259752ad36451c98fe644bf958acbdb665caa6e8de6", 0xeb}, {&(0x7f0000000740)="3f7882d42c3d96125e35c041b4e4eefe195498bda984a64f0bf1056c0e4279936da29f6e5a33585dc9fdbe74ea7cf1b467470d727d245513dd9ebd0f1ef317c42c2cfd1f744b11b6bd3a91dadf9db917ffa96a17a371e6680b8a8aa28ad5ee758eb35d1f3130b661fcb2880790e2bbf71c82e83624f2f26e1f935a96dfde3ad8c53955e71dfab5c3d9dff05ce6511571fab38e9f", 0x94}], 0x2}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000a80)="131459a21669edd3cfd77521d04455b3c1c2e573e35030", 0x17}, {&(0x7f0000000b80)="408bcc5ad9214958d856fee4c001e72437ca2d154585265bde328475e6443eb703753265b732ace48c2e54c121312f2f3f0238ccf790e955f999e4ecfbd5cb4b75ac9ddf350972145b61b5770eec0fbdd788edff7c854286f039db96016622582645bc99cc453346d25f854a41f1736d00a4f3f829f25febdd4ec0be6f", 0x7d}, {&(0x7f0000000c40)="e4187257e4c2d25cda816b5421220e496af7e99378d2b2641b3c9a54fe7eee4455a8f6a4952456d17ea14780b6012da77b25a8e57c32db0e31b9963581c3489ea73edeb1e662793c085ed78555d7f03d5645697f42c5248491c8d01496b9f527bf0e2a79d07c0fa75af2875ebb09bd543bbab3a7", 0x74}, {&(0x7f0000000d00)="823c652c9a47136c88bb01e435ecd80a7a1ccb9c0fc15d68d9147eb07692fe7b86d06e2539abe05997115a5086fba6fc946b0051c4b3ebcf9c515ad379fcc1679e621594fb2750fdc7f0a88741053d42f82289958b6550bdada5b6b9d6a6274c6477576d388edf5a696bad743b34be2f6547206d5c718809c1266b778005", 0x7e}, {&(0x7f0000000dc0)="6c0bca86bfecc660e4ed96914a4977db3be1ffb0f17e9d149bb4026ce8946c0d1e2aeb749ed953ac921035366d52695a453bc9a965252686f9a719dc4e386dce361e84e76c43948f91ba0e132b93b75d835fe94dbc192d0300b49799a1df5d1516d3c293d88678c8b8b6b5961d43f188664259abaa3897fa3255ed3b1f0cdbba0a8597323e2d2ddbb239521dbf90a71895c584ab305464d0cb4c72919e6050bbc13157afb8c3e56c856ebc2d301f833678b0ebecf883c4fbdeede2efd4499a559f47a76c010724672fecb6abd1eb76188bd73a2fbdeb650467ec8ad3f0c18c3ef59902365d65ee5ea44958395401725fbbc050647bda6f", 0xf7}, {&(0x7f0000000ec0)="8b3a32ec77197011cf6a6ce3d02ef0a5e66188250f1f872aaa305d8f7dbead9b664af1e3f20b143fa7fa96dbf358ea6ceaa9e44c84ca0fc420ed7a6ccc7045f31960c0a9f9472f0491c5341dac51e6a97568aa3f9f6f10fc0f2f363adc21556cf362206f7d49409b0895189024b3be0d7757b82f58f66aff366c984beb6dae0e27d5dd8546c8b4c88b6efe67aa82f8e8377e95b76a363a8abfa8f5afcdfe5eff44c77054d8f6989c", 0xa8}, {&(0x7f0000000f80)="282bc76b3f5e0ccc7836ee73bef02b58da8c8e0601610b882a0240d15557847c93450c814132ccfc780939c58a973b4dcd2d387136728c2636b349589d984520fddc5afa5a5ff60e0c25239dc3ba8e394d25e279d1d86e6a4fa8bf82316ad1f0917774e499a3069c35bb299076e5a97c8d88d4898677f462390fb7f8e86b22d79b082049392b82", 0x87}, {&(0x7f0000001040)="b12f345471a0845da78e5979ae151803541ce4e1be8318fe4207f12a859d42dda98216310cdbea07a035a4be02a630a977b78cfb030c406fcea5d9a76c35e1a07cd0a4c12947fbf148", 0x49}, {&(0x7f00000010c0)="e38c7f84aea39023f514a3eabb2877d90049d60313238938564e46a736ddfadbdbefb6bac173", 0x26}], 0x9}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m34.002901205s ago: executing program 0 (id=956): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d0101400001020301090293"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbb5a01f3c2f13608060001080006040002aaaaaaaaaaaaac1414bb"], 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) 1m30.931218517s ago: executing program 0 (id=991): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r4, 0x300000b, 0x11, r2, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000, 0x3000, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x4}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, {0x100000, 0x2, 0x0, 0x0, 0x0, 0x8f, 0xc2, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9}, {0x0, 0x0, 0x0, 0x82}, {0x5fff}, {0x1, 0xfffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x900, [0x0, 0x0, 0x0, 0x3]}) writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000240)="ae7df127500e0fead5428dbc9b6a09d80d23bd21da20ee0deedea7c25160f073654cd38e4816bcdb098960e6c9822d2b27feefc864a9cb1412552556cab74bc6a85b4a3dbe1cfa1324d89aebcdf20d7e183d17ef0168708295f7b3348c02935cc55b1efab6718f98919fe29b76c3b92355264832e43edf1cb93175500ca678425b0f49e04e2e5b06038f", 0x8a}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m30.820807464s ago: executing program 0 (id=992): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x2) 1m30.820561973s ago: executing program 0 (id=993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'bridge0\x00', 0x400}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 1m30.68126623s ago: executing program 0 (id=994): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1m30.622715951s ago: executing program 33 (id=994): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1m19.697488959s ago: executing program 2 (id=1138): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m19.575756888s ago: executing program 2 (id=1139): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) readv(r2, 0x0, 0x0) 1m18.665316517s ago: executing program 2 (id=1156): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x9, 0x4}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x200062}) 1m18.588711796s ago: executing program 2 (id=1158): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 1m18.586289761s ago: executing program 2 (id=1159): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r4, 0x300000b, 0x11, r2, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000, 0x3000, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x4}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, {0x100000, 0x2, 0x0, 0x0, 0x0, 0x8f, 0xc2, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9}, {0x0, 0x0, 0x0, 0x82}, {0x5fff}, {0x1, 0xfffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x900, [0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m18.085813909s ago: executing program 2 (id=1167): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0/file0'}, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m18.044231651s ago: executing program 34 (id=1167): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0/file0'}, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.040361578s ago: executing program 1 (id=1999): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 3.90494595s ago: executing program 1 (id=2002): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5f3a, 0x4) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00', 0x0}) sendto$packet(r2, &(0x7f0000000040)="c8", 0x1, 0x0, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2.869586518s ago: executing program 1 (id=2019): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f306635800000000f22e0f30f26c8", 0x47}], 0x1, 0x21, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x0, 0x180, 0x200000004, 0x10, 0xf1, 0x2000, 0x7fffffffffffe, 0x800000a2a, 0x0, 0x5, 0x2, 0x80000001, 0x3, 0xbdb], 0xeeee8000, 0x3c4210}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x1000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) io_uring_setup(0x5065, &(0x7f0000000140)={0x0, 0x4dc1, 0x2, 0x3, 0x35f}) 1.910270485s ago: executing program 1 (id=2020): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb0000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 1.828722295s ago: executing program 4 (id=2021): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9463cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) 1.700101771s ago: executing program 4 (id=2022): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x1, 0x2, 0x3) open(0x0, 0x0, 0x0) creat(0x0, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) 1.520536022s ago: executing program 5 (id=2023): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) creat(&(0x7f0000000080)='./file0\x00', 0x0) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) 1.52031072s ago: executing program 5 (id=2024): syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000002280)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000005a0f23d0d021f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x69}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0x14, 0x9, 0x28, 0x4, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.233932962s ago: executing program 5 (id=2027): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x1, 0x0) close(r1) 1.160105809s ago: executing program 5 (id=2028): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.080799031s ago: executing program 5 (id=2029): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0x2, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {}, {0xd, 0xd}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xef, 0x9, 0x0, 0x1, 0x0, 0xf, 0xf0, 0x4}}, {0xc, 0x2, [0x5, 0x7, 0x3, 0x2]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 989.701717ms ago: executing program 1 (id=2033): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 989.428081ms ago: executing program 1 (id=2034): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) getrandom(&(0x7f0000000740)=""/262, 0xffffffffffffff55, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 830.171062ms ago: executing program 4 (id=2035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x4, 0x28}, 0x50) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 280.707786ms ago: executing program 6 (id=2045): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0xfeffffff, r1, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 241.037377ms ago: executing program 6 (id=2046): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x880, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) sendto$inet6(r1, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0) close(r1) 240.784016ms ago: executing program 5 (id=2047): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x191c) 240.546025ms ago: executing program 6 (id=2048): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') linkat(r0, &(0x7f0000000380)='./file1\x00', r0, &(0x7f00000003c0)='./bus\x00', 0x400) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) 157.73657ms ago: executing program 6 (id=2049): sendmsg(0xffffffffffffffff, 0x0, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r2) 157.449882ms ago: executing program 4 (id=2050): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x5, 0x2b0}) socket$qrtr(0x2a, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f000000a900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709a6000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4010) 157.040384ms ago: executing program 6 (id=2051): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) 59.242221ms ago: executing program 4 (id=2052): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 440.691µs ago: executing program 6 (id=2053): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x59) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 0s ago: executing program 4 (id=2054): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) socket$xdp(0x2c, 0x3, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f0000001300)={'nr0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000001280)="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", 0x1000) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): audit: type=1326 audit(1750928688.379:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.2.444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7fc00000 [ 88.382159][ T40] audit: type=1326 audit(1750928688.379:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.2.444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7fc00000 [ 88.424799][ T40] audit: type=1326 audit(1750928688.429:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.2.444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7fc00000 [ 88.823465][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 88.830298][ T7247] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.833746][ T7247] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.082130][ T40] audit: type=1326 audit(1750928689.089:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.2.444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7fc00000 [ 89.332122][ T7259] binder: binder_mmap: 7258 80001000-8000b000 bad vm_flags failed -1 [ 89.525222][ T40] audit: type=1326 audit(1750928689.529:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.0.465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7fc00000 [ 89.532504][ T40] audit: type=1326 audit(1750928689.539:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.0.465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7fc00000 [ 89.593360][ T40] audit: type=1326 audit(1750928689.599:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.0.465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7fc00000 [ 89.601730][ T40] audit: type=1326 audit(1750928689.609:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.0.465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7fc00000 [ 90.246089][ T40] audit: type=1326 audit(1750928690.259:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.0.465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7fc00000 [ 90.794518][ T7338] netlink: 'syz.0.487': attribute type 10 has an invalid length. [ 90.798226][ T7338] netlink: 40 bytes leftover after parsing attributes in process `syz.0.487'. [ 90.813356][ T7338] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 90.816792][ T7338] team0: Failed to send options change via netlink (err -105) [ 90.819718][ T7338] team0: Port device geneve0 added [ 90.902774][ T40] audit: type=1326 audit(1750928690.909:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.1.488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7fc00000 [ 91.015629][ T53] net_ratelimit: 60 callbacks suppressed [ 91.015640][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.036278][ T7350] gtp0: entered promiscuous mode [ 91.355025][ T7366] kvm: pic: single mode not supported [ 91.355088][ T7366] kvm: pic: level sensitive irq not supported [ 91.359729][ T7366] kvm: pic: single mode not supported [ 91.366356][ T7366] kvm: pic: non byte write [ 91.370129][ T7366] kvm: pic: non byte write [ 91.372036][ T7366] kvm: pic: non byte write [ 91.373916][ T7366] kvm: pic: non byte write [ 91.384112][ T7366] kvm: pic: non byte write [ 91.386261][ T7366] kvm: pic: non byte write [ 91.388364][ T7366] kvm: pic: non byte write [ 91.390301][ T7366] kvm: pic: non byte write [ 91.392299][ T7366] kvm: pic: non byte write [ 91.394255][ T7366] kvm: pic: non byte write [ 91.471194][ T7369] netlink: 'syz.4.500': attribute type 10 has an invalid length. [ 91.473712][ T7369] netlink: 40 bytes leftover after parsing attributes in process `syz.4.500'. [ 91.479257][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 91.484887][ T7369] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 91.487862][ T7369] team0: Failed to send options change via netlink (err -105) [ 91.490394][ T7369] team0: Port device geneve0 added [ 92.066216][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.305522][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.578294][ T7402] syz_tun: entered allmulticast mode [ 92.584708][ T7400] syz_tun: left allmulticast mode [ 92.599237][ T7408] netlink: 'syz.1.510': attribute type 10 has an invalid length. [ 92.602629][ T7408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.510'. [ 92.616403][ T7408] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 92.620889][ T7408] team0: Failed to send options change via netlink (err -105) [ 92.624193][ T7408] team0: Port device geneve0 added [ 92.676438][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.686536][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 92.692491][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 92.697152][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 92.975709][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.095776][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.119936][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.122702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.126535][ T7432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.131426][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.313023][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.526'. [ 94.301584][ T7469] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 94.303969][ T7469] overlayfs: failed to set xattr on upper [ 94.307140][ T7469] overlayfs: ...falling back to redirect_dir=nofollow. [ 94.309374][ T7469] overlayfs: ...falling back to uuid=null. [ 94.777513][ T7491] batman_adv: batadv0: Adding interface: dummy0 [ 94.779768][ T7491] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.789540][ T7491] batman_adv: batadv0: Interface activated: dummy0 [ 95.515557][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 95.665701][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 95.668593][ T24] usb 9-1: config 0 has no interfaces? [ 95.675287][ T24] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 95.678641][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.681904][ T24] usb 9-1: Product: syz [ 95.683557][ T24] usb 9-1: Manufacturer: syz [ 95.685312][ T24] usb 9-1: SerialNumber: syz [ 95.689045][ T24] usb 9-1: config 0 descriptor?? [ 95.784819][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 95.790425][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 95.794496][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 95.896647][ T34] usb 9-1: USB disconnect, device number 2 [ 96.156127][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 96.217916][ T34] net_ratelimit: 28 callbacks suppressed [ 96.217933][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.456981][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.512201][ T7546] kvm: pic: single mode not supported [ 96.514308][ T7546] kvm: pic: single mode not supported [ 96.517780][ T7546] kvm: pic: single mode not supported [ 96.519812][ T7546] kvm: pic: single mode not supported [ 96.521806][ T7546] kvm: pic: single mode not supported [ 96.523758][ T7546] kvm: pic: single mode not supported [ 96.525764][ T7546] kvm: pic: single mode not supported [ 96.527713][ T7546] kvm: pic: single mode not supported [ 96.529748][ T7546] kvm: pic: single mode not supported [ 96.531762][ T7546] kvm: pic: single mode not supported [ 97.256825][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.012794][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.588'. [ 98.025519][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.588'. [ 98.089463][ T34] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 98.118955][ T34] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 98.232303][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'. [ 98.307425][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.377300][ T840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.690683][ T7693] netlink: 96 bytes leftover after parsing attributes in process `syz.0.599'. [ 99.232689][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.610'. [ 99.336270][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.506126][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 99.506137][ T40] audit: type=1326 audit(1750928699.519:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.4.611" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7fc00000 [ 99.514737][ T40] audit: type=1326 audit(1750928699.519:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.4.611" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf707e579 code=0x7fc00000 [ 99.521803][ T40] audit: type=1326 audit(1750928699.519:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.4.611" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7fc00000 [ 99.698577][ T7741] evm: overlay not supported [ 99.870729][ T7746] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.964299][ T7755] input: syz0 as /devices/virtual/input/input5 [ 100.075595][ T7761] input: syz1 as /devices/virtual/input/input6 [ 100.375633][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.415633][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.418207][ T840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.777216][ T7806] macvlan2: entered promiscuous mode [ 101.778982][ T7806] macvlan2: entered allmulticast mode [ 101.780939][ T7806] bond0: entered promiscuous mode [ 101.782450][ T7806] bond_slave_0: entered promiscuous mode [ 101.784199][ T7806] bond_slave_1: entered promiscuous mode [ 101.786966][ T7806] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 101.790595][ T7806] bridge0: entered promiscuous mode [ 101.793919][ T7806] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 101.797875][ T7806] bond0: left promiscuous mode [ 101.799368][ T7806] bond_slave_0: left promiscuous mode [ 101.801174][ T7806] bond_slave_1: left promiscuous mode [ 101.802895][ T7806] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 101.805009][ T7806] bridge0: left promiscuous mode [ 101.920099][ T7812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.929744][ T7812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.113906][ T7822] wireguard0: entered promiscuous mode [ 102.115893][ T7822] wireguard0: entered allmulticast mode [ 102.455602][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.546816][ T7834] macvlan2: entered promiscuous mode [ 102.549621][ T7834] macvlan2: entered allmulticast mode [ 102.552411][ T7834] bond0: entered promiscuous mode [ 102.554547][ T7834] bond_slave_0: entered promiscuous mode [ 102.557246][ T7834] bond_slave_1: entered promiscuous mode [ 102.560357][ T7834] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.564033][ T7834] bond0: left promiscuous mode [ 102.566609][ T7834] bond_slave_0: left promiscuous mode [ 102.568397][ T7834] bond_slave_1: left promiscuous mode [ 102.936732][ T840] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 103.095669][ T840] usb 9-1: Using ep0 maxpacket: 32 [ 103.099854][ T840] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 103.103142][ T840] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 103.106647][ T840] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 103.110281][ T840] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.114039][ T840] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 103.118100][ T840] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 103.123245][ T840] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 103.126855][ T840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.131898][ T840] usb 9-1: config 0 descriptor?? [ 103.342138][ T840] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 103.347274][ T840] usb 9-1: USB disconnect, device number 3 [ 103.352470][ T840] usblp0: removed [ 103.425549][ T7843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.656'. [ 103.495672][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.775469][ T5814] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 103.925519][ T5814] usb 9-1: Using ep0 maxpacket: 32 [ 103.929906][ T5814] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 103.932514][ T5814] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 103.935047][ T5814] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 103.937970][ T5814] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.941198][ T5814] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 103.944839][ T5814] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 103.948986][ T5814] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 103.951729][ T5814] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.955120][ T5814] usb 9-1: config 0 descriptor?? [ 104.163028][ T5814] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 104.363653][ T5814] usb 9-1: USB disconnect, device number 4 [ 104.369171][ T5814] usblp0: removed [ 104.455568][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 104.458545][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 104.458567][ T840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.545559][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.733415][ T7870] netfs: Couldn't get user pages (rc=-14) [ 105.105959][ T7875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.668'. [ 105.206871][ T7881] wireguard0: entered promiscuous mode [ 105.208694][ T7881] wireguard0: entered allmulticast mode [ 105.585660][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.056049][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.615714][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.698071][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.495574][ T840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.655768][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.986308][ T840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.048004][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.674'. [ 108.069017][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.674'. [ 108.365500][ T72] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 108.515458][ T72] usb 5-1: Using ep0 maxpacket: 32 [ 108.523935][ T72] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 108.527581][ T72] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 108.530482][ T72] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 108.533275][ T72] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.537496][ T72] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 108.541730][ T72] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 108.547306][ T72] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 108.551510][ T72] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.570335][ T72] usb 5-1: config 0 descriptor?? [ 108.705796][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.781318][ T72] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 108.788356][ T72] usb 5-1: USB disconnect, device number 5 [ 108.792267][ T72] usblp0: removed [ 109.225501][ T840] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.270114][ T7932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.273060][ T7932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.276512][ T7932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.279895][ T7931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.375419][ T840] usb 5-1: Using ep0 maxpacket: 32 [ 109.378339][ T840] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 109.380975][ T840] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 109.383200][ T7941] orangefs_devreq_open: device cannot be opened in blocking mode [ 109.383853][ T840] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 109.390144][ T840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.393997][ T840] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.397823][ T840] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.401943][ T840] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 109.405039][ T840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.410977][ T840] usb 5-1: config 0 descriptor?? [ 109.620949][ T840] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 109.821898][ T24] usb 5-1: USB disconnect, device number 6 [ 109.828170][ T24] usblp0: removed [ 109.834136][ T7952] trusted_key: syz.1.696 sent an empty control message without MSG_MORE. [ 110.207972][ T7957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.698'. [ 110.219488][ T7957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.228349][ T7957] vlan3: entered allmulticast mode [ 110.230000][ T7957] bond1: entered allmulticast mode [ 110.389921][ T7967] binder: 7966:7967 ioctl c0306201 800003c0 returned -14 [ 110.402492][ T7969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.703'. [ 110.409663][ T7969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.703'. [ 110.467976][ T7975] kvm: pic: non byte read [ 110.470582][ T7975] kvm: pic: level sensitive irq not supported [ 110.470814][ T7975] kvm: pic: non byte read [ 110.475550][ T7975] kvm: pic: level sensitive irq not supported [ 110.475786][ T7975] kvm: pic: non byte read [ 110.480077][ T7975] kvm: pic: level sensitive irq not supported [ 110.480394][ T7975] kvm: pic: non byte read [ 110.484658][ T7975] kvm: pic: level sensitive irq not supported [ 110.484886][ T7975] kvm: pic: non byte read [ 110.489339][ T7975] kvm: pic: level sensitive irq not supported [ 110.489579][ T7975] kvm: pic: non byte read [ 110.494367][ T7975] kvm: pic: level sensitive irq not supported [ 110.494596][ T7975] kvm: pic: non byte read [ 111.476191][ T8024] binder: 8021:8024 unknown command 0 [ 111.478992][ T8024] binder: 8021:8024 ioctl c0306201 800001c0 returned -22 [ 111.816124][ T53] net_ratelimit: 98 callbacks suppressed [ 111.816137][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.555943][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 112.715545][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 112.719622][ T24] usb 7-1: config 0 has no interfaces? [ 112.723934][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.728634][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.731969][ T24] usb 7-1: Product: syz [ 112.733894][ T24] usb 7-1: Manufacturer: syz [ 112.739460][ T24] usb 7-1: SerialNumber: syz [ 112.743342][ T24] usb 7-1: config 0 descriptor?? [ 112.780318][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.741'. [ 112.855588][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.950511][ T24] usb 7-1: USB disconnect, device number 5 [ 113.174100][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.744'. [ 113.486362][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.747'. [ 113.691781][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 113.798414][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.754'. [ 113.847974][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.756'. [ 113.908635][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.931735][ T8110] team0 (unregistering): Port device team_slave_0 removed [ 113.939274][ T8110] team0 (unregistering): Port device team_slave_1 removed [ 114.057374][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.814102][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.765'. [ 114.936281][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.072085][ T8148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.074783][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.078183][ T8148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.086897][ T8147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.090037][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.228772][ T8150] team0 (unregistering): Port device team_slave_0 removed [ 115.242712][ T8150] team0 (unregistering): Port device team_slave_1 removed [ 115.254532][ T8150] team0 (unregistering): Port device geneve0 removed [ 115.268439][ T8156] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 116.042304][ T40] audit: type=1800 audit(1750928716.049:51): pid=8185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.784" name="file1" dev="overlay" ino=1158 res=0 errno=0 [ 116.582606][ T8192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.582796][ T8193] __nla_validate_parse: 1 callbacks suppressed [ 116.582809][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.785'. [ 116.590031][ T8192] IPv6: NLM_F_CREATE should be set when creating new route [ 116.592221][ T8192] IPv6: NLM_F_CREATE should be set when creating new route [ 116.936893][ T8203] binder: 8202:8203 ioctl c0306201 0 returned -14 [ 116.943786][ T8203] binder: BINDER_SET_CONTEXT_MGR already set [ 116.950059][ T8203] binder: 8202:8203 ioctl 4018620d 80000040 returned -16 [ 116.952590][ T8203] binder: 8202:8203 ioctl c0306201 0 returned -14 [ 117.031397][ T53] net_ratelimit: 17 callbacks suppressed [ 117.031410][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.105919][ T840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.331061][ T8193] team0 (unregistering): Port device team_slave_0 removed [ 117.336204][ T8193] team0 (unregistering): Port device team_slave_1 removed [ 117.346118][ T8193] team0 (unregistering): Port device geneve0 removed [ 117.768831][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'. [ 117.859570][ T8240] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 118.066315][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.218486][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.875705][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'. [ 118.936615][ T8303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.939475][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.942124][ T8303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.947979][ T8302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.950958][ T8302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.063996][ T8308] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.066693][ T8308] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.126785][ T8308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.141762][ T8308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.203998][ T8308] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.206943][ T8308] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.209666][ T8308] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.212481][ T8308] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.368144][ T8339] netlink: 'syz.4.847': attribute type 23 has an invalid length. [ 120.467154][ T8347] tipc: Started in network mode [ 120.469071][ T8347] tipc: Node identity c65ba31be801, cluster identity 4711 [ 120.471281][ T8347] tipc: Enabled bearer , priority 0 [ 120.492686][ T8347] syzkaller0: entered promiscuous mode [ 120.494368][ T8347] syzkaller0: entered allmulticast mode [ 120.497104][ T8347] tipc: Resetting bearer [ 120.504424][ T8346] tipc: Resetting bearer [ 121.116594][ T8374] netlink: 'syz.1.861': attribute type 23 has an invalid length. [ 121.487684][ T53] tipc: Node number set to 777691931 [ 121.621790][ T8346] tipc: Disabling bearer [ 121.632058][ T8381] netlink: 'syz.0.864': attribute type 27 has an invalid length. [ 121.678124][ T8381] bridge0: port 3(syz_tun) entered disabled state [ 121.686060][ T8381] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.689246][ T8381] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.710858][ T8381] batman_adv: batadv0: Interface deactivated: dummy0 [ 121.721079][ T40] audit: type=1326 audit(1750928721.729:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.2.866" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x0 [ 121.770165][ T8381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.779933][ T8381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.848300][ T8381] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.851009][ T8381] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.853675][ T8381] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.857442][ T8381] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.922717][ T8381] gtp0: left promiscuous mode [ 121.965069][ T8384] bridge0: port 3(syz_tun) entered blocking state [ 121.967208][ T8384] bridge0: port 3(syz_tun) entered forwarding state [ 121.971078][ T8384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.973560][ T8384] batman_adv: batadv0: Interface activated: dummy0 [ 121.975614][ T8384] batadv0: mtu less than device minimum [ 122.996641][ T8422] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.875'. [ 122.999948][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.875'. [ 123.136760][ T8424] netlink: 'syz.0.876': attribute type 23 has an invalid length. [ 123.172979][ T8431] netlink: 'syz.1.880': attribute type 27 has an invalid length. [ 123.204244][ T8431] net_ratelimit: 20 callbacks suppressed [ 123.204251][ T8431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.385467][ T53] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 123.535486][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 123.538398][ T53] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.541809][ T53] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 123.544561][ T53] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 123.548140][ T53] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 123.551561][ T53] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 123.554341][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.559423][ T53] hub 9-1:1.0: bad descriptor, ignoring hub [ 123.561297][ T53] hub 9-1:1.0: probe with driver hub failed with error -5 [ 123.563764][ T53] cdc_wdm 9-1:1.0: skipping garbage [ 123.565526][ T53] cdc_wdm 9-1:1.0: skipping garbage [ 123.568047][ T53] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 123.569920][ T53] cdc_wdm 9-1:1.0: Unknown control protocol [ 123.865564][ T6013] usb 9-1: USB disconnect, device number 5 [ 124.195430][ T6013] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 124.345469][ T6013] usb 9-1: Using ep0 maxpacket: 8 [ 124.349199][ T6013] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.352305][ T6013] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 124.355048][ T6013] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 124.358510][ T6013] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 124.362077][ T6013] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 124.364863][ T6013] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.370686][ T6013] hub 9-1:1.0: bad descriptor, ignoring hub [ 124.372546][ T6013] hub 9-1:1.0: probe with driver hub failed with error -5 [ 124.374934][ T6013] cdc_wdm 9-1:1.0: skipping garbage [ 124.376854][ T6013] cdc_wdm 9-1:1.0: skipping garbage [ 124.379138][ T6013] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 124.380985][ T6013] cdc_wdm 9-1:1.0: Unknown control protocol [ 124.677143][ T29] usb 9-1: USB disconnect, device number 6 [ 127.162991][ T8462] netlink: 'syz.0.891': attribute type 23 has an invalid length. [ 127.379428][ T8465] netlink: 'syz.4.892': attribute type 27 has an invalid length. [ 127.466202][ T8465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.474329][ T8465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.532219][ T8465] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.537530][ T8465] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.542043][ T8465] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.546400][ T8465] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.648284][ T8473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.656657][ T8473] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.665252][ T8473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.618810][ T8497] netlink: 'syz.2.903': attribute type 23 has an invalid length. [ 128.632330][ T40] audit: type=1804 audit(1750928728.639:53): pid=8502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.905" name="file0" dev="tmpfs" ino=1024 res=1 errno=0 [ 128.744521][ T8507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.831747][ T8514] netlink: 'syz.1.910': attribute type 27 has an invalid length. [ 128.898681][ T8514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.513381][ T8537] netlink: 'syz.4.917': attribute type 23 has an invalid length. [ 129.790922][ T8543] netlink: 'syz.4.920': attribute type 27 has an invalid length. [ 129.847036][ T8543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.856111][ T8543] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.860802][ T8543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.081197][ T8554] pim6reg: entered allmulticast mode [ 130.088316][ T8554] pim6reg: left allmulticast mode [ 130.143493][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.927'. [ 130.155874][ T8558] bond1: entered promiscuous mode [ 130.157721][ T8558] bond1: entered allmulticast mode [ 130.165922][ T8558] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.168894][ T8558] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.171596][ T8558] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.174262][ T8558] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.180536][ T8558] geneve2: entered promiscuous mode [ 130.182361][ T8558] geneve2: entered allmulticast mode [ 130.184235][ T8558] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 130.197432][ T8558] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 130.200387][ T8558] geneve2: left promiscuous mode [ 130.200952][ T8562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.202157][ T8558] geneve2: left allmulticast mode [ 130.204729][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.209182][ T8562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.209617][ T8558] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.212936][ T8561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.215062][ T8558] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.218016][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.220790][ T8558] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.224639][ T8561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.226611][ T8558] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.233286][ T8558] bond1 (unregistering): Released all slaves [ 130.257598][ T8566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.260387][ T8566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.279182][ T8568] netlink: 'syz.2.931': attribute type 27 has an invalid length. [ 130.377522][ T8568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.384947][ T8568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.426950][ T8568] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.429766][ T8568] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.432549][ T8568] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.435301][ T8568] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.466481][ T8568] bond0: left promiscuous mode [ 130.468053][ T8568] wireguard0: left promiscuous mode [ 130.558164][ T9] syz1: Port: 1 Link DOWN [ 130.648090][ T8569] bridge0: port 3(syz_tun) entered blocking state [ 130.650367][ T8569] bridge0: port 3(syz_tun) entered listening state [ 130.727711][ T72] syz1: Port: 1 Link ACTIVE [ 130.737758][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 130.955093][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.941'. [ 131.605729][ T8614] netlink: 'syz.1.948': attribute type 27 has an invalid length. [ 131.701405][ T53] libceph: connect (1)[c::]:6789 error -101 [ 131.704563][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 131.966859][ T53] libceph: connect (1)[c::]:6789 error -101 [ 131.968824][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 132.308181][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.310494][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.475697][ T53] libceph: connect (1)[c::]:6789 error -101 [ 132.477812][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 132.528114][ T8618] ceph: No mds server is up or the cluster is laggy [ 132.625532][ T29] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 132.806617][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.809814][ T29] usb 5-1: config 0 has no interfaces? [ 132.813034][ T29] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.816029][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.818533][ T29] usb 5-1: Product: syz [ 132.819860][ T29] usb 5-1: Manufacturer: syz [ 132.821337][ T29] usb 5-1: SerialNumber: syz [ 132.823956][ T29] usb 5-1: config 0 descriptor?? [ 132.876816][ T8648] netlink: 'syz.1.960': attribute type 27 has an invalid length. [ 133.589764][ T8657] 9pnet_fd: Insufficient options for proto=fd [ 134.192547][ T8653] net_ratelimit: 18 callbacks suppressed [ 134.192564][ T8653] Set syz1 is full, maxelem 65536 reached [ 134.401025][ T8680] pic_ioport_write: 1945 callbacks suppressed [ 134.401096][ T8680] kvm: pic: single mode not supported [ 134.404292][ T8680] picdev_write: 1912 callbacks suppressed [ 134.404301][ T8680] kvm: pic: non byte write [ 134.412002][ T8680] kvm: pic: single mode not supported [ 134.657055][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.977'. [ 134.778362][ T40] audit: type=1326 audit(1750928734.789:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.980" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 134.786604][ T40] audit: type=1326 audit(1750928734.789:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.980" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 134.794888][ T40] audit: type=1326 audit(1750928734.789:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.980" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 134.805472][ T40] audit: type=1326 audit(1750928734.789:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.980" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 134.811993][ T40] audit: type=1326 audit(1750928734.789:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.980" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 134.818570][ T40] audit: type=1326 audit(1750928734.789:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.980" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 134.825410][ T40] audit: type=1326 audit(1750928734.789:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.980" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 134.832062][ T40] audit: type=1326 audit(1750928734.789:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.980" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 134.839298][ T40] audit: type=1326 audit(1750928734.789:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.980" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 134.848402][ T40] audit: type=1326 audit(1750928734.789:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.980" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 134.850951][ T8698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.982'. [ 134.940313][ T8705] netlink: 96 bytes leftover after parsing attributes in process `syz.4.985'. [ 135.339456][ T29] usb 5-1: USB disconnect, device number 7 [ 135.516021][ T6324] bridge0: port 3(syz_tun) entered disabled state [ 135.523688][ T6324] syz_tun (unregistering): left allmulticast mode [ 135.525896][ T6324] syz_tun (unregistering): left promiscuous mode [ 135.528047][ T6324] bridge0: port 3(syz_tun) entered disabled state [ 135.837647][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.841093][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.844105][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.848435][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.850883][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.928886][ T8732] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 135.960477][ T1140] bridge_slave_1: left allmulticast mode [ 135.962280][ T1140] bridge_slave_1: left promiscuous mode [ 135.964098][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.968221][ T1140] bridge_slave_0: left allmulticast mode [ 135.970026][ T1140] bridge_slave_0: left promiscuous mode [ 135.971855][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.124213][ T1140] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 136.686054][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.690675][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.695015][ T1140] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 136.698093][ T1140] bond0 (unregistering): Released all slaves [ 136.867060][ T8729] chnl_net:caif_netlink_parms(): no params data found [ 136.968659][ T8775] overlayfs: failed to clone upperpath [ 136.981729][ T8729] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.984706][ T8729] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.988329][ T8729] bridge_slave_0: entered allmulticast mode [ 136.991077][ T8729] bridge_slave_0: entered promiscuous mode [ 136.994161][ T8729] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.997591][ T8729] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.000637][ T8729] bridge_slave_1: entered allmulticast mode [ 137.004475][ T8729] bridge_slave_1: entered promiscuous mode [ 137.082899][ T8729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.088535][ T8729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.132159][ T8781] overlayfs: failed to clone upperpath [ 137.135743][ T1140] hsr_slave_0: left promiscuous mode [ 137.138276][ T1140] hsr_slave_1: left promiscuous mode [ 137.140980][ T1140] batman_adv: batadv0: Interface deactivated: dummy0 [ 137.143776][ T1140] batman_adv: batadv0: Removing interface: dummy0 [ 137.149394][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.153263][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.895467][ T5950] Bluetooth: hci2: command tx timeout [ 138.167508][ T8729] team0: Port device team_slave_0 added [ 138.181417][ T8729] team0: Port device team_slave_1 added [ 138.183472][ T8804] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 138.185565][ T8804] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 138.188922][ T8804] vhci_hcd vhci_hcd.0: Device attached [ 138.218301][ T8729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.220606][ T8729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.228108][ T8810] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 138.228887][ T8729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.230925][ T8810] overlayfs: failed to set xattr on upper [ 138.235304][ T8729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.236303][ T8810] overlayfs: ...falling back to redirect_dir=nofollow. [ 138.238449][ T8729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.240585][ T8810] overlayfs: ...falling back to metacopy=off. [ 138.240591][ T8810] overlayfs: ...falling back to index=off. [ 138.240595][ T8810] overlayfs: ...falling back to uuid=null. [ 138.254793][ T8729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.316533][ T8729] hsr_slave_0: entered promiscuous mode [ 138.318806][ T8729] hsr_slave_1: entered promiscuous mode [ 138.435608][ T61] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 138.437405][ T8729] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 138.439877][ T5814] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 138.446035][ T8729] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.449959][ T8729] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 138.453649][ T8729] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 138.493033][ T8729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.512403][ T8729] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.518936][ T7619] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.521229][ T7619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.530420][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.532686][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.587521][ T5814] usb 6-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 138.592035][ T5814] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.596017][ T5814] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 138.599705][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.605710][ T5814] usb 6-1: config 0 descriptor?? [ 138.664300][ T8729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.812707][ T8805] usbip_core: unknown command [ 138.814315][ T8729] veth0_vlan: entered promiscuous mode [ 138.814534][ T8805] vhci_hcd: unknown pdu 0 [ 138.818289][ T8805] usbip_core: unknown command [ 138.820758][ T8729] veth1_vlan: entered promiscuous mode [ 138.822045][ T1257] vhci_hcd: stop threads [ 138.824322][ T1257] vhci_hcd: release socket [ 138.824468][ T5814] usb 6-1: USB disconnect, device number 4 [ 138.826322][ T1257] vhci_hcd: disconnect device [ 138.839026][ T8729] veth0_macvtap: entered promiscuous mode [ 138.846116][ T8729] veth1_macvtap: entered promiscuous mode [ 138.855063][ T8729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.875653][ T8729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.880465][ T8729] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.883331][ T8729] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.887186][ T8729] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.889966][ T8729] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.894987][ T61] vhci_hcd: vhci_device speed not set [ 138.934264][ T1257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.941417][ T1257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.951351][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.953852][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.959454][ T8729] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 139.070559][ T8843] sd 0:0:0:0: PR command failed: 1026 [ 139.072412][ T8843] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 139.074600][ T8843] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 139.289794][ T8856] block device autoloading is deprecated and will be removed. [ 139.985500][ T5950] Bluetooth: hci2: command tx timeout [ 140.253847][ T8885] loop2: detected capacity change from 0 to 7 [ 140.256875][ T8885] loop2: [ 140.257937][ T8885] loop2: partition table partially beyond EOD, truncated [ 140.791003][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1050'. [ 141.018839][ T8916] sch_tbf: burst 32854 is lower than device lo mtu (65550) ! [ 141.107030][ T8925] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1060'. [ 141.274897][ T8933] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1063'. [ 141.370330][ T8933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.375627][ T8933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.379241][ T8933] bond0 (unregistering): Released all slaves [ 142.055509][ T5950] Bluetooth: hci2: command tx timeout [ 142.187094][ T8969] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 142.206272][ T8971] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1078'. [ 144.105082][ T9001] sd 0:0:0:0: PR command failed: 1026 [ 144.107214][ T9001] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 144.109483][ T9001] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 144.135836][ T5950] Bluetooth: hci2: command tx timeout [ 145.172269][ T8973] syz.1.1079 (8973) used greatest stack depth: 20328 bytes left [ 145.327790][ T9049] netlink: 'syz.5.1111': attribute type 1 has an invalid length. [ 145.341650][ T9049] bond1: entered promiscuous mode [ 145.344105][ T9049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.409766][ T9049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.412083][ T9049] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 145.417418][ T9049] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 145.427907][ T9049] bond1: (slave wireguard0): making interface the new active one [ 145.442282][ T9049] wireguard0: entered promiscuous mode [ 145.446129][ T9049] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 145.585111][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1119'. [ 145.710944][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 145.710959][ T40] audit: type=1326 audit(1750928745.719:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.5.1123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 145.738797][ T40] audit: type=1326 audit(1750928745.719:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.5.1123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 145.752092][ T40] audit: type=1326 audit(1750928745.719:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.5.1123" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 145.758982][ T40] audit: type=1326 audit(1750928745.719:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.5.1123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 145.785548][ T40] audit: type=1326 audit(1750928745.719:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.5.1123" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 145.792169][ T40] audit: type=1326 audit(1750928745.719:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.5.1123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 145.799090][ T40] audit: type=1326 audit(1750928745.719:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.5.1123" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 145.803832][ T5950] Bluetooth: hci0: Invalid handle: 0xff00 > 0x0eff [ 145.806306][ T40] audit: type=1326 audit(1750928745.729:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.5.1123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 145.825987][ T40] audit: type=1326 audit(1750928745.729:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.5.1123" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 145.848571][ T40] audit: type=1326 audit(1750928745.749:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.5.1123" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 146.041165][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'. [ 146.765014][ T9128] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:29: iget: checksum invalid [ 146.771747][ T9129] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:29: iget: checksum invalid [ 147.125490][ T9154] netlink: 2036 bytes leftover after parsing attributes in process `syz.4.1148'. [ 147.129067][ T9154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1148'. [ 147.384981][ T9165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1154'. [ 147.778698][ T7523] bridge0: port 3(syz_tun) entered disabled state [ 147.788545][ T7523] syz_tun (unregistering): left allmulticast mode [ 147.790631][ T7523] syz_tun (unregistering): left promiscuous mode [ 147.792683][ T7523] bridge0: port 3(syz_tun) entered disabled state [ 147.800877][ T8396] syz1: Port: 1 Link DOWN [ 147.807102][ T1257] smc: removing ib device syz1 [ 148.419896][ T5954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.423636][ T5954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.428623][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.436086][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.439870][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.541905][ T9206] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:62: iget: checksum invalid [ 148.556508][ T9199] chnl_net:caif_netlink_parms(): no params data found [ 148.564075][ T1257] bridge_slave_1: left allmulticast mode [ 148.566711][ T1257] bridge_slave_1: left promiscuous mode [ 148.569908][ T1257] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.575289][ T1257] bridge_slave_0: left allmulticast mode [ 148.577444][ T1257] bridge_slave_0: left promiscuous mode [ 148.580345][ T1257] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.911403][ T9211] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 148.993572][ T9213] sctp: [Deprecated]: syz.1.1176 (pid 9213) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.993572][ T9213] Use struct sctp_sack_info instead [ 149.193954][ T1257] bond0 (unregistering): (slave wireguard0): Releasing backup interface [ 149.197532][ T1257] bond0 (unregistering): Released all slaves [ 149.281366][ T1257] tipc: Left network mode [ 149.281437][ T9199] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.286003][ T9199] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.288414][ T9199] bridge_slave_0: entered allmulticast mode [ 149.297289][ T9199] bridge_slave_0: entered promiscuous mode [ 149.302396][ T9199] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.304776][ T9199] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.308487][ T9199] bridge_slave_1: entered allmulticast mode [ 149.311967][ T9199] bridge_slave_1: entered promiscuous mode [ 149.358241][ T9199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.370592][ T9199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.430025][ T9199] team0: Port device team_slave_0 added [ 149.442140][ T9199] team0: Port device team_slave_1 added [ 149.487043][ T9199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.490007][ T9199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.500648][ T9199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.510357][ T9199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.513187][ T9199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.525254][ T9199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.532818][ T1257] hsr_slave_0: left promiscuous mode [ 149.535151][ T1257] hsr_slave_1: left promiscuous mode [ 149.537282][ T1257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.542117][ T1257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.791019][ T9227] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:7: iget: checksum invalid [ 149.797453][ T9228] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:7: iget: checksum invalid [ 150.455818][ T5954] Bluetooth: hci1: command tx timeout [ 150.721667][ T9199] hsr_slave_0: entered promiscuous mode [ 150.724676][ T9199] hsr_slave_1: entered promiscuous mode [ 150.728283][ T9199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.731823][ T9199] Cannot create hsr debugfs directory [ 150.898167][ T9199] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 150.916948][ T9199] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 150.928683][ T9238] syz_tun: entered allmulticast mode [ 150.931454][ T9199] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 150.941995][ T9199] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 150.944682][ T9241] Set syz1 is full, maxelem 65536 reached [ 150.959498][ T9237] syz_tun: left allmulticast mode [ 151.041341][ T9199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.268319][ T9199] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.284183][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.287279][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.299500][ T7586] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.302306][ T7586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.369597][ T9263] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:29: iget: checksum invalid [ 151.379153][ T9266] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:29: iget: checksum invalid [ 151.388170][ T9267] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:29: iget: checksum invalid [ 151.395085][ T9268] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:29: iget: checksum invalid [ 151.414947][ T9199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.418545][ T9271] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:29: iget: checksum invalid [ 151.452692][ T9278] netlink: 'syz.4.1193': attribute type 1 has an invalid length. [ 151.464431][ T9199] veth0_vlan: entered promiscuous mode [ 151.473049][ T9278] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 151.478278][ T9278] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 151.481623][ T9278] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 151.486463][ T9278] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 151.501289][ T9199] veth1_vlan: entered promiscuous mode [ 151.523824][ T9199] veth0_macvtap: entered promiscuous mode [ 151.530980][ T9199] veth1_macvtap: entered promiscuous mode [ 151.549092][ T9199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.559319][ T9199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.566227][ T9199] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.570559][ T9199] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.573971][ T9199] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.578287][ T9199] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.594442][ T9284] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 151.646906][ T7586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.650364][ T7586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.673356][ T7617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.676219][ T7617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.789207][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1197'. [ 152.223882][ T9330] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.1213'. [ 152.226919][ T9330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1213'. [ 152.545511][ T5954] Bluetooth: hci1: command tx timeout [ 153.019124][ T9340] tipc: Failed to remove unknown binding: 66,1,1/0:4191186278/4191186280 [ 153.022601][ T9340] tipc: Failed to remove unknown binding: 66,1,1/0:4191186278/4191186280 [ 154.615530][ T5954] Bluetooth: hci1: command tx timeout [ 155.302668][ T9398] overlayfs: failed to clone upperpath [ 155.338242][ T9400] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 155.340440][ T9400] overlayfs: failed to set xattr on upper [ 155.342245][ T9400] overlayfs: ...falling back to redirect_dir=nofollow. [ 155.344456][ T9400] overlayfs: ...falling back to index=off. [ 155.346444][ T9400] overlayfs: ...falling back to uuid=null. [ 155.352555][ T9400] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 155.490952][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1242'. [ 155.496079][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1242'. [ 155.555127][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1245'. [ 155.585166][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1246'. [ 155.606079][ T9421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1247'. [ 155.707287][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1252'. [ 155.801905][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 155.801916][ T40] audit: type=1326 audit(1750928755.809:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9438 comm="syz.4.1255" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x0 [ 155.895465][ T61] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 156.047079][ T61] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.050358][ T61] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.054422][ T61] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 156.057973][ T61] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 156.061015][ T61] usb 11-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.067264][ T61] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.070359][ T61] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.072985][ T61] usb 11-1: Product: syz [ 156.074560][ T61] usb 11-1: Manufacturer: syz [ 156.076265][ T61] usb 11-1: SerialNumber: syz [ 156.080277][ T61] cdc_ncm 11-1:1.0: skipping garbage [ 156.695857][ T5954] Bluetooth: hci1: command tx timeout [ 156.831990][ T72] kernel read not supported for file inotify (pid: 72 comm: kworker/1:2) [ 157.088406][ T61] cdc_ncm 11-1:1.0: bind() failure [ 157.097618][ T61] cdc_ncm 11-1:1.1: probe with driver cdc_ncm failed with error -71 [ 157.102282][ T61] cdc_mbim 11-1:1.1: probe with driver cdc_mbim failed with error -71 [ 157.107357][ T61] usbtest 11-1:1.1: probe with driver usbtest failed with error -71 [ 157.117217][ T61] usb 11-1: USB disconnect, device number 2 [ 157.319294][ T9477] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 157.704732][ T9486] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 157.767101][ T9494] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1275'. [ 158.726252][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1283'. [ 158.730552][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1283'. [ 158.733665][ T9512] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 158.735426][ T9471] Set syz1 is full, maxelem 65536 reached [ 158.842229][ T9519] kvm: pic: single mode not supported [ 158.843054][ T9519] kvm: pic: non byte write [ 158.847772][ T9519] kvm: pic: single mode not supported [ 159.025935][ T9526] vlan2: entered allmulticast mode [ 159.030454][ T9526] veth1_to_hsr: entered allmulticast mode [ 159.055440][ T72] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 159.191758][ T9532] Bluetooth: hci4: Frame reassembly failed (-90) [ 159.195102][ T7617] Bluetooth: hci4: Frame reassembly failed (-84) [ 159.206510][ T9534] vlan3: entered allmulticast mode [ 159.241238][ T5950] Bluetooth: hci2: ACL packet for unknown connection handle 1 [ 159.241476][ T72] usb 10-1: unable to get BOS descriptor or descriptor too short [ 159.246861][ T72] usb 10-1: no configurations [ 159.248373][ T72] usb 10-1: can't read configurations, error -22 [ 159.316341][ T9537] netlink: 'syz.4.1294': attribute type 4 has an invalid length. [ 159.586268][ T9549] syz_tun: entered allmulticast mode [ 159.590591][ T9548] syz_tun: left allmulticast mode [ 160.094409][ T9568] EXT4-fs error: 7 callbacks suppressed [ 160.094420][ T9568] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:60: iget: checksum invalid [ 160.102783][ T9569] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:11: iget: checksum invalid [ 160.233009][ T9576] input: syz0 as /devices/virtual/input/input7 [ 160.282391][ T40] audit: type=1804 audit(1750928760.289:97): pid=9582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1314" name="file0" dev="tmpfs" ino=1839 res=1 errno=0 [ 161.063776][ T9598] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:11: iget: checksum invalid [ 161.069424][ T9599] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:11: iget: checksum invalid [ 161.256457][ T5950] Bluetooth: hci2: command tx timeout [ 161.256534][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 161.256552][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 161.296194][ T9609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.501708][ C3] vcan0: j1939_tp_rxtimer: 0xffff88801392b000: rx timeout, send abort [ 161.864256][ T40] audit: type=1800 audit(1750928761.869:98): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1334" name="file1" dev="overlay" ino=158 res=0 errno=0 [ 162.005198][ C3] vcan0: j1939_tp_rxtimer: 0xffff88801392b000: abort rx timeout. Force session deactivation [ 162.101248][ T9641] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 162.372241][ T40] audit: type=1804 audit(1750928762.379:99): pid=9666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1346" name="/newroot/303/file0" dev="tmpfs" ino=1697 res=1 errno=0 [ 162.372578][ T9666] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1 [ 162.383593][ T9666] ref_ctr increment failed for inode: 0x6a1 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88804ba2c080 [ 162.480736][ T9672] kvm: pic: single mode not supported [ 162.482807][ T9672] kvm: pic: level sensitive irq not supported [ 162.486963][ T9672] kvm: pic: single mode not supported [ 162.488877][ T9672] kvm: pic: level sensitive irq not supported [ 162.589495][ T9678] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:60: iget: checksum invalid [ 162.597368][ T9679] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:11: iget: checksum invalid [ 163.158185][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1355'. [ 163.335584][ T5950] Bluetooth: hci2: command 0x0406 tx timeout [ 163.561603][ T29] IPVS: starting estimator thread 0... [ 163.657124][ T9705] IPVS: using max 27 ests per chain, 64800 per kthread [ 164.277710][ T9724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.292492][ T9724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.844000][ T9736] overlayfs: failed to clone upperpath [ 165.937821][ T9728] Set syz1 is full, maxelem 65536 reached [ 166.902403][ T40] audit: type=1326 audit(1750928766.909:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9777 comm="syz.4.1387" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707e579 code=0x0 [ 167.869516][ T9794] kvm: pic: single mode not supported [ 167.871650][ T9794] kvm: pic: level sensitive irq not supported [ 167.875776][ T9794] kvm: pic: single mode not supported [ 167.877777][ T9794] kvm: pic: level sensitive irq not supported [ 168.056677][ T9776] Set syz1 is full, maxelem 65536 reached [ 169.609517][ T9825] kvm: pic: non byte read [ 169.611856][ T9825] kvm: pic: level sensitive irq not supported [ 169.612103][ T9825] kvm: pic: non byte read [ 169.617321][ T9825] kvm: pic: level sensitive irq not supported [ 169.617571][ T9825] kvm: pic: non byte read [ 169.622103][ T9825] kvm: pic: level sensitive irq not supported [ 169.622335][ T9825] kvm: pic: non byte read [ 169.626642][ T9825] kvm: pic: level sensitive irq not supported [ 169.626867][ T9825] kvm: pic: non byte read [ 169.631043][ T9825] kvm: pic: level sensitive irq not supported [ 169.631272][ T9825] kvm: pic: non byte read [ 169.635666][ T9825] kvm: pic: level sensitive irq not supported [ 169.635892][ T9825] kvm: pic: non byte read [ 169.642032][ T9834] 9pnet_fd: Insufficient options for proto=fd [ 169.752035][ T9851] syz_tun: entered allmulticast mode [ 169.756520][ T9850] syz_tun: left allmulticast mode [ 169.790013][ T9853] kvm: pic: single mode not supported [ 169.790038][ T9853] kvm: pic: level sensitive irq not supported [ 169.792089][ T9853] kvm: pic: single mode not supported [ 169.798291][ T9853] kvm: pic: non byte write [ 169.802433][ T9853] kvm: pic: non byte write [ 169.804405][ T9853] kvm: pic: non byte write [ 169.806759][ T9853] kvm: pic: non byte write [ 169.808692][ T9853] kvm: pic: non byte write [ 169.811266][ T9853] kvm: pic: non byte write [ 169.813267][ T9853] kvm: pic: non byte write [ 169.815047][ T9853] kvm: pic: non byte write [ 169.817011][ T9853] kvm: pic: non byte write [ 169.818854][ T9853] kvm: pic: non byte write [ 169.825204][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1418'. [ 169.844926][ T9862] gtp0: entered promiscuous mode [ 170.061957][ T9880] overlayfs: failed to clone upperpath [ 170.215695][ T5946] Bluetooth: hci3: command 0x0406 tx timeout [ 170.752576][ T9889] sctp: [Deprecated]: syz.6.1430 (pid 9889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.752576][ T9889] Use struct sctp_sack_info instead [ 170.906600][ T9897] overlayfs: failed to clone lowerpath [ 170.911969][ T9897] overlayfs: failed to clone upperpath [ 170.956608][ T9902] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:60: iget: checksum invalid [ 170.961445][ T9903] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:1: iget: checksum invalid [ 171.044246][ T5950] Bluetooth: hci3: Invalid handle: 0xff00 > 0x0eff [ 172.869545][ T9983] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1468'. [ 172.958672][ T40] audit: type=1326 audit(1750928772.969:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 172.967560][ T40] audit: type=1326 audit(1750928772.969:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 172.976575][ T40] audit: type=1326 audit(1750928772.969:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1472" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 172.985446][ T40] audit: type=1326 audit(1750928772.969:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 172.994161][ T40] audit: type=1326 audit(1750928772.969:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 173.008404][ T40] audit: type=1326 audit(1750928772.969:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1472" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 173.015807][ T40] audit: type=1326 audit(1750928772.969:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 173.024177][ T40] audit: type=1326 audit(1750928772.969:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 173.032418][ T40] audit: type=1326 audit(1750928772.969:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1472" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 173.039623][ T40] audit: type=1326 audit(1750928772.979:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.5.1472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 173.931287][T10006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1478'. [ 173.966310][T10006] bond2: entered promiscuous mode [ 173.968032][T10006] bond2: entered allmulticast mode [ 173.989422][T10006] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.992500][T10006] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.996411][T10006] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.000214][T10006] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.005286][T10006] geneve2: entered promiscuous mode [ 174.008288][T10006] geneve2: entered allmulticast mode [ 174.010448][T10006] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 174.085535][T10006] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 174.089337][T10006] geneve2: left promiscuous mode [ 174.091087][T10006] geneve2: left allmulticast mode [ 174.093220][T10006] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.096066][T10006] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.099894][T10006] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.103237][T10006] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.107300][T10006] bond2 (unregistering): Released all slaves [ 174.401814][T10016] overlayfs: failed to clone upperpath [ 175.751484][T10009] Set syz1 is full, maxelem 65536 reached [ 175.788005][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1492'. [ 175.806549][T10039] bond1: entered promiscuous mode [ 175.808214][T10039] bond1: entered allmulticast mode [ 175.824225][T10039] geneve2: entered promiscuous mode [ 175.826186][T10039] geneve2: entered allmulticast mode [ 175.828062][T10039] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 175.855022][T10041] kvm: pic: single mode not supported [ 175.857775][T10041] kvm: pic: single mode not supported [ 175.859914][T10041] kvm: pic: single mode not supported [ 175.861983][T10041] kvm: pic: single mode not supported [ 175.865220][T10041] kvm: pic: single mode not supported [ 175.867957][T10041] kvm: pic: single mode not supported [ 175.870066][T10041] kvm: pic: single mode not supported [ 175.872095][T10041] kvm: pic: single mode not supported [ 175.874193][T10041] kvm: pic: single mode not supported [ 175.877481][T10041] kvm: pic: single mode not supported [ 176.170268][T10039] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 176.192552][T10039] geneve2: left promiscuous mode [ 176.194825][T10039] geneve2: left allmulticast mode [ 176.201037][T10039] bond1 (unregistering): Released all slaves [ 176.689544][T10058] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.844878][T10058] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.907933][T10058] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.979174][T10058] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.070279][T10058] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.083666][T10058] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.097163][T10058] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.108492][T10058] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.550141][ T6013] libceph: connect (1)[c::]:6789 error -101 [ 179.553271][ T6013] libceph: mon0 (1)[c::]:6789 connect error [ 179.612008][T10115] overlayfs: failed to clone upperpath [ 179.625443][T10117] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 179.827000][ T8396] libceph: connect (1)[c::]:6789 error -101 [ 179.829034][ T8396] libceph: mon0 (1)[c::]:6789 connect error [ 180.346459][ T8396] libceph: connect (1)[c::]:6789 error -101 [ 180.348550][ T8396] libceph: mon0 (1)[c::]:6789 connect error [ 180.380318][T10110] ceph: No mds server is up or the cluster is laggy [ 180.857860][T10132] pic_ioport_write: 6174 callbacks suppressed [ 180.857878][T10132] kvm: pic: single mode not supported [ 180.860658][T10132] kvm: pic: single mode not supported [ 180.862999][T10132] kvm: pic: single mode not supported [ 180.865307][T10132] kvm: pic: single mode not supported [ 180.867585][T10132] kvm: pic: single mode not supported [ 180.869835][T10132] kvm: pic: single mode not supported [ 180.872122][T10132] kvm: pic: single mode not supported [ 180.874291][T10166] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 180.874558][T10132] kvm: pic: single mode not supported [ 180.881289][T10132] kvm: pic: single mode not supported [ 180.884726][T10132] kvm: pic: single mode not supported [ 181.276695][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 181.276710][ T40] audit: type=1326 audit(1750928781.289:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.6.1540" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x0 [ 181.851151][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1545'. [ 181.856227][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1545'. [ 181.861362][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1545'. [ 182.370031][T10207] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1551'. [ 182.892349][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1556'. [ 182.897586][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1556'. [ 182.901298][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1556'. [ 183.483119][T10215] 9pnet_fd: p9_fd_create_tcp (10215): problem connecting socket to 127.0.0.1 [ 183.523127][T10225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1559'. [ 183.749077][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1569'. [ 183.910469][T10237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1562'. [ 184.027073][T10244] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:33: iget: checksum invalid [ 184.033906][T10245] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:33: iget: checksum invalid [ 184.409480][T10248] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 184.466894][T10250] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:27: iget: checksum invalid [ 184.510953][T10251] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:27: iget: checksum invalid [ 184.919584][T10249] Â: renamed from pim6reg1 [ 185.350676][ T5946] Bluetooth: hci1: Invalid handle: 0xff00 > 0x0eff [ 185.575456][ T5954] Bluetooth: hci0: command 0x0406 tx timeout [ 187.405167][T10340] overlayfs: failed to clone upperpath [ 188.102210][T10370] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:65: iget: checksum invalid [ 188.108731][T10371] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:65: iget: checksum invalid [ 188.221738][T10376] netfs: Couldn't get user pages (rc=-14) [ 188.389433][T10389] netlink: 'syz.4.1615': attribute type 4 has an invalid length. [ 188.416792][T10389] netlink: 'syz.4.1615': attribute type 4 has an invalid length. [ 188.512529][T10393] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 188.565001][T10398] overlayfs: failed to clone upperpath [ 189.128591][T10407] overlayfs: failed to clone upperpath [ 189.206111][T10409] netfs: Couldn't get user pages (rc=-14) [ 189.253109][T10412] overlayfs: failed to clone upperpath [ 190.194010][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1630'. [ 191.215006][ T5950] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 191.358980][T10461] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1643'. [ 191.364164][T10461] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1643'. [ 192.181290][T10479] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 192.219709][T10479] kvm: pic: non byte read [ 192.240731][T10479] kvm: pic: level sensitive irq not supported [ 192.241303][T10479] kvm: pic: non byte read [ 192.248169][T10479] kvm: pic: level sensitive irq not supported [ 192.248702][T10479] kvm: pic: non byte read [ 192.296642][T10479] kvm: pic: level sensitive irq not supported [ 192.297100][T10479] kvm: pic: non byte read [ 192.304658][T10479] kvm: pic: level sensitive irq not supported [ 192.305103][T10479] kvm: pic: non byte read [ 192.348116][T10479] kvm: pic: level sensitive irq not supported [ 192.349040][T10479] kvm: pic: non byte read [ 192.354856][T10479] kvm: pic: level sensitive irq not supported [ 192.355154][T10479] kvm: pic: non byte read [ 192.440721][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1655'. [ 192.543715][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1658'. [ 192.566015][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1658'. [ 192.570034][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1658'. [ 192.576165][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1658'. [ 192.666191][T10509] netlink: 'syz.6.1662': attribute type 2 has an invalid length. [ 192.668923][T10509] netlink: 'syz.6.1662': attribute type 1 has an invalid length. [ 192.671758][T10509] netlink: 'syz.6.1662': attribute type 1 has an invalid length. [ 192.762281][T10512] QAT: Stopping all acceleration devices. [ 192.847805][T10519] binder: 10518:10519 ioctl c0306201 800003c0 returned -14 [ 192.855748][T10517] [ 192.890921][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1666'. [ 192.899503][T10522] netlink: 'syz.1.1674': attribute type 10 has an invalid length. [ 192.932481][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1676'. [ 193.230510][T10555] sit0: entered promiscuous mode [ 193.265509][T10555] netlink: 'syz.4.1679': attribute type 1 has an invalid length. [ 193.423303][T10566] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:66: iget: checksum invalid [ 193.431992][T10567] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:66: iget: checksum invalid [ 193.504865][T10572] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:61: iget: checksum invalid [ 193.511097][T10573] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:61: iget: checksum invalid [ 193.516961][T10574] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:59: iget: checksum invalid [ 193.521504][T10575] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:59: iget: checksum invalid [ 193.740088][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.742284][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.352650][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 194.358663][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 194.364938][T10606] uprobe: syz.4.1699:10606 failed to unregister, leaking uprobe [ 194.368128][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 194.373797][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 194.404354][T10608] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 195.073935][ T40] audit: type=1800 audit(1750928795.069:119): pid=10601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1695" name="/" dev="fuse" ino=0 res=0 errno=0 [ 195.125702][T10622] netlink: 'syz.4.1706': attribute type 4 has an invalid length. [ 195.257842][ T5950] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 195.260813][ T5950] Bluetooth: hci2: Injecting HCI hardware error event [ 195.264194][ T5950] Bluetooth: hci2: hardware error 0x00 [ 195.322378][T10638] IPv6: NLM_F_CREATE should be specified when creating new route [ 195.355460][ T72] usb 10-1: new full-speed USB device number 4 using dummy_hcd can't run '/sbin/getty': Bad message [ 195.410370][T10644] __nla_validate_parse: 3 callbacks suppressed [ 195.410385][T10644] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1715'. [ 195.528342][ T72] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.532384][ T72] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.539751][ T72] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 195.543411][ T72] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.754755][ T72] usb 10-1: usb_control_msg returned -32 [ 195.757282][ T72] usbtmc 10-1:16.0: can't read capabilities [ 195.907021][T10661] netlink: 'syz.4.1722': attribute type 1 has an invalid length. [ 195.940721][T10661] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 195.944004][T10661] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 195.947098][T10661] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 195.950437][T10661] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 195.955873][T10661] bond2: (slave geneve3): making interface the new active one [ 195.958975][T10661] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 196.213386][T10665] overlayfs: failed to clone upperpath can't run '/sbin/getty': Bad message [ 197.219918][T10679] pic_ioport_write: 88 callbacks suppressed [ 197.219931][T10679] kvm: pic: single mode not supported [ 197.222166][T10679] kvm: pic: level sensitive irq not supported [ 197.228300][T10679] kvm: pic: level sensitive irq not supported [ 197.232667][T10679] kvm: pic: level sensitive irq not supported [ 197.346552][ T5950] Bluetooth: hci2: Opcode 0x0c03 failed: -110 can't run '/sbin/getty': Bad message [ 197.446951][T10686] hsr0 speed is unknown, defaulting to 1000 [ 197.448921][T10686] hsr0 speed is unknown, defaulting to 1000 [ 197.451514][T10686] hsr0 speed is unknown, defaulting to 1000 [ 197.456938][T10686] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 197.463077][T10686] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 197.477718][T10686] hsr0 speed is unknown, defaulting to 1000 [ 197.480364][T10686] hsr0 speed is unknown, defaulting to 1000 [ 197.483285][T10686] hsr0 speed is unknown, defaulting to 1000 [ 197.486055][T10686] hsr0 speed is unknown, defaulting to 1000 [ 197.755510][ T53] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 197.925419][ T53] usb 6-1: Using ep0 maxpacket: 16 [ 197.929528][ T53] usb 6-1: config 0 has an invalid interface number: 198 but max is 0 [ 197.932643][ T53] usb 6-1: config 0 has no interface number 0 [ 197.936381][ T53] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=30.1d [ 197.939824][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.942546][ T53] usb 6-1: Product: syz [ 197.944274][ T53] usb 6-1: Manufacturer: syz [ 197.946851][ T53] usb 6-1: SerialNumber: syz [ 197.950999][ T53] usb 6-1: config 0 descriptor?? [ 197.956481][ T53] usb_ehset_test 6-1:0.198: probe with driver usb_ehset_test failed with error -32 [ 198.117316][ T72] usb 10-1: USB disconnect, device number 4 [ 198.142738][T10696] syz_tun: entered allmulticast mode [ 198.156503][ T9] usb 6-1: USB disconnect, device number 5 [ 198.164243][T10695] syz_tun: left allmulticast mode [ 198.335089][T10705] bridge_slave_0: left allmulticast mode [ 198.338078][T10705] bridge_slave_0: left promiscuous mode [ 198.340786][T10705] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.345935][T10705] bridge_slave_1: left allmulticast mode [ 198.347893][T10705] bridge_slave_1: left promiscuous mode [ 198.349907][T10705] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.359371][T10705] bond0: (slave bond_slave_0): Releasing backup interface [ 198.363948][T10705] bond0: (slave bond_slave_1): Releasing backup interface [ 198.381772][T10705] team0: Port device team_slave_0 removed [ 198.390274][T10705] team0: Port device team_slave_1 removed [ 198.392687][T10705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.395791][T10705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.399196][T10705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.401680][T10705] batman_adv: batadv0: Removing interface: batadv_slave_1 can't run '/sbin/getty': Bad message [ 198.429256][ T1] EXT4-fs error: 26 callbacks suppressed [ 198.429274][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 198.442745][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 198.448421][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 198.453779][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 198.461724][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 198.466237][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 198.725891][T10722] overlayfs: failed to clone upperpath [ 198.857902][T10734] netlink: 'syz.6.1746': attribute type 1 has an invalid length. [ 198.874301][T10734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.905111][T10734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.909042][T10734] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 198.914804][T10734] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 198.951882][T10738] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 198.967911][T10738] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 199.008183][T10741] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:1: iget: checksum invalid [ 199.022013][T10742] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:1: iget: checksum invalid [ 199.186714][T10749] hsr0 speed is unknown, defaulting to 1000 [ 199.444439][T10760] hsr0 speed is unknown, defaulting to 1000 [ 199.472462][T10761] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm init: iget: checksum invalid can't run '/sbin/getty': Bad message [ 199.480906][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 199.605500][ T9] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 199.765564][ T9] usb 11-1: Using ep0 maxpacket: 32 [ 199.769470][ T9] usb 11-1: config 0 has no interfaces? [ 199.771868][ T9] usb 11-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 199.785506][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.790181][ T9] usb 11-1: config 0 descriptor?? [ 200.150486][ T40] audit: type=1804 audit(1750928800.159:120): pid=10787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1763" name="file0" dev="tmpfs" ino=2845 res=1 errno=0 [ 200.150770][T10787] ref_ctr increment failed for inode: 0xb1d offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807246b5c0 [ 200.172286][T10786] uprobe: syz.4.1763:10786 failed to unregister, leaking uprobe [ 200.220605][ T9] usb 11-1: USB disconnect, device number 3 can't run '/sbin/getty': Bad message [ 200.552567][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1768'. [ 200.747661][T10810] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 200.829575][T10813] binder: 10812:10813 ioctl c0306201 0 returned -14 [ 200.863832][T10813] hsr0 speed is unknown, defaulting to 1000 [ 201.134662][T10826] netlink: 'syz.5.1777': attribute type 1 has an invalid length. [ 201.150614][T10826] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.172732][T10826] erspan0: entered allmulticast mode [ 201.184283][T10826] bond2: (slave erspan0): making interface the new active one [ 201.190511][T10826] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 201.382280][T10834] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 201.439233][T10836] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. can't run '/sbin/getty': Bad message [ 201.765545][ T53] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 201.799913][T10856] tipc: Started in network mode [ 201.801593][T10856] tipc: Node identity 4, cluster identity 4711 [ 201.803713][T10856] tipc: Node number set to 4 [ 201.935554][ T53] usb 10-1: Using ep0 maxpacket: 32 [ 201.938853][ T53] usb 10-1: config 0 has no interfaces? [ 201.941348][ T53] usb 10-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 201.945157][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.950567][ T53] usb 10-1: config 0 descriptor?? [ 201.966457][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 202.425674][ T72] usb 10-1: USB disconnect, device number 5 can't run '/sbin/getty': Bad message [ 202.844442][T10878] tipc: Started in network mode [ 202.847061][T10878] tipc: Node identity e23b354287d1, cluster identity 4711 [ 202.849852][T10878] tipc: Enabled bearer , priority 0 [ 202.852994][T10877] tipc: Resetting bearer [ 203.026699][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1802'. [ 203.097812][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1800'. [ 203.100684][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1800'. [ 203.169896][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1806'. [ 203.515735][T10908] EXT4-fs error: 30 callbacks suppressed [ 203.515745][T10908] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm init: iget: checksum invalid can't run '/sbin/getty': Bad message [ 203.527042][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 203.532826][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 203.538242][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 203.542774][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 203.546692][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 203.550538][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 203.979599][ T72] tipc: Node number set to 1709847874 [ 204.050292][T10877] tipc: Disabling bearer [ 204.137482][T10916] bridge_slave_0: left allmulticast mode [ 204.139411][T10916] bridge_slave_0: left promiscuous mode [ 204.141666][T10916] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.146507][T10916] bridge_slave_1: left allmulticast mode [ 204.149101][T10916] bridge_slave_1: left promiscuous mode [ 204.151739][T10916] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.161188][T10916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.164649][T10916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.174487][T10921] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:1: iget: checksum invalid [ 204.179613][T10922] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:1: iget: checksum invalid [ 204.183679][T10920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.186709][T10920] IPv6: NLM_F_CREATE should be set when creating new route [ 204.237186][T10927] netlink: zone id is out of range [ 204.239024][T10927] netlink: zone id is out of range [ 204.241047][T10927] netlink: del zone limit has 4 unknown bytes [ 204.253531][T10929] overlayfs: failed to clone upperpath [ 204.263757][ T5950] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 204.304598][T10933] overlayfs: failed to clone upperpath [ 204.392981][T10939] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 204.551652][T10952] netlink: 'syz.4.1826': attribute type 3 has an invalid length. [ 204.557496][T10952] netlink: 'syz.4.1826': attribute type 3 has an invalid length. [ 204.566533][T10955] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm init: iget: checksum invalid can't run '/sbin/getty': Bad message [ 204.813779][T10964] hsr0 speed is unknown, defaulting to 1000 can't run '/sbin/getty': Bad message can't run '/sbin/getty': Bad message [ 206.689195][T11008] netlink: 'syz.4.1841': attribute type 1 has an invalid length. [ 206.700219][T11008] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.735637][T11008] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.739080][T11008] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 206.744665][T11008] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 206.771001][T11013] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 206.779706][T11013] bond3: (slave wlan1): Enslaving as an active interface with a down link [ 206.823955][T11015] bridge: RTM_NEWNEIGH with invalid ether address can't run '/sbin/getty': Bad message [ 207.926622][T11039] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 208.604310][T11069] EXT4-fs error: 30 callbacks suppressed [ 208.604322][T11069] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm init: iget: checksum invalid can't run '/sbin/getty': Bad message [ 208.611814][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 208.619313][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 208.622909][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 208.630454][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 208.635755][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 208.644667][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 208.803551][T11082] binder_alloc: 11081: binder_alloc_buf size 8216 failed, no address space [ 208.808525][T11082] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 209.224700][ T40] audit: type=1804 audit(1750928809.229:121): pid=11097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1874" name="/newroot/191/bus/file1" dev="overlay" ino=1071 res=1 errno=0 [ 209.335534][ T61] kernel read not supported for file /vcs (pid: 61 comm: kworker/2:1) [ 209.573716][ T40] audit: type=1800 audit(1750928809.579:122): pid=11120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1882" name="bus" dev="overlay" ino=1106 res=0 errno=0 [ 209.651558][T11123] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm init: iget: checksum invalid can't run '/sbin/getty': Bad message [ 209.657631][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 209.661300][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid can't run '/sbin/getty': Bad message [ 210.798738][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1887'. [ 210.951648][T11139] hsr0 speed is unknown, defaulting to 1000 [ 211.206485][T11151] overlayfs: failed to clone upperpath [ 211.435469][ T840] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 211.606985][ T840] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 211.611716][ T840] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.617050][ T840] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 211.620748][ T840] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 211.624094][ T840] usb 10-1: SerialNumber: syz can't run '/sbin/getty': Bad message [ 211.840765][ T840] usb 10-1: 0:2 : does not exist [ 211.853058][ T840] usb 10-1: USB disconnect, device number 6 [ 212.005994][T11157] netlink: 'syz.6.1895': attribute type 12 has an invalid length. [ 212.231399][T11162] tipc: Started in network mode [ 212.233164][T11162] tipc: Node identity 3a0575f84e35, cluster identity 4711 [ 212.236248][T11162] tipc: Enabled bearer , priority 0 [ 212.243790][T11161] tipc: Resetting bearer [ 212.472262][T11175] binder: 11174:11175 ioctl c0306201 800003c0 returned -14 can't run '/sbi[ 213.235507][ T53] tipc: Node number set to 1949332984 [ 213.560059][T11161] tipc: Disabling bearer [ 213.696198][T11208] EXT4-fs error: 25 callbacks suppressed [ 213.696215][T11208] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm init: iget: checksum invalid can't run '/sbin/getty': Bad message [ 213.711019][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 213.723384][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 213.734164][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 213.738438][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 213.743564][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 213.748299][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 213.756707][T11210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.813895][T11214] kvm: pic: single mode not supported [ 213.813909][T11214] kvm: pic: level sensitive irq not supported [ 213.813964][T11210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.817344][T11214] picdev_write: 2053 callbacks suppressed [ 213.817354][T11214] kvm: pic: non byte write [ 213.872946][T11210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.993666][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1917'. [ 213.996303][T11223] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1919'. [ 214.382775][T11238] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1925'. [ 214.544991][T11247] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1929'. [ 214.760553][T11253] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm init: iget: checksum invalid can't run '/sbin/getty': Bad message [ 214.767283][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 214.773817][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 214.827438][T11256] syz_tun: entered allmulticast mode [ 214.834003][T11255] syz_tun: left allmulticast mode [ 214.903435][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1933'. [ 214.924870][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1934'. [ 215.319634][T11273] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 215.685582][ T61] usb 10-1: new high-speed USB device number 7 using dummy_hcd can't run '/sbin/getty': Bad message [ 215.846807][ T61] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.850381][ T61] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 215.853836][ T61] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 215.857548][ T61] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 215.861822][ T61] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 215.867357][ T61] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.894035][ T61] usb 10-1: config 0 descriptor?? [ 216.314288][ T61] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 216.328387][ T61] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 can't run '/sbin/getty': Bad message [ 217.221021][ T10] usb 10-1: USB disconnect, device number 7 [ 217.347398][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1946'. can't run '/sbin/getty': Bad message [ 218.061676][T11320] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1951'. [ 218.064659][T11320] gretap0: entered promiscuous mode [ 218.110771][T11324] syz.4.1952: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 218.115642][T11324] CPU: 0 UID: 0 PID: 11324 Comm: syz.4.1952 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 218.115658][T11324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 218.115666][T11324] Call Trace: [ 218.115670][T11324] [ 218.115675][T11324] dump_stack_lvl+0x16c/0x1f0 [ 218.115732][T11324] warn_alloc+0x248/0x3a0 [ 218.115751][T11324] ? __pfx_warn_alloc+0x10/0x10 [ 218.115765][T11324] ? stack_trace_save+0x8e/0xc0 [ 218.115778][T11324] ? __pfx_stack_trace_save+0x10/0x10 [ 218.115798][T11324] ? do_replace+0x1c3/0x480 [ 218.115813][T11324] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 218.115832][T11324] ? do_replace+0x1c3/0x480 [ 218.115843][T11324] ? find_held_lock+0x2b/0x80 [ 218.115852][T11324] ? __might_fault+0xe3/0x190 [ 218.115866][T11324] ? __might_fault+0x13b/0x190 [ 218.115881][T11324] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 218.115896][T11324] ? _copy_from_user+0x59/0xd0 [ 218.115915][T11324] ? copy_from_sockptr_offset.constprop.0+0xe5/0x170 [ 218.115929][T11324] ? do_replace+0x1c3/0x480 [ 218.115941][T11324] __vmalloc_node_noprof+0xad/0xf0 [ 218.115953][T11324] ? do_replace+0x1c3/0x480 [ 218.115969][T11324] do_replace+0x1c3/0x480 [ 218.115982][T11324] ? __pfx_do_replace+0x10/0x10 [ 218.116000][T11324] ? __lock_acquire+0xb8a/0x1c90 [ 218.116015][T11324] compat_do_replace+0x585/0x7c0 [ 218.116029][T11324] ? __pfx_compat_do_replace+0x10/0x10 [ 218.116041][T11324] ? aa_get_newest_label+0x375/0x680 [ 218.116052][T11324] ? __pfx_aa_get_newest_label+0x10/0x10 [ 218.116069][T11324] ? bpf_lsm_capable+0x9/0x10 [ 218.116081][T11324] ? security_capable+0x7e/0x260 [ 218.116098][T11324] do_ebt_set_ctl+0x2f5/0x3c0 [ 218.116112][T11324] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 218.116126][T11324] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 218.116144][T11324] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 218.116157][T11324] nf_setsockopt+0x8a/0xf0 [ 218.116169][T11324] ip_setsockopt+0xcb/0xf0 [ 218.116183][T11324] tcp_setsockopt+0xa4/0x100 [ 218.116199][T11324] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 218.116211][T11324] do_sock_setsockopt+0x221/0x470 [ 218.116222][T11324] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 218.116242][T11324] __sys_setsockopt+0x120/0x1a0 [ 218.116259][T11324] __ia32_sys_setsockopt+0xbc/0x160 [ 218.116274][T11324] ? lockdep_hardirqs_on+0x7c/0x110 [ 218.116289][T11324] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 218.116305][T11324] __do_fast_syscall_32+0x7c/0x3a0 [ 218.116322][T11324] do_fast_syscall_32+0x32/0x80 [ 218.116338][T11324] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.116352][T11324] RIP: 0023:0xf707e579 [ 218.116361][T11324] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 218.116372][T11324] RSP: 002b:00000000f506e55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 218.116382][T11324] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 218.116389][T11324] RDX: 0000000000000080 RSI: 0000000080000640 RDI: 00000000000001e8 [ 218.116395][T11324] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.116401][T11324] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 218.116407][T11324] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.116422][T11324] [ 218.116440][T11324] Mem-Info: [ 218.225949][T11324] active_anon:1666 inactive_anon:4473 isolated_anon:0 [ 218.225949][T11324] active_file:1341 inactive_file:11874 isolated_file:0 [ 218.225949][T11324] unevictable:1768 dirty:480 writeback:11 [ 218.225949][T11324] slab_reclaimable:5739 slab_unreclaimable:60262 [ 218.225949][T11324] mapped:22643 shmem:5896 pagetables:1183 [ 218.225949][T11324] sec_pagetables:325 bounce:0 [ 218.225949][T11324] kernel_misc_reclaimable:0 [ 218.225949][T11324] free:71295 free_pcp:15958 free_cma:0 [ 218.240749][T11324] Node 0 active_anon:56kB inactive_anon:344kB active_file:0kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:580kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8296kB pagetables:1408kB sec_pagetables:1172kB all_unreclaimable? yes Balloon:0kB [ 218.251265][T11324] Node 1 active_anon:6608kB inactive_anon:17548kB active_file:5364kB inactive_file:47488kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:90392kB dirty:1920kB writeback:44kB shmem:20048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6472kB pagetables:3324kB sec_pagetables:128kB all_unreclaimable? no Balloon:0kB [ 218.263205][T11324] Node 0 DMA free:2104kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:464kB local_pcp:80kB free_cma:0kB [ 218.275301][T11324] lowmem_reserve[]: 0 289 289 289 289 [ 218.277820][T11324] Node 0 DMA32 free:18736kB boost:4096kB min:17316kB low:20620kB high:23924kB reserved_highatomic:4096KB free_highatomic:492KB active_anon:24kB inactive_anon:336kB active_file:0kB inactive_file:8kB unevictable:3536kB writepending:0kB present:1032196kB managed:296412kB mlocked:0kB bounce:0kB free_pcp:14412kB local_pcp:3644kB free_cma:0kB [ 218.290997][T11324] lowmem_reserve[]: 0 0 0 0 0 [ 218.293023][T11324] Node 1 DMA32 free:264132kB boost:6144kB min:53288kB low:65072kB high:76856kB reserved_highatomic:10240KB free_highatomic:5084KB active_anon:6516kB inactive_anon:17548kB active_file:5364kB inactive_file:47444kB unevictable:3536kB writepending:1920kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:48964kB local_pcp:17488kB free_cma:0kB [ 218.325574][T11324] lowmem_reserve[]: 0 0 0 0 0 [ 218.335640][T11324] Node 0 DMA: 2*4kB (UM) 10*8kB (UM) 8*16kB (UM) 5*32kB (UM) 3*64kB (UM) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2104kB [ 218.344177][T11324] Node 0 DMA32: 498*4kB (UMEH) 303*8kB (UMEH) 87*16kB (UMEH) 114*32kB (UMEH) 51*64kB (UMEH) 27*128kB (UMEH) 8*256kB (UME) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18736kB [ 218.351578][T11324] Node 1 DMA32: 1142*4kB (UMEH) 403*8kB (UMEH) 262*16kB (MEH) 490*32kB (UMEH) 353*64kB (UMEH) 179*128kB (UMEH) 82*256kB (UMH) 20*512kB (UM) 102*1024kB (UMH) 24*2048kB (UM) 2*4096kB (M) = 266192kB [ 218.360012][T11324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.367710][T11324] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.374059][T11324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.395509][T11324] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.412326][T11324] 20427 total pagecache pages [ 218.414580][T11324] 1331 pages in swap cache [ 218.417459][T11324] Free swap = 107032kB [ 218.419292][T11324] Total swap = 124996kB [ 218.421066][T11324] 524155 pages RAM [ 218.427283][T11324] 0 pages HighMem/MovableOnly [ 218.428896][T11324] 209141 pages reserved [ 218.430303][T11324] 0 pages cma reserved [ 218.831824][T11356] EXT4-fs error: 26 callbacks suppressed [ 218.831835][T11356] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:61: iget: checksum invalid [ 218.842145][T11355] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm init: iget: checksum invalid can't run '/sbin/getty': Bad message [ 218.855076][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 218.855988][T11357] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:61: iget: checksum invalid [ 218.861525][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 218.870335][T11360] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:61: iget: checksum invalid [ 218.871097][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 218.880062][T11361] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:61: iget: checksum invalid [ 218.885288][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 218.889836][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 219.172104][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804b1edc00: rx timeout, send abort [ 219.550922][T11382] syzkaller0: entered promiscuous mode [ 219.553365][T11382] syzkaller0: entered allmulticast mode [ 219.674790][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804b1edc00: abort rx timeout. Force session deactivation [ 219.711099][ T53] IPVS: starting estimator thread 0... [ 219.717673][T11384] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 219.805462][T11385] IPVS: using max 44 ests per chain, 105600 per kthread can't run '/sbin/getty': Bad message can't run '/sbin/getty': Bad message [ 221.061234][T11410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1980'. [ 221.153667][T11414] sit0: left promiscuous mode [ 221.155907][T11414] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1982'. [ 221.159279][T11414] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 221.192689][T11418] IPVS: rr: FWM 3 0x00000003 - no destination available [ 221.289321][T11422] netlink: 'syz.5.1987': attribute type 33 has an invalid length. [ 221.291764][T11422] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1987'. [ 221.298469][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1987'. [ 221.517943][T11429] hsr0 speed is unknown, defaulting to 1000 [ 221.595442][ T53] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 221.745461][ T53] usb 11-1: Using ep0 maxpacket: 16 [ 221.749057][ T53] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.753290][ T53] usb 11-1: config 0 has no interfaces? [ 221.759837][ T53] usb 11-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 221.763825][ T53] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.767460][ T53] usb 11-1: Product: syz [ 221.769474][ T53] usb 11-1: Manufacturer: syz [ 221.771558][ T53] usb 11-1: SerialNumber: syz [ 221.775928][ T53] usb 11-1: config 0 descriptor?? [ 221.787515][ T40] audit: type=1326 audit(1750928821.799:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11432 comm="syz.5.1990" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x0 can't run '/sbin/getty': Bad message [ 221.981326][ T53] usb 11-1: USB disconnect, device number 4 [ 221.994904][ T72] IPVS: starting estimator thread 0... [ 221.998141][T11446] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 222.095814][T11447] IPVS: using max 20 ests per chain, 48000 per kthread [ 222.139163][ T5950] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 222.293017][T11459] hsr0 speed is unknown, defaulting to 1000 [ 222.350316][T11463] overlayfs: failed to clone upperpath [ 222.547844][ T10] IPVS: starting estimator thread 0... [ 222.548446][T11472] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 222.646559][T11473] IPVS: using max 44 ests per chain, 105600 per kthread can't run '/sbin/getty': Bad message [ 223.466573][T11494] binder: 11492:11494 ioctl c0306201 800003c0 returned -14 [ 223.848759][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044827800: rx timeout, send abort [ 223.936634][T11498] EXT4-fs error: 31 callbacks suppressed [ 223.936646][T11498] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm init: iget: checksum invalid can't run '/sbin/getty': Bad message [ 223.944449][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 223.948213][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 223.951752][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 223.955598][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 223.959545][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 223.963199][ T1] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2001: comm init: iget: checksum invalid [ 224.062845][T11501] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:47: iget: checksum invalid [ 224.069506][T11502] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm kworker/u32:1: iget: checksum invalid [ 224.351459][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044827800: abort rx timeout. Force session deactivation [ 224.453864][T11522] netlink: 'syz.4.2021': attribute type 12 has an invalid length. [ 224.918751][T11532] kvm: pic: single mode not supported [ 224.918764][T11532] kvm: pic: level sensitive irq not supported [ 224.921197][T11532] kvm: pic: non byte write [ 224.969829][T11534] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1259: comm init: iget: checksum invalid can't run '/sbin/getty': Bad message [ 225.056611][T11538] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2026'. [ 225.097594][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2026'. [ 225.138016][T11542] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2028'. [ 225.714970][T11573] binder: 11572:11573 ioctl c0306201 800007c0 returned -14 can't run '/sbin/getty': Bad message [ 226.094080][T11594] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 226.217105][ T5950] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 226.220448][ T5950] Bluetooth: hci0: Injecting HCI hardware error event [ 226.223702][ T5950] Bluetooth: hci0: hardware error 0x00 [ 226.289441][T11608] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2053'. [ 226.338850][T11611] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000083: 0000 [#1] SMP KASAN NOPTI [ 226.343113][T11611] KASAN: null-ptr-deref in range [0x0000000000000418-0x000000000000041f] [ 226.346123][T11611] CPU: 3 UID: 0 PID: 11611 Comm: syz.4.2054 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 226.351799][T11611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 226.355382][T11611] RIP: 0010:fib_lookup_good_nhc+0xaf/0x3f0 [ 226.357421][T11611] Code: df 48 c1 ea 03 80 3c 02 00 0f 85 1e 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 2b 48 8d bd 18 04 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 ef 02 00 00 4c 8b bd 18 04 00 00 e8 db 85 7c 01 [ 226.363819][T11611] RSP: 0018:ffffc900032ff5a8 EFLAGS: 00010202 [ 226.365861][T11611] RAX: dffffc0000000000 RBX: ffff88806a3c7820 RCX: ffffc900265f9000 [ 226.368581][T11611] RDX: 0000000000000083 RSI: ffffffff8a002b39 RDI: 0000000000000418 [ 226.371213][T11611] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 226.373883][T11611] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804edcac20 [ 226.376804][T11611] R13: ffff88806a3c7837 R14: 0000000000000001 R15: ffff888028280418 [ 226.380088][T11611] FS: 0000000000000000(0000) GS:ffff888097860000(0063) knlGS:00000000f506eb40 [ 226.383787][T11611] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 226.386560][T11611] CR2: 00000000f73bcdec CR3: 000000006a98c000 CR4: 0000000000352ef0 [ 226.389771][T11611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.393017][T11611] DR3: 00000000000032e7 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 226.396180][T11611] Call Trace: [ 226.397602][T11611] [ 226.398782][T11611] fib_table_lookup+0x158e/0x2300 [ 226.400510][T11611] fib_lookup.constprop.0+0x13e/0x530 [ 226.402780][T11611] ip_route_output_key_hash_rcu+0xde2/0x28f0 [ 226.405315][T11611] ip_route_output_key_hash+0x137/0x2e0 [ 226.407652][T11611] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 226.410248][T11611] ? stack_trace_save+0x8e/0xc0 [ 226.412431][T11611] tcp_v4_connect+0x806/0x1bd0 [ 226.414511][T11611] ? inet_sendmsg+0xb9/0x140 [ 226.416489][T11611] ? __pfx_tcp_v4_connect+0x10/0x10 [ 226.418708][T11611] __inet_stream_connect+0x3c5/0x1020 [ 226.420811][T11611] ? __pfx___inet_stream_connect+0x10/0x10 [ 226.422767][T11611] tcp_sendmsg_fastopen+0x3ed/0x750 [ 226.424525][T11611] tcp_sendmsg_locked+0x190d/0x4300 [ 226.426425][T11611] ? preempt_schedule_thunk+0x16/0x30 [ 226.428389][T11611] ? __lock_acquire+0xb8a/0x1c90 [ 226.430620][T11611] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 226.433062][T11611] ? do_raw_spin_lock+0x12c/0x2b0 [ 226.434962][T11611] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 226.436846][T11611] ? __local_bh_enable_ip+0xa4/0x120 [ 226.438444][T11608] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.438887][T11611] tcp_sendmsg+0x2e/0x50 [ 226.442608][T11608] bond2: (slave bond3): Enslaving as an active interface with an up link [ 226.443102][T11611] ? __pfx_tcp_sendmsg+0x10/0x10 [ 226.448871][T11611] inet_sendmsg+0xb9/0x140 [ 226.450419][T11611] __sys_sendto+0x43c/0x520 [ 226.451964][T11611] ? __pfx___sys_sendto+0x10/0x10 [ 226.453288][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2053'. [ 226.453656][T11611] ? xfd_validate_state+0x61/0x180 [ 226.458368][T11611] ? __sys_setsockopt+0x140/0x1a0 [ 226.460110][T11611] __ia32_sys_sendto+0xdd/0x1b0 [ 226.461816][T11611] ? lockdep_hardirqs_on+0x7c/0x110 [ 226.463572][T11611] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 226.465839][T11611] __do_fast_syscall_32+0x7c/0x3a0 [ 226.467563][T11611] do_fast_syscall_32+0x32/0x80 [ 226.469201][T11611] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.471356][T11611] RIP: 0023:0xf707e579 [ 226.472834][T11611] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 226.479377][T11611] RSP: 002b:00000000f506e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 226.481998][T11611] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 226.484988][T11611] RDX: 0000000000000000 RSI: 00000000200047fd RDI: 00000000800001c0 [ 226.487724][T11611] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 226.490443][T11611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.493375][T11611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.496547][T11611] [ 226.497794][T11611] Modules linked in: [ 226.500392][T11611] ---[ end trace 0000000000000000 ]--- [ 226.502654][T11611] RIP: 0010:fib_lookup_good_nhc+0xaf/0x3f0 [ 226.504976][T11611] Code: df 48 c1 ea 03 80 3c 02 00 0f 85 1e 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 2b 48 8d bd 18 04 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 ef 02 00 00 4c 8b bd 18 04 00 00 e8 db 85 7c 01 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 226.512192][T11611] RSP: 0018:ffffc900032ff5a8 EFLAGS: 00010202 [ 226.514875][T11611] RAX: dffffc0000000000 RBX: ffff88806a3c7820 RCX: ffffc900265f9000 [ 226.518014][T11611] RDX: 0000000000000083 RSI: ffffffff8a002b39 RDI: 0000000000000418 [ 226.521218][T11611] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 226.524358][T11611] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804edcac20 [ 226.527909][T11611] R13: ffff88806a3c7837 R14: 0000000000000001 R15: ffff888028280418 [ 226.531130][T11611] FS: 0000000000000000(0000) GS:ffff888097660000(0063) knlGS:00000000f506eb40 [ 226.534898][T11611] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 226.538117][T11611] CR2: 0000000000000000 CR3: 000000006a98c000 CR4: 0000000000352ef0 [ 226.541395][T11611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.544547][T11611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 226.547955][T11611] Kernel panic - not syncing: Fatal exception [ 226.550840][T11611] Kernel Offset: disabled [ 226.552350][T11611] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:07:06 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000007 RBX=ffff8880127c5000 RCX=1ffffffff2150be4 RDX=0000000000000000 RSI=ffff88802328c900 RDI=ffff8880127c5178 RBP=ffff88802328c900 RSP=ffffffff8e207b70 R8 =ffff88802b23ae30 R9 =1ffff110026d8313 R10=1ffff110056474a0 R11=0000000000000001 R12=ffff88802b23a400 R13=0000000000000001 R14=ffff88802b23a400 R15=0000000000000001 RIP=ffffffff818ca4d1 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097560000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800d6018 CR3=0000000078184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000007ffff RBX=ffff88806e007a40 RCX=ffffc90027e02000 RDX=0000000000080000 RSI=ffffffff89521913 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc90002f076f8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88806ac463e8 R13=0000000000000000 R14=ffffc90002f07898 R15=ffffc90002f078b8 RIP=ffffffff81bb8d26 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097660000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080130018 CR3=0000000078184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000007ffff RBX=ffff88806d737bd8 RCX=ffffc9000e551000 RDX=0000000000080000 RSI=ffffffff84df0c54 RDI=0000000000000005 RBP=0000000000001000 RSP=ffffc90002e06768 R8 =0000000000000005 R9 =0000000000000400 R10=000000000000036e R11=000000000000001e R12=ffff8880282b4000 R13=000000000000036e R14=dffffc0000000000 R15=ffff88806d730000 RIP=ffffffff81bb8d26 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097760000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7416188 CR3=000000006b2c7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000044 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85582a95 RDI=ffffffff9b06ca00 RBP=ffffffff9b06c9c0 RSP=ffffc900032fef10 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000044 R14=ffffffff9b06c9c0 R15=ffffffff85582a30 RIP=ffffffff85582abf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097860000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73bcdec CR3=000000006a98c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000