last executing test programs: 11.683898254s ago: executing program 1 (id=2909): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x7fffffff, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x390f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00', 0x8001}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000780)="91d847a10615baedb804d88ef421a5d873f90fee3409bf992ba1feb616d98e162950c03a23b65c154f120dfe6e4f47452e5ada221cc906a479bdd8f3a49c04902cf0e96e3f5bc746431419c92f97cae48a1ac9311e369931289656f559edcc16d5fadcc0aa23d97cad851501d78bfd3bcb1d4ac1030008b92c54b5c3c7fc842cbb245a3f6932ccbdcc6710ed4229ef90df128ec9eb443ffdb07612d8880956f54fa35eeb", 0xa4}], 0x1, &(0x7f0000000840)=[@hopopts_2292={{0x5c, 0x29, 0x36, {0x3a, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @ra, @pad1, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x17, 0x0, [0x4, 0x9, 0x40, 0xfffffffffffffff9, 0x7a2bf443]}}, @ra]}}}], 0x5c}}], 0x1, 0x40005) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400005235adb6d70035767ee180f7", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fcdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x200080c0}, 0x40040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100"], 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) connect$netrom(r0, &(0x7f0000000140)={{0x6, @bcast, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x1ad72f7) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 11.208513482s ago: executing program 0 (id=2910): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x141a82, 0x12) pipe(&(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00230000000086dd60f2a40000492f00fe880000000000000000000000000001fe8000000000000000000000000000aa342088be0005000054812cbd3b00000800000086dd430588be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(&(0x7f00000001c0)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) close(r4) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r5 = dup(r0) sendfile(r5, r0, 0x0, 0x8000fffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) 9.423050277s ago: executing program 0 (id=2915): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x41d3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRESOCT], &(0x7f0000000300)='syzkaller\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x6}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x2001, 0x0) keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x3ff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c"], 0x24}], 0x1}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) 9.05906255s ago: executing program 3 (id=2916): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000800)={0x7, 0x0, [{0x6, 0x3, 0x0, 0x0, @irqchip={0x5, 0x4}}, {0x3, 0x7, 0x0, 0x0, @msi={0x6, 0xc, 0x7fff, 0x6}}, {0x9, 0x2, 0x0, 0x0, @adapter={0x9, 0xaafe, 0x1, 0xff6}}, {0x6, 0x2, 0x0, 0x0, @sint={0x6, 0x7}}, {0x4, 0x4, 0x0, 0x0, @sint={0x5, 0x7}}, {0x8, 0x4, 0x0, 0x0, @msi={0x40, 0x8, 0x8, 0x6}}, {0x7ff, 0x4, 0x1, 0x0, @adapter={0x9, 0x6, 0x2d0, 0x5, 0x804}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) timer_create(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="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"/268], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fcdbdf25050000000c00040000000000000000a3"], 0x20}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000440), 0x10) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$netlink(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x2218101, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) 8.530298799s ago: executing program 3 (id=2917): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x42, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x647b}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000280)={0x1e, 0x2}) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000200)='./bus\x00', 0x6000000b) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 8.402385951s ago: executing program 1 (id=2918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x42) io_setup(0x4082, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x84}}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 8.073172793s ago: executing program 0 (id=2919): capset(0x0, &(0x7f0000002100)={0x0, 0x0, 0x2, 0x0, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0xfffff9b2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r0}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r4, 0x0, 0x0) madvise(&(0x7f00000ec000/0x1000)=nil, 0x1000, 0x9) times(0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2}, 0x101}) 8.072445519s ago: executing program 2 (id=2920): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, r3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r6) bind$bt_l2cap(r5, &(0x7f00000001c0)={0x1f, 0xa44a, @any, 0x8001}, 0xe) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000001780)={0x2, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) 6.815658177s ago: executing program 2 (id=2921): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="153ea7996702", 0x0, 0x3, 0x0, 0x6, 0x0}) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gretap0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, 'dvmrp1\x00'}}) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x80, 0x0, 0x7}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) r5 = socket(0x10, 0x80002, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty=0xb00, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x80000000}}}}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc018aec0, &(0x7f00000000c0)={0xfe7f}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r9, r10, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r10, @ANYRES32=r10, @ANYBLOB="2f0000001800000004000000", @ANYBLOB="e2c703b502"], 0x20) 6.803526061s ago: executing program 0 (id=2929): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0e79d04f58235054feecaaea1b8c11e2754afcce883c5115c43d7d00"], 0xc) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000) r5 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) connect$unix(r5, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'veth0_virt_wifi\x00', @random="030000004180"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={r6, 0x58, &(0x7f0000000300)}, 0x10) unshare(0x62040200) 6.697596007s ago: executing program 1 (id=2922): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x402, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004841}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) keyctl$join(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r5, 0x25, 0x0, @void}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r6, r7}, 0x5) socket$netlink(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r8, 0x40047440, 0x20000000) 6.355513122s ago: executing program 2 (id=2923): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) inotify_init() pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000006a40)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000, 0x8e84fffef67c07}}, r7}}, 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14"]) 6.296818704s ago: executing program 3 (id=2924): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x402, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004841}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) keyctl$join(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r5, 0x25, 0x0, @void}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r6, r7}, 0x5) socket$netlink(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r8, 0x40047440, 0x20000000) 5.072358444s ago: executing program 1 (id=2925): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x402, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004841}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) keyctl$join(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff8500000017000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r5, 0x25, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r6}, 0x5) socket$netlink(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r7, 0x40047440, 0x20000000) 4.914474244s ago: executing program 2 (id=2926): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x402, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004841}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) keyctl$join(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r5, 0x25, 0x0, @void}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r6, r7}, 0x5) socket$netlink(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r8, 0x40047440, 0x20000000) 3.509178371s ago: executing program 0 (id=2927): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x12) pipe(&(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00230000000086dd60f2a40000492f00fe880000000000000000000000000001fe8000000000000000000000000000aa342088be0005000054812cbd3b00000800000086dd430588be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(&(0x7f00000001c0)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) close(r4) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r5 = dup(r0) sendfile(r5, r0, 0x0, 0x8000fffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) 3.355622276s ago: executing program 1 (id=2928): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x141a82, 0x12) pipe(&(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00230000000086dd60f2a40000492f00fe880000000000000000000000000001fe8000000000000000000000000000aa342088be0005000054812cbd3b00000800000086dd430588be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(&(0x7f00000001c0)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) close(r4) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r5 = dup(r0) sendfile(r5, r0, 0x0, 0x8000fffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) 2.991753579s ago: executing program 3 (id=2930): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000380)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x41, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) r5 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10006}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x1, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000003500000400012800c0001006d6163766c616e00300002800800010010000000100500800a000400aaaaaaaaaaaa000008000300030000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r7], 0x68}}, 0x800000000000000) 2.671138105s ago: executing program 2 (id=2931): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x82602, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @multicast}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r0, 0xa, 0x2b) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.331657937s ago: executing program 0 (id=2932): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4841}, 0x8000) read$alg(r1, &(0x7f0000000300)=""/99, 0x63) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8081) ioperm(0x4, 0x1, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r3, 0x8948, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(0x0, r4) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) 1.253621218s ago: executing program 3 (id=2933): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11641e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x647b}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x117, &(0x7f0000000340)={0x0, 0x15104, 0x80, 0xfffffffc, 0xc5}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x4004, @fd=r1, 0x6, 0x0, 0x0, 0x9, 0x1, {0x2}}) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r7, &(0x7f0000000180)=[{&(0x7f0000010680)=""/222, 0xde}], 0x1, 0x2, 0x0) setuid(0x0) socket$alg(0x26, 0x5, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x6000000b) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 323.069116ms ago: executing program 1 (id=2934): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x402, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004841}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) keyctl$join(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cf"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r5, 0x25, 0x0, @void}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r6, r7}, 0x5) socket$netlink(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r8, 0x40047440, 0x20000000) 308.570667ms ago: executing program 2 (id=2935): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) inotify_init() pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000006a40)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000, 0x8e84fffef67c07}}, r7}}, 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14"]) 0s ago: executing program 3 (id=2936): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioperm(0x0, 0xfffc, 0x8005) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000005080)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="09de", 0x2}, {&(0x7f0000000340)="d5bb69fd2ec3a88c5df48b69469a", 0xe}], 0x2, &(0x7f0000000540)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000800)=""/84, 0x54}, {&(0x7f0000000880)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[], 0x54}}, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000000000007b01"]) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r7}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r8, 0x0, 0x1, &(0x7f0000000180)=""/30, &(0x7f0000000040)=0x1e) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10f, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f00000004c0)="851666ce20db96ab0c7d83e114e7ce1762249711e34f4ce12c6afeb7e6d77bd3b97644edd8e3a3b71fcd006b6237766e151f344afb2306455034ea7a31b1a48724e372a5a8a9ca040f5831f2eb11842a4b8ec9064fa439440f374355d9af754314ce445ac9bea7fac19c3ac58a131895c378ec497ffdf9a82032d9fa225397b92d2e2193de6fe2f6b6c0bd0f80de3dc72890b6900c5b86752639bf37ab325c16dc2f3d4d01b4c3b71ebbfd6fc9b316f76a07144538506a68ae00df22f2fa9cbb0c9fa73c1dcf3eb2eb4fe3534fcee01e9ca0c66f27b8e05e7545cbc3511b3d086f51d58f9acd52eab032468cc8075451bcd5c081a8db84ff509a2f874daf6b3ddff977834d87fc0de3220a4041526a", 0x0, 0x10, 0x5bb727690d5f0ff6, 0x0, 0x0}) syz_emit_ethernet(0x8a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x94, 0x2}]}}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "aed73587edbae7626c00eff71cc9e8e331cb4e2a9dbcf000121836b0149af045", "437e9668d3a39c4d58305438ed9b2f48", {"66320784580196cdc6b593c4e1e4b60a", "2b8c36dd7dc15d25df6cb923bcf68def"}}}}}}}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x40010, 0xffffffffffffffff, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x18, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r10}}) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 938][T11236] IPVS: using max 37 ests per chain, 88800 per kthread [ 357.865869][T11242] x86/PAT: syz.0.1218:11242 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 358.021061][T11257] netlink: 'syz.3.1219': attribute type 4 has an invalid length. [ 359.039556][T11275] team_slave_0: entered promiscuous mode [ 359.041471][T11275] team_slave_1: entered promiscuous mode [ 359.241712][T11278] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 359.423673][T11278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.427971][T11278] bond_slave_0: left promiscuous mode [ 359.432288][T11278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.436020][T11278] bond_slave_1: left promiscuous mode [ 359.439470][T11278] bond0 (unregistering): Released all slaves [ 359.618239][T11286] bio_check_eod: 10 callbacks suppressed [ 359.618249][T11286] syz.1.1228: attempt to access beyond end of device [ 359.618249][T11286] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 359.623793][T11286] syz.1.1228: attempt to access beyond end of device [ 359.623793][T11286] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 359.856621][T11295] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 361.226497][T11336] program syz.0.1231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.369976][T11348] overlayfs: missing 'lowerdir' [ 361.373558][T11348] xt_limit: Overflow, try lower: 0/0 [ 361.588450][ T5946] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 361.589910][T11369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1233'. [ 361.961607][T11396] Cache volume key already in use (9p,(null),) [ 363.792695][ T833] IPVS: starting estimator thread 0... [ 363.884011][T11425] IPVS: using max 37 ests per chain, 88800 per kthread [ 365.698247][ T40] audit: type=1804 audit(1737255748.326:408): pid=11465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1254" name="/newroot/316/file0/file0" dev="9p" ino=37618198 res=1 errno=0 [ 366.860257][T11486] syz.1.1257: attempt to access beyond end of device [ 366.860257][T11486] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 366.880535][T11486] syz.1.1257: attempt to access beyond end of device [ 366.880535][T11486] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 366.888386][T11486] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 366.908949][T11486] syz.1.1257: attempt to access beyond end of device [ 366.908949][T11486] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 366.916957][T11486] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 366.986402][T11486] syz.1.1257: attempt to access beyond end of device [ 366.986402][T11486] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 366.990511][T11486] syz.1.1257: attempt to access beyond end of device [ 366.990511][T11486] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 366.994738][T11486] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 366.997626][T11486] syz.1.1257: attempt to access beyond end of device [ 366.997626][T11486] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 367.001819][T11486] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 367.005847][T11486] syz.1.1257: attempt to access beyond end of device [ 367.005847][T11486] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 367.009695][T11486] syz.1.1257: attempt to access beyond end of device [ 367.009695][T11486] nbd1: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 367.013758][T11486] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 367.017004][T11486] syz.1.1257: attempt to access beyond end of device [ 367.017004][T11486] nbd1: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 367.020831][T11486] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 367.023670][T11486] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 367.840268][T11481] block nbd1: shutting down sockets [ 367.937394][T11501] syz.3.1262: attempt to access beyond end of device [ 367.937394][T11501] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 371.581975][T11556] x86/PAT: syz.2.1271:11556 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 371.824188][T11572] infiniband sz1: set active [ 371.855947][T11572] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 371.868949][ T25] »»»»»» speed is unknown, defaulting to 1000 [ 372.003961][ T8] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 372.023390][T11573] x86/PAT: syz.1.1283:11573 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 372.171667][T11572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.173980][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 372.177223][ T8] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 372.181985][ T8] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 372.184904][ T8] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 372.187337][ T8] usb 7-1: Product: syz [ 372.188564][ T8] usb 7-1: Manufacturer: syz [ 372.190024][T11572] bond_slave_0: left promiscuous mode [ 372.192204][ T8] usb 7-1: SerialNumber: syz [ 372.196817][ T8] usb 7-1: config 0 descriptor?? [ 372.203477][T11571] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 372.221737][T11572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.225988][T11572] bond_slave_1: left promiscuous mode [ 372.231765][T11572] bond0 (unregistering): Released all slaves [ 372.284287][ T40] audit: type=1326 audit(1737255754.916:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 372.308892][ T40] audit: type=1326 audit(1737255754.916:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 372.315530][ T40] audit: type=1326 audit(1737255754.916:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 372.321625][ T40] audit: type=1326 audit(1737255754.916:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 372.327767][ T40] audit: type=1326 audit(1737255754.916:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 372.333800][ T40] audit: type=1326 audit(1737255754.916:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 372.340022][ T40] audit: type=1326 audit(1737255754.916:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 372.346182][ T40] audit: type=1326 audit(1737255754.916:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 372.352215][ T40] audit: type=1326 audit(1737255754.916:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 372.358415][ T40] audit: type=1326 audit(1737255754.916:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.1.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f92579 code=0x7ffc0000 [ 372.371576][T11578] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.377578][T11578] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.379910][T11578] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.382239][T11578] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.386097][T11578] vxlan0: entered promiscuous mode [ 372.387601][T11578] vxlan0: entered allmulticast mode [ 372.390966][T11578] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.393373][T11578] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.395859][T11578] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.398215][T11578] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.414715][T11571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.418597][T11571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.538091][T11588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.540664][T11588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.547934][T11588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.554124][T11588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.758860][T11588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.763227][T11588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.767642][T11588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.772158][T11588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.782513][ T25] usb 7-1: USB disconnect, device number 5 [ 373.684412][T11608] tun0: tun_chr_ioctl cmd 1074025675 [ 373.686013][T11608] tun0: persist enabled [ 373.688962][T11608] tun0: tun_chr_ioctl cmd 1074025675 [ 373.691595][T11608] tun0: persist enabled [ 374.819018][T11627] process 'syz.3.1288' launched './file0' with NULL argv: empty string added [ 375.466841][T11639] binder: 11637:11639 ioctl c0306201 0 returned -14 [ 375.688892][T11647] bio_check_eod: 3 callbacks suppressed [ 375.688924][T11647] syz.0.1301: attempt to access beyond end of device [ 375.688924][T11647] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 375.694400][T11647] syz.0.1301: attempt to access beyond end of device [ 375.694400][T11647] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 376.091174][T11647] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 378.045946][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.047960][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.624804][T11678] syz.3.1298: attempt to access beyond end of device [ 379.624804][T11678] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 379.629535][T11678] syz.3.1298: attempt to access beyond end of device [ 379.629535][T11678] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 379.633239][T11678] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 379.637011][T11678] syz.3.1298: attempt to access beyond end of device [ 379.637011][T11678] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 379.641233][T11678] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 379.647023][T11678] syz.3.1298: attempt to access beyond end of device [ 379.647023][T11678] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 379.651703][T11678] syz.3.1298: attempt to access beyond end of device [ 379.651703][T11678] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 379.656977][T11678] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 379.660907][T11678] syz.3.1298: attempt to access beyond end of device [ 379.660907][T11678] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 379.665100][T11678] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 379.669274][T11678] syz.3.1298: attempt to access beyond end of device [ 379.669274][T11678] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 379.679309][T11678] syz.3.1298: attempt to access beyond end of device [ 379.679309][T11678] nbd3: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 379.687098][T11678] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 379.692720][ T39] Bluetooth: hci4: Frame reassembly failed (-84) [ 379.704615][T11678] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 379.709359][T11678] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 380.461105][T11681] block nbd3: shutting down sockets [ 380.634060][ T63] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 380.781142][T11689] bio_check_eod: 1 callbacks suppressed [ 380.781152][T11689] syz.3.1303: attempt to access beyond end of device [ 380.781152][T11689] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 380.784028][ T63] usb 5-1: Using ep0 maxpacket: 8 [ 380.786576][T11689] syz.3.1303: attempt to access beyond end of device [ 380.786576][T11689] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 380.809039][ T63] usb 5-1: config 7 has an invalid interface number: 207 but max is 0 [ 380.813183][ T63] usb 5-1: config 7 has no interface number 0 [ 380.822070][ T63] usb 5-1: too many endpoints for config 7 interface 207 altsetting 80: 184, using maximum allowed: 30 [ 380.831956][ T63] usb 5-1: config 7 interface 207 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 184 [ 380.845771][ T63] usb 5-1: config 7 interface 207 has no altsetting 0 [ 381.029973][ T63] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=4e.59 [ 381.033834][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.054665][ T63] usb 5-1: Product: syz [ 381.056350][ T63] usb 5-1: Manufacturer: syz [ 381.058389][ T63] usb 5-1: SerialNumber: syz [ 381.390948][ T63] cypress_m8 5-1:7.207: HID->COM RS232 Adapter converter detected [ 381.400230][ T63] cyphidcom ttyUSB0: required endpoint is missing [ 381.407376][ T63] usb 5-1: USB disconnect, device number 9 [ 381.412142][ T63] cypress_m8 5-1:7.207: device disconnected [ 381.735071][ T5951] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 381.735091][ T5946] Bluetooth: hci4: command 0xfc11 tx timeout [ 382.432657][T11719] binder: 11713:11719 ioctl 4018620d 0 returned -22 [ 383.689640][T11725] block nbd3: shutting down sockets [ 384.147886][ T5951] Bluetooth: hci2: unexpected event for opcode 0x0c1c [ 385.147633][ T1168] Bluetooth: hci4: Frame reassembly failed (-84) [ 385.463986][ T8] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 385.684050][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 385.699198][ T8] usb 7-1: config 7 has an invalid interface number: 207 but max is 0 [ 385.702971][ T8] usb 7-1: config 7 has no interface number 0 [ 385.707052][ T8] usb 7-1: too many endpoints for config 7 interface 207 altsetting 80: 184, using maximum allowed: 30 [ 385.714377][ T8] usb 7-1: config 7 interface 207 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 184 [ 385.719665][ T8] usb 7-1: config 7 interface 207 has no altsetting 0 [ 385.735603][ T8] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=4e.59 [ 385.742719][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.751022][ T8] usb 7-1: Product: syz [ 385.755752][ T8] usb 7-1: Manufacturer: syz [ 385.759101][ T8] usb 7-1: SerialNumber: syz [ 386.012484][T11760] binder: 11758:11760 ioctl c0306201 0 returned -14 [ 386.034463][ T8] cypress_m8 7-1:7.207: HID->COM RS232 Adapter converter detected [ 386.039076][ T8] cyphidcom ttyUSB0: required endpoint is missing [ 386.044289][ T8] usb 7-1: USB disconnect, device number 6 [ 386.050356][ T8] cypress_m8 7-1:7.207: device disconnected [ 387.164094][ T5951] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 387.167435][ T5946] Bluetooth: hci4: command 0xfc11 tx timeout [ 387.433644][T11775] netlink: 'syz.1.1323': attribute type 12 has an invalid length. [ 389.346361][T11818] random: crng reseeded on system resumption [ 389.400797][T11820] overlay: Unknown parameter 'ime [ 389.400797][T11820] string [ 389.400797][T11820] statistic [ 389.400797][T11820] state [ 389.400797][T11820] realm [ 389.400797][T11820] rateest [ 389.400797][T11820] quota [ 389.400797][T11820] pkttype [ 389.400797][T11820] physdev [ 389.400797][T11820] cgroup [ 389.400797][T11820] cgroup [ 389.400797][T11820] cgroup [ 389.400797][T11820] owner [ 389.400797][T11820] nfacct [ 389.400797][T11820] nfacct [ 389.400797][T11820] mac [ 389.400797][T11820] limit [ 389.400797][T11820] ipvs [ 389.400797][T11820] helper [ 389.400797][T11820] devgroup [ 389.400797][T11820] cpu [ 389.400797][T11820] conntrack [ 389.400797][T11820] conntrack [ 389.400797][T11820] conntrack [ 389.400797][T11820] connlabel [ 389.400797][T11820] connbytes [ 389.400797][T11820] comment [ 389.400797][T11820] bpf [ 389.400797][T11820] bpf [ 389.400797][T11820] connmark [ 389.400797][T11820] mark [ 389.400797][T11820] rpfilter [ 389.400797][T11820] ah [ 389.400797][T11820] tcpmss [ 389.400797][T11820] socket [ 389.400797][T11820] socket [ 389.400797][T11820] socket [ 389.400797][T11820] socket [ 389.400797][T11820] sctp [ 389.400797][T11820] recent [ 389.400797][T11820] recent [ 389.400797][T11820] policy [ 389.400797][T11820] osf [ 389.400797][T11820] multiport [ 389.400797][T11820] length [ 389.400797][T11820] l2tp [ 389.400797][T11820] iprange [ 389.400797][T11820] ipcomp [ 389.400797][T11820] ttl [ 389.400797][T11820] hashlimit [ 389.400797][T11820] hashlimit [ 389.400797][T11820] hashlimit [ 389.400797][T11820] esp [ 389.400797][T11820] ecn [ 389.400797][T11820] tos [ 389.400797][T11820] dscp [ 389.400797][T11820] dccp [ 389.400797][T11820] connlimit [ 389.400797][T11820] cluster [ 389.400797][T11820] addrtype [ 389.400797][T11820] addrtype [ 389.400797][T11820] set [ 389.400797][T11820] set [ 389.400797][T11820] set [ 389.400797][T11820] set [ 389.400797][T11820] set [ 389.400797][T11820] icmp [ 390.468374][ T1168] Bluetooth: hci4: Frame reassembly failed (-84) [ 390.834133][ T5928] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 390.992516][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 391.004156][ T56] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 391.034021][ T5928] usb 6-1: config 7 has an invalid interface number: 207 but max is 0 [ 391.037233][ T5928] usb 6-1: config 7 has no interface number 0 [ 391.039957][ T5928] usb 6-1: too many endpoints for config 7 interface 207 altsetting 80: 184, using maximum allowed: 30 [ 391.044629][ T5928] usb 6-1: config 7 interface 207 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 184 [ 391.049629][ T5928] usb 6-1: config 7 interface 207 has no altsetting 0 [ 391.056877][ T5928] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=4e.59 [ 391.060618][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.063728][ T5928] usb 6-1: Product: syz [ 391.068400][ T5928] usb 6-1: Manufacturer: syz [ 391.070428][ T5928] usb 6-1: SerialNumber: syz [ 391.154073][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 391.158340][ T56] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.161471][ T56] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 391.164677][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.173106][ T56] usb 8-1: config 0 descriptor?? [ 391.177706][ T56] iowarrior 8-1:0.0: no interrupt-in endpoint found [ 391.356423][ T5928] cypress_m8 6-1:7.207: HID->COM RS232 Adapter converter detected [ 391.359526][ T5928] cyphidcom ttyUSB0: required endpoint is missing [ 391.362120][ T5928] usb 6-1: USB disconnect, device number 6 [ 391.369094][ T5928] cypress_m8 6-1:7.207: device disconnected [ 392.524150][ T5946] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 393.859643][ T9010] usb 8-1: USB disconnect, device number 9 [ 394.266451][T11889] syz.1.1351: attempt to access beyond end of device [ 394.266451][T11889] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 394.270251][T11889] syz.1.1351: attempt to access beyond end of device [ 394.270251][T11889] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 394.403964][ T63] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 394.574017][ T63] usb 8-1: Using ep0 maxpacket: 32 [ 394.578040][ T63] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 394.582823][ T63] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 394.586493][ T63] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 394.588924][ T63] usb 8-1: Product: syz [ 394.590228][ T63] usb 8-1: Manufacturer: syz [ 394.592071][ T63] usb 8-1: SerialNumber: syz [ 394.602737][ T63] usb 8-1: config 0 descriptor?? [ 394.604773][T11884] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 394.829857][T11884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.833011][T11884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.941519][T11906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.952152][T11906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.962041][T11906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.969212][T11906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.194934][T11906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.198526][T11906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.206216][T11906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.208856][T11906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.213176][ T5928] usb 8-1: USB disconnect, device number 10 [ 396.226330][T11920] syz.0.1365: attempt to access beyond end of device [ 396.226330][T11920] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 396.230362][T11920] syz.0.1365: attempt to access beyond end of device [ 396.230362][T11920] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 396.235866][T11920] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 396.239180][T11920] syz.0.1365: attempt to access beyond end of device [ 396.239180][T11920] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 396.245206][T11920] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 396.253798][T11920] syz.0.1365: attempt to access beyond end of device [ 396.253798][T11920] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 396.261860][T11920] syz.0.1365: attempt to access beyond end of device [ 396.261860][T11920] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 396.267860][T11920] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 396.271575][T11920] syz.0.1365: attempt to access beyond end of device [ 396.271575][T11920] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 396.275964][T11920] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 396.561299][T11920] syz.0.1365: attempt to access beyond end of device [ 396.561299][T11920] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 396.566534][T11920] syz.0.1365: attempt to access beyond end of device [ 396.566534][T11920] nbd0: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 396.571566][T11920] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 396.579097][T11920] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 396.582947][T11920] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 396.606608][ T9010] libceph: connect (1)[c::]:6789 error -13 [ 396.610040][ T9010] libceph: mon0 (1)[c::]:6789 connect error [ 396.857047][T11919] block nbd0: shutting down sockets [ 397.060692][ T5983] libceph: connect (1)[c::]:6789 error -13 [ 397.063227][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 397.066995][T11924] ceph: No mds server is up or the cluster is laggy [ 399.344055][ T833] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 399.504074][ T833] usb 5-1: Using ep0 maxpacket: 32 [ 399.509122][ T833] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 399.515342][ T833] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 399.518913][ T833] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 399.521298][ T833] usb 5-1: Product: syz [ 399.522805][ T833] usb 5-1: Manufacturer: syz [ 399.526255][ T833] usb 5-1: SerialNumber: syz [ 399.533336][ T833] usb 5-1: config 0 descriptor?? [ 399.536019][T11992] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 399.749240][T11992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.749983][T11992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.855803][T12006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.855973][T12006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.861817][T12006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.882373][T12006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.155661][T12006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.158244][T12006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.171976][T12006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.181743][T12006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.196641][ T63] usb 5-1: USB disconnect, device number 10 [ 400.996079][T12019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.999303][T12019] batadv_slave_0: entered promiscuous mode [ 401.423146][T12026] bio_check_eod: 1 callbacks suppressed [ 401.423157][T12026] syz.0.1377: attempt to access beyond end of device [ 401.423157][T12026] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 401.432350][T12026] syz.0.1377: attempt to access beyond end of device [ 401.432350][T12026] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 402.046965][ T5946] Bluetooth: hci4: sending frame failed (-49) [ 402.050523][ T5951] Bluetooth: hci4: Entering manufacturer mode failed (-49) [ 402.644039][ T5928] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 402.794100][ T5928] usb 8-1: Using ep0 maxpacket: 8 [ 402.797401][ T5928] usb 8-1: config 7 has an invalid interface number: 207 but max is 0 [ 402.800115][ T5928] usb 8-1: config 7 has no interface number 0 [ 402.801937][ T5928] usb 8-1: too many endpoints for config 7 interface 207 altsetting 80: 184, using maximum allowed: 30 [ 402.805415][ T5928] usb 8-1: config 7 interface 207 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 184 [ 402.809277][ T5928] usb 8-1: config 7 interface 207 has no altsetting 0 [ 402.820206][ T5928] usb 8-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=4e.59 [ 402.823336][ T5928] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.826331][ T5928] usb 8-1: Product: syz [ 402.827669][ T5928] usb 8-1: Manufacturer: syz [ 402.829074][ T5928] usb 8-1: SerialNumber: syz [ 403.396672][T12063] netlink: 'syz.0.1383': attribute type 12 has an invalid length. [ 403.487469][ T5928] cypress_m8 8-1:7.207: HID->COM RS232 Adapter converter detected [ 403.524059][ T5928] cyphidcom ttyUSB0: required endpoint is missing [ 403.728964][ T5928] usb 8-1: USB disconnect, device number 11 [ 403.802189][ T5928] cypress_m8 8-1:7.207: device disconnected [ 404.124038][ T833] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 404.313294][ T833] usb 6-1: Using ep0 maxpacket: 16 [ 404.461748][ T833] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.464949][ T833] usb 6-1: config 0 has no interfaces? [ 404.466712][ T833] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 404.470115][ T833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.474336][ T833] usb 6-1: config 0 descriptor?? [ 404.880463][T12071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.882980][T12071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.896721][ T833] usb 6-1: USB disconnect, device number 7 [ 405.446771][T12100] syz.1.1393 uses obsolete (PF_INET,SOCK_PACKET) [ 410.515172][T12176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1411'. [ 412.344052][ T833] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 412.494000][ T833] usb 6-1: Using ep0 maxpacket: 32 [ 412.497024][ T833] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 412.501842][ T833] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 412.504698][ T833] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 412.507080][ T833] usb 6-1: Product: syz [ 412.508319][ T833] usb 6-1: Manufacturer: syz [ 412.509704][ T833] usb 6-1: SerialNumber: syz [ 412.512618][ T833] usb 6-1: config 0 descriptor?? [ 412.514587][T12195] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 412.727238][T12195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.729762][T12195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.838059][T12209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.840609][T12209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.849685][T12209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.853031][T12209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.061666][T12209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.065280][T12209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.069157][T12209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.072143][T12209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.077490][ T833] usb 6-1: USB disconnect, device number 8 [ 414.460384][T12257] syz.3.1425: attempt to access beyond end of device [ 414.460384][T12257] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 414.463783][T12257] syz.3.1425: attempt to access beyond end of device [ 414.463783][T12257] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 416.064890][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1430'. [ 417.622036][T12313] syz.2.1438: attempt to access beyond end of device [ 417.622036][T12313] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 417.628278][T12313] syz.2.1438: attempt to access beyond end of device [ 417.628278][T12313] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 417.736278][T11205] udevd[11205]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 420.689187][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1449'. [ 420.698992][T12358] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.701404][T12358] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.703625][T12358] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.705839][T12358] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.708766][T12358] vxlan0: entered promiscuous mode [ 420.796923][T12364] syz.1.1450: attempt to access beyond end of device [ 420.796923][T12364] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 420.801265][T12364] syz.1.1450: attempt to access beyond end of device [ 420.801265][T12364] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 420.866308][T12368] syz.2.1452: attempt to access beyond end of device [ 420.866308][T12368] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 420.871683][T12368] syz.2.1452: attempt to access beyond end of device [ 420.871683][T12368] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 421.412797][T12383] can0: slcan on ttyS3. [ 421.551813][T12393] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 421.582376][T12393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1453'. [ 421.994613][T12402] Sensor A: ================= START STATUS ================= [ 421.997751][T12402] Sensor A: Test Pattern: 75% Colorbar [ 421.999591][T12402] Sensor A: Show Information: All [ 422.001116][T12402] Sensor A: Vertical Flip: false [ 422.002619][T12402] Sensor A: Horizontal Flip: false [ 422.004529][T12402] Sensor A: Brightness: 128 [ 422.005994][T12402] Sensor A: Contrast: 128 [ 422.007359][T12402] Sensor A: Hue: 0 [ 422.008575][T12402] Sensor A: Saturation: 128 [ 422.010007][T12402] Sensor A: ================== END STATUS ================== [ 422.089944][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1456'. [ 422.191954][T12378] can0 (unregistered): slcan off ttyS3. [ 425.210658][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 425.210755][ T40] audit: type=1326 audit(1737255807.836:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 425.230222][ T40] audit: type=1326 audit(1737255807.836:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 425.247562][ T40] audit: type=1326 audit(1737255807.836:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1466" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 425.267101][ T40] audit: type=1326 audit(1737255807.836:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 425.285390][ T40] audit: type=1326 audit(1737255807.846:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 425.305361][ T40] audit: type=1326 audit(1737255807.846:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1466" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 425.325551][ T40] audit: type=1326 audit(1737255807.846:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 425.336683][ T40] audit: type=1326 audit(1737255807.846:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 425.345951][ T40] audit: type=1326 audit(1737255807.856:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1466" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 425.359371][ T40] audit: type=1326 audit(1737255807.896:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 426.472646][ T5946] Bluetooth: hci2: command 0x0406 tx timeout [ 427.305123][T12495] syz.2.1476: attempt to access beyond end of device [ 427.305123][T12495] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 427.309255][T12495] syz.2.1476: attempt to access beyond end of device [ 427.309255][T12495] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 427.557251][T12496] syz.1.1477 (12496): drop_caches: 2 [ 428.653068][T12524] program syz.2.1481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 428.653107][T12524] ata1.00: invalid transfer count 0 [ 429.247479][T12539] syz.1.1485: attempt to access beyond end of device [ 429.247479][T12539] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 429.252664][T12539] syz.1.1485: attempt to access beyond end of device [ 429.252664][T12539] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 431.712861][T12584] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 431.717833][T12584] batman_adv: batadv0: Adding interface: gretap1 [ 431.719677][T12584] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.726837][T12584] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 434.807964][T12621] netlink: 'syz.2.1506': attribute type 11 has an invalid length. [ 435.766083][T12641] syz.2.1510: attempt to access beyond end of device [ 435.766083][T12641] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 435.774203][T12641] syz.2.1510: attempt to access beyond end of device [ 435.774203][T12641] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 436.670844][T12662] syz.1.1513: attempt to access beyond end of device [ 436.670844][T12662] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 436.676173][T12662] syz.1.1513: attempt to access beyond end of device [ 436.676173][T12662] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 436.943303][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 436.943315][ T40] audit: type=1326 audit(1737255819.566:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.0.1514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 436.952007][ T40] audit: type=1326 audit(1737255819.566:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.0.1514" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 436.959305][ T40] audit: type=1326 audit(1737255819.576:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.0.1514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 437.012597][ T40] audit: type=1326 audit(1737255819.576:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.0.1514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 437.047184][ T40] audit: type=1326 audit(1737255819.576:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.0.1514" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 437.053432][ T40] audit: type=1326 audit(1737255819.576:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.0.1514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 437.059833][ T40] audit: type=1326 audit(1737255819.576:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.0.1514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 437.067217][ T40] audit: type=1326 audit(1737255819.576:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.0.1514" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 437.073497][ T40] audit: type=1326 audit(1737255819.586:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.0.1514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 437.079578][ T40] audit: type=1326 audit(1737255819.586:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.0.1514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 439.495220][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.497083][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.439395][T12749] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1531'. [ 440.530289][T12751] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1531'. [ 441.468702][T12805] syz.2.1535 (12805): drop_caches: 2 [ 442.290958][T12814] syz.3.1537: attempt to access beyond end of device [ 442.290958][T12814] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 442.294864][T12814] syz.3.1537: attempt to access beyond end of device [ 442.294864][T12814] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 442.598720][T12827] Sensor A: ================= START STATUS ================= [ 442.601118][T12827] Sensor A: Test Pattern: 75% Colorbar [ 442.602849][T12827] Sensor A: Show Information: All [ 442.604762][T12827] Sensor A: Vertical Flip: false [ 442.606328][T12827] Sensor A: Horizontal Flip: false [ 442.607971][T12827] Sensor A: Brightness: 128 [ 442.609399][T12827] Sensor A: Contrast: 128 [ 442.610808][T12827] Sensor A: Hue: 0 [ 442.612045][T12827] Sensor A: Saturation: 128 [ 442.613454][T12827] Sensor A: ================== END STATUS ================== [ 442.962166][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1540'. [ 445.864572][T12879] pimreg: entered allmulticast mode [ 447.141491][T12899] can0: slcan on ttyS3. [ 447.209608][T12904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1554'. [ 447.755101][T12892] can0 (unregistered): slcan off ttyS3. [ 449.164586][T12951] netlink: 'syz.3.1564': attribute type 11 has an invalid length. [ 449.354119][ T56] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 449.505222][ T56] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 449.509284][ T56] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 449.512142][ T56] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 449.514870][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.518519][T12943] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 449.522994][ T56] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 450.221378][T12969] syz.0.1574 (12969): drop_caches: 2 [ 450.340619][T12967] can0: slcan on ttyS3. [ 450.529465][T12966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1566'. [ 450.674516][T12981] random: crng reseeded on system resumption [ 450.848316][T12981] »»»»»» speed is unknown, defaulting to 1000 [ 450.873102][ T40] audit: type=1326 audit(1737255833.496:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.0.1568" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x0 [ 450.879390][T12985] ebtables: wrong size: *len 120, entries_size 48, replsz 48 [ 451.064910][T12961] can0 (unregistered): slcan off ttyS3. [ 451.077100][T12981] »»»»»» speed is unknown, defaulting to 1000 [ 451.318117][T13001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.597230][ T40] audit: type=1800 audit(1737255834.226:450): pid=13009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1571" name="file1" dev="overlay" ino=2286 res=0 errno=0 [ 451.604592][T13009] evm: overlay not supported [ 451.944595][ T57] usb 6-1: USB disconnect, device number 9 [ 455.071833][T13062] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 455.076893][T13062] batman_adv: batadv0: Adding interface: gretap1 [ 455.078762][T13062] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.086159][T13062] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 455.592680][T13067] syz.1.1586: attempt to access beyond end of device [ 455.592680][T13067] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 455.650216][T13067] syz.1.1586: attempt to access beyond end of device [ 455.650216][T13067] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 455.952335][T13082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1588'. [ 456.776411][T13082] x86/PAT: syz.0.1588:13082 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 457.104071][T13098] pimreg: entered allmulticast mode [ 460.580484][T13150] veth1_macvtap: left promiscuous mode [ 462.388462][T13175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1611'. [ 462.449128][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1612'. [ 463.218092][T13182] x86/PAT: syz.1.1611:13182 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 463.392740][T13200] pimreg: entered allmulticast mode [ 464.055824][T13208] sp0: Synchronizing with TNC [ 464.463474][T13214] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 464.468530][T13214] batman_adv: batadv0: Adding interface: gretap1 [ 464.470422][T13214] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.477630][T13214] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 468.258777][T13264] team0: left allmulticast mode [ 468.260325][T13264] team_slave_0: left allmulticast mode [ 468.261881][T13264] team_slave_1: left allmulticast mode [ 468.263590][T13264] bridge0: port 3(team0) entered disabled state [ 468.288169][T13264] bridge_slave_0: left allmulticast mode [ 468.289649][T13264] bridge_slave_0: left promiscuous mode [ 468.291177][T13264] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.299054][T13264] bridge_slave_1: left allmulticast mode [ 468.337157][T13264] bridge_slave_1: left promiscuous mode [ 468.360441][T13264] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.436484][T13264] team_slave_0: left promiscuous mode [ 468.560422][T13264] team0: Port device team_slave_0 removed [ 468.562526][T13264] team_slave_1: left promiscuous mode [ 468.568913][T13264] team0: Port device team_slave_1 removed [ 468.570866][T13264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.573034][T13264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.576223][T13264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.578350][T13264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.593788][T13264] batman_adv: batadv0: Removing interface: gretap1 [ 468.600362][T13266] geneve2: entered promiscuous mode [ 468.601935][T13266] geneve2: entered allmulticast mode [ 468.604638][T13266] batman_adv: batadv0: Adding interface: geneve2 [ 468.607411][T13266] batman_adv: batadv0: Interface activated: geneve2 [ 475.077603][T13360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1660'. [ 476.827823][T13396] xt_CT: No such helper "netbios-ns" [ 476.978166][T13404] bridge_slave_0: left allmulticast mode [ 476.979857][T13404] bridge_slave_0: left promiscuous mode [ 476.981518][T13404] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.995363][T13404] bridge_slave_1: left allmulticast mode [ 476.997184][T13404] bridge_slave_1: left promiscuous mode [ 476.999038][T13404] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.030622][T13404] team0: Port device team_slave_0 removed [ 477.057377][T13404] team0: Port device team_slave_1 removed [ 477.060920][T13404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.063490][T13404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.070018][T13404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.073512][T13404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.082380][T13404] batman_adv: batadv0: Removing interface: gretap1 [ 477.172452][T13408] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1672'. [ 477.179829][T13408] netlink: 'syz.2.1672': attribute type 1 has an invalid length. [ 478.260630][T13421] syz.2.1676: attempt to access beyond end of device [ 478.260630][T13421] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 478.264581][T13421] syz.2.1676: attempt to access beyond end of device [ 478.264581][T13421] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 478.360700][T13428] syz.3.1677: attempt to access beyond end of device [ 478.360700][T13428] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 478.368945][T13428] syz.3.1677: attempt to access beyond end of device [ 478.368945][T13428] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 481.119179][T13479] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 481.535122][T13482] syz.1.1688: attempt to access beyond end of device [ 481.535122][T13482] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 481.539020][T13482] syz.1.1688: attempt to access beyond end of device [ 481.539020][T13482] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 482.081144][T13497] »»»»»» speed is unknown, defaulting to 1000 [ 482.132524][T13497] »»»»»» speed is unknown, defaulting to 1000 [ 484.829378][T13546] syz.2.1698: attempt to access beyond end of device [ 484.829378][T13546] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 484.833232][T13546] syz.2.1698: attempt to access beyond end of device [ 484.833232][T13546] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 485.626655][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1703'. [ 486.097917][T13575] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1707'. [ 486.102819][T13575] netlink: 'syz.1.1707': attribute type 1 has an invalid length. [ 487.034647][T13590] syz.1.1710: attempt to access beyond end of device [ 487.034647][T13590] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 487.036736][T13592] netlink: 'syz.0.1711': attribute type 11 has an invalid length. [ 487.039059][T13590] syz.1.1710: attempt to access beyond end of device [ 487.039059][T13590] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 489.105259][T13641] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1724'. [ 489.109039][T13641] netlink: 'syz.0.1724': attribute type 1 has an invalid length. [ 489.316961][T13650] syz.1.1725: attempt to access beyond end of device [ 489.316961][T13650] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 489.320693][T13650] syz.1.1725: attempt to access beyond end of device [ 489.320693][T13650] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 490.651163][T13673] random: crng reseeded on system resumption [ 491.197614][T13673] »»»»»» speed is unknown, defaulting to 1000 [ 491.359275][T13666] ebtables: wrong size: *len 120, entries_size 48, replsz 48 [ 491.397332][T13673] »»»»»» speed is unknown, defaulting to 1000 [ 493.654411][T13722] pimreg: entered allmulticast mode [ 495.281087][T13739] x86/PAT: syz.1.1749:13739 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 496.753424][T13772] syz.1.1759: attempt to access beyond end of device [ 496.753424][T13772] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 496.757337][T13772] syz.1.1759: attempt to access beyond end of device [ 496.757337][T13772] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 497.663035][T13787] syz.1.1762: attempt to access beyond end of device [ 497.663035][T13787] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 497.670857][T13787] syz.1.1762: attempt to access beyond end of device [ 497.670857][T13787] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 497.717987][T13793] syz.2.1764: attempt to access beyond end of device [ 497.717987][T13793] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 497.721555][T13793] syz.2.1764: attempt to access beyond end of device [ 497.721555][T13793] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 499.408652][T13822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1778'. [ 500.925592][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.928155][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.086049][T13842] xt_CT: No such helper "netbios-ns" [ 501.163663][T13848] syz.1.1777: attempt to access beyond end of device [ 501.163663][T13848] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 501.171804][T13848] syz.1.1777: attempt to access beyond end of device [ 501.171804][T13848] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 501.189158][T13849] syz_tun: left allmulticast mode [ 501.190659][T13849] syz_tun: left promiscuous mode [ 501.193648][T13849] bridge0: port 3(syz_tun) entered disabled state [ 501.214042][T13849] bond0: (slave bridge0): Releasing backup interface [ 501.246428][T13849] bridge0: left promiscuous mode [ 501.259085][T13849] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.261210][T13849] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.334614][T13849] bridge_slave_0: left allmulticast mode [ 501.336407][T13849] bridge_slave_0: left promiscuous mode [ 501.338410][T13849] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.347274][T13849] bridge_slave_1: left allmulticast mode [ 501.354055][T13849] bridge_slave_1: left promiscuous mode [ 501.356466][T13849] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.382118][T13849] bond0: (slave bond_slave_0): Releasing backup interface [ 501.397660][T13849] bond_slave_0: left promiscuous mode [ 501.407457][T13849] bond0: (slave bond_slave_1): Releasing backup interface [ 501.411592][T13849] bond_slave_1: left promiscuous mode [ 501.484320][T13849] team0: Port device team_slave_0 removed [ 501.495397][T13849] team0: Port device team_slave_1 removed [ 501.499339][T13849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.501508][T13849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.508129][T13849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.510385][T13849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.334637][T13893] netlink: 'syz.1.1790': attribute type 10 has an invalid length. [ 504.611017][ T5951] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 504.751370][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 504.906461][T13925] »»»»»» speed is unknown, defaulting to 1000 [ 505.196248][T13925] »»»»»» speed is unknown, defaulting to 1000 [ 515.450436][ T9010] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 515.625861][ T9010] usb 7-1: not running at top speed; connect to a high speed hub [ 515.629334][ T9010] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 515.632482][ T9010] usb 7-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 515.640428][ T9010] usb 7-1: config 1 interface 0 has no altsetting 0 [ 515.648350][ T9010] usb 7-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 515.650991][ T9010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.659603][ T9010] usb 7-1: Product: syz [ 515.666527][ T9010] usb 7-1: Manufacturer: syz [ 515.706416][ T9010] usb 7-1: SerialNumber: syz [ 515.716239][T14001] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 517.099178][T14014] orangefs_mount: mount request failed with -4 [ 517.244111][ T5951] Bluetooth: hci2: command 0x0406 tx timeout [ 517.876678][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1814'. [ 517.928494][T14038] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 518.216423][T14049] kAFS: unable to lookup cell 'sy>7 †ŸO-z1' [ 518.575173][ T9010] usbhid 7-1:1.0: can't add hid device: -71 [ 518.577044][ T9010] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 518.580192][ T9010] usb 7-1: USB disconnect, device number 7 [ 519.364722][T14058] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 519.364722][T14058] program syz.0.1819 not setting count and/or reply_len properly [ 520.976991][ T40] audit: type=1326 audit(1737255903.606:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14087 comm="syz.2.1827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 520.990471][ T40] audit: type=1326 audit(1737255903.616:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14087 comm="syz.2.1827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 520.999332][ T40] audit: type=1326 audit(1737255903.616:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14087 comm="syz.2.1827" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 521.008746][ T40] audit: type=1326 audit(1737255903.616:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14087 comm="syz.2.1827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 521.287261][ T40] audit: type=1326 audit(1737255903.616:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14087 comm="syz.2.1827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 521.359086][ T63] libceph: connect (1)[c::]:6789 error -13 [ 521.360866][ T63] libceph: mon0 (1)[c::]:6789 connect error [ 521.471652][T14095] ceph: No mds server is up or the cluster is laggy [ 524.163505][T14138] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 524.163505][T14138] program syz.1.1839 not setting count and/or reply_len properly [ 525.913245][T14176] syz.3.1848: attempt to access beyond end of device [ 525.913245][T14176] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 525.918472][T14176] syz.3.1848: attempt to access beyond end of device [ 525.918472][T14176] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 526.235844][T14186] »»»»»» speed is unknown, defaulting to 1000 [ 526.434392][T14186] »»»»»» speed is unknown, defaulting to 1000 [ 527.382934][ T40] audit: type=1804 audit(1737255910.006:456): pid=14202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1854" name="/newroot/472/bus/bus" dev="overlay" ino=2697 res=1 errno=0 [ 527.399246][ T40] audit: type=1800 audit(1737255910.026:457): pid=14202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1854" name="file1" dev="overlay" ino=2698 res=0 errno=0 [ 531.101821][T14248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 531.104599][T14248] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 531.113648][T14248] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 531.115642][T14248] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 531.124547][T14248] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 531.126362][T14248] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 531.275540][T14265] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 531.275540][T14265] program syz.3.1870 not setting count and/or reply_len properly [ 531.469490][T14274] syz.3.1872: attempt to access beyond end of device [ 531.469490][T14274] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 531.473560][T14274] syz.3.1872: attempt to access beyond end of device [ 531.473560][T14274] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 531.746575][T14284] overlayfs: failed to resolve './file1': -2 [ 532.181699][ T40] audit: type=1326 audit(1737255914.806:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14286 comm="syz.0.1875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 532.189564][ T40] audit: type=1326 audit(1737255914.806:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14286 comm="syz.0.1875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 532.197879][ T40] audit: type=1326 audit(1737255914.816:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14286 comm="syz.0.1875" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 532.206105][ T40] audit: type=1326 audit(1737255914.816:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14286 comm="syz.0.1875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 532.217138][ T40] audit: type=1326 audit(1737255914.816:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14286 comm="syz.0.1875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 534.136602][T14318] syz.1.1883: attempt to access beyond end of device [ 534.136602][T14318] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 534.140360][T14318] syz.1.1883: attempt to access beyond end of device [ 534.140360][T14318] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 535.948664][T14341] orangefs_mount: mount request failed with -4 [ 536.994172][T14371] syz.2.1896: attempt to access beyond end of device [ 536.994172][T14371] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 536.998142][T14371] syz.2.1896: attempt to access beyond end of device [ 536.998142][T14371] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 539.771514][T14420] »»»»»» speed is unknown, defaulting to 1000 [ 539.913788][T14420] »»»»»» speed is unknown, defaulting to 1000 [ 540.386014][T14429] syz.1.1909: attempt to access beyond end of device [ 540.386014][T14429] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 540.391192][T14429] syz.1.1909: attempt to access beyond end of device [ 540.391192][T14429] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 540.750966][ T9010] libceph: connect (1)[c::]:6789 error -13 [ 540.752867][ T9010] libceph: mon0 (1)[c::]:6789 connect error [ 541.025620][ T9010] libceph: connect (1)[c::]:6789 error -13 [ 541.055864][ T9010] libceph: mon0 (1)[c::]:6789 connect error [ 541.200252][T14439] ceph: No mds server is up or the cluster is laggy [ 542.128256][T14455] orangefs_mount: mount request failed with -4 [ 543.541864][T14485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1919'. [ 544.589629][T14500] syz.1.1924: attempt to access beyond end of device [ 544.589629][T14500] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 544.595084][T14500] syz.1.1924: attempt to access beyond end of device [ 544.595084][T14500] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 544.636436][T14504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'. [ 544.639913][T14504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'. [ 544.965788][T14508] syz.2.1925: attempt to access beyond end of device [ 544.965788][T14508] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 544.972741][T14508] syz.2.1925: attempt to access beyond end of device [ 544.972741][T14508] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 545.191975][ T40] audit: type=1804 audit(1737255927.816:463): pid=14515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1926" name="/newroot/468/bus/bus" dev="overlay" ino=2690 res=1 errno=0 [ 545.201908][ T40] audit: type=1800 audit(1737255927.826:464): pid=14515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1926" name="file1" dev="overlay" ino=2691 res=0 errno=0 [ 545.895907][T14517] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 546.155079][T14529] syz.2.1929: attempt to access beyond end of device [ 546.155079][T14529] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 546.159416][T14529] syz.2.1929: attempt to access beyond end of device [ 546.159416][T14529] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 547.919582][T14567] ubi0: attaching mtd0 [ 547.921606][T14567] ubi0: scanning is finished [ 547.921618][T14567] ubi0: empty MTD device detected [ 548.077895][T14567] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 548.081241][T14567] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 548.088198][T14567] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 548.091051][T14567] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 548.094283][T14567] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 548.096948][T14567] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 548.100170][T14567] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3643170498 [ 548.105149][T14567] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 548.112985][T14570] ubi0: background thread "ubi_bgt0d" started, PID 14570 [ 552.680883][T14624] orangefs_mount: mount request failed with -4 [ 553.097910][ T40] audit: type=1804 audit(1737255935.726:465): pid=14640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1955" name="/newroot/489/bus/bus" dev="overlay" ino=2814 res=1 errno=0 [ 553.108868][ T40] audit: type=1800 audit(1737255935.726:466): pid=14640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1955" name="file1" dev="overlay" ino=2815 res=0 errno=0 [ 553.775359][T14646] orangefs_mount: mount request failed with -4 [ 555.347781][T14674] »»»»»» speed is unknown, defaulting to 1000 [ 555.449560][T14674] »»»»»» speed is unknown, defaulting to 1000 [ 556.943109][ T40] audit: type=1804 audit(1737255939.566:467): pid=14696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1968" name="/newroot/496/bus/bus" dev="overlay" ino=2863 res=1 errno=0 [ 556.959895][ T40] audit: type=1800 audit(1737255939.586:468): pid=14696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1968" name="file1" dev="overlay" ino=2864 res=0 errno=0 [ 557.711547][T14701] orangefs_mount: mount request failed with -4 [ 558.944741][T14735] overlayfs: failed to resolve './file1': -2 [ 562.366958][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.369617][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.309919][ T9010] libceph: connect (1)[c::]:6789 error -101 [ 563.321988][ T9010] libceph: mon0 (1)[c::]:6789 connect error [ 563.365110][T14800] ceph: No mds server is up or the cluster is laggy [ 565.517046][T14830] overlayfs: failed to resolve './file1': -2 [ 566.745047][T14837] orangefs_mount: mount request failed with -4 [ 568.609544][T14882] overlayfs: failed to resolve './file1': -2 [ 570.471906][T14905] devpts: called with bogus options [ 572.251463][T14930] syz.2.2026: attempt to access beyond end of device [ 572.251463][T14930] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 572.256535][T14930] syz.2.2026: attempt to access beyond end of device [ 572.256535][T14930] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 574.430858][T14960] orangefs_mount: mount request failed with -4 [ 574.551390][T14974] netlink: zone id is out of range [ 574.559219][T14974] netlink: zone id is out of range [ 574.560749][T14974] netlink: zone id is out of range [ 574.580922][T14974] virtio-fs: tag <(null)> not found [ 575.030702][T14981] syz.2.2038: attempt to access beyond end of device [ 575.030702][T14981] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 575.034157][T14981] syz.2.2038: attempt to access beyond end of device [ 575.034157][T14981] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 575.946459][T14998] »»»»»» speed is unknown, defaulting to 1000 [ 576.252791][T14998] »»»»»» speed is unknown, defaulting to 1000 [ 577.019742][T15016] ceph: No mds server is up or the cluster is laggy [ 577.038920][ T57] libceph: connect (1)[c::]:6789 error -13 [ 577.053661][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 578.480757][T15037] syz.3.2051: attempt to access beyond end of device [ 578.480757][T15037] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 578.485974][T15037] syz.3.2051: attempt to access beyond end of device [ 578.485974][T15037] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 581.280664][ T40] audit: type=1800 audit(1737255963.906:469): pid=15081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2061" name="SYSV00000000" dev="hugetlbfs" ino=45 res=0 errno=0 [ 581.333390][T15090] syz.2.2064: attempt to access beyond end of device [ 581.333390][T15090] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 581.338399][T15090] syz.2.2064: attempt to access beyond end of device [ 581.338399][T15090] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 582.568493][T15115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2069'. [ 582.981258][T15126] Invalid option length (1025206) for dns_resolver key [ 583.657022][T15129] orangefs_mount: mount request failed with -4 [ 584.122199][ T7628] libceph: connect (1)[c::]:6789 error -101 [ 584.124793][ T7628] libceph: mon0 (1)[c::]:6789 connect error [ 584.169806][T15140] ceph: No mds server is up or the cluster is laggy [ 584.619650][T15158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2080'. [ 584.635048][T15159] syz.3.2081: attempt to access beyond end of device [ 584.635048][T15159] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 584.639055][T15159] syz.3.2081: attempt to access beyond end of device [ 584.639055][T15159] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 585.378224][T15173] syz.2.2084: attempt to access beyond end of device [ 585.378224][T15173] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 585.386890][T15173] syz.2.2084: attempt to access beyond end of device [ 585.386890][T15173] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 586.775295][T15200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2090'. [ 587.447333][T15203] orangefs_mount: mount request failed with -4 [ 590.746387][T15252] orangefs_mount: mount request failed with -4 [ 591.096474][T15268] syz.1.2106: attempt to access beyond end of device [ 591.096474][T15268] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 591.101169][T15268] syz.1.2106: attempt to access beyond end of device [ 591.101169][T15268] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 591.658730][T15267] orangefs_mount: mount request failed with -4 [ 593.868998][T15303] orangefs_mount: mount request failed with -4 [ 594.430674][ T40] audit: type=1804 audit(1737255977.056:470): pid=15319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2116" name="/newroot/533/file0/cgroup.controllers" dev="9p" ino=37618314 res=1 errno=0 [ 596.795587][T15355] overlayfs: missing 'lowerdir' [ 597.923466][ T9010] libceph: connect (1)[c::]:6789 error -101 [ 597.925579][ T9010] libceph: mon0 (1)[c::]:6789 connect error [ 597.952639][T15363] orangefs_mount: mount request failed with -4 [ 598.185166][ T9010] libceph: connect (1)[c::]:6789 error -101 [ 598.212801][ T9010] libceph: mon0 (1)[c::]:6789 connect error [ 598.548699][T15371] ceph: No mds server is up or the cluster is laggy [ 600.049341][ T40] audit: type=1326 audit(1737255982.676:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15393 comm="syz.0.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 600.213542][ T40] audit: type=1326 audit(1737255982.836:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15393 comm="syz.0.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf713e579 code=0x7fc00000 [ 600.220734][ T40] audit: type=1326 audit(1737255982.836:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15393 comm="syz.0.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 600.228705][ T40] audit: type=1326 audit(1737255982.836:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15393 comm="syz.0.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 600.236841][ T40] audit: type=1326 audit(1737255982.836:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15393 comm="syz.0.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 600.244624][ T40] audit: type=1326 audit(1737255982.836:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15393 comm="syz.0.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 600.252060][ T40] audit: type=1326 audit(1737255982.836:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15393 comm="syz.0.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 600.258732][ T40] audit: type=1326 audit(1737255982.836:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15393 comm="syz.0.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 600.266763][ T40] audit: type=1326 audit(1737255982.836:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15393 comm="syz.0.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 600.273465][ T40] audit: type=1326 audit(1737255982.836:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15393 comm="syz.0.2134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 601.034062][ T5928] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 601.326108][ T5928] usb 8-1: config 0 has no interfaces? [ 601.327738][ T5928] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 601.330287][ T5928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.334344][ T5928] usb 8-1: config 0 descriptor?? [ 601.598185][ T5928] usb 8-1: USB disconnect, device number 12 [ 602.375482][T15450] syz.3.2145: attempt to access beyond end of device [ 602.375482][T15450] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 602.380806][T15450] syz.3.2145: attempt to access beyond end of device [ 602.380806][T15450] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 603.481606][T15459] orangefs_mount: mount request failed with -4 [ 604.307491][T15481] Invalid option length (1025206) for dns_resolver key [ 606.414745][T15507] orangefs_mount: mount request failed with -4 [ 607.602610][T15533] »»»»»» speed is unknown, defaulting to 1000 [ 607.637654][T15533] »»»»»» speed is unknown, defaulting to 1000 [ 609.251620][T15558] syz.1.2168: attempt to access beyond end of device [ 609.251620][T15558] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 609.256756][T15558] syz.1.2168: attempt to access beyond end of device [ 609.256756][T15558] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 609.314149][T15555] infiniband sz1: set active [ 609.332017][T15555] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 609.340275][ T5928] »»»»»» speed is unknown, defaulting to 1000 [ 609.726519][T15565] syz.2.2172: attempt to access beyond end of device [ 609.726519][T15565] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 609.734289][T15565] syz.2.2172: attempt to access beyond end of device [ 609.734289][T15565] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 612.913033][T15609] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 613.610045][T15619] Attempt to restore checkpoint with obsolete wellknown handles [ 614.174604][T15621] netlink: zone id is out of range [ 614.181670][T15621] netlink: zone id is out of range [ 614.185153][T15621] netlink: zone id is out of range [ 614.203818][T15621] virtio-fs: tag <(null)> not found [ 615.751614][T15662] mkiss: ax0: crc mode is auto. [ 616.591024][T15674] syz.2.2198: attempt to access beyond end of device [ 616.591024][T15674] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 616.595120][T15674] syz.2.2198: attempt to access beyond end of device [ 616.595120][T15674] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 620.644011][T15733] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 620.646960][T15733] UDF-fs: Scanning with blocksize 2048 failed [ 620.652909][T15733] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 620.744896][T15733] UDF-fs: Scanning with blocksize 4096 failed [ 621.096190][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 621.096200][ T40] audit: type=1326 audit(1737256003.716:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.0.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 621.134152][ T40] audit: type=1326 audit(1737256003.716:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.0.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 621.153973][ T40] audit: type=1326 audit(1737256003.756:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.0.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 621.164455][ T40] audit: type=1326 audit(1737256003.756:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.0.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 621.171735][ T40] audit: type=1326 audit(1737256003.766:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.0.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 621.178284][ T40] audit: type=1326 audit(1737256003.786:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.0.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 621.184386][ T40] audit: type=1326 audit(1737256003.786:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.0.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 621.319842][ T40] audit: type=1326 audit(1737256003.926:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.0.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 621.350883][ T40] audit: type=1326 audit(1737256003.976:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.0.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 621.404011][ T25] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 621.406861][ T40] audit: type=1326 audit(1737256004.036:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.0.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf713e579 code=0x7ffc0000 [ 621.656688][ T25] usb 5-1: config 0 has no interfaces? [ 621.658817][ T25] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 621.661395][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.666818][ T25] usb 5-1: config 0 descriptor?? [ 622.216336][ T911] usb 5-1: USB disconnect, device number 11 [ 622.360666][T15746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.805760][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.807618][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.356483][T15797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2225'. [ 626.940779][T15826] »»»»»» speed is unknown, defaulting to 1000 [ 627.530178][T15826] »»»»»» speed is unknown, defaulting to 1000 [ 629.689854][T15880] tmpfs: Unknown parameter 'usrquota-½p' [ 630.312042][T15888] tc_dump_action: action bad kind [ 630.858481][T15901] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2248'. [ 630.867502][T15901] netlink: 'syz.0.2248': attribute type 4 has an invalid length. [ 630.884678][T15901] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2248'. [ 630.915116][T15901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2248'. [ 630.938790][T15901] »»»»»» speed is unknown, defaulting to 1000 [ 631.164731][T15901] »»»»»» speed is unknown, defaulting to 1000 [ 632.838086][T15928] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2253'. [ 633.835211][T15948] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2257'. [ 634.458673][T15959] Process accounting resumed [ 634.874099][T15965] Attempt to restore checkpoint with obsolete wellknown handles [ 636.124736][T15978] netlink: 'syz.2.2265': attribute type 11 has an invalid length. [ 636.127067][T15978] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2265'. [ 637.240373][T15987] orangefs_mount: mount request failed with -4 [ 637.711989][T16014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2270'. [ 638.218698][T16021] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.222054][T16021] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.225401][T16021] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.228658][T16021] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.232224][T16021] vxlan0: entered promiscuous mode [ 638.234338][T16021] vxlan0: entered allmulticast mode [ 638.240415][T16021] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.243771][T16021] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.247419][T16021] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.250720][T16021] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.276116][T16022] tipc: Started in network mode [ 638.278189][T16022] tipc: Node identity 4, cluster identity 4711 [ 638.280562][T16022] tipc: Node number set to 4 [ 640.406476][T16066] netlink: zone id is out of range [ 640.409041][T16066] netlink: zone id is out of range [ 640.410816][T16066] netlink: zone id is out of range [ 640.427142][T16066] virtio-fs: tag <(null)> not found [ 640.810357][T16060] orangefs_mount: mount request failed with -4 [ 640.971451][ T5983] libceph: connect (1)[c::]:6789 error -13 [ 640.973559][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 640.978252][ T5983] libceph: connect (1)[c::]:6789 error -13 [ 640.980234][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 640.994127][T16061] orangefs_mount: mount request failed with -4 [ 641.403671][ T5983] libceph: connect (1)[c::]:6789 error -13 [ 641.405785][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 641.457902][T16073] ceph: No mds server is up or the cluster is laggy [ 643.928842][T16124] orangefs_mount: mount request failed with -4 [ 646.565736][T16184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2305'. [ 646.573841][T16184] netlink: 'syz.1.2305': attribute type 4 has an invalid length. [ 646.581628][T16184] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2305'. [ 646.586279][T16184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2305'. [ 646.605049][T16184] »»»»»» speed is unknown, defaulting to 1000 [ 646.772488][T16184] »»»»»» speed is unknown, defaulting to 1000 [ 647.055305][T16181] orangefs_mount: mount request failed with -4 [ 648.310307][T16213] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2312'. [ 648.336430][T16212] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 649.660317][T16250] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 649.663149][T16250] UDF-fs: Scanning with blocksize 2048 failed [ 649.675452][T16250] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 649.678743][T16250] UDF-fs: Scanning with blocksize 4096 failed [ 650.338696][T16259] random: crng reseeded on system resumption [ 651.280961][T16282] input: syz0 as /devices/virtual/input/input12 [ 651.584743][T16286] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2326'. [ 651.627350][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e2eec00: rx timeout, send abort [ 652.132432][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e2eec00: abort rx timeout. Force session deactivation [ 652.332546][T16294] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 652.699317][T16323] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2330'. [ 652.787595][T16327] netlink: 'syz.2.2330': attribute type 4 has an invalid length. [ 652.790585][T16327] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2330'. [ 652.889415][T16323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2330'. [ 653.214173][T16323] »»»»»» speed is unknown, defaulting to 1000 [ 653.253997][T16323] »»»»»» speed is unknown, defaulting to 1000 [ 653.856612][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2336'. [ 654.466100][T16360] orangefs_mount: mount request failed with -4 [ 654.610117][T16374] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 655.588437][T16392] 9pnet_fd: Insufficient options for proto=fd [ 655.598294][T16394] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2343'. [ 655.688057][T16396] netlink: 'syz.3.2343': attribute type 4 has an invalid length. [ 655.690990][T16396] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2343'. [ 655.706913][T16394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2343'. [ 655.858537][T16394] »»»»»» speed is unknown, defaulting to 1000 [ 656.013759][T16394] »»»»»» speed is unknown, defaulting to 1000 [ 657.959199][T16417] orangefs_mount: mount request failed with -4 [ 658.322965][T16435] 9p: Unknown Cache mode or invalid value fscach [ 658.649792][T16446] program syz.3.2355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 659.734778][T16453] 9pnet_fd: Insufficient options for proto=fd [ 660.130757][T16462] orangefs_mount: mount request failed with -4 [ 660.417769][T16473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.589853][T16464] orangefs_mount: mount request failed with -4 [ 660.910207][T16484] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 661.775710][T16485] 9p: Unknown Cache mode or invalid value fscach [ 661.865365][T16493] »»»»»» speed is unknown, defaulting to 1000 [ 661.993350][T16493] »»»»»» speed is unknown, defaulting to 1000 [ 663.182171][T16509] syz.2.2372: attempt to access beyond end of device [ 663.182171][T16509] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 663.194108][T16509] syz.2.2372: attempt to access beyond end of device [ 663.194108][T16509] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 665.345307][ T63] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 665.498753][ T63] usb 6-1: not running at top speed; connect to a high speed hub [ 665.510344][ T63] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 665.514835][ T63] usb 6-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 665.520153][ T63] usb 6-1: config 1 interface 0 has no altsetting 0 [ 665.525661][ T63] usb 6-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 665.529192][ T63] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.532585][ T63] usb 6-1: Product: syz [ 665.534467][ T63] usb 6-1: Manufacturer: syz [ 665.536471][ T63] usb 6-1: SerialNumber: syz [ 665.550618][T16539] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 667.709896][ T63] usbhid 6-1:1.0: can't add hid device: -71 [ 667.712457][ T63] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 667.725309][ T63] usb 6-1: USB disconnect, device number 10 [ 667.897657][T16571] syz.1.2386: attempt to access beyond end of device [ 667.897657][T16571] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 667.904924][T16571] syz.1.2386: attempt to access beyond end of device [ 667.904924][T16571] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 668.785814][T16592] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 668.788325][T16592] UDF-fs: Scanning with blocksize 2048 failed [ 668.791227][T16592] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 668.797235][T16592] UDF-fs: Scanning with blocksize 4096 failed [ 670.077329][T16597] 9pnet_fd: Insufficient options for proto=fd [ 671.644406][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804aab3800: rx timeout, send abort [ 672.146858][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804aab3800: abort rx timeout. Force session deactivation [ 672.503740][T16647] 9pnet_fd: Insufficient options for proto=fd [ 673.609892][T16655] orangefs_mount: mount request failed with -4 [ 673.938395][T16669] »»»»»» speed is unknown, defaulting to 1000 [ 673.972386][T16669] »»»»»» speed is unknown, defaulting to 1000 [ 674.029772][T16663] orangefs_mount: mount request failed with -4 [ 674.378437][T16681] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2417'. [ 674.416790][T16681] netlink: 'syz.1.2417': attribute type 4 has an invalid length. [ 674.432289][T16681] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2417'. [ 674.440215][T16681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2417'. [ 674.475103][T16681] »»»»»» speed is unknown, defaulting to 1000 [ 674.772270][T16681] »»»»»» speed is unknown, defaulting to 1000 [ 674.781453][T16686] netlink: 'syz.0.2418': attribute type 1 has an invalid length. [ 674.796191][T16686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 674.846201][T16686] bond1: (slave ip6gretap1): making interface the new active one [ 674.854377][T16686] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 674.857362][T16686] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 674.860439][T16686] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 675.001568][T16675] orangefs_mount: mount request failed with -4 [ 675.034650][ T25] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 675.054271][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 675.239297][T16694] 9pnet_fd: Insufficient options for proto=fd [ 675.894150][ T90] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 675.964112][ T25] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 676.160323][ T90] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 676.167336][ T90] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 676.684315][ T911] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 677.074532][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 677.492407][T16716] orangefs_mount: mount request failed with -4 [ 677.772782][ T25] IPVS: starting estimator thread 0... [ 677.869869][T16734] IPVS: using max 37 ests per chain, 88800 per kthread [ 678.367895][T16742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.852807][T16751] 9p: Unknown Cache mode or invalid value fscach [ 679.054846][T16755] 9pnet_fd: Insufficient options for proto=fd [ 680.214134][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 680.214147][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 680.374008][T16776] overlayfs: failed to clone upperpath [ 680.754257][ T90] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 681.456509][ T5928] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 681.483344][T16792] 9p: Unknown Cache mode or invalid value fscach [ 681.606422][ T5928] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 681.610588][ T5928] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 681.614943][ T5928] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 681.618385][ T5928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.642437][T16782] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 681.648992][ T5928] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 681.874150][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 681.977445][T16796] netlink: 'syz.3.2443': attribute type 1 has an invalid length. [ 681.993477][T16796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.378058][ T56] usb 8-1: USB disconnect, device number 13 [ 682.644808][T16807] 9pnet_fd: Insufficient options for proto=fd [ 683.004875][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 684.144156][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 685.264256][ T1137] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 685.264776][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.267429][T16857] 9pnet_fd: Insufficient options for proto=fd [ 686.131140][T16873] nbd: device at index 3 is going down [ 686.260386][T16882] IPv6: NLM_F_CREATE should be specified when creating new route [ 686.384383][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 686.418375][T16884] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 686.421546][T16884] UDF-fs: Scanning with blocksize 2048 failed [ 686.438432][T16884] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 686.441743][T16884] UDF-fs: Scanning with blocksize 4096 failed [ 687.060657][T16894] 9pnet_fd: Insufficient options for proto=fd [ 687.494361][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 688.460382][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 688.654460][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 688.894390][T16910] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 689.794717][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 690.153741][T16916] 9pnet_fd: Insufficient options for proto=fd [ 691.005772][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 692.174343][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 693.435045][ T1137] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 694.676380][ T1137] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 695.313672][ T1453] IPVS: starting estimator thread 0... [ 695.414134][T16966] IPVS: using max 25 ests per chain, 60000 per kthread [ 695.839217][ T1137] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 696.697926][T16984] IPv6: NLM_F_CREATE should be specified when creating new route [ 696.961344][T16981] orangefs_mount: mount request failed with -4 [ 697.080571][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 697.601414][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2493'. [ 698.204145][T16998] orangefs_mount: mount request failed with -4 [ 698.376977][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 699.576719][ T1137] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 700.729919][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 701.964380][ T1137] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 702.144786][T17035] orangefs_mount: mount request failed with -4 [ 702.491389][T17042] overlayfs: failed to clone upperpath [ 703.390691][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 704.455361][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 704.516269][ T1137] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 705.764491][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 707.037200][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 707.153417][T17087] overlayfs: failed to clone upperpath [ 708.308606][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 709.486534][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 710.694737][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 711.460967][T17121] orangefs_mount: mount request failed with -4 [ 712.034152][ T1137] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 712.224963][T17136] overlay: Unknown parameter 'uid<00000000000000000000' [ 713.317834][ T1137] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 714.654325][ T1137] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 716.165276][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 717.433681][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 717.634898][T17189] fuse: Bad value for 'fd' [ 717.651052][T17189] capability: warning: `syz.2.2536' uses 32-bit capabilities (legacy support in use) [ 717.714729][ T25] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 717.813726][T17193] veth1_macvtap: left promiscuous mode [ 717.954090][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 717.970919][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.003333][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.054118][ T25] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 718.057913][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.068539][ T25] usb 8-1: config 0 descriptor?? [ 718.547959][ T25] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:05AC:8241.0004/input/input13 [ 718.606743][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 718.632711][T17201] orangefs_mount: mount request failed with -4 [ 718.664368][ T25] appleir 0003:05AC:8241.0004: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 719.847271][ T25] usb 8-1: reset high-speed USB device number 14 using dummy_hcd [ 720.050823][ T25] usb 8-1: device descriptor read/64, error -32 [ 720.211658][T16143] libceph: connect (1)[c::]:6789 error -13 [ 720.232405][T16143] libceph: mon0 (1)[c::]:6789 connect error [ 720.243363][T17209] ceph: No mds server is up or the cluster is laggy [ 720.437305][ T1137] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 720.980355][ T63] usb 8-1: USB disconnect, device number 14 [ 721.692470][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 722.914295][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 722.941455][T17253] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 722.944960][T17253] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 722.949026][T17253] vhci_hcd vhci_hcd.0: Device attached [ 723.170250][T17262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 723.196323][T16143] vhci_hcd: vhci_device speed not set [ 723.437368][T17264] orangefs_mount: mount request failed with -4 [ 723.447081][T16143] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 724.206248][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 725.344515][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 725.574040][T17257] vhci_hcd: connection reset by peer [ 725.577997][ T68] vhci_hcd: stop threads [ 725.581252][ T68] vhci_hcd: release socket [ 725.591792][ T68] vhci_hcd: disconnect device [ 726.534938][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 727.118078][T17296] tipc: Started in network mode [ 727.121429][T17296] tipc: Node identity 10000, cluster identity 4711 [ 727.128088][T17296] tipc: Node number set to 65536 [ 727.859011][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 728.852334][T17323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2565'. [ 728.897159][T17323] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2565'. [ 729.070380][T16143] vhci_hcd: vhci_device speed not set [ 729.073554][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 730.227643][ T1137] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 730.745103][T17348] overlayfs: failed to clone upperpath [ 731.414357][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 732.060401][T17356] siw: device registration error -23 [ 732.649674][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 733.237388][T17371] ptrace attach of "/syz-executor exec"[5944] was attempted by "/syz-executor exec"[17371] [ 733.869975][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 735.029341][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 735.389984][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 736.463549][T17412] overlayfs: failed to clone upperpath [ 736.600153][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 737.739811][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 738.926375][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 740.067242][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 740.521356][T17443] overlayfs: failed to clone upperpath [ 741.289490][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 742.315058][T17461] 9pnet_fd: Insufficient options for proto=fd [ 742.481527][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 743.973151][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 745.211225][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 746.409498][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.471020][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 748.118293][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 748.174462][T17535] orangefs_mount: mount request failed with -4 [ 748.362402][T17542] overlayfs: failed to resolve './file1': -2 [ 749.237801][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 750.447048][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 751.634030][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 752.539056][T17572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2617'. [ 752.569756][T17572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 752.739871][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 753.974090][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 755.124743][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 755.744496][T17603] 9pnet_fd: Insufficient options for proto=fd [ 756.307326][ T6415] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 756.433307][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 756.485137][ T6415] usb 8-1: Using ep0 maxpacket: 16 [ 756.520726][ T6415] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 756.570006][ T6415] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 756.574912][ T6415] usb 8-1: Product: syz [ 756.585682][ T6415] usb 8-1: Manufacturer: syz [ 756.588632][ T6415] usb 8-1: SerialNumber: syz [ 756.592167][ T6415] usb 8-1: config 0 descriptor?? [ 757.885494][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 758.019254][ T9010] usb 8-1: USB disconnect, device number 15 [ 758.100504][T17628] 9pnet_fd: Insufficient options for proto=fd [ 759.004267][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 759.325014][T17631] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 759.560671][T17639] orangefs_mount: mount request failed with -4 [ 760.138848][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 761.260066][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 761.735486][T17648] orangefs_mount: mount request failed with -4 [ 761.933850][T17657] orangefs_mount: mount request failed with -4 [ 762.486777][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 763.422927][T17666] 9pnet_fd: Insufficient options for proto=fd [ 763.656022][ T1137] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 764.834393][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 766.027601][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 767.683635][ T1137] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 768.931005][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 770.765703][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 772.162719][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 773.330279][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 774.536379][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 775.676680][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 775.785403][T17783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2664'. [ 776.938850][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 777.985511][T17806] overlayfs: failed to clone upperpath [ 778.132818][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 779.302114][T17825] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 779.504495][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 779.805139][T17826] orangefs_mount: mount request failed with -4 [ 780.088890][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2674'. [ 780.190713][T17836] overlayfs: failed to clone upperpath [ 780.652671][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 781.418642][T17846] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2677'. [ 781.684836][ C2] hpet_rtc_timer_reinit: 15 callbacks suppressed [ 781.684854][ C2] hpet: Lost 2 RTC interrupts [ 781.748951][ C2] hpet: Lost 1 RTC interrupts [ 782.312021][ C2] hpet: Lost 1 RTC interrupts [ 782.353054][ C2] hpet: Lost 1 RTC interrupts [ 782.445394][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 782.617316][ C2] hpet: Lost 1 RTC interrupts [ 783.083870][T17851] bond0 (unregistering): Released all slaves [ 783.272167][T17877] tipc: Enabling of bearer rejected, failed to enable media [ 783.686461][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 784.457847][T17888] orangefs_mount: mount request failed with -4 [ 784.865700][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 785.323770][T17908] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 785.689375][T17911] overlayfs: failed to clone upperpath [ 786.095094][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 787.333659][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 788.529513][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 789.761821][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 790.230165][T17962] overlayfs: failed to clone upperpath [ 790.977227][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 791.707694][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2705'. [ 791.722078][T17972] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2705'. [ 792.145177][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 792.877733][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2709'. [ 792.885524][T17995] netlink: 'syz.3.2709': attribute type 1 has an invalid length. [ 792.900025][T17995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2709'. [ 793.369771][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 794.659716][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 795.263511][T18021] »»»»»» speed is unknown, defaulting to 1000 [ 795.315112][T18022] ptrace attach of "/syz-executor exec"[5943] was attempted by "/syz-executor exec"[18022] [ 795.505537][T18021] »»»»»» speed is unknown, defaulting to 1000 [ 795.690870][T18027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 795.868883][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 796.998653][T18044] orangefs_mount: mount request failed with -4 [ 797.073862][T18050] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 797.088561][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 797.439563][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 798.474072][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 799.649742][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 800.796889][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 801.383206][T18088] vxcan1: tx address claim with dlc 1 [ 801.756955][T18096] overlayfs: failed to clone upperpath [ 802.175152][T18097] overlayfs: failed to clone upperpath [ 802.310626][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 803.441220][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 804.358676][T18107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 804.585500][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 804.823715][T18114] netlink: 'syz.3.2734': attribute type 10 has an invalid length. [ 805.152561][ T1453] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 805.198535][T18110] orangefs_mount: mount request failed with -4 [ 805.770476][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 806.052803][ T1453] usb 8-1: Using ep0 maxpacket: 16 [ 806.057775][ T1453] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 806.072511][ T1453] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 806.075679][ T1453] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.080339][ T1453] usb 8-1: config 0 descriptor?? [ 806.086902][ T1453] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input14 [ 806.448315][ T5343] bcm5974 8-1:0.0: could not read from device [ 806.537156][ T1453] bcm5974 8-1:0.0: could not read from device [ 806.593589][ T1453] input: failed to attach handler mousedev to device input14, error: -5 [ 806.720027][ T1453] usb 8-1: USB disconnect, device number 16 [ 806.987699][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 807.710303][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.030828][T18148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2742'. [ 808.259637][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 808.447538][T18154] overlayfs: failed to clone upperpath [ 809.469699][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 810.327202][T18160] orangefs_mount: mount request failed with -4 [ 810.454900][T18174] netlink: 'syz.1.2749': attribute type 10 has an invalid length. [ 810.646384][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 810.909561][T18172] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 810.912843][T18172] UDF-fs: Scanning with blocksize 2048 failed [ 810.924457][T18172] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 810.927460][T18172] UDF-fs: Scanning with blocksize 4096 failed [ 811.003613][T18174] ptrace attach of "/syz-executor exec"[5945] was attempted by "/syz-executor exec"[18174] [ 811.284908][T18184] netlink: 'syz.0.2751': attribute type 10 has an invalid length. [ 811.370128][T18187] netlink: 'syz.0.2751': attribute type 10 has an invalid length. [ 811.425992][T18188] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2751'. [ 811.819880][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 812.500757][T18198] wg2: entered promiscuous mode [ 812.502859][T18198] wg2: entered allmulticast mode [ 813.021307][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 813.716081][T18222] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 814.193825][T18228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2762'. [ 814.198523][T18228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2762'. [ 814.218482][T18225] orangefs_mount: mount request failed with -4 [ 814.260497][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 814.272508][T18228] bond0: entered promiscuous mode [ 814.315110][T18232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2762'. [ 814.329943][T18228] bond0: entered allmulticast mode [ 814.330312][T18232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2762'. [ 814.369904][T18228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.386799][T18232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2762'. [ 814.397375][T18232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2762'. [ 815.310863][T18228] bond0 (unregistering): Released all slaves [ 815.345471][T18239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2764'. [ 815.712757][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 815.760853][T18247] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 815.820018][T18247] UDF-fs: Scanning with blocksize 2048 failed [ 815.843695][T18247] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 815.847092][T18247] UDF-fs: Scanning with blocksize 4096 failed [ 816.342369][T18256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.889969][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 817.422119][T18261] netlink: 'syz.0.2771': attribute type 10 has an invalid length. [ 817.993686][T18271] siw: device registration error -23 [ 818.346151][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 819.624295][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 820.790522][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 821.093052][T18296] orangefs_mount: mount request failed with -4 [ 821.484656][T18307] overlayfs: failed to clone upperpath [ 822.039936][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 823.257445][T18330] overlayfs: failed to clone upperpath [ 823.379624][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 823.691818][T18332] overlayfs: failed to clone upperpath [ 824.579706][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 825.742324][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 826.452028][T18349] netlink: 'syz.1.2794': attribute type 2 has an invalid length. [ 826.474812][T18349] : entered promiscuous mode [ 826.920224][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 828.039992][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 829.190539][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 829.582379][T18364] overlayfs: failed to clone upperpath [ 829.621457][T18367] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 829.866200][T18370] orangefs_mount: mount request failed with -4 [ 830.099243][T18377] overlayfs: failed to clone upperpath [ 830.146945][T18376] fuse: Unknown parameter 'user_i00000000000000000000' [ 830.400064][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 830.732421][T18380] 9pnet_virtio: no channels available for device syz [ 831.616560][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 832.811413][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 832.948005][T18404] syz.0.2807(18404): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 833.999765][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 835.167631][T18420] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 835.249893][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 835.446404][T18426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2812'. [ 835.482391][T18421] orangefs_mount: mount request failed with -4 [ 836.108770][T18423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.550578][T18427] overlayfs: failed to clone upperpath [ 836.690391][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 836.976530][T18437] overlayfs: failed to clone upperpath [ 837.994394][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 838.901872][T18452] overlayfs: failed to clone upperpath [ 839.224019][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 840.005940][T18455] netlink: 'syz.2.2817': attribute type 10 has an invalid length. [ 840.519175][ T90] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 841.703251][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 843.333125][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 844.064559][T18481] overlayfs: failed to clone upperpath [ 844.346724][T18491] syzkaller0: entered promiscuous mode [ 844.358255][T18491] syzkaller0: entered allmulticast mode [ 844.692993][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 845.841427][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 846.924187][T18507] overlayfs: failed to clone upperpath [ 847.091542][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 848.269850][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 849.459884][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 850.487198][T18513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2837'. [ 850.671284][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 851.853676][ T90] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 852.924340][T18532] »»»»»» speed is unknown, defaulting to 1000 [ 853.073225][T18537] sg_write: process 2661 (syz.3.2832) changed security contexts after opening file descriptor, this is not allowed. [ 853.182615][T18534] »»»»»» speed is unknown, defaulting to 1000 [ 853.186272][T18532] »»»»»» speed is unknown, defaulting to 1000 [ 853.350450][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 853.514375][T18534] »»»»»» speed is unknown, defaulting to 1000 [ 853.980180][T18544] overlayfs: failed to clone upperpath [ 854.352953][T18547] overlayfs: failed to clone upperpath [ 854.642006][T18550] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 854.645428][T18550] UDF-fs: Scanning with blocksize 2048 failed [ 854.664281][T18550] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 854.667865][T18550] UDF-fs: Scanning with blocksize 4096 failed [ 854.761074][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 856.031373][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 856.336038][ C1] vkms_vblank_simulate: vblank timer overrun [ 856.663963][ C1] vkms_vblank_simulate: vblank timer overrun [ 856.993453][T18576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2844'. [ 857.319609][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 857.866815][T18585] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 858.373905][T18588] orangefs_mount: mount request failed with -4 [ 858.487922][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.503297][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 859.743362][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 859.851561][ C1] vkms_vblank_simulate: vblank timer overrun [ 860.139938][ C1] vkms_vblank_simulate: vblank timer overrun [ 860.263992][ C1] vkms_vblank_simulate: vblank timer overrun [ 860.464137][ C1] vkms_vblank_simulate: vblank timer overrun [ 860.592028][T18620] 9pnet_fd: Insufficient options for proto=fd [ 860.629961][T18619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2855'. [ 860.910081][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 862.138874][ T1168] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 863.203627][T18644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2862'. [ 863.226503][T18644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2862'. [ 863.260434][T18644] geneve0: entered allmulticast mode [ 863.326890][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 863.528997][T18636] tipc: Started in network mode [ 863.531951][T18636] tipc: Node identity 10000, cluster identity 4711 [ 863.535858][T18636] tipc: Node number set to 65536 [ 864.479244][ T90] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 865.547551][T18679] 9pnet_fd: Insufficient options for proto=fd [ 865.682391][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 866.909830][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 867.074073][ T40] audit: type=1800 audit(1737256507.112:548): pid=18693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2870" name="SYSV00000000" dev="hugetlbfs" ino=47 res=0 errno=0 [ 868.148667][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 868.478343][T18707] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2874'. [ 869.084822][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.124696][T18722] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 869.356970][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 870.611157][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 870.872812][T18737] netlink: 'syz.2.2880': attribute type 1 has an invalid length. [ 871.172918][T18729] orangefs_mount: mount request failed with -4 [ 871.770584][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 872.972874][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 873.295119][T18758] overlayfs: failed to resolve './file1': -2 [ 874.409717][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 874.496759][T18769] »»»»»» speed is unknown, defaulting to 1000 [ 875.177057][T18769] »»»»»» speed is unknown, defaulting to 1000 [ 875.609981][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 875.758212][T18774] overlayfs: failed to clone upperpath [ 876.799626][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 877.424615][T18777] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 877.436390][T18777] UDF-fs: Scanning with blocksize 2048 failed [ 877.674025][T18777] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 877.704423][T18777] UDF-fs: Scanning with blocksize 4096 failed [ 878.010298][ T90] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 878.342005][T18791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2893'. [ 878.972098][T18807] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2896'. [ 879.160456][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 879.228001][T18812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2897'. [ 880.274573][T18824] orangefs_mount: mount request failed with -4 [ 880.443501][ T39] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 880.877320][T18833] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 881.215816][T18834] orangefs_mount: mount request failed with -4 [ 881.575935][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 881.594796][T18849] overlayfs: failed to clone upperpath [ 882.370467][T18855] trusted_key: encrypted_key: key user:syz not found [ 882.441017][T18856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2907'. [ 882.804885][ T90] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 883.335596][T18869] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 883.384237][T18869] UDF-fs: Scanning with blocksize 2048 failed [ 883.410928][T18869] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 883.419500][T18869] UDF-fs: Scanning with blocksize 4096 failed [ 883.993011][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 884.808892][T18867] orangefs_mount: mount request failed with -4 [ 885.160303][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 885.760741][T18893] orangefs_mount: mount request failed with -4 [ 885.775829][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2915'. [ 886.379797][ T90] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 887.547991][ T90] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 888.899914][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 889.174054][T18922] »»»»»» speed is unknown, defaulting to 1000 [ 889.240886][T18922] »»»»»» speed is unknown, defaulting to 1000 [ 890.201438][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 891.359829][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 891.820297][T18954] orangefs_mount: mount request failed with -4 [ 892.030944][T18963] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2930'. [ 892.539693][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 893.232379][T18973] orangefs_mount: mount request failed with -4 [ 893.704396][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 894.698234][T18990] 9pnet: Could not find request transport: fd0x0000000000000006 [ 894.732575][T18987] ata1.00: invalid multi_count 1 ignored [ 894.823082][T17417] [ 894.824064][T17417] ====================================================== [ 894.826722][T17417] WARNING: possible circular locking dependency detected [ 894.831728][T17417] 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 Not tainted [ 894.857084][T17417] ------------------------------------------------------ [ 894.859797][T17417] kworker/3:0/17417 is trying to acquire lock: [ 894.861920][T17417] ffff888023c0e2b0 (&q->q_usage_counter(queue)#51){++++}-{0:0}, at: blk_mq_alloc_request+0x59b/0x950 [ 894.865797][T17417] [ 894.865797][T17417] but task is already holding lock: [ 894.869901][ T90] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 894.882539][T17417] ffff888023c0e8c8 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 894.882590][T17417] [ 894.882590][T17417] which lock already depends on the new lock. [ 894.882590][T17417] [ 894.882595][T17417] [ 894.882595][T17417] the existing dependency chain (in reverse order) is: [ 894.882600][T17417] [ 894.882600][T17417] -> #5 (&q->limits_lock){+.+.}-{4:4}: [ 894.882621][T17417] __mutex_lock+0x19b/0xa60 [ 894.954448][T17417] __nbd_set_size+0x2c0/0x730 [ 894.956688][T17417] nbd_start_device+0x8fd/0xd70 [ 894.965704][T17417] nbd_ioctl+0x21a/0xfd0 [ 894.967666][T17417] compat_blkdev_ioctl+0x2f7/0x750 [ 894.974610][T17417] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 894.985997][T17417] __do_fast_syscall_32+0x73/0x120 [ 894.990892][T17417] do_fast_syscall_32+0x32/0x80 [ 894.993063][T17417] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 894.996132][T17417] [ 894.996132][T17417] -> #4 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 895.002415][T17417] blk_mq_submit_bio+0x1fb6/0x24c0 [ 895.004645][T17417] __submit_bio+0x384/0x540 [ 895.006893][T17417] submit_bio_noacct_nocheck+0x698/0xd70 [ 895.015463][T17417] submit_bio_noacct+0x93a/0x1e20 [ 895.019057][T17417] block_read_full_folio+0x812/0xa50 [ 895.021379][T17417] filemap_read_folio+0xc6/0x2a0 [ 895.023439][T17417] filemap_get_pages+0x155f/0x1be0 [ 895.025932][T17417] filemap_read+0x3ca/0xd70 [ 895.045748][T17417] blkdev_read_iter+0x187/0x480 [ 895.053521][T17417] vfs_read+0x87f/0xbe0 [ 895.055288][T17417] ksys_read+0x12b/0x250 [ 895.057086][T17417] do_syscall_64+0xcd/0x250 [ 895.077606][T17417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.085850][T17417] [ 895.085850][T17417] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 895.094083][T17417] down_read+0x9a/0x330 [ 895.096635][T17417] filemap_fault+0x2e0/0x2820 [ 895.123208][T17417] __do_fault+0x10a/0x490 [ 895.125777][T17417] do_pte_missing+0xebd/0x3e00 [ 895.136134][T17417] __handle_mm_fault+0x103c/0x2a40 [ 895.144402][T17417] handle_mm_fault+0x3fa/0xaa0 [ 895.147657][T17417] __get_user_pages+0x8d9/0x3b50 [ 895.155532][T17417] populate_vma_page_range+0x27f/0x3a0 [ 895.166010][T17417] __mm_populate+0x1d6/0x380 [ 895.170674][T17417] vm_mmap_pgoff+0x293/0x360 [ 895.176686][T17417] ksys_mmap_pgoff+0x32c/0x5c0 [ 895.179930][T17417] __do_fast_syscall_32+0x73/0x120 [ 895.188680][T17417] do_fast_syscall_32+0x32/0x80 [ 895.202128][T17417] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 895.204713][T17417] [ 895.204713][T17417] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 895.207526][T17417] __might_fault+0x11b/0x190 [ 895.228852][T17417] _copy_from_user+0x29/0xd0 [ 895.237395][T17417] compat_blk_trace_setup+0xc9/0x200 [ 895.240828][T17417] blk_trace_ioctl+0x24a/0x290 [ 895.246249][T17417] compat_blkdev_ioctl+0x13c/0x750 [ 895.256565][T17417] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 895.260062][T17417] __do_fast_syscall_32+0x73/0x120 [ 895.263403][T17417] do_fast_syscall_32+0x32/0x80 [ 895.275686][T17417] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 895.279301][T17417] [ 895.279301][T17417] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 895.283120][T17417] __mutex_lock+0x19b/0xa60 [ 895.289681][T17417] blk_mq_init_sched+0x42b/0x640 [ 895.295562][T17417] elevator_init_mq+0x2cd/0x420 [ 895.298571][T17417] add_disk_fwnode+0x113/0x1300 [ 895.307745][T17417] sd_probe+0xa66/0xfa0 [ 895.310670][T17417] really_probe+0x23e/0xa90 [ 895.314248][T17417] __driver_probe_device+0x1de/0x440 [ 895.321575][T17417] driver_probe_device+0x4c/0x1b0 [ 895.328019][T17417] __device_attach_driver+0x1df/0x310 [ 895.337040][T17417] bus_for_each_drv+0x157/0x1e0 [ 895.339403][T17417] __device_attach_async_helper+0x1d3/0x290 [ 895.347200][T17417] async_run_entry_fn+0x9c/0x530 [ 895.349589][T17417] process_one_work+0x958/0x1b30 [ 895.353216][T17417] worker_thread+0x6c8/0xf00 [ 895.355687][T17417] kthread+0x2c1/0x3a0 [ 895.365412][T17417] ret_from_fork+0x45/0x80 [ 895.371644][T17417] ret_from_fork_asm+0x1a/0x30 [ 895.374408][T17417] [ 895.374408][T17417] -> #0 (&q->q_usage_counter(queue)#51){++++}-{0:0}: [ 895.395409][T17417] __lock_acquire+0x249e/0x3c40 [ 895.398467][T17417] lock_acquire.part.0+0x11b/0x380 [ 895.401492][T17417] blk_queue_enter+0x50f/0x640 [ 895.406097][T17417] blk_mq_alloc_request+0x59b/0x950 [ 895.409898][T17417] scsi_execute_cmd+0x20a/0xf30 [ 895.412985][T17417] read_capacity_16+0x21a/0xe20 [ 895.425553][T17417] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 895.428415][T17417] scsi_rescan_device+0x243/0x340 [ 895.430783][T17417] ata_scsi_dev_rescan+0x1cb/0x470 [ 895.432723][T17417] process_one_work+0x958/0x1b30 [ 895.440303][T17417] worker_thread+0x6c8/0xf00 [ 895.442315][T17417] kthread+0x2c1/0x3a0 [ 895.449329][T17417] ret_from_fork+0x45/0x80 [ 895.451671][T17417] ret_from_fork_asm+0x1a/0x30 [ 895.453803][T17417] [ 895.453803][T17417] other info that might help us debug this: [ 895.453803][T17417] [ 895.460897][T17417] Chain exists of: [ 895.460897][T17417] &q->q_usage_counter(queue)#51 --> &q->q_usage_counter(io)#50 --> &q->limits_lock [ 895.460897][T17417] [ 895.477289][T17417] Possible unsafe locking scenario: [ 895.477289][T17417] [ 895.479955][T17417] CPU0 CPU1 [ 895.481973][T17417] ---- ---- [ 895.484017][T17417] lock(&q->limits_lock); [ 895.495883][T17417] lock(&q->q_usage_counter(io)#50); [ 895.498754][T17417] lock(&q->limits_lock); [ 895.508470][T17417] rlock(&q->q_usage_counter(queue)#51); [ 895.512579][T17417] [ 895.512579][T17417] *** DEADLOCK *** [ 895.512579][T17417] [ 895.517910][T17417] 5 locks held by kworker/3:0/17417: [ 895.535746][T17417] #0: ffff88801ac88948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 895.541530][T17417] #1: ffffc9000dde7d80 ((work_completion)(&(&ap->scsi_rescan_task)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 895.557253][T17417] #2: ffff888024d0c358 (&ap->scsi_scan_mutex){+.+.}-{4:4}, at: ata_scsi_dev_rescan+0x3e/0x470 [ 895.573028][T17417] #3: ffff888024f9a378 (&dev->mutex){....}-{4:4}, at: scsi_rescan_device+0x27/0x340 [ 895.581194][T17417] #4: ffff888023c0e8c8 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 895.592864][T17417] [ 895.592864][T17417] stack backtrace: [ 895.599173][T17417] CPU: 3 UID: 0 PID: 17417 Comm: kworker/3:0 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 895.603736][T17417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 895.614028][T17417] Workqueue: events ata_scsi_dev_rescan [ 895.622295][T17417] Call Trace: [ 895.623629][T17417] [ 895.628772][T17417] dump_stack_lvl+0x116/0x1f0 [ 895.633475][T17417] print_circular_bug+0x41c/0x610 [ 895.635824][T17417] check_noncircular+0x31a/0x400 [ 895.645918][T17417] ? __pfx_check_noncircular+0x10/0x10 [ 895.649689][T17417] ? lockdep_lock+0xc6/0x200 [ 895.655678][T17417] ? __pfx_lockdep_lock+0x10/0x10 [ 895.658846][T17417] __lock_acquire+0x249e/0x3c40 [ 895.666180][T17417] ? __pfx___lock_acquire+0x10/0x10 [ 895.668560][T17417] lock_acquire.part.0+0x11b/0x380 [ 895.675247][T17417] ? blk_mq_alloc_request+0x59b/0x950 [ 895.679632][T17417] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 895.687529][T17417] ? rcu_is_watching+0x12/0xc0 [ 895.690604][T17417] ? trace_lock_acquire+0x14e/0x1f0 [ 895.704266][T17417] ? blk_mq_alloc_request+0x59b/0x950 [ 895.706492][T17417] ? lock_acquire+0x2f/0xb0 [ 895.708270][T17417] ? blk_mq_alloc_request+0x59b/0x950 [ 895.710293][T17417] blk_queue_enter+0x50f/0x640 [ 895.712163][T17417] ? blk_mq_alloc_request+0x59b/0x950 [ 895.714206][T17417] ? __pfx_blk_queue_enter+0x10/0x10 [ 895.716256][T17417] ? __pfx___lock_acquire+0x10/0x10 [ 895.718255][T17417] ? add_lock_to_list+0x17d/0x390 [ 895.728449][T17417] blk_mq_alloc_request+0x59b/0x950 [ 895.739170][T17417] ? __pfx_blk_mq_alloc_request+0x10/0x10 [ 895.742673][T17417] ? bpf_trace_run2+0x266/0x590 [ 895.745525][T17417] ? __pfx___cant_migrate+0x10/0x10 [ 895.749110][T17417] ? bpf_trace_run2+0x1c2/0x590 [ 895.752252][T17417] scsi_execute_cmd+0x20a/0xf30 [ 895.755154][T17417] ? lock_acquire.part.0+0x11b/0x380 [ 895.757909][T17417] ? __mutex_trylock_common+0xea/0x250 [ 895.760985][T17417] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 895.763598][T17417] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 895.766428][T17417] ? rcu_is_watching+0x12/0xc0 [ 895.768693][T17417] read_capacity_16+0x21a/0xe20 [ 895.771163][T17417] ? __pfx_read_capacity_16+0x10/0x10 [ 895.773883][T17417] ? __pfx___mutex_lock+0x10/0x10 [ 895.776420][T17417] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 895.779631][T17417] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 895.783583][T17417] ? find_held_lock+0x2d/0x110 [ 895.785986][T17417] ? mark_held_locks+0x9f/0xe0 [ 895.788556][T17417] ? __pfx_sd_revalidate_disk.isra.0+0x10/0x10 [ 895.791701][T17417] ? kasan_save_stack+0x42/0x60 [ 895.794253][T17417] ? kasan_save_stack+0x33/0x60 [ 895.796615][T17417] ? kasan_save_track+0x14/0x30 [ 895.798997][T17417] ? kasan_save_free_info+0x3b/0x60 [ 895.801570][T17417] ? __kasan_slab_free+0x51/0x70 [ 895.804849][T17417] ? kfree+0x14f/0x4b0 [ 895.806853][T17417] ? scsi_attach_vpd+0x4dc/0x580 [ 895.809286][T17417] ? scsi_rescan_device+0xf5/0x340 [ 895.811727][T17417] ? ata_scsi_dev_rescan+0x1cb/0x470 [ 895.813831][T17417] ? process_one_work+0x958/0x1b30 [ 895.816009][T17417] ? worker_thread+0x6c8/0xf00 [ 895.818209][T17417] ? hlock_class+0x4e/0x130 [ 895.820472][T17417] ? mark_lock+0xb5/0xc60 [ 895.822875][T17417] ? mark_held_locks+0x9f/0xe0 [ 895.825778][T17417] ? kasan_quarantine_put+0x10a/0x240 [ 895.829011][T17417] ? lockdep_hardirqs_on+0x7c/0x110 [ 895.832019][T17417] ? kfree+0x14f/0x4b0 [ 895.834593][T17417] ? lockdep_hardirqs_on+0x7c/0x110 [ 895.838268][T17417] ? scsi_attach_vpd+0x4dc/0x580 [ 895.841154][T17417] ? scsi_attach_vpd+0x4dc/0x580 [ 895.843959][T17417] ? __pfx_sd_rescan+0x10/0x10 [ 895.846755][T17417] scsi_rescan_device+0x243/0x340 [ 895.849860][T17417] ata_scsi_dev_rescan+0x1cb/0x470 [ 895.853011][T17417] process_one_work+0x958/0x1b30 [ 895.855906][T17417] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 895.859209][T17417] ? __pfx_process_one_work+0x10/0x10 [ 895.862431][T17417] ? rcu_is_watching+0x12/0xc0 [ 895.865236][T17417] ? assign_work+0x1a0/0x250 [ 895.867958][T17417] worker_thread+0x6c8/0xf00 [ 895.870686][T17417] ? __kthread_parkme+0x148/0x220 [ 895.873517][T17417] ? __pfx_worker_thread+0x10/0x10 [ 895.876457][T17417] kthread+0x2c1/0x3a0 [ 895.878944][T17417] ? _raw_spin_unlock_irq+0x23/0x50 [ 895.882190][T17417] ? __pfx_kthread+0x10/0x10 [ 895.884966][T17417] ret_from_fork+0x45/0x80 [ 895.887529][T17417] ? __pfx_kthread+0x10/0x10 [ 895.889778][T17417] ret_from_fork_asm+0x1a/0x30 [ 895.892148][T17417] [ 896.219754][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 897.349636][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 898.459608][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 899.569596][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 900.699840][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 901.809576][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 902.929839][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 904.050109][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! VM DIAGNOSIS: 03:11:15 Registers: info registers vcpu 0 CPU#0 RAX=ffffc9000637faac RBX=00000000200161c0 RCX=ffffffff8498e069 RDX=0000000000000001 RSI=000000000000001c RDI=ffffc9000637fa90 RBP=000000000000001c RSP=ffffc9000637fa28 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffc9000637fa90 R14=ffffc9000637fb50 R15=00000000200161c0 RIP=ffffffff81fbb85b RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50a4da4 CR3=000000004aaae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000066900000000 0000000900000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000009bce RBX=ffff8880217fcf00 RCX=ffffc9000c402000 RDX=0000000000080000 RSI=ffff8880217fcf00 RDI=ffff888067c24200 RBP=1ffff92000d51f01 RSP=ffffc90006a8f7d0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000001 R14=ffff888067c24200 R15=ffff888067c25ac0 RIP=ffffffff844d9c94 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2c1dad CR3=000000004aaae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000018800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000007 RBX=0000000000000201 RCX=1ffffffff203abe2 RDX=0000000000000000 RSI=0000000000000201 RDI=ffffffff88f5bedf RBP=0000000000000246 RSP=ffffc90006647900 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff901d2c17 R11=0000000000000001 R12=ffff8880239931c0 R13=0000000000000000 R14=0000000080000000 R15=0000000080000000 RIP=ffffffff815bf273 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020430000 CR3=000000007005e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7393ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85146355 RDI=ffffffff9a66e200 RBP=ffffffff9a66e1c0 RSP=ffffc9000dde6a60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3a6b636f6c206762 R12=0000000000000000 R13=0000000000000020 R14=ffffffff851462f0 R15=0000000000000000 RIP=ffffffff8514637f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f6f2ffc CR3=000000006a686000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4fbd3d1f655a56eb 5941d3f15af9961a ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a2e721efbe4bc27 9d5427526590352b ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 736b9eb0f699eb8c 1ccef1bf039804e4 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ef8e3304681f0164 41f55adcec4fa9d6 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001100 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d737c90ed73ff46e 0000021ed7438f36 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010000800100 00800100d74733ba ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000021e00800100 d73b60400000021e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 008001000000021e 0000021e00800100 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9d2e86f4ab66a36f 77e9a3753e94d359 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ddde480811ce5a36 1e300772d135bfd3 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000