last executing test programs: 6.120331219s ago: executing program 0 (id=4695): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@deltaction={0xf0, 0x31, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb39}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4b4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x84}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x46085}, 0x4040045) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.908995053s ago: executing program 0 (id=4703): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x5d54, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0xfe}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000002c0)=[r9], &(0x7f0000000140)=[0x7], &(0x7f0000000800)=[r10], &(0x7f0000000100), 0x0, 0x400000000}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r9, 0xeeeeeeee}) 2.543652221s ago: executing program 0 (id=4707): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x5d54, 0x4) bind$bt_hci(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0xfe}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000002c0)=[r8], &(0x7f0000000140)=[0x7], &(0x7f0000000800)=[r9], &(0x7f0000000100), 0x0, 0x400000000}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r8, 0xeeeeeeee}) 1.268295734s ago: executing program 0 (id=4714): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0xfc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 1.201186471s ago: executing program 0 (id=4716): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x5d54, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0xfe}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000002c0)=[r9], &(0x7f0000000140)=[0x7], &(0x7f0000000800)=[r10], &(0x7f0000000100), 0x0, 0x400000000}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r9, 0xeeeeeeee}) 1.129344988s ago: executing program 1 (id=4717): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r1, @ANYBLOB="14001d810c0000800600050002"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4008010) 1.128423754s ago: executing program 2 (id=4718): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) 1.123065957s ago: executing program 1 (id=4719): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) write(r0, &(0x7f0000000280), 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x80) 1.122724012s ago: executing program 2 (id=4720): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0xfe}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000002c0)=[r9], &(0x7f0000000140)=[0x7], &(0x7f0000000800)=[r10], &(0x7f0000000100), 0x0, 0x400000000}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r9, 0xeeeeeeee}) 1.122212933s ago: executing program 3 (id=4721): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xb, 0xe}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) 1.051994496s ago: executing program 1 (id=4722): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x5d54, 0x4) bind$bt_hci(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0xfe}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000002c0)=[r8], &(0x7f0000000140)=[0x7], &(0x7f0000000800)=[r9], &(0x7f0000000100), 0x0, 0x400000000}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r8, 0xeeeeeeee}) 1.051743575s ago: executing program 3 (id=4723): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x200400dc}, 0x4000080) 1.051305776s ago: executing program 3 (id=4724): mkdir(&(0x7f0000000140)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0xfffffd00, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x26c02, &(0x7f0000001540)='\r\x87\x17^\x981\xd5\x14\xe2\x81\xa6\xcd\t\xa5\xbasG\x88\x7f]\x03\xf3\xd5t\x97\x9f\xee\"\xebU\xccM\x02\x17\x0f[\x9c\x9e\xa6\xd2\xe4(\xea\x7f\xe4\x90K\xcb\xb5;f\x02}\x147\x04=\xe50\x8d;\x90!\x01,\xdb,\xb9\x8e\t\x13\x1eh\xbc^<\xd2\x809G\xe6H\xbb&^\\\x9c\xady\xd9\xb5\xa3\x16\xd0\xdf\x1a\xaa\xfcHz\x89\x19\xe1\xe6+\xf6\xc3\xad\x80\x98\xc2\x10\x91\xec\xf6\x93=\xbe\x10\xfc`\x86\xa7\xe6\xae\x00*R\x92\x05\xf6\x80u\xf9\xb7S{\xd6\x99\x9a\xf3\xcc\x04o\xdd\x91 \x92;\x87\xfb\x82c>\x82VR8\xe5\x0f\xeb\xcdJz\f\xf5.\xd7!\xa1\xfe\xc8\xf0\xb5\\\xc2\xc7\xc7\xaa\xd9:\xa3+\x12\x9f\xfc\xf6@},`=\xea\x91\fJ\xe4\rC\xa9\xe0\x8b%\x9f\'\xbdX\xbfS\x00\x8c\x84\x10\xcf\xf0\xd7\xe0\xf9\xf8E\xa3?\x17\\\x9e\n\xa1h!\x9e\xd8\xe8\xa5\xc5\xbf_\xa7\xc9\x91U\x86=\xa5\xf7g~\xaa\xc8N\"^\x8e%') r4 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x84000) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) listen(r0, 0x3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000004a5cb823000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES16=r5, @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)={@multicast, @link_local, @void, {@arp={0x806, @generic={0x306, 0x19, 0x6, 0x9, 0x1, @multicast, "c4c42df5043c1bc36f", @random="786834771c1e", "e1f014a45e1f5f"}}}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) socket$kcm(0x29, 0x2, 0x0) 290.636612ms ago: executing program 0 (id=4725): mkdir(&(0x7f0000000140)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0xfffffd00, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x26c02, &(0x7f0000001540)='\r\x87\x17^\x981\xd5\x14\xe2\x81\xa6\xcd\t\xa5\xbasG\x88\x7f]\x03\xf3\xd5t\x97\x9f\xee\"\xebU\xccM\x02\x17\x0f[\x9c\x9e\xa6\xd2\xe4(\xea\x7f\xe4\x90K\xcb\xb5;f\x02}\x147\x04=\xe50\x8d;\x90!\x01,\xdb,\xb9\x8e\t\x13\x1eh\xbc^<\xd2\x809G\xe6H\xbb&^\\\x9c\xady\xd9\xb5\xa3\x16\xd0\xdf\x1a\xaa\xfcHz\x89\x19\xe1\xe6+\xf6\xc3\xad\x80\x98\xc2\x10\x91\xec\xf6\x93=\xbe\x10\xfc`\x86\xa7\xe6\xae\x00*R\x92\x05\xf6\x80u\xf9\xb7S{\xd6\x99\x9a\xf3\xcc\x04o\xdd\x91 \x92;\x87\xfb\x82c>\x82VR8\xe5\x0f\xeb\xcdJz\f\xf5.\xd7!\xa1\xfe\xc8\xf0\xb5\\\xc2\xc7\xc7\xaa\xd9:\xa3+\x12\x9f\xfc\xf6@},`=\xea\x91\fJ\xe4\rC\xa9\xe0\x8b%\x9f\'\xbdX\xbfS\x00\x8c\x84\x10\xcf\xf0\xd7\xe0\xf9\xf8E\xa3?\x17\\\x9e\n\xa1h!\x9e\xd8\xe8\xa5\xc5\xbf_\xa7\xc9\x91U\x86=\xa5\xf7g~\xaa\xc8N\"^\x8e%') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x84000) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f0000000340)={'team_slave_0\x00'}) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) listen(r0, 0x3) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000004a5cb823000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES16=r6, @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)={@multicast, @link_local, @void, {@arp={0x806, @generic={0x306, 0x19, 0x6, 0x9, 0x1, @multicast, "c4c42df5043c1bc36f", @random="786834771c1e", "e1f014a45e1f5f"}}}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) socket$kcm(0x29, 0x2, 0x0) 149.449979ms ago: executing program 1 (id=4726): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)='j\x00', 0x2}], 0x1}}], 0x1, 0x10014) 149.14055ms ago: executing program 2 (id=4727): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x16008000, &(0x7f0000000680)={0x11, 0x1a, r2, 0x1, 0x9}, 0x14) 148.889868ms ago: executing program 1 (id=4728): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x80) r0 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) write$hidraw(r0, &(0x7f0000000000)="22e7b5", 0x4000) 148.653213ms ago: executing program 2 (id=4729): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000)=0xfff, 0x4) 76.638935ms ago: executing program 3 (id=4730): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) fanotify_init(0x4, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x401}}}, 0x7) 76.329105ms ago: executing program 1 (id=4731): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x4c0, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00'}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000180012800e00010077697265677561726400000004000280"], 0x40}}, 0x0) io_setup(0x2, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f00000003c0), 0x18, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0xf, 0x6, 0x5a73}, 0x10) write(0xffffffffffffffff, &(0x7f0000000480)="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", 0xe00) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0xa, 0x4e28, 0x9, @local, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x4004851) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sync() sync() socket$nl_route(0x10, 0x3, 0x0) 76.088628ms ago: executing program 3 (id=4732): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002900000008000300", @ANYRES32=r2, @ANYBLOB="0500070003000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc004) 456.613µs ago: executing program 2 (id=4733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 325.723µs ago: executing program 3 (id=4734): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DISCONNECT(r0, 0xab08) 0s ago: executing program 2 (id=4735): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x298], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}]}}]}, 0x8c}, 0x1, 0x7a00}, 0x0) kernel console output (not intermixed with test programs): nown, defaulting to 1000 [ 1118.532858][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1119.013804][T21876] mkiss: ax0: crc mode is auto. [ 1119.572804][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1119.769622][T21899] Cannot find del_set index 320 as target [ 1120.612752][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1120.638320][T21915] mkiss: ax0: crc mode is auto. [ 1121.164280][T21925] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1121.479883][T21926] wlan0 speed is unknown, defaulting to 1000 [ 1121.482093][T21926] lo speed is unknown, defaulting to 1000 [ 1121.662874][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1122.683272][T21947] mkiss: ax0: crc mode is auto. [ 1122.692769][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1122.862459][T21954] wlan0 speed is unknown, defaulting to 1000 [ 1122.866079][T21954] lo speed is unknown, defaulting to 1000 [ 1123.635422][T21968] Cannot find add_set index 3 as target [ 1123.732786][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1123.777850][T21971] wlan0 speed is unknown, defaulting to 1000 [ 1123.781068][T21971] lo speed is unknown, defaulting to 1000 [ 1124.273839][T21978] usb usb1: usbfs: process 21978 (syz.1.3073) did not claim interface 0 before use [ 1124.725458][T21982] usb usb1: usbfs: process 21982 (syz.2.3074) did not claim interface 0 before use [ 1124.772771][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1125.084755][T22000] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1125.088190][T22000] overlayfs: overlapping lowerdir path [ 1125.793028][T22006] netfs: Couldn't get user pages (rc=-14) [ 1125.806492][T21991] wlan0 speed is unknown, defaulting to 1000 [ 1125.808700][T21991] lo speed is unknown, defaulting to 1000 [ 1125.812803][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1126.163922][T22018] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3080'. [ 1126.852788][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1127.173756][T22029] usb usb1: usbfs: process 22029 (syz.2.3083) did not claim interface 0 before use [ 1127.892758][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1128.349456][T22045] wlan0 speed is unknown, defaulting to 1000 [ 1128.354934][T22045] lo speed is unknown, defaulting to 1000 [ 1128.932805][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1129.113931][T22052] usb usb1: usbfs: process 22052 (syz.1.3087) did not claim interface 0 before use [ 1129.274364][T22062] Cannot find del_set index 320 as target [ 1129.808597][T22068] netfs: Couldn't get user pages (rc=-14) [ 1129.972841][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1130.114684][T22072] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3091'. [ 1130.936406][T22083] netfs: Couldn't get user pages (rc=-14) [ 1131.012766][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1132.006502][T22093] wlan0 speed is unknown, defaulting to 1000 [ 1132.010537][T22093] lo speed is unknown, defaulting to 1000 [ 1132.052807][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1132.360501][T22092] mkiss: ax0: crc mode is auto. [ 1132.661957][T22108] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1133.023624][T22115] netfs: Couldn't get user pages (rc=-14) [ 1133.092763][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1134.142796][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1135.172796][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1135.526991][T22151] wlan0 speed is unknown, defaulting to 1000 [ 1135.530188][T22151] lo speed is unknown, defaulting to 1000 [ 1135.753334][T22154] mkiss: ax0: crc mode is auto. [ 1136.222839][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1136.512275][T22169] netfs: Couldn't get user pages (rc=-14) [ 1137.262829][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1137.696238][T22182] netfs: Couldn't get user pages (rc=-14) [ 1138.110395][T22194] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3115'. [ 1138.292823][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1138.294270][T22195] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3117'. [ 1139.185240][T22207] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3127'. [ 1139.342830][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1139.693837][T22208] mkiss: ax0: crc mode is auto. [ 1140.033297][T22229] netfs: Couldn't get user pages (rc=-14) [ 1140.372744][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1141.277903][T22241] mkiss: ax0: crc mode is auto. [ 1141.412778][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1141.684488][T22251] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3126'. [ 1141.985180][T22253] syzkaller1: entered promiscuous mode [ 1141.987405][T22253] syzkaller1: entered allmulticast mode [ 1141.994758][T22255] program syz.1.3129 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1142.452963][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1143.467121][T22280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1143.492809][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1144.532864][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1145.483894][T22314] mkiss: ax0: crc mode is auto. [ 1145.572827][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1145.945341][T22329] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3139'. [ 1146.622801][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1147.044599][T22337] wlan0 speed is unknown, defaulting to 1000 [ 1147.046998][T22337] lo speed is unknown, defaulting to 1000 [ 1147.473292][T22344] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3142'. [ 1147.652859][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1148.420997][T22368] netlink: 'syz.0.3148': attribute type 1 has an invalid length. [ 1148.439886][T22368] bond4: (slave gretap1): making interface the new active one [ 1148.442506][T22368] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1148.462171][T22368] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1148.556378][T22373] usb usb1: usbfs: process 22373 (syz.3.3146) did not claim interface 0 before use [ 1148.559414][T22370] usb usb1: usbfs: process 22370 (syz.2.3147) did not claim interface 0 before use [ 1148.692813][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1148.772594][T22381] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3149'. [ 1149.554192][T22394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3151'. [ 1149.563960][T22394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3151'. [ 1149.752585][T22398] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3153'. [ 1150.390709][T22404] mkiss: ax0: crc mode is auto. [ 1150.442004][T22403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3155'. [ 1150.540858][T22408] netfs: Couldn't get user pages (rc=-14) [ 1151.553847][T22421] usb usb1: usbfs: process 22421 (syz.3.3159) did not claim interface 0 before use [ 1151.582839][T22429] xt_hashlimit: overflow, rate too high: 0 [ 1152.437117][T22420] mkiss: ax0: crc mode is auto. [ 1152.949129][T22439] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3160'. [ 1152.951686][T22443] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3161'. [ 1153.629056][T22451] usb usb1: usbfs: process 22451 (syz.1.3163) did not claim interface 0 before use [ 1153.959450][T22460] netfs: Couldn't get user pages (rc=-14) [ 1154.007749][T22462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3166'. [ 1155.153543][T22480] usb usb1: usbfs: process 22480 (syz.0.3170) did not claim interface 0 before use [ 1155.289911][T22485] wlan0 speed is unknown, defaulting to 1000 [ 1155.293709][T22485] lo speed is unknown, defaulting to 1000 [ 1155.741227][T22492] mkiss: ax0: crc mode is auto. [ 1156.122331][T22510] overlayfs: missing 'lowerdir' [ 1156.763920][T22527] Cannot find add_set index 3 as target [ 1156.797216][T22528] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3177'. [ 1156.816236][T22527] ubi31: attaching mtd0 [ 1156.824664][T22527] ubi31: scanning is finished [ 1156.826141][T22527] ubi31: empty MTD device detected [ 1157.048536][T22527] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1157.050793][T22527] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1157.053730][T22527] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1157.055778][T22527] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1157.057910][T22527] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1157.059872][T22527] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1157.062158][T22527] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2798860587 [ 1157.065101][T22527] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1157.068011][T22531] ubi31: background thread "ubi_bgt31d" started, PID 22531 [ 1157.141301][T22533] netfs: Couldn't get user pages (rc=-14) [ 1157.762590][T22536] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3179'. [ 1157.841214][T22543] 9pnet_virtio: no channels available for device syz [ 1159.432017][T22563] mkiss: ax0: crc mode is auto. [ 1160.529454][T22580] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3188'. [ 1160.656847][T22589] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3190'. [ 1161.919500][T22611] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3193'. [ 1163.037104][T22624] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3197'. [ 1163.950127][T22639] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3200'. [ 1163.954970][T22639] overlayfs: failed to resolve './file0': -2 [ 1164.641068][T22649] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3203'. [ 1164.645444][T22649] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3203'. [ 1164.925253][T22645] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3202'. [ 1165.046225][T22654] mkiss: ax0: crc mode is auto. [ 1165.544345][T22663] usb usb1: usbfs: process 22663 (syz.2.3205) did not claim interface 0 before use [ 1165.659612][T22664] syz.0.3206: attempt to access beyond end of device [ 1165.659612][T22664] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1165.663898][T22664] MINIX-fs: unable to read superblock [ 1166.001422][T22668] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3207'. [ 1167.922277][T22699] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3214'. [ 1168.473057][T22706] IPVS: Error connecting to the multicast addr [ 1169.471158][T22723] wlan0 speed is unknown, defaulting to 1000 [ 1169.473927][T22723] lo speed is unknown, defaulting to 1000 [ 1169.504278][T22724] mkiss: ax0: crc mode is auto. [ 1169.539731][T22728] syz.2.3219: attempt to access beyond end of device [ 1169.539731][T22728] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1169.543503][T22728] MINIX-fs: unable to read superblock [ 1169.949123][T22736] syz.1.3221: attempt to access beyond end of device [ 1169.949123][T22736] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1169.953397][T22736] MINIX-fs: unable to read superblock [ 1170.854022][T22745] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3223'. [ 1171.651875][T22758] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3226'. [ 1173.235201][T22784] mkiss: ax0: crc mode is auto. [ 1173.343132][T22787] syz.1.3233: attempt to access beyond end of device [ 1173.343132][T22787] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1173.346914][T22787] MINIX-fs: unable to read superblock [ 1173.928499][T22778] wlan0 speed is unknown, defaulting to 1000 [ 1173.933011][T22778] lo speed is unknown, defaulting to 1000 [ 1174.382183][T22800] syz.0.3234: attempt to access beyond end of device [ 1174.382183][T22800] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1174.386557][T22800] MINIX-fs: unable to read superblock [ 1175.250973][T22812] 9pnet_virtio: no channels available for device syz [ 1175.385798][T22815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3238'. [ 1175.400415][T22815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3238'. [ 1176.776196][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.085744][T22845] usb usb1: usbfs: process 22845 (syz.2.3245) did not claim interface 0 before use [ 1177.129285][T22824] mkiss: ax0: crc mode is auto. [ 1177.703823][T22860] usb usb1: usbfs: process 22860 (syz.1.3247) did not claim interface 0 before use [ 1177.883731][T22863] syzkaller1: entered promiscuous mode [ 1177.885959][T22863] syzkaller1: entered allmulticast mode [ 1178.499527][T22873] netfs: Couldn't get user pages (rc=-14) [ 1178.522777][T22876] 9pnet_virtio: no channels available for device syz [ 1180.292307][T22905] mkiss: ax0: crc mode is auto. [ 1180.744704][T22924] usb usb1: usbfs: process 22924 (syz.1.3259) did not claim interface 0 before use [ 1181.204053][ T6004] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1181.372775][ T6004] usb 7-1: Using ep0 maxpacket: 8 [ 1181.428209][ T6004] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1181.430619][ T6004] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1181.434590][ T6004] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1181.438086][ T6004] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1181.441746][ T6004] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1181.453141][ T6004] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1181.455809][ T6004] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1181.459039][ T6004] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1181.463754][ T6004] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1181.467251][ T6004] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1181.472691][ T6004] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1181.474906][ T6004] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1181.478149][ T6004] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1181.481548][ T6004] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1181.485117][ T6004] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1181.490895][ T6004] usb 7-1: string descriptor 0 read error: -22 [ 1181.493034][ T6004] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1181.495865][ T6004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.005937][ T6004] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1182.050891][ T6004] usb 7-1: USB disconnect, device number 8 [ 1182.367023][T22943] syzkaller1: entered promiscuous mode [ 1182.368747][T22943] syzkaller1: entered allmulticast mode [ 1182.819409][T22950] veth0_to_team: entered promiscuous mode [ 1182.823625][T22950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3266'. [ 1183.818809][T22967] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3268'. [ 1184.100643][T22966] netlink: 'syz.0.3269': attribute type 9 has an invalid length. [ 1184.649158][T22986] syz.1.3273: attempt to access beyond end of device [ 1184.649158][T22986] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1184.672063][T22986] MINIX-fs: unable to read superblock [ 1185.089743][T22996] syzkaller1: entered promiscuous mode [ 1185.091812][T22996] syzkaller1: entered allmulticast mode [ 1185.849569][T23005] xt_CT: No such helper "syz1" [ 1186.689923][T23008] input: syz1 as /devices/virtual/input/input22 [ 1186.710437][T23011] nvme_fabrics: missing parameter 'transport=%s' [ 1186.712328][T23011] nvme_fabrics: missing parameter 'nqn=%s' [ 1187.622930][T23032] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3283'. [ 1187.913092][T23036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3282'. [ 1188.360262][T23048] syzkaller1: entered promiscuous mode [ 1188.362059][T23048] syzkaller1: entered allmulticast mode [ 1188.559214][T23051] wlan0 speed is unknown, defaulting to 1000 [ 1188.561386][T23051] lo speed is unknown, defaulting to 1000 [ 1189.270328][T23061] netfs: Couldn't get user pages (rc=-14) [ 1190.483477][T23072] 9pnet_virtio: no channels available for device syz [ 1190.700831][T23074] random: crng reseeded on system resumption [ 1191.004970][T18718] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1191.269274][T23083] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3293'. [ 1191.691152][T23090] ipvlan1: entered allmulticast mode [ 1191.716617][T23090] veth0_vlan: entered allmulticast mode [ 1192.408131][T23096] syz.1.3297: attempt to access beyond end of device [ 1192.408131][T23096] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1192.411958][T23096] MINIX-fs: unable to read superblock [ 1192.606287][T23106] wlan0 speed is unknown, defaulting to 1000 [ 1192.608653][T23106] lo speed is unknown, defaulting to 1000 [ 1192.985864][T23129] netfs: Couldn't get user pages (rc=-14) [ 1193.598715][T23151] blktrace: Concurrent blktraces are not allowed on sg0 [ 1195.530268][T23167] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3307'. [ 1196.039491][T23170] netfs: Couldn't get user pages (rc=-14) [ 1196.562218][T23177] syz.2.3309: attempt to access beyond end of device [ 1196.562218][T23177] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1196.566469][T23177] MINIX-fs: unable to read superblock [ 1197.616920][T23188] netfs: Couldn't get user pages (rc=-14) [ 1198.243708][T23197] sp0: Synchronizing with TNC [ 1198.320006][T23198] random: crng reseeded on system resumption [ 1198.789263][T23210] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3317'. [ 1199.452254][T23215] netlink: 'syz.3.3318': attribute type 10 has an invalid length. [ 1199.456127][T23215] netlink: 'syz.3.3318': attribute type 10 has an invalid length. [ 1200.546314][T23232] syz.1.3322 (23232): drop_caches: 2 [ 1200.552828][T23232] syz.1.3322 (23232): drop_caches: 2 [ 1200.812184][T23236] syz.1.3323: attempt to access beyond end of device [ 1200.812184][T23236] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1201.095305][T23236] MINIX-fs: unable to read superblock [ 1201.188805][T23241] netfs: Couldn't get user pages (rc=-14) [ 1201.875047][T23245] syz.0.3325: attempt to access beyond end of device [ 1201.875047][T23245] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1201.899269][T23245] MINIX-fs: unable to read superblock [ 1202.144019][T23254] lo speed is unknown, defaulting to 1000 [ 1202.145734][T23254] lo speed is unknown, defaulting to 1000 [ 1202.147595][T23254] lo speed is unknown, defaulting to 1000 [ 1202.151698][T23254] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1202.166361][T23254] lo speed is unknown, defaulting to 1000 [ 1202.178043][T23254] lo speed is unknown, defaulting to 1000 [ 1202.183273][T23254] lo speed is unknown, defaulting to 1000 [ 1202.188016][T23254] lo speed is unknown, defaulting to 1000 [ 1202.277267][T23256] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3328'. [ 1202.637892][T23253] wlan0 speed is unknown, defaulting to 1000 [ 1202.652932][T23253] lo speed is unknown, defaulting to 1000 [ 1202.657310][T23253] lo speed is unknown, defaulting to 1000 [ 1203.387669][T23265] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3330'. [ 1203.872753][T15959] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1203.910687][T23275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'. [ 1203.923581][T23275] wireguard1: entered promiscuous mode [ 1204.022026][T23274] syzkaller1: entered promiscuous mode [ 1204.023900][T23274] syzkaller1: entered allmulticast mode [ 1204.082809][T15959] usb 7-1: Using ep0 maxpacket: 16 [ 1204.086626][T15959] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1204.088537][T15959] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1204.091220][T15959] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.095320][T15959] usb 7-1: config 0 descriptor?? [ 1204.430321][T23280] netfs: Couldn't get user pages (rc=-14) [ 1204.609202][T15959] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5013.0004/input/input23 [ 1204.914139][T23288] usb usb1: usbfs: process 23288 (syz.1.3335) did not claim interface 0 before use [ 1205.029473][T15959] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5013.0004/input/input24 [ 1205.092942][T15959] kye 0003:0458:5013.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 1205.126556][T23289] netlink: 'syz.2.3331': attribute type 12 has an invalid length. [ 1205.995316][T23303] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3338'. [ 1206.353611][T23309] rdma_rxe: rxe_newlink: failed to add bond0 [ 1207.206540][ T6006] usb 7-1: USB disconnect, device number 9 [ 1207.580460][T23322] syz.1.3342: attempt to access beyond end of device [ 1207.580460][T23322] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1207.586628][T23322] MINIX-fs: unable to read superblock [ 1208.178395][T23324] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3343'. [ 1208.395199][T23330] rdma_rxe: rxe_newlink: failed to add bond0 [ 1208.593177][T23341] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3346'. [ 1208.946292][T23348] overlayfs: missing 'lowerdir' [ 1209.060789][T23350] netlink: 'syz.1.3348': attribute type 1 has an invalid length. [ 1209.092533][T23350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3348'. [ 1209.102887][T23350] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1209.107144][T23350] bond0: (slave batadv3): Enslaving as a backup interface with an up link [ 1209.129694][T23350] bond0 (unregistering): (slave batadv3): Releasing backup interface [ 1209.136976][T23350] bond0 (unregistering): Released all slaves [ 1209.869432][T23369] ipvlan1: entered allmulticast mode [ 1209.871117][T23369] veth0_vlan: entered allmulticast mode [ 1210.734878][T23376] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3353'. [ 1211.595173][T23404] netlink: 'syz.0.3358': attribute type 14 has an invalid length. [ 1211.648213][T15119] Bluetooth: hci3: Malformed LE Event: 0x0b [ 1211.731374][T23399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3358'. [ 1211.904221][T23416] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3359'. [ 1212.463973][T23431] usb usb1: usbfs: process 23431 (syz.2.3361) did not claim interface 0 before use [ 1212.676270][T23432] blktrace: Concurrent blktraces are not allowed on sg0 [ 1212.958386][T23434] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3363'. [ 1214.894282][ T40] audit: type=1326 audit(1740768159.557:9709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.2.3370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 1214.902238][ T40] audit: type=1326 audit(1740768159.557:9710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.2.3370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 1214.913622][ T40] audit: type=1326 audit(1740768159.557:9711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.2.3370" exe="/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 1214.921534][ T40] audit: type=1326 audit(1740768159.557:9712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.2.3370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 1214.935472][ T40] audit: type=1326 audit(1740768159.557:9713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.2.3370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 1214.945684][ T40] audit: type=1326 audit(1740768159.557:9714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.2.3370" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 1214.951778][ T40] audit: type=1326 audit(1740768159.557:9715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.2.3370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 1214.961122][ T40] audit: type=1326 audit(1740768159.557:9716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.2.3370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 1214.971432][ T40] audit: type=1326 audit(1740768159.557:9717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.2.3370" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 1214.982311][ T40] audit: type=1326 audit(1740768159.557:9718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23472 comm="syz.2.3370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 1215.364571][T23489] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3372'. [ 1215.777640][T23493] usb usb1: usbfs: process 23493 (syz.1.3374) did not claim interface 0 before use [ 1216.325321][T23504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3375'. [ 1216.503340][T23504] wireguard0: entered promiscuous mode [ 1216.523941][T23502] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3377'. [ 1217.223555][T23514] syzkaller1: entered promiscuous mode [ 1217.225211][T23514] syzkaller1: entered allmulticast mode [ 1217.338970][T23511] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3379'. [ 1218.503754][T23529] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3384'. [ 1219.019410][T23538] usb usb1: usbfs: process 23538 (syz.3.3385) did not claim interface 0 before use [ 1219.403605][T23542] syz.1.3387: attempt to access beyond end of device [ 1219.403605][T23542] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1219.407375][T23542] MINIX-fs: unable to read superblock [ 1220.128039][T23553] syzkaller1: entered promiscuous mode [ 1220.129729][T23553] syzkaller1: entered allmulticast mode [ 1220.384474][T23558] sp0: Synchronizing with TNC [ 1220.466355][T23561] random: crng reseeded on system resumption [ 1221.602426][T23578] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3395'. [ 1223.288632][T23602] syz.0.3400: attempt to access beyond end of device [ 1223.288632][T23602] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1223.297840][T23602] MINIX-fs: unable to read superblock [ 1224.049822][T23608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3401'. [ 1224.063406][T23608] wireguard1: entered promiscuous mode [ 1224.531934][T23615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3402'. [ 1224.667014][T23615] wireguard2: entered promiscuous mode [ 1224.848387][T23623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3403'. [ 1224.878572][T23623] wireguard0: entered promiscuous mode [ 1225.514168][T23634] capability: warning: `syz.3.3406' uses deprecated v2 capabilities in a way that may be insecure [ 1228.335651][T23675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3414'. [ 1228.496762][T23679] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1228.501050][T23679] overlayfs: overlapping lowerdir path [ 1228.504285][T23675] wireguard1: entered promiscuous mode [ 1228.973114][T23690] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3416'. [ 1229.917132][T23704] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3420'. [ 1230.513429][T23716] syz.1.3421: attempt to access beyond end of device [ 1230.513429][T23716] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1230.513462][T23716] MINIX-fs: unable to read superblock [ 1232.045373][T23743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3425'. [ 1232.208920][T23743] wireguard2: entered promiscuous mode [ 1233.607610][T23752] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1233.610636][T23752] overlayfs: overlapping lowerdir path [ 1235.549455][T23795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3436'. [ 1235.564492][T23795] wireguard2: entered promiscuous mode [ 1236.625819][T23820] netlink: 'syz.1.3440': attribute type 1 has an invalid length. [ 1236.628126][T23820] netlink: 'syz.1.3440': attribute type 1 has an invalid length. [ 1237.116023][T23838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3442'. [ 1237.129271][T23838] wireguard3: entered promiscuous mode [ 1237.477312][T23843] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3444'. [ 1238.301338][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.404018][T23859] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3448'. [ 1239.595010][T23874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3452'. [ 1239.612206][T23874] wireguard4: entered promiscuous mode [ 1240.112908][T23887] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1240.116274][T23887] overlayfs: overlapping lowerdir path [ 1241.827632][T23900] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3457'. [ 1242.312793][T21244] Bluetooth: hci3: command 0x0405 tx timeout [ 1242.824323][T23922] 9pnet_virtio: no channels available for device syz [ 1245.007489][T23953] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3468'. [ 1245.765364][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 1245.765380][ T40] audit: type=1326 audit(1740768190.567:9729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23956 comm="syz.3.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1245.780380][ T40] audit: type=1326 audit(1740768190.567:9730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23956 comm="syz.3.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1245.788258][ T40] audit: type=1326 audit(1740768190.567:9731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23956 comm="syz.3.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1245.798982][ T40] audit: type=1326 audit(1740768190.567:9732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23956 comm="syz.3.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1245.806827][ T40] audit: type=1326 audit(1740768190.567:9733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23956 comm="syz.3.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1245.815655][ T40] audit: type=1326 audit(1740768190.567:9734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23956 comm="syz.3.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1245.821632][ T40] audit: type=1326 audit(1740768190.567:9735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23956 comm="syz.3.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1245.832305][ T40] audit: type=1326 audit(1740768190.567:9736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23956 comm="syz.3.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1245.840260][ T40] audit: type=1326 audit(1740768190.577:9737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23956 comm="syz.3.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1245.852477][ T40] audit: type=1326 audit(1740768190.577:9738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23956 comm="syz.3.3469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1246.715673][T23982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1247.733030][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1248.736145][T24006] usb usb1: usbfs: process 24006 (syz.1.3478) did not claim interface 0 before use [ 1248.867042][T24010] syz.0.3487: attempt to access beyond end of device [ 1248.867042][T24010] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1248.870779][T24010] MINIX-fs: unable to read superblock [ 1249.466384][T24016] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1249.469484][T24016] overlayfs: overlapping lowerdir path [ 1250.749895][T24037] netlink: 'syz.2.3483': attribute type 21 has an invalid length. [ 1251.379539][T24045] block nbd2: shutting down sockets [ 1253.313815][T24068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3490'. [ 1253.430698][T24068] wireguard1: entered promiscuous mode [ 1253.714952][T24077] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3491'. [ 1254.973945][T24093] syz.0.3494: attempt to access beyond end of device [ 1254.973945][T24093] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1254.987815][T24093] MINIX-fs: unable to read superblock [ 1255.070809][T24096] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1255.078762][T24096] overlayfs: overlapping lowerdir path [ 1256.010492][T24105] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3497'. [ 1256.317294][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3498'. [ 1257.074284][T24120] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3499'. [ 1257.525480][T24124] syz.0.3501: attempt to access beyond end of device [ 1257.525480][T24124] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1257.535392][T24124] MINIX-fs: unable to read superblock [ 1257.774257][T24123] x86/PAT: syz.3.3500:24123 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 1258.085639][T24135] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3502'. [ 1258.233083][T24134] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3503'. [ 1260.023482][T24159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3507'. [ 1260.928224][T24167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3510'. [ 1260.943666][T24167] wireguard5: entered promiscuous mode [ 1261.218072][T24177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3512'. [ 1261.247601][T24177] wireguard2: entered promiscuous mode [ 1261.267696][T24166] syz.2.3509: attempt to access beyond end of device [ 1261.267696][T24166] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1261.272567][T24166] MINIX-fs: unable to read superblock [ 1262.125050][T24195] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3514'. [ 1264.796743][T24211] syz.3.3516 (24211) used greatest stack depth: 20048 bytes left [ 1264.860439][T24222] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1265.014507][T24222] overlayfs: overlapping lowerdir path [ 1266.513620][T24266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3523'. [ 1266.518879][T24266] wireguard3: entered promiscuous mode [ 1267.046341][T24274] wlan0 speed is unknown, defaulting to 1000 [ 1267.050572][T24274] lo speed is unknown, defaulting to 1000 [ 1267.054289][T24274] lo speed is unknown, defaulting to 1000 [ 1268.460850][T24301] loop7: detected capacity change from 0 to 16384 [ 1268.663372][T24304] syz.0.3528: attempt to access beyond end of device [ 1268.663372][T24304] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1268.673603][T24306] syz.1.3529: attempt to access beyond end of device [ 1268.673603][T24306] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1268.678316][T24306] MINIX-fs: unable to read superblock [ 1269.291281][T24304] MINIX-fs: unable to read superblock [ 1270.797194][T24331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3534'. [ 1270.818307][T24331] wireguard3: entered promiscuous mode [ 1272.283195][T24340] syz.2.3536: attempt to access beyond end of device [ 1272.283195][T24340] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1272.287358][T24340] MINIX-fs: unable to read superblock [ 1272.305605][T24339] can0: slcan on ttyS3. [ 1272.367581][T24350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3535'. [ 1272.703814][T24335] can0 (unregistered): slcan off ttyS3. [ 1274.353259][ T1459] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1275.478008][T24404] syz.0.3545: attempt to access beyond end of device [ 1275.478008][T24404] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1275.481998][T24404] MINIX-fs: unable to read superblock [ 1275.735903][T24435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3548'. [ 1276.139954][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 1276.140017][ T40] audit: type=1800 audit(1740768220.937:9749): pid=24435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.3548" name="/newroot/912/bus" dev="tmpfs" ino=5236 res=0 errno=0 [ 1276.552403][T24446] sctp: [Deprecated]: syz.3.3549 (pid 24446) Use of int in maxseg socket option. [ 1276.552403][T24446] Use struct sctp_assoc_value instead [ 1276.560206][T24446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3549'. [ 1277.308083][T24463] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1277.310047][T24463] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1277.314147][T24463] vhci_hcd vhci_hcd.0: Device attached [ 1277.774032][T17782] vhci_hcd: vhci_device speed not set [ 1277.884265][T17782] usb 43-1: new full-speed USB device number 5 using vhci_hcd [ 1278.554347][T24467] vhci_hcd: connection reset by peer [ 1278.556226][ T1134] vhci_hcd: stop threads [ 1278.557537][ T1134] vhci_hcd: release socket [ 1278.558902][ T1134] vhci_hcd: disconnect device [ 1281.423015][T24490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3554'. [ 1281.480560][T24493] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3554'. [ 1281.718531][T24499] ebtables: wrong size: *len 120, entries_size 48, replsz 48 [ 1282.640664][T24507] wlan0 speed is unknown, defaulting to 1000 [ 1282.643421][T24507] lo speed is unknown, defaulting to 1000 [ 1282.653542][T24507] lo speed is unknown, defaulting to 1000 [ 1283.001645][T24507] ax25_connect(): syz.1.3559 uses autobind, please contact jreuter@yaina.de [ 1283.175317][T17782] vhci_hcd: vhci_device speed not set [ 1283.732857][T24526] syz.1.3560: attempt to access beyond end of device [ 1283.732857][T24526] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1283.737573][T24526] MINIX-fs: unable to read superblock [ 1283.787439][T24521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3561'. [ 1283.997483][ T40] audit: type=1800 audit(1740768228.737:9750): pid=24521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.3561" name="/newroot/887/bus" dev="tmpfs" ino=4993 res=0 errno=0 [ 1285.675040][T24559] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1285.682474][T24559] overlayfs: overlapping lowerdir path [ 1285.708714][T24556] hub 6-0:1.0: USB hub found [ 1285.710308][T24556] hub 6-0:1.0: 1 port detected [ 1287.536361][T24575] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3571'. [ 1289.610358][T24601] netlink: 'syz.3.3575': attribute type 2 has an invalid length. [ 1289.613232][T24601] netlink: 'syz.3.3575': attribute type 1 has an invalid length. [ 1289.615641][T24601] netlink: 'syz.3.3575': attribute type 1 has an invalid length. [ 1289.620024][T24601] loop7: detected capacity change from 0 to 16384 [ 1290.193267][T24603] loop7: detected capacity change from 16384 to 16383 [ 1291.785244][T24623] "syz.0.3581" (24623) uses obsolete ecb(arc4) skcipher [ 1293.332816][T24643] syz.0.3584: attempt to access beyond end of device [ 1293.332816][T24643] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1293.337901][T24643] MINIX-fs: unable to read superblock [ 1293.540326][T17782] libceph: connect (1)[c::]:6789 error -101 [ 1293.542574][T17782] libceph: mon0 (1)[c::]:6789 connect error [ 1293.659407][T24657] ebtables: wrong size: *len 120, entries_size 48, replsz 48 [ 1293.875093][T24658] syz.1.3587: attempt to access beyond end of device [ 1293.875093][T24658] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1293.878944][T24658] MINIX-fs: unable to read superblock [ 1293.916255][T24651] ceph: No mds server is up or the cluster is laggy [ 1294.834009][T24673] netlink: 'syz.3.3590': attribute type 4 has an invalid length. [ 1294.847982][T24673] netlink: 'syz.3.3590': attribute type 4 has an invalid length. [ 1295.258270][T24679] syzkaller1: entered promiscuous mode [ 1295.260053][T24679] syzkaller1: entered allmulticast mode [ 1297.574080][T24707] netlink: 'syz.3.3598': attribute type 9 has an invalid length. [ 1297.971604][T24717] netlink: 'syz.2.3600': attribute type 2 has an invalid length. [ 1297.978226][T24717] netlink: 'syz.2.3600': attribute type 1 has an invalid length. [ 1297.981099][T24717] netlink: 'syz.2.3600': attribute type 1 has an invalid length. [ 1298.027268][T24717] loop7: detected capacity change from 0 to 16384 [ 1298.255327][T24725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3601'. [ 1298.553685][T24725] wireguard6: entered promiscuous mode [ 1298.573816][T24721] loop7: detected capacity change from 16384 to 16383 [ 1298.585813][T24729] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1298.588962][T24729] overlayfs: overlapping lowerdir path [ 1298.766524][T24732] syzkaller1: entered promiscuous mode [ 1298.768205][T24732] syzkaller1: entered allmulticast mode [ 1299.653685][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.373084][T24753] netlink: 'syz.1.3606': attribute type 9 has an invalid length. [ 1301.556937][T24769] syz.0.3610: attempt to access beyond end of device [ 1301.556937][T24769] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1301.560670][T24769] MINIX-fs: unable to read superblock [ 1301.694505][T24773] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3609'. [ 1302.422525][T24783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1302.932732][T24786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1302.987557][T24786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1303.041579][T24786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1305.312636][T24818] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3619'. [ 1306.282622][T24839] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1307.445720][T24855] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3625'. [ 1309.229254][T24885] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1309.231186][T24885] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1309.236645][T24885] vhci_hcd vhci_hcd.0: Device attached [ 1309.542758][T15959] vhci_hcd: vhci_device speed not set [ 1309.602799][T15959] usb 37-1: new full-speed USB device number 6 using vhci_hcd [ 1311.309200][T24916] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1311.504202][T24904] kAFS: No cell specified [ 1312.775440][T24887] vhci_hcd: connection reset by peer [ 1312.777316][T15924] vhci_hcd: stop threads [ 1312.779368][T15924] vhci_hcd: release socket [ 1312.787262][T15924] vhci_hcd: disconnect device [ 1313.351782][T24943] wlan0 speed is unknown, defaulting to 1000 [ 1313.394517][T24943] lo speed is unknown, defaulting to 1000 [ 1313.397706][T24943] lo speed is unknown, defaulting to 1000 [ 1314.692742][T15959] vhci_hcd: vhci_device speed not set [ 1315.173022][ T40] audit: type=1400 audit(1740768259.957:9751): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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kAFS: No cell specified [ 1316.079341][T24992] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3650'. [ 1316.347256][T24994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3652'. [ 1316.373646][T24994] wireguard7: entered promiscuous mode [ 1316.916715][T25003] wlan0 speed is unknown, defaulting to 1000 [ 1316.920273][T25003] lo speed is unknown, defaulting to 1000 [ 1316.975861][T25003] lo speed is unknown, defaulting to 1000 [ 1318.692338][T25033] fuse: Unknown parameter 'grou00000000000000000000' [ 1318.906780][T25035] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3660'. [ 1319.079552][T25041] wlan0 speed is unknown, defaulting to 1000 [ 1319.082191][T25041] lo speed is unknown, defaulting to 1000 [ 1319.088730][T25041] lo speed is unknown, defaulting to 1000 [ 1320.386714][T25059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3664'. [ 1320.400130][T25059] wireguard4: entered promiscuous mode [ 1320.775655][ T40] audit: type=1800 audit(1740768265.577:9752): pid=25065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.3665" name="/newroot/905/bus" dev="tmpfs" ino=5126 res=0 errno=0 [ 1322.068135][T25094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3670'. [ 1322.632311][T25104] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3672'. [ 1322.702443][T25099] netlink: 'syz.1.3671': attribute type 11 has an invalid length. [ 1323.365966][T25108] syz.2.3673: attempt to access beyond end of device [ 1323.365966][T25108] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1323.369682][T25108] MINIX-fs: unable to read superblock [ 1324.660764][T25130] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3678'. [ 1324.675783][T25130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3678'. [ 1325.069836][T17782] libceph: connect (1)[c::]:6789 error -101 [ 1325.075129][T17782] libceph: mon0 (1)[c::]:6789 connect error [ 1325.093817][T25130] macvtap2: entered promiscuous mode [ 1325.095424][T25130] bridge0: entered promiscuous mode [ 1325.097024][T25130] macvtap2: entered allmulticast mode [ 1325.128508][T25137] bridge0: left promiscuous mode [ 1325.316272][T25131] ceph: No mds server is up or the cluster is laggy [ 1326.190078][T25152] bridge0: port 3(netdevsim0) entered blocking state [ 1326.192160][T25152] bridge0: port 3(netdevsim0) entered disabled state [ 1326.194568][T25152] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1326.198911][T25152] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1326.280983][T25152] kAFS: unable to lookup cell 'sy>7 †ŸO-z1' [ 1327.105128][T25154] cdrom: dropping to single frame dma [ 1328.156815][T25179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3686'. [ 1328.170340][T25179] wireguard5: entered promiscuous mode [ 1328.258034][T25182] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3687'. [ 1329.127263][T25194] input: syz1 as /devices/virtual/input/input27 [ 1329.255594][T25197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3689'. [ 1329.258289][T25197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3689'. [ 1329.655994][T25202] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1329.657924][T25202] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1329.660447][T25202] vhci_hcd vhci_hcd.0: Device attached [ 1329.904132][T25208] mkiss: ax0: crc mode is auto. [ 1330.292770][T15959] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 1330.390511][T25201] tmpfs: Unknown parameter '0x0000000000000fd6' [ 1330.613985][T25204] vhci_hcd: connection reset by peer [ 1330.632342][T15924] vhci_hcd: stop threads [ 1330.636511][T15924] vhci_hcd: release socket [ 1330.638094][T15924] vhci_hcd: disconnect device [ 1332.486450][T25236] wlan0 speed is unknown, defaulting to 1000 [ 1332.488646][T25236] lo speed is unknown, defaulting to 1000 [ 1332.491139][T25236] lo speed is unknown, defaulting to 1000 [ 1332.731174][T25240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3697'. [ 1332.982564][T25240] wireguard6: entered promiscuous mode [ 1333.165741][T25247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1333.964877][T25251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1334.001077][T25260] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3700'. [ 1334.024414][T25251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1334.082944][T25251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1334.549769][T25266] netlink: 'syz.0.3701': attribute type 4 has an invalid length. [ 1334.562898][T25266] netlink: 'syz.0.3701': attribute type 4 has an invalid length. [ 1334.581383][T17782] lo speed is unknown, defaulting to 1000 [ 1334.846657][ T40] audit: type=1326 audit(1740768279.647:9753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25267 comm="syz.2.3702" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x0 [ 1335.402891][T15959] vhci_hcd: vhci_device speed not set [ 1335.465911][T25275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3703'. [ 1335.495346][T25280] fuse: Unknown parameter 'grou00000000000000000000' [ 1336.254492][T25282] input: syz1 as /devices/virtual/input/input28 [ 1336.390019][T25282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3705'. [ 1336.393359][T25282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3705'. [ 1336.990904][T25293] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3708'. [ 1336.996015][T25293] overlayfs: failed to resolve './file1': -2 [ 1337.452438][T25304] syzkaller1: entered promiscuous mode [ 1337.454502][T25304] syzkaller1: entered allmulticast mode [ 1339.340160][T25330] netlink: 'syz.1.3715': attribute type 4 has an invalid length. [ 1339.350784][T25330] netlink: 'syz.1.3715': attribute type 4 has an invalid length. [ 1340.266964][T25347] fuse: Unknown parameter 'grou00000000000000000000' [ 1341.380480][T25350] syz.2.3720: attempt to access beyond end of device [ 1341.380480][T25350] nbd2: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 1341.385743][T25350] XFS (nbd2): SB validate failed with error -5. [ 1341.648284][T25364] syz.1.3722: attempt to access beyond end of device [ 1341.648284][T25364] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1341.652041][T25364] MINIX-fs: unable to read superblock [ 1343.194482][T25391] syzkaller1: entered promiscuous mode [ 1343.196693][T25391] syzkaller1: entered allmulticast mode [ 1344.355162][T25409] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3732'. [ 1345.073129][T25419] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3734'. [ 1345.078032][T25419] overlayfs: failed to resolve './file1': -2 [ 1345.811015][T25427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3735'. [ 1345.971541][T25427] wireguard7: entered promiscuous mode [ 1346.911446][T17782] libceph: connect (1)[c::]:6789 error -101 [ 1346.914081][T17782] libceph: mon0 (1)[c::]:6789 connect error [ 1347.133312][T25440] ceph: No mds server is up or the cluster is laggy [ 1347.584068][T25457] kAFS: unable to lookup cell 'sy>7 †ŸO-z1' [ 1347.748572][T25458] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3741'. [ 1347.754082][T25458] overlayfs: failed to resolve './file0': -2 [ 1348.655469][T25473] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3744'. [ 1348.660608][T25473] overlayfs: failed to resolve './file0': -2 [ 1349.617403][T17782] libceph: connect (1)[c::]:6789 error -101 [ 1349.688961][T17782] libceph: mon0 (1)[c::]:6789 connect error [ 1349.780532][T25486] can0: slcan on ttyS3. [ 1349.873564][T25479] ceph: No mds server is up or the cluster is laggy [ 1351.797723][T25532] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3750'. [ 1351.819423][T25532] overlayfs: failed to resolve './file0': -2 [ 1352.003719][T25463] can0 (unregistered): slcan off ttyS3. [ 1352.302786][ T40] audit: type=1800 audit(1740768297.087:9754): pid=25547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.3752" name="/newroot/944/bus" dev="tmpfs" ino=5331 res=0 errno=0 [ 1353.968200][T25573] netlink: 'syz.0.3756': attribute type 9 has an invalid length. [ 1355.013940][T25582] input: syz1 as /devices/virtual/input/input30 [ 1355.022242][T25588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3761'. [ 1355.049202][T25582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3758'. [ 1355.052008][T25582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3758'. [ 1355.958818][T25596] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3762'. [ 1355.962091][T25596] overlayfs: failed to resolve './file0': -2 [ 1356.426002][T25609] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3763'. [ 1356.449809][T25609] overlayfs: failed to resolve './file0': -2 [ 1356.780381][T25613] wlan0 speed is unknown, defaulting to 1000 [ 1356.782564][T25613] lo speed is unknown, defaulting to 1000 [ 1356.787626][T25613] lo speed is unknown, defaulting to 1000 [ 1357.050823][T25619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3768'. [ 1357.054489][T25619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3768'. [ 1358.527259][T25634] wlan0 speed is unknown, defaulting to 1000 [ 1358.529462][T25634] lo speed is unknown, defaulting to 1000 [ 1358.531623][T25634] lo speed is unknown, defaulting to 1000 [ 1358.762296][T24309] kernel write not supported for file bpf-map (pid: 24309 comm: kworker/2:1) [ 1359.047603][T25649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3774'. [ 1359.066845][T25649] wireguard8: entered promiscuous mode [ 1360.061301][T25659] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3777'. [ 1360.065431][T25659] overlayfs: failed to resolve './file0': -2 [ 1360.144352][T25666] syz_tun: entered allmulticast mode [ 1360.146487][T25666] syz_tun: left allmulticast mode [ 1360.250669][T25669] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1360.252990][T25669] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1360.258083][T25669] vhci_hcd vhci_hcd.0: Device attached [ 1360.432783][T20951] vhci_hcd: vhci_device speed not set [ 1360.662732][T20951] usb 37-1: new full-speed USB device number 7 using vhci_hcd [ 1360.674953][T17782] libceph: connect (1)[c::]:6789 error -101 [ 1360.676879][T17782] libceph: mon0 (1)[c::]:6789 connect error [ 1360.739507][T25682] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3781'. [ 1360.742185][T25682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3781'. [ 1361.103812][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.186496][T25672] ceph: No mds server is up or the cluster is laggy [ 1361.199276][T25682] can0: slcan on ttyS3. [ 1361.202099][T17782] libceph: connect (1)[c::]:6789 error -101 [ 1361.204791][T17782] libceph: mon0 (1)[c::]:6789 connect error [ 1361.593249][T25670] vhci_hcd: connection reset by peer [ 1361.596254][ T1134] vhci_hcd: stop threads [ 1361.597985][ T1134] vhci_hcd: release socket [ 1361.599683][ T1134] vhci_hcd: disconnect device [ 1361.603469][T25675] can0 (unregistered): slcan off ttyS3. [ 1361.779611][T25714] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.3785'. [ 1361.783558][T25714] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.3785'. [ 1361.900987][T25715] bridge_slave_1: left allmulticast mode [ 1361.902936][T25715] bridge_slave_1: left promiscuous mode [ 1361.907114][T25715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.202056][T25721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3786'. [ 1362.248305][T25721] wireguard8: entered promiscuous mode [ 1363.087095][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 1363.089180][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 1363.238068][T25745] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3789'. [ 1363.243368][T25745] overlayfs: failed to resolve './file0': -2 [ 1363.414112][T25728] ceph: No mds server is up or the cluster is laggy [ 1363.421772][T17782] libceph: connect (1)[c::]:6789 error -101 [ 1363.428515][T17782] libceph: mon0 (1)[c::]:6789 connect error [ 1364.669254][T15119] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1365.051382][ T1459] libceph: connect (1)[c::]:6789 error -101 [ 1365.056873][ T1459] libceph: mon0 (1)[c::]:6789 connect error [ 1365.322862][ T1459] libceph: connect (1)[c::]:6789 error -101 [ 1365.324731][ T1459] libceph: mon0 (1)[c::]:6789 connect error [ 1365.490512][T25765] ceph: No mds server is up or the cluster is laggy [ 1365.836753][T20951] vhci_hcd: vhci_device speed not set [ 1365.922822][T25788] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3798'. [ 1365.933089][T25788] overlayfs: failed to resolve './file0': -2 [ 1367.305974][T25805] IPVS: Error connecting to the multicast addr [ 1367.944220][T25816] /dev/nullb0: Can't open blockdev [ 1368.650188][T25831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3808'. [ 1368.783669][T25831] wireguard9: entered promiscuous mode [ 1368.977530][T25835] syzkaller1: entered promiscuous mode [ 1368.979764][T25835] syzkaller1: entered allmulticast mode [ 1371.679818][T25870] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1371.682973][T25870] overlayfs: overlapping lowerdir path [ 1372.385973][T25876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3816'. [ 1372.403512][T25876] wireguard3: entered promiscuous mode [ 1373.702419][T25889] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3819'. [ 1373.707110][T25889] overlayfs: failed to resolve './file1': -2 [ 1374.143499][T25900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3822'. [ 1374.185533][T25900] syz_tun: left promiscuous mode [ 1374.189006][T25900] veth0_to_team: left promiscuous mode [ 1374.192378][T25900] ipvlan1: left allmulticast mode [ 1374.194006][T25900] veth0_vlan: left allmulticast mode [ 1374.196795][T25900] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 1374.199283][T25900] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 1374.203240][T25900] wireguard0: left promiscuous mode [ 1374.213000][T25900] wireguard1: left promiscuous mode [ 1374.224173][T25900] wireguard2: left promiscuous mode [ 1374.227349][T25900] wireguard3: left promiscuous mode [ 1374.241939][T25900] wireguard4: left promiscuous mode [ 1374.246777][T25900] wireguard5: left promiscuous mode [ 1374.263906][T25900] wireguard6: left promiscuous mode [ 1374.273178][T25900] wireguard7: left promiscuous mode [ 1374.276295][T25900] wireguard8: left promiscuous mode [ 1374.355067][T25903] vlan0: entered promiscuous mode [ 1374.357579][T25900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3822'. [ 1375.386008][T25917] netlink: 'syz.2.3824': attribute type 9 has an invalid length. [ 1375.612462][T25919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3825'. [ 1375.617548][T25919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1375.678647][T25919] netlink: 'syz.3.3825': attribute type 21 has an invalid length. [ 1375.681168][T25919] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3825'. [ 1375.686949][T25919] netlink: 'syz.3.3825': attribute type 5 has an invalid length. [ 1375.689335][T25919] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3825'. [ 1376.476179][T25933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3828'. [ 1376.777806][T25933] wireguard4: entered promiscuous mode [ 1377.794112][T25940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3829'. [ 1377.973500][T25940] wireguard10: entered promiscuous mode [ 1378.069923][T25953] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3831'. [ 1378.074869][T25953] overlayfs: failed to resolve './file1': -2 [ 1379.220223][T25959] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3833'. [ 1379.225292][T25959] overlayfs: failed to resolve './file1': -2 [ 1379.307304][T25974] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3836'. [ 1379.865182][T25979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3837'. [ 1380.219166][T25979] wireguard4: entered promiscuous mode [ 1380.446557][T25988] syzkaller1: entered promiscuous mode [ 1380.448674][T25988] syzkaller1: entered allmulticast mode [ 1381.079859][T25989] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3839'. [ 1381.148646][T25984] wireguard9: entered promiscuous mode [ 1382.045804][T25999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3842'. [ 1382.060135][T25999] wireguard5: entered promiscuous mode [ 1382.635728][T26015] syz.2.3845: attempt to access beyond end of device [ 1382.635728][T26015] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1382.639254][T26015] MINIX-fs: unable to read superblock [ 1382.890696][T26010] xt_hashlimit: invalid rate [ 1383.098341][T26022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3846'. [ 1383.102753][T26022] syz_tun: left promiscuous mode [ 1383.105896][T26022] vlan0: left promiscuous mode [ 1383.107818][T26022] ipvlan1: left allmulticast mode [ 1383.109331][T26022] veth0_vlan: left allmulticast mode [ 1383.112475][T26022] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 1383.114869][T26022] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 1383.119389][T26022] geneve2: left promiscuous mode [ 1383.133481][T26022] wireguard0: left promiscuous mode [ 1383.137167][T26022] wireguard1: left promiscuous mode [ 1383.139667][T26022] wireguard2: left promiscuous mode [ 1383.142177][T26022] wireguard3: left promiscuous mode [ 1383.150318][T26022] wireguard4: left promiscuous mode [ 1383.152290][T20951] lo speed is unknown, defaulting to 1000 [ 1383.710878][T26022] vlan0: entered promiscuous mode [ 1383.713271][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3846'. [ 1384.790801][T26049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3851'. [ 1384.802040][T26049] x_tables: duplicate underflow at hook 2 [ 1385.262461][T26061] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3853'. [ 1386.352562][T26077] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1386.355940][T26077] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1386.361574][T26077] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1386.364594][T26077] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1386.368357][T26077] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1386.370789][T26077] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1386.981934][T26085] netlink: 'syz.1.3859': attribute type 15 has an invalid length. [ 1386.985300][T26085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3859'. [ 1387.010675][T26085] 9pnet: Could not find request transport: rfma [ 1387.015425][T26085] IPVS: ovf: SCTP 127.0.0.1:0 - no destination available [ 1387.262279][T26100] ipvlan1: entered allmulticast mode [ 1387.264056][T26100] veth0_vlan: entered allmulticast mode [ 1388.255382][T26114] IPVS: Error connecting to the multicast addr [ 1389.786943][T26129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3867'. [ 1389.796581][T26129] wireguard10: entered promiscuous mode [ 1389.806093][T26126] wireguard11: entered promiscuous mode [ 1389.846443][T26142] syz.0.3869: attempt to access beyond end of device [ 1389.846443][T26142] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1389.850711][T26142] MINIX-fs: unable to read superblock [ 1390.633831][T17782] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1390.802767][T17782] usb 6-1: Using ep0 maxpacket: 8 [ 1390.806019][T17782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1390.809179][T17782] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1390.811859][T17782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.820193][T17782] usb 6-1: config 0 descriptor?? [ 1391.033930][T17782] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1391.544037][ T1459] usb 6-1: USB disconnect, device number 8 [ 1391.570227][T26145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3870'. [ 1391.574252][T26145] bond_slave_1: entered promiscuous mode [ 1391.577275][T26145] netlink: 'syz.1.3870': attribute type 2 has an invalid length. [ 1392.944014][T26180] syz.1.3877: attempt to access beyond end of device [ 1392.944014][T26180] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1392.947781][T26180] MINIX-fs: unable to read superblock [ 1393.566022][T26188] syzkaller1: entered promiscuous mode [ 1393.567748][T26188] syzkaller1: entered allmulticast mode [ 1393.571721][T26176] kAFS: No cell specified [ 1394.022884][T26186] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1394.106580][T26190] xt_hashlimit: invalid rate [ 1394.240121][T26201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3881'. [ 1394.243369][T26201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3881'. [ 1394.253254][T26201] bridge0: port 3(vlan2) entered blocking state [ 1394.255365][T26201] bridge0: port 3(vlan2) entered disabled state [ 1394.257612][T26201] vlan2: entered allmulticast mode [ 1394.656988][T26201] vlan2: left allmulticast mode [ 1394.856822][T26186] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1394.859980][T26186] usb 7-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1394.897595][T26186] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1394.913710][T26186] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1394.931862][T26186] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.934353][T26186] usb 7-1: Product: syz [ 1394.935644][T26186] usb 7-1: Manufacturer: syz [ 1394.937043][T26186] usb 7-1: SerialNumber: syz [ 1394.955781][T26191] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1394.996128][T26210] ISOFS: Unable to identify CD-ROM format. [ 1395.527681][T26186] usb 7-1: USB disconnect, device number 10 [ 1396.718541][T26226] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3885'. [ 1397.760015][T26240] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3890'. [ 1397.790637][T26242] capability: warning: `syz.1.3891' uses 32-bit capabilities (legacy support in use) [ 1397.910104][T26243] program syz.1.3891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1398.315361][T26248] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3896'. [ 1398.431617][T26256] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3893'. [ 1399.339271][T26263] input: syz1 as /devices/virtual/input/input31 [ 1399.415694][T26264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3894'. [ 1399.418590][T26264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'. [ 1400.573709][T17782] libceph: connect (1)[c::]:6789 error -101 [ 1400.575564][T17782] libceph: mon0 (1)[c::]:6789 connect error [ 1400.602083][T26280] ceph: No mds server is up or the cluster is laggy [ 1401.161209][T17782] libceph: connect (1)[c::]:6789 error -101 [ 1401.164941][T17782] libceph: mon0 (1)[c::]:6789 connect error [ 1401.168481][T17782] libceph: connect (1)[c::]:6789 error -101 [ 1401.171593][T17782] libceph: mon0 (1)[c::]:6789 connect error [ 1401.221396][T26295] ceph: No mds server is up or the cluster is laggy [ 1401.476187][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 1401.543534][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 1401.673537][T26291] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3899'. [ 1401.785731][T26302] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3902'. [ 1403.713052][T26326] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3906'. [ 1404.800293][T26339] kAFS: unable to lookup cell 'sy>7 †ŸO-z1' [ 1404.940373][T26340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1405.755392][T26356] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3914'. [ 1406.434336][T26357] could not allocate digest TFM handle crct10dif-arm64-ce [ 1407.704862][T26377] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3919'. [ 1408.422928][T26384] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3921'. [ 1409.337993][T26398] random: crng reseeded on system resumption [ 1409.372189][T26398] wlan0 speed is unknown, defaulting to 1000 [ 1409.372580][T26398] lo speed is unknown, defaulting to 1000 [ 1409.373358][T26398] lo speed is unknown, defaulting to 1000 [ 1410.916085][T26415] input: syz1 as /devices/virtual/input/input32 [ 1410.980639][T26416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3927'. [ 1410.983324][T26416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3927'. [ 1411.176461][T26419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1411.783134][T26420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1411.790367][T26420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1411.847325][T26420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1413.008495][T26436] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3932'. [ 1413.999880][T26455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3936'. [ 1414.002632][T26455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3936'. [ 1414.015760][T26454] input: syz1 as /devices/virtual/input/input33 [ 1414.050490][T26454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3937'. [ 1414.053600][T26454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3937'. [ 1414.549176][T26445] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3935'. [ 1415.519910][T26477] input: syz1 as /devices/virtual/input/input34 [ 1415.766869][T26478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3940'. [ 1415.769636][T26478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3940'. [ 1416.425135][T26487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1417.178805][T26488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1417.184761][T26488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1417.240522][T26488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1417.255178][T26186] libceph: connect (1)[c::]:6789 error -101 [ 1417.257691][T26186] libceph: mon0 (1)[c::]:6789 connect error [ 1417.273320][T26497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3944'. [ 1417.321227][T26485] ceph: No mds server is up or the cluster is laggy [ 1417.455422][T26497] wireguard11: entered promiscuous mode [ 1417.493840][T26500] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3945'. [ 1417.851594][T26506] wlan0 speed is unknown, defaulting to 1000 [ 1417.857010][T26506] lo speed is unknown, defaulting to 1000 [ 1417.860718][T26506] lo speed is unknown, defaulting to 1000 [ 1418.810239][T26517] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3948'. [ 1420.182496][T26530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1421.829450][T26557] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3956'. [ 1421.832057][T26557] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3956'. [ 1422.534905][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.366001][ T40] audit: type=1400 audit(1740768368.167:9755): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 8 bytes leftover after parsing attributes in process `syz.1.3964'. [ 1424.056635][T26591] wireguard12: entered promiscuous mode [ 1424.204679][ C1] vkms_vblank_simulate: vblank timer overrun [ 1424.282358][T26597] wlan0 speed is unknown, defaulting to 1000 [ 1424.289239][T26597] lo speed is unknown, defaulting to 1000 [ 1424.289665][T26597] lo speed is unknown, defaulting to 1000 [ 1424.420093][T26597] input: syz0 as /devices/virtual/input/input35 [ 1424.829474][T26608] random: crng reseeded on system resumption [ 1424.892353][T26608] wlan0 speed is unknown, defaulting to 1000 [ 1424.895683][T26608] lo speed is unknown, defaulting to 1000 [ 1424.900770][T26608] lo speed is unknown, defaulting to 1000 [ 1424.989005][T26609] overlayfs: failed to resolve './file0': -2 [ 1425.328100][T26607] netfs: Couldn't get user pages (rc=-14) [ 1425.776683][T26615] bridge0: port 2(syz_tun) entered blocking state [ 1425.780543][T26615] bridge0: port 2(syz_tun) entered disabled state [ 1425.793827][T26615] syz_tun: entered allmulticast mode [ 1426.009095][T26615] syz_tun: entered promiscuous mode [ 1426.186936][T26614] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3968'. [ 1426.600594][T26620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3969'. [ 1426.605436][T26620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3969'. [ 1426.614044][T26620] bridge0: port 3(vlan0) entered blocking state [ 1426.615949][T26620] bridge0: port 3(vlan0) entered disabled state [ 1426.618083][T26620] vlan0: entered allmulticast mode [ 1426.621256][T26620] vlan0: left allmulticast mode [ 1428.629277][T26646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3975'. [ 1428.641388][T26646] wireguard13: entered promiscuous mode [ 1429.569431][T26661] siw: device registration error -23 [ 1429.598209][T26661] wlan0 speed is unknown, defaulting to 1000 [ 1429.598816][T26661] lo speed is unknown, defaulting to 1000 [ 1429.599400][T26661] lo speed is unknown, defaulting to 1000 [ 1429.760123][T26668] x_tables: (null)_tables: SNAT.2 target: invalid size 48 (kernel) != (user) 56 [ 1430.365126][T20951] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1430.532871][T20951] usb 5-1: Using ep0 maxpacket: 32 [ 1430.536465][T20951] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1430.539865][T20951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.544774][T20951] usb 5-1: config 0 descriptor?? [ 1432.042025][T26682] Set syz1 is full, maxelem 65536 reached [ 1432.639659][T20951] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1432.649836][T20951] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1432.652463][T20951] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1433.081809][T26708] netlink: 'syz.3.3988': attribute type 1 has an invalid length. [ 1433.084848][T26708] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3988'. [ 1433.809118][T26718] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 1433.811799][T26718] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 1433.815175][T26718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3989'. [ 1433.818021][T26718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3989'. [ 1435.140531][T26733] netlink: 'syz.3.3994': attribute type 1 has an invalid length. [ 1435.186461][T26733] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1435.454185][T26733] bond6: (slave gretap1): making interface the new active one [ 1435.458320][T26733] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1435.575449][T26726] Set syz1 is full, maxelem 65536 reached [ 1437.234255][T26766] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1437.237559][T26766] overlayfs: overlapping lowerdir path [ 1437.780558][T26772] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3998'. [ 1438.225102][T26778] wlan0 speed is unknown, defaulting to 1000 [ 1438.229346][T26778] lo speed is unknown, defaulting to 1000 [ 1438.233485][T26778] lo speed is unknown, defaulting to 1000 [ 1440.124558][T26811] input: syz1 as /devices/virtual/input/input36 [ 1440.308735][T26812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4006'. [ 1440.311383][T26812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4006'. [ 1440.533725][T26817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4008'. [ 1440.536223][T26817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4008'. [ 1441.835130][T26855] syzkaller1: entered promiscuous mode [ 1441.836944][T26855] syzkaller1: entered allmulticast mode [ 1441.932168][T26856] siw: device registration error -23 [ 1442.199481][T26866] bridge0: port 3(syz_tun) entered blocking state [ 1442.201653][T26866] bridge0: port 3(syz_tun) entered disabled state [ 1442.204097][T26866] syz_tun: entered allmulticast mode [ 1442.232761][T26866] syz_tun: entered promiscuous mode [ 1442.289223][T26866] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4016'. [ 1442.292547][T26867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1444.983850][T26887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4022'. [ 1445.218106][T26896] wlan0 speed is unknown, defaulting to 1000 [ 1445.221288][T26896] lo speed is unknown, defaulting to 1000 [ 1445.224109][T26896] lo speed is unknown, defaulting to 1000 [ 1445.230074][T26898] syzkaller1: entered promiscuous mode [ 1445.231750][T26898] syzkaller1: entered allmulticast mode [ 1445.278184][T26894] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4023'. [ 1445.604436][T26907] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1445.607479][T26907] overlayfs: overlapping lowerdir path [ 1447.596030][T26925] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4028'. [ 1448.526330][T26947] syzkaller1: entered promiscuous mode [ 1448.528649][T26947] syzkaller1: entered allmulticast mode [ 1449.020858][T26958] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1449.024615][T26958] overlayfs: overlapping lowerdir path [ 1449.588835][T26965] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4038'. [ 1449.951670][T26968] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4040'. [ 1449.955396][T26968] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4040'. [ 1450.311796][T26978] netlink: 'syz.3.4040': attribute type 1 has an invalid length. [ 1450.314219][T26978] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4040'. [ 1451.118472][T26992] syzkaller1: entered promiscuous mode [ 1451.120738][T26992] syzkaller1: entered allmulticast mode [ 1451.159984][T26984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4043'. [ 1451.168677][T26984] wireguard12: entered promiscuous mode [ 1452.522107][T27016] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1452.525296][T27016] overlayfs: overlapping lowerdir path [ 1452.961910][T27033] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1453.059583][T27031] usb usb1: usbfs: process 27031 (syz.2.4051) did not claim interface 0 before use [ 1453.081620][T27023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4049'. [ 1453.189401][T27023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4049'. [ 1453.208503][T15959] libceph: connect (1)[c::]:6789 error -101 [ 1453.210416][T15959] libceph: mon0 (1)[c::]:6789 connect error [ 1453.306770][T27040] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4052'. [ 1453.462963][T15959] libceph: connect (1)[c::]:6789 error -101 [ 1453.464811][T15959] libceph: mon0 (1)[c::]:6789 connect error [ 1453.542759][T27034] ceph: No mds server is up or the cluster is laggy [ 1453.662866][T27045] syzkaller1: entered promiscuous mode [ 1453.665082][T27045] syzkaller1: entered allmulticast mode [ 1454.610724][T27052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4056'. [ 1454.616712][T27052] wireguard5: entered promiscuous mode [ 1454.885490][T27061] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4058'. [ 1454.890080][T27061] 0ªX¹¦À: renamed from caif0 [ 1454.904507][T27061] 0ªX¹¦À: entered allmulticast mode [ 1454.906071][T27061] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1455.007557][T27066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4059'. [ 1455.566780][T27069] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1455.569771][T27069] overlayfs: overlapping lowerdir path [ 1456.258099][T27085] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1456.274958][T27085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4062'. [ 1456.278642][T27085] bridge_slave_1: left allmulticast mode [ 1456.282606][T27085] bridge_slave_1: left promiscuous mode [ 1456.285285][T27085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.295966][T27085] bridge_slave_0: left allmulticast mode [ 1456.297879][T27085] bridge_slave_0: left promiscuous mode [ 1456.303194][T27085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.510098][T27085] tmpfs: Unknown parameter '000000Ín4G°n00ùQ‚·?ƒþ' [ 1457.248230][T27098] syzkaller1: entered promiscuous mode [ 1457.248279][T27098] syzkaller1: entered allmulticast mode [ 1457.674834][T27108] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1457.674934][T27108] overlayfs: overlapping lowerdir path [ 1459.677092][T27131] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4067'. [ 1459.945008][T27138] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1459.948071][T27138] overlayfs: overlapping lowerdir path [ 1460.575996][T27150] random: crng reseeded on system resumption [ 1460.643721][T27150] lo speed is unknown, defaulting to 1000 [ 1460.645810][T27150] lo speed is unknown, defaulting to 1000 [ 1461.019509][T27143] netfs: Couldn't get user pages (rc=-14) [ 1462.308359][T27154] netlink: 'syz.1.4075': attribute type 1 has an invalid length. [ 1462.331130][T27157] input: syz0 as /devices/virtual/input/input37 [ 1462.366143][T27154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1462.371107][T27173] bond0: (slave gretap2): making interface the new active one [ 1462.375794][T27173] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 1462.468589][T27176] syzkaller1: entered promiscuous mode [ 1462.470346][T27176] syzkaller1: entered allmulticast mode [ 1463.142407][T27188] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1463.145934][T27188] overlayfs: overlapping lowerdir path [ 1463.215050][T27180] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4082'. [ 1463.271608][T27192] lo speed is unknown, defaulting to 1000 [ 1463.275031][T27192] lo speed is unknown, defaulting to 1000 [ 1463.565380][T27198] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1463.567307][T27198] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1463.569648][T27198] vhci_hcd vhci_hcd.0: Device attached [ 1463.844643][T27205] mkiss: ax0: crc mode is auto. [ 1464.110733][T15959] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 1464.210341][T27209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4087'. [ 1464.218226][T27209] wireguard13: entered promiscuous mode [ 1464.227217][T27208] 9pnet_fd: Insufficient options for proto=fd [ 1464.484653][T27199] vhci_hcd: connection reset by peer [ 1464.487846][T22063] vhci_hcd: stop threads [ 1464.489079][T22063] vhci_hcd: release socket [ 1464.490423][T22063] vhci_hcd: disconnect device [ 1465.063809][T27221] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4089'. [ 1467.814881][T27262] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1467.817998][T27262] overlayfs: overlapping lowerdir path [ 1468.056979][T27253] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4094'. [ 1468.334002][T27273] ptrace attach of "/syz-executor exec"[5941] was attempted by "/syz-executor exec"[27273] [ 1468.379959][T27272] lo speed is unknown, defaulting to 1000 [ 1468.383141][T27272] lo speed is unknown, defaulting to 1000 [ 1469.272804][T15959] vhci_hcd: vhci_device speed not set [ 1469.364839][T27278] netlink: 'syz.1.4099': attribute type 1 has an invalid length. [ 1469.368092][T27278] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4099'. [ 1469.371720][T27278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4099'. [ 1469.386148][T27286] syzkaller1: entered promiscuous mode [ 1469.387812][T27286] syzkaller1: entered allmulticast mode [ 1469.677247][T27294] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.4103'. [ 1469.681029][T27294] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.4103'. [ 1470.325633][T27306] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1470.328842][T27306] overlayfs: failed to set xattr on upper [ 1470.331279][T27306] overlayfs: ...falling back to redirect_dir=nofollow. [ 1470.334376][T27306] overlayfs: ...falling back to index=off. [ 1470.336892][T27306] overlayfs: ...falling back to uuid=null. [ 1471.287542][T27317] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1471.458974][T27318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4107'. [ 1471.631462][T27321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4108'. [ 1471.650516][T27321] wireguard6: entered promiscuous mode [ 1471.955539][T27327] Cannot find add_set index 3 as target [ 1472.615164][T27334] overlayfs: missing 'lowerdir' [ 1472.693184][T27342] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4110'. [ 1473.575828][T27351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4113'. [ 1473.578931][T27351] netlink: 177 bytes leftover after parsing attributes in process `syz.3.4113'. [ 1473.859722][T27356] afs: Unknown parameter 'd' [ 1473.971289][T27335] Set syz1 is full, maxelem 65536 reached [ 1474.660641][T15959] libceph: connect (1)[c::]:6789 error -101 [ 1474.663879][T15959] libceph: mon0 (1)[c::]:6789 connect error [ 1474.925081][T15959] libceph: connect (1)[c::]:6789 error -101 [ 1474.927412][T15959] libceph: mon0 (1)[c::]:6789 connect error [ 1475.484220][T27366] ceph: No mds server is up or the cluster is laggy [ 1475.555996][T15959] libceph: connect (1)[c::]:6789 error -101 [ 1475.557826][T15959] libceph: mon0 (1)[c::]:6789 connect error [ 1476.344854][T27396] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4120'. [ 1476.762695][T27395] netlink: 'syz.3.4123': attribute type 1 has an invalid length. [ 1476.764969][T27395] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4123'. [ 1476.767534][T27395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4123'. [ 1476.772799][T27397] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4122'. [ 1476.852587][T27400] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4124'. [ 1477.170403][T27405] can0: slcan on ttyS3. [ 1477.924510][T27420] 9pnet_fd: Insufficient options for proto=fd [ 1478.133472][T27399] can0 (unregistered): slcan off ttyS3. [ 1479.226412][T27454] netlink: 'syz.3.4131': attribute type 4 has an invalid length. [ 1480.256365][T27466] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4133'. [ 1481.500094][T27483] netlink: 'syz.1.4138': attribute type 16 has an invalid length. [ 1481.502427][T27483] netlink: 'syz.1.4138': attribute type 3 has an invalid length. [ 1481.505050][T27483] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4138'. [ 1481.988968][T27493] afs: Unknown parameter 'd' [ 1483.039596][ T1459] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1483.319764][T27518] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 1484.371171][T27532] bridge0: port 4(hsr_slave_1) entered blocking state [ 1484.373293][T27532] bridge0: port 4(hsr_slave_1) entered disabled state [ 1484.375349][T27532] hsr_slave_1: entered allmulticast mode [ 1484.377901][T27532] hsr_slave_1: left allmulticast mode [ 1492.612847][ T5357] udevd[5357]: worker [26147] /devices/platform/dummy_hcd.0/usb5/5-1 is taking a long time [ 1494.461313][T20951] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1494.467865][T20951] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1494.476418][T20951] usb 5-1: USB disconnect, device number 4 [ 1494.510352][T27597] afs: Unknown parameter 'd' [ 1495.281914][T27607] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4152'. [ 1495.584016][ T1459] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1496.372487][T27627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4157'. [ 1496.382844][T27627] wireguard7: entered promiscuous mode [ 1497.933773][T27655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4161'. [ 1497.937154][T27655] IPVS: Error joining to the multicast group [ 1502.633237][ T40] audit: type=1326 audit(1740768447.437:9756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27682 comm="syz.1.4167" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 1502.649194][ T40] audit: type=1326 audit(1740768447.437:9757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27682 comm="syz.1.4167" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 1502.658188][ T40] audit: type=1326 audit(1740768447.437:9758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27682 comm="syz.1.4167" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 1502.664590][ T40] audit: type=1326 audit(1740768447.437:9759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27682 comm="syz.1.4167" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 1502.670816][ T40] audit: type=1326 audit(1740768447.437:9760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27682 comm="syz.1.4167" exe="/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 1502.677519][ T40] audit: type=1326 audit(1740768447.437:9761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27682 comm="syz.1.4167" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 1502.685360][ T40] audit: type=1326 audit(1740768447.437:9762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27682 comm="syz.1.4167" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 1502.691596][ T40] audit: type=1326 audit(1740768447.437:9763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27682 comm="syz.1.4167" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 1502.701828][ T40] audit: type=1326 audit(1740768447.437:9764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27682 comm="syz.1.4167" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 1502.708457][ T40] audit: type=1326 audit(1740768447.437:9765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27682 comm="syz.1.4167" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 1503.292744][ T6004] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1503.732907][ T6004] usb 6-1: Using ep0 maxpacket: 16 [ 1503.946736][ T6004] usb 6-1: config 0 has an invalid interface number: 224 but max is 0 [ 1503.949182][ T6004] usb 6-1: config 0 has no interface number 0 [ 1503.950962][ T6004] usb 6-1: config 0 interface 224 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1503.972596][ T6004] usb 6-1: New USB device found, idVendor=0402, idProduct=5632, bcdDevice=ea.ac [ 1503.975514][ T6004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.977903][ T6004] usb 6-1: Product: syz [ 1503.980443][ T6004] usb 6-1: Manufacturer: syz [ 1503.982042][ T6004] usb 6-1: SerialNumber: syz [ 1504.000309][ T6004] usb 6-1: config 0 descriptor?? [ 1504.007581][T27684] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1504.012358][ T6004] cdc_subset 6-1:0.224: probe with driver cdc_subset failed with error -22 [ 1504.590865][T27718] random: crng reseeded on system resumption [ 1504.641263][T27718] lo speed is unknown, defaulting to 1000 [ 1504.646548][T27718] lo speed is unknown, defaulting to 1000 [ 1504.923929][T27716] netfs: Couldn't get user pages (rc=-14) [ 1504.964685][T27717] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4171'. [ 1505.785593][T24309] usb 6-1: USB disconnect, device number 9 [ 1505.813106][ T1459] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1507.221484][T27752] bridge0: port 4(hsr_slave_1) entered blocking state [ 1507.224721][T27752] bridge0: port 4(hsr_slave_1) entered disabled state [ 1507.786521][T27773] befs: (nullb0): No write support. Marking filesystem read-only [ 1507.791041][T27773] befs: (nullb0): invalid magic header [ 1507.809488][T27773] netlink: 'syz.2.4180': attribute type 1 has an invalid length. [ 1507.855720][T27773] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1508.217150][T27779] syz.1.4178: attempt to access beyond end of device [ 1508.217150][T27779] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1508.224407][T27779] XFS (nbd1): SB validate failed with error -5. [ 1508.700332][T27786] gtp1: entered promiscuous mode [ 1508.702240][T27786] gtp1: entered allmulticast mode [ 1509.205309][T27794] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4179'. [ 1509.819561][T27803] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4184'. [ 1516.695986][T27827] bridge0: port 1(hsr_slave_1) entered blocking state [ 1516.698059][T27827] bridge0: port 1(hsr_slave_1) entered disabled state [ 1516.702628][T27827] hsr_slave_1: entered allmulticast mode [ 1516.723356][T27827] hsr_slave_1: left allmulticast mode [ 1516.784301][T27826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4187'. [ 1516.805280][T27826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4187'. [ 1518.247647][T27849] lo speed is unknown, defaulting to 1000 [ 1518.252938][T27849] lo speed is unknown, defaulting to 1000 [ 1519.433411][T27874] netlink: 'syz.0.4196': attribute type 10 has an invalid length. [ 1519.436283][T27874] syz_tun: entered promiscuous mode [ 1519.447552][T27874] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1519.587018][T27879] ipvlan1: left allmulticast mode [ 1519.589910][T27879] veth0_vlan: left allmulticast mode [ 1520.302328][T27885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4200'. [ 1520.306591][T27885] input: syz1 as /devices/virtual/input/input38 [ 1520.951276][T27896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4202'. [ 1520.955051][T27896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4202'. [ 1520.957673][T27896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4202'. [ 1520.960319][T27896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4202'. [ 1520.963246][T27896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4202'. [ 1520.965913][T27896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4202'. [ 1520.968538][T27896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4202'. [ 1522.390277][T27909] __nla_validate_parse: 42 callbacks suppressed [ 1522.390289][T27909] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4205'. [ 1522.996707][T27923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4206'. [ 1523.003453][T27923] wireguard14: entered promiscuous mode [ 1523.385371][T27933] syzkaller1: entered promiscuous mode [ 1523.387100][T27933] syzkaller1: entered allmulticast mode [ 1523.601363][T27937] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4210'. [ 1523.857447][T27945] input: syz1 as /devices/virtual/input/input39 [ 1523.885451][T27945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4209'. [ 1523.888497][T27945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4209'. [ 1525.399584][T27969] syzkaller1: entered promiscuous mode [ 1525.401197][T27969] syzkaller1: entered allmulticast mode [ 1525.627691][T27973] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4218'. [ 1526.030011][T27976] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4220'. [ 1526.699494][T27993] input: syz1 as /devices/virtual/input/input40 [ 1526.895107][T27993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4224'. [ 1526.897828][T27993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4224'. [ 1526.939582][T27998] syzkaller1: entered promiscuous mode [ 1526.941776][T27998] syzkaller1: entered allmulticast mode [ 1527.678344][T28010] netlink: 'syz.1.4231': attribute type 10 has an invalid length. [ 1527.681662][T28010] syz_tun: left allmulticast mode [ 1527.689656][T28010] bridge0: port 3(syz_tun) entered disabled state [ 1528.223421][T28017] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4233'. [ 1528.624772][T28038] syzkaller1: entered promiscuous mode [ 1528.626435][T28038] syzkaller1: entered allmulticast mode [ 1528.933751][T28039] overlayfs: overlapping lowerdir path [ 1529.565549][T28063] syzkaller1: entered promiscuous mode [ 1529.567655][T28063] syzkaller1: entered allmulticast mode [ 1529.743266][T28070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4246'. [ 1529.750384][T28070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4246'. [ 1529.753799][T28070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4246'. [ 1529.756590][T28070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4246'. [ 1529.759819][T28070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4246'. [ 1529.763284][T28070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4246'. [ 1529.766340][T28070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4246'. [ 1529.769693][T28070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4246'. [ 1529.772312][T28070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4246'. [ 1530.211890][T28073] wireguard15: entered promiscuous mode [ 1531.002966][T28099] overlayfs: overlapping lowerdir path [ 1531.697874][T28116] wireguard6: entered promiscuous mode [ 1532.288470][T28143] usb usb8: usbfs: process 28143 (syz.0.4279) did not claim interface 0 before use [ 1532.358177][T28159] syzkaller1: entered promiscuous mode [ 1532.359936][T28159] syzkaller1: entered allmulticast mode [ 1532.547646][T28191] netlink: 'syz.3.4303': attribute type 10 has an invalid length. [ 1533.157942][T28243] nftables ruleset with unbound chain [ 1533.302454][T28252] kernel profiling enabled (shift: 63) [ 1533.304404][T28252] profiling shift: 63 too large [ 1533.882501][T28278] __nla_validate_parse: 49 callbacks suppressed [ 1533.882542][T28278] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4336'. [ 1534.258037][T28285] VFS: could not find a valid V7 on nullb0. [ 1534.387831][T28293] usb usb8: usbfs: process 28293 (syz.3.4342) did not claim interface 0 before use [ 1534.784550][T28308] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4345'. [ 1534.802965][T28317] usb usb8: usbfs: process 28317 (syz.2.4350) did not claim interface 0 before use [ 1534.938852][T28327] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4356'. [ 1534.941584][T28327] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4356'. [ 1535.087595][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 1535.087611][ T40] audit: type=1326 audit(1740768479.889:9824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28341 comm="syz.2.4362" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 1535.099250][ T40] audit: type=1326 audit(1740768479.889:9825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28341 comm="syz.2.4362" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 1535.107260][ T40] audit: type=1326 audit(1740768479.889:9826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28341 comm="syz.2.4362" exe="/syz-executor" sig=0 arch=40000003 syscall=287 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 1535.113518][ T40] audit: type=1326 audit(1740768479.889:9827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28341 comm="syz.2.4362" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 1535.119798][ T40] audit: type=1326 audit(1740768479.889:9828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28341 comm="syz.2.4362" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 1535.454364][T28361] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4369'. [ 1536.089372][T28392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4377'. [ 1536.124464][T28392] wireguard8: entered promiscuous mode [ 1536.354211][T28419] random: crng reseeded on system resumption [ 1536.362766][T28421] ipvlan1: entered allmulticast mode [ 1536.364394][T28421] veth0_vlan: entered allmulticast mode [ 1537.005400][T28433] syz_tun: Device is already in use. [ 1537.046820][T28436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4400'. [ 1537.078957][T28434] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4396'. [ 1537.103487][T28440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4402'. [ 1537.107133][T28440] netlink: 'syz.0.4402': attribute type 1 has an invalid length. [ 1537.110412][T28440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4402'. [ 1538.135773][T28463] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1538.138747][T28463] overlayfs: overlapping lowerdir path [ 1538.962317][T28479] tipc: Enabling of bearer rejected, failed to enable media [ 1539.109879][T28499] smc: net device bond0 erased user defined pnetid SYZ2 [ 1539.731730][T28537] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4442'. [ 1540.416585][T28569] gtp2: entered promiscuous mode [ 1540.418172][T28569] gtp2: entered allmulticast mode [ 1541.369882][T28594] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4463'. [ 1541.427366][T28614] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4470'. [ 1542.158940][T28642] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4481'. [ 1542.290927][T28653] ipvlan1: entered allmulticast mode [ 1542.292479][T28653] veth0_vlan: entered allmulticast mode [ 1542.335851][T28659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4488'. [ 1542.875483][T28661] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4489'. [ 1542.893254][T28678] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4493'. [ 1543.503609][T28695] syz.0.4494: attempt to access beyond end of device [ 1543.503609][T28695] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1543.514683][T28695] XFS (nbd0): SB validate failed with error -5. [ 1543.547222][T28708] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4504'. [ 1543.557930][T28706] gtp2: entered promiscuous mode [ 1543.559810][T28706] gtp2: entered allmulticast mode [ 1543.609833][T28712] usb usb8: usbfs: process 28712 (syz.2.4506) did not claim interface 0 before use [ 1543.862261][T28719] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4507'. [ 1544.420916][T28737] blktrace: Concurrent blktraces are not allowed on sg0 [ 1544.430007][T28737] relay: one or more items not logged [item size (56) > sub-buffer size (42)] [ 1544.474392][T28745] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4518'. [ 1544.715262][T28774] netlink: 'syz.0.4533': attribute type 2 has an invalid length. [ 1544.852485][T28782] __nla_validate_parse: 3 callbacks suppressed [ 1544.852522][T28782] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4531'. [ 1544.918946][T28783] syz.2.4524: attempt to access beyond end of device [ 1544.918946][T28783] nbd2: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 1544.925747][T28783] XFS (nbd2): SB validate failed with error -5. [ 1545.033094][ T6006] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1545.066638][T28783] gtp2: entered promiscuous mode [ 1545.068357][T28783] gtp2: entered allmulticast mode [ 1545.208833][ T6006] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1545.211721][ T6006] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1545.215303][ T6006] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1545.221984][ T6006] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1545.225993][ T6006] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1545.245694][ T6006] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1545.248692][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1545.251266][ T6006] usb 5-1: Product: syz [ 1545.252873][ T6006] usb 5-1: Manufacturer: syz [ 1545.278763][ T6006] cdc_wdm 5-1:1.0: skipping garbage [ 1545.280651][ T6006] cdc_wdm 5-1:1.0: skipping garbage [ 1545.288451][ T6006] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1545.290462][ T6006] cdc_wdm 5-1:1.0: Unknown control protocol [ 1545.479736][T15959] usb 5-1: USB disconnect, device number 5 [ 1545.625910][T28807] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4541'. [ 1545.932800][ T1459] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1546.092775][ T1459] usb 6-1: Using ep0 maxpacket: 32 [ 1546.096569][ T1459] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1546.101103][ T1459] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1546.107747][ T1459] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1546.110710][ T1459] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1546.116290][ T1459] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1546.118928][ T1459] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1546.121412][ T1459] usb 6-1: Product: syz [ 1546.122813][ T1459] usb 6-1: Manufacturer: syz [ 1546.124231][ T1459] usb 6-1: SerialNumber: syz [ 1546.132254][ T1459] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input41 [ 1546.337901][ T1459] usb 6-1: USB disconnect, device number 10 [ 1546.349825][ T1459] appletouch 6-1:1.0: input: appletouch disconnected [ 1546.416103][T28832] syz.0.4554: attempt to access beyond end of device [ 1546.416103][T28832] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1546.423552][T28832] XFS (nbd0): SB validate failed with error -5. [ 1546.527343][T28830] gtp3: entered promiscuous mode [ 1546.528874][T28830] gtp3: entered allmulticast mode [ 1546.570175][T28840] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4550'. [ 1547.192808][ T1459] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1547.355048][T28861] netlink: 'syz.2.4559': attribute type 18 has an invalid length. [ 1547.357906][ T1459] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1547.360456][ T1459] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.363679][ T1459] usb 6-1: Product: syz [ 1547.364713][T28861] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.365612][ T1459] usb 6-1: Manufacturer: syz [ 1547.368032][T28861] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.369322][ T1459] usb 6-1: SerialNumber: syz [ 1547.371836][T28861] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.376455][T28861] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.550738][T28862] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4558'. [ 1547.654563][T28869] bridge0: port 4(hsr_slave_1) entered blocking state [ 1547.656657][T28869] bridge0: port 4(hsr_slave_1) entered disabled state [ 1547.712377][ T1459] usb 6-1: config 0 descriptor?? [ 1547.928322][ T1459] usb 6-1: USB disconnect, device number 11 [ 1548.309408][T28878] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1548.755255][T28876] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4564'. [ 1549.487160][T28906] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4573'. [ 1549.838853][T28913] kernel read not supported for file /eth0 (pid: 28913 comm: syz.1.4576) [ 1549.841813][ T40] audit: type=1800 audit(1740768494.639:9829): pid=28913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4576" name="eth0" dev="mqueue" ino=40983 res=0 errno=0 [ 1550.183348][ T6006] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1550.266852][T28943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4582'. [ 1550.274325][T28943] wireguard9: entered promiscuous mode [ 1550.343109][ T6006] usb 7-1: Using ep0 maxpacket: 8 [ 1550.346376][ T6006] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1550.349682][ T6006] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1550.352560][ T6006] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1550.356046][ T6006] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1550.360622][ T6006] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1550.364400][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.381105][T28952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4593'. [ 1550.613878][ T6006] usb 7-1: GET_CAPABILITIES returned 0 [ 1550.615524][ T6006] usbtmc 7-1:16.0: can't read capabilities [ 1550.707755][T28958] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4595'. [ 1550.826340][T15959] usb 7-1: USB disconnect, device number 11 [ 1550.989918][T28935] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1551.248596][T28962] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4596'. [ 1551.580084][T28973] bridge0: port 3(hsr_slave_1) entered blocking state [ 1551.583112][T28973] bridge0: port 3(hsr_slave_1) entered disabled state [ 1551.585888][T28973] hsr_slave_1: entered allmulticast mode [ 1551.588945][T28973] hsr_slave_1: left allmulticast mode [ 1551.642848][T28982] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4605'. [ 1552.362065][T28990] gtp3: entered promiscuous mode [ 1552.364745][T28990] gtp3: entered allmulticast mode [ 1552.815779][T29008] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4613'. [ 1552.818765][T29014] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4612'. [ 1552.846624][T29013] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4615'. [ 1553.639836][T29039] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4622'. [ 1553.838599][T29047] lo speed is unknown, defaulting to 1000 [ 1553.841660][T29047] lo speed is unknown, defaulting to 1000 [ 1553.906668][T29049] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4626'. [ 1554.650289][T29072] wireguard14: entered promiscuous mode [ 1554.765414][T29083] netlink: 'syz.2.4640': attribute type 1 has an invalid length. [ 1555.112844][ T1459] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1555.275300][ T1459] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1555.277878][ T1459] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1555.280728][ T1459] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1555.283524][ T1459] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1555.286661][ T1459] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1555.290979][ T1459] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1555.294072][ T1459] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1555.296372][ T1459] usb 7-1: Product: syz [ 1555.297604][ T1459] usb 7-1: Manufacturer: syz [ 1555.302736][ T1459] cdc_wdm 7-1:1.0: skipping garbage [ 1555.304546][ T1459] cdc_wdm 7-1:1.0: skipping garbage [ 1555.307527][ T1459] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1555.309298][ T1459] cdc_wdm 7-1:1.0: Unknown control protocol [ 1555.510771][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1555.513700][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1555.516572][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1555.518902][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1555.523374][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1555.526025][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1555.527215][T15959] usb 7-1: USB disconnect, device number 12 [ 1555.528405][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1555.705266][T29109] __nla_validate_parse: 3 callbacks suppressed [ 1555.705278][T29109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4651'. [ 1555.765799][T29113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4653'. [ 1555.990439][T29124] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4657'. [ 1556.025271][T29126] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4658'. [ 1556.034539][T29127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4654'. [ 1556.054457][T29127] wireguard15: entered promiscuous mode [ 1556.093322][T29133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4655'. [ 1556.203400][T29133] wireguard10: entered promiscuous mode [ 1556.571796][T29150] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4664'. [ 1557.284535][T29182] cgroup: fork rejected by pids controller in /syz1 [ 1557.495288][T29170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4673'. [ 1557.500445][T29170] wireguard11: entered promiscuous mode [ 1557.612169][T29192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4683'. [ 1557.649072][T29195] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1557.655191][T29195] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1557.659194][T29195] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1557.664130][T29195] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1557.666508][T29195] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1557.668637][T29195] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1557.682891][T15119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1557.688118][T15119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1557.691274][T15119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1557.693955][T15119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1557.696916][T15119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1557.699028][T15119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1557.720017][T29193] lo speed is unknown, defaulting to 1000 [ 1557.721993][T29193] lo speed is unknown, defaulting to 1000 [ 1557.787260][T29193] chnl_net:caif_netlink_parms(): no params data found [ 1557.846129][T29193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.849001][T29193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.851446][T29193] bridge_slave_0: entered allmulticast mode [ 1557.853775][T29193] bridge_slave_0: entered promiscuous mode [ 1557.856454][T29193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.858509][T29193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.860613][T29193] bridge_slave_1: entered allmulticast mode [ 1557.862965][T29193] bridge_slave_1: entered promiscuous mode [ 1558.135756][T29202] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4684'. [ 1558.144907][T29193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1558.148771][T29193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1558.179030][T29193] team0: Port device team_slave_0 added [ 1558.183435][T29193] team0: Port device team_slave_1 added [ 1558.203566][T29193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1558.205617][T29193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1558.212393][T29193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1558.216389][T29193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1558.218313][T29193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1558.226645][T29193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1558.287534][T29193] hsr_slave_0: entered promiscuous mode [ 1558.289904][T29193] hsr_slave_1: entered promiscuous mode [ 1558.292171][T29193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1558.296115][T29193] Cannot create hsr debugfs directory [ 1558.400057][T29219] wireguard16: entered promiscuous mode [ 1558.700748][T29193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1558.709858][T29193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1558.713389][T29193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1558.716659][T29193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1558.767693][T29193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1558.776394][T29193] 8021q: adding VLAN 0 to HW filter on device team0 [ 1558.782121][T22063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.784200][T22063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1558.828290][T29193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1558.831681][T29193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1558.909530][T29193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1558.926333][T29193] veth0_vlan: entered promiscuous mode [ 1558.932039][T29193] veth1_vlan: entered promiscuous mode [ 1558.942154][T29193] veth0_macvtap: entered promiscuous mode [ 1558.949461][T29193] veth1_macvtap: entered promiscuous mode [ 1558.956452][T29193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1558.960245][T29193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1558.964308][T29193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.966851][T29193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.969442][T29193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.972096][T29193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.000309][T23266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.002327][T23266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1559.026017][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.032574][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.047161][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.050366][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.194913][ T39] bridge_slave_1: left allmulticast mode [ 1559.196685][ T39] bridge_slave_1: left promiscuous mode [ 1559.201228][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.206785][ T39] bridge_slave_0: left allmulticast mode [ 1559.210662][ T39] bridge_slave_0: left promiscuous mode [ 1559.213147][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.382158][ T39] batman_adv: batadv0: Removing interface: gretap1 [ 1559.420790][ T39] bond0 (unregistering): (slave gretap2): Releasing active interface [ 1559.743028][T15119] Bluetooth: hci0: command tx timeout [ 1560.120876][ T39] bond1 (unregistering): Released all slaves [ 1560.226256][ T39] bond2 (unregistering): Released all slaves [ 1560.328698][ T39] bond3 (unregistering): Released all slaves [ 1560.450079][ T39] bond0 (unregistering): Released all slaves [ 1560.545985][ T39] : left promiscuous mode [ 1560.652148][ T39] tipc: Disabling bearer [ 1560.660645][ T39] tipc: Left network mode [ 1560.719813][T29273] __nla_validate_parse: 3 callbacks suppressed [ 1560.719853][T29273] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4702'. [ 1561.029869][ T39] hsr_slave_0: left promiscuous mode [ 1561.031811][ T39] hsr_slave_1: left promiscuous mode [ 1561.035428][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1561.141768][T29276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4704'. [ 1561.289089][ T39] pim6reg (unregistering): left allmulticast mode [ 1561.451137][ T39] macvlan0 (unregistering): left allmulticast mode [ 1561.823146][T15119] Bluetooth: hci0: command tx timeout [ 1562.817212][T29276] wireguard0: entered promiscuous mode [ 1563.804402][T29301] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4712'. [ 1563.892882][T15119] Bluetooth: hci0: command tx timeout [ 1564.159344][T29306] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4713'. [ 1564.177923][T15959] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0 [ 1564.180418][T15959] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0 [ 1564.184150][T15959] hid-generic 0000:0003:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1564.628169][T29339] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4724'. [ 1565.100848][ T39] IPVS: stop unused estimator thread 0... [ 1565.345691][T29356] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4725'. [ 1565.495385][T29369] block nbd3: NBD_DISCONNECT [ 1565.497467][T29369] [ 1565.498239][T29369] ====================================================== [ 1565.500298][T29369] WARNING: possible circular locking dependency detected [ 1565.502317][T29369] 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 Not tainted [ 1565.505964][T29369] ------------------------------------------------------ [ 1565.509322][T29369] syz.3.4734/29369 is trying to acquire lock: [ 1565.511111][T29369] ffff888069f40258 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_sendmsg+0x47/0x520 [ 1565.513637][T29369] [ 1565.513637][T29369] but task is already holding lock: [ 1565.516209][T29369] ffff88801f4ea270 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_disconnect+0x321/0x540 [ 1565.519613][T29369] [ 1565.519613][T29369] which lock already depends on the new lock. [ 1565.519613][T29369] [ 1565.523434][T29369] [ 1565.523434][T29369] the existing dependency chain (in reverse order) is: [ 1565.526759][T29369] [ 1565.526759][T29369] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1565.529658][T29369] __mutex_lock+0x19b/0xb10 [ 1565.531568][T29369] sock_shutdown+0x16f/0x280 [ 1565.533487][T29369] nbd_config_put+0x1e6/0x750 [ 1565.535445][T29369] nbd_release+0xb7/0x190 [ 1565.537266][T29369] blkdev_put_whole+0xad/0xf0 [ 1565.539137][T29369] bdev_release+0x47e/0x6d0 [ 1565.540633][T29369] blkdev_release+0x15/0x20 [ 1565.542045][T29369] __fput+0x3ff/0xb70 [ 1565.543392][T29369] task_work_run+0x14e/0x250 [ 1565.544929][T29369] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1565.546659][T29369] __do_fast_syscall_32+0x80/0x120 [ 1565.548284][T29369] do_fast_syscall_32+0x32/0x80 [ 1565.549835][T29369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1565.551834][T29369] [ 1565.551834][T29369] -> #5 (&nbd->config_lock){+.+.}-{4:4}: [ 1565.554178][T29369] __mutex_lock+0x19b/0xb10 [ 1565.555671][T29369] refcount_dec_and_mutex_lock+0x51/0xc0 [ 1565.557446][T29369] nbd_config_put+0x31/0x750 [ 1565.558938][T29369] nbd_release+0xb7/0x190 [ 1565.560472][T29369] blkdev_put_whole+0xad/0xf0 [ 1565.562192][T29369] bdev_release+0x47e/0x6d0 [ 1565.564132][T29369] blkdev_release+0x15/0x20 [ 1565.566049][T29369] __fput+0x3ff/0xb70 [ 1565.567810][T29369] __fput_sync+0xa1/0xc0 [ 1565.569607][T29369] __x64_sys_close+0x86/0x100 [ 1565.571623][T29369] do_syscall_64+0xcd/0x250 [ 1565.573229][T29369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.575737][T29369] [ 1565.575737][T29369] -> #4 (&disk->open_mutex){+.+.}-{4:4}: [ 1565.578818][T29369] __mutex_lock+0x19b/0xb10 [ 1565.580849][T29369] bdev_open+0x41a/0xe20 [ 1565.582644][T29369] bdev_file_open_by_dev+0x17d/0x210 [ 1565.584916][T29369] disk_scan_partitions+0x1ed/0x320 [ 1565.587175][T29369] add_disk_fwnode+0x1006/0x1320 [ 1565.589373][T29369] pmem_attach_disk+0x9a1/0x13e0 [ 1565.591568][T29369] nd_pmem_probe+0x1a9/0x1f0 [ 1565.593636][T29369] nvdimm_bus_probe+0x169/0x5d0 [ 1565.595794][T29369] really_probe+0x23e/0xa90 [ 1565.597828][T29369] __driver_probe_device+0x1de/0x440 [ 1565.600164][T29369] driver_probe_device+0x4c/0x1b0 [ 1565.602308][T29369] __driver_attach+0x283/0x580 [ 1565.604054][T29369] bus_for_each_dev+0x13c/0x1d0 [ 1565.605701][T29369] bus_add_driver+0x2e9/0x690 [ 1565.607283][T29369] driver_register+0x15c/0x4b0 [ 1565.608762][T29369] __nd_driver_register+0x103/0x1a0 [ 1565.610627][T29369] do_one_initcall+0x128/0x700 [ 1565.612285][T29369] kernel_init_freeable+0x5c7/0x900 [ 1565.613989][T29369] kernel_init+0x1c/0x2b0 [ 1565.615375][T29369] ret_from_fork+0x45/0x80 [ 1565.616855][T29369] ret_from_fork_asm+0x1a/0x30 [ 1565.618877][T29369] [ 1565.618877][T29369] -> #3 (&nvdimm_namespace_key){+.+.}-{4:4}: [ 1565.622059][T29369] __mutex_lock+0x19b/0xb10 [ 1565.624126][T29369] uevent_show+0x188/0x3b0 [ 1565.625638][T29369] dev_attr_show+0x53/0xe0 [ 1565.627126][T29369] sysfs_kf_seq_show+0x23e/0x410 [ 1565.628718][T29369] seq_read_iter+0x4f4/0x12b0 [ 1565.630515][T29369] kernfs_fop_read_iter+0x414/0x580 [ 1565.632712][T29369] vfs_read+0x886/0xbf0 [ 1565.634510][T29369] ksys_read+0x12b/0x250 [ 1565.636375][T29369] do_syscall_64+0xcd/0x250 [ 1565.638324][T29369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.640880][T29369] [ 1565.640880][T29369] -> #2 (kn->active#5){++++}-{0:0}: [ 1565.643846][T29369] kernfs_drain+0x48f/0x590 [ 1565.645863][T29369] __kernfs_remove+0x281/0x670 [ 1565.647833][T29369] kernfs_remove_by_name_ns+0xb2/0x130 [ 1565.649455][T29369] device_del+0x381/0x9f0 [ 1565.651313][T29369] unregister_netdevice_many_notify+0x13aa/0x1f30 [ 1565.653823][T29369] unregister_netdevice_queue+0x307/0x3f0 [ 1565.656210][T29369] ser_release+0x195/0x280 [ 1565.658087][T29369] process_one_work+0x9c5/0x1ba0 [ 1565.660221][T29369] worker_thread+0x6c8/0xf00 [ 1565.662191][T29369] kthread+0x3af/0x750 [ 1565.664005][T29369] ret_from_fork+0x45/0x80 [ 1565.665936][T29369] ret_from_fork_asm+0x1a/0x30 [ 1565.668057][T29369] [ 1565.668057][T29369] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 1565.670675][T29369] __mutex_lock+0x19b/0xb10 [ 1565.672065][T29369] smc_vlan_by_tcpsk+0x251/0x620 [ 1565.673486][T29369] __smc_connect+0x44d/0x4890 [ 1565.675011][T29369] smc_connect+0x2fc/0x760 [ 1565.676442][T29369] __sys_connect_file+0x13e/0x1a0 [ 1565.678457][T29369] __sys_connect+0x14f/0x170 [ 1565.680359][T29369] __ia32_sys_connect+0x71/0xb0 [ 1565.681901][T29369] __do_fast_syscall_32+0x73/0x120 [ 1565.684030][T29369] do_fast_syscall_32+0x32/0x80 [ 1565.685944][T29369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1565.687974][T29369] [ 1565.687974][T29369] -> #0 (sk_lock-AF_SMC){+.+.}-{0:0}: [ 1565.690313][T29369] __lock_acquire+0x249e/0x3c40 [ 1565.691895][T29369] lock_acquire.part.0+0x11b/0x380 [ 1565.693512][T29369] lock_sock_nested+0x3a/0xf0 [ 1565.695050][T29369] smc_sendmsg+0x47/0x520 [ 1565.696473][T29369] sock_sendmsg+0x3d3/0x490 [ 1565.697937][T29369] __sock_xmit+0x1e8/0x4f0 [ 1565.699408][T29369] nbd_disconnect+0x390/0x540 [ 1565.700953][T29369] nbd_ioctl+0x8d1/0xd60 [ 1565.702342][T29369] compat_blkdev_ioctl+0x2f4/0x7b0 [ 1565.703973][T29369] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 1565.705657][T29369] __do_fast_syscall_32+0x73/0x120 [ 1565.707479][T29369] do_fast_syscall_32+0x32/0x80 [ 1565.709054][T29369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1565.711575][T29369] [ 1565.711575][T29369] other info that might help us debug this: [ 1565.711575][T29369] [ 1565.711808][T29373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4731'. [ 1565.715197][T29369] Chain exists of: [ 1565.715197][T29369] sk_lock-AF_SMC --> &nbd->config_lock --> &nsock->tx_lock [ 1565.715197][T29369] [ 1565.715219][T29369] Possible unsafe locking scenario: [ 1565.715219][T29369] [ 1565.715223][T29369] CPU0 CPU1 [ 1565.715227][T29369] ---- ---- [ 1565.715230][T29369] lock(&nsock->tx_lock); [ 1565.715238][T29369] lock(&nbd->config_lock); [ 1565.715246][T29369] lock(&nsock->tx_lock); [ 1565.715255][T29369] lock(sk_lock-AF_SMC); [ 1565.715262][T29369] [ 1565.715262][T29369] *** DEADLOCK *** [ 1565.715262][T29369] [ 1565.715266][T29369] 2 locks held by syz.3.4734/29369: [ 1565.715273][T29369] #0: ffff888024462198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xd60 [ 1565.715304][T29369] #1: ffff88801f4ea270 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_disconnect+0x321/0x540 [ 1565.715329][T29369] [ 1565.715329][T29369] stack backtrace: [ 1565.715335][T29369] CPU: 2 UID: 0 PID: 29369 Comm: syz.3.4734 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 1565.715347][T29369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1565.715354][T29369] Call Trace: [ 1565.715359][T29369] [ 1565.715363][T29369] dump_stack_lvl+0x116/0x1f0 [ 1565.715377][T29369] print_circular_bug+0x490/0x760 [ 1565.715394][T29369] check_noncircular+0x31a/0x400 [ 1565.715409][T29369] ? __pfx_check_noncircular+0x10/0x10 [ 1565.715423][T29369] ? this_cpu_in_panic+0x5c/0x80 [ 1565.715441][T29369] ? lockdep_lock+0xc6/0x200 [ 1565.715452][T29369] ? __pfx_lockdep_lock+0x10/0x10 [ 1565.715463][T29369] ? __pfx_mark_lock+0x10/0x10 [ 1565.715477][T29369] __lock_acquire+0x249e/0x3c40 [ 1565.715493][T29369] ? __pfx___lock_acquire+0x10/0x10 [ 1565.715508][T29369] lock_acquire.part.0+0x11b/0x380 [ 1565.715522][T29369] ? smc_sendmsg+0x47/0x520 [ 1565.715537][T29369] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1565.715552][T29369] ? rcu_is_watching+0x12/0xc0 [ 1565.715563][T29369] ? trace_lock_acquire+0x14e/0x1f0 [ 1565.715574][T29369] ? smc_sendmsg+0x47/0x520 [ 1565.715588][T29369] ? lock_acquire+0x2f/0xb0 [ 1565.715601][T29369] ? smc_sendmsg+0x47/0x520 [ 1565.715615][T29369] lock_sock_nested+0x3a/0xf0 [ 1565.715630][T29369] ? smc_sendmsg+0x47/0x520 [ 1565.715644][T29369] smc_sendmsg+0x47/0x520 [ 1565.715658][T29369] sock_sendmsg+0x3d3/0x490 [ 1565.715670][T29369] ? __pfx_sock_sendmsg+0x10/0x10 [ 1565.715682][T29369] ? rcu_is_watching+0x12/0xc0 SYZFAIL: failed to recv rpc [ 1565.715693][T29369] ? trace_contention_end+0xee/0x140 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1565.715708][T29369] __sock_xmit+0x1e8/0x4f0 [ 1565.715725][T29369] ? __pfx___sock_xmit+0x10/0x10 [ 1565.715740][T29369] ? __pfx___mutex_lock+0x10/0x10 [ 1565.715757][T29369] nbd_disconnect+0x390/0x540 [ 1565.715775][T29369] ? __pfx_nbd_disconnect+0x10/0x10 [ 1565.715789][T29369] ? __pfx___mutex_lock+0x10/0x10 [ 1565.715804][T29369] ? bpf_lsm_capable+0x9/0x10 [ 1565.715817][T29369] nbd_ioctl+0x8d1/0xd60 [ 1565.715828][T29369] ? __pfx_nbd_ioctl+0x10/0x10 [ 1565.715840][T29369] ? __pfx_lock_release+0x10/0x10 [ 1565.715854][T29369] ? trace_lock_acquire+0x14e/0x1f0 [ 1565.715865][T29369] ? __pfx_lock_release+0x10/0x10 [ 1565.715880][T29369] ? __pfx_nbd_ioctl+0x10/0x10 [ 1565.715891][T29369] compat_blkdev_ioctl+0x2f4/0x7b0 [ 1565.715903][T29369] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1565.715913][T29369] ? __fget_files+0x206/0x3a0 [ 1565.715929][T29369] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1565.715940][T29369] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 1565.715954][T29369] __do_fast_syscall_32+0x73/0x120 [ 1565.715969][T29369] do_fast_syscall_32+0x32/0x80 [ 1565.715983][T29369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1565.716001][T29369] RIP: 0023:0xf7fd2579 [ 1565.716010][T29369] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1565.716021][T29369] RSP: 002b:00000000f50d555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1565.716031][T29369] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ab08 [ 1565.716038][T29369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1565.716044][T29369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1565.716050][T29369] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1565.716056][T29369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1565.716065][T29369] [ 1565.723111][T29369] block nbd3: Send disconnect failed -107 [ 1565.860942][T24128] x86/PAT: syz.2.3497:24128 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 1565.867981][T29362] block nbd3: Disconnected due to user request. [ 1565.878197][T29362] block nbd3: shutting down sockets [ 1565.894368][T29373] wireguard1: entered promiscuous mode [ 1565.975340][T15119] Bluetooth: hci0: command tx timeout [ 1566.002228][T29356] bond0: (slave syz_tun): Releasing backup interface [ 1566.026705][T24448] bond0: (slave syz_tun): Releasing backup interface [ 1566.037744][T28623] syz_tun (unregistering): left allmulticast mode [ 1566.039669][T28623] syz_tun (unregistering): left promiscuous mode [ 1566.041512][T28623] bridge0: port 2(syz_tun) entered disabled state [ 1566.509569][ T39] bond4 (unregistering): (slave gretap1): Releasing active interface [ 1566.579214][ T39] tipc: Disabling bearer [ 1566.966950][ T39] bond0 (unregistering): Released all slaves [ 1567.068443][ T39] bond1 (unregistering): Released all slaves [ 1567.163224][ T39] bond2 (unregistering): Released all slaves [ 1567.260815][ T39] bond3 (unregistering): Released all slaves [ 1567.264724][ T39] bond4 (unregistering): Released all slaves [ 1567.344720][ T39] : left promiscuous mode [ 1567.414832][ T39] tipc: Left network mode [ 1567.713545][ T39] hsr_slave_0: left promiscuous mode [ 1567.715651][ T39] hsr_slave_1: left promiscuous mode [ 1570.271799][ T39] IPVS: stop unused estimator thread 0... [ 1570.333420][ T39] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.386765][ T39] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.456975][ T39] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.515186][ T39] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.780810][ T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1570.833382][ T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1570.902226][ T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1570.942531][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1570.945078][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 1570.947627][ T39] bridge0: port 3(netdevsim0) entered disabled state [ 1570.950332][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1571.023602][ T39] bridge_slave_1: left allmulticast mode [ 1571.025265][ T39] bridge_slave_1: left promiscuous mode [ 1571.026961][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.029780][ T39] bridge_slave_0: left allmulticast mode [ 1571.031459][ T39] bridge_slave_0: left promiscuous mode [ 1571.033406][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.036862][ T39] bridge_slave_0: left allmulticast mode [ 1571.038598][ T39] bridge_slave_0: left promiscuous mode [ 1571.040393][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.215247][ T39] bond6 (unregistering): (slave gretap1): Releasing active interface [ 1571.786427][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1571.789890][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1571.793769][ T39] bond0 (unregistering): Released all slaves [ 1571.892372][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1571.895198][ T39] bond_slave_0: left promiscuous mode [ 1571.897310][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1571.900408][ T39] bond_slave_1: left promiscuous mode [ 1571.902260][ T39] bond0 (unregistering): Released all slaves [ 1571.998727][ T39] bond1 (unregistering): Released all slaves [ 1572.090448][ T39] bond2 (unregistering): Released all slaves [ 1572.094088][ T39] bond3 (unregistering): (slave batadv2): Releasing backup interface [ 1572.096645][ T39] bond3 (unregistering): Released all slaves [ 1572.188526][ T39] bond4 (unregistering): Released all slaves [ 1572.286878][ T39] bond5 (unregistering): Released all slaves [ 1572.392009][ T39] bond6 (unregistering): Released all slaves [ 1572.502745][ T39] bond1 (unregistering): Released all slaves [ 1572.598058][ T39] bond2 (unregistering): Released all slaves [ 1572.688900][ T39] bond0 (unregistering): Released all slaves [ 1572.800209][ T39] bond3 (unregistering): Released all slaves [ 1572.907166][ T39] : left promiscuous mode [ 1572.973233][ T39] : left promiscuous mode [ 1573.052718][ T39] tipc: Disabling bearer [ 1573.054408][ T39] tipc: Left network mode [ 1573.693897][ T39] hsr_slave_0: left promiscuous mode [ 1573.695735][ T39] hsr_slave_1: left promiscuous mode [ 1573.697444][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1573.699601][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1573.701926][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1573.705309][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1573.708486][ T39] hsr_slave_0: left promiscuous mode [ 1573.710271][ T39] hsr_slave_1: left promiscuous mode [ 1573.713698][ T39] hsr_slave_0: left promiscuous mode [ 1573.715474][ T39] hsr_slave_1: left promiscuous mode [ 1573.717175][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1573.720862][ T39] veth1_macvtap: left promiscuous mode [ 1573.722457][ T39] veth0_macvtap: left promiscuous mode [ 1573.725348][ T39] veth1_vlan: left promiscuous mode [ 1573.726938][ T39] veth0_vlan: left promiscuous mode [ 1573.942363][ T39] team0 (unregistering): Port device team_slave_1 removed [ 1573.992012][ T39] team0 (unregistering): Port device team_slave_0 removed [ 1574.828983][ T39] team0 (unregistering): Port device team_slave_1 removed [ 1574.920333][ T39] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 14:06:14 Registers: info registers vcpu 0 CPU#0 RAX=0000000004318084 RBX=0000000000000000 RCX=ffffffff8b552469 RDX=ffffed1005686f86 RSI=ffffffff8bd34780 RDI=ffffffff81907409 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed1005686f85 R10=ffff88802b437c2b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90627710 R15=0000000000000000 RIP=ffffffff8b55384f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f734983c CR3=0000000042442000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000000 RBX=ffffc9000e3e79f8 RCX=000000000000004c RDX=ffff888052e32440 RSI=ffffffff81f9adc1 RDI=ffffc9000e3e79f8 RBP=dffffc0000000000 RSP=ffffc9000e3e7530 R8 =ffff888012fa9e00 R9 =0000000000000000 R10=0000000000000000 R11=000000000001019b R12=0000000000000000 R13=0000000000000000 R14=ffff888012eb35c0 R15=ffff888012eb35f0 RIP=ffffffff81b9dfdc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c4551eb CR3=0000000042442000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc000000000d RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff853e62f0 RDI=ffffffff9ab6ee60 RBP=ffffffff9ab6ee20 RSP=ffffc9000e25f060 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=ffffffff9ab6ee70 R14=ffffffff9ab6ee20 R15=0000000000000000 RIP=ffffffff853e6317 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50d5da4 CR3=00000000697fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=00000000ffffffff RCX=ffffc9000d913000 RDX=ffff88801bb22440 RSI=ffffffff89fa9802 RDI=ffff88804bbb88cc RBP=ffff88804bbb8840 RSP=ffffc9000e00f7e8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000000 R12=0000000000000002 R13=ffffc9000e00f878 R14=ffff88804bbb8928 R15=ffff88804bbb8da8 RIP=ffffffff81b9e001 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f0d1eeac CR3=000000004c930000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000