last executing test programs: 16.26791106s ago: executing program 3 (id=4266): accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000001440)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x34000}], 0x1}}], 0x1, 0x0) 15.052268193s ago: executing program 3 (id=4268): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x3, 0x3, 0x80001, {0x0, 0x209, 0x20ff, 0x5, 0x40000000000089, 0xd615, 0x9, 0x6, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x7fffffff}}, {0x0, 0x13}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) syz_open_pts(0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r3 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r3, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) r6 = socket$kcm(0x25, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) recvmsg$kcm(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) 14.247404122s ago: executing program 1 (id=4270): mkdir(&(0x7f0000000080)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0xe, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0xc3) bpf$MAP_CREATE(0x0, 0x0, 0xfffffd76) socket(0x200000000000011, 0x2, 0xfffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup(r2) r4 = socket$pptp(0x18, 0x1, 0x2) getsockname(r4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendfile(r3, r3, 0x0, 0xffffffff) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-arm64\x00'}, 0x58) r6 = socket(0x840000000002, 0x3, 0x3) connect$inet(r6, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) 13.049200042s ago: executing program 1 (id=4273): r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x3, 0x1, 0x8000000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000400)={0x10001, 0x5, 0x0, 0x7, 0x8, 0x3}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000300)=@llc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)=""/54, 0x36}, {&(0x7f0000000580)=""/224, 0xe0}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000480)=""/125, 0x7d}, {&(0x7f0000000680)=""/132, 0x84}, {&(0x7f0000000380)=""/54, 0x36}, {&(0x7f0000000740)=""/143, 0x8f}], 0x7, &(0x7f0000000800)=""/104, 0x68}, 0x2}], 0x1, 0x20, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$TCFLSH(r5, 0x400455c8, 0x4) openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r6, r4, 0x0, 0x8010002b) 9.9629895s ago: executing program 3 (id=4274): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x8, {0x2}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) getpeername$packet(r0, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x85c, 0x22882) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x22d1, 0x0) close(r2) ioctl$TCSETSW2(r3, 0x5425, 0x0) unshare(0x68040200) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4, 0x0, 0x400000000}, 0xf) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8912, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x7a}) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x6, 0x101, 0x8, 0x7, 0x1ff], 0x1, 0x0, 0x0, [{}]}, 0x60) close(0xffffffffffffffff) ioperm(0x3, 0x2c3, 0xbc) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000003c0)={0x1, 0x4, 0x2, 0x0, 0xe}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 9.961343956s ago: executing program 0 (id=4283): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) getsockopt(r0, 0x0, 0x5, &(0x7f0000000140)=""/181, &(0x7f0000000000)=0xb5) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES64], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r4, 0x0, 0x0) io_setup(0x8, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB="0000000000000000000000000000dba24517870c9f7ea03c65fe76ad36d4c9c6127d3e190f85f28a71aaf74c000000000000800000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 9.282238603s ago: executing program 1 (id=4277): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r5, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x8000004, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r7 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000800)={'bridge0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x4, 0x101, 0xc3a5, 0x9, 0x1ff, 0x4, 0x2, 0xfffffff6, 0x7fb, 0x1, 0xc99d, 0x2, 0x9, 0x8d, 0x7ff, 0x2, 0xa98, 0x8, 0x6, 0x10000040, 0x3, 0xfd}}) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 8.836002186s ago: executing program 0 (id=4278): setuid(0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x2cd1, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x353}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x1dc, r3, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80000000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x13}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x8]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x287}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x38}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x50}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x8, 0x9, 0x1, 0x6b, 0x3, 0x1, 0x6, 0x9, 0x7]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xd66f}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4a}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x1, 0x3, 0x1, 0x76cc, 0x15c, 0x6, 0x0, 0x1]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xa}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x20cc199f}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x794354e6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffb}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xe1aa}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xc65b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4d5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x8000]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x568}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1d}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x26}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x7ff, 0x7, 0x7fff, 0x9, 0x100, 0x2, 0x6, 0x8]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xb381}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xf}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x557}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffb}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xbc}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xc}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3f}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x44}, 0x4000800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) lchown(0x0, 0x0, 0x0) umount2(0x0, 0xb) r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r7 = open(&(0x7f0000000580)='./file0\x00', 0x181242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f00000002c0)={0xa0, 0x7201db1529d2c136, 0x0, {{0x7ffffffd, 0x3, 0x5, 0xffffffffffffff80, 0x3, 0x1, {0x1, 0x180, 0x2101, 0x8, 0x8b, 0x800000000000d615, 0x5, 0x7ffffffb, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x100}}, {0x0, 0x2}}}, 0xa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000027c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$phonet_pipe(0x23, 0x5, 0x2) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) close(0x3) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 8.826863289s ago: executing program 3 (id=4287): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0x5b, 0x0}}], 0x800000000000214, 0x20000001) openat$nullb(0xffffff9c, &(0x7f00000000c0), 0x224400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f00000000c0)}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000d04000063768b67e543bd"], 0x44}}, 0x0) close(r5) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000180)={0x0, 0xa, 0xd, 0x2}) 8.756987592s ago: executing program 2 (id=4279): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40381) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x919, &(0x7f0000000300)={0x0, 0x400, 0x400, 0x1000001, 0xf7fffffc}, &(0x7f0000000180), &(0x7f0000000500)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x354, 0xffffffff, 0x1e4, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x3}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, [0xff000000, 0x0, 0x0, 0xff], [0xff000000, 0xff000000, 0x0, 0xffffffff], 'bridge_slave_1\x00', 'team_slave_1\x00', {}, {0xbf820dc36854cbc6}, 0x6, 0x9, 0x2, 0x43}, 0x2f2, 0xc8, 0xec, 0x0, {}, [@common=@inet=@ecn={{0x24}, {0x11, 0x1, 0x6, 0x4}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x2, 0x79496b969af2e55d}, {0x2, 0x3, 0x6}, 0x8, 0x9}}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0xfffd}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3b0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, 0x0, 0x0, 0x7d, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x6) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)="89000000120081ae08060cdc030ec0007f03e3f70003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec537208120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8aa53f38054f0b56a20ff27fff", 0x8b}], 0x1}, 0x24000810) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14004000", @ANYRES16=0x0, @ANYBLOB="0103000000000000000005002300"], 0x14}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r11, 0x0, 0xd}, 0x18) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r12, 0x4b3a, 0x1) ioctl$TCXONC(r12, 0x4b3a, 0x2) 7.032652888s ago: executing program 0 (id=4280): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0x5b, 0x0}}], 0x800000000000214, 0x20000001) openat$nullb(0xffffff9c, &(0x7f00000000c0), 0x224400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f00000000c0)}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000d04000063768b67e543bd"], 0x44}}, 0x0) close(r5) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000180)={0x0, 0xa, 0xd, 0x2}) 6.625980385s ago: executing program 2 (id=4281): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40802, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x12, 0xff, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="8526b62bfad63a5dba5e98e19f2780c805c6", 0x0, 0x3, 0x0, 0xfffffffd, 0x0}) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d616e276c65000000000000000000000000000000000028000000000000000003ee7ce4ce1cd5f8ac36480fe3f28d26b4b046f47814725488c10aad11dca0bf6c533510004cb2bfbe312e34dd7c62ebcb65c1ef9ee2e0fb912a24feb54c081b79f26259871707bf59b118783389510cfb95c15f006b52f7108e9067d3b0"], 0x54) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x1, 0x100) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000026c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000000000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6207005d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9ba5d80efd7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe5682159fbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a9384f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d94462d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef82948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcc963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7e8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2f58a30e0844f1ad00bbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e01000000fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c6ab5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d33599a40283c5addc191b4aa023079ed0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607649bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362cdff99c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8adef4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c6737ba8b1672ae9677bb5970cf3e84be433446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e8332116dfcdd6071b976de8c473a7585436730db75da167481ab8921fe051b250106e7b09a8fff8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000100000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9745b3cabc908e623403c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e2112f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d06c790000087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec6d8a68356cef8646f3815eb4daf46c5c76b29839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce518b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d8e5c599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace2fa90c68166396a2398d7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7258e9fc818ab3d76ab660a254d998592c31017f816e01a21c08a17acdb8ada5bc901934e40608563f14698feafac57b2b48cb89e10c85463a386be0f7fb1d1cfd621f8e2b51d50622b7c15be3999ffa42bd57408fe168d840c45a15317b21cf4c2278a04000000000000000033e2ad66fd156dcbf12d9e0e85dc9705d0ce24a4694c8ecd2493e1ed561a425d6045eb68c80d1dc57defb4abe86c9f2c37652d98b0c415bf246642062bd3b58a1ec57acdc2b6be53eaffaafd100002000057fe38ef705b4b9c0342a9b267db42fdda35e41afd619fb6bb14b910346544d83f462635f0738fe4a8db56364fd28540ac55be7fff8aa77009f12e2c1e7098a27b0bc549f3a6f68c11d786e498bffc37c297185efdb868a16ae1323c7d19da92531b33023e82cdeb8be27f82ca830f409a21d1aec436b0230e4b1b376005bcf6e55fceffce6d184de1b89dc5ed8bdfa37e8f86ada4158a7713db2c6789e6ba90df2bc48944775e45134f2187359f74c9dff3c78fb36fe5f672a8ce6e5c404ed8d734b905c5a12a996d8836b4522dbc73e595c14db9523200000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x10d) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = syz_open_procfs$namespace(0x0, 0x0) setns(r6, 0x0) write$cgroup_int(r5, &(0x7f0000000340)=0x400, 0x12) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_to_hsr\x00'}, 0x18) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000002c0)={0x6, 'nicvf0\x00', {0xc}, 0xfffe}) 6.466401109s ago: executing program 1 (id=4282): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0xfffffffc, 0x3aa, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000380)) socket$kcm(0x10, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) 6.439174212s ago: executing program 2 (id=4284): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c00001000"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000009, 0x114}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x4000000000) openat$vnet(0xffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x327cf3e4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x9, 0x4, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x1c00000, 0x0, 0x0, 0x200000000, 0x0, 0x5, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7ff, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x4000, 0x2, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket(0x1d, 0x3, 0x1) ioctl$SIOCSIFMTU(r6, 0x8931, &(0x7f0000000000)={'ipvlan1\x00'}) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) modify_ldt$write(0x1, &(0x7f0000000500)={0x38, 0x0, 0x600}, 0x10) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad5600008100000800"/24, 0x18) r7 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000007c80)=[{0xf0ff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="18521f340928382642", 0xff61}], 0x1, 0x0, 0x0, 0x10014}], 0x1, 0x80) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000000)) clock_adjtime(0x0, &(0x7f0000000380)={0x3, 0xffffffdfffffffff, 0x4100, 0xb, 0x0, 0x3, 0x400000000, 0x800000000006, 0x2000006, 0x100, 0x0, 0x0, 0x7, 0x9, 0x9f, 0x3, 0x0, 0x4, 0x300000000000, 0xd, 0x2, 0x5, 0x20000, 0x3, 0x0, 0xe}) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd3180030daae5ce10600fc000000000000000000000000000001fe8000000000000000000000000000aa2e008018660000002900015168000000080009f164000000fffe4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800000303fe00"], 0x0) 6.185028815s ago: executing program 3 (id=4285): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = add_key$user(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="11", 0x1, 0x0) r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000100)="ac", 0x1, 0xfffffffffffffffb) r6 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="759eb684925480ece0d6b7a863aee6fccf482cd89876aa12e74c6e0c0e938b7734d19d6de7adc6fb03ecd2c7500d029474418daaa2d76e5098f355bab9bba0bd37130e4219bea1c7d4e6eecaa759e3a6ddeb2829385415bd6718702a03b6333890f5dfdab29d3686f4d5e4ad902a1cf836805a50ad3973bf582ac779239217dce86b0361809ff653b7cf2e655af672c3b9e1a7204a95ffe01fd10b6c6ddec17b32f0cd8e5ecb7ac768500d01fcf2ff01a691a9e759a37d3718cd152652b1478f26f7ddfc3a93466ebe", 0xc9, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r5, r6, r4}, &(0x7f0000000500)=""/126, 0x7e, &(0x7f0000000600)={&(0x7f0000000580)={'md5-generic\x00'}}) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000800)={[{@subsystem='cpuset'}], [{@euid_lt}, {@appraise}, {@seclabel}, {@fowner_eq}, {@subj_role={'subj_role', 0x3d, 'md5-generic\x00'}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'dont_measure'}}, {@subj_user={'subj_user', 0x3d, '}\xeb'}}, {@permit_directio}, {@seclabel}]}) sched_setaffinity(0x0, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_usb_disconnect(0xffffffffffffffff) shutdown(r7, 0x2) 4.966866692s ago: executing program 2 (id=4286): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) open(0x0, 0x60840, 0x1d2) syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r6, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 2.386126641s ago: executing program 1 (id=4288): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x8, {0x2}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) getpeername$packet(r0, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x85c, 0x22882) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x22d1, 0x0) close(r2) ioctl$TCSETSW2(r3, 0x5425, 0x0) unshare(0x68040200) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4, 0x0, 0x400000000}, 0xf) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8912, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x7a}) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x6, 0x101, 0x8, 0x7, 0x1ff], 0x1, 0x0, 0x0, [{}]}, 0x60) close(0xffffffffffffffff) ioperm(0x3, 0x2c3, 0xbc) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000003c0)={0x1, 0x4, 0x2, 0x0, 0xe}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 2.385881915s ago: executing program 2 (id=4289): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) getsockopt(r0, 0x0, 0x5, &(0x7f0000000140)=""/181, &(0x7f0000000000)=0xb5) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES64], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r4, 0x0, 0x0) io_setup(0x8, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB="0000000000000000000000000000dba24517870c9f7ea03c65fe76ad36d4c9c6127d3e190f85f28a71aaf74c000000000000800000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 2.384075614s ago: executing program 0 (id=4296): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) open(0x0, 0x60840, 0x1d2) syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r6, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 2.019796803s ago: executing program 3 (id=4290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) r1 = userfaultfd(0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f00000002c0)={0x2, @pix_mp={0x81, 0xd, 0x31424752, 0x4, 0x3, [{0x3, 0x8df}, {0x9, 0x7f}, {0x3, 0x8}, {0x2, 0x2}, {0x4, 0x100}, {0x8, 0x7}, {0x5, 0x101}, {0x28, 0x3}], 0xc, 0x0, 0x7, 0x0, 0x1}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) r6 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ptrace(0x10, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x5c) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 719.21µs ago: executing program 0 (id=4292): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40381) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x919, &(0x7f0000000300)={0x0, 0x400, 0x400, 0x1000001, 0xf7fffffc}, &(0x7f0000000180), &(0x7f0000000500)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x354, 0xffffffff, 0x1e4, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x3}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, [0xff000000, 0x0, 0x0, 0xff], [0xff000000, 0xff000000, 0x0, 0xffffffff], 'bridge_slave_1\x00', 'team_slave_1\x00', {}, {0xbf820dc36854cbc6}, 0x6, 0x9, 0x2, 0x43}, 0x2f2, 0xc8, 0xec, 0x0, {}, [@common=@inet=@ecn={{0x24}, {0x11, 0x1, 0x6, 0x4}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x2, 0x79496b969af2e55d}, {0x2, 0x3, 0x6}, 0x8, 0x9}}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0xfffd}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3b0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, 0x0, 0x0, 0x7d, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x6) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)="89000000120081ae08060cdc030ec0007f03e3f70003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec537208120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8aa53f38054f0b56a20ff27fff", 0x8b}], 0x1}, 0x24000810) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14004000", @ANYRES16=0x0, @ANYBLOB="0103000000000000000005002300"], 0x14}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r11, 0x0, 0xd}, 0x18) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r12, 0x4b3a, 0x1) ioctl$TCXONC(r12, 0x4b3a, 0x2) 310.627µs ago: executing program 1 (id=4293): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60281, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x7fff) pselect6(0x40, &(0x7f0000000040)={0x5, 0x8, 0xd95, 0x1, 0xffff, 0xfffffffffffffffd, 0x8000000000000000, 0x100000001}, 0x0, &(0x7f0000000140)={0x0, 0x3ff, 0x367d, 0x9, 0xb5, 0x47c, 0x7, 0x9}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000340)={&(0x7f0000000200)={[0x6, 0xce]}, 0x8}) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='inet_sk_error_report\x00', r2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) syz_io_uring_setup(0x2be, &(0x7f0000000240)={0x0, 0x4331, 0x1, 0x2, 0x113}, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0x0) r5 = openat$cuse(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=4294): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40802, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x12, 0xff, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="8526b62bfad63a5dba5e98e19f2780c805c6", 0x0, 0x3, 0x0, 0xfffffffd, 0x0}) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d616e276c65000000000000000000000000000000000028000000000000000003ee7ce4ce1cd5f8ac36480fe3f28d26b4b046f47814725488c10aad11dca0bf6c533510004cb2bfbe312e34dd7c62ebcb65c1ef9ee2e0fb912a24feb54c081b79f26259871707bf59b118783389510cfb95c15f006b52f7108e9067d3b0e3f1bdb0"], 0x54) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x1, 0x100) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) mkdir(0x0, 0x10d) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = syz_open_procfs$namespace(0x0, 0x0) setns(r6, 0x0) write$cgroup_int(r5, &(0x7f0000000340)=0x400, 0x12) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_to_hsr\x00'}, 0x18) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000002c0)={0x6, 'nicvf0\x00', {0xc}, 0xfffe}) kernel console output (not intermixed with test programs): 96] netlink: 'syz.1.3058': attribute type 10 has an invalid length. [ 1128.263985][T21796] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3058'. [ 1128.267387][T21796] dummy0: entered promiscuous mode [ 1128.270073][T21796] bridge0: port 1(dummy0) entered blocking state [ 1128.272140][T21796] bridge0: port 1(dummy0) entered disabled state [ 1128.274829][T21796] dummy0: entered allmulticast mode [ 1129.119799][T21810] netlink: 'syz.1.3069': attribute type 3 has an invalid length. [ 1129.124869][T21810] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3069'. [ 1131.095213][T21836] syz.0.3067: attempt to access beyond end of device [ 1131.095213][T21836] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1131.100789][T21836] XFS (nbd0): SB validate failed with error -5. [ 1132.263750][T21858] netlink: 'syz.0.3072': attribute type 3 has an invalid length. [ 1132.336852][T21858] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3072'. [ 1133.526214][ T2121] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1135.067782][T21853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.072065][T21853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.537390][T21879] wireguard0: entered promiscuous mode [ 1136.547878][T21879] wireguard0: entered allmulticast mode [ 1138.010445][T21900] syz.0.3081: attempt to access beyond end of device [ 1138.010445][T21900] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1138.015774][T21900] XFS (nbd0): SB validate failed with error -5. [ 1138.192507][T21891] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 1141.030453][ T6028] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1141.758685][ T6028] usb 5-1: Using ep0 maxpacket: 16 [ 1141.762456][T21946] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1141.764730][T21946] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1141.767786][T21946] vhci_hcd vhci_hcd.0: Device attached [ 1141.780470][ T6028] usb 5-1: config 0 has no interfaces? [ 1141.787516][ T6028] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1141.791391][ T6028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1141.794684][ T6028] usb 5-1: SerialNumber: syz [ 1141.798973][ T6028] usb 5-1: config 0 descriptor?? [ 1141.842564][T21952] vhci_hcd: connection closed [ 1141.844465][ T46] vhci_hcd: stop threads [ 1141.853629][ T46] vhci_hcd: release socket [ 1141.856974][ T46] vhci_hcd: disconnect device [ 1142.029787][T21939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3089'. [ 1142.034168][T21939] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1142.038359][T21939] netlink: 'syz.0.3089': attribute type 1 has an invalid length. [ 1142.041002][T21939] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3089'. [ 1142.054187][T20225] usb 5-1: USB disconnect, device number 9 [ 1142.591680][T21964] syz_tun: entered allmulticast mode [ 1142.754003][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3096'. [ 1143.768581][T21963] syz_tun: left allmulticast mode [ 1146.601238][T22032] syz.1.3104: attempt to access beyond end of device [ 1146.601238][T22032] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1146.613274][T22032] XFS (nbd1): SB validate failed with error -5. [ 1149.203932][T20225] libceph: connect (1)[c::]:6789 error -101 [ 1149.206789][T20225] libceph: mon0 (1)[c::]:6789 connect error [ 1149.488207][T20225] libceph: connect (1)[c::]:6789 error -101 [ 1149.490292][T20225] libceph: mon0 (1)[c::]:6789 connect error [ 1149.587541][T22047] warn_alloc: 1 callbacks suppressed [ 1149.587553][T22047] syz.3.3106: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1149.596387][T22047] CPU: 1 UID: 0 PID: 22047 Comm: syz.3.3106 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 1149.596413][T22047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1149.596420][T22047] Call Trace: [ 1149.596425][T22047] [ 1149.596429][T22047] dump_stack_lvl+0x16c/0x1f0 [ 1149.596455][T22047] warn_alloc+0x248/0x3a0 [ 1149.596472][T22047] ? __pfx_warn_alloc+0x10/0x10 [ 1149.596492][T22047] ? nf_tables_newset+0x24f2/0x4310 [ 1149.596503][T22047] ? __vmalloc_node_noprof+0xad/0xf0 [ 1149.596519][T22047] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 1149.596536][T22047] ? nf_tables_newset+0x24f2/0x4310 [ 1149.596550][T22047] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1149.596563][T22047] ? __alloc_pages_noprof+0xb/0x1b0 [ 1149.596578][T22047] ? ___kmalloc_large_node+0x84/0x1e0 [ 1149.596593][T22047] __kvmalloc_node_noprof+0x30a/0x620 [ 1149.596607][T22047] ? nf_tables_newset+0x24f2/0x4310 [ 1149.596618][T22047] ? nf_tables_newset+0x24f2/0x4310 [ 1149.596626][T22047] ? nft_hash_buckets+0x77/0xa0 [ 1149.596635][T22047] ? nft_pipapo_estimate+0x17f/0x3b0 [ 1149.596651][T22047] ? nf_tables_newset+0x24f2/0x4310 [ 1149.596660][T22047] nf_tables_newset+0x24f2/0x4310 [ 1149.596674][T22047] ? __pfx_nf_tables_newset+0x10/0x10 [ 1149.596685][T22047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1149.596703][T22047] ? __nla_validate_parse+0x600/0x2880 [ 1149.596727][T22047] ? __nla_parse+0x40/0x60 [ 1149.596752][T22047] nfnetlink_rcv_batch+0x18ed/0x2330 [ 1149.596774][T22047] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 1149.596791][T22047] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1149.596805][T22047] ? kmalloc_reserve+0x18b/0x2c0 [ 1149.596817][T22047] ? __alloc_skb+0x166/0x380 [ 1149.596831][T22047] ? netlink_alloc_large_skb+0x69/0x130 [ 1149.596842][T22047] ? netlink_sendmsg+0x6a1/0xdd0 [ 1149.596873][T22047] ? __nla_parse+0x40/0x60 [ 1149.596886][T22047] nfnetlink_rcv+0x3c1/0x430 [ 1149.596899][T22047] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1149.596914][T22047] ? is_vmalloc_addr+0x86/0xa0 [ 1149.596931][T22047] netlink_unicast+0x53d/0x7f0 [ 1149.596944][T22047] ? __pfx_netlink_unicast+0x10/0x10 [ 1149.596960][T22047] netlink_sendmsg+0x8d1/0xdd0 [ 1149.596974][T22047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1149.596987][T22047] ? __import_iovec+0x1dd/0x650 [ 1149.597001][T22047] ____sys_sendmsg+0xa95/0xc70 [ 1149.597015][T22047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1149.597027][T22047] ? get_compat_msghdr+0x11a/0x170 [ 1149.597040][T22047] ? __pfx_futex_wake_mark+0x10/0x10 [ 1149.597057][T22047] ___sys_sendmsg+0x134/0x1d0 [ 1149.597075][T22047] ? __pfx____sys_sendmsg+0x10/0x10 [ 1149.597098][T22047] ? find_held_lock+0x2b/0x80 [ 1149.597117][T22047] __sys_sendmsg+0x16d/0x220 [ 1149.597127][T22047] ? __pfx___sys_sendmsg+0x10/0x10 [ 1149.597136][T22047] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 1149.597155][T22047] ? rcu_is_watching+0x12/0xc0 [ 1149.597169][T22047] __do_fast_syscall_32+0x7c/0x3a0 [ 1149.597181][T22047] do_fast_syscall_32+0x32/0x80 [ 1149.597190][T22047] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1149.597204][T22047] RIP: 0023:0xf7fb4579 [ 1149.597212][T22047] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1149.597222][T22047] RSP: 002b:00000000f4c7155c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1149.597232][T22047] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800000c0 [ 1149.597238][T22047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1149.597244][T22047] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1149.597250][T22047] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1149.597255][T22047] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1149.597280][T22047] [ 1149.597431][T22047] Mem-Info: [ 1149.823067][T22067] ceph: No mds server is up or the cluster is laggy [ 1149.844861][T22047] active_anon:12630 inactive_anon:14009 isolated_anon:47 [ 1149.844861][T22047] active_file:12923 inactive_file:2507 isolated_file:148 [ 1149.844861][T22047] unevictable:1773 dirty:245 writeback:0 [ 1149.844861][T22047] slab_reclaimable:6150 slab_unreclaimable:65330 [ 1149.844861][T22047] mapped:36643 shmem:24322 pagetables:1392 [ 1149.844861][T22047] sec_pagetables:340 bounce:0 [ 1149.844861][T22047] kernel_misc_reclaimable:0 [ 1149.844861][T22047] free:36195 free_pcp:6295 free_cma:0 [ 1149.866021][T22047] Node 0 active_anon:11912kB inactive_anon:144kB active_file:0kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:11616kB dirty:0kB writeback:0kB shmem:16988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7912kB pagetables:1760kB sec_pagetables:1220kB all_unreclaimable? no Balloon:0kB [ 1149.878752][T22047] Node 1 active_anon:38608kB inactive_anon:55892kB active_file:51892kB inactive_file:10020kB unevictable:3556kB isolated(anon):188kB isolated(file):492kB mapped:134956kB dirty:980kB writeback:0kB shmem:80300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5132kB pagetables:3808kB sec_pagetables:140kB all_unreclaimable? no Balloon:0kB [ 1149.891750][T22047] Node 0 DMA free:2020kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:252kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:280kB local_pcp:140kB free_cma:0kB [ 1149.902550][T22047] lowmem_reserve[]: 0 289 289 289 289 [ 1149.904366][T22047] Node 0 DMA32 free:16192kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:2048KB free_highatomic:44KB active_anon:11660kB inactive_anon:144kB active_file:0kB inactive_file:8kB unevictable:3536kB writepending:0kB present:1032196kB managed:296672kB mlocked:0kB bounce:0kB free_pcp:1456kB local_pcp:536kB free_cma:0kB [ 1149.914279][T22047] lowmem_reserve[]: 0 0 0 0 0 [ 1149.916970][T22047] Node 1 DMA32 free:126256kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:4096KB free_highatomic:2804KB active_anon:38608kB inactive_anon:55892kB active_file:52292kB inactive_file:10020kB unevictable:3556kB writepending:980kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:25072kB local_pcp:10444kB free_cma:0kB [ 1149.927192][T22047] lowmem_reserve[]: 0 0 0 0 0 [ 1149.928795][T22047] Node 0 DMA: 5*4kB (U) 24*8kB (U) 3*16kB (UM) 11*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2020kB [ 1149.933353][T22047] Node 0 DMA32: 96*4kB (UMEH) 110*8kB (UEH) 33*16kB (UME) 100*32kB (UEH) 57*64kB (UE) 43*128kB (UME) 8*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16192kB [ 1149.938902][T22047] Node 1 DMA32: 707*4kB (UMEH) 600*8kB (UMEH) 474*16kB (UMEH) 421*32kB (UMEH) 283*64kB (UMEH) 84*128kB (UMEH) 51*256kB (UMEH) 35*512kB (UMEH) 18*1024kB (UME) 5*2048kB (U) 2*4096kB (U) = 125388kB [ 1149.944928][T22047] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1149.948127][T22047] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1149.951115][T22047] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1150.012723][T22047] Node 1 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1150.015619][T22047] 37635 total pagecache pages [ 1150.017092][T22047] 561 pages in swap cache [ 1150.018444][T22047] Free swap = 84920kB [ 1150.019739][T22047] Total swap = 124996kB [ 1150.021041][T22047] 524155 pages RAM [ 1150.022271][T22047] 0 pages HighMem/MovableOnly [ 1150.034588][T22047] 209080 pages reserved [ 1150.047168][T22047] 0 pages cma reserved [ 1150.205937][T22084] program syz.0.3115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1152.864207][T22122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3123'. [ 1153.043014][T22118] wireguard0: entered promiscuous mode [ 1153.044948][T22118] wireguard0: entered allmulticast mode [ 1153.532284][T22144] overlayfs: missing 'lowerdir' [ 1153.663218][T22151] IPVS: Error connecting to the multicast addr [ 1153.688957][T22150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3126'. [ 1157.374066][T22206] overlayfs: missing 'lowerdir' [ 1157.377719][T22206] IPVS: Error connecting to the multicast addr [ 1158.115192][T22212] Cannot find del_set index 3 as target [ 1159.116362][T22235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3145'. [ 1159.119202][T22235] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3145'. [ 1159.713565][ C2] sr 2:0:0:0: [sr0] tag#12 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1159.716717][ C2] sr 2:0:0:0: [sr0] tag#12 CDB: ATA command pass through(16) [ 1159.719108][ C2] sr 2:0:0:0: [sr0] tag#12 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1159.722540][ C2] sr 2:0:0:0: [sr0] tag#12 CDB[10]: 05 c6 [ 1159.774938][T22240] overlayfs: missing 'lowerdir' [ 1159.788934][T22240] IPVS: Error connecting to the multicast addr [ 1160.002309][T22247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3146'. [ 1160.005218][T22247] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3146'. [ 1160.020661][T22247] geneve3: entered promiscuous mode [ 1160.022461][T22247] geneve3: entered allmulticast mode [ 1161.825932][T22269] program syz.3.3153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1164.921392][ C3] sr 2:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1164.925806][ C3] sr 2:0:0:0: [sr0] tag#0 CDB: ATA command pass through(16) [ 1164.928897][ C3] sr 2:0:0:0: [sr0] tag#0 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1164.932722][ C3] sr 2:0:0:0: [sr0] tag#0 CDB[10]: 05 c6 [ 1164.972916][T22326] overlayfs: missing 'lowerdir' [ 1164.977163][T22326] IPVS: Error connecting to the multicast addr [ 1166.042518][T22339] overlayfs: missing 'lowerdir' [ 1166.046009][T22339] IPVS: Error connecting to the multicast addr [ 1168.451646][T20225] libceph: connect (1)[c::]:6789 error -101 [ 1168.454648][T20225] libceph: mon0 (1)[c::]:6789 connect error [ 1168.849811][T20225] libceph: connect (1)[c::]:6789 error -101 [ 1168.854578][T20225] libceph: mon0 (1)[c::]:6789 connect error [ 1169.130315][T22376] ceph: No mds server is up or the cluster is laggy [ 1170.306466][T22407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3185'. [ 1170.310011][T22407] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3185'. [ 1174.702634][T22462] wireguard0: entered promiscuous mode [ 1174.704330][T22462] wireguard0: entered allmulticast mode [ 1175.337043][ C2] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1175.341327][ C2] sr 2:0:0:0: [sr0] tag#22 CDB: ATA command pass through(16) [ 1175.344440][ C2] sr 2:0:0:0: [sr0] tag#22 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1175.348331][ C2] sr 2:0:0:0: [sr0] tag#22 CDB[10]: 05 c6 [ 1175.493475][T22477] overlayfs: missing 'lowerdir' [ 1175.503486][T22477] IPVS: Error connecting to the multicast addr [ 1177.632699][T22515] cgroup: Unknown subsys name 'cpuset' [ 1179.299122][T22534] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3213'. [ 1184.638937][T22612] overlayfs: missing 'lowerdir' [ 1184.642798][T22612] IPVS: Error connecting to the multicast addr [ 1189.370524][T20225] libceph: connect (1)[c::]:6789 error -101 [ 1189.373259][T20225] libceph: mon0 (1)[c::]:6789 connect error [ 1189.652872][T20225] libceph: connect (1)[c::]:6789 error -101 [ 1189.655072][T20225] libceph: mon0 (1)[c::]:6789 connect error [ 1189.744998][T22664] ceph: No mds server is up or the cluster is laggy [ 1189.967515][T22648] syz.1.3235: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1189.984442][T22648] CPU: 1 UID: 0 PID: 22648 Comm: syz.1.3235 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 1189.984457][T22648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1189.984464][T22648] Call Trace: [ 1189.984468][T22648] [ 1189.984472][T22648] dump_stack_lvl+0x16c/0x1f0 [ 1189.984492][T22648] warn_alloc+0x248/0x3a0 [ 1189.984509][T22648] ? __pfx_warn_alloc+0x10/0x10 [ 1189.984530][T22648] ? nf_tables_newset+0x24f2/0x4310 [ 1189.984540][T22648] ? __vmalloc_node_noprof+0xad/0xf0 [ 1189.984556][T22648] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 1189.984573][T22648] ? nf_tables_newset+0x24f2/0x4310 [ 1189.984586][T22648] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1189.984599][T22648] ? __alloc_pages_noprof+0xb/0x1b0 [ 1189.984614][T22648] ? ___kmalloc_large_node+0x84/0x1e0 [ 1189.984629][T22648] __kvmalloc_node_noprof+0x30a/0x620 [ 1189.984644][T22648] ? nf_tables_newset+0x24f2/0x4310 [ 1189.984653][T22648] ? net_generic+0xea/0x2a0 [ 1189.984663][T22648] ? nf_tables_newset+0x24f2/0x4310 [ 1189.984671][T22648] ? nft_hash_buckets+0x77/0xa0 [ 1189.984680][T22648] ? nft_pipapo_estimate+0x17f/0x3b0 [ 1189.984695][T22648] ? nf_tables_newset+0x24f2/0x4310 [ 1189.984704][T22648] nf_tables_newset+0x24f2/0x4310 [ 1189.984719][T22648] ? __pfx_nf_tables_newset+0x10/0x10 [ 1189.984733][T22648] ? __nla_validate_parse+0x600/0x2880 [ 1189.984751][T22648] ? rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0 [ 1189.984770][T22648] ? __nla_parse+0x40/0x60 [ 1189.984782][T22648] nfnetlink_rcv_batch+0x18ed/0x2330 [ 1189.984804][T22648] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 1189.984842][T22648] ? __nla_parse+0x40/0x60 [ 1189.984855][T22648] nfnetlink_rcv+0x3c1/0x430 [ 1189.984868][T22648] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1189.984883][T22648] ? is_vmalloc_addr+0x86/0xa0 [ 1189.984899][T22648] netlink_unicast+0x53d/0x7f0 [ 1189.984914][T22648] ? __pfx_netlink_unicast+0x10/0x10 [ 1189.984930][T22648] netlink_sendmsg+0x8d1/0xdd0 [ 1189.984944][T22648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1189.984956][T22648] ? security_socket_sendmsg+0x51/0x240 [ 1189.984968][T22648] ? __sanitizer_cov_trace_pc+0x66/0x70 [ 1189.984986][T22648] ____sys_sendmsg+0xa95/0xc70 [ 1189.985001][T22648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1189.985013][T22648] ? get_compat_msghdr+0x11a/0x170 [ 1189.985026][T22648] ? __pfx_futex_wake_mark+0x10/0x10 [ 1189.985043][T22648] ___sys_sendmsg+0x134/0x1d0 [ 1189.985061][T22648] ? __pfx____sys_sendmsg+0x10/0x10 [ 1189.985084][T22648] ? find_held_lock+0x2b/0x80 [ 1189.985103][T22648] __sys_sendmsg+0x16d/0x220 [ 1189.985113][T22648] ? __pfx___sys_sendmsg+0x10/0x10 [ 1189.985126][T22648] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 1189.985145][T22648] ? rcu_is_watching+0x12/0xc0 [ 1189.985157][T22648] __do_fast_syscall_32+0x7c/0x3a0 [ 1189.985169][T22648] do_fast_syscall_32+0x32/0x80 [ 1189.985179][T22648] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1189.985192][T22648] RIP: 0023:0xf711e579 [ 1189.985200][T22648] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1189.985211][T22648] RSP: 002b:00000000f488655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1189.985221][T22648] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800000c0 [ 1189.985228][T22648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1189.985234][T22648] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1189.985240][T22648] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1189.985245][T22648] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1189.985258][T22648] [ 1189.985262][T22648] Mem-Info: [ 1190.148623][T22648] active_anon:11655 inactive_anon:7946 isolated_anon:0 [ 1190.148623][T22648] active_file:2456 inactive_file:11585 isolated_file:0 [ 1190.148623][T22648] unevictable:1769 dirty:67 writeback:0 [ 1190.148623][T22648] slab_reclaimable:6182 slab_unreclaimable:64940 [ 1190.148623][T22648] mapped:36291 shmem:19550 pagetables:1394 [ 1190.148623][T22648] sec_pagetables:340 bounce:0 [ 1190.148623][T22648] kernel_misc_reclaimable:0 [ 1190.148623][T22648] free:47048 free_pcp:4899 free_cma:0 [ 1190.162614][T22648] Node 0 active_anon:4808kB inactive_anon:184kB active_file:8kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4768kB dirty:0kB writeback:0kB shmem:10144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7876kB pagetables:1848kB sec_pagetables:1220kB all_unreclaimable? no Balloon:0kB [ 1190.176970][T22648] Node 1 active_anon:42712kB inactive_anon:31600kB active_file:9816kB inactive_file:46340kB unevictable:3540kB isolated(anon):0kB isolated(file):0kB mapped:141196kB dirty:268kB writeback:0kB shmem:68856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4908kB pagetables:3728kB sec_pagetables:140kB all_unreclaimable? no Balloon:0kB [ 1190.187592][T22648] Node 0 DMA free:2016kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:380kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1190.202389][T22648] lowmem_reserve[]: 0 289 289 289 289 [ 1190.204129][T22648] Node 0 DMA32 free:16512kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:2048KB free_highatomic:44KB active_anon:4468kB inactive_anon:184kB active_file:8kB inactive_file:0kB unevictable:3536kB writepending:0kB present:1032196kB managed:296672kB mlocked:0kB bounce:0kB free_pcp:1756kB local_pcp:656kB free_cma:0kB [ 1190.215013][T22648] lowmem_reserve[]: 0 0 0 0 0 [ 1190.216616][T22648] Node 1 DMA32 free:161520kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB free_highatomic:1084KB active_anon:44432kB inactive_anon:31600kB active_file:9816kB inactive_file:46340kB unevictable:3540kB writepending:332kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:23024kB local_pcp:14164kB free_cma:0kB [ 1190.226592][T22648] lowmem_reserve[]: 0 0 0 0 0 [ 1190.228118][T22648] Node 0 DMA: 1*4kB (U) 22*8kB (U) 7*16kB (UM) 10*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2020kB [ 1190.337168][T22648] Node 0 DMA32: 14*4kB (EH) 43*8kB (UEH) 11*16kB (UE) 114*32kB (MEH) 66*64kB (UME) 47*128kB (UME) 8*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16512kB [ 1190.342534][T22648] Node 1 DMA32: 209*4kB (MEH) 1546*8kB (UMEH) 690*16kB (UMH) 589*32kB (UMEH) 323*64kB (UMEH) 95*128kB (UMEH) 56*256kB (UMEH) 31*512kB (UME) 24*1024kB (UME) 13*2048kB (UM) 3*4096kB (UM) = 169620kB [ 1190.402133][T22648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1190.406627][T22648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1190.509547][T22648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1190.513387][T22648] Node 1 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1190.516413][T22648] 33184 total pagecache pages [ 1190.517716][T22648] 334 pages in swap cache [ 1190.529255][T22648] Free swap = 74156kB [ 1190.530574][T22648] Total swap = 124996kB [ 1190.531919][T22648] 524155 pages RAM [ 1190.533100][T22648] 0 pages HighMem/MovableOnly [ 1190.534573][T22648] 209080 pages reserved [ 1190.535885][T22648] 0 pages cma reserved [ 1191.142643][T22692] overlayfs: missing 'lowerdir' [ 1191.146275][T22692] IPVS: Error connecting to the multicast addr [ 1191.211656][T22697] overlayfs: missing 'lowerdir' [ 1191.215284][T22697] IPVS: Error connecting to the multicast addr [ 1193.201432][T22718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3249'. [ 1193.210631][T22718] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3249'. [ 1193.573753][T22720] ceph: No mds server is up or the cluster is laggy [ 1194.296765][T22747] overlayfs: missing 'lowerdir' [ 1194.344327][T22744] IPVS: Error connecting to the multicast addr [ 1194.929295][T22756] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3256'. [ 1196.847827][T22762] wireguard0: entered promiscuous mode [ 1196.849615][T22762] wireguard0: entered allmulticast mode [ 1198.957941][T22801] netlink: 'syz.2.3271': attribute type 3 has an invalid length. [ 1198.963336][T22801] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3271'. [ 1203.374201][T22828] wireguard0: entered promiscuous mode [ 1203.376168][T22828] wireguard0: entered allmulticast mode [ 1204.558202][T22845] netlink: 'syz.1.3280': attribute type 3 has an invalid length. [ 1204.577395][T22845] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3280'. [ 1208.789434][T22898] overlayfs: missing 'lowerdir' [ 1208.792954][T22898] IPVS: Error connecting to the multicast addr [ 1209.259213][ T5983] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1212.242541][T22919] netlink: 'syz.3.3296': attribute type 3 has an invalid length. [ 1212.246867][T22919] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3296'. [ 1213.391910][T22935] overlayfs: missing 'lowerdir' [ 1213.567742][T22935] IPVS: Error connecting to the multicast addr [ 1214.192626][T22950] wireguard0: entered promiscuous mode [ 1214.202478][T22950] wireguard0: entered allmulticast mode [ 1214.839316][T22936] cgroup: Unknown subsys name 'cpuset' [ 1215.315103][T22959] netlink: 'syz.0.3305': attribute type 3 has an invalid length. [ 1215.319997][T22959] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3305'. [ 1217.717008][T22994] netlink: 'syz.0.3309': attribute type 1 has an invalid length. [ 1217.719665][T22994] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3309'. [ 1218.767597][T23018] overlayfs: missing 'lowerdir' [ 1218.775847][T23018] IPVS: Error connecting to the multicast addr [ 1221.999480][T23067] binder: 23066:23067 ioctl c0046209 0 returned -22 [ 1222.819503][T23078] cgroup: Unknown subsys name 'cpuset' [ 1223.758049][T23090] cgroup: Unknown subsys name 'cpuset' [ 1228.960207][T23158] loop6: detected capacity change from 0 to 524287999 [ 1229.028340][T23159] netlink: 'syz.0.3345': attribute type 12 has an invalid length. [ 1229.332396][T23164] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1230.549942][T23187] loop6: detected capacity change from 0 to 524287999 [ 1231.528256][T23192] cgroup: Unknown subsys name 'cpuset' [ 1234.443758][T23233] set match dimension is over the limit! [ 1235.039151][T23238] wireguard0: entered promiscuous mode [ 1235.040847][T23238] wireguard0: entered allmulticast mode [ 1235.425172][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 1237.632109][T10720] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1237.632165][T16079] Bluetooth: hci4: command 0x1003 tx timeout [ 1239.695499][T23304] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1239.831823][T23310] netlink: 'syz.2.3377': attribute type 1 has an invalid length. [ 1239.835642][T23310] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3377'. [ 1240.024835][T23311] wireguard0: entered promiscuous mode [ 1240.026891][T23311] wireguard0: entered allmulticast mode [ 1240.786384][T23323] cgroup: Unknown subsys name 'cpuset' [ 1241.317581][T23328] netlink: 'syz.1.3383': attribute type 5 has an invalid length. [ 1241.320133][T23328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3383'. [ 1241.623134][T23332] overlayfs: missing 'lowerdir' [ 1241.649394][T23332] IPVS: Error connecting to the multicast addr [ 1242.935863][T23344] cgroup: Unknown subsys name 'cpuset' [ 1244.713699][T23362] loop6: detected capacity change from 0 to 524287999 [ 1244.782640][T23364] netlink: 'syz.2.3391': attribute type 12 has an invalid length. [ 1245.778666][T23378] loop6: detected capacity change from 0 to 524287999 [ 1246.320533][T23387] cgroup: Unknown subsys name 'cpuset' [ 1248.915202][ T1171] Bluetooth: hci4: Frame reassembly failed (-84) [ 1251.134513][T10720] Bluetooth: hci4: command 0x1003 tx timeout [ 1251.140239][T16079] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1254.459362][T23463] cgroup: Unknown subsys name 'cpuset' [ 1255.391331][T23471] cgroup: Unknown subsys name 'cpuset' [ 1257.516815][T23492] wireguard0: entered promiscuous mode [ 1257.518636][T23492] wireguard0: entered allmulticast mode [ 1258.638907][T23517] cgroup: Unknown subsys name 'cpuset' [ 1259.728440][T23527] cgroup: Unknown subsys name 'cpuset' [ 1261.465312][T23540] cgroup: Unknown subsys name 'cpuset' [ 1264.002856][T23545] mkiss: ax0: crc mode is auto. [ 1265.336859][T23568] loop6: detected capacity change from 0 to 524287999 [ 1267.106216][T23596] cgroup: Unknown subsys name 'cpuset' [ 1268.699821][T23611] IPv6: Can't replace route, no match found [ 1269.604645][T23620] cgroup: Unknown subsys name 'cpuset' [ 1270.103041][T23621] cgroup: Unknown subsys name 'cpuset' [ 1270.292298][T23626] lo speed is unknown, defaulting to 1000 [ 1270.321124][T23626] lo speed is unknown, defaulting to 1000 [ 1270.335737][T23626] lo speed is unknown, defaulting to 1000 [ 1273.551426][T23640] cgroup: Unknown subsys name 'cpuset' [ 1276.612292][T23689] input: syz1 as /devices/virtual/input/input274 [ 1279.253766][ C3] sr 2:0:0:0: [sr0] tag#13 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1279.257864][ C3] sr 2:0:0:0: [sr0] tag#13 CDB: ATA command pass through(16) [ 1279.260638][ C3] sr 2:0:0:0: [sr0] tag#13 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1279.263652][ C3] sr 2:0:0:0: [sr0] tag#13 CDB[10]: 05 c6 [ 1279.359060][T23710] overlayfs: missing 'lowerdir' [ 1279.375862][T23710] IPVS: Error connecting to the multicast addr [ 1280.578979][T23725] cgroup: Unknown subsys name 'cpuset' [ 1280.911911][T23734] netlink: 'syz.0.3470': attribute type 3 has an invalid length. [ 1280.916849][T23734] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3470'. [ 1281.155233][T23739] cgroup: Unknown subsys name 'cpuset' [ 1284.241430][T23750] set match dimension is over the limit! [ 1287.853438][ C3] sr 2:0:0:0: [sr0] tag#1 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1287.856593][ C3] sr 2:0:0:0: [sr0] tag#1 CDB: ATA command pass through(16) [ 1287.858779][ C3] sr 2:0:0:0: [sr0] tag#1 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1287.861603][ C3] sr 2:0:0:0: [sr0] tag#1 CDB[10]: 05 c6 [ 1287.921825][T23806] overlayfs: missing 'lowerdir' [ 1287.933083][T23806] IPVS: Error connecting to the multicast addr [ 1292.100716][ C3] sr 2:0:0:0: [sr0] tag#8 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1292.104303][ C3] sr 2:0:0:0: [sr0] tag#8 CDB: ATA command pass through(16) [ 1292.106660][ C3] sr 2:0:0:0: [sr0] tag#8 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1292.109516][ C3] sr 2:0:0:0: [sr0] tag#8 CDB[10]: 05 c6 [ 1292.137348][T23868] overlayfs: missing 'lowerdir' [ 1292.161296][T23868] IPVS: Error connecting to the multicast addr [ 1293.186443][ C3] sr 2:0:0:0: [sr0] tag#13 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1293.189533][ C3] sr 2:0:0:0: [sr0] tag#13 CDB: ATA command pass through(16) [ 1293.191846][ C3] sr 2:0:0:0: [sr0] tag#13 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1293.194622][ C3] sr 2:0:0:0: [sr0] tag#13 CDB[10]: 05 c6 [ 1293.235198][T23888] overlayfs: missing 'lowerdir' [ 1293.240868][T23888] IPVS: Error connecting to the multicast addr [ 1295.481732][ C3] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1295.484825][ C3] sr 2:0:0:0: [sr0] tag#22 CDB: ATA command pass through(16) [ 1295.487039][ C3] sr 2:0:0:0: [sr0] tag#22 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1295.489913][ C3] sr 2:0:0:0: [sr0] tag#22 CDB[10]: 05 c6 [ 1295.538582][T23925] overlayfs: missing 'lowerdir' [ 1295.563798][T23925] IPVS: Error connecting to the multicast addr [ 1296.752733][ C3] sr 2:0:0:0: [sr0] tag#28 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1296.755962][ C3] sr 2:0:0:0: [sr0] tag#28 CDB: ATA command pass through(16) [ 1296.758267][ C3] sr 2:0:0:0: [sr0] tag#28 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1296.761151][ C3] sr 2:0:0:0: [sr0] tag#28 CDB[10]: 05 c6 [ 1296.789505][T23949] overlayfs: missing 'lowerdir' [ 1296.792585][T23949] IPVS: Error connecting to the multicast addr [ 1298.669799][T23979] netlink: 'syz.2.3525': attribute type 3 has an invalid length. [ 1298.676585][T23979] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3525'. [ 1298.920687][ C3] sr 2:0:0:0: [sr0] tag#2 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1298.924569][ C3] sr 2:0:0:0: [sr0] tag#2 CDB: ATA command pass through(16) [ 1298.926762][ C3] sr 2:0:0:0: [sr0] tag#2 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1298.929658][ C3] sr 2:0:0:0: [sr0] tag#2 CDB[10]: 05 c6 [ 1298.995282][T23989] overlayfs: missing 'lowerdir' [ 1299.010370][T23989] IPVS: Error connecting to the multicast addr [ 1300.283360][ C3] sr 2:0:0:0: [sr0] tag#6 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1300.287665][ C3] sr 2:0:0:0: [sr0] tag#6 CDB: ATA command pass through(16) [ 1300.290721][ C3] sr 2:0:0:0: [sr0] tag#6 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1300.294568][ C3] sr 2:0:0:0: [sr0] tag#6 CDB[10]: 05 c6 [ 1300.326819][T24015] overlayfs: missing 'lowerdir' [ 1300.330231][T24015] IPVS: Error connecting to the multicast addr [ 1304.039670][T24070] cgroup: Unknown subsys name 'cpuset' [ 1306.833281][T24101] cgroup: Unknown subsys name 'cpuset' [ 1309.513617][ C1] sr 2:0:0:0: [sr0] tag#17 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1309.518433][ C1] sr 2:0:0:0: [sr0] tag#17 CDB: ATA command pass through(16) [ 1309.521786][ C1] sr 2:0:0:0: [sr0] tag#17 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1309.526141][ C1] sr 2:0:0:0: [sr0] tag#17 CDB[10]: 05 c6 [ 1309.564463][T24133] overlayfs: missing 'lowerdir' [ 1309.569423][T24133] IPVS: Error connecting to the multicast addr [ 1309.657799][ C3] sr 2:0:0:0: [sr0] tag#13 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1309.661019][ C3] sr 2:0:0:0: [sr0] tag#13 CDB: ATA command pass through(16) [ 1309.663336][ C3] sr 2:0:0:0: [sr0] tag#13 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1309.666333][ C3] sr 2:0:0:0: [sr0] tag#13 CDB[10]: 05 c6 [ 1309.803164][T24137] overlayfs: missing 'lowerdir' [ 1309.812483][T24137] IPVS: Error connecting to the multicast addr [ 1310.280457][T24145] cgroup: Unknown subsys name 'cpuset' [ 1312.781791][ C1] sr 2:0:0:0: [sr0] tag#28 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1312.786123][ C1] sr 2:0:0:0: [sr0] tag#28 CDB: ATA command pass through(16) [ 1312.789286][ C1] sr 2:0:0:0: [sr0] tag#28 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1312.793213][ C1] sr 2:0:0:0: [sr0] tag#28 CDB[10]: 05 c6 [ 1312.885170][T24186] cgroup: Unknown subsys name 'cpuset' [ 1312.912564][T24189] overlayfs: missing 'lowerdir' [ 1312.916983][T24189] IPVS: Error connecting to the multicast addr [ 1316.663767][T24252] cgroup: Unknown subsys name 'cpuset' [ 1318.370794][T24281] netlink: 'syz.3.3594': attribute type 3 has an invalid length. [ 1318.384342][T24281] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3594'. [ 1319.439285][T24297] cgroup: Unknown subsys name 'cpuset' [ 1320.628462][T24307] cgroup: Unknown subsys name 'cpuset' [ 1322.135776][T24311] cgroup: Unknown subsys name 'cpuset' [ 1322.591640][ C0] sr 2:0:0:0: [sr0] tag#15 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1322.594869][ C0] sr 2:0:0:0: [sr0] tag#15 CDB: ATA command pass through(16) [ 1322.597188][ C0] sr 2:0:0:0: [sr0] tag#15 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1322.600100][ C0] sr 2:0:0:0: [sr0] tag#15 CDB[10]: 05 c6 [ 1322.703922][T24313] overlayfs: missing 'lowerdir' [ 1322.707207][T24313] IPVS: Error connecting to the multicast addr [ 1323.830050][ C3] sr 2:0:0:0: [sr0] tag#21 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1323.833392][ C3] sr 2:0:0:0: [sr0] tag#21 CDB: ATA command pass through(16) [ 1323.835779][ C3] sr 2:0:0:0: [sr0] tag#21 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1323.839804][ C3] sr 2:0:0:0: [sr0] tag#21 CDB[10]: 05 c6 [ 1323.877504][T24332] overlayfs: missing 'lowerdir' [ 1323.882491][T24332] IPVS: Error connecting to the multicast addr [ 1325.762623][T24353] cgroup: Unknown subsys name 'cpuset' [ 1326.922497][T24372] cgroup: Unknown subsys name 'cpuset' [ 1327.505502][T24388] loop6: detected capacity change from 0 to 524287999 [ 1327.970213][T24389] set match dimension is over the limit! [ 1329.857036][ C3] sr 2:0:0:0: [sr0] tag#1 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1329.860258][ C3] sr 2:0:0:0: [sr0] tag#1 CDB: ATA command pass through(16) [ 1329.862610][ C3] sr 2:0:0:0: [sr0] tag#1 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1329.866019][ C3] sr 2:0:0:0: [sr0] tag#1 CDB[10]: 05 c6 [ 1329.896792][T24419] overlayfs: missing 'lowerdir' [ 1329.905498][T24419] IPVS: Error connecting to the multicast addr [ 1329.982545][T24423] netlink: 'syz.3.3629': attribute type 3 has an invalid length. [ 1329.996660][T24423] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3629'. [ 1330.359655][T24427] cgroup: Unknown subsys name 'cpuset' [ 1331.867280][T24451] set match dimension is over the limit! [ 1331.987477][T20325] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1332.158701][T20325] usb 8-1: Using ep0 maxpacket: 8 [ 1332.165506][T20325] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1332.170020][T20325] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1332.173553][T20325] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.179637][T20325] usb 8-1: config 0 descriptor?? [ 1332.470219][T20325] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1332.822496][T24458] loop6: detected capacity change from 0 to 524287999 [ 1334.022569][T24473] netlink: 'syz.2.3639': attribute type 3 has an invalid length. [ 1334.057092][T24473] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3639'. [ 1334.197427][T24470] netlink: 'syz.1.3638': attribute type 2 has an invalid length. [ 1334.199954][T24470] netlink: 'syz.1.3638': attribute type 8 has an invalid length. [ 1334.202557][T24470] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3638'. [ 1334.407328][ C2] sr 2:0:0:0: [sr0] tag#8 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1334.410692][ C2] sr 2:0:0:0: [sr0] tag#8 CDB: ATA command pass through(16) [ 1334.412986][ C2] sr 2:0:0:0: [sr0] tag#8 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1334.415964][ C2] sr 2:0:0:0: [sr0] tag#8 CDB[10]: 05 c6 [ 1334.636790][T24483] cgroup: Unknown subsys name 'cpuset' [ 1334.642826][T20225] usb 8-1: USB disconnect, device number 10 [ 1334.984888][T24480] overlayfs: missing 'lowerdir' [ 1334.989786][T24480] IPVS: Error connecting to the multicast addr [ 1337.110836][T24494] IPv6: Can't replace route, no match found [ 1337.820763][T24499] cgroup: Unknown subsys name 'cpuset' [ 1339.929461][T24519] mkiss: ax0: crc mode is auto. [ 1339.950731][ C0] sr 2:0:0:0: [sr0] tag#13 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1339.954069][ C0] sr 2:0:0:0: [sr0] tag#13 CDB: ATA command pass through(16) [ 1339.956428][ C0] sr 2:0:0:0: [sr0] tag#13 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1339.959369][ C0] sr 2:0:0:0: [sr0] tag#13 CDB[10]: 05 c6 [ 1340.079741][T24521] overlayfs: missing 'lowerdir' [ 1340.087066][T24521] IPVS: Error connecting to the multicast addr [ 1340.933704][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 1341.599569][T24545] cgroup: Unknown subsys name 'cpuset' [ 1343.073724][T16079] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1343.123596][T24555] netlink: 'syz.2.3661': attribute type 3 has an invalid length. [ 1343.135769][T24555] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3661'. [ 1343.925862][T24567] loop6: detected capacity change from 0 to 524287999 [ 1343.966808][T24563] block device autoloading is deprecated and will be removed. [ 1346.528948][T24611] IPv6: Can't replace route, no match found [ 1346.967740][T24621] lo speed is unknown, defaulting to 1000 [ 1346.972956][T24621] lo speed is unknown, defaulting to 1000 [ 1346.978401][T24621] lo speed is unknown, defaulting to 1000 [ 1347.530513][ T1139] Bluetooth: hci4: Frame reassembly failed (-84) [ 1349.159957][T24643] cgroup: Unknown subsys name 'cpuset' [ 1349.744599][T16079] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1350.066954][T24649] random: crng reseeded on system resumption [ 1350.149386][T24653] netlink: 'syz.1.3681': attribute type 3 has an invalid length. [ 1350.165856][T24653] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3681'. [ 1350.260414][T24658] loop6: detected capacity change from 0 to 524287999 [ 1351.646780][T24671] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3683'. [ 1351.650330][T24671] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1353.668249][T24698] netlink: 'syz.0.3691': attribute type 3 has an invalid length. [ 1353.679992][T24698] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3691'. [ 1354.032028][T24702] cgroup: Unknown subsys name 'cpuset' [ 1355.875030][T24710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3692'. [ 1356.966128][T24725] netlink: 'syz.2.3695': attribute type 2 has an invalid length. [ 1356.968607][T24725] netlink: 'syz.2.3695': attribute type 8 has an invalid length. [ 1356.971117][T24725] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3695'. [ 1359.782520][T24752] lo speed is unknown, defaulting to 1000 [ 1359.787708][T24752] lo speed is unknown, defaulting to 1000 [ 1359.790290][T24752] lo speed is unknown, defaulting to 1000 [ 1359.948458][T24763] loop6: detected capacity change from 0 to 524287999 [ 1360.257613][T24767] netlink: 'syz.1.3705': attribute type 3 has an invalid length. [ 1360.278287][T24767] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3705'. [ 1360.778745][ T80] Bluetooth: hci4: Frame reassembly failed (-84) [ 1362.915457][T16079] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1363.961807][T24787] netlink: 'syz.0.3708': attribute type 2 has an invalid length. [ 1363.973154][T24787] netlink: 'syz.0.3708': attribute type 8 has an invalid length. [ 1363.977080][T24787] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3708'. [ 1365.496464][T24798] cgroup: Unknown subsys name 'cpuset' [ 1368.593037][ C3] sr 2:0:0:0: [sr0] tag#20 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1368.596280][ C3] sr 2:0:0:0: [sr0] tag#20 CDB: ATA command pass through(16) [ 1368.598586][ C3] sr 2:0:0:0: [sr0] tag#20 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1368.601527][ C3] sr 2:0:0:0: [sr0] tag#20 CDB[10]: 05 c6 [ 1368.627997][T24808] overlayfs: missing 'lowerdir' [ 1368.650227][T24808] IPVS: Error connecting to the multicast addr [ 1369.345915][T24816] tipc: Enabling of bearer rejected, already enabled [ 1369.360138][T24816] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 1369.370921][T24814] set match dimension is over the limit! [ 1372.104656][ T1191] Bluetooth: hci4: Frame reassembly failed (-84) [ 1372.131074][T24832] cgroup: Unknown subsys name 'cpuset' [ 1372.395024][T24850] binder: 24848:24850 ioctl c0046209 0 returned -22 [ 1374.290322][T16079] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1374.554464][T24880] netlink: 'syz.1.3729': attribute type 3 has an invalid length. [ 1374.590928][T24880] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3729'. [ 1374.617762][T24877] set match dimension is over the limit! [ 1375.477137][T24892] trusted_key: encrypted_key: key user:syz not found [ 1376.024019][T24893] delete_channel: no stack [ 1376.145301][T24905] input: syz1 as /devices/virtual/input/input277 [ 1376.398141][T24904] binder: 24903:24904 ioctl c0046209 0 returned -22 [ 1376.688916][T24910] tipc: Resetting bearer [ 1376.849284][T24898] cgroup: Unknown subsys name 'cpuset' [ 1377.584465][T24920] netlink: 'syz.2.3738': attribute type 3 has an invalid length. [ 1377.632063][T24920] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3738'. [ 1377.711628][T24922] lo speed is unknown, defaulting to 1000 [ 1377.716569][T24922] lo speed is unknown, defaulting to 1000 [ 1377.721897][T24922] lo speed is unknown, defaulting to 1000 [ 1379.246314][T24939] input: syz1 as /devices/virtual/input/input278 [ 1380.605298][T24956] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3746'. [ 1380.612984][T24956] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1381.084739][ C1] sr 2:0:0:0: [sr0] tag#7 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1381.089044][ C1] sr 2:0:0:0: [sr0] tag#7 CDB: ATA command pass through(16) [ 1381.092215][ C1] sr 2:0:0:0: [sr0] tag#7 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1381.096081][ C1] sr 2:0:0:0: [sr0] tag#7 CDB[10]: 05 c6 [ 1381.168328][T24963] overlayfs: missing 'lowerdir' [ 1381.198172][T24963] IPVS: Error connecting to the multicast addr [ 1382.331186][T24980] block nbd0: shutting down sockets [ 1382.912719][T24985] netlink: 'syz.2.3752': attribute type 10 has an invalid length. [ 1382.915701][T24985] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3752'. [ 1382.921774][T24985] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1382.925144][T24985] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1382.927756][T24985] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1384.168646][ T6028] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1384.350052][ T6028] usb 5-1: Using ep0 maxpacket: 8 [ 1384.360259][ T6028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1384.364773][ T6028] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1384.367957][ T6028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.373156][ T6028] usb 5-1: config 0 descriptor?? [ 1384.706351][ T6028] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1385.064908][T25000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3755'. [ 1385.881859][T25016] fuse: Bad value for 'fd' [ 1385.981228][T25018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3758'. [ 1385.984990][T25018] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3758'. [ 1385.989353][T25018] netlink: 'syz.2.3758': attribute type 3 has an invalid length. [ 1385.992675][T25018] netlink: 'syz.2.3758': attribute type 2 has an invalid length. [ 1385.996122][T25018] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3758'. [ 1386.637044][ T6028] usb 5-1: USB disconnect, device number 11 [ 1387.504642][T25034] lo speed is unknown, defaulting to 1000 [ 1387.507672][T25034] lo speed is unknown, defaulting to 1000 [ 1387.511232][T25034] lo speed is unknown, defaulting to 1000 [ 1389.530487][T25068] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1389.536026][T25068] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1389.547653][T25068] overlayfs: conflicting lowerdir path [ 1390.170525][T25066] input: syz1 as /devices/virtual/input/input279 [ 1390.964277][T20325] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1391.127884][T20325] usb 6-1: Using ep0 maxpacket: 8 [ 1391.130917][T20325] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1391.134336][T20325] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1391.137095][T20325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.142472][T20325] usb 6-1: config 0 descriptor?? [ 1391.418495][T20325] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1393.383324][ T6028] usb 6-1: USB disconnect, device number 6 [ 1394.211251][T25118] trusted_key: encrypted_key: key user:syz not found [ 1394.560111][T25120] delete_channel: no stack [ 1395.891051][T25151] wireguard0: entered promiscuous mode [ 1395.896971][T25151] wireguard0: entered allmulticast mode [ 1396.822799][T25158] netlink: 'syz.3.3787': attribute type 3 has an invalid length. [ 1396.849074][T25158] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3787'. [ 1398.493433][T25162] lo speed is unknown, defaulting to 1000 [ 1398.495915][T25162] lo speed is unknown, defaulting to 1000 [ 1398.498344][T25162] lo speed is unknown, defaulting to 1000 [ 1398.759429][T25162] ubi: mtd0 is already attached to ubi31 [ 1400.292398][T25192] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3794'. [ 1401.171132][T25205] netlink: 'syz.0.3797': attribute type 3 has an invalid length. [ 1401.188673][T25205] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3797'. [ 1402.711254][T25227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3803'. [ 1402.859574][T25227] veth5: entered promiscuous mode [ 1403.325634][T25227] tipc: Enabling of bearer rejected, failed to enable media [ 1404.149926][T25250] fuse: Bad value for 'fd' [ 1404.251457][T25252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3808'. [ 1404.255177][T25252] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3808'. [ 1404.259066][T25252] netlink: 'syz.1.3808': attribute type 3 has an invalid length. [ 1404.262197][T25252] netlink: 'syz.1.3808': attribute type 2 has an invalid length. [ 1404.265351][T25252] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3808'. [ 1404.315510][T25253] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3807'. [ 1406.658859][T25264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1406.877532][T25275] cgroup: Unknown subsys name 'cpuset' [ 1407.403020][T25280] lo speed is unknown, defaulting to 1000 [ 1407.406468][T25280] lo speed is unknown, defaulting to 1000 [ 1407.409915][T25280] lo speed is unknown, defaulting to 1000 [ 1409.280552][T12066] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1409.465665][T12066] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.470218][T12066] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1409.474269][T12066] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1409.478182][T12066] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.485212][T12066] usb 6-1: config 0 descriptor?? [ 1409.489846][T12066] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1409.493576][T12066] dvb-usb: bulk message failed: -22 (3/0) [ 1409.508838][T12066] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1409.513553][T12066] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1409.518123][T12066] usb 6-1: media controller created [ 1409.524585][T12066] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1409.541772][T12066] dvb-usb: bulk message failed: -22 (6/0) [ 1409.544652][T12066] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1409.552472][T12066] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input280 [ 1409.564241][T12066] dvb-usb: schedule remote query interval to 150 msecs. [ 1409.567162][T12066] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1409.731870][T12066] dvb-usb: bulk message failed: -22 (1/0) [ 1409.734348][T12066] dvb-usb: error while querying for an remote control event. [ 1409.904804][T12066] dvb-usb: bulk message failed: -22 (1/0) [ 1409.907137][T12066] dvb-usb: error while querying for an remote control event. [ 1410.071927][T12066] dvb-usb: bulk message failed: -22 (1/0) [ 1410.074251][T12066] dvb-usb: error while querying for an remote control event. [ 1410.311288][T25299] lo speed is unknown, defaulting to 1000 [ 1410.317279][T25299] lo speed is unknown, defaulting to 1000 [ 1410.323882][T25299] lo speed is unknown, defaulting to 1000 [ 1410.713218][T12066] dvb-usb: bulk message failed: -22 (1/0) [ 1410.715047][T12066] dvb-usb: error while querying for an remote control event. [ 1410.776458][T20225] usb 6-1: USB disconnect, device number 7 [ 1411.596625][T20225] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1412.031073][T25309] xt_cgroup: invalid path, errno=-2 [ 1412.286035][T25310] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.3819'. [ 1412.290031][T25310] netlink: zone id is out of range [ 1412.292207][T25310] netlink: zone id is out of range [ 1412.294370][T25310] netlink: zone id is out of range [ 1412.365157][T25310] netlink: zone id is out of range [ 1412.367180][T25310] netlink: zone id is out of range [ 1412.369202][T25310] netlink: zone id is out of range [ 1412.371579][T25310] netlink: zone id is out of range [ 1412.373610][T25310] netlink: zone id is out of range [ 1412.375603][T25310] netlink: zone id is out of range [ 1412.377635][T25310] netlink: zone id is out of range [ 1412.901157][T25306] cgroup: Unknown subsys name 'cpuset' [ 1415.972729][T25331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3824'. [ 1416.063219][T25331] veth3: entered promiscuous mode [ 1416.156778][T25337] netlink: 'syz.3.3826': attribute type 3 has an invalid length. [ 1416.171719][T25337] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3826'. [ 1416.406723][T25333] tipc: Enabling of bearer rejected, failed to enable media [ 1416.496400][T25349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3825'. [ 1416.547460][T25345] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1416.550314][T25345] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.553276][T25335] ubi: mtd0 is already attached to ubi31 [ 1416.555607][T25345] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1416.627805][T25345] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1416.635047][T25345] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.640472][T25345] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1416.647157][T25345] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1416.650092][T25345] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.652658][T25345] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 1416.662712][T25345] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1416.666230][T25345] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.669662][T25345] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 1417.031520][T25355] input: syz1 as /devices/virtual/input/input282 [ 1418.227385][T25368] lo speed is unknown, defaulting to 1000 [ 1418.231143][T25368] lo speed is unknown, defaulting to 1000 [ 1418.234735][T25368] lo speed is unknown, defaulting to 1000 [ 1419.136608][ C1] sr 2:0:0:0: [sr0] tag#31 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1419.139928][ C1] sr 2:0:0:0: [sr0] tag#31 CDB: ATA command pass through(16) [ 1419.142225][ C1] sr 2:0:0:0: [sr0] tag#31 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1419.145159][ C1] sr 2:0:0:0: [sr0] tag#31 CDB[10]: 05 c6 [ 1419.407052][T25387] overlayfs: missing 'lowerdir' [ 1419.410860][T25387] IPVS: Error connecting to the multicast addr [ 1419.793758][T25402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3836'. [ 1422.668907][T25437] cgroup: Unknown subsys name 'cpuset' [ 1423.334353][T25440] lo speed is unknown, defaulting to 1000 [ 1423.336824][T25440] lo speed is unknown, defaulting to 1000 [ 1423.343558][T25440] lo speed is unknown, defaulting to 1000 [ 1424.191404][ C2] sr 2:0:0:0: [sr0] tag#11 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1424.194842][ C2] sr 2:0:0:0: [sr0] tag#11 CDB: ATA command pass through(16) [ 1424.197140][ C2] sr 2:0:0:0: [sr0] tag#11 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1424.200007][ C2] sr 2:0:0:0: [sr0] tag#11 CDB[10]: 05 c6 [ 1424.206758][T25445] overlayfs: missing 'lowerdir' [ 1424.209888][T25445] IPVS: Error connecting to the multicast addr [ 1424.486990][T25457] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1424.491423][T25457] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1424.504716][T25457] overlayfs: conflicting lowerdir path [ 1424.765704][T25458] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3849'. [ 1426.829227][T25487] cgroup: Unknown subsys name 'cpuset' [ 1427.223304][ C1] sr 2:0:0:0: [sr0] tag#2 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1427.226818][ C1] sr 2:0:0:0: [sr0] tag#2 CDB: ATA command pass through(16) [ 1427.229131][ C1] sr 2:0:0:0: [sr0] tag#2 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1427.232144][ C1] sr 2:0:0:0: [sr0] tag#2 CDB[10]: 05 c6 [ 1427.242542][T25494] overlayfs: missing 'lowerdir' [ 1427.246551][T25494] IPVS: Error connecting to the multicast addr [ 1428.177613][T25500] net_ratelimit: 24 callbacks suppressed [ 1428.177625][T25500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1429.052167][T25507] netlink: 'syz.2.3862': attribute type 3 has an invalid length. [ 1429.101528][T25507] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3862'. [ 1429.465898][T25512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3864'. [ 1429.642561][T25514] lo speed is unknown, defaulting to 1000 [ 1429.645187][T25514] lo speed is unknown, defaulting to 1000 [ 1429.648088][T25514] lo speed is unknown, defaulting to 1000 [ 1429.970130][T25518] block device autoloading is deprecated and will be removed. [ 1430.019349][T25518] syz.2.3865: attempt to access beyond end of device [ 1430.019349][T25518] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1431.039576][T25532] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1431.044875][T25532] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1431.125092][T25534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3868'. [ 1431.152375][T25532] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1431.156472][T25532] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1431.184213][T25530] ubi: mtd0 is already attached to ubi31 [ 1431.319967][T25532] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1431.323149][T25532] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1431.457559][T25532] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1431.463789][T25532] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1431.469976][ C1] sr 2:0:0:0: [sr0] tag#13 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1431.474299][ C1] sr 2:0:0:0: [sr0] tag#13 CDB: ATA command pass through(16) [ 1431.477418][ C1] sr 2:0:0:0: [sr0] tag#13 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1431.481315][ C1] sr 2:0:0:0: [sr0] tag#13 CDB[10]: 05 c6 [ 1431.502113][T25538] overlayfs: missing 'lowerdir' [ 1431.575135][T25539] IPVS: Error connecting to the multicast addr [ 1431.729371][T25532] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1431.733232][T25532] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1431.747900][T25532] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1431.751898][T25532] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1431.868353][T25543] cgroup: Unknown subsys name 'cpuset' [ 1431.943057][T25532] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1431.946264][T25532] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1431.953443][T25532] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1431.958627][T25532] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1432.002562][T25545] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3873'. [ 1433.100176][T25551] netlink: 'syz.2.3875': attribute type 3 has an invalid length. [ 1433.113279][T25551] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3875'. [ 1433.386924][T25557] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1433.391433][T25557] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1433.400314][T25557] overlayfs: conflicting lowerdir path [ 1433.761019][T25546] syz.3.3873 (25546): drop_caches: 1 [ 1433.764807][T25547] syz.3.3873 (25547): drop_caches: 1 [ 1434.360372][T25575] cgroup: Unknown subsys name 'cpuset' [ 1434.489051][T12066] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1434.650759][T12066] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1434.654165][T12066] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1434.657223][T12066] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1434.660746][T12066] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.667403][T25562] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1434.674052][T12066] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1437.267779][T20225] usb 7-1: USB disconnect, device number 4 [ 1437.439401][T25601] 9pnet_virtio: no channels available for device syz [ 1438.366763][T25613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3888'. [ 1438.984052][T20325] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1440.811823][T25663] cgroup: Unknown subsys name 'cpuset' [ 1441.055980][T25669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3896'. [ 1449.264221][T25685] program syz.0.3897 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1449.502050][T25691] bond0: entered promiscuous mode [ 1452.826535][T25729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3906'. [ 1453.307468][T25739] cgroup: Unknown subsys name 'cpuset' [ 1456.604937][T25762] cgroup: Unknown subsys name 'cpuset' [ 1460.100449][T25810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3923'. [ 1461.296886][T25815] cgroup: Unknown subsys name 'cpuset' [ 1465.445468][T25869] cgroup: Unknown subsys name 'cpuset' [ 1465.447165][T25870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3937'. [ 1466.358140][T25871] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1466.360230][T25871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1466.368476][T25871] vhci_hcd vhci_hcd.0: Device attached [ 1466.481721][T25868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3935'. [ 1466.635804][T20225] usb 39-1: new low-speed USB device number 7 using vhci_hcd [ 1466.917409][T25872] vhci_hcd: connection reset by peer [ 1466.919819][T24771] vhci_hcd: stop threads [ 1466.922171][T24771] vhci_hcd: release socket [ 1466.923688][T24771] vhci_hcd: disconnect device [ 1467.247126][T25904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3940'. [ 1468.091259][ T40] audit: type=1800 audit(2000000557.332:3249): pid=25915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3942" name="bus" dev="overlay" ino=5461 res=0 errno=0 [ 1468.989283][ T40] audit: type=1326 audit(2000000558.174:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25925 comm="syz.2.3946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1468.996820][ T40] audit: type=1326 audit(2000000558.174:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25925 comm="syz.2.3946" exe="/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1469.005809][ T40] audit: type=1326 audit(2000000558.183:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25925 comm="syz.2.3946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1469.012789][ T40] audit: type=1326 audit(2000000558.183:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25925 comm="syz.2.3946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1469.019455][ T40] audit: type=1326 audit(2000000558.192:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25925 comm="syz.2.3946" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1469.028226][ T40] audit: type=1326 audit(2000000558.202:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25925 comm="syz.2.3946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1469.035012][ T40] audit: type=1326 audit(2000000558.202:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25925 comm="syz.2.3946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1469.105325][ T40] audit: type=1326 audit(2000000558.267:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25925 comm="syz.2.3946" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1469.113984][ T40] audit: type=1326 audit(2000000558.267:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25925 comm="syz.2.3946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1470.511351][T25942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3948'. [ 1470.692373][T25939] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1470.696244][T25939] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1471.342832][T25939] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1471.345981][T25939] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1471.453282][T25939] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1471.456566][T25939] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1471.778685][T25957] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1471.780919][T25957] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1471.783759][T25957] vhci_hcd vhci_hcd.0: Device attached [ 1471.826813][T25939] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1471.830497][T25939] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1471.846573][T25956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3952'. [ 1471.920013][T25939] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1471.922675][T25939] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1471.931590][T25939] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1471.934484][T25939] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1471.949181][T25939] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1471.952676][T25939] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1472.131088][T25939] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1472.134644][T25939] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1472.173483][T25307] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 1472.185390][T20225] vhci_hcd: vhci_device speed not set [ 1472.192713][T25958] vhci_hcd: connection reset by peer [ 1472.195451][ T46] vhci_hcd: stop threads [ 1472.197067][ T46] vhci_hcd: release socket [ 1472.199277][ T46] vhci_hcd: disconnect device [ 1472.204040][T25967] netlink: 'syz.3.3954': attribute type 3 has an invalid length. [ 1472.222024][T25967] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3954'. [ 1473.649400][ T40] kauditd_printk_skb: 291 callbacks suppressed [ 1473.649417][ T40] audit: type=1326 audit(2000000562.523:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25989 comm="syz.0.3959" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1473.661034][ T40] audit: type=1326 audit(2000000562.523:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25989 comm="syz.0.3959" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf703e5a7 code=0x7ffc0000 [ 1473.668480][ T40] audit: type=1326 audit(2000000562.533:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25989 comm="syz.0.3959" exe="/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1473.675371][ T40] audit: type=1326 audit(2000000562.533:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25989 comm="syz.0.3959" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1473.682065][ T40] audit: type=1326 audit(2000000562.533:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25989 comm="syz.0.3959" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf703e5a7 code=0x7ffc0000 [ 1473.689025][ T40] audit: type=1326 audit(2000000562.533:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25989 comm="syz.0.3959" exe="/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1473.695848][ T40] audit: type=1326 audit(2000000562.542:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25989 comm="syz.0.3959" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1473.702740][ T40] audit: type=1326 audit(2000000562.551:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25989 comm="syz.0.3959" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf703e5a7 code=0x7ffc0000 [ 1473.709394][ T40] audit: type=1326 audit(2000000562.551:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25989 comm="syz.0.3959" exe="/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1473.716331][ T40] audit: type=1326 audit(2000000562.551:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25989 comm="syz.0.3959" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1476.359049][T26023] syz.3.3966: attempt to access beyond end of device [ 1476.359049][T26023] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1476.387655][T26023] hfsplus: unable to find HFS+ superblock [ 1477.554026][T26031] lo speed is unknown, defaulting to 1000 [ 1477.557000][T26031] lo speed is unknown, defaulting to 1000 [ 1477.559287][T26031] lo speed is unknown, defaulting to 1000 [ 1478.803328][T25307] vhci_hcd: vhci_device speed not set [ 1478.866289][T26050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3971'. [ 1479.139062][T26054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3972'. [ 1479.605026][ C3] sr 2:0:0:0: [sr0] tag#18 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1479.608106][ C3] sr 2:0:0:0: [sr0] tag#18 CDB: ATA command pass through(16) [ 1479.610486][ C3] sr 2:0:0:0: [sr0] tag#18 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1479.613389][ C3] sr 2:0:0:0: [sr0] tag#18 CDB[10]: 05 c6 [ 1479.618907][T26063] overlayfs: missing 'lowerdir' [ 1479.624325][T26063] IPVS: Error connecting to the multicast addr [ 1479.884274][T26072] cgroup: Unknown subsys name 'cpuset' [ 1481.280830][T25307] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1481.448922][T25307] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1481.452623][T25307] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1481.506498][T25307] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1481.509568][T25307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.527360][T26073] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1481.626476][T25307] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1483.560410][ C3] sr 2:0:0:0: [sr0] tag#21 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1483.564690][ C3] sr 2:0:0:0: [sr0] tag#21 CDB: ATA command pass through(16) [ 1483.567771][ C3] sr 2:0:0:0: [sr0] tag#21 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1483.571709][ C3] sr 2:0:0:0: [sr0] tag#21 CDB[10]: 05 c6 [ 1483.624970][T26103] overlayfs: missing 'lowerdir' [ 1483.627985][T26103] IPVS: Error connecting to the multicast addr [ 1483.651670][T26106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3984'. [ 1484.010789][T26114] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3987'. [ 1484.184641][T20225] usb 5-1: USB disconnect, device number 12 [ 1484.992748][ C1] sr 2:0:0:0: [sr0] tag#3 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1484.995919][ C1] sr 2:0:0:0: [sr0] tag#3 CDB: ATA command pass through(16) [ 1484.998243][ C1] sr 2:0:0:0: [sr0] tag#3 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1485.001118][ C1] sr 2:0:0:0: [sr0] tag#3 CDB[10]: 05 c6 [ 1485.069695][T26126] overlayfs: missing 'lowerdir' [ 1485.076455][T26126] IPVS: Error connecting to the multicast addr [ 1485.863422][ T40] kauditd_printk_skb: 233 callbacks suppressed [ 1485.863432][ T40] audit: type=1326 audit(2000000573.954:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26130 comm="syz.3.3991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1485.873605][ T40] audit: type=1326 audit(2000000573.963:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26130 comm="syz.3.3991" exe="/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1485.880615][ T40] audit: type=1326 audit(2000000573.963:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26130 comm="syz.3.3991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1485.887802][ T40] audit: type=1326 audit(2000000573.963:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26130 comm="syz.3.3991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1485.895287][ T40] audit: type=1326 audit(2000000573.963:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26130 comm="syz.3.3991" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1485.902238][ T40] audit: type=1326 audit(2000000573.963:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26130 comm="syz.3.3991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1485.908838][ T40] audit: type=1326 audit(2000000573.963:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26130 comm="syz.3.3991" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1485.916478][ T40] audit: type=1326 audit(2000000573.963:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26130 comm="syz.3.3991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1485.926972][ T40] audit: type=1326 audit(2000000573.963:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26130 comm="syz.3.3991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1485.934585][ T40] audit: type=1326 audit(2000000573.963:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26130 comm="syz.3.3991" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1487.094497][T20225] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 1487.098443][T20225] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 1487.100983][T20225] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 1487.103934][T20225] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 1487.107089][T20225] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 1487.110791][T20225] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 1487.114083][T20225] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 1487.117351][T20225] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 1487.123401][T20225] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 1487.126483][T20225] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 1487.129708][T20225] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 1487.132487][T20225] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x0 [ 1487.164524][T20225] hid-generic 00A0:0008:0003.0005: hidraw1: HID v0.05 Device [syz1] on syz0 [ 1488.564856][T26163] fuse: Bad value for 'fd' [ 1489.597144][T26176] cgroup: Unknown subsys name 'cpuset' [ 1491.238568][T26188] lo speed is unknown, defaulting to 1000 [ 1491.242291][T26188] lo speed is unknown, defaulting to 1000 [ 1491.246954][T26188] lo speed is unknown, defaulting to 1000 [ 1491.941856][T26203] lo speed is unknown, defaulting to 1000 [ 1491.944838][T26203] lo speed is unknown, defaulting to 1000 [ 1491.947860][T26203] lo speed is unknown, defaulting to 1000 [ 1492.534512][T26208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4007'. [ 1493.998742][T26230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4012'. [ 1494.358097][T26240] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1494.419603][T26237] syz.2.4013: attempt to access beyond end of device [ 1494.419603][T26237] loop2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1494.425349][T26237] hfsplus: unable to find HFS+ superblock [ 1494.634487][T12066] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1494.807167][T12066] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1494.810594][T12066] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1494.813824][T12066] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1494.816878][T12066] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.825545][T26240] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1494.830123][T12066] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1496.152764][T12066] usb 6-1: USB disconnect, device number 8 [ 1496.259488][T26247] cgroup: Unknown subsys name 'cpuset' [ 1496.296527][T26250] binder: 26248:26250 ioctl c0046209 0 returned -22 [ 1496.916840][T26254] lo speed is unknown, defaulting to 1000 [ 1496.920641][T26254] lo speed is unknown, defaulting to 1000 [ 1496.924495][T26254] lo speed is unknown, defaulting to 1000 [ 1497.598825][T26262] cgroup: Unknown subsys name 'cpuset' [ 1497.847578][T26271] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1497.852455][T26271] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.855681][T26271] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1497.930946][T26269] lo speed is unknown, defaulting to 1000 [ 1497.941622][T26269] lo speed is unknown, defaulting to 1000 [ 1497.945641][T26269] lo speed is unknown, defaulting to 1000 [ 1497.951220][T26274] ubi: mtd0 is already attached to ubi31 [ 1498.074315][T26271] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1498.081830][T26271] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.096866][T26271] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1498.200417][T26271] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1498.203501][T26271] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.209519][T26271] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1498.369128][T26271] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1498.372237][T26271] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.375405][T26271] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1498.506866][T26271] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1498.514756][T26271] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.518435][T26271] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1498.583492][T26271] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1498.586107][T26271] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.588887][T26271] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1498.615173][T26271] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1498.617767][T26271] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.620356][T26271] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 1498.647718][T26271] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1498.650348][T26271] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.652886][T26271] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 1499.194870][T26284] lo speed is unknown, defaulting to 1000 [ 1499.202738][T26284] lo speed is unknown, defaulting to 1000 [ 1499.214550][T26284] lo speed is unknown, defaulting to 1000 [ 1500.592062][T26304] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4026'. [ 1501.552974][ T40] kauditd_printk_skb: 305 callbacks suppressed [ 1501.552985][ T40] audit: type=1326 audit(2000000588.630:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26305 comm="syz.1.4027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1501.563893][ T40] audit: type=1326 audit(2000000588.630:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26305 comm="syz.1.4027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1501.570506][ T40] audit: type=1326 audit(2000000588.630:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26305 comm="syz.1.4027" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1501.578797][ T40] audit: type=1326 audit(2000000588.630:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26305 comm="syz.1.4027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1501.587130][ T40] audit: type=1326 audit(2000000588.630:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26305 comm="syz.1.4027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1501.594199][ T40] audit: type=1326 audit(2000000588.630:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26305 comm="syz.1.4027" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1501.601249][ T40] audit: type=1326 audit(2000000588.630:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26305 comm="syz.1.4027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1501.607862][ T40] audit: type=1326 audit(2000000588.630:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26305 comm="syz.1.4027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1501.614311][ T40] audit: type=1326 audit(2000000588.630:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26305 comm="syz.1.4027" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1501.620934][ T40] audit: type=1326 audit(2000000588.630:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26305 comm="syz.1.4027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1502.744838][T26321] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1502.747917][T26321] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.751715][T26321] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1502.832465][T26323] ubi: mtd0 is already attached to ubi31 [ 1502.837521][T26321] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1502.842463][T26321] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.847433][T26321] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1502.925087][T26321] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1502.931323][T26321] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.938924][T26321] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1503.008405][T26321] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1503.016034][T26321] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.019487][T26321] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1503.065392][T26326] netlink: 'syz.3.4031': attribute type 4 has an invalid length. [ 1503.080239][T26326] netlink: 'syz.3.4031': attribute type 4 has an invalid length. [ 1503.133865][T26321] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1503.140783][T26321] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.146794][T26321] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1503.162434][T26321] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1503.168593][T26321] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.173439][T26321] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1503.193014][T26321] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1503.197621][T26321] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.203488][T26321] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 1503.219164][T26321] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1503.223611][T26321] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.230798][T26321] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 1503.385712][ C3] sr 2:0:0:0: [sr0] tag#24 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1503.389371][ C3] sr 2:0:0:0: [sr0] tag#24 CDB: ATA command pass through(16) [ 1503.391987][ C3] sr 2:0:0:0: [sr0] tag#24 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1503.395427][ C3] sr 2:0:0:0: [sr0] tag#24 CDB[10]: 05 c6 [ 1503.435231][T26331] overlayfs: missing 'lowerdir' [ 1503.439222][T26331] IPVS: Error connecting to the multicast addr [ 1503.950786][T26345] siw: device registration error -23 [ 1504.868477][T26351] syz.3.4037: attempt to access beyond end of device [ 1504.868477][T26351] sr0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1505.259811][T15759] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1505.276809][T15759] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1505.363335][T26359] fido_id[26359]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1509.229344][T26371] cgroup: Unknown subsys name 'cpuset' [ 1510.680837][T26379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4041'. [ 1510.685147][T26379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4041'. [ 1511.011120][ C3] sr 2:0:0:0: [sr0] tag#29 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1511.014384][ C3] sr 2:0:0:0: [sr0] tag#29 CDB: ATA command pass through(16) [ 1511.016706][ C3] sr 2:0:0:0: [sr0] tag#29 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1511.019710][ C3] sr 2:0:0:0: [sr0] tag#29 CDB[10]: 05 c6 [ 1511.040385][T26382] overlayfs: missing 'lowerdir' [ 1511.047244][T26382] IPVS: Error connecting to the multicast addr [ 1511.132393][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 1511.132410][ T40] audit: type=1326 audit(2000000597.592:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.1.4044" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1511.149079][ T40] audit: type=1326 audit(2000000597.592:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.1.4044" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1511.158591][ T40] audit: type=1326 audit(2000000597.592:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.1.4044" exe="/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1511.168525][ T40] audit: type=1326 audit(2000000597.592:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.1.4044" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1511.178368][ T40] audit: type=1326 audit(2000000597.592:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.1.4044" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1511.188216][ T40] audit: type=1326 audit(2000000597.592:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.1.4044" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1511.199972][ T40] audit: type=1326 audit(2000000597.592:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.1.4044" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1511.209904][ T40] audit: type=1326 audit(2000000597.592:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.1.4044" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1511.219496][ T40] audit: type=1326 audit(2000000597.592:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.1.4044" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1511.228950][ T40] audit: type=1326 audit(2000000597.592:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.1.4044" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 1511.443797][T26385] cgroup: Unknown subsys name 'cpuset' [ 1512.419453][T26397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1512.692364][T26393] macsec0: entered promiscuous mode [ 1512.695078][T26393] macsec0: entered allmulticast mode [ 1512.697310][T26393] veth1_macvtap: entered allmulticast mode [ 1513.620702][T26416] cgroup: Unknown subsys name 'cpuset' [ 1513.988084][ C3] sr 2:0:0:0: [sr0] tag#3 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1513.991304][ C3] sr 2:0:0:0: [sr0] tag#3 CDB: ATA command pass through(16) [ 1513.993638][ C3] sr 2:0:0:0: [sr0] tag#3 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1513.996555][ C3] sr 2:0:0:0: [sr0] tag#3 CDB[10]: 05 c6 [ 1514.051868][T26423] overlayfs: missing 'lowerdir' [ 1514.054961][T26423] IPVS: Error connecting to the multicast addr [ 1514.604612][T26433] cgroup: Unknown subsys name 'cpuset' [ 1514.709020][T26431] loop6: detected capacity change from 0 to 524287999 [ 1516.968576][T26431] Dev loop6: unable to read RDB block 8 [ 1516.972006][T26431] loop6: unable to read partition table [ 1516.974660][T26431] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1517.181014][T26439] cgroup: Unknown subsys name 'cpuset' [ 1517.659064][T26441] netlink: 'syz.3.4056': attribute type 3 has an invalid length. [ 1517.854686][ T40] kauditd_printk_skb: 223 callbacks suppressed [ 1517.854696][ T40] audit: type=1326 audit(2000000603.877:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26444 comm="syz.2.4057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1517.886749][ T40] audit: type=1326 audit(2000000603.905:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26444 comm="syz.2.4057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1517.897549][ T40] audit: type=1326 audit(2000000603.915:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26444 comm="syz.2.4057" exe="/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1517.907055][ T40] audit: type=1326 audit(2000000603.915:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26444 comm="syz.2.4057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1517.915716][ T40] audit: type=1326 audit(2000000603.915:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26444 comm="syz.2.4057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1517.927683][ T40] audit: type=1326 audit(2000000603.943:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26444 comm="syz.2.4057" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1517.935974][ T40] audit: type=1326 audit(2000000603.943:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26444 comm="syz.2.4057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1517.948001][ T40] audit: type=1326 audit(2000000603.952:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26444 comm="syz.2.4057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1517.958306][ T40] audit: type=1326 audit(2000000603.971:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26444 comm="syz.2.4057" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1517.971520][ T40] audit: type=1326 audit(2000000603.980:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26444 comm="syz.2.4057" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1518.540192][T26453] lo speed is unknown, defaulting to 1000 [ 1518.545165][T26453] lo speed is unknown, defaulting to 1000 [ 1518.548835][T26453] lo speed is unknown, defaulting to 1000 [ 1521.116063][T26483] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1521.118415][T26483] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1521.122199][T26483] vhci_hcd vhci_hcd.0: Device attached [ 1521.152010][T26487] netlink: 'syz.3.4066': attribute type 3 has an invalid length. [ 1521.414424][T20225] usb 39-1: new high-speed USB device number 8 using vhci_hcd [ 1521.826966][T26484] vhci_hcd: connection reset by peer [ 1521.829530][ T80] vhci_hcd: stop threads [ 1521.831175][ T80] vhci_hcd: release socket [ 1521.832878][ T80] vhci_hcd: disconnect device [ 1526.149368][T26547] syz.2.4078: attempt to access beyond end of device [ 1526.149368][T26547] sr0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1526.667060][T26558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4079'. [ 1527.052188][T20225] vhci_hcd: vhci_device speed not set [ 1528.160464][T15759] libceph: connect (1)[c::]:6789 error -101 [ 1528.179651][T26580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4085'. [ 1528.204393][T15759] libceph: mon0 (1)[c::]:6789 connect error [ 1528.684127][T15759] libceph: connect (1)[c::]:6789 error -101 [ 1528.684391][T15759] libceph: mon0 (1)[c::]:6789 connect error [ 1529.022047][T26577] ceph: No mds server is up or the cluster is laggy [ 1529.375590][T26592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4087'. [ 1530.219179][T26599] NILFS (loop3): device size too small [ 1530.306350][T26601] cgroup: Unknown subsys name 'cpuset' [ 1530.556413][T26604] lo speed is unknown, defaulting to 1000 [ 1530.565326][T26604] lo speed is unknown, defaulting to 1000 [ 1530.574695][T26604] lo speed is unknown, defaulting to 1000 [ 1531.158516][T26608] lo speed is unknown, defaulting to 1000 [ 1531.160990][T26608] lo speed is unknown, defaulting to 1000 [ 1531.165003][T26608] lo speed is unknown, defaulting to 1000 [ 1531.477286][ T40] kauditd_printk_skb: 114 callbacks suppressed [ 1531.477305][ T40] audit: type=1326 audit(2000000616.571:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.0.4093" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1531.513603][ T40] audit: type=1326 audit(2000000616.571:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.0.4093" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1531.524551][ T40] audit: type=1326 audit(2000000616.571:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.0.4093" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1531.533619][ T40] audit: type=1326 audit(2000000616.571:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.0.4093" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1531.540745][ T40] audit: type=1326 audit(2000000616.571:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.0.4093" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1531.547864][ T40] audit: type=1326 audit(2000000616.571:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.0.4093" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1531.558706][ T40] audit: type=1326 audit(2000000616.580:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.0.4093" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1531.565816][ T40] audit: type=1326 audit(2000000616.580:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.0.4093" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1531.572584][ T40] audit: type=1326 audit(2000000616.580:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.0.4093" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1531.580029][ T40] audit: type=1326 audit(2000000616.580:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.0.4093" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1531.625402][T26621] tipc: Started in network mode [ 1531.627106][T26621] tipc: Node identity 4, cluster identity 4711 [ 1531.650840][T26621] tipc: Node number set to 4 [ 1532.549589][T26633] random: crng reseeded on system resumption [ 1533.134467][T26636] cgroup: Unknown subsys name 'cpuset' [ 1533.902181][T26643] cgroup: Unknown subsys name 'cpuset' [ 1534.777002][T26648] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1534.779747][T26648] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1534.789367][T26648] vhci_hcd vhci_hcd.0: Device attached [ 1535.078007][T20225] usb 43-1: new high-speed USB device number 6 using vhci_hcd [ 1536.259470][T26664] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4105'. [ 1536.263269][T26664] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4105'. [ 1536.389863][T26649] vhci_hcd: connection reset by peer [ 1536.391621][ T1139] vhci_hcd: stop threads [ 1536.393519][ T1139] vhci_hcd: release socket [ 1536.395567][ T1139] vhci_hcd: disconnect device [ 1536.720456][T26671] netlink: 'syz.0.4107': attribute type 3 has an invalid length. [ 1537.410693][T26679] cgroup: Unknown subsys name 'cpuset' [ 1537.842536][T25307] lo speed is unknown, defaulting to 1000 [ 1537.844493][T25307] syz0: Port: 1 Link DOWN [ 1538.819005][T25307] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 1538.980849][T25307] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.986122][T25307] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1538.989808][T25307] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1538.995866][T25307] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1538.999330][T25307] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1539.002615][T25307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.009613][T25307] hub 6-1:1.0: bad descriptor, ignoring hub [ 1539.018611][T25307] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1539.114457][T25307] cdc_wdm 6-1:1.0: skipping garbage [ 1539.116259][T25307] cdc_wdm 6-1:1.0: skipping garbage [ 1539.123904][T25307] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1539.126506][T25307] cdc_wdm 6-1:1.0: Unknown control protocol [ 1539.668161][T26706] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 1540.065113][T26715] siw: device registration error -23 [ 1540.540116][T20225] vhci_hcd: vhci_device speed not set [ 1540.816179][T26723] cgroup: Unknown subsys name 'cpuset' [ 1541.090484][T26728] cgroup: Unknown subsys name 'cpuset' [ 1541.462914][T26729] netlink: 'syz.0.4119': attribute type 1 has an invalid length. [ 1541.465290][T26729] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4119'. [ 1541.668726][T26736] netlink: 'syz.2.4121': attribute type 3 has an invalid length. [ 1541.791097][T20325] usb 6-1: USB disconnect, device number 9 [ 1543.598709][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 1543.598820][ T40] audit: type=1326 audit(2000000627.945:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26766 comm="syz.2.4128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1543.616486][ T40] audit: type=1326 audit(2000000627.945:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26766 comm="syz.2.4128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1543.624630][ T40] audit: type=1326 audit(2000000627.945:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26766 comm="syz.2.4128" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1543.638872][ T40] audit: type=1326 audit(2000000627.945:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26766 comm="syz.2.4128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1543.651055][ T40] audit: type=1326 audit(2000000627.945:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26766 comm="syz.2.4128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1543.659492][ T40] audit: type=1326 audit(2000000627.945:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26766 comm="syz.2.4128" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1543.667490][ T40] audit: type=1326 audit(2000000627.964:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26766 comm="syz.2.4128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1543.674481][ T40] audit: type=1326 audit(2000000627.964:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26766 comm="syz.2.4128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1543.681232][ T40] audit: type=1326 audit(2000000627.964:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26766 comm="syz.2.4128" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1543.689229][ T40] audit: type=1326 audit(2000000627.964:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26766 comm="syz.2.4128" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 1544.195002][T26777] dummy0: left allmulticast mode [ 1544.197563][T26777] bridge0: port 1(dummy0) entered disabled state [ 1544.242952][T26776] cgroup: Unknown subsys name 'cpuset' [ 1544.268544][T26779] netlink: 'syz.0.4131': attribute type 3 has an invalid length. [ 1544.284615][T26779] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4131'. [ 1544.366419][T26781] cgroup: Unknown subsys name 'cpuset' [ 1544.508826][T12066] libceph: connect (1)[c::]:6789 error -101 [ 1544.510865][T12066] libceph: mon0 (1)[c::]:6789 connect error [ 1544.609086][T26788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4133'. [ 1544.784524][T12066] libceph: connect (1)[c::]:6789 error -101 [ 1544.789372][T12066] libceph: mon0 (1)[c::]:6789 connect error [ 1545.299295][T26784] ceph: No mds server is up or the cluster is laggy [ 1545.782435][T26803] input: syz1 as /devices/virtual/input/input283 [ 1547.569157][T26822] cgroup: Unknown subsys name 'cpuset' [ 1547.586467][T26824] netlink: 'syz.2.4141': attribute type 3 has an invalid length. [ 1547.600897][T26824] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4141'. [ 1548.050929][T26833] cgroup: Unknown subsys name 'cpuset' [ 1548.238862][T26832] netlink: 'syz.2.4142': attribute type 1 has an invalid length. [ 1548.248261][T26832] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4142'. [ 1548.694177][T26842] cgroup: Unknown subsys name 'cpuset' [ 1548.847629][T26843] openvswitch: : Dropping previously announced user features [ 1549.460823][T26854] NILFS (loop1): device size too small [ 1549.742715][T26857] lo speed is unknown, defaulting to 1000 [ 1549.749353][T26857] lo speed is unknown, defaulting to 1000 [ 1549.754534][T26857] lo speed is unknown, defaulting to 1000 [ 1550.224468][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 1550.224480][ T40] audit: type=1326 audit(2000000634.147:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26863 comm="syz.0.4152" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x0 [ 1550.361795][T26870] overlayfs: workdir and upperdir must reside under the same mount [ 1550.982352][T26874] lo speed is unknown, defaulting to 1000 [ 1550.986843][T26874] lo speed is unknown, defaulting to 1000 [ 1550.991048][T26874] lo speed is unknown, defaulting to 1000 [ 1551.947507][T26883] loop6: detected capacity change from 0 to 524287999 [ 1552.257877][ T80] Bluetooth: hci4: Frame reassembly failed (-84) [ 1553.953440][T26911] cgroup: Unknown subsys name 'cpuset' [ 1554.416372][T16079] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1554.416455][T10720] Bluetooth: hci4: command 0x1003 tx timeout [ 1555.224225][T26924] syz.3.4167: attempt to access beyond end of device [ 1555.224225][T26924] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1555.229883][T26924] hfsplus: unable to find HFS+ superblock [ 1556.880402][T26945] erspan0: left allmulticast mode [ 1556.883295][T26945] erspan0: left promiscuous mode [ 1556.885504][T26945] bridge0: port 1(erspan0) entered disabled state [ 1557.611560][T26945] team0: Port device bridge2 removed [ 1557.817528][T26945] team0: Port device bridge4 removed [ 1558.201466][T26957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4173'. [ 1558.207285][T26957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4173'. [ 1559.540206][T26984] NILFS (loop0): device size too small [ 1560.120133][T26986] lo speed is unknown, defaulting to 1000 [ 1560.122742][T26986] lo speed is unknown, defaulting to 1000 [ 1560.148944][T26986] lo speed is unknown, defaulting to 1000 [ 1562.635753][T27024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4186'. [ 1562.640107][T27024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4186'. [ 1565.936005][T27032] batman_adv: batadv0: Adding interface: dummy0 [ 1565.938205][T27032] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1565.947526][T27032] batman_adv: batadv0: Interface activated: dummy0 [ 1565.982982][T27032] batadv0: mtu less than device minimum [ 1565.986534][T27032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1565.992243][T27032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1565.997299][T27032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1566.002544][T27032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1566.008140][T27032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1566.013708][T27032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1566.019186][T27032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1566.024356][T27032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1566.029016][T27032] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1566.161803][T27038] NILFS (loop2): device size too small [ 1566.642888][T27047] tmpfs: Unknown parameter 'quo' [ 1566.837351][T27048] lo speed is unknown, defaulting to 1000 [ 1566.842066][T27048] lo speed is unknown, defaulting to 1000 [ 1566.846663][T27048] lo speed is unknown, defaulting to 1000 [ 1567.807885][T27055] hub 9-0:1.0: USB hub found [ 1567.809593][T27055] hub 9-0:1.0: 1 port detected [ 1567.904158][T27061] cgroup: Unknown subsys name 'cpuset' [ 1567.941755][ T1191] Bluetooth: hci4: Frame reassembly failed (-84) [ 1567.944447][ T80] Bluetooth: hci4: Frame reassembly failed (-84) [ 1567.948176][T27059] lo speed is unknown, defaulting to 1000 [ 1567.955703][T27059] lo speed is unknown, defaulting to 1000 [ 1567.964892][T27059] lo speed is unknown, defaulting to 1000 [ 1568.802985][T27074] syz.2.4197: attempt to access beyond end of device [ 1568.802985][T27074] loop2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1568.803033][T27074] hfsplus: unable to find HFS+ superblock [ 1570.075560][T27089] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1570.075560][T27089] program syz.1.4198 not setting count and/or reply_len properly [ 1570.142312][T16079] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1570.428444][T27092] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4199'. [ 1571.068952][T27107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4201'. [ 1572.065902][T27113] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1573.206736][T27129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4206'. [ 1573.971976][T27135] binder: 27134:27135 ioctl c0046209 0 returned -22 [ 1574.094448][ T40] audit: type=1804 audit(2000000656.475:4613): pid=27130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4208" name="/newroot/1032/file0" dev="tmpfs" ino=5668 res=1 errno=0 [ 1574.665583][T27141] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1574.751632][T27141] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 1574.753749][T27141] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1574.759563][T27141] vhci_hcd vhci_hcd.0: Device attached [ 1575.057647][T27148] NILFS (loop0): device size too small [ 1575.152133][T25307] usb 43-1: new high-speed USB device number 7 using vhci_hcd [ 1575.225621][ C0] sr 2:0:0:0: [sr0] tag#14 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1575.229981][ C0] sr 2:0:0:0: [sr0] tag#14 CDB: ATA command pass through(16) [ 1575.233154][ C0] sr 2:0:0:0: [sr0] tag#14 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1575.237070][ C0] sr 2:0:0:0: [sr0] tag#14 CDB[10]: 05 c6 [ 1575.525649][T27157] lo speed is unknown, defaulting to 1000 [ 1575.530704][T27157] lo speed is unknown, defaulting to 1000 [ 1575.535515][T27157] lo speed is unknown, defaulting to 1000 [ 1575.687503][T27152] overlayfs: missing 'lowerdir' [ 1575.728648][T27152] IPVS: Error connecting to the multicast addr [ 1575.752090][T27145] vhci_hcd: connection reset by peer [ 1575.759232][ T46] vhci_hcd: stop threads [ 1575.761045][ T46] vhci_hcd: release socket [ 1575.762574][ T46] vhci_hcd: disconnect device [ 1576.488451][T27164] syz.1.4214: attempt to access beyond end of device [ 1576.488451][T27164] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1576.498316][T27164] hfsplus: unable to find HFS+ superblock [ 1577.181110][T27177] input: syz1 as /devices/virtual/input/input284 [ 1577.299782][T27175] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1578.671910][T27189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4218'. [ 1579.410296][T27197] ALSA: mixer_oss: invalid index 40000 [ 1579.893693][T27202] binder: 27200:27202 ioctl c0046209 0 returned -22 [ 1580.070078][T27203] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1580.123159][T27209] dummy0: left allmulticast mode [ 1580.125437][T27209] bridge0: port 1(dummy0) entered disabled state [ 1580.131576][T27209] batman_adv: batadv0: Adding interface: dummy0 [ 1580.140256][T27209] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1580.150542][T27209] batman_adv: batadv0: Interface activated: dummy0 [ 1580.184001][T27209] net_ratelimit: 10 callbacks suppressed [ 1580.184018][T27209] batadv0: mtu less than device minimum [ 1580.188662][T27209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1580.192492][T27209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1580.196205][T27209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1580.199957][T27209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1580.205201][T27209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1580.209239][T27209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1580.213253][T27209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1580.217008][T27209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1580.220879][T27209] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1580.238060][T27209] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1580.662407][T25307] vhci_hcd: vhci_device speed not set [ 1580.998835][T27220] netlink: 'syz.1.4225': attribute type 1 has an invalid length. [ 1581.365050][T27229] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1581.365050][T27229] program syz.2.4226 not setting count and/or reply_len properly [ 1582.356977][T27238] cgroup: Unknown subsys name 'cpuset' [ 1584.971456][T27257] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 1584.973627][T27257] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1584.978014][T27257] vhci_hcd vhci_hcd.0: Device attached [ 1584.984779][T27258] sp0: Synchronizing with TNC [ 1584.994545][T27257] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(15) [ 1584.996732][T27257] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1585.011355][T27257] vhci_hcd vhci_hcd.0: Device attached [ 1585.022077][T27257] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(17) [ 1585.024205][T27257] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1585.112516][T27258] [U] è [ 1585.123994][T27268] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(20) [ 1585.126111][T27268] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1585.128623][T27268] vhci_hcd vhci_hcd.0: Device attached [ 1585.134052][T27268] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(23) [ 1585.136207][T27268] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1585.138686][T27268] vhci_hcd vhci_hcd.0: Device attached [ 1585.149779][T27268] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(25) [ 1585.152115][T27268] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1585.169818][ T2121] vhci_hcd: vhci_device speed not set [ 1585.199354][T27276] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1585.205310][T27276] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(30) [ 1585.208092][T27276] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1585.237370][ T2121] usb 39-1: new full-speed USB device number 9 using vhci_hcd [ 1585.355794][T27279] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1585.382426][T27279] vhci_hcd vhci_hcd.0: port 0 already used [ 1585.385986][T27276] vhci_hcd vhci_hcd.0: Device attached [ 1585.530168][ T40] audit: type=1804 audit(2000000667.176:4614): pid=27267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4233" name="/newroot/1068/file0" dev="tmpfs" ino=5903 res=1 errno=0 [ 1585.590214][T27257] vhci_hcd vhci_hcd.0: Device attached [ 1585.859666][T27264] vhci_hcd: connection closed [ 1585.859862][ T1171] vhci_hcd: stop threads [ 1585.859966][T27269] vhci_hcd: connection closed [ 1585.862076][ T1171] vhci_hcd: release socket [ 1585.863934][T27259] vhci_hcd: connection reset by peer [ 1585.865728][ T1171] vhci_hcd: disconnect device [ 1585.868143][T27261] vhci_hcd: connection closed [ 1585.871924][T27271] vhci_hcd: connection closed [ 1585.883292][ T1171] vhci_hcd: stop threads [ 1585.886779][ T1171] vhci_hcd: release socket [ 1585.889029][ T1171] vhci_hcd: disconnect device [ 1585.891642][ T1171] vhci_hcd: stop threads [ 1585.893436][ T1171] vhci_hcd: release socket [ 1585.895381][ T1171] vhci_hcd: disconnect device [ 1585.897487][ T1171] vhci_hcd: stop threads [ 1585.899329][ T1171] vhci_hcd: release socket [ 1585.902057][ T1171] vhci_hcd: disconnect device [ 1585.904232][ T1171] vhci_hcd: stop threads [ 1585.905995][ T1171] vhci_hcd: release socket [ 1585.908294][ T1171] vhci_hcd: disconnect device [ 1586.755523][T27268] vhci_hcd vhci_hcd.0: Device attached [ 1586.757762][T27273] vhci_hcd: connection closed [ 1586.768080][ T1191] vhci_hcd: stop threads [ 1586.772044][ T1191] vhci_hcd: release socket [ 1586.774118][ T1191] vhci_hcd: disconnect device [ 1586.829218][T27288] binder: 27287:27288 ioctl c0046209 0 returned -22 [ 1587.072831][T27290] tipc: Resetting bearer [ 1587.329407][T27277] vhci_hcd: connection closed [ 1587.329727][ T1171] vhci_hcd: stop threads [ 1587.334252][ T1171] vhci_hcd: release socket [ 1587.336822][ T1171] vhci_hcd: disconnect device [ 1589.062934][ T40] audit: type=1804 audit(2000000670.478:4615): pid=27304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4239" name="/newroot/1040/bus/bus" dev="overlay" ino=5718 res=1 errno=0 [ 1589.070781][ T40] audit: type=1804 audit(2000000670.487:4616): pid=27304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4239" name="/newroot/1040/bus/bus" dev="overlay" ino=5718 res=1 errno=0 [ 1590.694679][T27319] ALSA: mixer_oss: invalid index 40000 [ 1590.815300][T27327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4245'. [ 1590.849968][ T2121] vhci_hcd: vhci_device speed not set [ 1590.986235][T27329] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4244'. [ 1592.860733][T15759] usb usb40-port1: attempt power cycle [ 1593.123521][T27341] binder: 27340:27341 ioctl c0046209 0 returned -22 [ 1593.568343][T15759] usb usb40-port1: unable to enumerate USB device [ 1594.307135][T27356] netlink: 'syz.1.4251': attribute type 2 has an invalid length. [ 1594.309617][T27356] netlink: 'syz.1.4251': attribute type 8 has an invalid length. [ 1594.312001][T27356] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4251'. [ 1594.791801][T27364] cgroup: Unknown subsys name 'cpuset' [ 1597.663079][T27381] hub 9-0:1.0: USB hub found [ 1597.666030][T27381] hub 9-0:1.0: 1 port detected [ 1598.156826][T27386] cgroup: Unknown subsys name 'cpuset' [ 1598.953437][T12066] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1599.113790][T12066] usb 5-1: Using ep0 maxpacket: 16 [ 1599.117795][T12066] usb 5-1: config index 0 descriptor too short (expected 16402, got 18) [ 1599.121417][T12066] usb 5-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 1599.126014][T12066] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1599.203122][T12066] usb 5-1: New USB device found, idVendor=0505, idProduct=1800, bcdDevice=99.2f [ 1599.252825][T12066] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.256133][T12066] usb 5-1: Product: syz [ 1599.264273][T12066] usb 5-1: Manufacturer: syz [ 1599.266203][T12066] usb 5-1: SerialNumber: syz [ 1599.282732][T12066] usb 5-1: config 0 descriptor?? [ 1602.384625][T12066] usb 5-1: USB disconnect, device number 13 [ 1602.725344][T27407] lo speed is unknown, defaulting to 1000 [ 1602.737930][T27407] lo speed is unknown, defaulting to 1000 [ 1602.750074][T27407] lo speed is unknown, defaulting to 1000 [ 1602.822954][T27411] cgroup: Unknown subsys name 'cpuset' [ 1603.822901][T27416] cgroup: Unknown subsys name 'cpuset' [ 1605.614839][ T40] audit: type=1804 audit(2000000685.968:4617): pid=27436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4268" name="/newroot/1056/bus/bus" dev="overlay" ino=5739 res=1 errno=0 [ 1605.642702][ T40] audit: type=1804 audit(2000000685.968:4618): pid=27436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4268" name="/newroot/1056/bus/bus" dev="overlay" ino=5739 res=1 errno=0 [ 1606.453233][T27447] hub 9-0:1.0: USB hub found [ 1606.457777][T27447] hub 9-0:1.0: 1 port detected [ 1607.094826][T27455] cgroup: Unknown subsys name 'cpuset' [ 1608.457481][ T80] Bluetooth: hci4: Frame reassembly failed (-84) [ 1608.460204][ T80] Bluetooth: hci4: Frame reassembly failed (-84) [ 1608.462776][ T80] Bluetooth: hci4: Frame reassembly failed (-84) [ 1608.465406][ T80] Bluetooth: hci4: Frame reassembly failed (-84) [ 1608.467750][ T80] Bluetooth: hci4: Frame reassembly failed (-84) [ 1608.618691][T15759] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1610.606315][T16079] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1610.828691][T27482] hub 9-0:1.0: USB hub found [ 1610.832236][T27482] hub 9-0:1.0: 1 port detected [ 1610.945362][T27477] lo speed is unknown, defaulting to 1000 [ 1610.950508][T27477] lo speed is unknown, defaulting to 1000 [ 1610.954892][T27477] lo speed is unknown, defaulting to 1000 [ 1611.611408][T27490] netlink: 'syz.1.4277': attribute type 4 has an invalid length. [ 1613.774625][ C3] sr 2:0:0:0: [sr0] tag#15 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1613.777790][ C3] sr 2:0:0:0: [sr0] tag#15 CDB: ATA command pass through(16) [ 1613.780146][ C3] sr 2:0:0:0: [sr0] tag#15 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1613.783043][ C3] sr 2:0:0:0: [sr0] tag#15 CDB[10]: 05 c6 [ 1613.882858][T27508] overlayfs: missing 'lowerdir' [ 1613.918804][T27508] IPVS: Error connecting to the multicast addr [ 1613.956347][T27517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4284'. [ 1613.959312][T27517] net_ratelimit: 10 callbacks suppressed [ 1613.959319][T27517] openvswitch: netlink: Flow key attr not present in new flow. [ 1614.188934][T27520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4282'. [ 1614.192743][T27520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4282'. [ 1615.741691][T27530] cgroup: Unknown subsys name 'cpuset' [ 1618.172616][T27541] lo speed is unknown, defaulting to 1000 [ 1618.180456][T27541] lo speed is unknown, defaulting to 1000 [ 1618.186783][T27541] lo speed is unknown, defaulting to 1000 [ 1618.389898][T27549] hub 9-0:1.0: USB hub found [ 1618.397881][T27549] hub 9-0:1.0: 1 port detected [ 1618.892771][T27547] loop7: detected capacity change from 0 to 16384 [ 1619.692037][T27560] hfs: unable to load iocharset "io#harset" [ 1620.414734][ C3] sr 2:0:0:0: [sr0] tag#23 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1620.418965][ C3] sr 2:0:0:0: [sr0] tag#23 CDB: ATA command pass through(16) [ 1620.421776][ C3] sr 2:0:0:0: [sr0] tag#23 CDB[00]: 85 26 b6 2b fa d6 3a 5d ba 5e 98 e1 9f 27 80 c8 [ 1620.425618][ C3] sr 2:0:0:0: [sr0] tag#23 CDB[10]: 05 c6 [ 1620.506340][T27554] loop7: detected capacity change from 16384 to 0 [ 1620.509979][T27554] [ 1620.510687][T27554] ====================================================== [ 1620.513233][T27554] WARNING: possible circular locking dependency detected [ 1620.515455][T27554] 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 Not tainted [ 1620.517912][T27554] ------------------------------------------------------ [ 1620.521800][T27554] syz.3.4290/27554 is trying to acquire lock: [ 1620.523617][T27554] ffffffff906b42a8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xb36/0x1870 [ 1620.526635][T27554] [ 1620.526635][T27554] but task is already holding lock: [ 1620.528941][T27554] ffff888042a16c40 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1620.532362][T27554] [ 1620.532362][T27554] which lock already depends on the new lock. [ 1620.532362][T27554] [ 1620.535525][T27554] [ 1620.535525][T27554] the existing dependency chain (in reverse order) is: [ 1620.538242][T27554] [ 1620.538242][T27554] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 1620.540615][T27554] blk_alloc_queue+0x619/0x760 [ 1620.542345][T27554] blk_mq_alloc_queue+0x175/0x290 [ 1620.544088][T27554] __blk_mq_alloc_disk+0x29/0x120 [ 1620.545817][T27554] loop_add+0x49e/0xb70 [ 1620.547344][T27554] loop_init+0x164/0x270 [ 1620.548920][T27554] do_one_initcall+0x120/0x6e0 [ 1620.550566][T27554] kernel_init_freeable+0x5c2/0x900 [ 1620.552347][T27554] kernel_init+0x1c/0x2b0 [ 1620.553883][T27554] ret_from_fork+0x5d4/0x6f0 [ 1620.555492][T27554] ret_from_fork_asm+0x1a/0x30 [ 1620.557134][T27554] [ 1620.557134][T27554] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1620.559406][T27554] fs_reclaim_acquire+0x102/0x150 [ 1620.561261][T27554] kmem_cache_alloc_node_noprof+0x57/0x3b0 [ 1620.563710][T27554] __alloc_skb+0x2b2/0x380 [ 1620.565525][T27554] alloc_uevent_skb+0x7d/0x210 [ 1620.567576][T27554] kobject_uevent_env+0xca4/0x1870 [ 1620.569633][T27554] kobject_synth_uevent+0x7d4/0x8a0 [ 1620.571831][T27554] bus_uevent_store+0x3d/0x90 [ 1620.573869][T27554] bus_attr_store+0x74/0xb0 [ 1620.575461][T27554] sysfs_kf_write+0xf2/0x150 [ 1620.577057][T27554] kernfs_fop_write_iter+0x351/0x510 [ 1620.578874][T27554] vfs_write+0x6c4/0x1150 [ 1620.580427][T27554] ksys_write+0x12a/0x250 [ 1620.581947][T27554] do_syscall_64+0xcd/0x490 [ 1620.583530][T27554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.585547][T27554] [ 1620.585547][T27554] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 1620.588001][T27554] __lock_acquire+0x126f/0x1c90 [ 1620.589680][T27554] lock_acquire+0x179/0x350 [ 1620.591377][T27554] __mutex_lock+0x199/0xb90 [ 1620.593207][T27554] kobject_uevent_env+0xb36/0x1870 [ 1620.595368][T27554] loop_set_status+0x9c9/0xb90 [ 1620.597396][T27554] loop_set_status_compat+0xb9/0x110 [ 1620.599777][T27554] lo_compat_ioctl+0x10f/0x170 [ 1620.601877][T27554] compat_blkdev_ioctl+0x2ee/0x7a0 [ 1620.604117][T27554] __ia32_compat_sys_ioctl+0x23f/0x370 [ 1620.606514][T27554] __do_fast_syscall_32+0x7c/0x3a0 [ 1620.608736][T27554] do_fast_syscall_32+0x32/0x80 [ 1620.610875][T27554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1620.613660][T27554] [ 1620.613660][T27554] other info that might help us debug this: [ 1620.613660][T27554] [ 1620.617660][T27554] Chain exists of: [ 1620.617660][T27554] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 1620.617660][T27554] [ 1620.622406][T27554] Possible unsafe locking scenario: [ 1620.622406][T27554] [ 1620.624712][T27554] CPU0 CPU1 [ 1620.626372][T27554] ---- ---- [ 1620.628075][T27554] lock(&q->q_usage_counter(io)#24); [ 1620.629752][T27554] lock(fs_reclaim); [ 1620.631875][T27554] lock(&q->q_usage_counter(io)#24); [ 1620.634471][T27554] lock(uevent_sock_mutex); [ 1620.635931][T27554] [ 1620.635931][T27554] *** DEADLOCK *** [ 1620.635931][T27554] [ 1620.638446][T27554] 3 locks held by syz.3.4290/27554: [ 1620.640087][T27554] #0: ffff8880202e7400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2c/0xb90 [ 1620.642988][T27554] #1: ffff888042a16c40 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1620.646555][T27554] #2: ffff888042a16c78 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1620.650461][T27554] [ 1620.650461][T27554] stack backtrace: [ 1620.652310][T27554] CPU: 2 UID: 0 PID: 27554 Comm: syz.3.4290 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 1620.652324][T27554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1620.652331][T27554] Call Trace: [ 1620.652335][T27554] [ 1620.652339][T27554] dump_stack_lvl+0x116/0x1f0 [ 1620.652359][T27554] print_circular_bug+0x275/0x350 [ 1620.652373][T27554] check_noncircular+0x14c/0x170 [ 1620.652387][T27554] __lock_acquire+0x126f/0x1c90 [ 1620.652402][T27554] lock_acquire+0x179/0x350 [ 1620.652414][T27554] ? kobject_uevent_env+0xb36/0x1870 [ 1620.652427][T27554] ? __pfx___might_resched+0x10/0x10 [ 1620.652439][T27554] __mutex_lock+0x199/0xb90 [ 1620.652448][T27554] ? kobject_uevent_env+0xb36/0x1870 [ 1620.652459][T27554] ? block_devnode+0x9e/0xd0 [ 1620.652471][T27554] ? kobject_uevent_env+0xb36/0x1870 [ 1620.652482][T27554] ? __pfx___mutex_lock+0x10/0x10 [ 1620.652492][T27554] ? __asan_memcpy+0x3c/0x60 [ 1620.652506][T27554] ? kobject_get_path+0x8e/0x2a0 [ 1620.652517][T27554] ? kobject_uevent_env+0xb36/0x1870 [ 1620.652527][T27554] kobject_uevent_env+0xb36/0x1870 [ 1620.652540][T27554] ? __asan_memcpy+0x3c/0x60 [ 1620.652553][T27554] loop_set_status+0x9c9/0xb90 [ 1620.652568][T27554] loop_set_status_compat+0xb9/0x110 [ 1620.652581][T27554] ? __pfx_loop_set_status_compat+0x10/0x10 [ 1620.652593][T27554] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1620.652612][T27554] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1620.652628][T27554] lo_compat_ioctl+0x10f/0x170 [ 1620.652640][T27554] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 1620.652652][T27554] compat_blkdev_ioctl+0x2ee/0x7a0 [ 1620.652665][T27554] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1620.652678][T27554] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1620.652690][T27554] __ia32_compat_sys_ioctl+0x23f/0x370 [ 1620.652704][T27554] __do_fast_syscall_32+0x7c/0x3a0 [ 1620.652715][T27554] do_fast_syscall_32+0x32/0x80 [ 1620.652724][T27554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1620.652737][T27554] RIP: 0023:0xf7fb4579 [ 1620.652745][T27554] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1620.652755][T27554] RSP: 002b:00000000f50b555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1620.652765][T27554] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000004c02 [ 1620.652772][T27554] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1620.652778][T27554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1620.652783][T27554] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1620.652789][T27554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1620.652798][T27554] [ 1620.766523][T27571] overlayfs: missing 'lowerdir' [ 1620.865839][T27564] IPVS: Error connecting to the multicast addr VM DIAGNOSIS: 20:58:14 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81c3595f RDX=fffffbfff21104eb RSI=ffffffff8bf559e0 RDI=ffffffff8bf55a20 RBP=0000000000000293 RSP=ffffc900064ffad8 R8 =0000000000000000 R9 =fffffbfff21104ea R10=ffffffff90882757 R11=ffff88802b23c698 R12=ffff88801ffc8c28 R13=0000000000000000 R14=ffff88806dd7d998 R15=ffff88806dd7d988 RIP=ffffffff8b7bf414 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097762000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f99d17e1000 CR3=00000000556c3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f732e6d61706269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000610 000000000000f9f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b443900 RCX=ffffffff81af764d RDX=ffff888022958000 RSI=ffffffff81af7629 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90006a678a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=1ffff110046ed99a R12=dffffc0000000000 R13=0000000000000003 R14=ffffed1005688721 R15=ffff88802b33d080 RIP=ffffffff81af762b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097862000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f99d17dd000 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 0000ff0000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 000000ffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e322e325f434249 4c4700352e322e32 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000002e322e32 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c4700362e322e32 5f4342494c470035 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99d17e0b20 00007f99d17e1050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8557d315 RDI=ffffffff9ae6ca80 RBP=ffffffff9ae6ca40 RSP=ffffc900203af2f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9ae6ca40 R15=ffffffff8557d2b0 RIP=ffffffff8557d33f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097962000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080004000 CR3=000000006b348000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=ffff888012c45a40 RCX=ffffffff896242ab RDX=ffff88802376c880 RSI=0000000000000000 RDI=0000000000000007 RBP=ffff88804d84d04e RSP=ffffc900224876e8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=ffffffff9ae0fcf8 R12=0000000000000000 R13=0000000000000000 R14=ffff88804d84d04e R15=0000000000000000 RIP=ffffffff8b7ed2e0 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097a62000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73bdb1c CR3=00000000517f5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000