last executing test programs: 6m58.93045964s ago: executing program 32 (id=777): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0']) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 6m52.284687704s ago: executing program 4 (id=900): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) ioctl$UI_DEV_CREATE(r0, 0x5501) 6m52.22388757s ago: executing program 4 (id=904): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x801, 0x5000, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x10000, 0x8}) 6m52.035787657s ago: executing program 4 (id=912): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3) r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close(r1) 6m51.930587349s ago: executing program 4 (id=914): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x48) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x227) 6m51.927193595s ago: executing program 4 (id=915): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)='H', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) 6m51.621550464s ago: executing program 4 (id=921): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 6m51.589058248s ago: executing program 33 (id=921): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 5m14.091650106s ago: executing program 3 (id=3327): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) 5m14.04691902s ago: executing program 3 (id=3329): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = epoll_create1(0x80000) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0xc, 0x0, r3, 0x0, r0, 0x1, 0x0, 0x2}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m13.939713129s ago: executing program 3 (id=3333): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', 0x4000}) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3}) 5m13.878848958s ago: executing program 3 (id=3335): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m13.878230184s ago: executing program 3 (id=3336): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 5m13.568474118s ago: executing program 3 (id=3341): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000600)=""/222, 0xde}], 0x1, 0x1a, 0x1a) 5m13.562025333s ago: executing program 34 (id=3341): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000600)=""/222, 0xde}], 0x1, 0x1a, 0x1a) 3m57.718326464s ago: executing program 5 (id=5190): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001640)="bbbc1dd8889beb46dec5d8f10a9cfeb43df51c236af783be6d06168ba5ee885d22de56cf8f28454c9056e8ea504243eea719ff89848d2397923c4d8654ded8cdfdb6840df6e45c5be37b74df7f5c776912b4b1e10a4fd3604146cf3c17e98498bd14bca7abcf53a3ee77d4a9", 0x6c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001600)="cfe2", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b40)="9af9e7c3a62bee995791e76fd927d23f32fc74a2e9c3956acece512d8dfe2c6eb51928d50cf8c02a89eaa2dfb9d1378201eab8defcf2992f5556c98bb6effd7f17b4", 0x42}], 0x1}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)="2d7e0a69e7cba3b2d68de1c0989549bc6cdda120124a2c9092f1612275227e34d55e8a621628d6768e9d", 0x2a}], 0x1}}], 0x4, 0x44000) 3m56.853853134s ago: executing program 5 (id=5194): r0 = socket$inet(0x2, 0x5, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) 3m56.788914399s ago: executing program 5 (id=5196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) 3m56.786826631s ago: executing program 5 (id=5197): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000000c0)='./file0/file0/../file0\x00', 0x1) 3m56.779608435s ago: executing program 5 (id=5198): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r0, 0x0}) io_uring_enter(r1, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 3m56.47946514s ago: executing program 5 (id=5200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3m56.470816689s ago: executing program 35 (id=5200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3m47.87985668s ago: executing program 1 (id=5395): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]}) 3m47.694574365s ago: executing program 1 (id=5396): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003040)=@newchain={0x68, 0x64, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x5}, {0x8, 0xffff}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_sample={0x30, 0x14, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4084}, 0x891) recvmmsg(r1, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002940)=""/2, 0x2}, {&(0x7f0000000080)=""/96, 0x60}], 0x2}, 0x1}], 0x1, 0x2100, 0x0) 3m47.639635487s ago: executing program 1 (id=5398): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) flistxattr(r0, 0x0, 0x0) 3m47.466891988s ago: executing program 1 (id=5407): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 3m47.410603982s ago: executing program 1 (id=5409): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 3m47.146864635s ago: executing program 1 (id=5425): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) syz_io_uring_complete(r0) 3m47.07463674s ago: executing program 36 (id=5425): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) syz_io_uring_complete(r0) 3m25.420803491s ago: executing program 7 (id=5936): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m25.266016509s ago: executing program 7 (id=5937): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="98ac3c6741a40ce1997f49fba70d946a07f2178b8bc77dc9339505c7", 0x1c}, {&(0x7f0000000140)="f3e41672c645e11018dc0400000000000000a4c47b311e714b5aab5a85ab5f", 0x1f}, {&(0x7f00000002c0)="390ea240d45db5fcbed46fe54ba61b38faa36d565c3ed3685df9f01173ce90c93393750e9e37617c255ddb6d56", 0x2d}], 0x3}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 3m25.213181817s ago: executing program 7 (id=5938): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000000)={0x0, 0xb000}) 3m25.116237476s ago: executing program 7 (id=5940): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000440)) 3m25.077797137s ago: executing program 7 (id=5941): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = syz_create_resource$binfmt(&(0x7f0000000400)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 3m25.013256577s ago: executing program 7 (id=5943): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m10.010357387s ago: executing program 37 (id=5943): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m1.819301304s ago: executing program 8 (id=6545): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x4b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) 3m1.756730527s ago: executing program 8 (id=6546): syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 3m1.756476034s ago: executing program 8 (id=6547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 3m1.653474622s ago: executing program 8 (id=6550): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5", 0xc2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x1ff, 0x0, 0x9, 0x1, 0x4, 0x2, 0x3, {0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0xfffffffb}}, 0x7fff, 0xc, 0x0, 0x6, 0x2817c26c}}, &(0x7f00000000c0)=0xb0) 3m1.64769576s ago: executing program 8 (id=6552): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, 0x0) chdir(&(0x7f0000000280)='./file1\x00') 3m1.629853439s ago: executing program 8 (id=6553): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x6, @empty, 0x8}, 0x1c) listen(r2, 0xfffffffc) 2m46.604126941s ago: executing program 38 (id=6553): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x6, @empty, 0x8}, 0x1c) listen(r2, 0xfffffffc) 4.931609369s ago: executing program 9 (id=9594): sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$loop(0x0, 0x81, 0x101000) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 3.571210191s ago: executing program 9 (id=9608): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) 2.827432225s ago: executing program 9 (id=9610): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x707b, 0x400, 0x2, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r4, 0x154e, 0x0, 0x41, 0x0, 0x0) 2.427714866s ago: executing program 2 (id=9616): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x4}, [{0x2, 0x1}], {0x4, 0x2}, [], {0x10, 0x3}, {0x20, 0x6}}, 0x2c, 0x3) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x259) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 2.426458512s ago: executing program 2 (id=9624): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000340)='-&:\n-\xb2];\x0f\xb2\x86NV6&\x01=\x94Z}\xfaW~\xae\x87\x88\xea\xde\xd9=-\x01\x00\x00\x80=\x1d\x8bl\xd5\xc3DE\xaf0\x8e\xac\xf2r#TZ>\xfb\xdf\xc1\xd4\xd1\xee\x88\xebI\xab\xf6\xab}\x85\x18 \x8a\x8aG:\xacD-\x99JD/~\xd6\xb5m\xac\x8d\x1d\x1c\xe9\xe5<\xfcP)E\xc1\x8e\xeb\xc9\x158Mq\x01\xe1\xf6-\xc3\xaa\x9a\x9be\xcd\xf2\xde\xccx\x1f\x0fne\xe8C\xe4Y\xc9\vR2fY\x8e\x9d\x97 \x00\x00\x00\x00\xe8W\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6JV\x80\xdd\x96F\xc90}SH\xe8\xd4RV\xb6\xc9h\xfb\xf3#\xcb\x14a\xab\b\x05\x7f\xaa\x92AjYg\xef\xfb\x1fn.\x7f\xb1\xe26~$\xa9\v\x9b|>\xf5G\xb5\xac/\xc3n\x16\xee\xdf\xd0a', 0x5) fcntl$setlease(r2, 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xe3d3, 0x8, 0x800005, 0x1f0}, &(0x7f0000000440)=0x0, &(0x7f0000002d00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xeffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002e40)="f8f5", 0x2}], 0x1}, 0x0, 0x24000890, 0x1}) readahead(0xffffffffffffffff, 0x7, 0x0) io_uring_enter(r4, 0x3516, 0x0, 0x41, 0x0, 0x0) 2.404401883s ago: executing program 6 (id=9617): prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0xdc0b, 0x10100, 0x0, 0x20e, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) 2.108845731s ago: executing program 0 (id=9618): r0 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r0, &(0x7f0000000740), 0xffffffffffffffbc) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$rose(r1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11}, 0x8f) fcntl$addseals(r0, 0x409, 0x8) 1.916123996s ago: executing program 9 (id=9619): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000500)={0x0, 0x4, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0xfffffffc}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.845290459s ago: executing program 0 (id=9620): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0xff13, 0x0, 0xffff8000, 0xfffffffb, 0xfffffffc}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x3, 0x0, 0x10001}}]}}}]}, 0x78}}, 0x40000) bind$packet(r1, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r1, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) 1.747320283s ago: executing program 0 (id=9621): openat$sysfs(0xffffffffffffff9c, 0x0, 0x42002, 0x1e1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}, {@dfltuid}, {@dfltgid}]}}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r4, r3, 0x0, 0x80000000) 1.722537598s ago: executing program 0 (id=9622): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000002d00)={0x1, {{0xa, 0x4e22, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x800018f1) r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 1.535415068s ago: executing program 2 (id=9623): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x6a, 0x5, 0x30000000, 0x3) syz_clone(0x0, 0x0, 0xfffffffffffffdaf, 0x0, 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000180)) write$P9_RLINK(r0, &(0x7f0000000100)={0x7, 0x47, 0x1}, 0x7) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 1.526517758s ago: executing program 6 (id=9625): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) syz_io_uring_setup(0x230, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) read$dsp(r0, &(0x7f00000001c0)=""/95, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r1, 0x0, 0x7fffffc}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.43707641s ago: executing program 6 (id=9626): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019c09000f01c2", 0x69}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000240), 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.436927139s ago: executing program 6 (id=9627): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) 1.434740683s ago: executing program 2 (id=9635): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write$tun(r0, &(0x7f00000002c0)={@val, @void, @mpls={[], @llc={@snap={0x0, 0x0, "03", "da7d00"}}}}, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x24000000}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r1, &(0x7f0000000180)=""/79, 0xfffffe69, 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x3314, 0x206) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) 1.060160948s ago: executing program 9 (id=9628): socket(0xa, 0x2, 0xfffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 1.060041278s ago: executing program 2 (id=9629): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x8, 0x0, {0x0, 0x0, r0}}) io_uring_enter(r3, 0x3517, 0x173d, 0x42, 0x0, 0x0) 806.209375ms ago: executing program 0 (id=9630): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1}, 0x38) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffff11) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x20, 0x0, 0x0, 0x0) 796.317508ms ago: executing program 0 (id=9631): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 540.845263ms ago: executing program 6 (id=9632): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 300.704132ms ago: executing program 6 (id=9633): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r2, 0x9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 60.076608ms ago: executing program 9 (id=9634): prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0xdc0b, 0x10100, 0x0, 0x20e, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) 0s ago: executing program 2 (id=9636): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_elf32(r1, 0x0, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff000014001100"], 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) kernel console output (not intermixed with test programs): [T22974] lo speed is unknown, defaulting to 1000 [ 340.986993][ T3248] usb 11-1: config 0 has an invalid interface number: 160 but max is 0 [ 340.989602][ T3248] usb 11-1: config 0 has no interface number 0 [ 340.993330][ T3248] usb 11-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 340.996340][ T3248] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.998855][ T3248] usb 11-1: Product: syz [ 341.000109][ T3248] usb 11-1: Manufacturer: syz [ 341.001608][ T3248] usb 11-1: SerialNumber: syz [ 341.006873][ T3248] usb 11-1: config 0 descriptor?? [ 341.010058][ T3248] usb 11-1: Found UVC 0.00 device syz (05ac:8501) [ 341.012130][ T3248] usb 11-1: No valid video chain found. [ 341.103222][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 341.103233][ T40] audit: type=1326 audit(1757100751.202:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22972 comm="syz.9.7124" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x0 [ 341.113536][T22981] syzkaller1: entered promiscuous mode [ 341.115305][T22981] syzkaller1: entered allmulticast mode [ 341.213864][ T6020] usb 11-1: USB disconnect, device number 14 [ 341.495915][ C3] net_ratelimit: 2 callbacks suppressed [ 341.495928][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 341.586002][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 342.287265][T23063] tipc: Failed to remove unknown binding: 66,1,1/0:1459175720/1459175722 [ 342.290309][T23063] tipc: Failed to remove unknown binding: 66,1,1/0:1459175720/1459175722 [ 342.449369][T23072] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 342.452249][T23074] netlink: 'syz.2.7164': attribute type 7 has an invalid length. [ 342.457464][T23074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7164'. [ 342.535843][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 342.615886][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 342.662582][ T40] audit: type=1326 audit(1757100752.762:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23087 comm="syz.6.7170" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x0 [ 342.725600][T23095] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7173'. [ 342.735427][T23097] overlayfs: failed to clone upperpath [ 342.979212][T23112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7178'. [ 343.333925][T23138] netlink: 'syz.0.7188': attribute type 7 has an invalid length. [ 343.336956][T23138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7188'. [ 343.503648][T23150] overlayfs: failed to clone upperpath [ 343.575810][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 343.656491][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 343.955956][ T6020] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 344.062215][T23184] netlink: 'syz.2.7206': attribute type 7 has an invalid length. [ 344.064700][T23184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7206'. [ 344.114768][ T6020] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 344.118603][ T6020] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 344.122233][ T6020] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 344.125818][ T6020] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 344.129977][ T6020] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 344.133026][ T6020] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.136927][ T6020] usb 11-1: config 0 descriptor?? [ 344.555089][ T6020] plantronics 0003:047F:FFFF.0030: ignoring exceeding usage max [ 344.560191][ T6020] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 344.615806][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 344.695846][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 345.106833][T23242] netlink: 'syz.0.7231': attribute type 1 has an invalid length. [ 345.129525][T23242] bond1: (slave bridge2): making interface the new active one [ 345.133093][T23242] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 345.252514][T23256] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7236'. [ 345.264113][T23258] overlayfs: failed to clone upperpath [ 345.394587][T23280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7245'. [ 345.655824][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 345.727237][T23321] overlayfs: failed to clone upperpath [ 345.735875][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 345.753235][T23323] netlink: 'syz.2.7264': attribute type 4 has an invalid length. [ 345.759179][T23323] netlink: 'syz.2.7264': attribute type 4 has an invalid length. [ 346.414283][T23347] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 346.420709][T23347] kvm: Disabled LAPIC found during irq injection [ 346.547653][ T839] usb 11-1: USB disconnect, device number 15 [ 346.695911][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 346.776068][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 347.735863][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 347.797376][T23382] overlayfs: failed to clone upperpath [ 347.825872][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 348.016142][T23405] netlink: 'syz.2.7298': attribute type 1 has an invalid length. [ 348.037118][T23405] 8021q: adding VLAN 0 to HW filter on device bond5 [ 348.063226][T23405] bond5: (slave gretap2): making interface the new active one [ 348.068011][T23405] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 348.189055][T23425] Failed to get privilege flags for destination (handle=0x0:0x0) [ 348.272471][T23437] netlink: 'syz.2.7311': attribute type 21 has an invalid length. [ 348.274965][T23437] netlink: 'syz.2.7311': attribute type 1 has an invalid length. [ 348.484743][T23450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7320'. [ 348.494659][T23446] infiniband syz1: set down [ 348.497006][T23446] infiniband syz1: added syz_tun [ 348.516326][T23446] RDS/IB: syz1: added [ 348.518310][T23446] smc: adding ib device syz1 with port count 1 [ 348.520350][T23446] smc: ib device syz1 port 1 has pnetid [ 348.775810][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 348.865851][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 349.338915][T23490] overlayfs: failed to clone upperpath [ 349.439216][T23503] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 349.443285][T23503] block device autoloading is deprecated and will be removed. [ 349.487266][T23496] md2: using deprecated bitmap file support [ 349.489546][T23496] md2: error: bitmap file is already in use [ 349.523958][T23512] overlayfs: failed to clone lowerpath [ 349.825817][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 349.895884][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 350.069277][T23567] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7366'. [ 350.221772][T23586] syzkaller1: entered promiscuous mode [ 350.223519][T23586] syzkaller1: entered allmulticast mode [ 350.615216][T23606] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.7380'. [ 350.618101][T23606] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7380'. [ 350.865848][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.935888][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 351.438385][T23611] usb usb1: usbfs: process 23611 (syz.9.7383) did not claim interface 0 before use [ 351.730691][T23619] sch_tbf: burst 19869 is lower than device lo mtu (11337746) ! [ 351.737768][T23621] overlayfs: failed to clone upperpath [ 351.895883][ C3] net_ratelimit: 1 callbacks suppressed [ 351.895895][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 351.975848][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 352.103374][T23648] lo speed is unknown, defaulting to 1000 [ 352.382171][ T5978] Bluetooth: hci4: command 0x1003 tx timeout [ 352.386197][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 352.410515][T23668] overlayfs: failed to clone upperpath [ 352.448307][T23673] ip6tnl0: Master is either lo or non-ether device [ 352.510655][T23683] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 352.675690][T23710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7425'. [ 352.936627][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 352.942484][T23729] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7432'. [ 353.015872][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 353.975877][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 353.983688][T23760] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7443'. [ 354.041012][T23762] netlink: 'syz.9.7444': attribute type 1 has an invalid length. [ 354.054655][T23762] 8021q: adding VLAN 0 to HW filter on device bond3 [ 354.065894][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.089339][T23762] bond3: (slave veth7): Enslaving as an active interface with a down link [ 354.137626][T23762] bond3: (slave veth0_to_bond): making interface the new active one [ 354.140842][T23762] veth0_to_bond: entered promiscuous mode [ 354.142919][T23762] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 354.528341][T23775] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7450'. [ 354.643828][ T40] audit: type=1326 audit(1757100764.742:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.2.7452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 354.652366][ T40] audit: type=1326 audit(1757100764.742:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.2.7452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 354.656831][T23781] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7453'. [ 354.660823][ T40] audit: type=1326 audit(1757100764.742:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.2.7452" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 354.669815][ T40] audit: type=1326 audit(1757100764.742:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.2.7452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 354.677002][ T40] audit: type=1326 audit(1757100764.742:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.2.7452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 354.684081][ T40] audit: type=1326 audit(1757100764.742:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.2.7452" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 354.691174][ T40] audit: type=1326 audit(1757100764.742:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.2.7452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 354.698428][ T40] audit: type=1326 audit(1757100764.742:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.2.7452" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 354.705000][ T40] audit: type=1326 audit(1757100764.742:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.2.7452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 354.714090][ T40] audit: type=1326 audit(1757100764.742:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23778 comm="syz.2.7452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 354.774977][T23787] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7456'. [ 354.833400][T23790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7458'. [ 354.861295][T23793] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7459'. [ 355.015815][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 355.095842][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 355.268168][T23808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7466'. [ 356.055901][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.135864][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 356.193314][T23855] overlayfs: failed to clone upperpath [ 356.346929][T23867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7491'. [ 356.867059][T23892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7501'. [ 356.992857][T23900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7504'. [ 357.095842][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.185838][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 357.657887][T23940] binder: 23937:23940 ioctl c0306201 80000480 returned -14 [ 357.821872][T23946] fuse: Bad value for 'fd' [ 357.889634][T23948] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 357.892618][T23948] overlayfs: failed to set xattr on upper [ 357.895453][T23948] overlayfs: ...falling back to redirect_dir=nofollow. [ 358.135913][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.197087][T23952] netlink: 'syz.0.7534': attribute type 11 has an invalid length. [ 358.216183][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 358.491617][T23988] overlayfs: failed to clone upperpath [ 358.679863][T24004] "syz.2.7551" (24004) uses obsolete ecb(arc4) skcipher [ 359.175840][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.255971][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 359.293631][T24019] loop2: detected capacity change from 0 to 7 [ 359.297496][T24019] loop2: [ 359.298481][T24019] loop2: partition table partially beyond EOD, truncated [ 359.552632][T24046] __nla_validate_parse: 2 callbacks suppressed [ 359.552643][T24046] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7566'. [ 359.567357][T24046] 8021q: adding VLAN 0 to HW filter on device bond4 [ 359.584953][T24046] vlan0: entered allmulticast mode [ 359.586711][T24046] bond4: entered allmulticast mode [ 359.740683][T24063] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7573'. [ 360.225821][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.305841][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 360.442820][ T63] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 361.195114][T24124] lo speed is unknown, defaulting to 1000 [ 361.255815][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 361.337755][T24135] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 361.340072][T24135] overlayfs: failed to set xattr on upper [ 361.341933][T24135] overlayfs: ...falling back to redirect_dir=nofollow. [ 361.344201][T24135] overlayfs: ...falling back to metacopy=off. [ 361.345850][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 361.346556][T24135] overlayfs: ...falling back to index=off. [ 361.350269][T24135] overlayfs: ...falling back to uuid=null. [ 361.422117][T24139] overlayfs: upper fs does not support tmpfile. [ 361.630482][T24152] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7605'. [ 361.633271][T24152] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7605'. [ 361.760664][T24160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7607'. [ 361.899659][T24175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.096101][ T3248] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 362.257452][ T3248] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 362.260972][ T3248] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 362.264470][ T3248] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 362.267820][ T3248] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 362.270647][ T3248] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.276510][T24171] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 362.280244][ T3248] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 362.295808][ C3] net_ratelimit: 1 callbacks suppressed [ 362.295818][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.375841][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 362.621718][T24201] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7622'. [ 363.335987][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 363.362592][T24215] overlayfs: failed to clone upperpath [ 363.415919][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 363.422170][T24218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7631'. [ 363.529253][T24222] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 363.835896][T24237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7640'. [ 363.942943][T24243] overlayfs: failed to clone upperpath [ 363.986620][T24245] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7644'. [ 364.148582][T24252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7647'. [ 364.317611][ T3248] usb 11-1: USB disconnect, device number 16 [ 364.375832][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.455874][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 364.459414][ T63] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 364.462472][ T63] Bluetooth: hci3: Injecting HCI hardware error event [ 364.466904][ T63] Bluetooth: hci3: hardware error 0x00 [ 364.537587][T24269] netlink: 'syz.0.7654': attribute type 4 has an invalid length. [ 364.547660][T24269] netlink: 'syz.0.7654': attribute type 4 has an invalid length. [ 364.866434][T24293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7664'. [ 365.261349][T24320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7674'. [ 365.315992][ T1183] veth0_to_bond: left promiscuous mode [ 365.415816][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 365.440290][T24339] fanotify_encode_fh: 1 callbacks suppressed [ 365.440300][T24339] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 365.440349][ T5959] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 365.442487][T24339] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 365.444479][ T5959] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 365.449486][T24339] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 365.451058][ T5959] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 365.495836][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 365.525604][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 365.525614][ T40] audit: type=1326 audit(1757100775.622:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24349 comm="syz.2.7687" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x0 [ 365.541783][T24351] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7682'. [ 365.591513][T24354] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 365.704902][T24364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7692'. [ 365.741397][T24364] veth9: entered promiscuous mode [ 365.746482][T24371] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7696'. [ 366.317963][T24401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7706'. [ 366.417331][T24410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7710'. [ 366.422031][T24410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7710'. [ 366.436925][T24410] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7710'. [ 366.454747][T24410] syz.0.7710: page allocation failure: order:9, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 366.459981][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 366.462901][T24410] CPU: 3 UID: 0 PID: 24410 Comm: syz.0.7710 Not tainted syzkaller #0 PREEMPT(full) [ 366.462916][T24410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 366.462922][T24410] Call Trace: [ 366.462926][T24410] [ 366.462930][T24410] dump_stack_lvl+0x16c/0x1f0 [ 366.462950][T24410] warn_alloc+0x248/0x3a0 [ 366.462982][T24410] ? __pfx_warn_alloc+0x10/0x10 [ 366.462994][T24410] ? psi_memstall_leave+0x1e6/0x2d0 [ 366.463009][T24410] ? __alloc_pages_direct_compact+0x466/0x580 [ 366.463023][T24410] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 366.463038][T24410] ? psi_memstall_leave+0x1e6/0x2d0 [ 366.463052][T24410] __alloc_frozen_pages_noprof+0xea2/0x23f0 [ 366.463068][T24410] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 366.463084][T24410] ? netlink_unicast+0x5a7/0x870 [ 366.463099][T24410] ? netlink_sendmsg+0x8d1/0xdd0 [ 366.463112][T24410] ? ____sys_sendmsg+0xa95/0xc70 [ 366.463124][T24410] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 366.463135][T24410] ? do_fast_syscall_32+0x32/0x80 [ 366.463156][T24410] ? __lock_acquire+0xb97/0x1ce0 [ 366.463171][T24410] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 366.463196][T24410] ? policy_nodemask+0xea/0x4e0 [ 366.463212][T24410] alloc_pages_mpol+0x1fb/0x550 [ 366.463227][T24410] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 366.463245][T24410] ? tcf_em_tree_validate+0x1c8/0xd60 [ 366.463259][T24410] ___kmalloc_large_node+0xed/0x160 [ 366.463277][T24410] ? tcf_em_tree_validate+0x1c8/0xd60 [ 366.463290][T24410] __kmalloc_large_node_noprof+0x1c/0x70 [ 366.463307][T24410] __kmalloc_noprof.cold+0xc/0x61 [ 366.463323][T24410] ? __nla_parse+0x40/0x60 [ 366.463337][T24410] tcf_em_tree_validate+0x1c8/0xd60 [ 366.463355][T24410] ? __pfx_tcf_em_tree_validate+0x10/0x10 [ 366.463371][T24410] ? tcf_exts_validate+0x42/0x60 [ 366.463385][T24410] basic_change+0x3ac/0x1400 [ 366.463403][T24410] ? __pfx_basic_change+0x10/0x10 [ 366.463424][T24410] ? __pfx_basic_change+0x10/0x10 [ 366.463438][T24410] tc_new_tfilter+0xa32/0x2340 [ 366.463456][T24410] ? __pfx_tc_new_tfilter+0x10/0x10 [ 366.463473][T24410] ? stack_trace_save+0x8e/0xc0 [ 366.463488][T24410] ? __lock_acquire+0x62e/0x1ce0 [ 366.463509][T24410] ? find_held_lock+0x2b/0x80 [ 366.463519][T24410] ? __pfx_tc_new_tfilter+0x10/0x10 [ 366.463533][T24410] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 366.463551][T24410] ? __pfx_tc_new_tfilter+0x10/0x10 [ 366.463566][T24410] rtnetlink_rcv_msg+0x95e/0xe90 [ 366.463583][T24410] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 366.463603][T24410] ? ref_tracker_free+0x37c/0x830 [ 366.463614][T24410] netlink_rcv_skb+0x158/0x420 [ 366.463629][T24410] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 366.463651][T24410] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 366.463673][T24410] ? netlink_deliver_tap+0x1ae/0xd30 [ 366.463692][T24410] netlink_unicast+0x5a7/0x870 [ 366.463710][T24410] ? __pfx_netlink_unicast+0x10/0x10 [ 366.463726][T24410] ? __pfx___might_resched+0x10/0x10 [ 366.463743][T24410] netlink_sendmsg+0x8d1/0xdd0 [ 366.463761][T24410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.463779][T24410] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 366.463794][T24410] ____sys_sendmsg+0xa95/0xc70 [ 366.463807][T24410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.463820][T24410] ? get_compat_msghdr+0x11a/0x170 [ 366.463843][T24410] ? __pfx_futex_wake_mark+0x10/0x10 [ 366.463869][T24410] ___sys_sendmsg+0x134/0x1d0 [ 366.463896][T24410] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.463931][T24410] ? find_held_lock+0x2b/0x80 [ 366.463966][T24410] __sys_sendmsg+0x16d/0x220 [ 366.463994][T24410] ? __pfx___sys_sendmsg+0x10/0x10 [ 366.464017][T24410] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 366.464052][T24410] ? rcu_is_watching+0x12/0xc0 [ 366.464072][T24410] __do_fast_syscall_32+0x7c/0x3a0 [ 366.464091][T24410] do_fast_syscall_32+0x32/0x80 [ 366.464106][T24410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 366.464119][T24410] RIP: 0023:0xf706e579 [ 366.464128][T24410] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 366.464138][T24410] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 366.464148][T24410] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 366.464154][T24410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 366.464160][T24410] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 366.464165][T24410] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 366.464171][T24410] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 366.464184][T24410] [ 366.464202][T24410] Mem-Info: [ 366.536268][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 366.536778][ T63] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 366.537457][T24410] active_anon:544 inactive_anon:848 isolated_anon:0 [ 366.537457][T24410] active_file:359 inactive_file:5379 isolated_file:0 [ 366.537457][T24410] unevictable:18579 dirty:260 writeback:0 [ 366.537457][T24410] slab_reclaimable:7339 slab_unreclaimable:81107 [ 366.537457][T24410] mapped:22435 shmem:1773 pagetables:1688 [ 366.537457][T24410] sec_pagetables:333 bounce:0 [ 366.537457][T24410] kernel_misc_reclaimable:0 [ 366.537457][T24410] free:40820 free_pcp:255 free_cma:0 [ 366.537510][T24410] Node 0 active_anon:200kB inactive_anon:52kB active_file:120kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1668kB dirty:0kB writeback:0kB shmem:6972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8592kB pagetables:1480kB sec_pagetables:1192kB all_unreclaimable? yes Balloon:0kB [ 366.537557][T24410] Node 1 active_anon:1976kB inactive_anon:3340kB active_file:1316kB inactive_file:21516kB unevictable:70780kB isolated(anon):0kB isolated(file):0kB mapped:88072kB dirty:1040kB writeback:0kB shmem:120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:7236kB pagetables:5272kB sec_pagetables:140kB all_unreclaimable? no Balloon:0kB [ 366.537604][T24410] Node 0 DMA free:2152kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 366.537656][T24410] lowmem_reserve[]: 0 288 288 288 288 [ 366.537693][T24410] Node 0 DMA32 free:22188kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:0KB free_highatomic:0KB active_anon:200kB inactive_anon:52kB active_file:120kB inactive_file:0kB unevictable:3536kB writepending:0kB present:1032196kB managed:295116kB mlocked:0kB bounce:0kB free_pcp:244kB local_pcp:212kB free_cma:0kB [ 366.537754][T24410] lowmem_reserve[]: 0 0 0 0 0 [ 366.537791][T24410] Node 1 DMA32 free:138940kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048KB free_highatomic:2048KB active_anon:1976kB inactive_anon:3340kB active_file:1316kB inactive_file:21516kB unevictable:70780kB writepending:1040kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:776kB local_pcp:172kB free_cma:0kB [ 366.537846][T24410] lowmem_reserve[]: 0 0 0 0 0 [ 366.537883][T24410] Node 0 DMA: 2*4kB (U) 13*8kB (UM) 10*16kB (U) 5*32kB (UM) 3*64kB (M) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2160kB [ 366.538020][T24410] Node 0 DMA32: 469*4kB (UME) 361*8kB (UME) 103*16kB (UME) 183*32kB (UME) 62*64kB (UME) 20*128kB (UME) 7*256kB (UM) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 22124kB [ 366.538164][T24410] Node 1 DMA32: 1961*4kB (UME) 1007*8kB (UME) 595*16kB (UME) 538*32kB (UME) 296*64kB (UME) 159*128kB (UME) 101*256kB (UME) 43*512kB (UM) 7*1024kB (UM) 1*2048kB (H) 0*4096kB = 139020kB [ 366.538319][T24410] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.538334][T24410] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 366.538349][T24410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.538363][T24410] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 366.538378][T24410] 24784 total pagecache pages [ 366.538385][T24410] 438 pages in swap cache [ 366.538392][T24410] Free swap = 84964kB [ 366.538400][T24410] Total swap = 124996kB [ 366.538407][T24410] 524155 pages RAM [ 366.538414][T24410] 0 pages HighMem/MovableOnly [ 366.538421][T24410] 209481 pages reserved [ 366.538427][T24410] 0 pages cma reserved [ 366.778145][T24436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7722'. [ 367.495831][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 367.535138][T24477] netlink: 'syz.9.7737': attribute type 10 has an invalid length. [ 367.538349][T24477] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.541077][T24477] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.550152][T24477] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.552452][T24477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.554850][T24477] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.557204][T24477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.562188][T24477] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 367.575048][T24477] bridge_slave_1: left allmulticast mode [ 367.575861][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 367.577803][T24477] bridge_slave_1: left promiscuous mode [ 367.581512][T24477] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.585376][T24477] bridge_slave_0: left allmulticast mode [ 367.588042][T24477] bridge_slave_0: left promiscuous mode [ 367.590336][T24477] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.610835][T24477] bond0: (slave bridge0): Releasing backup interface [ 367.958624][T24508] netlink: 'syz.6.7751': attribute type 11 has an invalid length. [ 368.535827][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.615972][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 369.105840][T18582] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 369.265904][T18582] usb 14-1: Using ep0 maxpacket: 32 [ 369.268762][T18582] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.272405][T18582] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.275411][T18582] usb 14-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 369.278809][T18582] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.282493][T18582] usb 14-1: config 0 descriptor?? [ 369.575805][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.655862][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 369.864099][T24608] netlink: 'syz.2.7792': attribute type 27 has an invalid length. [ 369.881096][T24608] vxlan0: left promiscuous mode [ 369.887119][T24608] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 369.889237][T24608] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 369.891456][T24608] macsec0: left promiscuous mode [ 369.893132][T24608] macsec0: left allmulticast mode [ 369.898068][T24608] gtp0: left promiscuous mode [ 369.923665][ T1138] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.926442][ T1138] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.942531][T24614] 8021q: adding VLAN 0 to HW filter on device à [ 369.946806][T24614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 369.952247][ T1138] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.956624][ T839] syz1: Port: 1 Link ACTIVE [ 369.958653][ T1138] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.205181][T18582] usbhid 14-1:0.0: can't add hid device: -71 [ 370.212874][T18582] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 370.218766][T18582] usb 14-1: USB disconnect, device number 2 [ 370.259870][T24628] __nla_validate_parse: 8 callbacks suppressed [ 370.259880][T24628] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7802'. [ 370.625801][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.665469][T24650] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.7810'. [ 370.668561][T24650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7810'. [ 370.705838][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 371.427372][T24659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7814'. [ 371.448499][T24659] netlink: 'syz.6.7814': attribute type 1 has an invalid length. [ 371.655881][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 371.794954][ T40] audit: type=1326 audit(1757100781.892:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24668 comm="syz.9.7819" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x0 [ 371.896870][T24669] ceph: No mds server is up or the cluster is laggy [ 372.292560][T24684] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7825'. [ 372.326241][T24686] team0: Port device team_slave_0 removed [ 372.350527][T24691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7828'. [ 372.354924][T24691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7828'. [ 372.359776][T24691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7828'. [ 372.363433][T24691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7828'. [ 372.457389][T24705] sch_fq: defrate 53322 ignored. [ 372.490952][T24708] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 372.689301][T24723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7842'. [ 372.695840][ C3] net_ratelimit: 2 callbacks suppressed [ 372.695850][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 372.775975][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 372.866425][ T40] audit: type=1326 audit(1757100782.972:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24726 comm="syz.6.7844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7fc00000 [ 372.873168][ T40] audit: type=1326 audit(1757100782.972:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24726 comm="syz.6.7844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7fc00000 [ 372.919671][ T40] audit: type=1326 audit(1757100783.022:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24726 comm="syz.6.7844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7fc00000 [ 373.185676][T24733] netlink: 'syz.2.7846': attribute type 1 has an invalid length. [ 373.272880][ T40] audit: type=1326 audit(1757100783.372:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24734 comm="syz.2.7847" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x0 [ 373.595264][ T40] audit: type=1326 audit(1757100783.692:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24726 comm="syz.6.7844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7fc00000 [ 373.675481][T24761] tipc: Failed to remove unknown binding: 66,1,1/0:813123240/813123242 [ 373.736294][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 373.815931][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 374.713551][ T40] audit: type=1326 audit(1757100784.812:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24807 comm="syz.2.7877" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 374.726468][ T40] audit: type=1326 audit(1757100784.812:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24807 comm="syz.2.7877" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 374.733705][ T40] audit: type=1326 audit(1757100784.812:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24807 comm="syz.2.7877" exe="/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 374.741860][ T40] audit: type=1326 audit(1757100784.812:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24807 comm="syz.2.7877" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 374.749742][T24814] netlink: 'syz.2.7880': attribute type 6 has an invalid length. [ 374.750916][T24806] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 374.754752][T24806] overlayfs: failed to set xattr on upper [ 374.756938][T24806] overlayfs: ...falling back to redirect_dir=nofollow. [ 374.759063][T24806] overlayfs: ...falling back to index=off. [ 374.760956][T24806] overlayfs: ...falling back to uuid=null. [ 374.763082][T24806] overlayfs: maximum fs stacking depth exceeded [ 374.775845][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.856033][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 374.954222][T24847] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 374.956537][T24847] overlayfs: failed to set xattr on upper [ 374.958315][T24847] overlayfs: ...falling back to redirect_dir=nofollow. [ 374.960451][T24847] overlayfs: ...falling back to index=off. [ 374.962279][T24847] overlayfs: ...falling back to uuid=null. [ 374.964107][T24847] overlayfs: maximum fs stacking depth exceeded [ 375.013551][T24858] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 375.018393][T24858] overlayfs: failed to set xattr on upper [ 375.020608][T24858] overlayfs: ...falling back to redirect_dir=nofollow. [ 375.022886][T24858] overlayfs: ...falling back to index=off. [ 375.024818][T24858] overlayfs: ...falling back to uuid=null. [ 375.032830][T24858] overlayfs: ...falling back to xino=off. [ 375.714341][T24910] overlayfs: failed to clone upperpath [ 375.803924][T24916] gtp2: entered promiscuous mode [ 375.815807][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 375.851378][T24919] __nla_validate_parse: 9 callbacks suppressed [ 375.851389][T24919] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7925'. [ 375.852050][T24920] overlayfs: failed to clone upperpath [ 375.895889][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 375.933253][T24925] overlayfs: failed to clone upperpath [ 376.098113][T24935] overlayfs: failed to clone upperpath [ 376.130177][T24938] batman_adv: batadv0: Adding interface: dummy0 [ 376.132173][T24938] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.141224][T24938] batman_adv: batadv0: Interface activated: dummy0 [ 376.151647][T24938] batadv0: mtu less than device minimum [ 376.154003][T24938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 376.176709][T24938] netlink: 'syz.6.7934': attribute type 10 has an invalid length. [ 376.181866][T24938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.186058][T24938] batadv0: entered allmulticast mode [ 376.188192][T24938] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 376.496293][T18582] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 376.583935][T24972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7949'. [ 376.659666][T18582] usb 14-1: too many configurations: 9, using maximum allowed: 8 [ 376.662786][T18582] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.665716][T18582] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.669443][T18582] usb 14-1: config 0 interface 0 has no altsetting 0 [ 376.672382][T18582] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.675157][T18582] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.679170][T18582] usb 14-1: config 0 interface 0 has no altsetting 0 [ 376.682711][T18582] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.685492][T18582] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.691466][T18582] usb 14-1: config 0 interface 0 has no altsetting 0 [ 376.706950][T18582] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.710170][T18582] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.713524][T18582] usb 14-1: config 0 interface 0 has no altsetting 0 [ 376.719825][T18582] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.722600][T18582] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.726941][T18582] usb 14-1: config 0 interface 0 has no altsetting 0 [ 376.730683][T18582] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.733451][T18582] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.738653][T18582] usb 14-1: config 0 interface 0 has no altsetting 0 [ 376.741515][T18582] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.744279][T18582] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.747937][T18582] usb 14-1: config 0 interface 0 has no altsetting 0 [ 376.751762][T18582] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.754531][T18582] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.758925][T18582] usb 14-1: config 0 interface 0 has no altsetting 0 [ 376.762592][T18582] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 376.765421][T18582] usb 14-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 376.768349][T18582] usb 14-1: Product: syz [ 376.769729][T18582] usb 14-1: Manufacturer: syz [ 376.771207][T18582] usb 14-1: SerialNumber: syz [ 376.774048][T18582] usb 14-1: config 0 descriptor?? [ 376.778368][T18582] yurex 14-1:0.0: USB YUREX device now attached to Yurex #0 [ 377.045081][T24995] overlayfs: failed to clone upperpath [ 377.185224][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 377.185269][ T40] audit: type=1326 audit(1757100787.282:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24996 comm="syz.0.7960" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7fc00000 [ 377.189944][ T839] usb 14-1: USB disconnect, device number 3 [ 377.197860][ T839] yurex 14-1:0.0: USB YUREX #0 now disconnected [ 377.240628][ T40] audit: type=1326 audit(1757100787.342:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24996 comm="syz.0.7960" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7fc00000 [ 377.655081][T25037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7976'. [ 377.675364][T25037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7976'. [ 377.837214][T25052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7989'. [ 377.839156][T25053] netlink: 'syz.6.7982': attribute type 27 has an invalid length. [ 377.887062][T25053] batman_adv: batadv0: Interface deactivated: dummy0 [ 377.895960][ C3] net_ratelimit: 24 callbacks suppressed [ 377.895971][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.910299][ T40] audit: type=1326 audit(1757100788.012:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24996 comm="syz.0.7960" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7fc00000 [ 377.942905][T25053] gtp2: left promiscuous mode [ 377.958003][T25054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.960636][T25054] batman_adv: batadv0: Interface activated: dummy0 [ 377.962675][T25054] batadv0: mtu less than device minimum [ 377.964897][T25054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.968630][T25054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.972338][T25054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.975911][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 377.976082][T25054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.981821][T25054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.985465][T25054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.989187][T25054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.999582][ T1149] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 378.002438][ T1149] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 378.005089][T25055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7989'. [ 378.008790][ T1149] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 378.011452][ T1149] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 378.069227][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.071199][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.151834][T25081] netlink: 'syz.0.7995': attribute type 27 has an invalid length. [ 378.227417][T25081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.234868][T25081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.313175][T25081] veth9: left promiscuous mode [ 378.332339][T25086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.335496][T25086] 8021q: adding VLAN 0 to HW filter on device team0 Úßßßß$%[ 378.343041][T25102] netlink: 'syz.6.8002': attribute type 2 has an invalid length. [ 378.345519][ T46] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.348456][ T46] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.352448][ T46] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.361802][ T46] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.430345][T25115] netlink: 'syz.6.8008': attribute type 1 has an invalid length. [ 378.447348][T25115] 8021q: adding VLAN 0 to HW filter on device bond7 [ 378.470383][T25122] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.8007'. [ 378.473311][T25122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8007'. [ 378.485483][T25115] bond7: (slave veth9): Enslaving as an active interface with a down link [ 378.519358][T25115] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 378.522002][T25115] bond7: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 378.932401][T25158] netlink: 'syz.2.8027': attribute type 10 has an invalid length. [ 379.301559][T25177] overlayfs: failed to clone upperpath [ 379.443864][T25189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8039'. [ 379.675084][T25206] overlayfs: failed to clone upperpath [ 379.679419][T25206] overlayfs: failed to clone upperpath [ 381.531858][ T40] audit: type=1804 audit(1757100791.632:1209): pid=25217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8051" name="file0" dev="tmpfs" ino=1877 res=1 errno=0 [ 381.534971][T25222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8052'. [ 381.536790][T25223] netlink: 'syz.9.8050': attribute type 27 has an invalid length. [ 381.614921][T25232] overlayfs: failed to clone upperpath [ 381.658772][T25223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.667725][T25223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.875339][T25226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.878377][T25226] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.890254][ T1138] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.893598][ T1138] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.898092][ T1138] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.900872][ T1138] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.247135][T25259] bridge12: entered allmulticast mode [ 382.372097][T25287] netlink: 'syz.2.8072': attribute type 13 has an invalid length. [ 382.385074][T25287] gretap0: refused to change device tx_queue_len [ 382.388399][T25289] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 382.392605][T25289] overlayfs: failed to set xattr on upper [ 382.394455][T25289] overlayfs: ...falling back to redirect_dir=nofollow. [ 382.399053][T25289] overlayfs: ...falling back to index=off. [ 382.417396][T25289] overlayfs: ...falling back to uuid=null. [ 382.429263][T25295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8074'. [ 382.436144][T25289] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 382.814633][T25324] overlayfs: failed to clone upperpath [ 382.868813][T25328] netlink: 'syz.0.8082': attribute type 27 has an invalid length. [ 382.890647][T25328] bridge12: left allmulticast mode [ 382.930620][T25328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.933420][T25328] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.938333][T25328] net_ratelimit: 24 callbacks suppressed [ 382.938339][T25328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 383.068297][T25333] lo speed is unknown, defaulting to 1000 [ 383.105871][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 383.176044][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 383.313398][T25340] sd 0:0:0:0: PR command failed: 1026 [ 383.315639][T25340] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 383.317808][T25340] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 384.135927][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 384.216208][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 384.259364][T25389] overlayfs: failed to clone upperpath [ 384.290390][T25391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8104'. [ 384.393945][ T40] audit: type=1326 audit(1757100794.492:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25396 comm="syz.0.8108" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x0 [ 384.570113][T25412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8109'. [ 384.649281][T25418] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8111'. [ 384.653405][T25418] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8111'. [ 384.660555][T25418] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8111'. [ 384.664026][T25418] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8111'. [ 384.831382][T25433] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 385.175964][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 385.255853][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 385.814400][T25483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8137'. [ 385.891184][T25488] overlayfs: failed to clone upperpath [ 385.934049][T25493] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8141'. [ 385.948339][T25493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.950609][T25493] IPv6: NLM_F_CREATE should be set when creating new route [ 385.953566][T25493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.955875][T25493] IPv6: NLM_F_CREATE should be set when creating new route [ 386.215858][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.296181][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 386.775306][T25515] syz_tun: entered allmulticast mode [ 387.003206][ T40] audit: type=1804 audit(1757100797.102:1211): pid=25529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.8155" name="file0" dev="tmpfs" ino=5909 res=1 errno=0 [ 387.100972][T25533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8157'. [ 387.104894][T25533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8157'. [ 387.255817][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 387.310749][T25553] binder: 25552:25553 unknown command 0 [ 387.312912][T25553] binder: 25552:25553 ioctl c0306201 800001c0 returned -22 [ 387.458086][T25561] overlayfs: failed to clone upperpath [ 387.529920][T25567] overlayfs: failed to clone upperpath [ 388.175614][T25591] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8183'. [ 388.295872][ C3] net_ratelimit: 1 callbacks suppressed [ 388.295884][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 388.334980][T25603] overlayfs: failed to clone upperpath [ 388.375895][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 388.437050][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.440201][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.473808][T25618] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8194'. [ 388.510103][ T24] libceph: connect (1)[c::]:6789 error -101 [ 388.512064][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 388.573529][T25634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8202'. [ 388.653520][T25642] bridge: RTM_NEWNEIGH with invalid ether address [ 388.663790][T25621] ceph: No mds server is up or the cluster is laggy [ 389.261740][T25695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8223'. [ 389.265792][T25695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8223'. [ 389.288967][ T40] audit: type=1326 audit(1757100799.392:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25683 comm="syz.2.8218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7fc00000 [ 389.323762][T25704] overlayfs: failed to clone upperpath [ 389.335808][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 389.415893][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 389.966314][ T40] audit: type=1326 audit(1757100800.072:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25683 comm="syz.2.8218" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf701e579 code=0x7fc00000 [ 389.992832][T25714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8230'. [ 390.179804][ T40] audit: type=1804 audit(1757100800.282:1214): pid=25722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.8233" name="file0" dev="tmpfs" ino=6057 res=1 errno=0 [ 390.291605][ T6020] kernel read not supported for file inotify (pid: 6020 comm: kworker/1:3) [ 390.375878][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 390.451003][T25736] overlayfs: failed to clone upperpath [ 390.451060][T25737] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8238'. [ 390.465936][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 390.613124][ T6064] IPVS: starting estimator thread 0... [ 390.707780][T25755] IPVS: using max 44 ests per chain, 105600 per kthread [ 390.763359][T25770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8252'. [ 391.289412][T25795] overlayfs: failed to clone upperpath [ 391.415829][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.495900][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 391.697626][T25812] overlayfs: failed to clone upperpath [ 391.921961][T25820] lo speed is unknown, defaulting to 1000 [ 392.107824][T25820] __nla_validate_parse: 6 callbacks suppressed [ 392.107835][T25820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8274'. [ 392.113354][T25820] netlink: 'syz.0.8274': attribute type 13 has an invalid length. [ 392.116004][T25820] netlink: 'syz.0.8274': attribute type 17 has an invalid length. [ 392.123400][T25820] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 392.455924][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 392.689817][T25847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8285'. [ 392.696255][T25847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8285'. [ 392.745038][T25849] overlayfs: failed to clone upperpath [ 393.415357][T25904] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8310'. [ 393.505809][ C3] net_ratelimit: 1 callbacks suppressed [ 393.505820][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 393.575841][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 393.649765][T25912] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.8313'. [ 393.652649][T25912] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8313'. [ 393.895443][T25927] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8320'. [ 394.359079][T25948] netlink: 'syz.0.8327': attribute type 4 has an invalid length. [ 394.483104][T25960] uprobe: syz.0.8333:25960 failed to unregister, leaking uprobe [ 394.519773][T25964] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8334'. [ 394.540944][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.603599][T25968] lo speed is unknown, defaulting to 1000 [ 394.615903][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 395.575874][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 395.592569][T26000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8347'. [ 395.655845][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 395.672847][T26004] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8349'. [ 395.926484][T26008] lo speed is unknown, defaulting to 1000 [ 396.169291][T26008] netlink: 'syz.6.8351': attribute type 13 has an invalid length. [ 396.171744][T26008] netlink: 'syz.6.8351': attribute type 17 has an invalid length. [ 396.179898][T26008] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 396.314691][T26023] tipc: Enabling of bearer rejected, failed to enable media [ 396.334544][T26018] lo speed is unknown, defaulting to 1000 [ 396.615881][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 396.696004][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 396.795666][T26041] IPVS: Error connecting to the multicast addr [ 396.888677][T26045] lo speed is unknown, defaulting to 1000 [ 396.930496][T26049] syz_tun: entered allmulticast mode [ 396.955155][T26049] dvmrp1: entered allmulticast mode [ 397.059819][T26048] syz_tun: left allmulticast mode [ 397.110443][T26050] netlink: 'syz.2.8363': attribute type 13 has an invalid length. [ 397.113085][T26050] netlink: 'syz.2.8363': attribute type 17 has an invalid length. [ 397.490573][T26050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 397.673331][T26075] __nla_validate_parse: 3 callbacks suppressed [ 397.673341][T26075] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.8374'. [ 398.138389][T26094] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8382'. [ 398.255183][T26102] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8386'. [ 398.705821][ C3] net_ratelimit: 2 callbacks suppressed [ 398.705833][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 398.786082][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 398.965224][T26120] lo speed is unknown, defaulting to 1000 [ 398.997175][T26123] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 399.094095][T26131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8395'. [ 399.214039][T26120] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8391'. [ 399.217707][T26120] netlink: 'syz.9.8391': attribute type 13 has an invalid length. [ 399.220166][T26120] netlink: 'syz.9.8391': attribute type 17 has an invalid length. [ 399.239428][T26120] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 399.373686][T26143] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8401'. [ 399.462673][T26145] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8402'. [ 399.554086][T26149] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8403'. [ 399.660115][T26155] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8405'. [ 399.724631][T26168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8412'. [ 399.735810][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 399.817345][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 399.995508][T26189] netlink: 'syz.0.8420': attribute type 4 has an invalid length. [ 400.269101][ T40] audit: type=1326 audit(1757100810.372:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26204 comm="syz.0.8427" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706e579 code=0x0 [ 400.682010][T26208] lo speed is unknown, defaulting to 1000 [ 400.775821][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 400.855960][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 400.861964][T26208] netlink: 'syz.2.8428': attribute type 13 has an invalid length. [ 400.864454][T26208] netlink: 'syz.2.8428': attribute type 17 has an invalid length. [ 400.871410][T26208] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 400.899809][ T40] audit: type=1800 audit(1757100811.002:1216): pid=26223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.8434" name="bus" dev="overlay" ino=2152 res=0 errno=0 [ 400.996854][T26241] overlayfs: failed to clone upperpath [ 401.815846][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 402.408844][T26308] netlink: 'syz.9.8464': attribute type 1 has an invalid length. [ 402.420015][T26308] 8021q: adding VLAN 0 to HW filter on device bond5 [ 402.454469][T26308] bond5: (slave veth19): Enslaving as an active interface with a down link [ 402.482797][T26308] bond5: (slave dummy0): making interface the new active one [ 402.485730][T26308] dummy0: entered promiscuous mode [ 402.488489][T26308] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 402.502795][T26308] netlink: 'syz.9.8464': attribute type 10 has an invalid length. [ 402.506292][T26308] bond5: (slave dummy0): Releasing active interface [ 402.549421][T26315] tipc: Enabling of bearer rejected, failed to enable media [ 402.918729][ T40] audit: type=1326 audit(1757100813.022:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26294 comm="syz.2.8466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7fc00000 [ 403.562912][T26345] tipc: Started in network mode [ 403.564813][T26345] tipc: Node identity 76657468115f, cluster identity 4711 [ 403.576301][T26345] tipc: Enabled bearer , priority 0 [ 403.895890][ C3] net_ratelimit: 3 callbacks suppressed [ 403.895901][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 403.907137][T26361] netlink: 'syz.9.8487': attribute type 4 has an invalid length. [ 403.914046][T26361] netlink: 'syz.9.8487': attribute type 4 has an invalid length. [ 403.975839][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 404.273879][T26378] __nla_validate_parse: 11 callbacks suppressed [ 404.273890][T26378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8494'. [ 404.280476][T26378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8494'. [ 404.284349][T26378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8494'. [ 404.339732][T26383] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8496'. [ 404.493516][T26390] overlayfs: statfs failed on './file0' [ 404.576260][T19953] tipc: Node number set to 1731884136 [ 404.840051][T26417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8510'. [ 404.857660][T26417] sch_tbf: burst 6 is lower than device bridge14 mtu (1514) ! [ 404.945814][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 405.016054][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 405.535452][T26454] netlink: 'syz.6.8524': attribute type 3 has an invalid length. [ 405.538365][T26454] netlink: 'syz.6.8524': attribute type 3 has an invalid length. [ 405.541237][T26454] netlink: 'syz.6.8524': attribute type 3 has an invalid length. [ 405.543901][T26454] netlink: 'syz.6.8524': attribute type 3 has an invalid length. [ 405.547785][T26454] netlink: 'syz.6.8524': attribute type 3 has an invalid length. [ 405.550716][T26454] netlink: 'syz.6.8524': attribute type 3 has an invalid length. [ 405.553785][T26454] netlink: 'syz.6.8524': attribute type 3 has an invalid length. [ 405.556592][T26454] netlink: 'syz.6.8524': attribute type 3 has an invalid length. [ 405.559247][T26454] netlink: 'syz.6.8524': attribute type 3 has an invalid length. [ 405.561951][T26454] netlink: 'syz.6.8524': attribute type 3 has an invalid length. [ 405.934127][T26469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8531'. [ 405.970643][T26469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8531'. [ 405.980249][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 405.987993][T26471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8538'. [ 406.016152][ T6064] usb 14-1: new full-speed USB device number 4 using dummy_hcd [ 406.055904][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 406.177247][ T6064] usb 14-1: config 0 has no interfaces? [ 406.179030][ T6064] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 406.181999][ T6064] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.188222][ T6064] usb 14-1: config 0 descriptor?? [ 406.192253][T26484] overlayfs: failed to clone lowerpath [ 406.195169][T26484] overlayfs: failed to clone upperpath [ 406.296412][T26497] tipc: Enabling of bearer rejected, failed to enable media [ 406.357188][T26503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8546'. [ 406.360767][T26503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8546'. [ 406.743865][ T6064] libceph: connect (1)[c::]:6789 error -97 [ 406.745863][ T6064] libceph: mon0 (1)[c::]:6789 connect error [ 406.869034][T26551] à (unregistering): left promiscuous mode [ 406.871393][T26551] à (unregistering): Released all slaves [ 406.898563][T26546] ceph: No mds server is up or the cluster is laggy [ 406.993841][ T40] audit: type=1804 audit(1757100817.092:1218): pid=26559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8566" name="file0" dev="tmpfs" ino=13147 res=1 errno=0 [ 407.025849][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 407.095958][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 407.186889][T26577] overlayfs: failed to clone lowerpath [ 407.189745][T26577] overlayfs: failed to clone upperpath [ 407.225676][T26580] lo speed is unknown, defaulting to 1000 [ 407.889811][T26607] batman_adv: batadv0: Interface deactivated: dummy0 [ 408.055862][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 408.135859][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 408.792704][ T24] usb 14-1: USB disconnect, device number 4 [ 409.096480][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 409.175853][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 409.289183][T26670] __nla_validate_parse: 6 callbacks suppressed [ 409.289193][T26670] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8606'. [ 409.576161][T26690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8613'. [ 409.699456][T26708] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8622'. [ 409.755723][T26713] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8624'. [ 410.135845][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 410.175882][T19953] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 410.215840][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 410.328031][T19953] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.331649][T19953] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.334616][T19953] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 410.338901][T19953] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 410.341675][T19953] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.345224][T19953] usb 14-1: config 0 descriptor?? [ 410.756364][T19953] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 410.994608][T26749] netlink: 129704 bytes leftover after parsing attributes in process `syz.0.8639'. [ 411.019007][T26727] rdma_rxe: rxe_newlink: failed to add lo [ 411.022018][T19953] usb 14-1: USB disconnect, device number 5 [ 411.048845][ T40] audit: type=1326 audit(1757100821.152:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26752 comm="syz.0.8641" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x0 [ 411.175853][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 411.216789][T26762] validate_nla: 6 callbacks suppressed [ 411.216800][T26762] netlink: 'syz.2.8646': attribute type 1 has an invalid length. [ 411.248587][T26762] 8021q: adding VLAN 0 to HW filter on device bond7 [ 411.253239][T26762] bond6: (slave bond7): making interface the new active one [ 411.255907][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 411.256058][T26762] bond6: (slave bond7): Enslaving as an active interface with an up link [ 411.283288][T26762] bond6: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 411.287307][T26762] bond6: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 411.370703][T26773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.426580][T26773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.481632][T26773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.544303][T26776] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8651'. [ 411.966234][T26797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8661'. [ 411.993297][T26799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8662'. [ 412.030308][T26803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8664'. [ 412.161951][T26809] wg2: entered promiscuous mode [ 412.162085][T26811] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8668'. [ 412.163508][T26809] wg2: entered allmulticast mode [ 412.225849][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 412.272978][ T40] audit: type=1804 audit(1757100822.372:1220): pid=26819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8672" name="file0" dev="tmpfs" ino=2909 res=1 errno=0 [ 412.295827][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 412.837333][T26836] rdma_rxe: rxe_newlink: failed to add syz_tun [ 413.139842][T26849] 9pnet: Found fid 0 not clunked [ 413.256025][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 413.335829][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 414.295917][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 414.332128][T26896] __nla_validate_parse: 1 callbacks suppressed [ 414.332139][T26896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8696'. [ 414.337275][T26896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8696'. [ 414.375863][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 414.599555][T26916] binder: 26915:26916 ioctl c0306201 80000080 returned -14 [ 415.335828][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 415.415834][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 415.554911][T26950] tipc: Enabling of bearer rejected, failed to enable media [ 415.596371][T26958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8718'. [ 415.629704][T26961] overlayfs: failed to clone upperpath [ 415.656195][T26964] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8720'. [ 415.703875][T26964] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8720'. [ 415.839875][T26976] [ 415.841316][T26979] Invalid ELF header magic: != ELF [ 416.109171][T26992] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 416.119884][T26992] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 416.375814][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 416.455950][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.313002][T27039] overlayfs: failed to clone upperpath [ 417.357598][T27043] netlink: 'syz.0.8753': attribute type 1 has an invalid length. [ 417.364836][T27046] overlayfs: failed to clone upperpath [ 417.371619][T27043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.404773][T27043] bond2: (slave veth15): Enslaving as an active interface with a down link [ 417.425816][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 417.433888][T27043] bond2: (slave dummy0): making interface the new active one [ 417.437212][T27043] dummy0: entered promiscuous mode [ 417.438981][T27043] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 417.450257][T27043] netlink: 'syz.0.8753': attribute type 10 has an invalid length. [ 417.452721][T27043] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8753'. [ 417.456616][T27043] bond2: (slave dummy0): Releasing active interface [ 417.468468][T27052] batadv_slave_1: entered promiscuous mode [ 417.505821][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.518613][T27058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8759'. [ 417.520255][T27059] tipc: Enabling of bearer rejected, failed to enable media [ 417.527923][T27058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8759'. [ 417.557683][T27051] batadv_slave_1: left promiscuous mode [ 417.659444][T27071] netlink: 'syz.6.8764': attribute type 1 has an invalid length. [ 417.662001][T27071] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.8764'. [ 417.787710][ T40] audit: type=1804 audit(1757100827.892:1221): pid=27081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8768" name="file0" dev="ramfs" ino=116445 res=1 errno=0 [ 418.252765][T27095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8774'. [ 418.455894][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 418.535850][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 419.289756][ T40] audit: type=1326 audit(1757100829.392:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27102 comm="syz.6.8777" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7fc00000 [ 419.495820][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 419.575927][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 419.886700][T27155] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8796'. [ 420.269061][T27184] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8806'. [ 420.509306][T27198] netlink: 240 bytes leftover after parsing attributes in process `syz.9.8809'. [ 420.542448][T27200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8815'. [ 420.545844][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 420.554086][T27200] 8021q: adding VLAN 0 to HW filter on device bond3 [ 420.571324][T27200] vlan0: entered allmulticast mode [ 420.573018][T27200] bond3: entered allmulticast mode [ 420.615847][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 420.804128][T27211] overlayfs: failed to clone upperpath [ 420.863302][T27215] overlayfs: failed to clone upperpath [ 420.918116][T27217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8821'. [ 421.083922][T27227] overlayfs: failed to clone upperpath [ 421.215499][T27234] orangefs_devreq_write_iter: failed to copy head. [ 421.537731][T19953] IPVS: starting estimator thread 0... [ 421.541228][T27258] tipc: Started in network mode [ 421.542782][T27258] tipc: Node identity ac1414aa, cluster identity 4711 [ 421.546986][T27258] tipc: Enabled bearer , priority 10 [ 421.576669][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 421.639722][T27259] IPVS: using max 44 ests per chain, 105600 per kthread [ 421.655816][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 421.732813][T27325] netlink: 'syz.0.8843': attribute type 1 has an invalid length. [ 421.747881][T27325] 8021q: adding VLAN 0 to HW filter on device bond4 [ 421.765568][T27325] ip6erspan0: entered promiscuous mode [ 421.770391][T27325] bond4: (slave ip6erspan0): making interface the new active one [ 421.773719][T27325] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 421.841465][T27332] tipc: Enabling of bearer rejected, already enabled [ 421.939159][ T40] audit: type=1326 audit(1757100832.022:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27228 comm="syz.2.8826" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7fc00000 [ 422.034603][T27339] tipc: Enabling of bearer rejected, failed to enable media [ 422.130913][T27345] vlan0: entered allmulticast mode [ 422.377773][T27353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8854'. [ 422.380688][T27353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8854'. [ 422.390315][T27353] bridge_slave_0: left allmulticast mode [ 422.392139][T27353] bridge_slave_0: left promiscuous mode [ 422.394015][T27353] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.399245][T27353] bridge_slave_1: left allmulticast mode [ 422.401030][T27353] bridge_slave_1: left promiscuous mode [ 422.402804][T27353] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.410028][T27353] bond0: (slave bond_slave_0): Releasing backup interface [ 422.415407][T27353] bond0: (slave bond_slave_1): Releasing backup interface [ 422.422086][T27353] team0: Port device team_slave_1 removed [ 422.424229][T27353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.429391][T27353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.440006][T27353] bond1: (slave bridge2): Releasing active interface [ 422.447670][T27353] bond2: (slave veth15): Releasing active interface [ 422.455567][T27353] bond4: (slave ip6erspan0): Releasing active interface [ 422.535998][T19953] tipc: Node number set to 2886997162 [ 422.613251][T27362] Set syz1 is full, maxelem 65536 reached [ 422.615832][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 422.695981][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 423.665827][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 423.748244][T27390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8867'. [ 423.967753][T27396] netlink: 'syz.2.8870': attribute type 4 has an invalid length. [ 423.999559][T27396] netlink: 'syz.2.8870': attribute type 4 has an invalid length. [ 424.036349][T27398] vlan0: entered allmulticast mode [ 424.038187][T27398] bridge_slave_0: entered allmulticast mode [ 424.244148][T27417] ref_ctr increment failed for inode: 0xd1e offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888024bb4080 [ 424.244374][ T40] audit: type=1804 audit(1757100834.342:1224): pid=27417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8880" name="file0" dev="tmpfs" ino=3358 res=1 errno=0 [ 424.251016][T27416] uprobe: syz.0.8880:27416 failed to unregister, leaking uprobe [ 424.275070][T27420] netlink: 96 bytes leftover after parsing attributes in process `syz.9.8879'. [ 424.302149][T27422] netlink: 'syz.9.8881': attribute type 4 has an invalid length. [ 424.313032][T27422] netlink: 'syz.9.8881': attribute type 4 has an invalid length. [ 424.359500][ T40] audit: type=1326 audit(1757100834.462:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27429 comm="syz.9.8886" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f14579 code=0x0 [ 424.695813][ C3] net_ratelimit: 1 callbacks suppressed [ 424.695825][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 424.776179][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 425.745801][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 425.825856][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 426.785833][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 426.855835][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 427.214877][T27508] syz_tun: entered allmulticast mode [ 427.218291][T27508] syz_tun: left allmulticast mode [ 427.334786][T27518] netlink: 'syz.2.8910': attribute type 3 has an invalid length. [ 427.337745][T27518] netlink: 'syz.2.8910': attribute type 3 has an invalid length. [ 427.341395][T27518] netlink: 'syz.2.8910': attribute type 3 has an invalid length. [ 427.343939][T27518] netlink: 'syz.2.8910': attribute type 3 has an invalid length. [ 427.346717][T27518] netlink: 'syz.2.8910': attribute type 3 has an invalid length. [ 427.349259][T27518] netlink: 'syz.2.8910': attribute type 3 has an invalid length. [ 427.815833][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 427.895818][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 428.164554][T27544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8925'. [ 428.305871][T27551] binder: 27550:27551 ioctl c0306201 800003c0 returned -14 [ 428.855860][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 428.935832][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 429.193014][T27572] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8935'. [ 429.624012][T27589] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8939'. [ 429.896308][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 429.975895][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 430.222674][T27607] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8949'. [ 430.230614][T27609] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8950'. [ 430.358985][ T6020] syz1: Port: 1 Link DOWN [ 430.383115][T27623] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8954'. [ 430.526103][T27635] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8958'. [ 430.642511][T27641] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8960'. [ 430.945813][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 430.967824][T27659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8968'. [ 431.015829][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 431.336433][T27670] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8972'. [ 431.637026][T27673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.696449][T27673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.752817][T27673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.975809][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 432.055816][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.016157][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 433.105816][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.236870][T27708] __nla_validate_parse: 1 callbacks suppressed [ 433.236880][T27708] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8982'. [ 433.310507][T27717] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8987'. [ 433.450384][T27725] wg2: entered promiscuous mode [ 433.451954][T27725] wg2: entered allmulticast mode [ 434.002515][T27748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8999'. [ 434.048264][T27752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9000'. [ 434.055828][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 434.088547][T27754] overlayfs: failed to clone upperpath [ 434.093957][T27754] overlayfs: failed to clone upperpath [ 434.097333][T27754] overlayfs: failed to clone upperpath [ 434.122223][T27758] wg2: entered promiscuous mode [ 434.123791][T27758] wg2: entered allmulticast mode [ 434.145894][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 434.314053][ T63] Bluetooth: Unexpected continuation frame (len 12) [ 434.353413][T27771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9008'. [ 434.353428][T27774] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9010'. [ 434.551018][T27794] overlayfs: failed to clone upperpath [ 434.555505][T27794] overlayfs: failed to clone upperpath [ 434.560921][T27794] overlayfs: failed to clone upperpath [ 435.095809][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 435.175834][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 435.689337][T27848] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9032'. [ 436.135876][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 436.225834][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 436.260124][T27862] validate_nla: 6 callbacks suppressed [ 436.260134][T27862] netlink: 'syz.2.9036': attribute type 1 has an invalid length. [ 436.274987][T27862] 8021q: adding VLAN 0 to HW filter on device bond8 [ 436.308615][T27867] smc: net device bond0 erased user defined pnetid SYZ2 [ 436.317864][T27862] bond8: (slave veth21): Enslaving as an active interface with a down link [ 436.365458][T27862] netlink: 'syz.2.9036': attribute type 10 has an invalid length. [ 436.368904][T27862] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9036'. [ 436.419971][T27874] overlayfs: failed to clone upperpath [ 437.185815][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 437.265806][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 437.579964][T27907] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9059'. [ 437.776564][T27909] netlink: 'syz.6.9053': attribute type 1 has an invalid length. [ 437.788542][T27909] 8021q: adding VLAN 0 to HW filter on device bond8 [ 437.822781][T27909] bond8: (slave veth11): Enslaving as an active interface with a down link [ 437.848927][T27909] batman_adv: batadv0: Removing interface: dummy0 [ 437.854322][T27909] bond8: (slave dummy0): making interface the new active one [ 437.857840][T27909] dummy0: entered promiscuous mode [ 437.859924][T27909] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 437.873236][T27909] netlink: 'syz.6.9053': attribute type 10 has an invalid length. [ 437.877059][T27909] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9053'. [ 437.893226][T27909] bond8: (slave dummy0): Releasing active interface [ 438.038655][T27925] overlayfs: failed to clone upperpath [ 438.133514][T27934] wg2: entered promiscuous mode [ 438.135111][T27934] wg2: entered allmulticast mode [ 438.215878][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 438.305822][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 438.791052][T27957] overlayfs: failed to clone upperpath [ 439.187340][ T40] audit: type=1326 audit(1757100849.292:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27941 comm="syz.0.9068" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7fc00000 [ 439.265804][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 439.335832][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 439.498189][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.500389][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.987010][T27992] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9085'. [ 440.136884][T27998] IPVS: rr: FWM 3 0x00000003 - no destination available [ 440.252054][T28005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9097'. [ 440.295848][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.375810][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 441.263209][T28039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9102'. [ 441.296592][T28040] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9101'. [ 441.345804][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.416040][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 442.375805][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.455831][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 442.961399][T28077] overlayfs: failed to clone upperpath [ 443.267810][T28090] netlink: 'syz.2.9125': attribute type 27 has an invalid length. [ 443.278381][T28090] wg2: left promiscuous mode [ 443.279851][T28090] wg2: left allmulticast mode [ 443.337868][T28090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.343349][ T9] syz1: Port: 1 Link ACTIVE [ 443.425824][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 443.505865][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 443.901236][T28105] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 444.339142][T28130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9134'. [ 444.620223][T28148] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9137'. [ 444.865863][T28150] overlayfs: failed to clone upperpath [ 444.905809][T28155] binder: 28153:28155 ioctl c0306201 80000680 returned -14 [ 444.997097][T28166] netlink: 'syz.0.9145': attribute type 1 has an invalid length. [ 445.010500][T28166] 8021q: adding VLAN 0 to HW filter on device bond5 [ 445.030422][T28166] bond5: (slave ip6gretap1): making interface the new active one [ 445.033477][T28166] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 445.066020][T28166] veth19: entered promiscuous mode [ 445.070829][T28166] bond5: (slave veth19): Enslaving as an active interface with a down link [ 445.078545][T28169] bond5: (slave gretap2): Releasing active interface [ 445.082126][T28169] bond6: (slave bond7): Releasing backup interface [ 445.085322][T28169] bond8: (slave veth21): Releasing active interface [ 445.505802][ C3] net_ratelimit: 3 callbacks suppressed [ 445.505814][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 445.575890][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 446.205351][T28204] netlink: 'syz.2.9158': attribute type 1 has an invalid length. [ 446.209842][T28204] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.9158'. [ 446.266341][T28208] overlayfs: failed to clone upperpath [ 446.304945][T28213] openvswitch: netlink: IP tunnel dst address not specified [ 446.313530][T28213] comedi comedi0: Minor 3 could not be opened [ 446.351442][T28217] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 446.535908][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 446.615874][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 446.699257][T28236] overlayfs: failed to clone upperpath [ 446.952926][ T40] audit: type=1326 audit(1757100857.052:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28248 comm="syz.0.9175" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706e579 code=0x0 [ 447.224915][T28262] overlayfs: failed to clone upperpath [ 447.575821][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 447.655836][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 448.143992][T28286] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9189'. [ 448.615813][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 448.695817][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 449.135075][T28297] overlayfs: failed to clone upperpath [ 449.162321][T28298] lo speed is unknown, defaulting to 1000 [ 449.190309][T28305] bond0: (slave batadv0): Releasing backup interface [ 449.193155][T28305] batadv0: left allmulticast mode [ 449.195299][T28305] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.199170][T28305] bridge_slave_1: left allmulticast mode [ 449.200959][T28305] bridge_slave_1: left promiscuous mode [ 449.202777][T28305] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.216827][T28305] bond0: (slave bond_slave_0): Releasing backup interface [ 449.219727][T28305] bond_slave_0: left allmulticast mode [ 449.223527][T28305] bond0: (slave bond_slave_1): Releasing backup interface [ 449.227299][T28305] bond_slave_1: left allmulticast mode [ 449.229343][T28305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.231946][T28305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.235220][T28305] bond1: (slave bond2): Releasing backup interface [ 449.239062][T28305] bond5: (slave geneve2): Releasing active interface [ 449.242512][T28305] bond7: (slave veth9): Releasing active interface [ 449.247271][T28305] bond8: (slave veth11): Releasing active interface [ 449.258136][T28308] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 449.406774][T28320] overlayfs: failed to clone upperpath [ 449.586893][T28335] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 449.647096][T28339] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 449.693504][T28346] bond5: (slave ip6gretap1): Releasing active interface [ 449.696068][T28346] bond5: (slave ip6gretap1): the permanent HWaddr of slave - 96:85:b7:65:33:df - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 449.704032][T28346] bond5: (slave veth19): Releasing active interface [ 449.783057][T28355] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9213'. [ 449.889909][T28364] overlayfs: failed to clone upperpath [ 450.497799][T28396] bond3: (slave veth0_to_bond): Releasing active interface [ 450.503485][T28396] bond0: (slave bond_slave_0): Releasing backup interface [ 450.508574][T28396] bond0: (slave bond_slave_1): Releasing backup interface [ 450.512526][T28396] team0: Port device team_slave_0 removed [ 450.515291][T28396] team0: Port device team_slave_1 removed [ 450.518184][T28396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.520812][T28396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.523801][T28396] bond1: (slave gretap1): Releasing active interface [ 450.530163][T28396] bond2: (slave gretap2): Releasing active interface [ 450.535622][T28396] bond3: (slave veth7): Releasing active interface [ 450.539875][T28396] bond5: (slave veth19): Releasing active interface [ 450.567949][T28396] net_ratelimit: 4 callbacks suppressed [ 450.567960][T28396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.614868][T28404] overlayfs: statfs failed on './file0' [ 450.695819][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 450.785830][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 451.008245][T28422] netlink: 'syz.9.9238': attribute type 1 has an invalid length. [ 451.011509][T28422] netlink: 'syz.9.9238': attribute type 4 has an invalid length. [ 451.014717][T28422] netlink: 15334 bytes leftover after parsing attributes in process `syz.9.9238'. [ 451.609487][ T40] audit: type=1326 audit(1757100861.712:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28434 comm="syz.6.9244" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f77598 code=0x7ffc0000 [ 451.625905][ T40] audit: type=1326 audit(1757100861.712:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28434 comm="syz.6.9244" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f77598 code=0x7ffc0000 [ 451.632411][ T40] audit: type=1326 audit(1757100861.712:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28434 comm="syz.6.9244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 451.639121][ T40] audit: type=1326 audit(1757100861.712:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28434 comm="syz.6.9244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 451.645930][ T40] audit: type=1326 audit(1757100861.712:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28434 comm="syz.6.9244" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f77598 code=0x7ffc0000 [ 451.652569][ T40] audit: type=1326 audit(1757100861.712:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28434 comm="syz.6.9244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 451.659707][ T40] audit: type=1326 audit(1757100861.712:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28434 comm="syz.6.9244" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f77598 code=0x7ffc0000 [ 451.666420][ T40] audit: type=1326 audit(1757100861.712:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28434 comm="syz.6.9244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 451.672992][ T40] audit: type=1326 audit(1757100861.712:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28434 comm="syz.6.9244" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f77598 code=0x7ffc0000 [ 451.735809][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 451.825853][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 452.106787][T28455] netlink: 'syz.9.9250': attribute type 10 has an invalid length. [ 452.112580][T28455] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 452.775855][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 452.855844][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 453.180077][T19953] libceph: connect (1)[c::]:6789 error -101 [ 453.182391][T19953] libceph: mon0 (1)[c::]:6789 connect error [ 453.323490][T28475] ceph: No mds server is up or the cluster is laggy [ 453.407264][T28501] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9260'. [ 453.442622][T28471] bond0: (slave netdevsim0): Releasing backup interface [ 453.745223][ T63] Bluetooth: Unknown LE signaling command 0x20 [ 453.748741][ T63] Bluetooth: Wrong link type (-22) [ 453.781425][ T63] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 453.815824][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 453.895814][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 454.117176][T28532] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 454.328907][T28539] siw: device registration error -23 [ 454.701926][T28560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.855855][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 455.614772][T28581] overlayfs: failed to clone upperpath [ 455.652293][T28583] lo speed is unknown, defaulting to 1000 [ 455.895829][ C3] net_ratelimit: 1 callbacks suppressed [ 455.895841][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 455.975806][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 456.242892][T28613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9295'. [ 456.286984][T28613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9295'. [ 456.478895][T28620] netlink: zone id is out of range [ 456.481462][T28620] netlink: zone id is out of range [ 456.493048][T28620] netlink: set zone limit has 4 unknown bytes [ 456.935825][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 457.015844][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 457.177107][T28642] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9302'. [ 457.213432][T28645] netlink: 'syz.9.9303': attribute type 4 has an invalid length. [ 457.297370][T28657] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9308'. [ 457.517813][T28669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9312'. [ 457.528364][T28669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9312'. [ 457.591514][ T40] kauditd_printk_skb: 131 callbacks suppressed [ 457.591525][ T40] audit: type=1804 audit(1757100867.692:1368): pid=28672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9314" name="file0" dev="tmpfs" ino=3992 res=1 errno=0 [ 457.693967][T28673] netlink: zone id is out of range [ 457.717421][T28673] netlink: zone id is out of range [ 457.729292][T28673] netlink: set zone limit has 4 unknown bytes [ 458.143127][T28701] netlink: 1343 bytes leftover after parsing attributes in process `syz.9.9324'. [ 458.180432][T28708] lo speed is unknown, defaulting to 1000 [ 458.197015][T28710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9328'. [ 458.650870][T28741] netlink: 'syz.2.9340': attribute type 1 has an invalid length. [ 458.661777][T28741] bond9: entered promiscuous mode [ 458.663565][T28741] bond9: entered allmulticast mode [ 458.673255][T28741] bond9: (slave erspan1): making interface the new active one [ 458.675734][T28741] erspan1: entered promiscuous mode [ 458.678180][T28741] erspan1: entered allmulticast mode [ 458.680690][T28741] bond9: (slave erspan1): Enslaving as an active interface with an up link [ 458.692966][T28741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9340'. [ 458.697597][T28741] bond9: left promiscuous mode [ 458.699197][T28741] erspan1: left promiscuous mode [ 458.700850][T28741] bond9: left allmulticast mode [ 458.702379][T28741] erspan1: left allmulticast mode [ 458.704474][T28741] 8021q: adding VLAN 0 to HW filter on device bond9 [ 459.142294][T28771] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9349'. [ 459.955848][T28783] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9353'. [ 460.077589][ T40] audit: type=1326 audit(1757100870.182:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28796 comm="syz.2.9359" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701e579 code=0x0 [ 460.295869][T24264] Bluetooth: hci1: command 0x0405 tx timeout [ 460.341402][ T24] libceph: connect (1)[c::]:6789 error -101 [ 460.343453][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 460.494847][T28813] ceph: No mds server is up or the cluster is laggy [ 461.053343][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.057438][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.105814][ C3] net_ratelimit: 6 callbacks suppressed [ 461.105836][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 461.164894][T28873] overlayfs: failed to clone upperpath [ 461.175812][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 461.253489][T28882] netlink: 'syz.6.9390': attribute type 2 has an invalid length. [ 461.900448][T28913] netlink: 'syz.0.9404': attribute type 3 has an invalid length. [ 461.903017][T28913] netlink: 'syz.0.9404': attribute type 3 has an invalid length. [ 462.135833][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 462.215809][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 462.809236][ T40] audit: type=1804 audit(1757100872.912:1370): pid=28939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.9411" name="/newroot/600/file1" dev="fuse" ino=1 res=1 errno=0 [ 462.908441][ T40] audit: type=1800 audit(1757100872.912:1371): pid=28939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.9411" name="/" dev="fuse" ino=1 res=0 errno=0 [ 463.185879][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 463.256612][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 464.225826][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 464.296032][T28977] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9424'. [ 464.305817][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 464.440932][T28977] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9424'. [ 464.460839][T28981] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 464.463001][T28981] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 464.465461][T28981] vhci_hcd vhci_hcd.0: Device attached [ 464.470045][T28981] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(8) [ 464.472112][T28981] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 464.474496][T28981] vhci_hcd vhci_hcd.0: Device attached [ 464.486253][T28982] vhci_hcd: connection closed [ 464.486487][T28984] vhci_hcd: connection closed [ 464.489054][ T1138] vhci_hcd: stop threads [ 464.491959][ T1138] vhci_hcd: release socket [ 464.493354][ T1138] vhci_hcd: disconnect device [ 464.495010][ T1138] vhci_hcd: stop threads [ 464.497173][ T1138] vhci_hcd: release socket [ 464.498628][ T1138] vhci_hcd: disconnect device [ 465.017107][T29010] netlink: 'syz.9.9429': attribute type 1 has an invalid length. [ 465.028173][T29010] 8021q: adding VLAN 0 to HW filter on device bond7 [ 465.052191][T29010] bond7: (slave veth29): Enslaving as an active interface with a down link [ 465.061215][T29010] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 465.068541][T29010] vlan0: entered allmulticast mode [ 465.070183][T29010] bond7: entered allmulticast mode [ 465.072556][T29010] bond7: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 465.200083][T29015] overlayfs: failed to clone upperpath [ 465.255814][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 465.335832][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 466.295907][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 466.376068][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 466.456945][ T3248] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 467.336140][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 467.415857][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 468.375884][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 468.455866][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 469.415992][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 469.495874][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 470.456260][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 470.535877][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 471.496153][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 471.575845][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 472.535821][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 472.615877][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 473.585827][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 473.655869][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 474.615865][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 474.695949][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 474.959814][T29049] tipc: New replicast peer: 255.255.255.255 [ 474.962217][T29049] tipc: Enabled bearer , priority 10 [ 474.965471][T29049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9437'. [ 474.968664][T29049] tipc: Disabling bearer [ 474.977028][T29049] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9437'. [ 475.063246][T29060] netlink: 'syz.6.9438': attribute type 10 has an invalid length. [ 475.071026][T29060] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 475.259119][T29074] overlayfs: failed to clone upperpath [ 475.655809][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 475.735805][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 476.141990][T29092] netlink: 'syz.0.9450': attribute type 14 has an invalid length. [ 476.158860][T29092] netlink: 'syz.0.9450': attribute type 4 has an invalid length. [ 476.163702][T29092] netlink: 'syz.0.9450': attribute type 4 has an invalid length. [ 476.547921][T29106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9456'. [ 476.551255][ T40] audit: type=1326 audit(1757100886.652:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29100 comm="syz.0.9454" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x0 [ 476.552302][T29106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9456'. [ 476.695828][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 476.715306][T29112] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9458'. [ 476.775820][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 476.825231][T29116] tipc: Invalid UDP bearer configuration [ 476.825255][T29116] tipc: Enabling of bearer rejected, failed to enable media [ 476.880484][T29118] bond7: (slave veth0_to_bond): Releasing active interface [ 476.885797][T29118] bond7: (slave veth29): Releasing active interface [ 476.908224][T29118] team0: Mode changed to "random" [ 476.911055][T29118] tipc: Started in network mode [ 476.912618][T29118] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 476.914862][T29118] tipc: Enabled bearer , priority 0 [ 477.427759][T29155] overlayfs: failed to clone upperpath [ 477.439245][T29155] overlayfs: failed to clone upperpath [ 477.460049][T29155] overlayfs: failed to clone upperpath [ 477.735852][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 477.767898][ T40] audit: type=1804 audit(1757100887.872:1373): pid=29176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9480" name="bus" dev="ramfs" ino=129591 res=1 errno=0 [ 477.783068][ T40] audit: type=1804 audit(1757100887.872:1374): pid=29176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.9480" name="bus" dev="ramfs" ino=129591 res=1 errno=0 [ 477.815819][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 478.025037][T29187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9483'. [ 478.035901][T19952] tipc: Node number set to 11578026 [ 478.304252][T29198] : entered promiscuous mode [ 478.307790][T29198] : left promiscuous mode [ 478.469381][T29204] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9490'. [ 478.775868][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 478.855820][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 479.424963][T29224] netlink: 'syz.0.9496': attribute type 1 has an invalid length. [ 479.463500][T29224] bond6: (slave veth23): Enslaving as an active interface with a down link [ 479.486600][T29224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9496'. [ 479.490076][ T40] audit: type=1804 audit(1757100889.592:1375): pid=29231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.9499" name="bus" dev="ramfs" ino=132192 res=1 errno=0 [ 479.491064][T29224] 8021q: adding VLAN 0 to HW filter on device bond6 [ 479.496527][ T40] audit: type=1804 audit(1757100889.592:1376): pid=29231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.9499" name="bus" dev="ramfs" ino=132192 res=1 errno=0 [ 479.597132][T29238] batadv_slave_0: entered promiscuous mode [ 479.601562][T29240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9502'. [ 479.681653][T29246] binder: 29245:29246 ioctl c0306201 800005c0 returned -14 [ 479.713478][T29248] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9507'. [ 479.815871][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 479.895836][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 480.514173][T29265] batman_adv: batadv0: Adding interface: dummy0 [ 480.516726][T29265] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 480.526428][T29265] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 480.865821][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 480.945814][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 481.411336][T29275] netlink: 'syz.2.9516': attribute type 1 has an invalid length. [ 481.422113][ T40] audit: type=1804 audit(1757100891.522:1377): pid=29278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9515" name="bus" dev="ramfs" ino=132217 res=1 errno=0 [ 481.425962][T29275] 8021q: adding VLAN 0 to HW filter on device bond10 [ 481.435929][ T40] audit: type=1804 audit(1757100891.532:1378): pid=29278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.9515" name="bus" dev="ramfs" ino=132217 res=1 errno=0 [ 481.463331][T29275] bond10: (slave geneve3): making interface the new active one [ 481.470330][T29275] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 481.474524][ T1138] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.477956][ T1138] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.480502][ T1138] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.483231][ T1138] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.526176][T29285] netlink: 'syz.2.9518': attribute type 10 has an invalid length. [ 481.905808][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 481.936543][T29300] __nla_validate_parse: 2 callbacks suppressed [ 481.936554][T29300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9531'. [ 481.946523][T29300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9531'. [ 481.975817][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 482.697785][T29320] 8021q: adding VLAN 0 to HW filter on device bond8 [ 482.711280][T29320] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 482.714953][T29320] bond8: (slave macvlan0): Enslaving as a backup interface with a down link [ 482.935824][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 482.989694][T29331] macsec1: entered promiscuous mode [ 482.991396][T29331] macsec1: entered allmulticast mode [ 483.025813][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 483.164914][T29338] tipc: Resetting bearer [ 483.170714][T29338] bond8: (slave macvlan0): Releasing backup interface [ 483.196345][T29338] netlink: 'syz.9.9536': attribute type 10 has an invalid length. [ 483.199039][T29338] bond0: (slave wlan1): refused to change device type [ 483.202631][T29338] Unknown status report in ack skb [ 483.230666][T29341] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9538'. [ 483.380597][T29345] rdma_rxe: rxe_newlink: failed to add lo [ 483.391078][T29345] tipc: Resetting bearer [ 483.392994][T29345] tipc: Resetting bearer [ 483.395382][T29345] dummy0: left promiscuous mode [ 483.398583][T29345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 483.679204][ T40] audit: type=1804 audit(1757100893.782:1379): pid=29349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.9541" name="bus" dev="ramfs" ino=130486 res=1 errno=0 [ 483.687230][ T40] audit: type=1804 audit(1757100893.792:1380): pid=29349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.9541" name="bus" dev="ramfs" ino=130486 res=1 errno=0 [ 483.694627][T29351] bond9: entered allmulticast mode [ 483.696668][T29351] 8021q: adding VLAN 0 to HW filter on device bond9 [ 483.975854][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 483.997975][T29364] bond9: (slave erspan1): Releasing active interface [ 484.003988][T29364] bond10: (slave geneve3): Releasing active interface [ 484.015636][ T1173] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.018506][ T1173] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.021087][ T1173] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.023668][ T1173] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.036106][T29364] netlink: 'syz.2.9547': attribute type 10 has an invalid length. [ 484.065811][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 484.084918][T29368] siw: device registration error -23 [ 484.310105][ T40] audit: type=1804 audit(1757100894.412:1381): pid=29380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9554" name="bus" dev="ramfs" ino=131251 res=1 errno=0 [ 484.318115][ T40] audit: type=1804 audit(1757100894.422:1382): pid=29380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.9554" name="bus" dev="ramfs" ino=131251 res=1 errno=0 [ 484.392873][T29383] overlayfs: failed to clone upperpath [ 484.942473][T29391] batman_adv: batadv0: Removing interface: dummy0 [ 484.946604][T29391] bond6: (slave veth23): Releasing active interface [ 484.956751][T29391] netlink: 'syz.0.9558': attribute type 10 has an invalid length. [ 485.025796][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 485.079721][T29401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9562'. [ 485.095829][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 485.212191][T29408] bridge0: port 1(syz_tun) entered blocking state [ 485.216839][T29408] bridge0: port 1(syz_tun) entered disabled state [ 485.220170][T29408] syz_tun: entered promiscuous mode [ 485.224855][T29408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9565'. [ 485.227836][T29408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9565'. [ 485.595935][T19952] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 485.758006][T19952] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.762008][T19952] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.765100][T19952] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 485.769169][T19952] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 485.771982][T19952] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.775634][T19952] usb 14-1: config 0 descriptor?? [ 486.055992][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 486.188100][T19952] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 486.310146][T29446] netlink: 'syz.6.9580': attribute type 1 has an invalid length. [ 486.328155][T29446] bond9: (slave gretap1): making interface the new active one [ 486.332631][T29446] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 486.337223][T29446] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9580'. [ 486.342117][T29446] 8021q: adding VLAN 0 to HW filter on device bond9 [ 486.442275][T29452] overlayfs: failed to clone upperpath [ 486.559071][ C2] plantronics 0003:047F:FFFF.0032: hid_field_extract() called with n (132) > 32! (kworker/u32:10) [ 487.095815][ C3] net_ratelimit: 1 callbacks suppressed [ 487.095828][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 487.185974][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 487.616388][T19952] usb 14-1: reset high-speed USB device number 6 using dummy_hcd [ 487.745952][ T9] libceph: connect (1)[c::]:6789 error -101 [ 487.747932][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 488.005987][ T3248] libceph: connect (1)[c::]:6789 error -101 [ 488.007997][ T3248] libceph: mon0 (1)[c::]:6789 connect error [ 488.135853][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 488.215810][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 488.515558][T29476] ceph: No mds server is up or the cluster is laggy [ 488.518068][ T3248] libceph: connect (1)[c::]:6789 error -101 [ 488.520066][ T3248] libceph: mon0 (1)[c::]:6789 connect error [ 488.603329][T29495] tipc: New replicast peer: 255.255.255.255 [ 488.607669][T29495] tipc: Enabled bearer , priority 10 [ 488.610919][T29495] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9595'. [ 488.613713][T29495] tipc: Disabling bearer [ 488.616443][T29495] netlink: 112 bytes leftover after parsing attributes in process `syz.6.9595'. [ 489.123686][T29510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9600'. [ 489.146638][T19953] usb 14-1: USB disconnect, device number 6 [ 489.175801][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 489.255822][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 490.084554][T24264] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 490.215848][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 490.305804][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 490.915322][T29611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9615'. [ 490.989971][T29616] overlayfs: failed to clone upperpath [ 491.265820][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 491.345864][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 491.606673][T29632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9620'. [ 491.625372][T29632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9620'. [ 491.628500][T29632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9620'. [ 492.305802][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 492.375821][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 493.335835][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 493.415807][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 493.453393][T29684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9636'. [ 493.460521][T29563] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 493.471488][T29563] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 493.486375][ T6020] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 494.096461][ T6020] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 494.136105][T24264] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 494.139455][T24264] Bluetooth: hci1: Injecting HCI hardware error event [ 494.142750][T24264] Bluetooth: hci1: hardware error 0x00 [ 494.165527][T21181] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 494.169540][T21181] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 494.173008][T21181] CPU: 0 UID: 0 PID: 21181 Comm: kbnepd  Not tainted syzkaller #0 PREEMPT(full) [ 494.176422][T21181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 494.179767][T21181] RIP: 0010:klist_put+0x4d/0x1b0 [ 494.181347][T21181] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 dc 3e 0d [ 494.187428][T21181] RSP: 0018:ffffc900034df9b0 EFLAGS: 00010202 SYZFAIL: failed to recv rpc [ 494.189327][T21181] RAX: dffffc0000000000 RBX: ffff888012b25460 RCX: ffffffff825f3b6d [ 494.191953][T21181] RDX: 000000000000000b RSI: ffffffff8b869035 RDI: 0000000000000058 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 494.194404][T21181] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 494.196923][T21181] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 494.199404][T21181] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 494.201861][T21181] FS: 0000000000000000(0000) GS:ffff8880974bd000(0000) knlGS:0000000000000000 [ 494.204608][T21181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.206703][T21181] CR2: 0000000031024220 CR3: 0000000051668000 CR4: 0000000000352ef0 [ 494.209181][T21181] Call Trace: [ 494.210247][T21181] [ 494.211197][T21181] device_del+0x1d8/0x9f0 [ 494.212574][T21181] ? __pfx_device_del+0x10/0x10 [ 494.214115][T21181] ? netdev_unregister_kobject+0x2da/0x540 [ 494.215951][T21181] unregister_netdevice_many_notify+0x14f0/0x24c0 [ 494.217958][T21181] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 494.220071][T21181] ? __pfx___mutex_lock+0x10/0x10 [ 494.221664][T21181] unregister_netdevice_queue+0x305/0x3f0 [ 494.223442][T21181] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 494.225388][T21181] ? rtnl_net_dev_lock+0x28/0x360 [ 494.226975][T21181] ? rtnl_net_dev_lock+0x146/0x360 [ 494.228590][T21181] ? rtnl_lock+0x9/0x20 [ 494.229908][T21181] ? rtnl_net_dev_lock+0x146/0x360 [ 494.231523][T21181] unregister_netdev+0x1f/0x60 [ 494.233032][T21181] bnep_session+0x224e/0x2d80 [ 494.234525][T21181] ? __pfx_bnep_session+0x10/0x10 [ 494.236128][T21181] ? do_raw_spin_lock+0x12c/0x2b0 [ 494.237716][T21181] ? __pfx_woken_wake_function+0x10/0x10 [ 494.239485][T21181] ? rcu_is_watching+0x12/0xc0 [ 494.240986][T21181] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 494.242808][T21181] ? lockdep_hardirqs_on+0x7c/0x110 [ 494.244445][T21181] ? __kthread_parkme+0x19e/0x250 [ 494.246028][T21181] ? __pfx_bnep_session+0x10/0x10 [ 494.247622][T21181] kthread+0x3c5/0x780 [ 494.248920][T21181] ? __pfx_kthread+0x10/0x10 [ 494.250382][T21181] ? rcu_is_watching+0x12/0xc0 [ 494.251900][T21181] ? __pfx_kthread+0x10/0x10 [ 494.253365][T21181] ret_from_fork+0x5d7/0x6f0 [ 494.254831][T21181] ? __pfx_kthread+0x10/0x10 [ 494.256411][T21181] ret_from_fork_asm+0x1a/0x30 [ 494.257943][T21181] [ 494.258942][T21181] Modules linked in: [ 494.260448][T21181] ---[ end trace 0000000000000000 ]--- [ 494.265879][T21181] RIP: 0010:klist_put+0x4d/0x1b0 [ 494.267480][T21181] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 dc 3e 0d [ 494.273396][T21181] RSP: 0018:ffffc900034df9b0 EFLAGS: 00010202 [ 494.275310][T21181] RAX: dffffc0000000000 RBX: ffff888012b25460 RCX: ffffffff825f3b6d [ 494.278206][T21181] RDX: 000000000000000b RSI: ffffffff8b869035 RDI: 0000000000000058 [ 494.281342][T21181] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 494.284423][T21181] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 494.290639][T21181] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 494.295837][T21181] FS: 0000000000000000(0000) GS:ffff8880974bd000(0000) knlGS:0000000000000000 [ 494.299330][T21181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.301907][T21181] CR2: 00000000f5405bac CR3: 000000000e380000 CR4: 0000000000352ef0 [ 494.305302][T21181] Kernel panic - not syncing: Fatal exception [ 494.308434][T21181] Kernel Offset: disabled [ 494.310066][T21181] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:26:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85618635 RDI=ffffffff9b0ff700 RBP=ffffffff9b0ff6c0 RSP=ffffc900034df3b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b0ff6c0 R15=ffffffff856185d0 RIP=ffffffff8561865f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000031024220 CR3=0000000051668000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000004 RSI=ffffffff8183d50d RDI=0000000000000000 RBP=1ffff920018ebf95 RSP=ffffc9000c75fc88 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff90ab9797 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000004 RIP=ffffffff81bb0ad8 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975bd000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b9cb215350 CR3=00000000606e6000 CR4=00352ef0 DR0=0000040000000000 DR1=000000000000064f DR2=0000000000000002 DR3=0000000040000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff84e922d6 RDX=0000000000000040 RSI=0000000000000040 RDI=0000000000000001 RBP=ffffffff8c165400 RSP=ffffc900036df1b0 R8 =0000000000000001 R9 =0000000000000020 R10=0000000000000040 R11=0000000000000012 R12=0000000000000040 R13=0000000000000001 R14=0000000000000003 R15=ffffffff8c165881 RIP=ffffffff81bb0450 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6176959300 ffffffff 00c00000 GS =0000 ffff8880976bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055f6a2c1d000 CR3=0000000050ce6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff848edfbf ffffffff8a03ed4c 0000002900000004 0000000600040008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8184d87d ffffffff89a472db ffffffff8a366198 ffffffff8a0ba786 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8b79960f ffffffff84d7b9ab ffffffff84d3cf52 ffffffff8a0bb2f9 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff825f1e82 ffffffff8b7abfa2 ffffffff8b7ab3c5 ffffffff89621f66 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff822a9c3f ffffffff84b8caac ffffffff8b7adc27 ffffffff84d5aaee ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8254e301 ffffffff8a0627a6 ffffffff8b792b7a ffffffff8b7e90e3 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff816c8b90 ffffffff825f28ed ffffffff8b7ade73 ffffffff8a107358 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff84d47d54 ffffffff84dbbaa4 ffffffff8a36bc0c ffffffff825f1e82 ZMM25=02aba09102aba091 02aba09102aba091 02aba09102aba091 02aba09102aba091 02aba09102aba091 02aba09102aba091 02aba09102aba091 02aba09102aba091 ZMM26=473f8d89473f8d89 473f8d89473f8d89 473f8d89473f8d89 473f8d89473f8d89 473f8d89473f8d89 473f8d89473f8d89 473f8d89473f8d89 473f8d89473f8d89 ZMM27=1245b4c51245b4c5 1245b4c51245b4c5 1245b4c51245b4c5 1245b4c51245b4c5 1245b4c51245b4c5 1245b4c51245b4c5 1245b4c51245b4c5 1245b4c51245b4c5 ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=f1530000f1530000 f1530000f1530000 f1530000f1530000 f1530000f1530000 f1530000f1530000 f1530000f1530000 f1530000f1530000 f1530000f1530000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff8880274cac00 RCX=ffffffff866a8c04 RDX=ffff88801dec4880 RSI=ffffffff866a8cdb RDI=0000000000000004 RBP=0000000000000001 RSP=ffffc900005e8ea0 R8 =0000000000000004 R9 =0000000000000006 R10=0000000000000006 R11=ffffc900005e8ff8 R12=ffffc90000415008 R13=0000000000000001 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff866a8e59 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002d124220 CR3=000000005d735000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 48c875c3b347b311 0df8ee678c691d93 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9cb632005a7477b9 7bfdc5c647d1c33a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4eb890d9cc197672 295252b3daeaafd8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e1fb9e91277dc4e 783dec480daf9580 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000b700 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000001000000 3d74008001000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 012c4f56012c4f74 012c4f9501000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 25020080012c4f62 01000000d8f60080 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 012c4f8854840080 76080080012c4f3d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 399019729c8acfa1 fbfe4fcccbb4e814 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f896a076ea707dd1 7b0a4a83736a425f ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000