last executing test programs: 7m32.740053361s ago: executing program 32 (id=691): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 7m5.646497399s ago: executing program 33 (id=1270): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x2000025c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r0}) 6m48.168751942s ago: executing program 1 (id=1615): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) 6m48.166879259s ago: executing program 1 (id=1617): openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) 6m48.069376914s ago: executing program 1 (id=1619): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000140)=r0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 6m48.000248404s ago: executing program 1 (id=1621): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6m47.938745213s ago: executing program 1 (id=1622): ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0xfd00, @sco={0x1f, @none}, @ax25={0x3, @bcast, 0x5}, @phonet={0x23, 0x9e, 0x1, 0x8}, 0x4fe, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfd, 0xfffffffd, 0xfffd}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) 6m47.586534678s ago: executing program 1 (id=1625): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r0, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 6m47.506508582s ago: executing program 34 (id=1625): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r0, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 6m45.990352824s ago: executing program 3 (id=1655): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 6m45.91725424s ago: executing program 3 (id=1658): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x3, 0x0, &(0x7f0000000080)) 6m45.916941552s ago: executing program 3 (id=1659): r0 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a40003006272696467657fc5f71c", @ANYRESDEC, @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRES64=r0], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 6m45.85211299s ago: executing program 3 (id=1662): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 6m45.85161086s ago: executing program 3 (id=1664): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x4010) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) 6m45.410647073s ago: executing program 3 (id=1672): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8b, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r1, 0x0) 6m45.328431189s ago: executing program 35 (id=1672): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8b, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r1, 0x0) 5m43.101205658s ago: executing program 5 (id=2824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 5m43.028620493s ago: executing program 5 (id=2826): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) epoll_pwait(r1, 0x0, 0x0, 0x10001, &(0x7f0000000180)={[0xffffffffe277652b]}, 0x8) 5m43.028042071s ago: executing program 5 (id=2829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 5m42.756297513s ago: executing program 5 (id=2835): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 5m42.755827338s ago: executing program 5 (id=2838): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x801) sendmsg$tipc(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x10) 5m42.690178925s ago: executing program 5 (id=2845): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@uuid_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5m42.629968549s ago: executing program 36 (id=2845): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@uuid_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4m57.099507628s ago: executing program 2 (id=4199): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 4m57.049207595s ago: executing program 2 (id=4200): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0xc, {"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", 0x5c1}}, 0x505) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) 4m57.049025038s ago: executing program 2 (id=4201): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[], 0x0) 4m56.990059268s ago: executing program 2 (id=4202): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 4m56.989894662s ago: executing program 2 (id=4203): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = syz_create_resource$binfmt(&(0x7f0000000400)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 4m56.989572534s ago: executing program 2 (id=4205): r0 = io_uring_setup(0x61d8, &(0x7f0000000a40)={0x0, 0x5, 0x800, 0xfffffffe, 0x40003be}) io_setup(0x9, &(0x7f0000000b80)=0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) close_range(r0, 0xffffffffffffffff, 0x0) 4m41.949948441s ago: executing program 37 (id=4205): r0 = io_uring_setup(0x61d8, &(0x7f0000000a40)={0x0, 0x5, 0x800, 0xfffffffe, 0x40003be}) io_setup(0x9, &(0x7f0000000b80)=0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) close_range(r0, 0xffffffffffffffff, 0x0) 3m24.499957089s ago: executing program 8 (id=6409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000005c0)='workqueue_activate_work\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) 3m24.499758553s ago: executing program 8 (id=6411): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) 3m24.448741554s ago: executing program 8 (id=6413): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x1d, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 3m24.374668647s ago: executing program 8 (id=6417): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 3m24.297783242s ago: executing program 8 (id=6420): timerfd_create(0x7, 0x800) socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) io_uring_setup(0x177f, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x0, 0x0, 0x2b4}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000040)={0xa4, 0x4000000000000000, 0x1, 0x3fc, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x5, 0x0, 0x7fffffffe, 0x8000000000000, 0x2}, 0x0, 0x0, 0x0) 3m22.389003144s ago: executing program 8 (id=6470): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x4}, 0x64) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @private, @local}}}}}}, 0x0) 3m22.338574721s ago: executing program 38 (id=6470): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x4}, 0x64) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @private, @local}}}}}}, 0x0) 1m49.01309399s ago: executing program 0 (id=7898): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000140)=ANY=[], 0x0) socket$alg(0x26, 0x5, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000b80)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00.'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) 1m46.756130397s ago: executing program 0 (id=7919): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp={0x3, 0x0, 0x3231564e, 0x0, 0x3, [{0x101, 0x1}, {0xb, 0x4}, {0x6, 0x1}, {0x3, 0x7fffffff}, {0x1, 0x8}, {0x7ff, 0x2007}, {0x7, 0x8}, {0x6, 0x2d1d}], 0x1, 0x0, 0x0, 0x2, 0x1}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r3}, 0x10) map_shadow_stack(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x9}}}, 0x24}}, 0x0) 1m45.72568244s ago: executing program 0 (id=7929): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x3a, &(0x7f0000000080)={@empty, @random="6a2ddcf6177a", @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x57, 0x0, 0x6, 0x0, @empty, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x5}}}}}}, 0x0) 1m45.681894341s ago: executing program 0 (id=7931): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) setresuid(0xee00, 0xee01, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 1m45.605545359s ago: executing program 0 (id=7934): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf, 0x8}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xe, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8801, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0xa}}]}}]}, 0x7c}}, 0x24040084) 1m45.497730145s ago: executing program 0 (id=7937): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x108, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 1m45.396624991s ago: executing program 39 (id=7937): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x108, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 2.816367987s ago: executing program 6 (id=8954): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x38ff, &(0x7f0000000480)={0x0, 0x200003, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) socket$packet(0x11, 0x2, 0x300) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000300)=""/213, 0xd5}], 0x1, 0xfffffffe, 0x10a2) openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2.743425791s ago: executing program 4 (id=8955): r0 = userfaultfd(0x80001) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000280)={'nat\x00', 0x0, 0x0, 0x0, [0x93, 0x7, 0xffff, 0x0, 0x7fffffffffffffff, 0x7]}, &(0x7f0000000140)=0x78) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x4) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xa, 0x5, 0x180, 0x0, 0x200000000, 0xf4, 0x0, 0x8, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd5], 0x1, 0x3c4212}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.687163538s ago: executing program 6 (id=8957): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) open_tree(0xffffffffffffffff, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) 2.676448127s ago: executing program 4 (id=8959): capget(0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.496950455s ago: executing program 7 (id=8960): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800300000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.496464885s ago: executing program 4 (id=8962): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 2.454864495s ago: executing program 7 (id=8963): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params]}, 0x1c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfc}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24040890) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x34, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3f}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1d}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.451387397s ago: executing program 7 (id=8964): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x40f8, 0x7a65, 0x0, 0x0, 0x0) 2.377078409s ago: executing program 9 (id=8965): setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 1.819843139s ago: executing program 6 (id=8966): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) 1.818463964s ago: executing program 9 (id=8974): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4004, @fd, 0xc7, 0x1, 0x1ff, 0x6}) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.614151788s ago: executing program 4 (id=8967): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_open_dev$ndb(0x0, 0x0, 0x200200) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000480)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 1.613937257s ago: executing program 9 (id=8968): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x8, 0x0, {0x0, 0x0, r0}}) io_uring_enter(r3, 0x3517, 0x173d, 0x42, 0x0, 0x0) 1.538418494s ago: executing program 7 (id=8969): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_pwait(r1, &(0x7f0000000200)=[{}], 0x1, 0x101, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 936.69296ms ago: executing program 6 (id=8970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x2) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 856.964887ms ago: executing program 6 (id=8971): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) r4 = dup(r3) r5 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) 676.083808ms ago: executing program 4 (id=8972): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa05, 0x0) write$P9_RVERSION(r1, &(0x7f0000000380)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x40000000000002}}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x3, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) socket$inet6(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) 675.814611ms ago: executing program 9 (id=8973): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$COMEDI_DEVINFO(0xffffffffffffffff, 0x80b06401, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) 586.433315ms ago: executing program 7 (id=8975): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x6a, 0x5, 0x30000000, 0x3) syz_clone(0x0, 0x0, 0xfffffffffffffdaf, 0x0, 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000180)) write$P9_RLINK(r0, &(0x7f0000000100)={0x7, 0x47, 0x1}, 0x7) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 377.122738ms ago: executing program 9 (id=8976): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)={0x10, 0x2b, 0x10, 0x70bd2c, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x8001}, 0x44404) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 376.840577ms ago: executing program 4 (id=8977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 376.607962ms ago: executing program 9 (id=8978): socket(0xa, 0x2, 0xfffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 196.409613ms ago: executing program 7 (id=8979): prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0xdc0b, 0x10100, 0x0, 0x20e, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) 0s ago: executing program 6 (id=8980): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0.0.2:0 - no destination available [ 352.637605][T22123] overlayfs: failed to clone lowerpath [ 352.732202][T22130] overlayfs: failed to clone upperpath [ 352.977072][T22150] 9pnet_fd: Insufficient options for proto=fd [ 353.059272][T22164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6777'. [ 353.416902][T22187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6786'. [ 353.631994][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 353.685350][T12290] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 353.854299][T12290] usb 5-1: config 0 has no interfaces? [ 353.859875][T12290] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 353.863077][T12290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.866606][T12290] usb 5-1: config 0 descriptor?? [ 353.897481][T22189] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 354.077421][T12292] usb 5-1: USB disconnect, device number 10 [ 354.671968][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.914962][T12292] libceph: connect (1)[c::]:6789 error -101 [ 354.916861][T12292] libceph: mon0 (1)[c::]:6789 connect error [ 355.025410][T22231] binder: 22225:22231 ioctl c0306201 80000640 returned -22 [ 355.067619][T22219] ceph: No mds server is up or the cluster is laggy [ 355.118684][T22235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6802'. [ 355.126062][T22235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6802'. [ 355.711935][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 355.920857][T22182] Set syz1 is full, maxelem 65536 reached [ 356.756433][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 356.756445][ T40] audit: type=1326 audit(1757314632.695:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22258 comm="syz.0.6811" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 356.761950][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.775103][ T40] audit: type=1326 audit(1757314632.695:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22258 comm="syz.0.6811" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de579 code=0x7fc00000 [ 356.781700][ T40] audit: type=1326 audit(1757314632.695:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22258 comm="syz.0.6811" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 356.790001][ T40] audit: type=1326 audit(1757314632.695:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22258 comm="syz.0.6811" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 356.796645][ T40] audit: type=1326 audit(1757314632.695:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22258 comm="syz.0.6811" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 356.803263][ T40] audit: type=1326 audit(1757314632.695:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22258 comm="syz.0.6811" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 356.809811][ T40] audit: type=1326 audit(1757314632.695:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22258 comm="syz.0.6811" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 356.816512][ T40] audit: type=1326 audit(1757314632.695:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22258 comm="syz.0.6811" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 356.823068][ T40] audit: type=1326 audit(1757314632.695:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22258 comm="syz.0.6811" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 356.829773][ T40] audit: type=1326 audit(1757314632.695:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22258 comm="syz.0.6811" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 357.371575][T22330] syz_tun: entered allmulticast mode [ 357.413335][T22334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6839'. [ 357.459785][T22337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6840'. [ 357.593668][T22353] overlayfs: failed to clone upperpath [ 357.642277][T22356] netlink: 'syz.6.6848': attribute type 4 has an invalid length. [ 357.791958][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.899598][T22362] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6851'. [ 357.958884][T22367] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6852'. [ 357.962932][T22367] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6852'. [ 358.832094][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.377137][T22425] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 359.380100][T22425] overlayfs: failed to set xattr on upper [ 359.382233][T22425] overlayfs: ...falling back to redirect_dir=nofollow. [ 359.384923][T22425] overlayfs: ...falling back to index=off. [ 359.386763][T22425] overlayfs: ...falling back to uuid=null. [ 359.395778][T22425] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 359.662985][T22428] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6873'. [ 359.666524][T22428] netlink: 'syz.7.6873': attribute type 13 has an invalid length. [ 359.669106][T22428] netlink: 'syz.7.6873': attribute type 17 has an invalid length. [ 359.677181][T22428] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 359.881942][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.202560][T22469] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6889'. [ 360.726866][T22491] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6899'. [ 360.921941][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.933947][T22508] overlayfs: failed to clone upperpath [ 361.146450][T22512] bridge: RTM_NEWNEIGH with invalid ether address [ 361.430838][T22516] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6909'. [ 361.435156][T22516] netlink: 'syz.6.6909': attribute type 13 has an invalid length. [ 361.437749][T22516] netlink: 'syz.6.6909': attribute type 17 has an invalid length. [ 361.445299][T22516] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 361.538463][T22522] overlayfs: failed to clone upperpath [ 361.582101][T22524] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6913'. [ 361.951937][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.347260][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 362.347272][ T40] audit: type=1326 audit(1757314638.285:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22585 comm="syz.6.6938" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x0 [ 362.728667][T22610] __nla_validate_parse: 6 callbacks suppressed [ 362.728678][T22610] netlink: 2048 bytes leftover after parsing attributes in process `syz.7.6946'. [ 362.734181][T22610] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6946'. [ 362.992421][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 363.611391][ T843] kernel read not supported for file inotify (pid: 843 comm: kworker/3:2) [ 363.787961][T22647] bridge3: entered allmulticast mode [ 364.014901][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.017504][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.031982][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.034075][T22689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6979'. [ 364.054628][T22691] overlayfs: upper fs does not support file handles, falling back to index=off. [ 364.130206][T22695] dvmrp1: entered allmulticast mode [ 364.558486][T22704] kvm: faulting far call emulation tainted memory [ 364.675800][T22711] uprobe: syz.7.6990:22711 failed to unregister, leaking uprobe [ 364.715143][T22717] overlayfs: failed to clone upperpath [ 364.772772][ T40] audit: type=1804 audit(1757314640.705:3070): pid=22721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6993" name="/newroot/117/file0" dev="tmpfs" ino=671 res=1 errno=0 [ 364.907037][T22732] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6999'. [ 365.071994][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 365.083977][T22751] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7007'. [ 365.527069][T22776] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7017'. [ 365.567376][T22776] batadv_slave_1 (unregistering): left promiscuous mode [ 365.877659][T22790] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7022'. [ 365.927241][T22794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7024'. [ 366.073582][ T40] audit: type=1326 audit(1757314642.015:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22798 comm="syz.6.7026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7fc00000 [ 366.122091][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 366.468808][T22819] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.474481][T22819] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.627287][T22819] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.630843][T22819] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.693304][T22826] netlink: 'syz.7.7036': attribute type 1 has an invalid length. [ 366.699591][T22819] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.702985][T22819] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.727619][T22826] 8021q: adding VLAN 0 to HW filter on device bond11 [ 366.766057][T22826] bond11: (slave veth21): Enslaving as an active interface with a down link [ 366.783295][T22826] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 366.786549][T22826] bond11: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 366.800310][ T40] audit: type=1326 audit(1757314642.735:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22798 comm="syz.6.7026" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f45579 code=0x7fc00000 [ 366.809507][ T40] audit: type=1326 audit(1757314642.735:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22798 comm="syz.6.7026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7fc00000 [ 366.817147][ T40] audit: type=1326 audit(1757314642.735:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22798 comm="syz.6.7026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7fc00000 [ 366.825830][ T40] audit: type=1326 audit(1757314642.735:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22798 comm="syz.6.7026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7fc00000 [ 366.832873][ T40] audit: type=1326 audit(1757314642.735:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22798 comm="syz.6.7026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7fc00000 [ 366.839599][ T40] audit: type=1326 audit(1757314642.735:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22798 comm="syz.6.7026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7fc00000 [ 366.846569][ T40] audit: type=1326 audit(1757314642.735:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22798 comm="syz.6.7026" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7fc00000 [ 366.870600][T22819] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.874628][T22819] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.050933][ T46] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.053594][ T46] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.062294][ T1180] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.065659][ T1180] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.083436][ T1180] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.086135][ T1180] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.089214][ T1180] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.092251][ T1180] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.151969][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.201963][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.605896][T22877] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7058'. [ 368.610931][T22877] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7058'. [ 368.617948][T22877] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7058'. [ 368.806618][T22891] overlayfs: failed to clone upperpath [ 369.101498][T22896] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7066'. [ 369.232069][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.312164][ T5982] Bluetooth: hci4: command 0x1003 tx timeout [ 369.319972][ T5976] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 370.272007][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.393093][T22939] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.7083'. [ 370.396604][T22939] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7083'. [ 370.654624][T22947] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7087'. [ 370.984430][T22962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7094'. [ 371.215804][T22986] overlayfs: failed to clone upperpath [ 371.294885][T22991] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7105'. [ 371.312072][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 372.229467][T23033] random: crng reseeded on system resumption [ 372.351967][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 372.396547][T23045] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7130'. [ 372.529358][T23052] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 372.832142][T12292] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 372.983325][T12292] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 372.987937][T12292] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 47, changing to 9 [ 372.991440][T12292] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 58219, setting to 1024 [ 372.996349][T12292] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.000814][T12292] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.003730][T12292] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.007350][T12292] usb 14-1: config 0 descriptor?? [ 373.401923][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 373.417250][T12292] plantronics 0003:047F:FFFF.0024: ignoring exceeding usage max [ 373.422748][T12292] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 373.787522][T23102] __nla_validate_parse: 2 callbacks suppressed [ 373.787534][T23102] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7152'. [ 374.122266][T23126] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7161'. [ 374.312140][T23148] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.7170'. [ 374.428423][T23153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7172'. [ 374.431967][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 375.215865][T23167] kvm: pic: non byte read [ 375.219629][T23167] kvm: pic: level sensitive irq not supported [ 375.219988][T23167] kvm: pic: non byte read [ 375.230857][T23167] kvm: pic: level sensitive irq not supported [ 375.231187][T23167] kvm: pic: non byte read [ 375.238235][T23167] kvm: pic: level sensitive irq not supported [ 375.238575][T23167] kvm: pic: non byte read [ 375.245022][T23167] kvm: pic: level sensitive irq not supported [ 375.245370][T23167] kvm: pic: non byte read [ 375.252425][T23167] kvm: pic: level sensitive irq not supported [ 375.252732][T23167] kvm: pic: non byte read [ 375.258374][T23167] kvm: pic: level sensitive irq not supported [ 375.258682][T23167] kvm: pic: non byte read [ 375.264840][T23167] kvm: pic: level sensitive irq not supported [ 375.265170][T23167] kvm: pic: non byte read [ 375.271270][T23167] kvm: pic: level sensitive irq not supported [ 375.271622][T23167] kvm: pic: non byte read [ 375.444374][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 375.444390][ T40] audit: type=1800 audit(1757314651.385:3085): pid=23176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7182" name="nullb0" dev="tmpfs" ino=8121 res=0 errno=0 [ 375.445325][T12292] usb 14-1: USB disconnect, device number 10 [ 375.471999][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 375.526917][T23183] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7185'. [ 375.533243][T23185] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 375.579788][T23189] netlink: zone id is out of range [ 375.582822][T23189] netlink: zone id is out of range [ 375.585106][T23189] netlink: zone id is out of range [ 375.586850][T23189] netlink: zone id is out of range [ 375.589374][T23189] netlink: zone id is out of range [ 375.594054][T23189] netlink: zone id is out of range [ 375.596041][T23189] netlink: zone id is out of range [ 375.601057][T23191] netlink: 'syz.6.7189': attribute type 13 has an invalid length. [ 375.602176][T23188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7187'. [ 375.624387][T23191] gretap0: refused to change device tx_queue_len [ 375.636112][T23188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7187'. [ 376.069852][T23212] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 376.073509][T23212] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 376.288621][T23218] netlink: 'syz.9.7198': attribute type 4 has an invalid length. [ 376.297541][ T40] audit: type=1804 audit(1757314652.235:3086): pid=23220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7199" name="/newroot/152/file0" dev="tmpfs" ino=869 res=1 errno=0 [ 376.615188][T23242] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 377.414021][T23264] tipc: Started in network mode [ 377.416049][T23264] tipc: Node identity b608a3f7d266, cluster identity 4711 [ 377.419248][T23264] tipc: Enabled bearer , priority 0 [ 377.466428][T23264] syzkaller0: entered promiscuous mode [ 377.469710][T23264] syzkaller0: entered allmulticast mode [ 377.474522][T23264] tipc: Resetting bearer [ 377.487933][T23262] tipc: Resetting bearer [ 378.476157][T12290] tipc: Node number set to 1684972535 [ 378.592064][ C1] net_ratelimit: 171 callbacks suppressed [ 378.592084][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.001745][T23262] tipc: Disabling bearer [ 379.008665][T23272] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 379.243010][T23303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7229'. [ 379.362097][T23312] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.365574][T23312] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 379.557164][T23312] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.560719][T23312] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 379.632598][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.648300][T23312] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.652690][T23312] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 379.748061][T23312] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.752391][T23312] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 379.852501][ T12] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.856177][ T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 379.879257][ T12] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.882961][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 379.886316][ T12] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.889644][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 379.901411][ T12] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.905018][ T12] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 380.015843][T23337] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7241'. [ 380.070938][T23339] tipc: Enabled bearer , priority 0 [ 380.268884][T23353] overlayfs: failed to clone upperpath [ 380.321947][ T40] audit: type=1804 audit(1757314656.255:3087): pid=23357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7250" name="/newroot/175/file0" dev="tmpfs" ino=997 res=1 errno=0 [ 380.671984][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.166196][T23377] overlayfs: failed to clone upperpath [ 381.200811][T23378] kvm: pic: non byte read [ 381.206264][T23378] kvm: pic: level sensitive irq not supported [ 381.206593][T23378] kvm: pic: non byte read [ 381.216612][T23378] kvm: pic: level sensitive irq not supported [ 381.216945][T23378] kvm: pic: non byte read [ 381.223211][T23378] kvm: pic: level sensitive irq not supported [ 381.223464][T23378] kvm: pic: non byte read [ 381.227847][T23378] kvm: pic: level sensitive irq not supported [ 381.228086][T23378] kvm: pic: non byte read [ 381.234269][T23378] kvm: pic: level sensitive irq not supported [ 381.234503][T23378] kvm: pic: non byte read [ 381.239916][T23378] kvm: pic: level sensitive irq not supported [ 381.240231][T23378] kvm: pic: non byte read [ 381.246129][T23378] kvm: pic: level sensitive irq not supported [ 381.246452][T23378] kvm: pic: non byte read [ 381.252763][T23378] kvm: pic: level sensitive irq not supported [ 381.253115][T23378] kvm: pic: non byte read [ 381.426223][T23405] netlink: 129704 bytes leftover after parsing attributes in process `syz.0.7268'. [ 381.554301][T23413] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7271'. [ 381.611153][T23414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7271'. [ 381.635104][T23416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7272'. [ 381.658862][T23416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7272'. [ 381.712032][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.884680][T23422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7275'. [ 382.358691][ T40] audit: type=1804 audit(1757314658.295:3088): pid=23441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7283" name="file0" dev="tmpfs" ino=8275 res=1 errno=0 [ 382.403289][T23445] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.407368][T23445] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.477328][T23456] openvswitch: netlink: EtherType 50a is less than min 600 [ 382.484405][ T40] audit: type=1326 audit(1757314658.425:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23455 comm="syz.0.7289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 382.494596][ T40] audit: type=1326 audit(1757314658.425:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23455 comm="syz.0.7289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 382.504205][ T40] audit: type=1326 audit(1757314658.425:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23455 comm="syz.0.7289" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 382.513377][ T40] audit: type=1326 audit(1757314658.425:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23455 comm="syz.0.7289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 382.521167][ T40] audit: type=1326 audit(1757314658.425:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23455 comm="syz.0.7289" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 382.528500][ T40] audit: type=1326 audit(1757314658.425:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23455 comm="syz.0.7289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 382.536699][ T40] audit: type=1326 audit(1757314658.425:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23455 comm="syz.0.7289" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 382.544052][ T40] audit: type=1326 audit(1757314658.425:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23455 comm="syz.0.7289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 382.551387][ T40] audit: type=1326 audit(1757314658.425:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23455 comm="syz.0.7289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 382.580286][T23445] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.584729][T23445] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.676917][T23445] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.679993][T23445] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.691623][T23469] overlayfs: failed to clone upperpath [ 382.751828][T23445] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.755915][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 382.758527][T23445] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.827917][ T46] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.830509][ T46] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.837456][ T46] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.840076][ T46] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.851546][ T1180] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.854427][ T1180] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.867941][ T1180] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.871095][ T1180] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.162829][T23487] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7296'. [ 383.172208][T23487] sch_tbf: burst 6 is lower than device bridge8 mtu (1514) ! [ 383.278496][T23495] overlayfs: failed to clone upperpath [ 383.485576][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.488100][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.533245][T23511] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7309'. [ 383.548150][T23513] Invalid ELF header magic: != ELF [ 383.791961][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 384.837502][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 385.255470][T23570] dvmrp1: entered allmulticast mode [ 385.552105][ T5976] Bluetooth: hci2: command 0x0406 tx timeout [ 385.871941][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.870168][T23610] bridge9: entered allmulticast mode [ 386.912142][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.998576][ T842] IPVS: starting estimator thread 0... [ 387.001419][T23615] tipc: Enabled bearer , priority 10 [ 387.097081][T23622] __nla_validate_parse: 1 callbacks suppressed [ 387.097098][T23622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7349'. [ 387.106331][T23622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7349'. [ 387.111227][T23622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7349'. [ 387.114186][T23616] IPVS: using max 24 ests per chain, 57600 per kthread [ 387.846173][T23643] bridge6: entered allmulticast mode [ 387.952141][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 387.963649][T23650] wg2: entered promiscuous mode [ 387.965788][T23650] wg2: entered allmulticast mode [ 388.012629][T23656] binder: 23655:23656 ioctl c0306201 800003c0 returned -14 [ 388.492527][T23674] bridge9: entered allmulticast mode [ 388.921011][T23668] syz.0.7367 (23668) used greatest stack depth: 18968 bytes left [ 388.991955][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 389.282919][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 389.282931][ T40] audit: type=1800 audit(1757314665.225:3104): pid=23687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.7373" name="/" dev="fuse" ino=1 res=0 errno=0 [ 389.286437][T23695] vxcan1: entered allmulticast mode [ 389.380509][T23702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7379'. [ 389.384297][T23702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7379'. [ 390.031944][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 390.225136][T23726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7386'. [ 390.374310][T23739] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7389'. [ 390.478409][ T40] audit: type=1804 audit(1757314666.415:3105): pid=23741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7390" name="file0" dev="ramfs" ino=90032 res=1 errno=0 [ 391.071947][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 392.111985][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 393.151977][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 393.395147][T23758] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7404'. [ 393.710494][T23783] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7409'. [ 394.113476][T23795] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 394.192074][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.516671][T23820] 9pnet_fd: Insufficient options for proto=fd [ 395.201250][T23826] lo speed is unknown, defaulting to 1000 [ 395.206607][T23828] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7425'. [ 395.207158][T23826] lo speed is unknown, defaulting to 1000 [ 395.212627][T23826] lo speed is unknown, defaulting to 1000 [ 395.242101][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 395.336063][T23826] infiniband syz0: set active [ 395.339047][T23826] infiniband syz0: added lo [ 395.362737][T12292] lo speed is unknown, defaulting to 1000 [ 395.381658][T23826] RDS/IB: syz0: added [ 395.384130][T23826] smc: adding ib device syz0 with port count 1 [ 395.386577][T23826] smc: ib device syz0 port 1 has pnetid [ 395.390887][ T34] lo speed is unknown, defaulting to 1000 [ 395.398504][T23826] lo speed is unknown, defaulting to 1000 [ 395.444404][T23840] overlayfs: failed to clone upperpath [ 395.558020][T23826] lo speed is unknown, defaulting to 1000 [ 395.695598][T23826] lo speed is unknown, defaulting to 1000 [ 395.791733][T23826] lo speed is unknown, defaulting to 1000 [ 395.814141][T23848] batadv_slave_1: entered promiscuous mode [ 395.916845][T23847] batadv_slave_1: left promiscuous mode [ 395.937033][T23826] lo speed is unknown, defaulting to 1000 [ 396.064716][T23826] lo speed is unknown, defaulting to 1000 [ 396.070110][T23854] syz_tun: entered allmulticast mode [ 396.076152][T23854] syz_tun: left allmulticast mode [ 396.180146][T23850] lo speed is unknown, defaulting to 1000 [ 396.277137][T23826] lo speed is unknown, defaulting to 1000 [ 396.281973][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 397.312049][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 397.833353][T23877] tipc: Enabled bearer , priority 0 [ 398.352078][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 398.758856][T23895] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.763270][T23895] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 398.956033][T23895] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.968764][T23895] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 399.040128][T23895] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.043558][T23895] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 399.133343][T23895] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.136928][T23895] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 399.235495][ T46] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.238848][ T46] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 399.254016][ T94] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.258361][ T94] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 399.270547][ T94] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.273288][ T94] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 399.285812][ T94] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.289245][ T94] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 399.402009][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 399.500090][T23920] 9pnet: Found fid 0 not clunked [ 399.736264][T23938] input: syz1 as /devices/virtual/input/input53 [ 400.289599][T23968] input: syz1 as /devices/virtual/input/input54 [ 400.432214][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 400.748383][T23986] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7486'. [ 400.754514][T23986] 0ªX¹¦D: renamed from macvtap0 [ 400.761673][T23986] 0ªX¹¦D: entered allmulticast mode [ 400.767995][T23986] veth0_macvtap: entered allmulticast mode [ 400.777734][T23986] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 401.094184][T23993] overlayfs: statfs failed on './file0' [ 401.482013][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 402.055562][T24038] overlayfs: failed to clone lowerpath [ 402.060383][T24038] overlayfs: failed to clone upperpath [ 402.246464][T24050] KVM: debugfs: duplicate directory 24050-7 [ 402.521977][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 402.737950][T24081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7523'. [ 402.779821][T24081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7523'. [ 402.801986][ T34] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 402.955397][ T34] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.959857][ T34] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.964456][ T34] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 402.970181][ T34] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.974515][ T34] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.990025][ T34] usb 14-1: config 0 descriptor?? [ 403.405991][ T34] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 403.558579][T24095] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 403.562010][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 403.664727][T24069] rdma_rxe: rxe_newlink: failed to add lo [ 403.669272][ T841] usb 14-1: USB disconnect, device number 11 [ 404.448199][T24123] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7545'. [ 404.591998][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 404.595026][T24133] vlan0: entered allmulticast mode [ 404.662816][T24138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7543'. [ 404.769096][T24144] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7546'. [ 404.776573][T24144] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7546'. [ 404.781060][T24144] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7546'. [ 404.938333][T24155] netlink: 240 bytes leftover after parsing attributes in process `syz.9.7547'. [ 405.003283][T24160] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7552'. [ 405.632147][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 405.642223][T24191] random: crng reseeded on system resumption [ 406.672269][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 407.208844][ T40] audit: type=1804 audit(1757314683.145:3106): pid=24237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7579" name="/newroot/249/file0" dev="tmpfs" ino=1396 res=1 errno=0 [ 407.209848][T24237] ref_ctr increment failed for inode: 0x574 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888012f6d600 [ 407.230005][T24236] uprobe: syz.0.7579:24236 failed to unregister, leaking uprobe [ 407.324203][ T5982] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 407.551482][T24260] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 407.622462][ T46] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.625211][ T46] netdevsim netdevsim6 eth0: unset [0, 1] type 1 family 0 port 1024 - 0 [ 407.627812][ T46] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.635600][T24269] vlan0: entered allmulticast mode [ 407.654810][ T46] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.658288][ T46] netdevsim netdevsim6 eth1: unset [0, 1] type 1 family 0 port 1024 - 0 [ 407.661824][ T46] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.664999][ T46] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.667901][ T46] netdevsim netdevsim6 eth2: unset [0, 1] type 1 family 0 port 1024 - 0 [ 407.671229][ T46] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.674597][ T46] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.677820][ T46] netdevsim netdevsim6 eth3: unset [0, 1] type 1 family 0 port 1024 - 0 [ 407.681095][ T46] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.711964][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 408.202051][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 408.352042][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 408.357377][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 408.363369][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 408.365650][T12290] libceph: connect (1)[c::]:6789 error -97 [ 408.366935][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.368908][T12290] libceph: mon0 (1)[c::]:6789 connect error [ 408.371362][ T10] usb 5-1: Product: syz [ 408.371373][ T10] usb 5-1: Manufacturer: syz [ 408.376612][ T10] usb 5-1: SerialNumber: syz [ 408.380311][ T10] usb 5-1: config 0 descriptor?? [ 408.385578][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 408.389510][ T10] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 408.506738][T24289] ceph: No mds server is up or the cluster is laggy [ 408.761951][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 408.995093][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 409.113017][T24336] binder_alloc: 24335: binder_alloc_buf size -16 failed, no address space [ 409.117445][T24336] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 409.161503][T24338] __nla_validate_parse: 2 callbacks suppressed [ 409.161525][T24338] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7617'. [ 409.168599][T24338] veth0_macvtap: left promiscuous mode [ 409.383338][T24350] overlayfs: failed to clone upperpath [ 409.418364][T24352] overlayfs: failed to clone upperpath [ 409.420295][ T10] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 409.425019][ T10] em28xx 5-1:0.0: board has no eeprom [ 409.469139][ T5982] Bluetooth: hci1: unexpected event for opcode 0x080e [ 409.791993][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 409.980171][T24369] netlink: 'syz.9.7627': attribute type 3 has an invalid length. [ 409.982927][T24369] netlink: 'syz.9.7627': attribute type 3 has an invalid length. [ 409.985583][T24369] netlink: 'syz.9.7627': attribute type 3 has an invalid length. [ 409.988448][T24369] netlink: 'syz.9.7627': attribute type 3 has an invalid length. [ 409.991846][T24369] netlink: 'syz.9.7627': attribute type 3 has an invalid length. [ 409.998763][T24369] netlink: 'syz.9.7627': attribute type 3 has an invalid length. [ 410.002849][T24369] netlink: 'syz.9.7627': attribute type 3 has an invalid length. [ 410.005568][T24369] netlink: 'syz.9.7627': attribute type 3 has an invalid length. [ 410.008493][T24369] netlink: 'syz.9.7627': attribute type 3 has an invalid length. [ 410.010990][T24369] netlink: 'syz.9.7627': attribute type 3 has an invalid length. [ 410.435162][T24282] em28xx 5-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 410.492701][ T10] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 410.495261][ T10] em28xx 5-1:0.0: dvb set to bulk mode. [ 410.497329][ T6038] em28xx 5-1:0.0: Binding DVB extension [ 410.507448][ T10] usb 5-1: USB disconnect, device number 11 [ 410.510493][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 410.529337][ T6038] em28xx 5-1:0.0: Registering input extension [ 410.532498][ T10] em28xx 5-1:0.0: Closing input extension [ 410.549953][ T10] em28xx 5-1:0.0: Freeing device [ 410.637718][ T40] audit: type=1804 audit(1757314686.575:3107): pid=24381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.7632" name="file0" dev="tmpfs" ino=9276 res=1 errno=0 [ 410.718451][T24383] overlayfs: failed to clone upperpath [ 410.841954][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 410.861051][T24392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7637'. [ 410.867685][T24389] 8021q: adding VLAN 0 to HW filter on device bond5 [ 410.871146][T24389] bond4: (slave bond5): making interface the new active one [ 410.873822][T24389] bond4: (slave bond5): Enslaving as an active interface with an up link [ 410.894636][T24389] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 410.898840][T24389] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 410.899977][T24398] overlayfs: failed to clone upperpath [ 410.917813][T24396] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7638'. [ 410.922777][T24396] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7638'. [ 410.957263][T24400] lo speed is unknown, defaulting to 1000 [ 411.051593][T24410] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 411.054840][T24410] block device autoloading is deprecated and will be removed. [ 411.086410][T24409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7644'. [ 411.151604][T24417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7647'. [ 411.204981][T24421] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7649'. [ 411.293623][T24431] netlink: 96 bytes leftover after parsing attributes in process `syz.9.7651'. [ 411.310200][T24433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.372242][T24433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.433764][T24433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.848211][ T40] audit: type=1804 audit(1757314687.785:3108): pid=24450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7661" name="file0" dev="tmpfs" ino=8894 res=1 errno=0 [ 411.848581][T24450] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1 [ 411.858624][T24450] ref_ctr increment failed for inode: 0x22be offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888012e22040 [ 411.882052][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 411.941817][T24454] overlayfs: failed to clone upperpath [ 412.693508][T24479] netfs: Couldn't get user pages (rc=-14) [ 412.912087][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 413.027688][T24485] overlayfs: failed to clone upperpath [ 413.951974][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 414.080923][T24516] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7684'. [ 414.188250][T24518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7686'. [ 414.194745][T24518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7686'. [ 414.198035][T24518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7686'. [ 414.207860][T24518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7686'. [ 414.211811][T24518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7686'. [ 414.218503][T24518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7686'. [ 414.555395][T24533] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7691'. [ 414.782429][ T10] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 414.940978][T24544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7695'. [ 415.001961][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 415.071974][ T10] usb 14-1: Using ep0 maxpacket: 8 [ 415.076193][ T10] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 415.079586][ T10] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 415.082804][ T10] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 415.085889][ T10] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.095601][ T10] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 415.102059][ T10] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.137869][T24550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7698'. [ 415.140751][T24550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7698'. [ 415.319923][T24559] 8021q: adding VLAN 0 to HW filter on device bond7 [ 415.326956][ T10] usb 14-1: GET_CAPABILITIES returned 0 [ 415.328888][ T10] usbtmc 14-1:16.0: can't read capabilities [ 415.342677][T24559] vlan1: entered allmulticast mode [ 415.344834][T24559] bond7: entered allmulticast mode [ 415.624550][ T841] usb 14-1: USB disconnect, device number 12 [ 415.853755][T24593] validate_nla: 41 callbacks suppressed [ 415.853767][T24593] netlink: 'syz.6.7713': attribute type 1 has an invalid length. [ 415.893606][T24593] 8021q: adding VLAN 0 to HW filter on device bond8 [ 415.929616][T24593] bond8: (slave veth13): Enslaving as an active interface with a down link [ 415.940602][T24593] bond8: (slave dummy0): making interface the new active one [ 415.945562][T24593] dummy0: entered promiscuous mode [ 415.948000][T24593] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 415.960247][T24593] netlink: 'syz.6.7713': attribute type 10 has an invalid length. [ 415.965296][T24593] bond8: (slave dummy0): Releasing active interface [ 416.031964][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 416.760539][T24630] md: md2 stopped. [ 417.041241][ T40] audit: type=1326 audit(1757314692.975:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24608 comm="syz.6.7720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7fc00000 [ 417.072085][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 417.074865][ T5982] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 417.077649][ T5982] Bluetooth: hci0: Injecting HCI hardware error event [ 417.080529][ T5982] Bluetooth: hci0: hardware error 0x00 [ 417.237145][T24657] netlink: 'syz.6.7738': attribute type 1 has an invalid length. [ 417.251088][T24657] 8021q: adding VLAN 0 to HW filter on device bond9 [ 417.596138][T24672] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 418.112063][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 419.151982][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 419.162193][ T5982] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 419.397331][T24736] netlink: 'syz.6.7763': attribute type 4 has an invalid length. [ 419.401298][T24736] netlink: 'syz.6.7763': attribute type 4 has an invalid length. [ 419.508806][T24742] overlayfs: failed to clone upperpath [ 419.669262][T24750] tipc: Enabling of bearer rejected, failed to enable media [ 420.189514][T24769] __nla_validate_parse: 5 callbacks suppressed [ 420.189524][T24769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7779'. [ 420.191955][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 420.215368][T24769] syz_tun (unregistering): left allmulticast mode [ 420.311424][T24775] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7780'. [ 420.396772][T24785] netlink: 14 bytes leftover after parsing attributes in process `syz.7.7784'. [ 420.498006][T24785] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 420.501704][T24785] bond0 (unregistering): Released all slaves [ 420.665234][T24796] Set syz0 is full, maxelem 0 reached [ 420.971984][ T841] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 420.978703][T24810] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7794'. [ 420.995486][T24810] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7794'. [ 421.122059][ T841] usb 5-1: Using ep0 maxpacket: 32 [ 421.124946][ T841] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 421.130428][ T841] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 421.133614][ T841] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 421.136210][ T841] usb 5-1: Product: syz [ 421.137606][ T841] usb 5-1: Manufacturer: syz [ 421.139119][ T841] usb 5-1: SerialNumber: syz [ 421.141791][ T841] usb 5-1: config 0 descriptor?? [ 421.144874][T24799] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 421.232119][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 421.358698][ T841] usb 5-1: USB disconnect, device number 12 [ 421.362890][T24820] netlink: 'syz.6.7798': attribute type 1 has an invalid length. [ 421.378113][T24820] 8021q: adding VLAN 0 to HW filter on device bond10 [ 421.409539][T24820] veth15: entered promiscuous mode [ 421.413368][T24820] bond10: (slave veth15): Enslaving as an active interface with a down link [ 421.979315][ T5982] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 422.131862][T24844] binder: 24843:24844 ioctl c0306201 80000680 returned -14 [ 422.281934][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 423.311937][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 424.351954][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 424.860050][T24901] netlink: 'syz.6.7827': attribute type 4 has an invalid length. [ 425.391954][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 425.945346][T24920] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7835'. [ 426.370872][T24931] netlink: 'syz.0.7838': attribute type 1 has an invalid length. [ 426.374495][T24931] netlink: 'syz.0.7838': attribute type 4 has an invalid length. [ 426.377326][T24931] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.7838'. [ 426.431988][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 427.472024][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 427.567100][T24953] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7846'. [ 427.620587][T24955] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 427.681751][T24959] overlayfs: statfs failed on './file0' [ 427.841629][T24968] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7853'. [ 427.866737][T24970] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7854'. [ 427.956016][T24975] netlink: 1347 bytes leftover after parsing attributes in process `syz.7.7856'. [ 428.380621][T24996] overlayfs: failed to clone upperpath [ 428.489968][T25001] overlayfs: failed to clone upperpath [ 428.512063][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 429.551984][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 430.591993][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 430.797399][T25038] overlayfs: failed to clone upperpath [ 430.970676][T25049] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.7883'. [ 430.991636][T25051] binder: 25050:25051 ioctl c0306201 80000180 returned -14 [ 431.631952][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 431.765682][T25064] lo speed is unknown, defaulting to 1000 [ 432.672002][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 432.888868][T25086] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 432.940058][T25095] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7899'. [ 433.057848][T25095] team0 (unregistering): Port device team_slave_0 removed [ 433.062412][T25095] team0 (unregistering): Port device team_slave_1 removed [ 433.182136][T12292] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 433.223009][T25112] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7906'. [ 433.324218][T25117] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 433.342125][T12292] usb 5-1: Using ep0 maxpacket: 32 [ 433.345997][T12292] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 433.348826][T12292] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 433.351749][T12292] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 433.357275][T12292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 433.360912][T12292] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 433.365648][T12292] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 433.369580][T12292] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 433.372567][T12292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.376998][T12292] usb 5-1: config 0 descriptor?? [ 433.583923][T12292] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 433.588455][T12292] usb 5-1: USB disconnect, device number 13 [ 433.591662][T12292] usblp0: removed [ 433.721934][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 434.022292][ T1344] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 434.182175][ T1344] usb 5-1: Using ep0 maxpacket: 32 [ 434.194012][ T1344] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 434.196306][ T1344] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 434.198637][ T1344] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 434.201068][ T1344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 434.207506][ T1344] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 434.210159][ T1344] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 434.217955][ T1344] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 434.220378][ T1344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.225072][ T1344] usb 5-1: config 0 descriptor?? [ 434.437348][ T1344] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 434.549815][T25137] syzkaller0: entered promiscuous mode [ 434.552655][T25137] syzkaller0: entered allmulticast mode [ 434.640180][ T1344] usb 5-1: USB disconnect, device number 14 [ 434.643813][ T1344] usblp0: removed [ 434.761938][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 434.788843][T25143] overlayfs: failed to clone upperpath [ 435.225936][T25159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7919'. [ 435.801959][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 436.076541][T25159] tipc: Resetting bearer [ 436.088705][T25159] tipc: Disabling bearer [ 436.094056][T25159] team0 (unregistering): Port device team_slave_0 removed [ 436.098200][T25159] team0 (unregistering): Port device team_slave_1 removed [ 436.364446][T25194] wg2: entered promiscuous mode [ 436.371927][T25194] wg2: entered allmulticast mode [ 436.690521][T25435] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 436.694438][T25435] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 436.697722][T25435] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 436.702107][T25435] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 436.706188][T25435] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 436.731586][T25427] lo speed is unknown, defaulting to 1000 [ 436.831956][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 436.912429][T25427] chnl_net:caif_netlink_parms(): no params data found [ 437.008579][T25427] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.010918][T25427] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.013568][T25427] bridge_slave_0: entered allmulticast mode [ 437.016154][T25427] bridge_slave_0: entered promiscuous mode [ 437.019442][T25427] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.021705][T25427] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.024072][T25427] bridge_slave_1: entered allmulticast mode [ 437.026768][T25427] bridge_slave_1: entered promiscuous mode [ 437.060208][T25427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.069216][T25427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.126495][T25427] team0: Port device team_slave_0 added [ 437.131431][T25427] team0: Port device team_slave_1 added [ 437.172799][T25427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.174998][T25427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.186649][T25427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.190968][T25427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.195694][T25427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.204165][T25427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.245058][T25427] hsr_slave_0: entered promiscuous mode [ 437.247313][T25427] hsr_slave_1: entered promiscuous mode [ 437.249354][T25427] debugfs: 'hsr0' already exists in 'hsr' [ 437.251175][T25427] Cannot create hsr debugfs directory [ 437.269020][T25469] bridge0: port 1(syz_tun) entered blocking state [ 437.273531][T25469] bridge0: port 1(syz_tun) entered disabled state [ 437.275719][T25469] syz_tun: entered allmulticast mode [ 437.278181][T25469] syz_tun: entered promiscuous mode [ 437.281857][T25469] bridge0: port 1(syz_tun) entered blocking state [ 437.285261][T25469] bridge0: port 1(syz_tun) entered forwarding state [ 437.324523][T25475] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7946'. [ 437.730343][T25427] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 437.736437][T25427] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 437.740628][T25427] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 437.744585][T25427] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 437.793657][T25427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.813383][T25427] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.821667][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.823973][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.829477][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.831732][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.872045][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 437.967310][T25427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.102038][T25427] veth0_vlan: entered promiscuous mode [ 438.107014][T25427] veth1_vlan: entered promiscuous mode [ 438.121697][T25427] veth0_macvtap: entered promiscuous mode [ 438.125482][T25427] veth1_macvtap: entered promiscuous mode [ 438.133935][T25427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.140649][T25427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.147419][T24105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.150243][T24105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.154770][T24105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.158545][T24105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.197464][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.199931][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.226611][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.229403][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.267141][T25507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7938'. [ 438.271380][ T40] audit: type=1804 audit(1757314714.205:3110): pid=25505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7951" name="file0" dev="tmpfs" ino=9352 res=1 errno=0 [ 438.271752][T25505] ref_ctr increment failed for inode: 0x2488 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880204eeb80 [ 438.295935][T25504] uprobe: syz.7.7951:25504 failed to unregister, leaking uprobe [ 438.397159][T25507] team0 (unregistering): Port device team_slave_0 removed [ 438.401800][T25507] team0 (unregistering): Port device team_slave_1 removed [ 438.556465][T25519] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7955'. [ 438.752294][T25435] Bluetooth: hci0: command tx timeout [ 438.873730][ T842] libceph: connect (1)[c::]:6789 error -101 [ 438.875659][ T842] libceph: mon0 (1)[c::]:6789 connect error [ 438.877764][ T842] libceph: connect (1)[c::]:6789 error -101 [ 438.879722][ T842] libceph: mon0 (1)[c::]:6789 connect error [ 438.912019][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 439.026691][T25526] ceph: No mds server is up or the cluster is laggy [ 439.325980][ T6822] Process accounting resumed [ 439.377120][ T40] audit: type=1326 audit(1757314715.315:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25545 comm="syz.7.7965" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f86579 code=0x0 [ 439.813391][T25568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7973'. [ 439.817725][T25568] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7973'. [ 439.951987][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.241978][ T40] audit: type=1804 audit(1757314716.175:3112): pid=25583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7976" name="file0" dev="tmpfs" ino=9378 res=1 errno=0 [ 440.381452][T25595] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 440.394345][T25589] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7979'. [ 440.423974][T25599] netlink: 'syz.4.7981': attribute type 1 has an invalid length. [ 440.439883][T25599] bond1 (unregistering): Released all slaves [ 440.834251][T25435] Bluetooth: hci0: command tx timeout [ 440.939141][ T6822] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 440.942838][T25623] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7991'. [ 440.947239][T25623] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7991'. [ 441.000330][T25626] overlayfs: failed to clone upperpath [ 441.002758][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.102119][ T6822] usb 9-1: Using ep0 maxpacket: 16 [ 441.104233][ T6822] usb 9-1: too many configurations: 123, using maximum allowed: 8 [ 441.107848][ T6822] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.112843][ T6822] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.116492][ T6822] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.121285][ T6822] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.126274][ T6822] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.130443][ T6822] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.137593][ T6822] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.143846][ T6822] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.147709][ T6822] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 441.150568][ T6822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 441.153222][ T6822] usb 9-1: SerialNumber: syz [ 441.156564][ T6822] usb 9-1: config 0 descriptor?? [ 441.161757][ T6822] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input56 [ 441.264963][T25640] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7996'. [ 441.373376][T25609] input: syz1 as /devices/virtual/input/input57 [ 441.381451][ T5370] bcm5974 9-1:0.0: could not read from device [ 441.381611][ T24] usb 9-1: USB disconnect, device number 7 [ 442.032052][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.866295][T25696] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8013'. [ 442.922151][T25435] Bluetooth: hci0: command tx timeout [ 443.072069][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 443.520235][T25719] syz_tun: left allmulticast mode [ 443.521853][T25719] syz_tun: left promiscuous mode [ 443.526098][T25719] bridge0: port 1(syz_tun) entered disabled state [ 443.540543][T25719] bond0: (slave bond_slave_0): Releasing backup interface [ 443.551749][T25719] bond0: (slave bond_slave_1): Releasing backup interface [ 443.567918][T25719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.574980][T25722] netlink: 'syz.9.8022': attribute type 10 has an invalid length. [ 443.576275][T25719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.580484][T25719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.583096][T25719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.597239][T25719] bond2: (slave gretap1): Releasing active interface [ 443.604863][T25719] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 443.607242][T25719] batman_adv: batadv0: Removing interface: ip6gretap1 [ 443.612110][T25719] bond4: (slave bond5): Releasing backup interface [ 444.018099][T25738] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8029'. [ 444.111940][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 444.412885][T25753] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8037'. [ 444.915513][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.917608][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.925519][T25768] lo speed is unknown, defaulting to 1000 [ 445.002150][T25435] Bluetooth: hci0: command tx timeout [ 445.161998][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 445.541665][T25790] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8051'. [ 445.767199][T25798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8053'. [ 445.769993][T25798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8053'. [ 445.867655][T25803] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8054'. [ 445.959238][T25810] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8056'. [ 446.201952][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 446.439837][T25837] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8066'. [ 446.465562][T25837] 8021q: adding VLAN 0 to HW filter on device bond6 [ 446.493589][T25837] vlan3: entered allmulticast mode [ 446.495870][T25837] bond6: entered allmulticast mode [ 447.037507][T25854] netlink: zone id is out of range [ 447.041565][T25854] netlink: zone id is out of range [ 447.077307][T25854] netlink: set zone limit has 4 unknown bytes [ 447.241979][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 448.005236][T25883] bridge_slave_0: left allmulticast mode [ 448.007131][T25883] bridge_slave_0: left promiscuous mode [ 448.009054][T25883] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.016789][T25883] bridge_slave_1: left allmulticast mode [ 448.018761][T25883] bridge_slave_1: left promiscuous mode [ 448.020685][T25883] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.028689][T25883] bond0: (slave bond_slave_0): Releasing backup interface [ 448.035148][T25883] bond0: (slave bond_slave_1): Releasing backup interface [ 448.040212][T25883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.042701][T25883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.046392][T25883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.048765][T25883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.056157][T25887] netlink: 'syz.4.8081': attribute type 10 has an invalid length. [ 448.061200][T25886] netlink: 'syz.7.8079': attribute type 3 has an invalid length. [ 448.064021][T25886] netlink: 'syz.7.8079': attribute type 3 has an invalid length. [ 448.090603][T25887] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 448.271960][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 448.298023][T25893] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 448.782033][T12292] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 448.941976][T12292] usb 9-1: Using ep0 maxpacket: 8 [ 448.945237][T12292] usb 9-1: config 0 interface 0 has no altsetting 0 [ 448.947566][T12292] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 448.950533][T12292] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.955547][T12292] usb 9-1: config 0 descriptor?? [ 449.217199][ T40] audit: type=1326 audit(1757314725.155:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25919 comm="syz.6.8094" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f45579 code=0x0 [ 449.312024][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 449.367849][T12292] mcp2221 0003:04D8:00DD.0026: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 449.571288][ T841] usb 9-1: USB disconnect, device number 8 [ 450.351993][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 450.878869][T25940] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 450.883717][T25940] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 450.995296][T25945] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8103'. [ 451.001450][T25945] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8103'. [ 451.006435][T25945] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8103'. [ 451.009425][T25945] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8103'. [ 451.012795][T25945] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8103'. [ 451.015867][T25945] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8103'. [ 451.216373][T25957] [ 451.391994][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 452.107340][T25976] overlayfs: failed to clone upperpath [ 452.212657][T25985] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8122'. [ 452.318928][T25978] infiniband syz1: set active [ 452.322066][T25978] infiniband syz1: added syz_tun [ 452.350786][T25978] RDS/IB: syz1: added [ 452.352431][T25978] smc: adding ib device syz1 with port count 1 [ 452.354378][T25978] smc: ib device syz1 port 1 has pnetid [ 452.431974][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 453.346875][T26006] bond8: (slave veth0_to_bond): Releasing active interface [ 453.358368][T26006] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 453.361215][T26006] batman_adv: batadv0: Removing interface: ip6gretap1 [ 453.367332][T26006] bond5: (slave bond6): Releasing backup interface [ 453.370074][T26006] bond6: left promiscuous mode [ 453.379119][T26006] bond7: (slave geneve2): Releasing active interface [ 453.394462][T26006] bond8: (slave veth3): Releasing active interface [ 453.399240][T26009] netlink: 'syz.7.8120': attribute type 10 has an invalid length. [ 453.409399][T26006] bond11: (slave veth21): Releasing active interface [ 453.428589][ T842] lo speed is unknown, defaulting to 1000 [ 453.440480][T24105] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 453.444712][T24105] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 453.448185][T24105] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 453.451656][T24105] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 453.471976][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 453.646080][T26013] netlink: 'syz.7.8125': attribute type 1 has an invalid length. [ 453.679743][T26013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.735239][T26013] veth25: entered promiscuous mode [ 453.741111][T26013] bond0: (slave veth25): Enslaving as an active interface with a down link [ 454.053961][T26022] overlayfs: failed to clone upperpath [ 454.170614][T26024] netlink: 14 bytes leftover after parsing attributes in process `syz.9.8130'. [ 454.285363][T26024] bond0 (unregistering): Released all slaves [ 454.443155][T26032] Set syz0 is full, maxelem 0 reached [ 454.507347][T25435] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 454.521932][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 454.979796][T12292] syz1: Port: 1 Link DOWN [ 454.979892][ T98] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.987479][ T98] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.990102][ T98] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.994110][ T98] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.997652][ T98] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.001333][ T98] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.011475][ T98] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.021979][ T98] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.319766][T26056] netlink: 'syz.7.8137': attribute type 1 has an invalid length. [ 455.339475][T26056] 8021q: adding VLAN 0 to HW filter on device bond12 [ 455.389416][T26056] bond12: (slave veth27): Enslaving as an active interface with a down link [ 455.428993][T26056] netlink: 'syz.7.8137': attribute type 10 has an invalid length. [ 455.434471][T26056] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8137'. [ 455.551956][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 456.591977][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 456.933201][T26095] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8159'. [ 456.955919][T26095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8159'. [ 457.074145][T26098] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8151'. [ 457.631981][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 458.556735][T26114] bond3: (slave geneve2): Releasing active interface [ 458.560444][T26114] batman_adv: batadv0: Removing interface: ip6gretap1 [ 458.569730][T26114] bond8: (slave veth13): Releasing active interface [ 458.586141][T26114] bond10: (slave veth15): Releasing active interface [ 458.641735][T26114] netlink: 'syz.6.8156': attribute type 10 has an invalid length. [ 458.681939][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 459.711973][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 459.742570][T26135] bond0: (slave netdevsim0): Releasing backup interface [ 459.884642][T26137] netlink: 'syz.4.8162': attribute type 1 has an invalid length. [ 459.905025][T26137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.949549][T26137] bond1: (slave veth3): Enslaving as an active interface with a down link [ 459.982302][T26137] bond1: (slave dummy0): making interface the new active one [ 459.986005][T26137] dummy0: entered promiscuous mode [ 459.987829][T26137] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 459.999043][T26137] netlink: 'syz.4.8162': attribute type 10 has an invalid length. [ 460.001662][T26137] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8162'. [ 460.009042][T26137] bond1: (slave dummy0): Releasing active interface [ 460.161529][T26145] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 460.164745][T26145] block device autoloading is deprecated and will be removed. [ 460.272022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.388961][T26154] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8167'. [ 460.752331][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 460.998318][T12292] Process accounting resumed [ 461.589577][T26169] netlink: 'syz.9.8176': attribute type 1 has an invalid length. [ 461.603921][T26169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.644417][T26173] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8179'. [ 461.650704][T26169] bond0: (slave veth9): Enslaving as an active interface with a down link [ 461.693150][T26169] bond0: (slave dummy0): making interface the new active one [ 461.696099][T26169] dummy0: entered promiscuous mode [ 461.697853][T26169] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 461.708752][T26169] netlink: 'syz.9.8176': attribute type 10 has an invalid length. [ 461.711377][T26169] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8176'. [ 461.725608][T26169] bond0: (slave dummy0): Releasing active interface [ 461.802131][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 462.718719][T26224] netlink: 'syz.6.8187': attribute type 27 has an invalid length. [ 462.726728][T26224] dummy0: left promiscuous mode [ 462.733971][T26224] vxlan0: left promiscuous mode [ 462.736756][T26224] vxlan1: left promiscuous mode [ 462.739281][T26224] gtp0: left promiscuous mode [ 462.747355][T26224] veth11: left promiscuous mode [ 462.750207][T26224] bridge9: left allmulticast mode [ 462.770231][T26224] veth15: left promiscuous mode [ 462.797668][T26228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.805990][T26228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.832182][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 462.871836][T26233] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8192'. [ 463.218579][ T40] audit: type=1326 audit(1757314739.155:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26246 comm="syz.9.8200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7fc00000 [ 463.872018][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 463.904166][ T40] audit: type=1326 audit(1757314739.835:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26246 comm="syz.9.8200" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf705e579 code=0x7fc00000 [ 463.911028][ T40] audit: type=1326 audit(1757314739.835:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26246 comm="syz.9.8200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7fc00000 [ 463.918695][ T40] audit: type=1326 audit(1757314739.835:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26246 comm="syz.9.8200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7fc00000 [ 463.925380][ T40] audit: type=1326 audit(1757314739.835:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26246 comm="syz.9.8200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7fc00000 [ 463.931988][ T40] audit: type=1326 audit(1757314739.835:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26246 comm="syz.9.8200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7fc00000 [ 463.938625][ T40] audit: type=1326 audit(1757314739.835:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26246 comm="syz.9.8200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7fc00000 [ 463.946019][ T40] audit: type=1326 audit(1757314739.835:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26246 comm="syz.9.8200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7fc00000 [ 463.953183][ T40] audit: type=1326 audit(1757314739.835:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26246 comm="syz.9.8200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7fc00000 [ 463.959779][ T40] audit: type=1326 audit(1757314739.835:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26246 comm="syz.9.8200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7fc00000 [ 464.921948][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 465.920428][T26305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8215'. [ 465.951971][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 466.991999][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 467.940654][T26376] netlink: 'syz.4.8239': attribute type 27 has an invalid length. [ 468.032036][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 468.124612][T26376] dummy0: left promiscuous mode [ 468.447486][T26377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.460600][T26377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 468.471082][ T1223] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.482106][ T1223] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.486371][ T1223] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.531500][ T1223] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.071964][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 470.111982][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 471.152057][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 471.186379][ T1223] bridge_slave_1: left allmulticast mode [ 471.188271][ T1223] bridge_slave_1: left promiscuous mode [ 471.190222][ T1223] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.195177][ T1223] bridge_slave_0: left allmulticast mode [ 471.197333][ T1223] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.426120][ T1223] batman_adv: batadv0: Removing interface: gretap1 [ 471.467873][ T1223] dvmrp0 (unregistering): left allmulticast mode [ 471.775611][ T1223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.795234][ T1223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.798569][ T1223] bond0 (unregistering): Released all slaves [ 471.945664][ T1223] bond1 (unregistering): Released all slaves [ 472.064344][ T1223] tipc: Disabling bearer [ 472.067623][ T1223] tipc: Left network mode [ 472.191984][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 472.327951][T26477] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8274'. [ 472.488951][T26487] netlink: 'syz.7.8279': attribute type 27 has an invalid length. [ 472.508047][T26487] wg2: left promiscuous mode [ 472.510176][T26487] wg2: left allmulticast mode [ 472.522424][T26487] vxlan0: left promiscuous mode [ 472.540126][T26487] bond5: left promiscuous mode [ 472.592862][T26487] bridge9: left allmulticast mode [ 472.607461][T26487] veth25: left promiscuous mode [ 472.612494][ T10] lo speed is unknown, defaulting to 1000 [ 472.614397][ T10] syz0: Port: 1 Link DOWN [ 472.620665][ T1223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.624110][ T1223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.170417][T26501] overlayfs: upper fs does not support file handles, falling back to index=off. [ 473.241935][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 473.418336][ T1223] team0 (unregistering): Port device team_slave_1 removed [ 473.520161][ T1223] team0 (unregistering): Port device team_slave_0 removed [ 474.229465][ T98] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.234295][ T98] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.261059][T26493] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.266537][T26493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 474.275408][ T10] lo speed is unknown, defaulting to 1000 [ 474.281961][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 474.381325][T26517] fuse: Bad value for 'fd' [ 475.321938][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 475.355128][T26534] overlayfs: failed to clone upperpath [ 475.832101][ T98] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.834803][ T98] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.837687][ T34] lo speed is unknown, defaulting to 1000 [ 475.841129][ T34] syz0: Port: 1 Link ACTIVE [ 475.852597][T26528] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8290'. [ 476.032062][T26561] IPVS: rr: FWM 3 0x00000003 - no destination available [ 476.231728][T26575] overlayfs: failed to clone upperpath [ 476.277137][T26581] overlayfs: failed to clone upperpath [ 476.361993][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 476.859538][T26618] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8328'. [ 477.391983][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 477.675692][T26665] team_slave_1: Caught tx_queue_len zero misconfig [ 478.431978][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 478.751219][T26722] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8359'. [ 479.472009][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 479.879708][T26749] netlink: 84 bytes leftover after parsing attributes in process `syz.7.8373'. [ 479.922462][T26753] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 479.947144][ T24] libceph: connect (1)[c::]:6789 error -97 [ 479.949064][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 479.984306][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 479.984317][ T40] audit: type=1804 audit(1757314755.925:3181): pid=26761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.8378" name="file0" dev="tmpfs" ino=10017 res=1 errno=0 [ 480.093338][T26755] ceph: No mds server is up or the cluster is laggy [ 480.292279][ T40] audit: type=1326 audit(1757314756.225:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26787 comm="syz.9.8388" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705e579 code=0x0 [ 480.507136][T26804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8396'. [ 480.511471][T26804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8396'. [ 480.521957][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 480.638672][T26813] tipc: Invalid UDP bearer configuration [ 480.638715][T26813] tipc: Enabling of bearer rejected, failed to enable media [ 481.551996][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 481.880059][T26850] lo speed is unknown, defaulting to 1000 [ 481.883339][T26850] lo speed is unknown, defaulting to 1000 [ 481.885597][T26850] lo speed is unknown, defaulting to 1000 [ 481.891964][T26850] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 481.903200][T26850] lo speed is unknown, defaulting to 1000 [ 481.905792][T26850] lo speed is unknown, defaulting to 1000 [ 481.908258][T26850] lo speed is unknown, defaulting to 1000 [ 481.910726][T26850] lo speed is unknown, defaulting to 1000 [ 481.913555][T26850] lo speed is unknown, defaulting to 1000 [ 481.916006][T26850] lo speed is unknown, defaulting to 1000 [ 481.918482][T26850] lo speed is unknown, defaulting to 1000 [ 482.592049][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 483.405141][T26893] bond0: (slave veth9): Releasing active interface [ 483.484373][T26893] vlan0: entered promiscuous mode [ 483.486689][T26893] tipc: Enabling of bearer rejected, failed to enable media [ 483.602249][T26912] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8436'. [ 483.631947][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 483.693994][T26912] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8436'. [ 483.921793][T26923] netlink: 'syz.7.8441': attribute type 1 has an invalid length. [ 484.409471][T26952] netlink: 'syz.7.8451': attribute type 14 has an invalid length. [ 484.423357][T26952] netlink: 'syz.7.8451': attribute type 4 has an invalid length. [ 484.428691][ T841] lo speed is unknown, defaulting to 1000 [ 484.430572][ T841] syz0: Port: 1 Link DOWN [ 484.432276][ T841] lo speed is unknown, defaulting to 1000 [ 484.435868][T26952] netlink: 'syz.7.8451': attribute type 4 has an invalid length. [ 484.440380][ T10] lo speed is unknown, defaulting to 1000 [ 484.442548][ T10] syz0: Port: 1 Link ACTIVE [ 484.452999][ T6038] lo speed is unknown, defaulting to 1000 [ 484.465971][T26955] netlink: 'syz.9.8450': attribute type 27 has an invalid length. [ 484.469245][T26955] dummy0: left promiscuous mode [ 484.491623][T26955] wg2: left promiscuous mode [ 484.495082][T26955] wg2: left allmulticast mode [ 484.498729][ T40] audit: type=1326 audit(1757314760.435:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26946 comm="syz.4.8457" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x0 [ 484.500588][T26955] vlan0: left promiscuous mode [ 484.508384][T26955] vxlan0: left promiscuous mode [ 484.510975][T26955] bridge6: left allmulticast mode [ 484.546691][ T40] audit: type=1326 audit(1757314760.485:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26959 comm="syz.7.8453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 484.553962][T26955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 484.555656][ T40] audit: type=1326 audit(1757314760.485:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26959 comm="syz.7.8453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 484.568165][ T34] syz1: Port: 1 Link ACTIVE [ 484.568205][T26960] netlink: 180 bytes leftover after parsing attributes in process `syz.7.8453'. [ 484.569919][ T40] audit: type=1326 audit(1757314760.485:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26959 comm="syz.7.8453" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 484.574867][T26960] netlink: 180 bytes leftover after parsing attributes in process `syz.7.8453'. [ 484.580416][ T40] audit: type=1326 audit(1757314760.485:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26959 comm="syz.7.8453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 484.590143][ T40] audit: type=1326 audit(1757314760.485:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26959 comm="syz.7.8453" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 484.597179][ T40] audit: type=1326 audit(1757314760.485:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26959 comm="syz.7.8453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 484.597807][T26960] netlink: 180 bytes leftover after parsing attributes in process `syz.7.8453'. [ 484.603909][ T40] audit: type=1326 audit(1757314760.485:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26959 comm="syz.7.8453" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 484.671945][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 484.750329][T26969] netlink: 'syz.4.8459': attribute type 4 has an invalid length. [ 484.757866][ T841] lo speed is unknown, defaulting to 1000 [ 484.759064][T26969] netlink: 'syz.4.8459': attribute type 4 has an invalid length. [ 484.759903][ T841] syz2: Port: 1 Link DOWN [ 484.764870][ T842] lo speed is unknown, defaulting to 1000 [ 484.767215][ T842] syz2: Port: 1 Link ACTIVE [ 485.711975][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 485.953613][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 485.953629][ T40] audit: type=1326 audit(1757314761.895:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27006 comm="syz.7.8471" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f86579 code=0x0 [ 486.221739][T27022] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8473'. [ 486.751939][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 486.939868][T27039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8479'. [ 487.196240][T27044] netlink: 'syz.7.8476': attribute type 2 has an invalid length. [ 487.470171][T27055] netlink: 'syz.6.8485': attribute type 1 has an invalid length. [ 487.473932][T27055] netlink: 'syz.6.8485': attribute type 1 has an invalid length. [ 487.499488][T27059] overlayfs: failed to clone upperpath [ 487.511799][T27061] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8488'. [ 487.546466][ T40] audit: type=1804 audit(1757314763.485:3209): pid=27064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.8489" name="bus" dev="ramfs" ino=112110 res=1 errno=0 [ 487.561429][ T40] audit: type=1804 audit(1757314763.495:3210): pid=27064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.8489" name="bus" dev="ramfs" ino=112110 res=1 errno=0 [ 487.588039][ T841] syz1: Port: 1 Link DOWN [ 487.634564][T27066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.639538][ T842] syz1: Port: 1 Link ACTIVE [ 487.757008][T27072] openvswitch: netlink: Flow key attr not present in new flow. [ 487.801993][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 487.950879][T27079] overlayfs: failed to clone upperpath [ 488.549697][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.554412][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.612891][T27102] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 488.831966][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 488.927720][T27124] validate_nla: 3 callbacks suppressed [ 488.927737][T27124] netlink: 'syz.6.8510': attribute type 27 has an invalid length. [ 488.995214][ T40] audit: type=1804 audit(1757314764.935:3211): pid=27128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.8512" name="file0" dev="tmpfs" ino=10354 res=1 errno=0 [ 489.001429][ T40] audit: type=1326 audit(1757314764.935:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27127 comm="syz.7.8512" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x0 [ 489.007205][T27124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.014357][T27124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.856629][T27149] overlayfs: failed to clone upperpath [ 489.882021][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 490.737981][T27178] 9pnet: Unknown protocol version 9 [ 490.911932][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 491.242543][T27189] syz.9.8534 (27189): drop_caches: 2 [ 491.657032][T27216] lo speed is unknown, defaulting to 1000 [ 491.809417][T27216] lo speed is unknown, defaulting to 1000 [ 491.950883][T27224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8546'. [ 491.951970][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 492.195805][T27241] overlayfs: failed to clone lowerpath [ 492.199548][T27241] overlayfs: failed to clone upperpath [ 492.991957][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 493.156677][T27285] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8571'. [ 494.031971][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 494.182648][T27316] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 494.193317][T27316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8582'. [ 494.335697][ T40] audit: type=1804 audit(1757314770.275:3213): pid=27321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.8584" name="/newroot/785/file1" dev="fuse" ino=1 res=1 errno=0 [ 494.342137][ T40] audit: type=1800 audit(1757314770.275:3214): pid=27321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.8584" name="/" dev="fuse" ino=1 res=0 errno=0 [ 494.398599][ T40] audit: type=1800 audit(1757314770.335:3215): pid=27325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.8586" name="/" dev="9p" ino=2 res=0 errno=0 [ 494.964348][T27345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8593'. [ 494.967795][T27345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8593'. [ 494.970919][T27345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8593'. [ 495.071986][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 495.075594][T27357] netlink: 'syz.7.8598': attribute type 4 has an invalid length. [ 495.091020][ T843] lo speed is unknown, defaulting to 1000 [ 495.093474][ T843] syz0: Port: 1 Link DOWN [ 495.107212][ T843] lo speed is unknown, defaulting to 1000 [ 496.111947][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 496.264927][T27391] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 496.267039][T27391] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 496.270968][T27391] vhci_hcd vhci_hcd.0: Device attached [ 496.274887][T27394] vhci_hcd: connection closed [ 496.275537][ T98] vhci_hcd: stop threads [ 496.278401][ T98] vhci_hcd: release socket [ 496.281199][ T98] vhci_hcd: disconnect device [ 496.284917][T27393] : entered promiscuous mode [ 496.299281][T27393] : left promiscuous mode [ 496.981290][T27417] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 496.984548][T27417] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8618'. [ 497.151942][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 497.355508][T27427] overlayfs: failed to clone upperpath [ 497.783601][T27454] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8634'. [ 498.191944][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 498.740377][ T6884] libceph: connect (1)[c::]:6789 error -101 [ 498.742417][ T6884] libceph: mon0 (1)[c::]:6789 connect error [ 498.746968][T27486] tipc: New replicast peer: 255.255.255.255 [ 498.750508][T27486] tipc: Enabled bearer , priority 10 [ 498.754859][T27486] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8645'. [ 498.757663][T27486] tipc: Disabling bearer [ 498.761225][T27486] netlink: 112 bytes leftover after parsing attributes in process `syz.6.8645'. [ 498.801746][T27489] overlayfs: failed to clone upperpath [ 498.882398][T27482] ceph: No mds server is up or the cluster is laggy [ 498.962798][T27496] syz_tun: entered promiscuous mode [ 499.150299][T27512] netlink: 'syz.6.8653': attribute type 1 has an invalid length. [ 499.167954][T27512] 8021q: adding VLAN 0 to HW filter on device bond11 [ 499.238013][T27512] bond11: (slave veth27): Enslaving as an active interface with a down link [ 499.241956][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 499.279129][T27512] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 499.295598][T27512] vlan1: entered allmulticast mode [ 499.297800][T27512] bond11: entered allmulticast mode [ 499.301452][T27512] bond11: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 499.450747][T27521] netlink: 'syz.6.8656': attribute type 1 has an invalid length. [ 499.483267][T27526] netlink: 'syz.7.8658': attribute type 1 has an invalid length. [ 499.537118][T27528] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8656'. [ 499.588249][T27530] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8658'. [ 499.952821][T27521] bond12: (slave veth29): Enslaving as an active interface with a down link [ 499.969155][T27526] bond13: entered promiscuous mode [ 499.970835][T27526] bond13: entered allmulticast mode [ 499.981432][T27529] bond13: (slave erspan1): making interface the new active one [ 499.983980][T27529] erspan1: entered promiscuous mode [ 499.986290][T27529] erspan1: entered allmulticast mode [ 499.988790][T27529] bond13: (slave erspan1): Enslaving as an active interface with an up link [ 499.992724][T27528] 8021q: adding VLAN 0 to HW filter on device bond12 [ 499.997899][T27530] bond13: left promiscuous mode [ 499.999530][T27530] erspan1: left promiscuous mode [ 500.001270][T27530] bond13: left allmulticast mode [ 500.002996][T27530] erspan1: left allmulticast mode [ 500.005174][T27530] 8021q: adding VLAN 0 to HW filter on device bond13 [ 500.249491][ T40] audit: type=1326 audit(1757314776.185:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27548 comm="syz.6.8665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 500.257899][ T40] audit: type=1326 audit(1757314776.185:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27548 comm="syz.6.8665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 500.265150][ T40] audit: type=1326 audit(1757314776.185:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27548 comm="syz.6.8665" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 500.272035][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 500.275336][ T40] audit: type=1326 audit(1757314776.185:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27548 comm="syz.6.8665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 500.282243][ T40] audit: type=1326 audit(1757314776.185:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27548 comm="syz.6.8665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 500.291035][ T40] audit: type=1326 audit(1757314776.185:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27548 comm="syz.6.8665" exe="/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 500.301565][ T40] audit: type=1326 audit(1757314776.185:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27548 comm="syz.6.8665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 500.308527][ T40] audit: type=1326 audit(1757314776.185:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27548 comm="syz.6.8665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 500.316588][ T40] audit: type=1326 audit(1757314776.185:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27548 comm="syz.6.8665" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 500.325470][ T40] audit: type=1326 audit(1757314776.185:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27548 comm="syz.6.8665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x7ffc0000 [ 501.226783][T27586] tipc: Enabling of bearer rejected, failed to enable media [ 501.289885][T27591] bond2: entered allmulticast mode [ 501.291741][T27591] 8021q: adding VLAN 0 to HW filter on device bond2 [ 501.321944][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 501.685486][T27608] overlayfs: failed to clone upperpath [ 501.900411][T27625] netlink: 'syz.6.8693': attribute type 10 has an invalid length. [ 501.914439][T27625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.919546][T27625] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 502.351940][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 502.469511][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.474189][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.315891][T27662] overlayfs: failed to clone upperpath [ 503.401938][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 504.032044][T25435] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 504.036324][T25435] Bluetooth: hci1: Injecting HCI hardware error event [ 504.040811][ T5982] Bluetooth: hci1: hardware error 0x00 [ 504.332166][T27691] tipc: Enabled bearer , priority 0 [ 504.412428][T27698] netlink: 'syz.4.8722': attribute type 10 has an invalid length. [ 504.422320][T27700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.423766][T27698] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 504.432293][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 504.437196][T27698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.450317][ T10] lo speed is unknown, defaulting to 1000 [ 504.450335][T12292] lo speed is unknown, defaulting to 1000 [ 504.454368][T12292] syz2: Port: 1 Link DOWN [ 504.455767][ T6884] lo speed is unknown, defaulting to 1000 [ 504.457817][ T29] lo speed is unknown, defaulting to 1000 [ 504.460045][T27702] lo speed is unknown, defaulting to 1000 [ 505.481949][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 506.112784][ T5982] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 506.184680][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 506.184690][ T40] audit: type=1804 audit(1757314782.125:3242): pid=27741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.8738" name="bus" dev="ramfs" ino=111404 res=1 errno=0 [ 506.196539][ T40] audit: type=1804 audit(1757314782.135:3243): pid=27741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.8738" name="bus" dev="ramfs" ino=111404 res=1 errno=0 [ 506.269351][T27751] overlayfs: failed to clone upperpath [ 506.369929][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.372766][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.511954][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 506.539496][T27761] bond0: (slave wlan1): Releasing backup interface [ 506.543248][T27761] bond0: Destroying bond [ 506.650437][T27761] bond0 (unregistering): Released all slaves [ 506.771596][T27764] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8747'. [ 507.552186][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 507.999315][T27790] lo speed is unknown, defaulting to 1000 [ 508.156098][T27790] lo speed is unknown, defaulting to 1000 [ 508.601950][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 508.778720][T27819] netlink: 220 bytes leftover after parsing attributes in process `syz.9.8766'. [ 508.781518][T27819] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8766'. [ 508.784437][T27819] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8766'. [ 508.787311][T27819] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8766'. [ 508.790136][T27819] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8766'. [ 508.798396][T27819] netlink: 27 bytes leftover after parsing attributes in process `syz.9.8766'. [ 509.578381][T27840] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8773'. [ 509.586770][T27840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8773'. [ 509.634775][ T843] libceph: connect (1)[c::]:6789 error -101 [ 509.636839][ T843] libceph: mon0 (1)[c::]:6789 connect error [ 509.641920][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 509.785485][T27843] ceph: No mds server is up or the cluster is laggy [ 510.502374][ T841] libceph: connect (1)[c::]:6789 error -101 [ 510.505063][ T841] libceph: mon0 (1)[c::]:6789 connect error [ 510.510770][T27877] lo speed is unknown, defaulting to 1000 [ 510.658934][T27878] ceph: No mds server is up or the cluster is laggy [ 510.681924][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 510.750853][T27877] lo speed is unknown, defaulting to 1000 [ 511.721998][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 512.602079][T25435] Bluetooth: hci0: command 0x0405 tx timeout [ 512.752037][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 513.571512][T27908] netlink: 'syz.9.8792': attribute type 10 has an invalid length. [ 513.801969][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 514.568068][T27922] siw: device registration error -23 [ 514.621220][T27929] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8800'. [ 514.702606][T27929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8800'. [ 514.831961][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 514.840075][T27934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8804'. [ 515.795552][T27959] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8811'. [ 515.871981][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 516.001373][T27963] lo speed is unknown, defaulting to 1000 [ 516.027122][T27967] netlink: 'syz.6.8814': attribute type 14 has an invalid length. [ 516.031203][T27967] netlink: 'syz.6.8814': attribute type 4 has an invalid length. [ 516.055088][T27967] netlink: 'syz.6.8814': attribute type 4 has an invalid length. [ 516.110268][T27969] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8815'. [ 516.195248][T27969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8815'. [ 516.238203][T27963] lo speed is unknown, defaulting to 1000 [ 516.912085][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 517.085409][ T40] audit: type=1326 audit(1757314793.025:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28002 comm="syz.7.8825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 517.091421][ T40] audit: type=1326 audit(1757314793.025:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28002 comm="syz.7.8825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 517.111045][ T40] audit: type=1326 audit(1757314793.025:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28002 comm="syz.7.8825" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 517.119774][ T40] audit: type=1326 audit(1757314793.025:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28002 comm="syz.7.8825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 517.129875][ T40] audit: type=1326 audit(1757314793.025:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28002 comm="syz.7.8825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 517.142827][ T40] audit: type=1326 audit(1757314793.025:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28002 comm="syz.7.8825" exe="/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 517.152007][ T40] audit: type=1326 audit(1757314793.025:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28002 comm="syz.7.8825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 517.160255][ T40] audit: type=1326 audit(1757314793.025:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28002 comm="syz.7.8825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 517.168602][ T40] audit: type=1326 audit(1757314793.025:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28002 comm="syz.7.8825" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 517.176340][ T40] audit: type=1326 audit(1757314793.025:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28002 comm="syz.7.8825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x7ffc0000 [ 517.182728][T28015] overlayfs: failed to clone upperpath [ 517.187156][T28014] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8827'. [ 517.238347][T28014] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8827'. [ 517.952116][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 518.868967][ T24] syz1: Port: 1 Link DOWN [ 518.931386][T28067] netlink: 'syz.9.8841': attribute type 1 has an invalid length. [ 518.984797][T28067] bond7: (slave veth11): Enslaving as an active interface with a down link [ 518.990828][T28072] syz_tun: entered promiscuous mode [ 518.992467][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 519.060590][T28067] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8841'. [ 519.066250][T28067] 8021q: adding VLAN 0 to HW filter on device bond7 [ 519.375942][T28087] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8847'. [ 519.415847][T28089] netlink: 'syz.4.8849': attribute type 1 has an invalid length. [ 519.432783][T28089] 8021q: adding VLAN 0 to HW filter on device bond3 [ 519.469061][T28089] bond3: (slave veth9): Enslaving as an active interface with a down link [ 519.502844][T28089] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 519.514079][T28089] vlan2: entered allmulticast mode [ 519.515935][T28089] bond3: entered allmulticast mode [ 519.518570][T28089] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 520.031972][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 520.111981][ T6279] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 520.271980][ T6279] usb 14-1: Using ep0 maxpacket: 8 [ 520.276030][ T6279] usb 14-1: unable to get BOS descriptor or descriptor too short [ 520.280175][ T6279] usb 14-1: config 4 interface 0 has no altsetting 0 [ 520.285420][ T6279] usb 14-1: string descriptor 0 read error: -22 [ 520.288151][ T6279] usb 14-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 520.291931][ T6279] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.299884][ T6279] usb 14-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 520.308422][ T6279] usb 14-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 520.313430][ T6279] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 520.316433][ T6279] usb 14-1: media controller created [ 520.333278][ T6279] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 520.511788][ T6279] zl10353_read_register: readreg error (reg=127, ret==0) [ 520.538433][ T6279] usb 14-1: USB disconnect, device number 13 [ 520.716282][T28112] netlink: 'syz.4.8864': attribute type 2 has an invalid length. [ 521.081993][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 521.100163][T28125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8861'. [ 521.209956][T28125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8861'. [ 521.244106][T28131] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8863'. [ 521.430769][T28142] netlink: 'syz.9.8867': attribute type 2 has an invalid length. [ 522.121929][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 522.278261][T28163] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8874'. [ 522.338574][T28163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8874'. [ 522.725823][T28171] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8884'. [ 523.047911][T28171] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8884'. [ 523.151966][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 524.200973][T28199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8891'. [ 524.203917][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 525.152259][T28217] xfrm0: entered promiscuous mode [ 525.154272][T28217] xfrm0: entered allmulticast mode [ 525.241956][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 525.506660][T28220] lo speed is unknown, defaulting to 1000 [ 525.797233][T28220] lo speed is unknown, defaulting to 1000 [ 525.987394][T28225] netlink: 'syz.7.8892': attribute type 1 has an invalid length. [ 526.014907][T28225] 8021q: adding VLAN 0 to HW filter on device bond14 [ 526.018255][T28232] netlink: 'syz.9.8900': attribute type 4 has an invalid length. [ 526.071211][T28233] netlink: 'syz.9.8900': attribute type 4 has an invalid length. [ 526.084723][T28225] bond14: (slave veth31): Enslaving as an active interface with a down link [ 526.113755][T28225] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 526.134342][T28225] vlan0: entered allmulticast mode [ 526.136069][T28225] bond14: entered allmulticast mode [ 526.138464][T28225] bond14: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 526.271952][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 527.312005][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 527.325834][T28257] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8896'. [ 528.350240][T28291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8913'. [ 528.353836][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 528.370077][T28292] overlayfs: failed to clone upperpath [ 529.392038][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 530.431992][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 531.472269][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 532.511958][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 532.994911][T28417] lo speed is unknown, defaulting to 1000 [ 533.283417][T28417] lo speed is unknown, defaulting to 1000 [ 533.562395][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 534.601962][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 535.632228][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 535.784892][T28427] tipc: Started in network mode [ 535.786897][T28427] tipc: Node identity 4, cluster identity 4711 [ 535.788860][T28427] tipc: Node number set to 4 [ 536.671953][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 537.325422][T28458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8937'. [ 537.332630][T28374] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 537.335897][T28374] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 537.362205][T27704] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 537.382181][T27704] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 537.692110][T27704] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 537.711983][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 538.461938][T28472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8945'. [ 538.467799][T28472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8945'. [ 538.506982][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 538.507001][ T40] audit: type=1326 audit(1757314814.315:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28479 comm="syz.7.8949" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x0 [ 538.551228][T28485] lo speed is unknown, defaulting to 1000 [ 538.751958][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 538.820402][T28485] lo speed is unknown, defaulting to 1000 [ 538.960804][T28495] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8953'. [ 539.347162][T28509] batman_adv: batadv0: Adding interface: dummy0 [ 539.349434][T28509] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 539.360723][T28509] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 539.791989][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 540.138008][T28534] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8974'. [ 540.841956][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 541.009174][T28549] tipc: Enabling of bearer rejected, already enabled [ 541.712012][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 541.871941][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 542.672174][T28573] BUG: sleeping function called from invalid context at mm/vmalloc.c:3409 [ 542.675212][T28573] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 28573, name: syz.4.8977 [ 542.679250][T28573] preempt_count: 1, expected: 0 [ 542.681450][T28573] RCU nest depth: 0, expected: 0 [ 542.683236][T28573] 1 lock held by syz.4.8977/28573: [ 542.684851][T28573] #0: ffffffff9b2b5158 (nfnl_subsys_ipset){+.+.}-{4:4}, at: call_ad.constprop.0+0x24d/0x940 [ 542.688035][T28573] Preemption disabled at: [ 542.688041][T28573] [] preempt_schedule_thunk+0x16/0x30 [ 542.691579][T28573] CPU: 2 UID: 0 PID: 28573 Comm: syz.4.8977 Not tainted syzkaller #0 PREEMPT(full) [ 542.691593][T28573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 542.691600][T28573] Call Trace: [ 542.691604][T28573] [ 542.691608][T28573] dump_stack_lvl+0x16c/0x1f0 [ 542.691624][T28573] __might_resched+0x3c0/0x5e0 [ 542.691636][T28573] ? __pfx___might_resched+0x10/0x10 [ 542.691646][T28573] ? pcpu_block_update+0x562/0x660 [ 542.691665][T28573] vfree+0x75/0xb50 [ 542.691681][T28573] ? rcu_is_watching+0x12/0xc0 [ 542.691692][T28573] ? kfree+0x24f/0x4d0 [ 542.691701][T28573] ? free_percpu+0x6db/0x13c0 [ 542.691715][T28573] futex_hash_free+0x98/0xc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 542.691728][T28573] __mmdrop+0x33f/0x580 [ 542.691740][T28573] ? mark_held_locks+0x49/0x80 [ 542.691755][T28573] finish_task_switch.isra.0+0x7a4/0xc10 [ 542.691766][T28573] ? __switch_to+0x7a5/0x11a0 [ 542.691782][T28573] __schedule+0x1198/0x5de0 [ 542.691794][T28573] ? ____sys_sendmsg+0xa95/0xc70 [ 542.691803][T28573] ? ___sys_sendmsg+0x134/0x1d0 [ 542.691816][T28573] ? __sys_sendmsg+0x16d/0x220 [ 542.691828][T28573] ? __do_fast_syscall_32+0x7c/0x3a0 [ 542.691849][T28573] ? __pfx___schedule+0x10/0x10 [ 542.691878][T28573] ? preempt_schedule_thunk+0x16/0x30 [ 542.691895][T28573] preempt_schedule_common+0x44/0xc0 [ 542.691908][T28573] preempt_schedule_thunk+0x16/0x30 [ 542.691925][T28573] ? hash_ipmark4_add+0x1a0f/0x2940 [ 542.691938][T28573] __local_bh_enable_ip+0x107/0x120 [ 542.691950][T28573] hash_ipmark4_add+0x1a0f/0x2940 [ 542.691971][T28573] ? __pfx_hash_ipmark4_add+0x10/0x10 [ 542.691983][T28573] ? __pfx_ip_set_get_extensions+0x10/0x10 [ 542.691999][T28573] ? rcu_is_watching+0x12/0xc0 [ 542.692012][T28573] hash_ipmark4_uadt+0x6d7/0x910 [ 542.692025][T28573] ? __pfx_hash_ipmark4_add+0x10/0x10 [ 542.692038][T28573] ? __pfx_hash_ipmark4_uadt+0x10/0x10 [ 542.692059][T28573] call_ad.constprop.0+0x16e/0x940 [ 542.692069][T28573] ? __pfx_hash_ipmark4_resize+0x10/0x10 [ 542.692084][T28573] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 542.692094][T28573] ? __pfx___nla_validate_parse+0x10/0x10 [ 542.692111][T28573] ? __nla_parse+0x40/0x60 [ 542.692123][T28573] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 542.692137][T28573] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 542.692150][T28573] ? srcu_gp_start_if_needed+0xb71/0xe70 [ 542.692177][T28573] ? find_held_lock+0x2b/0x80 [ 542.692191][T28573] nfnetlink_rcv_msg+0x9fc/0x1200 [ 542.692207][T28573] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 542.692220][T28573] ? stack_trace_save+0x8e/0xc0 [ 542.692247][T28573] netlink_rcv_skb+0x155/0x420 [ 542.692261][T28573] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 542.692273][T28573] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 542.692297][T28573] ? ns_capable+0xd7/0x110 [ 542.692309][T28573] nfnetlink_rcv+0x1b3/0x430 [ 542.692320][T28573] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 542.692330][T28573] ? netlink_deliver_tap+0x1ae/0xd30 [ 542.692343][T28573] ? is_vmalloc_addr+0x86/0xa0 [ 542.692357][T28573] netlink_unicast+0x5aa/0x870 [ 542.692373][T28573] ? __pfx_netlink_unicast+0x10/0x10 [ 542.692388][T28573] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 542.692406][T28573] netlink_sendmsg+0x8d1/0xdd0 [ 542.692422][T28573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.692438][T28573] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 542.692453][T28573] ____sys_sendmsg+0xa95/0xc70 [ 542.692462][T28573] ? gfs2_file_write_iter+0x330/0x11a0 [ 542.692480][T28573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 542.692489][T28573] ? get_compat_msghdr+0x11a/0x170 [ 542.692505][T28573] ? __pfx_futex_wake_mark+0x10/0x10 [ 542.692523][T28573] ___sys_sendmsg+0x134/0x1d0 [ 542.692537][T28573] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.692558][T28573] ? find_held_lock+0x2b/0x80 [ 542.692576][T28573] __sys_sendmsg+0x16d/0x220 [ 542.692590][T28573] ? __pfx___sys_sendmsg+0x10/0x10 [ 542.692604][T28573] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 542.692623][T28573] ? rcu_is_watching+0x12/0xc0 [ 542.692636][T28573] __do_fast_syscall_32+0x7c/0x3a0 [ 542.692651][T28573] do_fast_syscall_32+0x32/0x80 [ 542.692665][T28573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 542.692678][T28573] RIP: 0023:0xf704e579 [ 542.692687][T28573] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 542.692698][T28573] RSP: 002b:00000000f541d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 542.692708][T28573] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800002c0 [ 542.692714][T28573] RDX: 00000000040c0080 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.692720][T28573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 542.692726][T28573] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 542.692732][T28573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 542.692745][T28573] [ 542.911970][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 543.420952][T28327] smc: removing ib device syz1 [ 543.692552][T28573] Set syz1 is full, maxelem 65536 reached [ 543.951943][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 544.992001][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 546.031984][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 547.071988][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 548.112257][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 549.152021][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 550.192045][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 551.152149][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 551.241983][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 552.272017][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available VM DIAGNOSIS: 06:06:58 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000002 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000008458 RSI=ffffffff8de288c5 RDI=ffffffff8c162f00 RBP=ffff88802b23a458 RSP=ffffffff8e207bd8 R8 =0000000000000001 R9 =0000000000000001 R10=ffff888027bdb25f R11=0000000000000001 R12=ffffffff8e2977c0 R13=ffffffff8e2982b0 R14=0000000000000000 R15=0000000000000046 RIP=ffffffff8b91239d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000565ae99c CR3=0000000054611000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000717835 RBX=0000000000000001 RCX=ffffffff8b911bf9 RDX=0000000000000000 RSI=ffffffff8de4dd71 RDI=ffffffff8c162f00 RBP=ffffed1003bdb488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801deda440 R14=ffffffff90ab9790 R15=0000000000000000 RIP=ffffffff8b91075f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c37ca7f CR3=00000000607c5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85617af5 RDI=ffffffff9b0ff700 RBP=ffffffff9b0ff6c0 RSP=ffffc900067665a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0ff6c0 R15=ffffffff85617a90 RIP=ffffffff85617b1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976bd000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003510cffc CR3=0000000049e08000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffc90000415110 RBX=0000000000000000 RCX=1ffff11004e19787 RDX=0000000000000008 RSI=ffffc90000415100 RDI=ffff8880270cbc38 RBP=ffff8880449ac000 RSP=ffffc900005e8e50 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000001 R14=ffffed100893580a R15=ffff888023318000 RIP=ffffffff866a808d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056ae599c CR3=0000000049e08000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000