last executing test programs: 10m26.093710728s ago: executing program 32 (id=1513): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000d80)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40008c0) 10m7.155578086s ago: executing program 33 (id=1910): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 10m0.295417002s ago: executing program 2 (id=2034): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r2], &(0x7f00000003c0)=[0x7], &(0x7f0000000100)=[r4, r3, r4, r4, r3, r4, r3], &(0x7f0000000180), 0x0, 0x8000000000009}) 10m0.188963929s ago: executing program 2 (id=2036): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01"]) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmmsg$inet6(r0, &(0x7f0000007140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0xb, @private1, 0x8}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000140)="5ec71068", 0x4}], 0x1}}, {{&(0x7f0000000a00)={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000a40)="ce3d941068", 0x5}], 0x1}}], 0x2, 0x20000050) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r2, 0x3}, 0x8) 10m0.188630041s ago: executing program 2 (id=2037): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc17c2d1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600300000300", [0xfffffffffffffffd, 0x1]}}) 10m0.058990421s ago: executing program 2 (id=2040): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 9m59.947337575s ago: executing program 2 (id=2045): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[], 0x0) ppoll(&(0x7f0000000d40)=[{r0, 0x8000}], 0x20000000000000e0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 9m59.649203006s ago: executing program 2 (id=2056): setreuid(0xee00, 0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x40015) 9m59.60763856s ago: executing program 34 (id=2056): setreuid(0xee00, 0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x40015) 9m23.464264971s ago: executing program 4 (id=2854): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) statx(r0, &(0x7f0000005b40)='./file0\x00', 0x4000, 0x7ff, 0x0) getdents64(r0, &(0x7f0000000240)=""/131, 0x83) 9m23.43023575s ago: executing program 4 (id=2856): r0 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c0001"], 0xe4}, 0x1, 0x0, 0x0, 0x100}, 0x4000044) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 9m23.367782699s ago: executing program 4 (id=2859): r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfeffffff, r0, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 9m23.237677955s ago: executing program 4 (id=2863): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a80080002800800e500080000003e120000080002001040e5"], 0x44}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4940}, 0x24008890) 9m23.236916473s ago: executing program 4 (id=2864): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = syz_create_resource$binfmt(&(0x7f0000000400)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 9m23.168683086s ago: executing program 4 (id=2867): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0xfffffffffffffe6d, {0xdddd0000, 0x100000}}, "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", "1acd2077949cf1f27e1e764566e4cffaa168dcad09bfe7c84a06d9db78a4e8f0504116608cffa736ae4427d04f27d39e5de80f8935f281bc483252d1c4e0dff576831d8505d3cf34ddc4f4760b53ec5182b54b352dea1b5975eea9b6bffd5b66524559c7c3e9981d7a0ff5ffe6814c923871db66426d98286aec1debc56864a4b29ee5cb46989af08546d6d1a5d9da45db7d8abea1d392d0c668cc040da5d129ddbbe6a95a7d9e51a13328ea3fbd9ac81f03914ed9d1d2b72c234093a351f7294556996ca5459d796cb4127a9aed8e0cca398d1b5af6eae257d02db91a61d49a5677ee9c8caf1855edd2c25b9b3a9a5174d2193108e5e87d781780d9506a890687c80c429f3a46028ed71364c4b8d3b2380b38d2cf7e447dee058f556dcae2627e49dfd316d169d382f2b6775233157f57c7be54b105e2493e140ad97ecf9c12df8f0db9a973d0ef9197ebbdebc5e822ee06852a408560c7f19c65ab8527edc9ec1d6378f2c748f7e84d1d6e98de8abab3e0e42a866e1ec5d00822b124a98d77e9c8dbb3ac6648afe409b21e1cf2f5458a0588cd11af6887f552f6c16a801abf2594eb9a80e704b8053573f661dd29706e71060b630272037144b33d684f66128950510d4138785418f726eb7c7f84c7dda646b3647d673122f95ef89c863c3d4adec4477664cfe911683f19862cc918451f70a6a359dbc66b3599c0af91858ebe13c253a6e9a96758955fdfd1be103777812339e3786484a25b18994ba69b4275f26a64afb9be5219061d94d7c472236f1a20a9217d70abab15182c5f04c6080d535e34045d6497c1c8a2ea53fc022eb159d0d1be59a21f277ce441f3c5cb03ef0e7e1ac63177dfe567e2cb9055228f32c9ca6d38d99093fdc129951380cedafcca40712a2da5cc0af8d872d8f848ea5ff95210a52d2390e236da76fffce86cc8a78a8ea0e1e4464ceac9021556d29d7470ca19849b417aa6aee032f3bd437cb5c839c9f5fb20ec1367449abfb5e19f8365b7947bda60e34136e2eb53e0243766c2718d4bfe6eec77f8ca04d177cc17bad59d651a08349651de6d4dbf5856a6d42cc8cb2441ab7dfa9420d87d4a5aa5914f619b2478a0d68a98280231c8e7558d11eec87e80f2d039b5d6b287d9b3667b020dc45b999b162247bf38f5ac5fc99b5eb6ac5939d35d7d6e71b366f9553ada2784671aecdbdcaf42a2f254dc0289f7be9c6f0c045b30f63ae1a8fac778030f27e04e980bae66e474bc4f9572b8a0d8119ce13ea2ad1285b3397bc929ff26a2ba1ef2760c77e3e114d15742740b27796cb2fc84761db427cdf3c63be71fd6734ed2cb1300a8d5e2b1964f2a0320bfbad8e9bce0cd9329c8c41d79107d77f65c99f3c03813c1f0f5351869434c2ccb685f1863fac38a44ecf354ffde4926ae3cee90833db386633e6dba3585ec36f1aca6701d4d1fc13ac1c5d4cf2ae8c8c418da372bce96451dc2add28828e45ce3f6e35da3d49dcdb8ceb084a581b68fc5fcd4c45246e6b215ca98ae7239c317fe45404984292a83ac7e62614665bec4a5e80b055a0635003e93172e2045ec88144d9d7a2b50c45333720e2273b165147a0b1af77fe87089fe8c0fd32c4e950aedf6798c9007575dc86c02089414089527baf9bbbe5eaf4d58289de0987f8f310d7900ef2350daa438ac83ff255344a2bc814a3e7055269544310b0fe78b07eb0ee5f16899fc8bdf8e3cc47d27a44c93528885452195706091eaf15930f9df5874c19d0a1deedde0cbe9cda7f0618c378bc4ba6fbe911d546c7bc76954fcc6b5ef56c77d306421f9d24e0770cf8b578aaa6276bff4b98e9968e9a1f8c78c6d647d8c52a42d27ee8359840747913e0983e049ad77d87e35800eeeb19cd786a5edf6886e610f51b4d2290d959c7fe906dad2d3e2a5648c5ec0d48becaf209fbb6599d1b0d6299cb2b2fad3b3efac6ba0911a63ae399fa3f19adecc9b10533c99bba28bf9e37600db41c2b463c25b0602fb86ef043ee72aa26e7f102c3afe4073d1318671a514f8320dcbc699514792d5c90c34fe6809102cb6537a4e76530256cd997a1dba4a75b1578c7f12b409af040afa35c54001a4abf1c402f91413995ced6b64256684c34283e644246d235af905fa2edf8f802a65c1c1e0ba24ea656cb3b1f876b6f335aed27c3a6e8da53b1b9c283d299390310df6dc84e5569ad3ac1744824b329fc24cb8612c061b09440464c1168012dc40e8df788f9c708bde6bd4eb3f6111729b08796d0243b07a21ac542ae418f19ec3d7171197c8ca216b20f786784400f2834d98819a5fbbd909677f7d7309dca5c0e2cf74a8a53c1791c78488fec0520d3c71a9698e5040920acc5eb7764f4c295cb2f00b5a62d5fc1e1d0040c639886712ad4fece171739fbc0519b93c8bccac49f871a0e2f5ba97331be916aaae29b8cd646028629cc227b916d1d8b4729da3baffb0e39b533e039eb9f10073c156485902745ec60b8d281b2f84a8651fe4c533119bab8424bcecb28c067ffb1e03e05bcf9d6d44dfe0782e072934fc36e70b1acbf30387495618ac2729811aa6c2901b109b33a0010cfbe666fe9fcac86cc81023dda253863714e89c78265e219d00ba20b3c846368dd21816f699a6af20a290f075f4346b98ad40d69caaf2614856c0bdaa661907975679f5cb5afd3738ba811db58123922647476de50ccf17360393433b547bf0377b2115a7cd357699d043bd80981a2a28c638f7c2e725d85f9edd2fdcfea1f7e2bf02f9f0d4236c9d14c6d382dad99192125b219eea6a13b5685efcf34454d2a12537c5354dc5e34ecda968422cc472f0fec174b95cd298e89e7efbc164465dae45059a40e104b1a980ebc781848b0109ce9cec600b190a34dcf741dd6145d56c4ec27c983a7d6328130c122217bbbb33e2cffba1a352b6805dbd715772153b53051db7215f475ba8673b0dd59e2db414a658d3d262c5304d300b930921c7c0a9910eed96a705eea2c8657be193836a20f23fcbc8ef105ca25551626caf63c511d3c9dcffd9d485f27a63b6992e4b6fa26b02903a4da52fd7fa06397fe2883f9b6a4cac2ffb8ce1f476ec72bccaf0ec7b16e6f601e72f46e835d9bc2a82dccaa449728d22a7ff17772276f54073c66b184de0fa7f681823dcb7603a20aa94b76a9b7adb9f11f447b8764b2d719bea91ea32edbb4d340d18f18b3f53d1d07d0405facb202c30ac1ec145516e071cc71c59cc6205db061a8c19bb2d3ab463f6fea1c6d3b5a69d96e5b67ed569e1c04cff6c9f69ab9343e9a71bf6776d3b84b47de2ecf9a0d45515ef5a3b5c6d55f2c6543ef2bf0eb795219da3026ab06c9ba9bbdc30d5dc7c3782a9f58141a63f8d4683ad5c1d156c92c508cefd9702e9267263e34ff96800c425f768bd204466f4f9badabdfaf35e1a8096150e8afeea3a30586b89d1002f041612f8e81de4dcd268bf538307c4d28d1d2ae1af979f3b02017ebe942cdc8fa7964fe978254eb15fed7478e4200e381409486d37e0205c597b5ec19243ab547da051dee03f18e079af60dcb2095fe86f292a4b4bba8682ed8b220c0b48958882aaa7e93448bfecebfba6ca3ef28e0752080cbc9f752d6da814a9dc5bc552d9fe73b8a1df8eb0158df58810fce8719f11b04c4e157ac8ae3692f825a4569ff859273775c45eb999fff7a47ca461b2fda6edfe8ed8371ed29c4f7499448cfff0bc47ca1d8fc9eb35f79db389781c36e89541b686edc21f088463b2d26fd9b650eaf5ed1cda0f00040000000000009b0c527ba655252f77b77c2f4cc0f7741c52a57629fe511c5f9c17ee44fec35da363f5356343037b2705a393115062719e6bd87bbff2472a7833be6d2270fe5ff4cc9f0439a53adb91fe1520ff4841c120e80c99fcc2d0ee794fa8c91dc9c4227ef9f9ac784ce41abefa69b84acb285e385b74501ea137be765172d90738f201497cb7c992dcc2f17341c9b6a0ef3dcb14350669802e3295b5a133142df7bc5645bbf222d2da033ee4cc4f225f248ad88782945869c29943eb6498c87c2b125fb2d4067118c2b417308a1703fd9f48c48ee2a9c5af44df473e3b99b8a941fc4967060b4960864bc97e4f2bf53e7a5c2ec3d47e7bf8345b56a4df5f84d0523c1b6cf9399110e393474b3ece22c4923f531ff12242d5e2b293846a7ed06e3e7f062cb173431a2b680188fb46d2cb74d4a0d9dae59e2be485aabbb54c26406e6e77de3031e049bd8a49139fa62151716a665fb9f1966cf6c57f4185f7cffbbc43341f3b69a3ae0a4dcfd9b37f0035a69ac552830f0ca56069c8f69162280bced2ec30c6789f32cd38d7f97953f0989b65cf90f01206b20b0111a3d22f3d2f85104b03283f4fd7b80e53f20f1c91d5bf3b67aac25c4300b3191c1f5d7bb0fe112deac0f6acbea3b57c20c5d8f0bad48873a7e7347ead5a4d0b73041c86bdcd3b91d6cbe0ebb5824fb90cb4e74f439505074f236679c4ea4015fbdf0c44b4063b62cdced485cbca0eae2404da7158a974b7dc14c5207107d5424de14a35739f68f3f151c6de20d0ad19d06521baf26ab2cb7ff7e8f83d60a9f554367f99fa5c44910b886e1c9c2418a7a4b33f19fff9af4724c7c8251ffc24cc4464b8804b6704bc0572b23498ec92263d37bdb54490f3316087c5b192a20027ad6cf1a2c3fef8043e2847b8734fa8dc91ce992474796e3f71580841379279f8b10ab8e6766196fb5a9b2ff44cabece6930fb9f32e867047313410c13b11a8a788a29ad93a5b9ae1b960a46fd48fe5cdd7168815c67b267065453547cb60db74f37238b2f7f3c78abc249ffe118a1d3e7eb5cdd326ad0a07a50bd24a6be4b5e56fade7fb7c3b515b4d0b16884c9eee7ef9c82f2ea4d89113e950622cee8e63519a899da3ee83bcd369b01b373934bbed73d8f94e3312e72d82d3fb8b8e65b0f5580cffda633467fc3285023159c3ac7273a46275d874b87254df07ea15d0806f4b8312c4e95235cab31e015a3603906c188233db45dea658dcf694f5097a9e26aba8b58e248210fa5e12fa08cbbe0a01afa9b2c36d38d298dd180ee6e358d45397471bc064e2e8e51da189e98bf41cc30b50b0d937e8cbfc5b138dc66143716b27190689efebcaa5676c9eb370465f77803b219b0ee1f65f343d70b01435f9adc46979b121944e13a02cbdd47a9898b26d6cc5294a9358971bad37a6b01d8b2ee251e50b02acbd560bcd4a212124f308d87eca79d13c77b90510675989ffb70a9d5643df2db6067bd4e0fd21d0a40b84177279587777f763bb9e2fc99186402ff1905eb61b6ea3bef862beb10ede1fbca93f5b426f683bb72099ffc61c99d8a7527fe9167b13d786402864d2b4237fa47426f46b6d5e0911de793f73610b46de4e62b8a67aaed298a9a2d5b5c5b7936f8bcc62a8f9d64d8ff1470a386974b35f382f42ad1fb2c9de214b35aa0afcff7806d7601ab9142a0dade5c7a9e6b0c16027c4d0fc413ba5d16f0d4826b3f469afa6e5ce4a19e21d2a2c2c1e3055706d0ce371dee59a06e534887cf5e300bd118b7c5e8eee2a8fd4bf6ca96df566f49049bd25533c8ae08eb2334ba183529c041f3d9b45139173f3ee8b1b8f8633c9cb7caa735805d56b1e3119a97f3ce86ecd8f21256c0a5a54266cc00927c881ac18fef64f25704b3f01b4885a9c4053aec5bfe5be638563267548cacbad2a95c3c48e6a913bd87ec0c489c236214b650a17d27081ae8def0d27c0d6a25553601875192d11c9e3ef2a3273c1f9b079"}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000024c0)={{0x3, 0x0, 0xffffffffffffff6b, {0xdddd1000, 0x1000, 0x2}}, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001700", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"}) 9m8.109487355s ago: executing program 35 (id=2867): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0xfffffffffffffe6d, {0xdddd0000, 0x100000}}, "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", "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"}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000024c0)={{0x3, 0x0, 0xffffffffffffff6b, {0xdddd1000, 0x1000, 0x2}}, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001700", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"}) 8m16.338313927s ago: executing program 5 (id=3922): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket(0x15, 0x5, 0x100) syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef", @ANYRESDEC=0x0], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x45040) 8m14.876203523s ago: executing program 5 (id=3939): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @broadcast}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 8m14.68863753s ago: executing program 5 (id=3943): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) 8m14.688399111s ago: executing program 5 (id=3944): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ca) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2035099, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001080, 0x0) 8m14.647091069s ago: executing program 5 (id=3946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m13.99360463s ago: executing program 5 (id=3957): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 8m13.828821062s ago: executing program 36 (id=3957): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 7m56.366963532s ago: executing program 8 (id=4265): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x2, 0x7, 0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) 7m56.298083902s ago: executing program 8 (id=4266): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}}, 0x24008844) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x2400c000) 7m56.26524691s ago: executing program 8 (id=4267): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 7m56.216775623s ago: executing program 8 (id=4269): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 7m56.137812883s ago: executing program 8 (id=4273): openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r0 = socket(0x2, 0x2, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 7m55.764516725s ago: executing program 8 (id=4282): r0 = io_uring_setup(0x194e, &(0x7f00000000c0)={0x0, 0xd3d5, 0x80, 0x5, 0x2c2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x7bd4, 0x0, 0x5, 0xbffffffc, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, 0x0}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m55.634626546s ago: executing program 37 (id=4282): r0 = io_uring_setup(0x194e, &(0x7f00000000c0)={0x0, 0xd3d5, 0x80, 0x5, 0x2c2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x7bd4, 0x0, 0x5, 0xbffffffc, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, 0x0}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m15.415088447s ago: executing program 6 (id=5858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0x1, 0x7f, 0x1, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 5m15.25179147s ago: executing program 6 (id=5861): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r1, @ANYRES32=r3], 0x44}}, 0x0) 5m15.168696637s ago: executing program 6 (id=5863): ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000100)={{}, "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"}) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 5m14.918363204s ago: executing program 6 (id=5864): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="f30f09b800228ed00f20e06635080000000f22e00f21a1f30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95de8ec0", 0x45}], 0x1, 0x3, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x5, 0x10, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6f, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m14.465113736s ago: executing program 6 (id=5871): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) 5m13.576132798s ago: executing program 6 (id=5877): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x10, 0x2}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004440)=""/5) 4m58.405703815s ago: executing program 38 (id=5877): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x10, 0x2}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004440)=""/5) 4m35.161427936s ago: executing program 9 (id=6155): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000640)='./file0\x00') 4m35.064612366s ago: executing program 9 (id=6159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001940)=@newtfilter={0x7c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0x6, 0x2, 0x2, {0xa, 0x0, 0x7fff, 0x100, 0x4, 0x1ff}, {0x4, 0x1, 0xa, 0x6, 0x7, 0x7d}, 0xb, 0xfffffffc, 0x68c}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xde80}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m34.841207617s ago: executing program 9 (id=6165): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1400}], 0x0, 0x0, 0x0}) 4m34.769728328s ago: executing program 9 (id=6167): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x6}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 4m34.719625253s ago: executing program 9 (id=6169): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10000, 0x0) 4m34.526533336s ago: executing program 9 (id=6171): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(0x0, 0x400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) 4m19.44666419s ago: executing program 39 (id=6171): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(0x0, 0x400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) 6.919948972s ago: executing program 3 (id=7962): socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x2, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r4 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x8444, 0x13580}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r4, 0xe85, 0x0, 0x0, 0x0, 0x0) 5.734953883s ago: executing program 3 (id=7966): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = inotify_init() ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000140)) io_setup(0x7, 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) r3 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r4 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r4, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r3, 0x0) 5.477485491s ago: executing program 7 (id=7967): r0 = syz_io_uring_setup(0x31c7, &(0x7f0000000600)={0x0, 0x0, 0x1, 0x2}, &(0x7f00000003c0), &(0x7f00000005c0)) syz_io_uring_setup(0x3c66, &(0x7f0000000240)={0x0, 0x7b46, 0x27, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000900)) read(r4, &(0x7f00000002c0)=""/237, 0xed) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) preadv2(r4, &(0x7f0000000f80)=[{&(0x7f0000000dc0)=""/147, 0x93}], 0x1, 0x2, 0x4, 0x14) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="080003"], 0x44}}, 0x0) 5.376963723s ago: executing program 7 (id=7968): io_setup(0x10000, &(0x7f0000000040)) io_setup(0x7fff, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000300)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000600)=0x1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xd0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0xe, 0xb, 0x8, @loopback, @loopback, 0x7, 0x10, 0xffff, 0x1}}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$TCXONC(r5, 0x540a, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xa, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0xe1, &(0x7f00000002c0)=""/225, 0x41000, 0x2, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000004c0)=[{0x4, 0x1, 0xa, 0xc}, {0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x6, 0x6}, {0x3, 0x1, 0x3}, {0x4, 0x4, 0x5, 0xa}, {0x5, 0x3, 0x3}, {0x7d, 0x1, 0x10, 0x9}], 0x10, 0xa}, 0x94) 5.008053427s ago: executing program 7 (id=7970): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) unshare(0x0) socket(0x1e, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r2, 0x0, 0x0, 0x0, 0x80800}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) io_uring_enter(r3, 0x3516, 0x3e44, 0x8, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.752728232s ago: executing program 1 (id=7972): r0 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}, 0x24) r4 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.56557359s ago: executing program 7 (id=7974): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r2 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@xdp={0x2c, 0x2, 0x0, 0x3f}, 0x80, 0x0}, 0x0, 0x80}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.482492282s ago: executing program 1 (id=7975): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f00000034c0)={{0x6, 0x0, 0x80, {0xffffffffffffffff, 0xeeee0000, 0x1}}, "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", "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"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "f11b72e091d8efb64f288b2fdfa88ae36a"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x20040040}, 0x4004050) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x30) 3.360182192s ago: executing program 0 (id=7977): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r3, 0x1) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3.341403552s ago: executing program 1 (id=7978): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x90}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_adjtime(0x0, 0x0) r1 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x11, 0x0) r3 = syz_io_uring_setup(0xce, &(0x7f0000000200)={0x0, 0x1b69, 0x800, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x3, 0x0}) io_uring_enter(r3, 0x47ba, 0x98f1, 0x20, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) 2.913110049s ago: executing program 1 (id=7979): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x84) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x22008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x6}}]}]}]}, 0x48}}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_DELTABLE={0x160, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x5b, 0x6, "e45210619979608d2bcebfefe998015e6811f74afb243a5c139705071b27c0a91ae12f3d7fdd9e355ef1b564a01575f30b05f7dcbb23a374aad0bf20ce85c84fa23b16788c8d0a968985c5b76004593b6bef62484b74c1"}, @NFTA_TABLE_USERDATA={0x18, 0x6, "47549738d9768a7b37fe4945686cd38f9c9ef0b0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xb6, 0x6, "47447792f75f6a79819376b3fbabbdf8cc674502bbe138974c00a0a6223fef0e50ac8c5e26e10c2b9bd7bba3ec5f8d31d3faf4540dd91e0cc70d309fedabdcecaa33f43bffaea70d4b6cc6147c473a5266049c794675365f4a3663aefab9e0102b5d81bed0cbf08d7f26cbe54616287fe9e16c1161e6c538baf0073d34b7fc64b08c02c7477909bc8be03fdc5b330fc0a286eda6e3091f96484820b7310ef473e0cf8faf80f5ed9f43235bac84f996d4b4f9"}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x180, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xbc}, @NFTA_SET_DESC={0x138, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa7dc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x59}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4e7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbaa3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc57}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x278, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0xab, 0x7, 0x1, 0x0, "39f5b2d8feba0ee4f8278d6f0bfcbfb074a4cfe1b3b461f0cfdab58f00b3e43d20ed75d787e4ded3e9382d1f7981f4d277f1a437a47c0287b86fe0c2c438a499a2ad0fdef560354ea615f4d3c1ded6442b7906026b6c2a8bf0a917d979c081a68bb98c18509f7eaaa03310c8f9e94584d42a6b207d4c0912e246f92e7da4dd36ff499f3db9d59fb0ea5c69c67ca93fdc76200d3fd245dc0d73e67e33f9c68ccb4339e1e2c568dc"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x8d, 0x7, 0x1, 0x0, "01721d2d4ca9da4dbb922cdbaffa33ac385e11976c32ec06a0e4e111c44bcf06e204fb982fd3454b9223f41d285fbed0998d20c8d9eb2a8f80c2f790828d774320f1efccc2f25fa3cffb424992bf24212dc3cd098d22f8487427fde9126bec97fda8bc1173a45cd560305d2cf379a03abd1d54844751eae97205a75d96b176f59dad4d4da1b0c74a4c"}, @NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x81}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_NG_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x154, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0xd3, 0xc, "8796fa4cada158bf97b7176b4c3e4171d3e7e203fc7ddef312218aecd73f2a5023a239714fff92bece7931595f75018b5e5dc3962fbfbcc06415d6e3207419c9fdd5bb99f1a298054d3f79d7b0159f62bb91677a7780c10a257dbe667814e23ab70f3835b967aea08296e23e741e38601188575c1f1be550f10c4b2f83b36cb7e04cb7efe055ed18a72b7d075ed937c683ebe42ca7e9437b6915a7c0ef8989d85e8a18d966e4086c6e24cf99f284628fa92f24e6d003a7113bf8c57c9bfca934dd9d62a6e4ca4c3f1f141622efbfd6"}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x245ce3b7}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x50a38782}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x31d6d180}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_USERDATA={0x1e, 0x7, 0x1, 0x0, "eb6cb6518086beaa0dc9e380a27ea71c60541e78c8b2801cce2f"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x784}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 2.640399014s ago: executing program 7 (id=7980): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000380)=@newsa={0x180, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x0, 0x4e20, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x120, 0x6c}, @in=@empty, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000000002c8, 0x8, 0x4000000000000}, {0x1fffffffffff, 0x8000000000000008, 0x0, 0x1}, {0xfffffffd, 0xe7}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'ccm-aes-ce\x00'}, 0x0, 0x40}}]}, 0x180}, 0x1, 0x0, 0x0, 0x4075}, 0x4880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x10000, &(0x7f0000000040)) io_setup(0x7fff, &(0x7f00000000c0)) 2.554555685s ago: executing program 3 (id=7981): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x460, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x414, 0x8, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x34c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x304, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x460}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2.185908746s ago: executing program 0 (id=7982): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x80044704, &(0x7f0000000040)={0x0, 0x6, 0x9, 0x3f, 0x1a, "3eccef5569e209000000000000000e4100"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) mount$nfs(&(0x7f0000000080)='\x90@\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x8000, &(0x7f00000001c0)={[{'netdevsim0\x00'}], [{@fsname={'fsname', 0x3d, ',:'}}]}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x30, r4, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x40804) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xb0}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32314147}}) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x38}}, 0x480c0) 2.109956962s ago: executing program 0 (id=7983): socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mbind(&(0x7f0000d35000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) io_setup(0xb0, 0x0) syz_open_dev$video4linux(0x0, 0x2, 0x101000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) 2.102658501s ago: executing program 0 (id=7984): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0xfffffffffffffdca, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, r3}, 0x38) 1.521570162s ago: executing program 1 (id=7985): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) unshare(0x0) socket(0x1e, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r2, 0x0, 0x0, 0x0, 0x80800}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) io_uring_enter(r3, 0x3516, 0x3e44, 0x8, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.133558499s ago: executing program 0 (id=7986): socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x2, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r4 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x8444, 0x13580}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r4, 0xe85, 0x0, 0x0, 0x0, 0x0) 1.131223009s ago: executing program 3 (id=7987): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x24044884) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.053906071s ago: executing program 3 (id=7988): socket$inet_udp(0x2, 0x2, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe11) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x0) vmsplice(r4, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @private, @remote}, &(0x7f00000000c0)=0xc) 940.915689ms ago: executing program 7 (id=7989): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161102, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x52) getpriority(0x2, 0x0) 193.411091ms ago: executing program 3 (id=7990): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0xffffffffffffff7f, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x8, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0x1, 0xc]}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x2910a000, 0x0, 0x37, 0x0, 0x0, 0x0) 124.607363ms ago: executing program 0 (id=7991): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mlockall(0x2) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', &(0x7f0000000380)={0x40440, 0x15c, 0x12}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=7992): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc0041, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x400000}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) kernel console output (not intermixed with test programs): ] macvlan0: entered allmulticast mode [ 444.845258][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.849502][T20080] bond12: entered promiscuous mode [ 444.852389][T20080] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 444.915466][T20080] bond12: left promiscuous mode [ 445.157113][T20090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5740'. [ 445.562473][ T91] bridge_slave_1: left allmulticast mode [ 445.566127][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.596699][ T91] bridge_slave_0: left allmulticast mode [ 445.599697][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.608331][ T91] bond1 (unregistering): Released all slaves [ 446.749526][ T91] tipc: Left network mode [ 447.171715][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.176413][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.938118][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 447.938138][ T40] audit: type=1326 audit(1760316056.332:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20162 comm="syz.7.5764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7fc00000 [ 448.188758][T10364] usb 11-1: new full-speed USB device number 9 using dummy_hcd [ 448.341431][T10364] usb 11-1: config 0 has no interfaces? [ 448.344245][T10364] usb 11-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 448.349218][T10364] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.354260][T10364] usb 11-1: config 0 descriptor?? [ 448.584284][ T40] audit: type=1326 audit(1760316056.972:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20162 comm="syz.7.5764" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f44579 code=0x7fc00000 [ 448.715504][T20176] binder: 20175:20176 ioctl c0306201 0 returned -14 [ 448.783441][T20177] binder: 20175:20177 ioctl c0306201 0 returned -14 [ 449.261371][ T91] team0 (unregistering): Port device team_slave_1 removed [ 449.423631][ T40] audit: type=1326 audit(1760316057.802:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.7.5771" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 449.439879][ T40] audit: type=1326 audit(1760316057.802:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.7.5771" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 449.450596][ T40] audit: type=1326 audit(1760316057.822:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.7.5771" exe="/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 449.460971][ T40] audit: type=1326 audit(1760316057.822:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.7.5771" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 449.473883][ T40] audit: type=1326 audit(1760316057.822:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.7.5771" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 449.487822][ T40] audit: type=1326 audit(1760316057.822:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.7.5771" exe="/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 449.505902][ T40] audit: type=1326 audit(1760316057.832:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.7.5771" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 449.516205][ T40] audit: type=1326 audit(1760316057.832:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.7.5771" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 449.540629][ T91] team0 (unregistering): Port device team_slave_0 removed [ 450.281408][T20195] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5775'. [ 450.291163][T20195] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5775'. [ 450.520212][ T6034] kernel read not supported for file inotify (pid: 6034 comm: kworker/3:3) [ 451.156432][T20214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5783'. [ 451.198684][T20215] Invalid ELF header magic: != ELF [ 451.708631][ T5812] usb 11-1: USB disconnect, device number 9 [ 451.824031][T20237] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5792'. [ 451.905960][T20239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5794'. [ 452.471364][T20258] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 452.551253][T20268] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5806'. [ 453.736190][T20306] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 455.290477][ T6034] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 455.499425][ T6034] usb 14-1: Using ep0 maxpacket: 8 [ 455.514288][ T6034] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 455.522136][ T6034] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 455.529158][ T6034] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 455.538529][ T6034] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.548062][ T6034] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 455.554247][ T6034] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.804724][ T6034] usb 14-1: GET_CAPABILITIES returned 0 [ 455.807550][ T6034] usbtmc 14-1:16.0: can't read capabilities [ 456.090484][ T5956] Bluetooth: hci2: command 0x1003 tx timeout [ 456.091005][ T5953] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 456.110399][ T5812] usb 14-1: USB disconnect, device number 10 [ 456.992311][ T5953] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 457.495350][T20383] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5851'. [ 457.884995][T20398] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 458.113135][T20411] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5863'. [ 458.938398][T20438] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5873'. [ 459.937821][T20452] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5878'. [ 460.087479][ C3] hrtimer: interrupt took 8281649 ns [ 460.285638][T20461] bridge0: port 1(veth1_to_bridge) entered blocking state [ 460.289395][T20461] bridge0: port 1(veth1_to_bridge) entered disabled state [ 460.293552][T20461] veth1_to_bridge: entered allmulticast mode [ 460.313043][T20461] veth1_to_bridge: entered promiscuous mode [ 461.532297][ T5989] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 461.711471][ T5989] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.717404][ T5989] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.740565][ T5989] usb 12-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 461.747192][ T5989] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.754280][ T5989] usb 12-1: config 0 descriptor?? [ 462.075658][ T5989] usbhid 12-1:0.0: can't add hid device: -71 [ 462.077966][ T5989] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 462.082141][ T5989] usb 12-1: USB disconnect, device number 10 [ 462.360878][T20510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5901'. [ 463.800364][T20542] overlayfs: failed to clone upperpath [ 463.944935][T20544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5913'. [ 464.232144][T20550] overlayfs: failed to clone upperpath [ 464.364710][T20556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5919'. [ 464.392001][T20556] 8021q: adding VLAN 0 to HW filter on device bond13 [ 464.420428][T20556] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 464.426329][T20556] bond13: (slave wlan1): Opening slave failed [ 465.040541][T20575] overlayfs: failed to clone upperpath [ 465.238064][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 465.238081][ T40] audit: type=1804 audit(1760316073.622:2282): pid=20583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5931" name="file0" dev="tmpfs" ino=9933 res=1 errno=0 [ 465.807067][T20599] syz_tun: entered allmulticast mode [ 465.816350][T20598] syz_tun: left allmulticast mode [ 467.162244][T20637] tipc: Enabled bearer , priority 0 [ 467.192276][T20636] tipc: Resetting bearer [ 467.722864][T20644] overlayfs: failed to clone upperpath [ 467.971104][T20646] overlayfs: failed to clone upperpath [ 470.638426][T20654] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5961'. [ 470.855949][T20636] tipc: Disabling bearer [ 471.366250][ C3] ata1: illegal qc_active transition (00000000->00100000) [ 471.384736][T20672] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5967'. [ 471.462313][T20672] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5967'. [ 471.675919][ T1112] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 471.683690][ T1112] ata1.00: configured for UDMA/100 [ 471.871627][ C0] mroute: pending queue full, dropping entries [ 471.883326][T20677] mroute: pending queue full, dropping entries [ 471.965384][T20681] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5970'. [ 472.564551][T20693] Invalid ELF header magic: != ELF [ 473.000800][ T5812] usb 12-1: new full-speed USB device number 11 using dummy_hcd [ 473.174865][ T5812] usb 12-1: config 1 interface 0 has no altsetting 0 [ 473.206577][ T5812] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 473.212590][ T5812] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.227823][ T5812] usb 12-1: Product: syz [ 473.230062][ T5812] usb 12-1: Manufacturer: syz [ 473.232296][ T5812] usb 12-1: SerialNumber: syz [ 473.615155][T20710] ptrace attach of "/syz-executor exec"[5944] was attempted by ""[20710] [ 473.654532][ T5812] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 474.496809][T20716] overlayfs: failed to clone upperpath [ 474.595279][T20721] netlink: 'syz.3.5984': attribute type 1 has an invalid length. [ 474.625347][T20721] 8021q: adding VLAN 0 to HW filter on device bond14 [ 474.784606][T20721] bond14: (slave veth11): Enslaving as an active interface with a down link [ 474.797402][T20725] bond14: (slave wlan1): Opening slave failed [ 475.153444][ T5956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 475.173238][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 475.179509][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 475.197104][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 475.252218][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 475.624708][T20733] chnl_net:caif_netlink_parms(): no params data found [ 475.720060][ T5989] usb 12-1: USB disconnect, device number 11 [ 475.732498][ T5989] usblp0: removed [ 475.808609][T20756] lo: entered allmulticast mode [ 475.908476][T20766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5997'. [ 475.921830][T20756] pimreg: entered allmulticast mode [ 475.932526][T20733] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.936834][T20733] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.940423][T20733] bridge_slave_0: entered allmulticast mode [ 475.944584][T20733] bridge_slave_0: entered promiscuous mode [ 475.953626][T20733] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.956626][T20733] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.960721][T20733] bridge_slave_1: entered allmulticast mode [ 475.964895][T20733] bridge_slave_1: entered promiscuous mode [ 476.078332][T20752] lo: left allmulticast mode [ 476.141588][T20770] overlayfs: failed to resolve './file1': -2 [ 476.156283][T20733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.180421][T20733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.284529][T20733] team0: Port device team_slave_0 added [ 476.300470][T20733] team0: Port device team_slave_1 added [ 476.439873][T20733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.443074][T20733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.472268][T20733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.478499][T20733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.482321][T20733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.518579][T20733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.624464][T20733] hsr_slave_0: entered promiscuous mode [ 476.628096][T20733] hsr_slave_1: entered promiscuous mode [ 476.657723][T20733] debugfs: 'hsr0' already exists in 'hsr' [ 476.668950][T20733] Cannot create hsr debugfs directory [ 477.289751][ T5953] Bluetooth: hci2: command tx timeout [ 477.901081][T20733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 477.918018][T20733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 477.928786][T20733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 477.945334][T20733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 478.074538][T20733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.093403][T20733] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.105007][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.110995][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.124199][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.127628][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.379968][T20733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.454583][T20733] veth0_vlan: entered promiscuous mode [ 478.465779][T20733] veth1_vlan: entered promiscuous mode [ 478.494822][T20733] veth0_macvtap: entered promiscuous mode [ 478.507593][T20733] veth1_macvtap: entered promiscuous mode [ 478.538803][T20733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.578690][T20733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.600394][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.604613][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.612398][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.615755][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.901517][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.912768][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.960105][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.994718][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.134597][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 479.151897][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 479.167111][T20844] ceph: No mds server is up or the cluster is laggy [ 479.191371][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 479.200451][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 479.372017][ T5953] Bluetooth: hci2: command tx timeout [ 479.427144][T20853] netlink: 'syz.0.6020': attribute type 1 has an invalid length. [ 479.647662][T20856] batadv_slave_1: entered promiscuous mode [ 479.927434][T20854] batadv_slave_1: left promiscuous mode [ 480.586164][T20873] netlink: 'syz.3.6028': attribute type 1 has an invalid length. [ 480.655859][T20873] 8021q: adding VLAN 0 to HW filter on device bond16 [ 480.665036][T20873] bond15: (slave bond16): making interface the new active one [ 480.669665][T20873] bond15: (slave bond16): Enslaving as an active interface with an up link [ 480.709104][T20873] bond15: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 480.715933][T20873] bond15: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 481.454019][ T5956] Bluetooth: hci2: command tx timeout [ 481.693266][ T5956] Bluetooth: hci3: command 0x1003 tx timeout [ 481.706380][ T5953] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 482.445297][T20905] netlink: 'syz.7.6038': attribute type 4 has an invalid length. [ 482.475930][T20905] netlink: 'syz.7.6038': attribute type 4 has an invalid length. [ 482.532199][T20910] bridge0: port 1(syz_tun) entered blocking state [ 482.537545][T20910] bridge0: port 1(syz_tun) entered disabled state [ 482.541914][T20910] syz_tun: entered allmulticast mode [ 482.546913][T20910] syz_tun: entered promiscuous mode [ 482.997110][T20928] netlink: 129704 bytes leftover after parsing attributes in process `syz.0.6046'. [ 483.010423][T20932] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6048'. [ 483.063165][T20932] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 483.068800][T20932] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 483.145529][T20938] bond2: (slave bridge8): Enslaving as an active interface with an up link [ 483.181922][T20936] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1 [ 483.188633][ T40] audit: type=1804 audit(1760316091.572:2283): pid=20936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6049" name="/newroot/7/file0" dev="tmpfs" ino=55 res=1 errno=0 [ 483.189490][T20936] ref_ctr increment failed for inode: 0x37 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802005cb40 [ 483.530087][ T5953] Bluetooth: hci2: command tx timeout [ 483.738625][T20951] kvm: emulating exchange as write [ 484.718889][T20975] input: syz0 as /devices/virtual/input/input52 [ 484.805700][T20977] syz_tun: entered allmulticast mode [ 486.247978][T21018] lo: entered allmulticast mode [ 486.382630][T21017] lo: left allmulticast mode [ 486.523386][T21022] netlink: 'syz.9.6075': attribute type 1 has an invalid length. [ 486.660969][T21025] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6076'. [ 487.862113][T21054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6087'. [ 488.060338][ T40] audit: type=1804 audit(1760316096.442:2284): pid=21058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.6088" name="/newroot/403/file0/file0" dev="9p" ino=71827779 res=1 errno=0 [ 490.200845][T21095] netlink: 'syz.9.6100': attribute type 1 has an invalid length. [ 490.204155][T21095] netlink: 16150 bytes leftover after parsing attributes in process `syz.9.6100'. [ 491.375368][T21116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6107'. [ 491.693407][T21125] netem: change failed [ 491.844114][T21129] [ 492.129611][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.156232][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.418083][T21143] kvm: pic: level sensitive irq not supported [ 493.942571][T21185] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 493.961476][T21185] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6130'. [ 494.408160][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.563338][T21204] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6139'. [ 494.982395][T21208] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6141'. [ 494.988740][T21208] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6141'. [ 495.429441][ T53] usb 12-1: new full-speed USB device number 12 using dummy_hcd [ 495.586651][ T53] usb 12-1: config 0 has no interfaces? [ 495.597698][ T53] usb 12-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 495.603789][ T53] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.610988][ T53] usb 12-1: config 0 descriptor?? [ 495.895690][ T10] usb 12-1: USB disconnect, device number 12 [ 497.591657][ T5989] page_pool_release_retry() stalled pool shutdown: id 95, 1 inflight 60 sec [ 497.909541][T21249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6154'. [ 497.951721][T21249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6154'. [ 497.957231][T21249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6154'. [ 497.963400][T21249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6154'. [ 497.969550][T21249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6154'. [ 497.973714][T21249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6154'. [ 498.097827][T21255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6157'. [ 498.119587][T21255] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.124786][T21255] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.155055][T21341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6190'. [ 505.983569][T21393] netlink: 'syz.3.6205': attribute type 1 has an invalid length. [ 506.263946][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.266666][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.474262][T21398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6207'. [ 509.088739][T21455] overlayfs: failed to clone upperpath [ 509.366068][T21464] Set syz1 is full, maxelem 65536 reached [ 509.927982][T21484] ref_ctr increment failed for inode: 0x2928 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888012d4ab00 [ 509.933843][ T40] audit: type=1804 audit(1760316118.312:2285): pid=21484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6235" name="file0" dev="tmpfs" ino=10536 res=1 errno=0 [ 509.940878][T21483] uprobe: syz.3.6235:21483 failed to unregister, leaking uprobe [ 510.495451][T21498] overlayfs: failed to clone upperpath [ 511.481692][T21503] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6243'. [ 512.148193][T21513] bridge: RTM_NEWNEIGH with invalid ether address [ 513.710605][T21550] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 513.821678][T21521] kexec: Could not allocate control_code_buffer [ 513.943751][T21557] netlink: 'syz.3.6265': attribute type 10 has an invalid length. [ 513.948588][T21557] syz_tun: entered promiscuous mode [ 514.162057][T16270] syz_tun (unregistering): left allmulticast mode [ 514.164953][T16270] syz_tun (unregistering): left promiscuous mode [ 514.205926][T16270] bridge0: port 1(syz_tun) entered disabled state [ 514.249081][ T5956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 514.256142][ T5956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 514.260365][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 514.265388][T21568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6268'. [ 514.266076][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 514.276841][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 514.389834][T21563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6267'. [ 514.446416][T21576] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 514.470159][T21576] kvm: pic: non byte read [ 514.475303][T21576] kvm: pic: non byte read [ 514.478387][T21576] kvm: pic: level sensitive irq not supported [ 514.484276][T21576] kvm: pic: non byte read [ 514.492893][T21576] kvm: pic: non byte read [ 514.497581][T21576] kvm: pic: non byte read [ 514.503108][T21576] kvm: pic: non byte read [ 514.509560][T21576] kvm: pic: non byte read [ 514.514384][T21576] kvm: pic: non byte read [ 514.520306][T21576] kvm: pic: non byte read [ 514.525670][T21576] kvm: pic: non byte read [ 514.687144][T21564] chnl_net:caif_netlink_parms(): no params data found [ 514.892508][T21564] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.896168][T21564] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.900401][T21564] bridge_slave_0: entered allmulticast mode [ 514.905436][T21564] bridge_slave_0: entered promiscuous mode [ 514.910812][T21564] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.914211][T21564] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.917940][T21564] bridge_slave_1: entered allmulticast mode [ 514.924056][T21564] bridge_slave_1: entered promiscuous mode [ 515.012144][T21564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.020132][T21564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.195853][T21564] team0: Port device team_slave_0 added [ 515.207664][T21564] team0: Port device team_slave_1 added [ 515.291565][T21564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.295156][T21564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.307383][T21564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.327963][T21564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.331263][T21564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.346826][T21564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.471979][T21564] hsr_slave_0: entered promiscuous mode [ 515.475309][T21564] hsr_slave_1: entered promiscuous mode [ 515.478299][T21564] debugfs: 'hsr0' already exists in 'hsr' [ 515.482025][T21564] Cannot create hsr debugfs directory [ 515.773525][T21616] loop5: detected capacity change from 0 to 16384 [ 515.831350][T21616] loop5: detected capacity change from 16384 to 16383 [ 516.186301][T21564] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 516.194435][T21564] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 516.208370][T21564] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 516.224383][T21564] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 516.310228][T21564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.332868][T21564] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.339620][ T5953] Bluetooth: hci0: command tx timeout [ 516.343070][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.345546][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.364770][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.368542][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.575957][T21564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.660615][T21564] veth0_vlan: entered promiscuous mode [ 516.672144][T21564] veth1_vlan: entered promiscuous mode [ 516.701007][T21564] veth0_macvtap: entered promiscuous mode [ 516.710976][T21564] veth1_macvtap: entered promiscuous mode [ 516.728647][T21564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.744203][T21564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.753102][T21663] fuse: Bad value for 'fd' [ 516.774168][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.778035][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.784094][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.788230][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.896662][T21664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.919996][T21664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.930666][T21664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.936105][T21664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.296807][ T40] audit: type=1326 audit(1760316125.682:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21676 comm="syz.7.6302" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f44579 code=0x0 [ 518.211979][T21719] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6317'. [ 518.218460][T21719] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6317'. [ 518.224303][T21719] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6317'. [ 518.409590][ T5953] Bluetooth: hci0: command tx timeout [ 518.462609][T21727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6320'. [ 519.167374][T21745] veth1_to_bond: entered allmulticast mode [ 519.173522][T21745] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6327'. [ 519.434462][T21751] 9pnet_fd: p9_fd_create_tcp (21751): problem connecting socket to 127.0.0.1 [ 519.442931][T21751] 9pnet_fd: p9_fd_create_tcp (21751): problem connecting socket to 127.0.0.1 [ 519.450342][T21751] 9pnet_fd: p9_fd_create_tcp (21751): problem connecting socket to 127.0.0.1 [ 519.456192][T21751] 9pnet_fd: p9_fd_create_tcp (21751): problem connecting socket to 127.0.0.1 [ 519.461439][T21751] 9pnet_fd: p9_fd_create_tcp (21751): problem connecting socket to 127.0.0.1 [ 519.467502][T21751] 9pnet_fd: p9_fd_create_tcp (21751): problem connecting socket to 127.0.0.1 [ 519.472892][T21751] 9pnet_fd: p9_fd_create_tcp (21751): problem connecting socket to 127.0.0.1 [ 519.478018][T21751] 9pnet_fd: p9_fd_create_tcp (21751): problem connecting socket to 127.0.0.1 [ 519.483237][T21751] 9pnet_fd: p9_fd_create_tcp (21751): problem connecting socket to 127.0.0.1 [ 519.488358][T21751] 9pnet_fd: p9_fd_create_tcp (21751): problem connecting socket to 127.0.0.1 [ 520.173786][T21751] 9pnet_fd: p9_fd_create_tcp (21751): problem connecting socket to 127.0.0.1 [ 520.351068][T21778] tipc: Started in network mode [ 520.354392][T21778] tipc: Node identity 02abca7bebcc, cluster identity 4711 [ 520.358376][T21778] tipc: Enabled bearer , priority 0 [ 520.365600][T21775] tipc: Resetting bearer [ 520.493431][T21785] netlink: 'syz.3.6342': attribute type 4 has an invalid length. [ 520.504154][ T5953] Bluetooth: hci0: command tx timeout [ 520.547326][T21786] netlink: 'syz.3.6342': attribute type 4 has an invalid length. [ 521.409117][ T6034] tipc: Node number set to 3915893371 [ 522.569462][ T5953] Bluetooth: hci0: command tx timeout [ 522.748298][T21803] comedi comedi2: board detection failed [ 523.881804][T21775] tipc: Disabling bearer [ 524.168685][ T40] audit: type=1326 audit(1760316132.552:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21817 comm="syz.1.6353" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x0 [ 525.370743][ T40] audit: type=1326 audit(1760316133.762:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21840 comm="syz.0.6363" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x0 [ 525.421704][T21843] tipc: Started in network mode [ 525.424224][T21843] tipc: Node identity ce637c2825a5, cluster identity 4711 [ 525.428061][T21843] tipc: Enabled bearer , priority 0 [ 525.469259][T21842] tipc: Resetting bearer [ 525.736408][T21856] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6367'. [ 526.476403][ T53] tipc: Node number set to 3955653672 [ 529.228579][T21842] tipc: Disabling bearer [ 530.665354][T21922] netlink: 'syz.1.6389': attribute type 1 has an invalid length. [ 531.844562][T21951] input: syz1 as /devices/virtual/input/input53 [ 532.884246][T21976] overlayfs: failed to clone upperpath [ 533.478152][T21992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6412'. [ 533.490480][T21992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6412'. [ 533.504641][T21992] ip6gretap1: entered allmulticast mode [ 533.648072][T21995] wg2: entered promiscuous mode [ 533.652416][T21995] wg2: entered allmulticast mode [ 535.536582][T22034] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 537.389881][ T6034] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 537.493599][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804ee23c00: rx timeout, send abort [ 537.579461][ T6034] usb 6-1: Using ep0 maxpacket: 32 [ 537.585069][ T6034] usb 6-1: config 0 has an invalid interface number: 209 but max is 0 [ 537.589846][ T6034] usb 6-1: config 0 has no interface number 0 [ 537.599667][ T6034] usb 6-1: config 0 interface 209 has no altsetting 0 [ 537.609684][ T6034] usb 6-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 537.615560][ T6034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.620996][ T6034] usb 6-1: Product: syz [ 537.623956][ T6034] usb 6-1: Manufacturer: syz [ 537.628247][ T6034] usb 6-1: SerialNumber: syz [ 537.637500][ T6034] usb 6-1: config 0 descriptor?? [ 537.993678][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804e4f6800: rx timeout, send abort [ 537.995487][ T6034] usb 6-1: USB disconnect, device number 11 [ 538.014070][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804ee23c00: abort rx timeout. Force session deactivation [ 538.121107][T22084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6441'. [ 538.516459][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804e4f6800: abort rx timeout. Force session deactivation [ 538.562931][T22092] netlink: 'syz.1.6445': attribute type 1 has an invalid length. [ 538.614700][T22092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.733946][T22092] bond1: (slave veth3): Enslaving as an active interface with a down link [ 538.778207][T22095] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 538.832283][T22095] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 539.924611][T22123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6452'. [ 540.503264][T22137] binder: 22136:22137 ioctl c0306201 80000680 returned -14 [ 540.533695][ T5989] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 540.754439][ T5989] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 540.775713][ T5989] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 540.781636][ T5989] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 540.787910][ T5989] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 540.804689][ T5989] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 540.817974][ T5989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.823657][ T5989] usb 6-1: config 0 descriptor?? [ 540.838978][T22132] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 540.986261][ T40] audit: type=1326 audit(1760316149.372:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22150 comm="syz.7.6464" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x0 [ 541.293310][ T5989] usbhid 6-1:0.0: can't add hid device: -71 [ 541.293701][T22158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6466'. [ 541.295926][ T5989] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 541.323904][ T5989] usb 6-1: USB disconnect, device number 12 [ 541.514484][T22162] lo speed is unknown, defaulting to 1000 [ 541.518730][T22162] lo speed is unknown, defaulting to 1000 [ 541.526972][T22162] lo speed is unknown, defaulting to 1000 [ 541.585756][T22164] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 541.599150][T22164] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 541.904300][T22162] infiniband sz1: set active [ 541.940145][ T24] lo speed is unknown, defaulting to 1000 [ 541.955121][T22162] infiniband sz1: added lo [ 542.002387][T22162] RDS/IB: sz1: added [ 542.004977][T22162] smc: adding ib device sz1 with port count 1 [ 542.008113][T22162] smc: ib device sz1 port 1 has no pnetid [ 542.015939][ T53] lo speed is unknown, defaulting to 1000 [ 542.020563][T22162] lo speed is unknown, defaulting to 1000 [ 542.227502][T22162] lo speed is unknown, defaulting to 1000 [ 542.447960][T22162] lo speed is unknown, defaulting to 1000 [ 542.637784][T22162] lo speed is unknown, defaulting to 1000 [ 542.820343][T22162] lo speed is unknown, defaulting to 1000 [ 543.067961][T22162] lo speed is unknown, defaulting to 1000 [ 543.188353][T22190] netlink: 'syz.3.6475': attribute type 1 has an invalid length. [ 543.240368][T22190] 8021q: adding VLAN 0 to HW filter on device bond17 [ 543.324518][T22190] veth13: entered promiscuous mode [ 543.333167][T22190] bond17: (slave veth13): Enslaving as an active interface with a down link [ 543.364074][T22192] bond17: entered allmulticast mode [ 543.581833][T22197] binder: BINDER_SET_CONTEXT_MGR already set [ 543.585028][T22197] binder: 22196:22197 ioctl 4018620d 80000100 returned -16 [ 543.608164][T22197] binder: BINDER_SET_CONTEXT_MGR already set [ 543.612733][T22197] binder: 22196:22197 ioctl 4018620d 800002c0 returned -16 [ 543.890942][T22208] netlink: 'syz.3.6483': attribute type 1 has an invalid length. [ 543.952128][ T6340] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 544.116194][ T6340] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.127099][ T6340] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 544.131775][ T6340] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 544.136512][ T6340] usb 5-1: Product: syz [ 544.138675][ T6340] usb 5-1: SerialNumber: syz [ 545.078817][T22220] syzkaller0: entered promiscuous mode [ 545.085999][T22220] syzkaller0: entered allmulticast mode [ 545.234273][ T6340] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 545.237439][ T6340] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 547.996005][ T40] audit: type=1326 audit(1760316156.372:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22239 comm="syz.1.6503" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 548.047201][ T40] audit: type=1326 audit(1760316156.372:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22239 comm="syz.1.6503" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 548.083723][ T40] audit: type=1326 audit(1760316156.382:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22239 comm="syz.1.6503" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 548.095067][ T40] audit: type=1326 audit(1760316156.382:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22239 comm="syz.1.6503" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 548.104824][ T40] audit: type=1326 audit(1760316156.382:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22239 comm="syz.1.6503" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 548.115475][ T40] audit: type=1326 audit(1760316156.392:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22239 comm="syz.1.6503" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 548.125487][ T40] audit: type=1326 audit(1760316156.392:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22239 comm="syz.1.6503" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 548.137325][ T40] audit: type=1326 audit(1760316156.392:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22239 comm="syz.1.6503" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 548.148643][ T40] audit: type=1326 audit(1760316156.392:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22239 comm="syz.1.6503" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 548.158983][ T40] audit: type=1326 audit(1760316156.392:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22239 comm="syz.1.6503" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 550.298151][ T6340] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 550.311460][ T6340] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 550.322100][ T6340] usb 5-1: USB disconnect, device number 13 [ 550.325776][ T6340] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 550.666369][T22258] lo speed is unknown, defaulting to 1000 [ 550.759416][ T10] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 550.921102][ T10] usb 6-1: config 0 has no interfaces? [ 550.923945][ T10] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 550.928888][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.936888][ T10] usb 6-1: config 0 descriptor?? [ 551.257821][ T6034] usb 6-1: USB disconnect, device number 13 [ 552.012643][T22277] lo speed is unknown, defaulting to 1000 [ 552.066268][ T6034] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 552.260666][ T6034] usb 5-1: Using ep0 maxpacket: 32 [ 552.270240][ T6034] usb 5-1: config 0 has an invalid interface number: 209 but max is 0 [ 552.276682][ T6034] usb 5-1: config 0 has no interface number 0 [ 552.280636][ T6034] usb 5-1: config 0 interface 209 has no altsetting 0 [ 552.292678][ T6034] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 552.298616][ T6034] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.304841][ T6034] usb 5-1: Product: syz [ 552.307414][ T6034] usb 5-1: Manufacturer: syz [ 552.310985][ T6034] usb 5-1: SerialNumber: syz [ 552.318278][ T6034] usb 5-1: config 0 descriptor?? [ 552.684067][ T6034] usb 5-1: USB disconnect, device number 14 [ 553.751587][ C3] vkms_vblank_simulate: vblank timer overrun [ 555.080470][T22326] lo speed is unknown, defaulting to 1000 [ 556.140784][T22352] < [ 556.272287][ T40] kauditd_printk_skb: 1923 callbacks suppressed [ 556.272309][ T40] audit: type=1326 audit(1760316164.662:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22361 comm="syz.3.6532" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x0 [ 556.343199][T22364] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 556.573592][T22367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6533'. [ 560.051678][ T40] audit: type=1326 audit(1760316168.422:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22415 comm="syz.7.6549" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x0 [ 561.087183][T22430] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6554'. [ 562.881603][ T40] audit: type=1326 audit(1760316171.272:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22445 comm="syz.0.6561" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x0 [ 562.970284][T22454] macsec0: entered promiscuous mode [ 563.079597][T22451] lo speed is unknown, defaulting to 1000 [ 566.100529][T22495] lo speed is unknown, defaulting to 1000 [ 567.694289][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.705763][ T40] audit: type=1326 audit(1760316176.092:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.1.6582" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x0 [ 568.532373][T22518] binder: BINDER_SET_CONTEXT_MGR already set [ 568.563777][T22518] binder: 22516:22518 ioctl 4018620d 80000100 returned -16 [ 568.569734][T22518] binder: BINDER_SET_CONTEXT_MGR already set [ 568.574128][T22518] binder: 22516:22518 ioctl 4018620d 800002c0 returned -16 [ 568.686051][ T40] audit: type=1800 audit(1760316177.072:4227): pid=22525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6586" name="file1" dev="overlay" ino=815 res=0 errno=0 [ 568.696529][T22529] overlayfs: failed to clone upperpath [ 570.004613][T22540] lo speed is unknown, defaulting to 1000 [ 570.281896][T22557] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 570.373994][T22560] Bluetooth: MGMT ver 1.23 [ 572.331295][T22582] bridge: RTM_NEWNEIGH with invalid ether address [ 572.419728][ T5956] Bluetooth: hci0: command 0x0000 tx timeout [ 577.022835][ T40] audit: type=1800 audit(1760316185.412:4228): pid=22609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6612" name="/" dev="fuse" ino=3 res=0 errno=0 [ 577.268720][T22630] binder: BINDER_SET_CONTEXT_MGR already set [ 577.271675][T22630] binder: 22629:22630 ioctl 4018620d 80000100 returned -16 [ 577.278977][T22630] binder: BINDER_SET_CONTEXT_MGR already set [ 577.282694][T22630] binder: 22629:22630 ioctl 4018620d 80004a80 returned -16 [ 577.523520][T22648] netlink: 22 bytes leftover after parsing attributes in process `syz.3.6633'. [ 577.858856][T22657] kvm: pic: non byte write [ 577.862233][T22657] kvm: pic: non byte write [ 577.864869][T22657] kvm: pic: non byte write [ 578.295533][T22678] netlink: 22 bytes leftover after parsing attributes in process `syz.0.6643'. [ 578.457015][T22683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.467020][T22683] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.493585][T22683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 578.915830][T22696] 9pnet_fd: p9_fd_create_tcp (22696): problem connecting socket to 127.0.0.1 [ 578.924539][T22696] 9pnet_fd: p9_fd_create_tcp (22696): problem connecting socket to 127.0.0.1 [ 578.978031][T22696] 9pnet_fd: p9_fd_create_tcp (22696): problem connecting socket to 127.0.0.1 [ 578.981553][ T40] audit: type=1326 audit(1760316187.362:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22693 comm="syz.0.6658" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d579 code=0x0 [ 578.982606][T22696] 9pnet_fd: p9_fd_create_tcp (22696): problem connecting socket to 127.0.0.1 [ 579.014498][T22696] 9pnet_fd: p9_fd_create_tcp (22696): problem connecting socket to 127.0.0.1 [ 579.020878][T22696] 9pnet_fd: p9_fd_create_tcp (22696): problem connecting socket to 127.0.0.1 [ 579.029199][T22696] 9pnet_fd: p9_fd_create_tcp (22696): problem connecting socket to 127.0.0.1 [ 579.036376][T22696] 9pnet_fd: p9_fd_create_tcp (22696): problem connecting socket to 127.0.0.1 [ 579.043239][T22696] 9pnet_fd: p9_fd_create_tcp (22696): problem connecting socket to 127.0.0.1 [ 579.756263][T22696] 9pnet_fd: p9_fd_create_tcp (22696): problem connecting socket to 127.0.0.1 [ 579.966983][T22705] kvm: pic: non byte write [ 579.970659][T22705] kvm: pic: non byte write [ 579.989428][T22705] kvm: pic: non byte write [ 580.761111][T22734] netlink: 'syz.3.6666': attribute type 11 has an invalid length. [ 580.765606][T22734] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6666'. [ 581.057802][T22748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6670'. [ 581.293390][T22755] veth1_to_bond: entered allmulticast mode [ 581.298445][T22755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6672'. [ 581.617753][T22755] bond0: (slave bond_slave_1): Releasing backup interface [ 582.255492][T22770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6677'. [ 582.801507][T22792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6686'. [ 583.004458][T22796] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6687'. [ 583.198805][T22802] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 583.257083][T22802] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 583.279787][T22811] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.6690'. [ 583.707950][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 583.879410][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 583.933690][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 583.937550][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 583.942252][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.967690][ T24] usb 5-1: config 0 descriptor?? [ 584.428151][ T24] mcp2221 0003:04D8:00DD.0028: USB HID v19.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 584.512086][T22837] netlink: 'syz.7.6701': attribute type 1 has an invalid length. [ 584.577247][T22837] bond6: (slave gretap2): making interface the new active one [ 584.590236][T22837] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 585.375996][T22863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6709'. [ 585.383825][T22863] veth0_macvtap: left promiscuous mode [ 585.484491][T22857] lo speed is unknown, defaulting to 1000 [ 586.478107][ T6340] usb 5-1: USB disconnect, device number 15 [ 589.973813][T22858] lo speed is unknown, defaulting to 1000 [ 590.576788][T22907] netlink: 'syz.3.6723': attribute type 4 has an invalid length. [ 591.734854][T22950] wg2: entered promiscuous mode [ 591.736985][T22950] wg2: entered allmulticast mode [ 591.832039][ T5812] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 592.001342][ T5812] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 592.004841][ T5812] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 592.010963][ T5812] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 592.021378][ T5812] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 592.026370][ T5812] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 592.034926][ T5812] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 592.039154][ T5812] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 592.045257][ T5812] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 592.052468][ T5812] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 592.057969][ T5812] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 592.068460][ T5812] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 592.072887][ T5812] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 592.077439][ T5812] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 592.084946][ T5812] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 592.090952][ T5812] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 592.110293][ T5812] usb 5-1: string descriptor 0 read error: -22 [ 592.116826][ T5812] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 592.124852][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.151648][ T5812] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 592.633762][ T6035] usb 5-1: USB disconnect, device number 16 [ 593.875748][T22985] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 595.788696][T23025] 9pnet_fd: p9_fd_create_tcp (23025): problem connecting socket to 127.0.0.1 [ 596.233714][T23040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6767'. [ 596.265665][T23040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6767'. [ 596.311830][T23040] ip6gretap0: entered allmulticast mode [ 597.557446][T23068] rdma_rxe: rxe_newlink: failed to add lo [ 597.563558][T23068] siw: device registration error -23 [ 597.776509][T23078] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6779'. [ 597.784348][T23078] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6779'. [ 597.796208][T23078] ip6gretap1: entered allmulticast mode [ 598.011737][ T5956] Bluetooth: hci4: hardware error 0x40 [ 599.393891][ T40] audit: type=1326 audit(1760316207.782:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23128 comm="syz.3.6795" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x0 [ 600.090743][ T5956] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 600.131283][T23138] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6797'. [ 600.428632][T23149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6804'. [ 600.495098][ T5956] Bluetooth: hci2: command 0x0406 tx timeout [ 600.530252][T23152] binder: BINDER_SET_CONTEXT_MGR already set [ 600.533864][T23152] binder: 23150:23152 ioctl 4018620d 80000100 returned -16 [ 600.541593][T23152] binder: BINDER_SET_CONTEXT_MGR already set [ 600.553557][T23152] binder: 23150:23152 ioctl 4018620d 800002c0 returned -16 [ 600.641017][T23158] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6807'. [ 600.895793][T23170] overlayfs: failed to clone upperpath [ 602.398405][T23200] lo speed is unknown, defaulting to 1000 [ 603.039997][ T40] audit: type=1326 audit(1760316211.412:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23206 comm="syz.7.6822" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x0 [ 603.104188][ T40] audit: type=1326 audit(1760316211.492:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23210 comm="syz.0.6824" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x0 [ 603.638053][T23228] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 603.858155][T23235] netlink: 'syz.7.6833': attribute type 1 has an invalid length. [ 603.898837][T23235] 8021q: adding VLAN 0 to HW filter on device bond7 [ 603.985456][T23239] veth7: entered promiscuous mode [ 603.997727][T23239] bond7: (slave veth7): Enslaving as an active interface with a down link [ 604.047957][T23235] bond7: entered allmulticast mode [ 604.559589][ T6340] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 604.581584][T23246] lo speed is unknown, defaulting to 1000 [ 604.749441][ T6340] usb 5-1: Using ep0 maxpacket: 32 [ 604.773514][ T6340] usb 5-1: config 0 has an invalid interface number: 209 but max is 0 [ 604.777531][ T6340] usb 5-1: config 0 has no interface number 0 [ 604.782668][ T6340] usb 5-1: config 0 interface 209 has no altsetting 0 [ 604.790152][ T6340] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 604.799398][ T6340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.803889][ T6340] usb 5-1: Product: syz [ 604.806563][ T6340] usb 5-1: Manufacturer: syz [ 604.809166][ T6340] usb 5-1: SerialNumber: syz [ 604.823244][ T6340] usb 5-1: config 0 descriptor?? [ 605.267782][ T6340] usb 5-1: USB disconnect, device number 17 [ 605.398498][T23260] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6840'. [ 605.450561][ T5956] Bluetooth: hci0: hardware error 0x40 [ 605.583008][T23266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6844'. [ 605.592449][T23266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6844'. [ 605.747342][T23275] overlayfs: failed to clone upperpath [ 605.853012][T23281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6849'. [ 607.540594][ T5956] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 608.366276][T23325] overlayfs: failed to clone upperpath [ 608.384418][T23321] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 609.421249][T23355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6884'. [ 609.425830][T23355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6884'. [ 609.498671][T23358] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 609.926375][T23372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6885'. [ 609.952414][T23372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6885'. [ 610.211373][T23381] lo speed is unknown, defaulting to 1000 [ 610.262040][ T40] audit: type=1326 audit(1760316218.652:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23384 comm="syz.1.6889" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x0 [ 610.559414][ T24] usb 12-1: new low-speed USB device number 13 using dummy_hcd [ 610.739717][ T24] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 610.743039][ T24] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 610.747482][ T24] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 610.752856][ T24] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 610.757903][ T24] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 610.764056][ T24] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 610.767294][ T24] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 610.782129][ T24] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 610.786880][ T24] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 610.792195][ T24] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 610.804684][T23400] tipc: Failed to remove unknown binding: 66,1,1/10463914:851736233/851736235 [ 610.808404][T23400] tipc: Failed to remove unknown binding: 66,1,1/10463914:851736233/851736235 [ 610.809580][ T24] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 610.839473][ T24] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 610.846477][ T24] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 610.851503][ T24] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 610.856026][ T24] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 610.868682][ T24] usb 12-1: string descriptor 0 read error: -22 [ 610.871587][ T24] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 610.875297][ T24] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.885622][ T24] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 610.926405][T23408] binder: BINDER_SET_CONTEXT_MGR already set [ 610.929062][T23408] binder: 23407:23408 ioctl 4018620d 80000100 returned -16 [ 610.935086][T23408] binder: BINDER_SET_CONTEXT_MGR already set [ 610.938173][T23408] binder: 23407:23408 ioctl 4018620d 80004a80 returned -16 [ 611.477246][T23417] 9pnet_fd: Insufficient options for proto=fd [ 611.484212][ T24] usb 12-1: USB disconnect, device number 13 [ 612.499416][ T6340] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 612.530460][T23439] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.6910'. [ 612.690777][ T6340] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 612.693970][ T6340] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 612.700915][ T6340] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 612.703960][ T6340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.730121][ T6340] usb 5-1: config 0 descriptor?? [ 612.942384][T23430] vlan2: entered promiscuous mode [ 612.959731][T23430] vlan2: entered allmulticast mode [ 612.963016][T23430] hsr_slave_1: entered allmulticast mode [ 613.047451][ T6340] usb 5-1: USB disconnect, device number 18 [ 613.827834][T23456] lo speed is unknown, defaulting to 1000 [ 613.979419][ T24] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 614.149374][ T24] usb 12-1: Using ep0 maxpacket: 32 [ 614.153266][ T24] usb 12-1: config 0 has an invalid interface number: 209 but max is 0 [ 614.155973][ T24] usb 12-1: config 0 has no interface number 0 [ 614.159036][ T24] usb 12-1: config 0 interface 209 has no altsetting 0 [ 614.163908][ T24] usb 12-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 614.167116][ T24] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.170114][ T24] usb 12-1: Product: syz [ 614.171619][ T24] usb 12-1: Manufacturer: syz [ 614.173301][ T24] usb 12-1: SerialNumber: syz [ 614.176368][ T24] usb 12-1: config 0 descriptor?? [ 614.443333][ T24] usb 12-1: USB disconnect, device number 14 [ 615.121455][T23483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 615.589473][ T6034] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 615.761389][ T6034] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.765649][ T6034] usb 12-1: config 0 has no interfaces? [ 615.769825][ T6034] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 615.774126][ T6034] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 615.777551][ T6034] usb 12-1: Manufacturer: syz [ 615.781793][ T6034] usb 12-1: config 0 descriptor?? [ 615.988897][ T6034] usb 12-1: USB disconnect, device number 15 [ 616.531639][T23509] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.6934'. [ 616.654402][T23514] netlink: 'syz.0.6937': attribute type 4 has an invalid length. [ 616.669347][ T53] lo speed is unknown, defaulting to 1000 [ 616.674157][T23514] netlink: 'syz.0.6937': attribute type 4 has an invalid length. [ 616.690388][ T53] lo speed is unknown, defaulting to 1000 [ 616.694941][ T5989] lo speed is unknown, defaulting to 1000 [ 616.808672][T23518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6938'. [ 617.296907][T23536] netlink: 'syz.0.6945': attribute type 14 has an invalid length. [ 617.311229][T23536] netlink: 'syz.0.6945': attribute type 4 has an invalid length. [ 617.330009][ T53] lo speed is unknown, defaulting to 1000 [ 617.332362][ T53] sz1: Port: 1 Link DOWN [ 617.334118][ T53] lo speed is unknown, defaulting to 1000 [ 617.352597][T23536] netlink: 'syz.0.6945': attribute type 4 has an invalid length. [ 617.363818][ T53] lo speed is unknown, defaulting to 1000 [ 617.365860][ T53] sz1: Port: 1 Link ACTIVE [ 617.369513][ T53] lo speed is unknown, defaulting to 1000 [ 617.575508][T23552] overlayfs: failed to clone upperpath [ 617.578359][T23553] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 617.712254][ T40] audit: type=1326 audit(1760316226.102:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.6955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 617.721646][ T40] audit: type=1326 audit(1760316226.102:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.6955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 617.731552][ T40] audit: type=1326 audit(1760316226.102:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.6955" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 617.740715][ T40] audit: type=1326 audit(1760316226.102:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.6955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 617.750112][ T40] audit: type=1326 audit(1760316226.102:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.6955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 617.759868][ T40] audit: type=1326 audit(1760316226.102:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.6955" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 617.768929][ T40] audit: type=1326 audit(1760316226.102:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.6955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 617.779816][ T40] audit: type=1326 audit(1760316226.102:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.6955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 617.790506][ T40] audit: type=1326 audit(1760316226.102:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.6955" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 617.799668][ T40] audit: type=1326 audit(1760316226.102:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.3.6955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 617.945999][T23573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6960'. [ 618.010316][T23575] netlink: 'syz.3.6961': attribute type 1 has an invalid length. [ 618.025222][T23575] bond18: entered promiscuous mode [ 618.027092][T23575] bond18: entered allmulticast mode [ 618.031645][T23573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6960'. [ 618.061094][T23575] bond18: (slave erspan1): making interface the new active one [ 618.064565][T23575] erspan1: entered promiscuous mode [ 618.067019][T23575] erspan1: entered allmulticast mode [ 618.070375][T23575] bond18: (slave erspan1): Enslaving as an active interface with an up link [ 618.093056][T23575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6961'. [ 618.099372][T23575] bond18: left promiscuous mode [ 618.101727][T23575] erspan1: left promiscuous mode [ 618.104128][T23575] bond18: left allmulticast mode [ 618.106223][T23575] erspan1: left allmulticast mode [ 618.114140][T23575] 8021q: adding VLAN 0 to HW filter on device bond18 [ 619.538356][T23613] fuse: Bad value for 'fd' [ 619.618049][T23615] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 619.893526][T23625] syzkaller0: entered promiscuous mode [ 619.895543][T23625] syzkaller0: entered allmulticast mode [ 621.168424][T23660] syzkaller0: entered promiscuous mode [ 621.170916][T23660] syzkaller0: entered allmulticast mode [ 621.217188][T23663] syzkaller0: entered promiscuous mode [ 621.219120][T23663] syzkaller0: entered allmulticast mode [ 621.264136][T23667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6992'. [ 621.966013][T23682] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 622.129563][T23686] syzkaller0: entered promiscuous mode [ 622.131596][T23686] syzkaller0: entered allmulticast mode [ 622.270681][T23697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7003'. [ 622.909458][T10639] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 623.059900][T10639] usb 12-1: Using ep0 maxpacket: 8 [ 623.066553][T10639] usb 12-1: config index 0 descriptor too short (expected 2304, got 36) [ 623.070908][T10639] usb 12-1: config 255 has too many interfaces: 33, using maximum allowed: 32 [ 623.074912][T10639] usb 12-1: config 255 has an invalid descriptor of length 179, skipping remainder of the config [ 623.079823][T10639] usb 12-1: config 255 has 0 interfaces, different from the descriptor's value: 33 [ 623.083445][T10639] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 623.088149][T10639] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.216778][T23735] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7017'. [ 623.306380][T23718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.311355][T23718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.329635][T10639] usb 12-1: string descriptor 0 read error: -71 [ 623.333553][T10639] usb 12-1: USB disconnect, device number 16 [ 624.437268][T23755] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 624.495395][T23760] netlink: 'syz.1.7026': attribute type 12 has an invalid length. [ 625.870217][T23799] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.874561][T23799] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.036573][T23799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.055529][T23799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.265954][ T88] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.270502][ T88] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.274928][ T88] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.281063][ T88] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.401934][T23815] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7043'. [ 626.591439][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 626.591727][ T40] audit: type=1804 audit(1760316234.982:4260): pid=23820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7045" name="bus" dev="ramfs" ino=102382 res=1 errno=0 [ 626.607238][ T40] audit: type=1804 audit(1760316234.982:4261): pid=23820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.7045" name="bus" dev="ramfs" ino=102382 res=1 errno=0 [ 627.059908][T23834] bridge_slave_0: entered promiscuous mode [ 627.176674][T23842] tipc: Invalid UDP bearer configuration [ 627.176716][T23842] tipc: Enabling of bearer rejected, failed to enable media [ 627.724441][ T40] audit: type=1804 audit(1760316236.112:4262): pid=23849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7055" name="bus" dev="ramfs" ino=103876 res=1 errno=0 [ 627.735948][ T40] audit: type=1804 audit(1760316236.112:4263): pid=23849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.7055" name="bus" dev="ramfs" ino=103876 res=1 errno=0 [ 627.878260][T23862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.936081][T23861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.027257][T23869] futex_wake_op: syz.0.7061 tries to shift op by 32; fix this program [ 628.790066][T23903] wg2: entered promiscuous mode [ 628.792809][T23903] wg2: entered allmulticast mode [ 628.977050][ T40] audit: type=1326 audit(1760316237.362:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23907 comm="syz.1.7077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 628.987353][ T40] audit: type=1326 audit(1760316237.362:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23907 comm="syz.1.7077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 629.001029][ T40] audit: type=1326 audit(1760316237.382:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23907 comm="syz.1.7077" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 629.007877][ T40] audit: type=1326 audit(1760316237.382:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23907 comm="syz.1.7077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 629.016620][ T40] audit: type=1326 audit(1760316237.382:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23907 comm="syz.1.7077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 629.028510][ T40] audit: type=1326 audit(1760316237.382:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23907 comm="syz.1.7077" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 629.074158][T23912] netlink: 'syz.3.7078': attribute type 12 has an invalid length. [ 629.140179][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 632.563835][T23999] overlayfs: failed to clone upperpath [ 633.752981][T24012] tipc: Invalid UDP bearer configuration [ 633.753009][T24012] tipc: Enabling of bearer rejected, failed to enable media [ 633.980647][T24018] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 636.663580][ T5956] Bluetooth: min 40 > max 0 [ 636.851815][T24066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.857838][T24066] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.880499][T24066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 637.722193][T10639] libceph: connect (1)[c::]:6789 error -101 [ 637.725112][T10639] libceph: mon0 (1)[c::]:6789 connect error [ 637.877857][T24084] ceph: No mds server is up or the cluster is laggy [ 638.729424][ T5956] Bluetooth: hci2: command 0x0406 tx timeout [ 640.234736][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 640.234754][ T40] audit: type=1326 audit(1760316248.622:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24099 comm="syz.1.7139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 640.258067][ T40] audit: type=1326 audit(1760316248.632:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24099 comm="syz.1.7139" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 640.268145][ T40] audit: type=1326 audit(1760316248.632:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24099 comm="syz.1.7139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 640.277834][ T40] audit: type=1326 audit(1760316248.632:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24099 comm="syz.1.7139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 640.300035][ T40] audit: type=1326 audit(1760316248.632:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24099 comm="syz.1.7139" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 640.310863][ T40] audit: type=1326 audit(1760316248.632:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24099 comm="syz.1.7139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 640.320794][ T40] audit: type=1326 audit(1760316248.642:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24099 comm="syz.1.7139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 640.332905][ T40] audit: type=1326 audit(1760316248.642:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24099 comm="syz.1.7139" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 640.344456][ T40] audit: type=1326 audit(1760316248.642:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24099 comm="syz.1.7139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 640.354479][ T40] audit: type=1326 audit(1760316248.642:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24099 comm="syz.1.7139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 640.618468][T24120] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.621789][T24120] bridge0: port 2(bridge_slave_1) entered listening state [ 640.625275][T24120] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.628329][T24120] bridge0: port 1(bridge_slave_0) entered listening state [ 640.659810][T24120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 640.924310][T24127] overlayfs: failed to clone upperpath [ 642.062912][T24189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7172'. [ 642.216035][T24190] uprobe: syz.1.7173:24190 failed to unregister, leaking uprobe [ 642.727229][T24212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.751178][T24212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.518867][T24243] tipc: Enabling of bearer rejected, failed to enable media [ 643.596573][T24248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7192'. [ 643.601246][T24248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7192'. [ 643.734110][T24252] netlink: 'syz.1.7194': attribute type 1 has an invalid length. [ 643.802164][T24252] bond2: (slave veth7): Enslaving as an active interface with a down link [ 643.842794][T24252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7194'. [ 643.850218][T24252] 8021q: adding VLAN 0 to HW filter on device bond2 [ 644.271664][T24257] lo speed is unknown, defaulting to 1000 [ 644.482436][T24268] netlink: 'syz.7.7200': attribute type 10 has an invalid length. [ 644.494108][T24268] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 644.510118][T24268] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7200'. [ 644.514217][T24268] veth1_to_bridge: left allmulticast mode [ 644.517076][T24268] veth1_to_bridge: left promiscuous mode [ 644.519916][T24268] bridge0: port 1(veth1_to_bridge) entered disabled state [ 644.524981][T24268] bond2: left allmulticast mode [ 644.527725][T24268] bond2: left promiscuous mode [ 644.530101][T24268] bridge0: port 3(bond2) entered disabled state [ 644.567656][T24268] bond0: (slave bridge0): Releasing backup interface [ 644.574451][T24273] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7201'. [ 644.915523][T24283] overlayfs: failed to clone upperpath [ 645.084710][T24285] Invalid ELF header type: 3 != 1 [ 645.440061][T24294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7208'. [ 645.477140][T24294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7208'. [ 645.480390][T24294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7208'. [ 645.561154][T24296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7209'. [ 645.681104][T24300] netlink: 'syz.1.7211': attribute type 10 has an invalid length. [ 645.691181][T24300] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 645.704113][T24300] bridge_slave_1: left allmulticast mode [ 645.706561][T24300] bridge_slave_1: left promiscuous mode [ 645.709328][T24300] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.715030][T24300] bridge_slave_0: left allmulticast mode [ 645.717425][T24300] bridge_slave_0: left promiscuous mode [ 645.720513][T24300] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.739558][T24300] bond0: (slave bridge0): Releasing backup interface [ 646.328579][T24324] block device autoloading is deprecated and will be removed. [ 647.125580][T24339] __nla_validate_parse: 2 callbacks suppressed [ 647.125597][T24339] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7225'. [ 647.189901][T24339] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7225'. [ 647.485088][T24348] No control pipe specified [ 648.363612][T24363] lo speed is unknown, defaulting to 1000 [ 648.908565][T24375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.911805][T24375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.916928][T24375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.920489][T24375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.026619][T24379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7238'. [ 649.060549][T24379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7238'. [ 649.146324][T24381] tipc: Enabling of bearer rejected, failed to enable media [ 649.303177][T24399] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 649.417935][T24397] overlayfs: failed to clone upperpath [ 650.558427][T24421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7254'. [ 650.603224][T24421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7254'. [ 650.835583][ T6340] libceph: connect (1)[c::]:6789 error -101 [ 650.838430][ T6340] libceph: mon0 (1)[c::]:6789 connect error [ 650.849929][T24435] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7258'. [ 650.854507][T24435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7258'. [ 650.858565][T24435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7258'. [ 650.862738][T24435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7258'. [ 651.001505][T24431] ceph: No mds server is up or the cluster is laggy [ 652.865303][T24500] __nla_validate_parse: 4 callbacks suppressed [ 652.865325][T24500] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7279'. [ 652.873632][T24500] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7279'. [ 652.997260][T24508] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7282'. [ 653.583075][T24520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7286'. [ 654.015016][T24524] overlayfs: failed to clone upperpath [ 654.060231][T24529] syz_tun: entered allmulticast mode [ 654.064810][T24528] syz_tun: left allmulticast mode [ 655.394488][T24558] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7298'. [ 655.460321][T24560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7299'. [ 655.467838][T24560] tipc: New replicast peer: 255.255.255.255 [ 655.471783][T24560] tipc: Enabled bearer , priority 10 [ 656.634570][T24587] overlayfs: failed to clone upperpath [ 657.231607][T24611] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7313'. [ 657.245607][T24611] tipc: New replicast peer: 255.255.255.255 [ 657.248709][T24611] tipc: Enabled bearer , priority 10 [ 659.011840][T24672] xfrm0: entered promiscuous mode [ 659.019447][T24672] xfrm0: entered allmulticast mode [ 660.311882][T24690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7341'. [ 660.500192][T24705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7347'. [ 660.583800][T24709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7345'. [ 661.048244][T24723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7351'. [ 662.870000][T24765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7362'. [ 662.923062][T24765] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 663.147475][T24756] overlayfs: failed to clone upperpath [ 663.237167][T24769] netlink: 'syz.3.7365': attribute type 10 has an invalid length. [ 663.253380][T24769] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 663.325144][T24776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7367'. [ 663.351578][T24776] bridge15: port 1(veth0_to_bond) entered blocking state [ 663.358589][T24776] bridge15: port 1(veth0_to_bond) entered disabled state [ 663.364262][T24776] veth0_to_bond: entered allmulticast mode [ 663.368196][T24776] veth0_to_bond: entered promiscuous mode [ 663.505268][T24776] bridge15: port 2(veth15) entered blocking state [ 663.508233][T24776] bridge15: port 2(veth15) entered disabled state [ 663.511338][T24776] veth15: entered allmulticast mode [ 663.517156][T24776] veth15: entered promiscuous mode [ 663.520891][T24771] lo speed is unknown, defaulting to 1000 [ 663.989632][T24794] overlayfs: failed to clone upperpath [ 664.078550][T24803] netlink: 'syz.7.7376': attribute type 10 has an invalid length. [ 664.165992][T24803] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 664.390201][T24809] macsec1: entered promiscuous mode [ 664.402087][T24809] macsec1: entered allmulticast mode [ 664.521809][T24817] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7383'. [ 665.197849][T24841] overlayfs: failed to clone upperpath [ 665.907003][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 665.907020][ T40] audit: type=1800 audit(1760316274.292:4363): pid=24864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7392" name="nullb0" dev="tmpfs" ino=2226 res=0 errno=0 [ 665.966095][T24871] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7394'. [ 666.018771][T24875] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7396'. [ 666.027531][T24875] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7396'. [ 667.026158][T24897] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7403'. [ 667.281545][T24905] syz_tun: entered allmulticast mode [ 667.348294][T24912] overlayfs: failed to clone upperpath [ 667.352185][T24904] syz_tun: left allmulticast mode [ 667.682780][T24926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7411'. [ 667.805868][T24940] netlink: 'syz.3.7415': attribute type 39 has an invalid length. [ 668.862486][ T5956] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 668.957497][T24965] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 668.979448][ T40] audit: type=1326 audit(1760316277.362:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24969 comm="syz.3.7425" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x0 [ 669.087226][ T40] audit: type=1326 audit(1760316277.472:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24969 comm="syz.3.7425" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe7579 code=0x0 [ 669.698312][T24993] netlink: 'syz.7.7434': attribute type 1 has an invalid length. [ 669.715036][T24993] 8021q: adding VLAN 0 to HW filter on device bond8 [ 669.727722][T24993] vlan3: entered promiscuous mode [ 669.729796][T24993] bond8: entered promiscuous mode [ 669.731569][T24993] vlan3: entered allmulticast mode [ 669.733218][T24993] bond8: entered allmulticast mode [ 669.745329][T24993] bond8: (slave gretap3): making interface the new active one [ 669.748426][T24993] gretap3: entered promiscuous mode [ 669.752477][T24993] gretap3: entered allmulticast mode [ 669.757098][T24993] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 670.282588][T25016] netlink: 'syz.0.7442': attribute type 1 has an invalid length. [ 670.308319][T25016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 670.354783][T25016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 670.357045][T25016] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 670.362230][T25016] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 670.419592][T25021] veth11: entered promiscuous mode [ 670.424696][T25021] bond1: (slave veth11): Enslaving as an active interface with a down link [ 670.481370][T25016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7442'. [ 670.484800][T25016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 670.732100][ C2] bridge0: port 1(bridge_slave_0) entered learning state [ 670.736542][ C2] bridge0: port 2(bridge_slave_1) entered learning state [ 671.449410][T25040] lo speed is unknown, defaulting to 1000 [ 671.619504][T25048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7453'. [ 671.625590][T25048] tipc: Enabling of bearer rejected, already enabled [ 671.692317][T25050] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 671.697665][T25050] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 671.701172][T25050] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 671.704291][T25050] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 671.707999][T25050] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 671.711885][T25050] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 671.715285][T25050] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 671.718828][T25050] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 671.723632][T25050] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 671.727730][T25050] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 672.706523][T25083] overlayfs: missing 'lowerdir' [ 672.712982][T25075] 9pnet_fd: Insufficient options for proto=fd [ 673.507490][T25095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7468'. [ 673.678408][T25099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7469'. [ 673.682634][T25099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7469'. [ 675.301443][T25146] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7481'. [ 675.386920][T25151] tipc: Enabling of bearer rejected, failed to enable media [ 675.505195][T25158] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7485'. [ 675.527298][T25158] syz_tun (unregistering): left allmulticast mode [ 675.551594][T25153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7484'. [ 675.840309][T25185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7492'. [ 675.940208][T25192] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7492'. [ 675.950597][T25192] batadv0: entered promiscuous mode [ 675.953236][T25192] batadv0: entered allmulticast mode [ 675.994999][T25185] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7492'. [ 676.046572][T25194] xfrm0: left promiscuous mode [ 676.048810][T25194] xfrm0: left allmulticast mode [ 676.054888][T25194] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 676.075426][T25185] batadv0: entered promiscuous mode [ 676.077233][T25185] batadv0: entered allmulticast mode [ 677.524307][T25229] netlink: 'syz.1.7507': attribute type 5 has an invalid length. [ 677.958188][ T40] audit: type=1804 audit(1760316286.342:4366): pid=25235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7509" name="bus" dev="tmpfs" ino=2343 res=1 errno=0 [ 680.686541][T25308] netlink: 'syz.1.7528': attribute type 3 has an invalid length. [ 680.690189][T25308] netlink: 'syz.1.7528': attribute type 3 has an invalid length. [ 680.752032][T25311] MPI: mpi too large (124808 bits) [ 680.996005][T25315] lo speed is unknown, defaulting to 1000 [ 682.182363][T25347] lo speed is unknown, defaulting to 1000 [ 682.185275][T25347] lo speed is unknown, defaulting to 1000 [ 682.188690][T25347] lo speed is unknown, defaulting to 1000 [ 682.205891][T25347] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 682.229760][T25347] lo speed is unknown, defaulting to 1000 [ 682.234482][T25347] lo speed is unknown, defaulting to 1000 [ 682.241418][T25347] lo speed is unknown, defaulting to 1000 [ 682.246365][T25347] lo speed is unknown, defaulting to 1000 [ 682.251967][T25347] lo speed is unknown, defaulting to 1000 [ 682.256620][T25347] lo speed is unknown, defaulting to 1000 [ 682.528451][T25359] overlayfs: failed to clone upperpath [ 682.590832][T25361] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7546'. [ 682.595931][T25361] netlink: 'syz.7.7546': attribute type 7 has an invalid length. [ 682.601263][T25361] netlink: 'syz.7.7546': attribute type 8 has an invalid length. [ 682.604575][T25361] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7546'. [ 682.642059][T25362] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7546'. [ 682.645796][T25362] netlink: 'syz.7.7546': attribute type 7 has an invalid length. [ 682.649088][T25362] netlink: 'syz.7.7546': attribute type 8 has an invalid length. [ 682.652981][T25362] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7546'. [ 682.997065][T25364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.316863][T25374] netlink: 'syz.0.7550': attribute type 13 has an invalid length. [ 683.320704][T25374] netlink: 'syz.0.7550': attribute type 17 has an invalid length. [ 683.935378][T25382] netlink: 'syz.7.7552': attribute type 1 has an invalid length. [ 684.062425][T25374] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 684.098180][T25382] 8021q: adding VLAN 0 to HW filter on device bond9 [ 684.137297][T25383] 8021q: adding VLAN 0 to HW filter on device bond9 [ 684.146962][T25383] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 684.193251][T25383] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 684.268404][T25384] bond10: entered promiscuous mode [ 684.273082][T25384] 8021q: adding VLAN 0 to HW filter on device bond10 [ 684.278821][T25384] bond9: (slave bond10): Enslaving as an active interface with a down link [ 684.304743][T25382] macvlan3: entered promiscuous mode [ 684.306965][T25382] macvlan3: entered allmulticast mode [ 684.329608][T25382] bond9: entered promiscuous mode [ 684.339505][T25382] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 684.345017][T25382] bond9: left promiscuous mode [ 684.510104][ T40] audit: type=1800 audit(1760316292.892:4367): pid=25401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7556" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 685.885314][T25430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7565'. [ 686.233074][ T40] audit: type=1326 audit(1760316294.622:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25433 comm="syz.1.7567" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d579 code=0x0 [ 687.106494][T25469] netlink: 'syz.7.7576': attribute type 1 has an invalid length. [ 687.111707][ T6340] lo speed is unknown, defaulting to 1000 [ 687.113761][ T6340] syz2: Port: 1 Link DOWN [ 687.164655][T25466] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 687.167983][ T91] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 687.172085][ T91] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 687.176164][ T91] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 687.180127][ T91] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 687.569324][T25480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7579'. [ 688.201163][T25494] cgroup: fork rejected by pids controller in /syz1 [ 690.574363][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.513870][T26435] netlink: 'syz.0.7600': attribute type 1 has an invalid length. [ 691.576018][T26435] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 691.581533][T26435] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 691.586506][T26435] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 691.673075][T26440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7600'. [ 693.473909][T26477] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 693.560181][T26480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7611'. [ 694.803457][T26497] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 695.051119][T26499] lo speed is unknown, defaulting to 1000 [ 695.326920][T26499] lo speed is unknown, defaulting to 1000 [ 697.960263][T26554] cgroup: fork rejected by pids controller in /syz0 [ 698.507744][T27252] netlink: 'syz.3.7635': attribute type 1 has an invalid length. [ 698.523337][T27252] 8021q: adding VLAN 0 to HW filter on device bond19 [ 698.630050][T27252] bond19: (slave veth17): Enslaving as an active interface with a down link [ 698.634291][T27415] veth0_to_bond: left allmulticast mode [ 698.636724][T27415] veth0_to_bond: left promiscuous mode [ 698.638666][T27415] bridge15: port 1(veth0_to_bond) entered disabled state [ 698.661017][T27415] bond19: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 698.882052][T27421] team0: Port device team_slave_0 removed [ 698.895821][T27427] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7638'. [ 699.018885][T27252] vlan0: entered allmulticast mode [ 699.027705][T27252] veth0_to_bond: entered allmulticast mode [ 699.031217][T27252] veth0_to_bond: entered promiscuous mode [ 699.034825][T27252] veth0_to_bond: left promiscuous mode [ 699.037271][T27252] veth0_to_bond: entered promiscuous mode [ 699.039793][T27252] bond19: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 699.046001][T27252] veth0_to_bond: left promiscuous mode [ 700.155468][T27448] lo speed is unknown, defaulting to 1000 [ 700.332178][T27448] lo speed is unknown, defaulting to 1000 [ 700.525683][T27459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7649'. [ 700.811197][ C2] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.814340][ C2] bridge0: topology change detected, propagating [ 700.817851][ C2] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.821059][ C2] bridge0: topology change detected, propagating [ 701.675641][ T40] audit: type=1326 audit(1760316310.062:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27473 comm="syz.3.7653" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe7579 code=0x0 [ 701.844263][T27490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7657'. [ 702.306328][T27503] lo speed is unknown, defaulting to 1000 [ 702.440425][T27503] lo speed is unknown, defaulting to 1000 [ 708.259454][T27597] lo speed is unknown, defaulting to 1000 [ 708.365617][T27597] lo speed is unknown, defaulting to 1000 [ 709.105985][T27616] netlink: 'syz.0.7697': attribute type 1 has an invalid length. [ 709.128840][T27616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 709.187045][T27616] bond3: (slave veth13): Enslaving as an active interface with a down link [ 709.255294][T27616] bond3: (slave veth0_to_bond): making interface the new active one [ 709.258602][T27616] veth0_to_bond: entered promiscuous mode [ 709.261356][T27616] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 709.342492][T27613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7687'. [ 709.370865][T27616] vlan4: entered allmulticast mode [ 709.372629][T27616] veth0_to_bond: entered allmulticast mode [ 709.375531][T27616] bond3: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 712.417769][T27666] lo speed is unknown, defaulting to 1000 [ 712.523996][T27666] lo speed is unknown, defaulting to 1000 [ 714.792872][T27731] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 715.720127][T27738] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7721'. [ 715.807198][ T40] audit: type=1326 audit(1760316324.192:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27743 comm="syz.0.7724" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x0 [ 715.913669][ T40] audit: type=1326 audit(1760316324.302:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27743 comm="syz.0.7724" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d579 code=0x0 [ 717.742314][T27771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7731'. [ 718.914203][T27848] netlink: 'syz.1.7744': attribute type 1 has an invalid length. [ 718.934185][T27848] 8021q: adding VLAN 0 to HW filter on device bond3 [ 718.986936][T27848] bond3: (slave veth15): Enslaving as an active interface with a down link [ 719.190340][T27848] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 719.221727][T27848] vlan3: entered allmulticast mode [ 719.223494][T27848] veth0_to_bond: entered allmulticast mode [ 719.225829][T27848] veth0_to_bond: entered promiscuous mode [ 719.230039][T27848] veth0_to_bond: left promiscuous mode [ 719.236093][T27848] veth0_to_bond: entered promiscuous mode [ 719.240098][T27848] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 719.256486][T27848] veth0_to_bond: left promiscuous mode [ 719.580530][T27861] syz_tun: left promiscuous mode [ 719.593412][T27861] wg2: left promiscuous mode [ 719.595541][T27861] wg2: left allmulticast mode [ 719.602294][T27861] bridge_slave_0: left promiscuous mode [ 719.615614][T27861] macsec0: left promiscuous mode [ 719.636754][T27861] bond10: left promiscuous mode [ 719.638847][T27861] bond11: left promiscuous mode [ 719.640927][T27861] bond10: left allmulticast mode [ 719.642987][T27861] bond11: left allmulticast mode [ 719.686112][T27861] bond17: left allmulticast mode [ 719.689829][T27861] veth13: left promiscuous mode [ 719.692773][T27861] ip6gretap0: left allmulticast mode [ 719.991820][T27872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7743'. [ 721.190150][T27824] veth0_to_bond: left promiscuous mode [ 721.942943][ T5956] Bluetooth: hci2: command 0x0406 tx timeout [ 725.050069][T27936] netlink: 'syz.0.7759': attribute type 39 has an invalid length. [ 725.055942][T27936] veth0_macvtap: left promiscuous mode [ 725.247829][ T5956] Bluetooth: hci2: unexpected cc 0x2002 length: 1 < 4 [ 725.251602][ T5956] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 726.055221][T27959] fanotify_encode_fh: 251 callbacks suppressed [ 726.055233][T27959] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 726.062993][T27959] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 726.065378][T27959] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 726.067862][T27959] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 726.070656][T27959] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 726.073545][T27959] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 726.076778][T27959] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 726.080059][T27959] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 726.082485][T27959] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 726.085358][T27959] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 728.009053][T27989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7772'. [ 728.040087][T27989] bridge0: port 1(ip6gretap1) entered blocking state [ 728.043017][T27989] bridge0: port 1(ip6gretap1) entered disabled state [ 728.045977][T27989] ip6gretap1: entered allmulticast mode [ 728.049658][T27989] ip6gretap1: entered promiscuous mode [ 728.085065][T27989] veth17: entered promiscuous mode [ 728.087472][T27989] bridge0: port 2(veth17) entered blocking state [ 728.106837][T27989] bridge0: port 2(veth17) entered disabled state [ 728.110638][T27989] veth17: entered allmulticast mode [ 728.180429][T27995] netlink: 'syz.7.7773': attribute type 1 has an invalid length. [ 728.204723][T27995] 8021q: adding VLAN 0 to HW filter on device bond12 [ 728.241910][T27995] 8021q: adding VLAN 0 to HW filter on device bond12 [ 728.245108][T27995] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 728.250115][T27995] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 728.327467][T27998] veth15: entered promiscuous mode [ 728.334150][T27998] bond12: (slave veth15): Enslaving as an active interface with a down link [ 728.336316][T27999] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7773'. [ 728.341900][T27999] 8021q: adding VLAN 0 to HW filter on device bond12 [ 729.293222][ T5956] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 729.297012][ T5956] Bluetooth: hci2: Injecting HCI hardware error event [ 729.301025][ T5956] Bluetooth: hci2: hardware error 0x00 [ 729.382792][T28012] netlink: 'syz.7.7778': attribute type 1 has an invalid length. [ 729.406152][T28012] 8021q: adding VLAN 0 to HW filter on device bond13 [ 729.452219][T28012] bond13: (slave veth17): Enslaving as an active interface with a down link [ 729.504311][T28012] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 729.519819][T28012] vlan4: entered allmulticast mode [ 729.521693][T28012] veth0_to_bond: entered allmulticast mode [ 729.524102][T28012] veth0_to_bond: entered promiscuous mode [ 729.526239][T28012] veth0_to_bond: left promiscuous mode [ 729.528145][T28012] veth0_to_bond: entered promiscuous mode [ 729.530311][T28012] bond13: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 729.536689][T28012] veth0_to_bond: left promiscuous mode [ 730.244537][ T40] audit: type=1800 audit(1760316338.632:4372): pid=28023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7784" name="file1" dev="tmpfs" ino=6149 res=0 errno=0 [ 730.331975][T28023] lo speed is unknown, defaulting to 1000 [ 730.500366][T28023] lo speed is unknown, defaulting to 1000 [ 731.370024][ T5956] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 731.391242][T28046] tipc: Enabling of bearer rejected, failed to enable media [ 732.654544][T28061] netlink: 'syz.7.7801': attribute type 1 has an invalid length. [ 732.668731][T28061] 8021q: adding VLAN 0 to HW filter on device bond14 [ 732.706809][T28061] bond14: (slave veth19): Enslaving as an active interface with a down link [ 732.738667][T28061] bond13: (slave veth0_to_bond): Releasing active interface [ 732.747662][T28061] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 732.794198][T28061] vlan4: entered allmulticast mode [ 732.797521][T28061] veth0_to_bond: entered promiscuous mode [ 732.801110][T28061] veth0_to_bond: left promiscuous mode [ 732.804403][T28061] veth0_to_bond: entered promiscuous mode [ 732.807275][T28061] bond14: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 732.817987][T28061] veth0_to_bond: left promiscuous mode [ 735.387532][T28106] netlink: 'syz.0.7807': attribute type 1 has an invalid length. [ 735.400694][T28106] 8021q: adding VLAN 0 to HW filter on device bond4 [ 735.437689][T28106] bond4: (slave veth17): Enslaving as an active interface with a down link [ 735.464890][T28106] bond3: (slave veth0_to_bond): Releasing active interface [ 735.472479][T28106] bond4: (slave veth0_to_bond): making interface the new active one [ 735.475957][T28106] veth0_to_bond: entered promiscuous mode [ 735.478058][T28106] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 735.500669][T28106] vlan4: entered allmulticast mode [ 735.503470][T28106] bond4: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 735.735341][T28113] lo speed is unknown, defaulting to 1000 [ 735.877688][T28113] lo speed is unknown, defaulting to 1000 [ 736.046914][T28120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7810'. [ 736.092956][T28120] bridge16: port 1(ip6gretap1) entered blocking state [ 736.096931][T28120] bridge16: port 1(ip6gretap1) entered disabled state [ 736.101318][T28120] ip6gretap1: entered allmulticast mode [ 736.105798][T28120] ip6gretap1: entered promiscuous mode [ 736.178195][T28120] veth19: entered promiscuous mode [ 736.181047][T28120] bridge16: port 2(veth19) entered blocking state [ 736.183910][T28120] bridge16: port 2(veth19) entered disabled state [ 736.186738][T28120] veth19: entered allmulticast mode [ 736.495706][T28125] lo speed is unknown, defaulting to 1000 [ 736.589009][T28125] lo speed is unknown, defaulting to 1000 [ 737.672545][T28157] netlink: 'syz.0.7821': attribute type 1 has an invalid length. [ 737.688160][T28157] 8021q: adding VLAN 0 to HW filter on device bond5 [ 737.761822][T28157] bond5: (slave veth19): Enslaving as an active interface with a down link [ 737.763062][T28161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7822'. [ 737.770404][T28161] netlink: 'syz.1.7822': attribute type 7 has an invalid length. [ 737.772987][T28162] bond4: (slave veth0_to_bond): Releasing active interface [ 737.773800][T28161] netlink: 'syz.1.7822': attribute type 8 has an invalid length. [ 737.776106][T28162] veth0_to_bond: left promiscuous mode [ 737.779606][T28161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7822'. [ 737.792021][T28162] bond5: (slave veth0_to_bond): making interface the new active one [ 737.796547][T28162] veth0_to_bond: entered promiscuous mode [ 737.799239][T28162] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 737.820318][T28164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7822'. [ 737.824102][T28164] netlink: 'syz.1.7822': attribute type 7 has an invalid length. [ 737.827347][T28164] netlink: 'syz.1.7822': attribute type 8 has an invalid length. [ 737.831968][T28164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7822'. [ 737.888320][T28157] vlan4: entered allmulticast mode [ 737.892069][T28157] bond5: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 738.967458][T28187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7828'. [ 739.459498][T28194] netlink: 'syz.1.7830': attribute type 13 has an invalid length. [ 739.462818][T28194] netlink: 'syz.1.7830': attribute type 17 has an invalid length. [ 740.248048][T28194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.252210][T28194] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.289128][T28194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 740.402004][T28208] netlink: 'syz.1.7835': attribute type 1 has an invalid length. [ 740.430969][T28208] 8021q: adding VLAN 0 to HW filter on device bond4 [ 740.487577][T28208] bond4: (slave veth19): Enslaving as an active interface with a down link [ 740.524261][T28208] bond3: (slave veth0_to_bond): Releasing active interface [ 740.530501][T28208] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 740.550352][T28208] vlan3: entered allmulticast mode [ 740.552639][T28208] veth0_to_bond: entered promiscuous mode [ 740.555057][T28208] veth0_to_bond: left promiscuous mode [ 740.557339][T28208] veth0_to_bond: entered promiscuous mode [ 740.560535][T28208] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 740.566781][T28208] veth0_to_bond: left promiscuous mode [ 741.191490][T28226] wg2: left promiscuous mode [ 741.193538][T28226] wg2: left allmulticast mode [ 741.201330][T28226] ip6gretap1: left allmulticast mode [ 741.204709][T28226] bond7: left allmulticast mode [ 741.207094][T28226] veth7: left promiscuous mode [ 741.209169][T28226] macsec1: left promiscuous mode [ 741.212483][T28226] macsec1: left allmulticast mode [ 741.214782][T28226] vlan3: left promiscuous mode [ 741.216985][T28226] bond8: left promiscuous mode [ 741.219890][T28226] gretap3: left promiscuous mode [ 741.222274][T28226] vlan3: left allmulticast mode [ 741.223924][T28226] bond8: left allmulticast mode [ 741.225580][T28226] gretap3: left allmulticast mode [ 741.227383][T28226] bond10: left promiscuous mode [ 741.232088][T28226] veth15: left promiscuous mode [ 741.237733][ T88] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 741.241912][ T88] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 741.245096][ T88] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 741.248621][ T88] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 742.142568][T28256] cgroup: fork rejected by pids controller in /syz3 [ 742.998526][T30910] netlink: 'syz.7.7843': attribute type 13 has an invalid length. [ 743.001730][T30910] netlink: 'syz.7.7843': attribute type 17 has an invalid length. [ 743.376333][T30910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.380985][T30910] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.393947][T30910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 743.400951][ T24] lo speed is unknown, defaulting to 1000 [ 743.403378][ T24] syz2: Port: 1 Link ACTIVE [ 743.583400][T31001] tipc: Enabling of bearer rejected, failed to enable media [ 744.833615][T31036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7862'. [ 745.704596][T31096] netlink: 'syz.3.7866': attribute type 4 has an invalid length. [ 745.726292][T31102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7868'. [ 745.791494][T31104] syz_tun: entered allmulticast mode [ 746.811201][T31123] overlayfs: failed to clone upperpath [ 748.315689][T31155] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7884'. [ 748.783259][ T40] audit: type=1326 audit(1760316357.172:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31161 comm="syz.3.7887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 748.807577][ T40] audit: type=1326 audit(1760316357.172:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31161 comm="syz.3.7887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 748.837323][ T40] audit: type=1326 audit(1760316357.192:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31161 comm="syz.3.7887" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 748.848020][ T40] audit: type=1326 audit(1760316357.192:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31161 comm="syz.3.7887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 748.893470][ T40] audit: type=1326 audit(1760316357.192:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31161 comm="syz.3.7887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 748.912257][ T40] audit: type=1326 audit(1760316357.192:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31161 comm="syz.3.7887" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 748.921742][ T40] audit: type=1326 audit(1760316357.192:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31161 comm="syz.3.7887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 748.928832][ T40] audit: type=1326 audit(1760316357.192:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31161 comm="syz.3.7887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 748.936153][ T40] audit: type=1326 audit(1760316357.222:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31161 comm="syz.3.7887" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 748.943092][ T40] audit: type=1326 audit(1760316357.262:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31161 comm="syz.3.7887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 749.020833][ T88] veth0_to_bond: left promiscuous mode [ 749.123706][T31170] geneve4: entered promiscuous mode [ 749.126371][T27789] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.137736][T27789] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.143802][T27789] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.147299][T27789] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.390666][T31175] netlink: 'syz.0.7891': attribute type 1 has an invalid length. [ 749.493187][T31175] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 749.497190][T31175] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 749.552823][T31179] gretap1: entered promiscuous mode [ 749.558874][T31179] bond6: (slave gretap1): making interface the new active one [ 749.562540][T31179] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 749.594754][T31175] macvlan2: entered promiscuous mode [ 749.596459][T31175] macvlan2: entered allmulticast mode [ 749.598554][T31175] bond6: entered promiscuous mode [ 749.600721][T31175] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 749.604780][T31175] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 749.609149][T31175] bond6: left promiscuous mode [ 751.549073][T31217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7903'. [ 751.984756][T31234] 8021q: adding VLAN 0 to HW filter on device bond7 [ 752.021033][T31234] bond7: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 752.034660][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.069744][T27792] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 752.091023][ T88] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 752.111823][ T88] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 752.118087][T31234] 8021q: adding VLAN 0 to HW filter on device bond7 [ 752.316131][T27792] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 753.048843][T27792] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 753.114106][T27792] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 753.266607][T27792] bond3: left allmulticast mode [ 753.268763][T27792] bond3: left promiscuous mode [ 753.271324][T27792] bridge0: port 4(bond3) entered disabled state [ 753.275857][T27792] dummy0: left allmulticast mode [ 753.278015][T27792] dummy0: left promiscuous mode [ 753.282235][T27792] bridge0: port 3(dummy0) entered disabled state [ 753.288946][T27792] bridge_slave_1: left allmulticast mode [ 753.292523][T27792] bridge_slave_1: left promiscuous mode [ 753.295792][T27792] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.304562][T27792] bridge_slave_0: left allmulticast mode [ 753.308949][T27792] bridge_slave_0: left promiscuous mode [ 753.312915][T27792] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.620546][T27792] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 753.876613][T27792] bond4 (unregistering): (slave gretap1): Releasing active interface [ 753.917952][T27792] bond5 (unregistering): (slave gretap2): Releasing active interface [ 754.085308][T27792] bond1 (unregistering): (slave geneve2): Releasing active interface [ 754.945121][T27792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.949411][T27792] bond0 (unregistering): Released all slaves [ 754.959687][T27792] bond1 (unregistering): Released all slaves [ 755.119939][T27792] bond2 (unregistering): Released all slaves [ 755.524466][T27792] bond3 (unregistering): Released all slaves [ 755.541586][T27792] bond4 (unregistering): Released all slaves [ 755.708557][T27792] bond5 (unregistering): Released all slaves [ 755.844848][T27792] bond6 (unregistering): (slave veth3): Releasing active interface [ 755.850000][T27792] bond6 (unregistering): Released all slaves [ 756.110548][T27792] tipc: Left network mode [ 756.325774][T31300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7926'. [ 756.357486][T31300] dummy0: entered promiscuous mode [ 756.362345][T31300] dummy0: left promiscuous mode [ 756.591705][T27792] hsr_slave_0: left promiscuous mode [ 756.594639][T27792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 756.598153][T27792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.548802][T31345] bond7: option mode: unable to set because the bond device has slaves [ 758.557990][T31345] bond_slave_0: entered promiscuous mode [ 758.561165][T31345] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 758.566653][T31345] bond7: (slave macvlan2): Enslaving as a backup interface with an up link [ 758.584833][T31345] bridge_slave_0: left allmulticast mode [ 758.587269][T31345] bridge_slave_0: left promiscuous mode [ 758.590002][T31345] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.600169][T31345] bridge_slave_1: left allmulticast mode [ 758.602758][T31345] bridge_slave_1: left promiscuous mode [ 758.605245][T31345] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.612841][T31345] bond5: (slave veth0_to_bond): Releasing active interface [ 758.626220][T31345] bond0: (slave bond_slave_0): Releasing backup interface [ 758.630796][T31345] bond_slave_0: left promiscuous mode [ 758.637790][T31345] team0: Port device team_slave_1 removed [ 758.643535][T31345] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 758.648789][ T88] bond7: (slave macvlan2): speed changed to 0 on port 2 [ 758.701076][ T88] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 758.723510][T27813] bond7: (slave macvlan2): link status definitely down, disabling slave [ 759.170596][T31354] netlink: 'syz.7.7940': attribute type 1 has an invalid length. [ 759.447424][T31360] bond15: (slave vxcan3): The slave device specified does not support setting the MAC address [ 759.455707][T31360] bond15: (slave vxcan3): Error -95 calling set_mac_address [ 759.485988][T31354] gretap4: entered promiscuous mode [ 759.490782][T31354] bond15: (slave gretap4): making interface the new active one [ 759.493806][T31354] bond15: (slave gretap4): Enslaving as an active interface with an up link [ 759.526460][T31354] macvlan3: entered promiscuous mode [ 759.528427][T31354] macvlan3: entered allmulticast mode [ 759.535640][T31354] bond15: entered promiscuous mode [ 759.539186][T31354] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 759.548703][T31354] bond15: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap4 [ 759.553904][T31354] bond15: left promiscuous mode [ 760.041875][T31372] netlink: 'syz.1.7954': attribute type 1 has an invalid length. [ 760.637281][T27792] bond2 (unregistering): (slave bridge8): Releasing backup interface [ 760.892377][T27792] bond0 (unregistering): Released all slaves [ 761.066556][T27792] bond1 (unregistering): Released all slaves [ 761.077594][T27792] bond2 (unregistering): Released all slaves [ 761.089600][T31372] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 761.107628][T31375] gretap1: entered promiscuous mode [ 761.195535][T27792] tipc: Left network mode [ 762.613571][T27792] hsr_slave_0: left promiscuous mode [ 762.619774][T27792] hsr_slave_1: left promiscuous mode [ 762.634264][T27792] pimreg (unregistering): left allmulticast mode [ 764.268363][T31427] overlayfs: failed to clone upperpath [ 765.417688][T31436] netlink: 'syz.1.7958': attribute type 10 has an invalid length. [ 766.637535][T31430] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 766.648513][T31434] bond4: (slave veth0_to_bond): Releasing active interface [ 766.654030][T31434] bond0: (slave bond_slave_0): Releasing backup interface [ 766.658808][T31434] bond0: (slave bond_slave_1): Releasing backup interface [ 766.668851][T31434] team0: Port device team_slave_0 removed [ 766.674123][T31434] team0: Port device team_slave_1 removed [ 766.676342][T31434] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 766.682368][T31436] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 766.690570][T31436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.698825][T31436] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 766.703135][T31438] tipc: Enabling of bearer rejected, failed to enable media [ 766.988464][T27792] IPVS: stop unused estimator thread 0... [ 767.699369][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 767.699392][ T40] audit: type=1804 audit(1760316376.082:4419): pid=31472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7966" name="bus" dev="tmpfs" ino=13131 res=1 errno=0 [ 774.234014][T31554] ------------[ cut here ]------------ [ 774.236177][T31554] WARNING: CPU: 1 PID: 31554 at mm/shmem.c:1383 shmem_evict_inode+0x8ee/0xbe0 [ 774.238972][T31554] Modules linked in: [ 774.240608][T31554] CPU: 1 UID: 0 PID: 31554 Comm: syz.3.7990 Not tainted syzkaller #0 PREEMPT(full) [ 774.246420][T31554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 774.249938][T31554] RIP: 0010:shmem_evict_inode+0x8ee/0xbe0 [ 774.251762][T31554] Code: fe e8 16 f0 bc ff 45 85 ff 75 ac e8 cc f4 bc ff 48 8b 74 24 28 48 8b 7c 24 30 e8 5d 1a 95 ff e9 e5 fd ff ff e8 b3 f4 bc ff 90 <0f> 0b 90 e9 51 f9 ff ff e8 a5 f4 bc ff 4c 89 e2 48 b8 00 00 00 00 [ 774.257925][T31554] RSP: 0000:ffffc9000d27f7b8 EFLAGS: 00010293 [ 774.260505][T31554] RAX: 0000000000000000 RBX: ffff8880231e0180 RCX: ffffffff81ffacfe [ 774.263714][T31554] RDX: ffff888075b14900 RSI: ffffffff81ffb3ad RDI: 0000000000000007 [ 774.267229][T31554] RBP: ffffc9000d27f8e0 R08: 0000000000000007 R09: 0000000000000000 [ 774.270721][T31554] R10: 0000000000000008 R11: 0000000000000001 R12: 0000000000000008 [ 774.273947][T31554] R13: 0000000000000000 R14: ffff8880231e01b0 R15: ffff8880231e0070 [ 774.277110][T31554] FS: 0000000000000000(0000) GS:ffff8880978e1000(0000) knlGS:0000000000000000 [ 774.280874][T31554] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 774.283767][T31554] CR2: 00000000f5494bac CR3: 000000000e182000 CR4: 0000000000352ef0 [ 774.287355][T31554] Call Trace: [ 774.288516][T31554] [ 774.289536][T31554] ? kasan_save_stack+0x42/0x60 [ 774.291173][T31554] ? __pfx_shmem_evict_inode+0x10/0x10 [ 774.293414][T31554] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 774.296062][T31554] ? find_held_lock+0x2b/0x80 [ 774.298493][T31554] ? evict+0x3a2/0x920 [ 774.300527][T31554] ? __pfx_shmem_evict_inode+0x10/0x10 [ 774.302682][T31554] evict+0x3e6/0x920 [ 774.304344][T31554] ? __pfx_evict+0x10/0x10 [ 774.305910][T31554] ? iput.part.0+0x6a1/0xb00 [ 774.307640][T31554] iput.part.0+0x6a9/0xb00 [ 774.309519][T31554] ? __pfx_inode_just_drop+0x10/0x10 [ 774.311693][T31554] iput+0x35/0x40 [ 774.313217][T31554] dentry_unlink_inode+0x29c/0x480 [ 774.315711][T31554] __dentry_kill+0x1d0/0x600 [ 774.318154][T31554] dput.part.0+0x4b1/0x9b0 [ 774.320335][T31554] dput+0x1f/0x30 [ 774.321934][T31554] __fput+0x51c/0xb70 [ 774.323625][T31554] ? _raw_spin_unlock_irq+0x23/0x50 [ 774.325850][T31554] task_work_run+0x150/0x240 [ 774.327796][T31554] ? __pfx_task_work_run+0x10/0x10 [ 774.330060][T31554] do_exit+0x86f/0x2bf0 [ 774.331832][T31554] ? rcu_is_watching+0x12/0xc0 [ 774.333864][T31554] ? irqentry_exit+0x3b/0x90 [ 774.336034][T31554] ? proc_coredump_connector+0x2d1/0x4f0 [ 774.338855][T31554] ? __pfx_do_exit+0x10/0x10 [ 774.341069][T31554] do_group_exit+0xd3/0x2a0 [ 774.343034][T31554] get_signal+0x2671/0x26d0 [ 774.344876][T31554] ? force_sig_fault+0xc4/0x100 [ 774.347022][T31554] ? __pfx_get_signal+0x10/0x10 [ 774.349112][T31554] arch_do_signal_or_restart+0x8f/0x790 [ 774.351460][T31554] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 774.353891][T31554] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 774.356752][T31554] irqentry_exit_to_user_mode+0x176/0x310 [ 774.359742][T31554] asm_exc_page_fault+0x26/0x30 [ 774.361866][T31554] RIP: 0023:0xf7fe7579 [ 774.363666][T31554] Code: Unable to access opcode bytes at 0xf7fe754f. [ 774.366458][T31554] RSP: 002b:0000000000000030 EFLAGS: 00010286 [ 774.369346][T31554] RAX: 0000000000000000 RBX: 000000002910a000 RCX: 0000000000000030 [ 774.373578][T31554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 774.377132][T31554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 774.380613][T31554] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 774.383977][T31554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 774.386624][T31554] [ 774.387620][T31554] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 774.389987][T31554] CPU: 1 UID: 0 PID: 31554 Comm: syz.3.7990 Not tainted syzkaller #0 PREEMPT(full) [ 774.393408][T31554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 774.397799][T31554] Call Trace: [ 774.399660][T31554] [ 774.400878][T31554] dump_stack_lvl+0x3d/0x1f0 [ 774.402806][T31554] vpanic+0x640/0x6f0 [ 774.404475][T31554] ? shmem_evict_inode+0x8ee/0xbe0 [ 774.406543][T31554] panic+0xca/0xd0 [ 774.408243][T31554] ? __pfx_panic+0x10/0x10 [ 774.409826][T31554] ? check_panic_on_warn+0x1f/0xb0 [ 774.411716][T31554] check_panic_on_warn+0xab/0xb0 [ 774.413780][T31554] __warn+0xf6/0x3c0 [ 774.415052][T31554] ? shmem_evict_inode+0x8ee/0xbe0 [ 774.416802][T31554] report_bug+0x3c3/0x580 [ 774.418301][T31554] ? shmem_evict_inode+0x8ee/0xbe0 [ 774.419904][T31554] handle_bug+0x184/0x210 [ 774.421301][T31554] exc_invalid_op+0x17/0x50 [ 774.422749][T31554] asm_exc_invalid_op+0x1a/0x20 [ 774.424280][T31554] RIP: 0010:shmem_evict_inode+0x8ee/0xbe0 [ 774.426151][T31554] Code: fe e8 16 f0 bc ff 45 85 ff 75 ac e8 cc f4 bc ff 48 8b 74 24 28 48 8b 7c 24 30 e8 5d 1a 95 ff e9 e5 fd ff ff e8 b3 f4 bc ff 90 <0f> 0b 90 e9 51 f9 ff ff e8 a5 f4 bc ff 4c 89 e2 48 b8 00 00 00 00 [ 774.432264][T31554] RSP: 0000:ffffc9000d27f7b8 EFLAGS: 00010293 [ 774.434197][T31554] RAX: 0000000000000000 RBX: ffff8880231e0180 RCX: ffffffff81ffacfe [ 774.436713][T31554] RDX: ffff888075b14900 RSI: ffffffff81ffb3ad RDI: 0000000000000007 [ 774.439159][T31554] RBP: ffffc9000d27f8e0 R08: 0000000000000007 R09: 0000000000000000 [ 774.441636][T31554] R10: 0000000000000008 R11: 0000000000000001 R12: 0000000000000008 [ 774.444077][T31554] R13: 0000000000000000 R14: ffff8880231e01b0 R15: ffff8880231e0070 [ 774.446611][T31554] ? shmem_evict_inode+0x23e/0xbe0 [ 774.448272][T31554] ? shmem_evict_inode+0x8ed/0xbe0 [ 774.450004][T31554] ? shmem_evict_inode+0x8ed/0xbe0 [ 774.451749][T31554] ? kasan_save_stack+0x42/0x60 [ 774.453370][T31554] ? __pfx_shmem_evict_inode+0x10/0x10 [ 774.455132][T31554] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 774.457022][T31554] ? find_held_lock+0x2b/0x80 [ 774.458496][T31554] ? evict+0x3a2/0x920 [ 774.459782][T31554] ? __pfx_shmem_evict_inode+0x10/0x10 [ 774.461523][T31554] evict+0x3e6/0x920 [ 774.462762][T31554] ? __pfx_evict+0x10/0x10 [ 774.464215][T31554] ? iput.part.0+0x6a1/0xb00 [ 774.465796][T31554] iput.part.0+0x6a9/0xb00 [ 774.467244][T31554] ? __pfx_inode_just_drop+0x10/0x10 [ 774.468918][T31554] iput+0x35/0x40 [ 774.470088][T31554] dentry_unlink_inode+0x29c/0x480 [ 774.471708][T31554] __dentry_kill+0x1d0/0x600 [ 774.473153][T31554] dput.part.0+0x4b1/0x9b0 [ 774.474555][T31554] dput+0x1f/0x30 [ 774.475715][T31554] __fput+0x51c/0xb70 [ 774.476972][T31554] ? _raw_spin_unlock_irq+0x23/0x50 [ 774.478605][T31554] task_work_run+0x150/0x240 [ 774.480063][T31554] ? __pfx_task_work_run+0x10/0x10 [ 774.481714][T31554] do_exit+0x86f/0x2bf0 [ 774.483044][T31554] ? rcu_is_watching+0x12/0xc0 [ 774.484657][T31554] ? irqentry_exit+0x3b/0x90 [ 774.486266][T31554] ? proc_coredump_connector+0x2d1/0x4f0 [ 774.488192][T31554] ? __pfx_do_exit+0x10/0x10 [ 774.489694][T31554] do_group_exit+0xd3/0x2a0 [ 774.491595][T31554] get_signal+0x2671/0x26d0 [ 774.493405][T31554] ? force_sig_fault+0xc4/0x100 [ 774.495328][T31554] ? __pfx_get_signal+0x10/0x10 [ 774.496959][T31554] arch_do_signal_or_restart+0x8f/0x790 [ 774.498780][T31554] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 774.500979][T31554] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 774.503134][T31554] irqentry_exit_to_user_mode+0x176/0x310 [ 774.505062][T31554] asm_exc_page_fault+0x26/0x30 [ 774.506609][T31554] RIP: 0023:0xf7fe7579 [ 774.507910][T31554] Code: Unable to access opcode bytes at 0xf7fe754f. [ 774.509987][T31554] RSP: 002b:0000000000000030 EFLAGS: 00010286 [ 774.511961][T31554] RAX: 0000000000000000 RBX: 000000002910a000 RCX: 0000000000000030 [ 774.514499][T31554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 774.517073][T31554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 774.519620][T31554] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 774.522108][T31554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 774.524570][T31554] [ 774.526323][T31554] Kernel Offset: disabled [ 774.527732][T31554] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:46:13 Registers: info registers vcpu 0 CPU#0 RAX=9ee5988421400fa7 RBX=ffff88802202c900 RCX=ffffffff81c4a7ef RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8dbf256c RBP=0000000000000282 RSP=ffffc90002166fa8 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff908363d7 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000000 R15=ffff888012a29000 RIP=ffffffff8b630b50 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977e1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f747c69c CR3=00000000649fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852db115 RDI=ffffffff9adf1e40 RBP=ffffffff9adf1e00 RSP=ffffc9000d27f120 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9adf1e00 R15=ffffffff852db0b0 RIP=ffffffff852db13f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978e1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5494bac CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 54ec521677e5268e ccd89c1dfab9b52f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 47530e4d99932108 480c024482e30c61 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a28163450efea784 e62560c92cbb67a2 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73664b34300758a8 f19c93bff7ee32f7 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002900 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e85c6b30e8810a18 000001d5e89557e6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010000800100 00800100e8a31e70 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001d500800100 e86df91e000001d5 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00800100000001d5 000001d500800100 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 21cd44946779be1f 0840cb7ee8dee434 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2639099bccece94f 93b1530ee7eea30b ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffc9000d6de254 RDX=1ffff1100476f9b1 RSI=ffffffff8dada7dd RDI=ffff888023b7cd88 RBP=ffff888023b7c900 RSP=ffffc9000d6de260 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=00000000000116c0 R12=ffff888023b7c900 R13=ffffc9000d6de300 R14=ffffc9000d6df378 R15=ffffc9000d6de334 RIP=ffffffff81a2c45c RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979e1000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f317e2a7407 CR3=0000000069c37000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff820cfbe9 ffffffff820ba1e8 ffffffff81f42f2e ffffffff821a1efb ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81815738 ffffffff81fea252 ffffffff8181503b ffffffff81850e62 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8237e40a ffffffff89769fd1 ffffffff89a385e7 ffffffff897c767a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8976c440 ffffffff84761a68 ffffffff81ff5456 ffffffff820ceb3c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81fe9a87 ffffffff894504fe ffffffff8976afdb ffffffff892c578c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8236c42c ffffffff823c7fbd ffffffff823c7766 ffffffff81850ee1 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff897c7af7 ffffffff81850f75 ffffffff81816a15 ffffffff892cce9b ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff897c790e ffffffff824f7a25 ffffffff8220d063 ffffffff8976c440 ZMM25=9eefc7ed9eefc7ed 9eefc7ed9eefc7ed 9eefc7ed9eefc7ed 9eefc7ed9eefc7ed 9eefc7ed9eefc7ed 9eefc7ed9eefc7ed 9eefc7ed9eefc7ed 9eefc7ed9eefc7ed ZMM26=4733277347332773 4733277347332773 4733277347332773 4733277347332773 4733277347332773 4733277347332773 4733277347332773 4733277347332773 ZMM27=e592d287e592d287 e592d287e592d287 e592d287e592d287 e592d287e592d287 e592d287e592d287 e592d287e592d287 e592d287e592d287 e592d287e592d287 ZMM28=000001800000017f 0000017e0000017d 0000017c0000017b 0000017a00000179 0000017800000177 0000017600000175 0000017400000173 0000017200000171 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3655000036550000 3655000036550000 3655000036550000 3655000036550000 3655000036550000 3655000036550000 3655000036550000 3655000036550000 info registers vcpu 3 CPU#3 RAX=ffff88801322fd58 RBX=0000000000000002 RCX=ffffffff8198ec7c RDX=1ffff11002645fab RSI=0000000000000000 RDI=ffff888022f76910 RBP=ffffc9000c14ea88 RSP=ffffc9000c14e960 R8 =0000000000000001 R9 =fffff52001829d1a R10=0000000000000003 R11=0000000000000001 R12=dffffc0000000000 R13=ffff88804d212000 R14=ffff88801322fd58 R15=ffff88804d213000 RIP=ffffffff84b0fc7d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097ae1000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7329c3c CR3=0000000069c37000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000