last executing test programs: 5.619531028s ago: executing program 3 (id=3737): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0x3c) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000000)={0xffffffffffffffff, 0x8001, 0x7, 0x8000000000000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x578}], 0x1) 5.428653203s ago: executing program 3 (id=3739): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000080)={0xd46, 0x3, 0x6, 0x7}, 0x8) sendmmsg$inet6(r5, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x1, @loopback, 0x4}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000005c0)="9b", 0x1}], 0x1}}], 0x1, 0x8044) add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000400)="1b2556fe", 0x4, 0xfffffffffffffffe) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000044c0)={0x14, 0x4e, 0x1, 0x70bd2d, 0xfffffffe, {0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.956072637s ago: executing program 3 (id=3744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000000)={0xffffffffffffffff, 0x8001, 0x7, 0x8000000000000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x578}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x16f, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045de016100660000802f"], 0x0) 3.423946876s ago: executing program 2 (id=3748): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000340)='cbc(cast6)\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x3dcc, 0x40, 0x0, 0xf7}) socket$packet(0x11, 0x3, 0x300) inotify_init() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4000}]}}}]}, 0x3c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xa000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x1, 0xff}) 3.233556259s ago: executing program 2 (id=3749): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x8, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180", @ANYRESHEX=r1, @ANYRESOCT], 0x18}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x2, &(0x7f0000000000)=0x3483, 0x3ff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) 2.968128405s ago: executing program 0 (id=3750): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000000340)=[{{&(0x7f0000000380)={0x2, 0x4e01, @loopback}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r3, @multicast1, @multicast2}}}], 0x18}}], 0x2, 0xe814) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x2a, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xac, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x3, 0x7, {{0x1a, 0x4, 0x2, 0x3f, 0x68, 0x66, 0x0, 0x43, 0x2f, 0x0, @empty, @empty, {[@cipso={0x86, 0x33, 0x0, [{0x6, 0xa, "e8539d23492b3d3b"}, {0x2, 0x2}, {0x1, 0xf, "dda7c6605d402283485007fe7f"}, {0x7, 0x9, '\":ph_G&'}, {0x2, 0x7, "2b0864aa37"}, {0x5, 0x2}]}, @end, @generic={0x44, 0x3, "bd"}, @timestamp_prespec={0x44, 0x1c, 0xc7, 0x3, 0x7, [{@empty, 0xe8f9}, {@dev={0xac, 0x14, 0x14, 0x3a}}, {@rand_addr=0x64010101, 0xfffffffd}]}]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x4b, &(0x7f0000000400)={@multicast1, @multicast1}, &(0x7f00000006c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6gre0\x00', 0x0, 0x2f, 0xf5, 0x5, 0x7, 0x44, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x0, 0x10, 0x7, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000940)={'erspan0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x8, 0x10, 0x9, 0x2, {{0x36, 0x4, 0x1, 0x0, 0xd8, 0x65, 0x0, 0x4, 0x29, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x17, 0x3b, [@broadcast, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x11}, @broadcast, @local]}, @end, @lsrr={0x83, 0xb, 0xfc, [@local, @dev={0xac, 0x14, 0x14, 0xd}]}, @cipso={0x86, 0x72, 0x1, [{0x1, 0xf, "9243af39d618f318f47a2cf95b"}, {0x1, 0x8, "d5547e9fb3d3"}, {0x2, 0xc, "57a45a706b54aa532131"}, {0x0, 0xb, "ab91e0a23f26f88279"}, {0x1, 0xa, "4a3ac640559d39b4"}, {0x7, 0x10, "907b575273251e721d797f8cbcac"}, {0x6, 0x9, "92ca43417d482d"}, {0x0, 0xa, "28c95e14a387d72a"}, {0x7, 0x11, "d6a3180230da712da094150c46c581"}]}, @ssrr={0x89, 0xb, 0x6d, [@remote, @dev={0xac, 0x14, 0x14, 0x38}]}, @end, @ssrr={0x89, 0x23, 0x31, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010102, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.943165108s ago: executing program 3 (id=3751): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x10000000, 0x8c0, 0x80000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x26d7, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x184, 0x1}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x64, 0x0) 2.717967549s ago: executing program 0 (id=3752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x80}}, 0x0) syz_emit_ethernet(0x16f, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045de016100660000802f"], 0x0) 2.612267524s ago: executing program 0 (id=3753): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000000340)=[{{&(0x7f0000000380)={0x2, 0x4e01, @loopback}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r4, @multicast1, @multicast2}}}], 0x18}}], 0x2, 0xe814) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x2a, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xac, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x20, 0x81, 0xcb, r8}, [@IFA_FLAGS={0x8, 0x8, 0x534}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}]}, 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x3, 0x7, {{0xd, 0x4, 0x2, 0x3f, 0x34, 0x66, 0x0, 0x43, 0x2f, 0x0, @empty, @empty, {[@end, @generic={0x44, 0x3, "bd"}, @timestamp_prespec={0x44, 0x1c, 0xc7, 0x3, 0x7, [{@empty, 0xe8f9}, {@dev={0xac, 0x14, 0x14, 0x3a}}, {@rand_addr=0x64010101, 0xfffffffd}]}]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x4b, &(0x7f0000000400)={@multicast1, @multicast1, 0x0}, &(0x7f00000006c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6gre0\x00', 0x0, 0x2f, 0xf5, 0x5, 0x7, 0x44, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x0, 0x10, 0x7, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000940)={'erspan0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x8, 0x10, 0x9, 0x2, {{0x36, 0x4, 0x1, 0x0, 0xd8, 0x65, 0x0, 0x4, 0x29, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x17, 0x3b, [@broadcast, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x11}, @broadcast, @local]}, @end, @lsrr={0x83, 0xb, 0xfc, [@local, @dev={0xac, 0x14, 0x14, 0xd}]}, @cipso={0x86, 0x72, 0x1, [{0x1, 0xf, "9243af39d618f318f47a2cf95b"}, {0x1, 0x8, "d5547e9fb3d3"}, {0x2, 0xc, "57a45a706b54aa532131"}, {0x0, 0xb, "ab91e0a23f26f88279"}, {0x1, 0xa, "4a3ac640559d39b4"}, {0x7, 0x10, "907b575273251e721d797f8cbcac"}, {0x6, 0x9, "92ca43417d482d"}, {0x0, 0xa, "28c95e14a387d72a"}, {0x7, 0x11, "d6a3180230da712da094150c46c581"}]}, @ssrr={0x89, 0xb, 0x6d, [@remote, @dev={0xac, 0x14, 0x14, 0x38}]}, @end, @ssrr={0x89, 0x23, 0x31, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010102, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x198, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x48}, 0x84) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.589923488s ago: executing program 0 (id=3754): r0 = socket$inet6(0xa, 0x3, 0x3c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000000)={0xffffffffffffffff, 0x8001, 0x7, 0x8000000000000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x578}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x16f, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045de016100660000802f"], 0x0) 2.084129451s ago: executing program 2 (id=3757): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}, {0x0}], 0x2, 0x6c, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x44}}, 0x0) 1.721993611s ago: executing program 2 (id=3758): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x50) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}, {0x0}], 0x2, 0x6c, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x44}}, 0x0) 1.64044553s ago: executing program 0 (id=3759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000000)={0xffffffffffffffff, 0x8001, 0x7, 0x8000000000000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x578}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x16f, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045de016100660000802f"], 0x0) 1.597830248s ago: executing program 3 (id=3760): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07, 0x0, 0xff1f0000}, 0x2000000) close(0xffffffffffffffff) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x8818) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r9, 0x4018f50b, &(0x7f0000000140)={0x0, 0xd, 0x91}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 1.527594738s ago: executing program 1 (id=3761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x80}}, 0x0) syz_emit_ethernet(0x16f, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045de016100660000802f"], 0x0) 1.523048764s ago: executing program 1 (id=3762): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000000340)=[{{&(0x7f0000000380)={0x2, 0x4e01, @loopback}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r4, @multicast1, @multicast2}}}], 0x18}}], 0x2, 0xe814) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x2a, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xac, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x20, 0x81, 0xcb, r8}, [@IFA_FLAGS={0x8, 0x8, 0x534}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}]}, 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x3, 0x7, {{0xd, 0x4, 0x2, 0x3f, 0x34, 0x66, 0x0, 0x43, 0x2f, 0x0, @empty, @empty, {[@end, @generic={0x44, 0x3, "bd"}, @timestamp_prespec={0x44, 0x1c, 0xc7, 0x3, 0x7, [{@empty, 0xe8f9}, {@dev={0xac, 0x14, 0x14, 0x3a}}, {@rand_addr=0x64010101, 0xfffffffd}]}]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x4b, &(0x7f0000000400)={@multicast1, @multicast1, 0x0}, &(0x7f00000006c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6gre0\x00', 0x0, 0x2f, 0xf5, 0x5, 0x7, 0x44, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x0, 0x10, 0x7, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000940)={'erspan0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x8, 0x10, 0x9, 0x2, {{0x36, 0x4, 0x1, 0x0, 0xd8, 0x65, 0x0, 0x4, 0x29, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x17, 0x3b, [@broadcast, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x11}, @broadcast, @local]}, @end, @lsrr={0x83, 0xb, 0xfc, [@local, @dev={0xac, 0x14, 0x14, 0xd}]}, @cipso={0x86, 0x72, 0x1, [{0x1, 0xf, "9243af39d618f318f47a2cf95b"}, {0x1, 0x8, "d5547e9fb3d3"}, {0x2, 0xc, "57a45a706b54aa532131"}, {0x0, 0xb, "ab91e0a23f26f88279"}, {0x1, 0xa, "4a3ac640559d39b4"}, {0x7, 0x10, "907b575273251e721d797f8cbcac"}, {0x6, 0x9, "92ca43417d482d"}, {0x0, 0xa, "28c95e14a387d72a"}, {0x7, 0x11, "d6a3180230da712da094150c46c581"}]}, @ssrr={0x89, 0xb, 0x6d, [@remote, @dev={0xac, 0x14, 0x14, 0x38}]}, @end, @ssrr={0x89, 0x23, 0x31, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010102, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x198, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x48}, 0x84) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.289954142s ago: executing program 2 (id=3763): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) 1.287317482s ago: executing program 1 (id=3771): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000000340)=[{{&(0x7f0000000380)={0x2, 0x4e01, @loopback}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r4, @multicast1, @multicast2}}}], 0x18}}], 0x2, 0xe814) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x2a, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xac, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x20, 0x81, 0xcb, r8}, [@IFA_FLAGS={0x8, 0x8, 0x534}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}]}, 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x3, 0x7, {{0xf, 0x4, 0x2, 0x3f, 0x3c, 0x66, 0x0, 0x43, 0x2f, 0x0, @empty, @empty, {[@cipso={0x86, 0x6}, @end, @generic={0x44, 0x3, "bd"}, @timestamp_prespec={0x44, 0x1c, 0xc7, 0x3, 0x7, [{@empty, 0xe8f9}, {@dev={0xac, 0x14, 0x14, 0x3a}}, {@rand_addr=0x64010101, 0xfffffffd}]}]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x4b, &(0x7f0000000400)={@multicast1, @multicast1, 0x0}, &(0x7f00000006c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6gre0\x00', 0x0, 0x2f, 0xf5, 0x5, 0x7, 0x44, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x0, 0x10, 0x7, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000940)={'erspan0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x8, 0x10, 0x9, 0x2, {{0x36, 0x4, 0x1, 0x0, 0xd8, 0x65, 0x0, 0x4, 0x29, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x17, 0x3b, [@broadcast, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x11}, @broadcast, @local]}, @end, @lsrr={0x83, 0xb, 0xfc, [@local, @dev={0xac, 0x14, 0x14, 0xd}]}, @cipso={0x86, 0x72, 0x1, [{0x1, 0xf, "9243af39d618f318f47a2cf95b"}, {0x1, 0x8, "d5547e9fb3d3"}, {0x2, 0xc, "57a45a706b54aa532131"}, {0x0, 0xb, "ab91e0a23f26f88279"}, {0x1, 0xa, "4a3ac640559d39b4"}, {0x7, 0x10, "907b575273251e721d797f8cbcac"}, {0x6, 0x9, "92ca43417d482d"}, {0x0, 0xa, "28c95e14a387d72a"}, {0x7, 0x11, "d6a3180230da712da094150c46c581"}]}, @ssrr={0x89, 0xb, 0x6d, [@remote, @dev={0xac, 0x14, 0x14, 0x38}]}, @end, @ssrr={0x89, 0x23, 0x31, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010102, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x198, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x48}, 0x84) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.25444685s ago: executing program 1 (id=3764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) setresgid(0xee00, 0xee01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) setregid(0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) 1.070213185s ago: executing program 1 (id=3765): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000011400"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000000130a0300002f0ff807000000020000040900020073797a270000000008000200000000000000010073797a30000000009fe3c6d47bea38c7d10975fe5a5ce9307acf49f6e05b30da2046361ff1a7fbff0313e0977caca40ae142613d843c860656613b7083629f3c350b2ab5dbcd9c070a6a8a69985519ec67a2dcf3d520cd31649ed5a959292f1ae4773136c79772792fd0511158fe29ba1c7747dd6f0475f0dd86ed2015f1b4b93794f91e1a806856597fdc8ae204ccf90a203538e5c2e6a83e26763b3840af6ee9fe1aef"], 0x34}}, 0x4000040) sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="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", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x6, 0x11, 0x1bc, 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0xba01}, 0x0) 684.789556ms ago: executing program 0 (id=3766): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00'/23], 0x50) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000001480)="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", 0x105, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x8007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x4c}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000001dc0)={@broadcast, @dev, @void, {@ipv4={0x86dd, @generic={{0x5, 0x4, 0x3, 0x4, 0x14, 0x68, 0x0, 0x7, 0x1d, 0x0, @multicast2, @multicast2}}}}}, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x401070c9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x10001, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kexec_load(0x5, 0x3, &(0x7f0000001080), 0x3e0000) 515.10817ms ago: executing program 3 (id=3767): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x40086602, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmdt(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xf, 0x2a, [@random={0xdd, 0x9, 'abcdefghi'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x3c}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001000000000904000015030000", @ANYRES8], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r6) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x40}}, @void}, 0x3f) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 284.360711ms ago: executing program 2 (id=3768): r0 = socket$inet6(0xa, 0x3, 0x3c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000000)={0xffffffffffffffff, 0x8001, 0x7, 0x8000000000000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x578}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x16f, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045de016100660000802f"], 0x0) 0s ago: executing program 1 (id=3769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x3c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000000)={0xffffffffffffffff, 0x8001, 0x7, 0x8000000000000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x578}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x16f, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045de016100660000802f"], 0x0) kernel console output (not intermixed with test programs): z-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 700.773174][ T40] audit: type=1326 audit(1756912060.749:7393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19253 comm="syz.0.2531" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 700.780875][ T40] audit: type=1326 audit(1756912060.749:7394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19253 comm="syz.0.2531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 700.802509][T10812] usb 42-1: device descriptor read/8, error -110 [ 701.488844][T10812] usb usb42-port1: attempt power cycle [ 701.881736][T19270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2533'. [ 701.885089][T19270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2533'. [ 702.087716][T10812] usb usb42-port1: unable to enumerate USB device [ 702.550414][T19278] netlink: 'syz.0.2535': attribute type 4 has an invalid length. [ 703.039275][T19289] infiniband syz!: set down [ 703.042252][T19289] infiniband syz!: added team_slave_0 [ 703.064502][T19291] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 703.093515][T19289] RDS/IB: syz!: added [ 703.094947][T19289] smc: adding ib device syz! with port count 1 [ 703.097063][T19289] smc: ib device syz! port 1 has pnetid [ 704.129202][T19311] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2541'. [ 704.162176][T19311] batadv0: entered allmulticast mode [ 704.703381][T19315] netlink: 'syz.3.2545': attribute type 4 has an invalid length. [ 704.849693][T19322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2546'. [ 704.853582][T19322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2546'. [ 704.914881][T19326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2547'. [ 705.585410][T19335] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 705.587484][T19335] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 705.593879][T19335] vhci_hcd vhci_hcd.0: Device attached [ 706.262902][T19336] vhci_hcd: connection closed [ 706.263111][ T8130] vhci_hcd: stop threads [ 706.265967][ T8130] vhci_hcd: release socket [ 706.269209][ T8130] vhci_hcd: disconnect device [ 706.357182][T10812] usb 38-1: enqueue for inactive port 0 [ 706.439468][T19352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2552'. [ 706.448747][T19352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2552'. [ 706.605995][ T40] kauditd_printk_skb: 152 callbacks suppressed [ 706.606007][ T40] audit: type=1800 audit(1756912066.258:7547): pid=19357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2551" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 706.892985][T10812] usb usb38-port1: attempt power cycle [ 707.026515][T19361] netlink: 'syz.0.2554': attribute type 4 has an invalid length. [ 707.518468][T10812] usb usb38-port1: unable to enumerate USB device [ 707.689410][T19381] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2556'. [ 707.834438][T19381] batadv1: entered allmulticast mode [ 707.885207][T19387] input: syz0 as /devices/virtual/input/input18 [ 708.091545][T19380] futex_wake_op: syz.3.2557 tries to shift op by -1; fix this program [ 708.155937][T19394] tipc: Resetting bearer [ 708.324033][T19394] team0: Mode changed to "loadbalance" [ 709.605761][T19414] netlink: 'syz.3.2565': attribute type 4 has an invalid length. [ 709.677807][T19417] vxcan1 speed is unknown, defaulting to 1000 [ 709.935887][T19417] lo speed is unknown, defaulting to 1000 [ 710.232230][T19424] netlink: 'syz.3.2568': attribute type 4 has an invalid length. [ 711.037369][T19435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2570'. [ 711.041663][T19435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2570'. [ 711.778837][T19452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2573'. [ 711.782770][T19452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2573'. [ 712.898452][T19472] vlan0: entered promiscuous mode [ 713.924547][T19482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2580'. [ 713.928900][T19482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2580'. [ 714.113801][ T40] audit: type=1326 audit(1756912073.283:7548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19476 comm="syz.3.2578" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70be579 code=0x0 [ 714.143205][T19488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2581'. [ 714.152070][T19488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2581'. [ 714.730142][T10812] libceph: connect (1)[c::]:6789 error -101 [ 714.732202][T10812] libceph: mon0 (1)[c::]:6789 connect error [ 714.781147][T19501] ceph: No mds server is up or the cluster is laggy [ 715.021556][T19510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2584'. [ 715.028656][T19510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2584'. [ 715.302237][T19517] netlink: 'syz.3.2587': attribute type 4 has an invalid length. [ 715.348174][T19521] netlink: 'syz.2.2585': attribute type 4 has an invalid length. [ 715.359758][T19522] vxcan1 speed is unknown, defaulting to 1000 [ 715.399073][T19525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2586'. [ 715.403334][T19525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2586'. [ 715.560403][T19522] lo speed is unknown, defaulting to 1000 [ 715.638608][T19532] futex_wake_op: syz.1.2590 tries to shift op by -1; fix this program [ 716.092101][T19543] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2588'. [ 716.098230][T19543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.121115][T19544] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 716.670881][T19556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2594'. [ 716.794413][ T40] audit: type=1800 audit(1756912075.790:7549): pid=19560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2601" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 717.201280][T19565] netlink: 'syz.2.2595': attribute type 4 has an invalid length. [ 717.240518][T19567] netlink: 'syz.2.2596': attribute type 4 has an invalid length. [ 717.304324][T19569] netlink: 'syz.2.2597': attribute type 4 has an invalid length. [ 718.253248][T19578] netlink: 'syz.1.2599': attribute type 5 has an invalid length. [ 718.285977][T19578] geneve2: entered promiscuous mode [ 718.287706][T19578] geneve2: entered allmulticast mode [ 718.295067][ T1138] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 718.301545][ T1138] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 718.313268][ T1138] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 718.316773][ T1138] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 719.369338][T19599] netlink: 'syz.2.2607': attribute type 4 has an invalid length. [ 719.400804][T19600] __nla_validate_parse: 4 callbacks suppressed [ 719.400824][T19600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2606'. [ 719.418392][T19600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2606'. [ 719.730404][T19609] block nbd2: Attempted send on invalid socket [ 719.733249][T19609] blk_print_req_error: 10 callbacks suppressed [ 719.733323][T19609] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 719.742131][T19609] vxfs: unable to read disk superblock at 1 [ 719.747007][T19609] block nbd2: Attempted send on invalid socket [ 719.750432][T19609] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 719.756384][T19609] vxfs: unable to read disk superblock at 8 [ 719.759608][T19609] vxfs: can't find superblock. [ 720.455000][T19614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 720.460168][T19614] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 720.460168][T19614] program syz.0.2609 not setting count and/or reply_len properly [ 721.583702][ T40] audit: type=1800 audit(1756912080.270:7550): pid=19627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2611" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 723.761066][T19908] vxcan1 speed is unknown, defaulting to 1000 [ 723.868726][T19908] lo speed is unknown, defaulting to 1000 [ 724.179894][T19919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2619'. [ 724.185731][T19919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2619'. [ 725.528700][T19944] binder: BINDER_SET_CONTEXT_MGR already set [ 725.531063][T19944] binder: 19941:19944 ioctl 4018620d 80000040 returned -16 [ 725.722057][T19944] input: syz1 as /devices/virtual/input/input19 [ 726.474142][ T40] audit: type=1800 audit(1756912084.835:7551): pid=19957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2625" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 726.616189][T19955] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2624'. [ 726.640076][T19955] batadv1: entered allmulticast mode [ 727.956945][T19984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2627'. [ 727.962165][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2627'. [ 728.599956][T20001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2631'. [ 728.605869][T20001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2631'. [ 728.839957][T20006] netlink: 'syz.0.2632': attribute type 4 has an invalid length. [ 729.100801][T20008] tipc: Resetting bearer [ 729.123789][ T1021] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 729.125586][T20008] team0: Mode changed to "loadbalance" [ 729.169254][T20013] netlink: 'syz.1.2635': attribute type 4 has an invalid length. [ 729.289378][T20016] Process accounting resumed [ 729.506350][T20021] netlink: 'syz.1.2639': attribute type 4 has an invalid length. [ 729.506864][T20024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2638'. [ 729.517745][T20024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2638'. [ 729.529990][ T1021] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 729.869904][T20034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2641'. [ 729.877558][T20034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2641'. [ 730.756273][T20040] bond0: (slave bond_slave_0): Releasing backup interface [ 730.774134][T20040] bond0: (slave bond_slave_1): Releasing backup interface [ 730.784618][T20040] team0: Port device team_slave_0 removed [ 730.806862][T20040] team0: Port device team_slave_1 removed [ 730.812979][T20040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.817641][T20040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.844786][T20040] bond1: (slave ip6gretap1): Removing an active aggregator [ 730.860675][T20040] bond1: (slave ip6gretap1): Releasing backup interface [ 730.863629][T20040] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 3a:b2:c2:2f:d3:8a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 730.883129][T20040] bond1: (slave veth3): Releasing backup interface [ 730.896052][T20045] team0: Mode changed to "loadbalance" [ 730.958316][T20049] netlink: 'syz.0.2646': attribute type 4 has an invalid length. [ 731.019031][T20051] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 731.088643][T20054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2647'. [ 731.166185][T20062] netlink: 'syz.1.2649': attribute type 4 has an invalid length. [ 731.255403][T20069] netlink: 'syz.0.2659': attribute type 4 has an invalid length. [ 731.441730][T20065] vxcan1 speed is unknown, defaulting to 1000 [ 731.525541][T20065] lo speed is unknown, defaulting to 1000 [ 732.115466][T20084] __nla_validate_parse: 1 callbacks suppressed [ 732.115477][T20084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2654'. [ 732.128307][T20084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2654'. [ 732.319147][T20094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2655'. [ 732.331072][T20094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2655'. [ 732.755488][T20101] vlan0: entered promiscuous mode [ 733.455926][T20111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2666'. [ 733.464068][T20112] tipc: Resetting bearer [ 733.466047][T20112] vlan3: left allmulticast mode [ 733.467475][T20112] bond0: left allmulticast mode [ 733.468893][T20112] vlan3: left promiscuous mode [ 733.470270][T20112] bond0: left promiscuous mode [ 733.471820][T20112] bridge0: port 1(vlan3) entered disabled state [ 733.477551][T20111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2666'. [ 733.593970][T20112] team0: Mode changed to "loadbalance" [ 734.156603][T20123] ceph: No mds server is up or the cluster is laggy [ 734.376004][T20128] vxcan1 speed is unknown, defaulting to 1000 [ 734.509465][T20136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2664'. [ 734.519909][T20136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2664'. [ 734.531137][T20128] lo speed is unknown, defaulting to 1000 [ 734.578199][ T40] audit: type=1326 audit(1756912092.431:7552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20127 comm="syz.0.2662" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x0 [ 735.450838][T20154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2675'. [ 735.454651][T20154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2675'. [ 735.477009][T20149] vlan0: entered promiscuous mode [ 735.478643][T20149] bond0: entered promiscuous mode [ 735.694665][T20156] Process accounting resumed [ 736.532800][T20186] tipc: Resetting bearer [ 736.538783][T20179] netlink: 'syz.1.2673': attribute type 10 has an invalid length. [ 736.565119][ T53] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 737.003025][ T53] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 737.821592][T20222] netlink: 'syz.1.2684': attribute type 4 has an invalid length. [ 737.853967][T20226] overlayfs: failed to clone upperpath [ 737.866763][ T40] audit: type=1804 audit(1756912095.499:7553): pid=20226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2681" name="bus" dev="tmpfs" ino=3763 res=1 errno=0 [ 737.912865][T20228] netlink: 'syz.1.2685': attribute type 4 has an invalid length. [ 738.733551][T20247] __nla_validate_parse: 9 callbacks suppressed [ 738.733567][T20247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2689'. [ 738.741399][T20247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2689'. [ 738.803638][T20249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2690'. [ 738.813290][T20249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2690'. [ 739.133883][T20260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2691'. [ 739.451084][T20258] syz.1.2691: page allocation failure: order:0, mode:0x10cc0(GFP_KERNEL|__GFP_NORETRY), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 739.455319][T20258] CPU: 0 UID: 0 PID: 20258 Comm: syz.1.2691 Not tainted syzkaller #0 PREEMPT(full) [ 739.455335][T20258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 739.455341][T20258] Call Trace: [ 739.455346][T20258] [ 739.455350][T20258] dump_stack_lvl+0x16c/0x1f0 [ 739.455369][T20258] warn_alloc+0x248/0x3a0 [ 739.455384][T20258] ? __pfx_warn_alloc+0x10/0x10 [ 739.455398][T20258] ? psi_memstall_leave+0x19f/0x2d0 [ 739.455412][T20258] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 739.455425][T20258] ? psi_memstall_leave+0x1e1/0x2d0 [ 739.455438][T20258] ? psi_memstall_leave+0x1e6/0x2d0 [ 739.455453][T20258] __alloc_frozen_pages_noprof+0xea2/0x23f0 [ 739.455474][T20258] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 739.455493][T20258] ? policy_nodemask+0x60/0x4e0 [ 739.455508][T20258] ? __pfx_write_comp_data+0x10/0x10 [ 739.455524][T20258] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 739.455541][T20258] ? policy_nodemask+0xea/0x4e0 [ 739.455556][T20258] alloc_pages_mpol+0x1fb/0x550 [ 739.455584][T20258] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 739.455601][T20258] ? alloc_pages_noprof+0x317/0x390 [ 739.455616][T20258] alloc_pages_noprof+0x131/0x390 [ 739.455631][T20258] kimage_alloc_pages+0x75/0x350 [ 739.455654][T20258] kimage_alloc_control_pages+0x153/0xa00 [ 739.455671][T20258] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 739.455686][T20258] do_kexec_load+0x478/0x8a0 [ 739.455712][T20258] ? __pfx_do_kexec_load+0x10/0x10 [ 739.455727][T20258] __ia32_compat_sys_kexec_load+0x37f/0x400 [ 739.455741][T20258] ? __pfx___ia32_compat_sys_kexec_load+0x10/0x10 [ 739.455755][T20258] ? rcu_is_watching+0x12/0xc0 [ 739.455769][T20258] __do_fast_syscall_32+0x7c/0x3a0 [ 739.455786][T20258] do_fast_syscall_32+0x32/0x80 [ 739.455801][T20258] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 739.455815][T20258] RIP: 0023:0xf704e579 [ 739.455824][T20258] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 739.455834][T20258] RSP: 002b:00000000f543e55c EFLAGS: 00000296 ORIG_RAX: 000000000000011b [ 739.455844][T20258] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 739.455851][T20258] RDX: 0000000080001080 RSI: 00000000003e0000 RDI: 0000000000000000 [ 739.455858][T20258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 739.455864][T20258] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 739.455870][T20258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 739.455883][T20258] [ 739.455932][T20258] Mem-Info: [ 739.536438][T20258] active_anon:274 inactive_anon:4205 isolated_anon:0 [ 739.536438][T20258] active_file:1884 inactive_file:651 isolated_file:0 [ 739.536438][T20258] unevictable:1768 dirty:205 writeback:0 [ 739.536438][T20258] slab_reclaimable:6419 slab_unreclaimable:65658 [ 739.536438][T20258] mapped:27373 shmem:4670 pagetables:1576 [ 739.536438][T20258] sec_pagetables:329 bounce:0 [ 739.536438][T20258] kernel_misc_reclaimable:0 [ 739.536438][T20258] free:26975 free_pcp:266 free_cma:0 [ 739.550299][T20258] Node 0 active_anon:72kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:448kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7760kB pagetables:1628kB sec_pagetables:1144kB all_unreclaimable? yes Balloon:0kB [ 739.559814][T20258] Node 1 active_anon:1024kB inactive_anon:16840kB active_file:7556kB inactive_file:2504kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:109044kB dirty:820kB writeback:0kB shmem:15144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5576kB pagetables:4676kB sec_pagetables:172kB all_unreclaimable? no Balloon:0kB [ 739.569568][T20258] Node 0 DMA free:1912kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 739.578538][T20258] lowmem_reserve[]: 0 288 288 288 288 [ 739.581708][T20258] Node 0 DMA32 free:14964kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:324KB active_anon:72kB inactive_anon:56kB active_file:164kB inactive_file:12kB unevictable:3536kB writepending:0kB present:1032196kB managed:295120kB mlocked:0kB bounce:0kB free_pcp:152kB local_pcp:0kB free_cma:0kB [ 739.600905][T20258] lowmem_reserve[]: 0 0 0 0 0 [ 739.608299][T20258] Node 1 DMA32 free:90324kB boost:20480kB min:67620kB low:79404kB high:91188kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1124kB inactive_anon:16440kB active_file:7556kB inactive_file:2504kB unevictable:3536kB writepending:820kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:1956kB local_pcp:0kB free_cma:0kB [ 739.639347][T20258] lowmem_reserve[]: 0 0 0 0 0 [ 739.643130][T20258] Node 0 DMA: 4*4kB (UE) 3*8kB (E) 1*16kB (E) 10*32kB (UE) 4*64kB (UE) 2*128kB (E) 0*256kB 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 1912kB [ 739.655878][T20258] Node 0 DMA32: 134*4kB (UMEH) 119*8kB (MEH) 106*16kB (UMEH) 73*32kB (UMEH) 40*64kB (UMEH) 19*128kB (UME) 7*256kB (UM) 2*512kB (M) 2*1024kB (U) 0*2048kB 0*4096kB = 15376kB [ 739.662097][T20258] Node 1 DMA32: 1003*4kB (UME) 1011*8kB (ME) 660*16kB (ME) 416*32kB (UME) 153*64kB (UME) 84*128kB (UME) 38*256kB (UME) 25*512kB (UM) 12*1024kB (UM) 0*2048kB 0*4096kB = 91332kB [ 739.682106][T20264] netlink: 'syz.0.2693': attribute type 4 has an invalid length. [ 739.722870][T20269] netlink: 'syz.0.2695': attribute type 4 has an invalid length. [ 739.727446][T20266] loop6: detected capacity change from 0 to 2560 [ 739.729993][T20266] buffer_io_error: 10 callbacks suppressed [ 739.730003][T20266] Buffer I/O error on dev loop6, logical block 0, async page read [ 739.734856][T20266] Buffer I/O error on dev loop6, logical block 0, async page read [ 739.740420][T20266] Buffer I/O error on dev loop6, logical block 0, async page read [ 739.743339][T20266] Buffer I/O error on dev loop6, logical block 0, async page read [ 739.748307][T20266] Buffer I/O error on dev loop6, logical block 0, async page read [ 739.751015][T20266] Buffer I/O error on dev loop6, logical block 0, async page read [ 739.753636][T20266] Buffer I/O error on dev loop6, logical block 0, async page read [ 739.756128][T20266] Buffer I/O error on dev loop6, logical block 0, async page read [ 739.758924][T20266] ldm_validate_partition_table(): Disk read failed. [ 739.763499][T20266] Buffer I/O error on dev loop6, logical block 0, async page read [ 739.766123][T20266] Buffer I/O error on dev loop6, logical block 0, async page read [ 739.769017][T20266] Dev loop6: unable to read RDB block 0 [ 739.771116][T20266] loop6: unable to read partition table [ 739.773382][T20266] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 739.846276][T20258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 739.849502][T20258] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 739.852969][T20258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 739.856124][T20258] Node 1 hugepages_total=5 hugepages_free=1 hugepages_surp=3 hugepages_size=2048kB [ 739.859626][T20258] 9241 total pagecache pages [ 739.861908][T20258] 477 pages in swap cache [ 739.863814][T20258] Free swap = 41000kB [ 739.865671][T20258] Total swap = 124996kB [ 739.869073][T20258] 524155 pages RAM [ 739.870689][T20258] 0 pages HighMem/MovableOnly [ 739.872972][T20258] 209480 pages reserved [ 739.874921][T20258] 0 pages cma reserved [ 739.969493][ T5385] ldm_validate_partition_table(): Disk read failed. [ 739.978726][ T5385] Dev loop6: unable to read RDB block 0 [ 739.984066][ T5385] loop6: unable to read partition table [ 740.074242][T20279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2692'. [ 740.270740][T20282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2696'. [ 740.274080][T20282] netlink: 'syz.0.2696': attribute type 5 has an invalid length. [ 740.276569][T20282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2696'. [ 740.319933][T20258] kexec: Could not allocate control_code_buffer [ 740.418620][T20279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.456290][T20279] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.459494][T20279] tipc: Resetting bearer [ 740.512627][T20279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 740.578038][T20282] geneve2: entered promiscuous mode [ 740.580480][T20282] geneve2: entered allmulticast mode [ 740.595307][ T8107] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 740.600653][ T8107] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 740.603378][ T8107] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 740.606078][ T8107] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 741.968780][T20302] netlink: 'syz.2.2703': attribute type 4 has an invalid length. [ 742.040330][T20308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2701'. [ 742.040367][T20309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2702'. [ 743.200876][T20340] vxcan1 speed is unknown, defaulting to 1000 [ 743.319025][T20340] lo speed is unknown, defaulting to 1000 [ 743.494356][ T40] audit: type=1326 audit(1756912100.765:7554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20329 comm="syz.1.2707" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e579 code=0x0 [ 743.563806][T20337] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 744.205376][T20356] __nla_validate_parse: 2 callbacks suppressed [ 744.205387][T20356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2710'. [ 744.215854][T20356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2710'. [ 745.192795][T20375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2715'. [ 745.224598][T20375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2715'. [ 747.176436][T20401] netlink: 'syz.0.2719': attribute type 4 has an invalid length. [ 747.385404][T20412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2723'. [ 747.392898][T20412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2723'. [ 748.022358][T20422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2726'. [ 748.028445][T20422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2726'. [ 748.303051][T20429] netlink: 'syz.0.2729': attribute type 4 has an invalid length. [ 748.444853][T20430] ceph: No mds server is up or the cluster is laggy [ 748.531525][ T53] libceph: connect (1)[c::]:6789 error -22 [ 748.534286][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 748.547085][T20443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2732'. [ 748.550600][T20443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2732'. [ 749.646087][T20470] netlink: 'syz.1.2736': attribute type 4 has an invalid length. [ 750.309888][T20482] __nla_validate_parse: 2 callbacks suppressed [ 750.309905][T20482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2738'. [ 750.349912][T20482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2738'. [ 750.618987][T20488] overlayfs: failed to resolve './file1': -2 [ 751.133523][T20494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2740'. [ 751.137239][T20494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2740'. [ 752.592090][T20518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2743'. [ 752.624604][T20520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2750'. [ 752.629152][T20520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2750'. [ 752.853888][T20527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2744'. [ 752.858409][T20527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2744'. [ 752.858553][T20518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2743'. [ 755.288212][T20544] kexec: Could not allocate control_code_buffer [ 755.740992][T20587] __nla_validate_parse: 5 callbacks suppressed [ 755.741010][T20587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2756'. [ 755.750523][T20587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2756'. [ 756.268112][T20601] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 756.282261][T20601] ubi: mtd0 is already attached to ubi31 [ 757.324647][T20620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2763'. [ 757.327929][T20620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2763'. [ 757.387150][T20618] ceph: No mds server is up or the cluster is laggy [ 757.390010][ T53] libceph: connect (1)[c::]:6789 error -101 [ 757.393503][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 757.565233][T20630] ubi: mtd0 is already attached to ubi31 [ 757.746813][T20633] vxcan1 speed is unknown, defaulting to 1000 [ 757.817701][T20635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2764'. [ 757.833103][T20633] lo speed is unknown, defaulting to 1000 [ 758.127717][T20641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2765'. [ 758.138105][T20641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2765'. [ 758.382352][T20653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2768'. [ 758.386843][T20653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2768'. [ 759.789035][T20673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2771'. [ 759.891334][T20668] ceph: No mds server is up or the cluster is laggy [ 760.815620][T20686] virtio-fs: tag not found [ 761.423439][T20696] syz_tun: entered allmulticast mode [ 761.467207][T20704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2779'. [ 761.470352][T20704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2779'. [ 761.581765][T20707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2781'. [ 761.587659][T20707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2781'. [ 761.946528][T20721] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 761.948765][T20721] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 761.956613][T20721] vhci_hcd vhci_hcd.0: Device attached [ 762.254081][ T53] usb 38-1: SetAddress Request (18) to port 0 [ 762.256057][ T53] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 762.358332][T20727] vxcan1 speed is unknown, defaulting to 1000 [ 762.495507][T20733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2785'. [ 762.505606][T20727] lo speed is unknown, defaulting to 1000 [ 762.509762][T20730] vxcan1 speed is unknown, defaulting to 1000 [ 762.619593][T20722] vhci_hcd: connection reset by peer [ 762.623083][ T1138] vhci_hcd: stop threads [ 762.624501][ T1138] vhci_hcd: release socket [ 762.627534][ T1138] vhci_hcd: disconnect device [ 762.654877][T20730] lo speed is unknown, defaulting to 1000 [ 763.671554][T20755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2791'. [ 763.674979][T20755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2791'. [ 763.956741][T20766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2793'. [ 764.062821][T20766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2793'. [ 765.946616][ T40] audit: type=1326 audit(1756912121.765:7555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20797 comm="syz.0.2800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 765.956576][ T40] audit: type=1326 audit(1756912121.765:7556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20797 comm="syz.0.2800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 765.968499][ T40] audit: type=1326 audit(1756912121.793:7557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20797 comm="syz.0.2800" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 765.978122][ T40] audit: type=1326 audit(1756912121.793:7558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20797 comm="syz.0.2800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 765.987625][ T40] audit: type=1326 audit(1756912121.793:7559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20797 comm="syz.0.2800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 765.998057][ T40] audit: type=1326 audit(1756912121.821:7560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20797 comm="syz.0.2800" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 766.027369][ T40] audit: type=1326 audit(1756912121.821:7561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20797 comm="syz.0.2800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 766.034235][ T40] audit: type=1326 audit(1756912121.821:7562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20797 comm="syz.0.2800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 766.040968][ T40] audit: type=1326 audit(1756912121.840:7563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20797 comm="syz.0.2800" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 766.047698][ T40] audit: type=1326 audit(1756912121.840:7564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20797 comm="syz.0.2800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 766.296163][T20800] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 766.298531][T20800] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 766.303622][T20800] vhci_hcd vhci_hcd.0: Device attached [ 766.859656][T20801] vhci_hcd: connection closed [ 766.860078][ T8134] vhci_hcd: stop threads [ 766.864455][ T8134] vhci_hcd: release socket [ 766.866539][ T8134] vhci_hcd: disconnect device [ 767.663376][ T53] usb 38-1: device descriptor read/8, error -110 [ 767.855916][T10812] vhci_hcd: vhci_device speed not set [ 768.167722][T20808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2802'. [ 768.171446][T20808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2802'. [ 768.281007][T20817] netlink: 'syz.1.2803': attribute type 4 has an invalid length. [ 768.608810][T20825] ubi: mtd0 is already attached to ubi31 [ 768.931685][ T53] usb usb38-port1: attempt power cycle [ 769.750720][T20844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2807'. [ 769.755346][T20844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2807'. [ 770.058628][ T53] usb usb38-port1: unable to enumerate USB device [ 770.583827][T20856] netlink: 'syz.2.2813': attribute type 4 has an invalid length. [ 770.623388][T20858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2814'. [ 770.628145][T20858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2814'. [ 770.658686][T20859] overlayfs: failed to resolve './file1': -2 [ 771.549537][T20869] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 771.566954][T20869] ubi: mtd0 is already attached to ubi31 [ 771.599902][T20871] netlink: 'syz.3.2818': attribute type 4 has an invalid length. [ 771.635159][T20874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2819'. [ 771.644142][T20874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2819'. [ 771.665522][T20875] vxcan1 speed is unknown, defaulting to 1000 [ 771.861959][T20875] lo speed is unknown, defaulting to 1000 [ 772.196329][T20889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2820'. [ 772.664468][T20896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2822'. [ 772.767014][T20899] overlayfs: failed to clone upperpath [ 773.559170][T20919] netlink: 'syz.0.2827': attribute type 4 has an invalid length. [ 773.812463][T20925] overlayfs: failed to resolve './file1': -2 [ 774.849260][T20946] /dev/nullb0: Can't open blockdev [ 775.940961][T20954] netlink: 'syz.2.2833': attribute type 4 has an invalid length. [ 776.237352][T20960] netlink: 'syz.2.2836': attribute type 4 has an invalid length. [ 776.474861][T20964] __nla_validate_parse: 3 callbacks suppressed [ 776.474872][T20964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2835'. [ 776.490826][T20964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2835'. [ 776.836145][T20982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2839'. [ 776.840987][T20982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2839'. [ 777.492107][T21008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2849'. [ 777.496662][T21008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2849'. [ 778.490927][T21030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2852'. [ 778.501907][T21030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2852'. [ 778.849123][T21041] ceph: No mds server is up or the cluster is laggy [ 779.386441][T21050] netlink: 'syz.1.2845': attribute type 4 has an invalid length. [ 779.415818][T21054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2846'. [ 779.419417][T21054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2846'. [ 780.071524][T21078] netlink: 'syz.3.2848': attribute type 5 has an invalid length. [ 780.190370][T21078] geneve2: entered promiscuous mode [ 780.192118][T21078] geneve2: entered allmulticast mode [ 780.217054][ T8130] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 780.223935][ T8130] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 780.227680][ T8130] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 780.230922][ T8130] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 785.277125][T21156] __nla_validate_parse: 6 callbacks suppressed [ 785.277136][T21156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2866'. [ 785.320381][T21156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2866'. [ 785.493993][T21166] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 785.496539][T21166] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 785.505894][T21166] vhci_hcd vhci_hcd.0: Device attached [ 786.061695][ T53] usb 42-1: SetAddress Request (30) to port 0 [ 786.064296][ T53] usb 42-1: new SuperSpeed USB device number 30 using vhci_hcd [ 786.131022][T21166] syz.2.2865 (21166): drop_caches: 1 [ 786.243083][T21168] vhci_hcd: connection reset by peer [ 786.246162][ T8098] vhci_hcd: stop threads [ 786.247608][ T8098] vhci_hcd: release socket [ 786.249081][ T8098] vhci_hcd: disconnect device [ 786.418544][T21185] overlayfs: failed to clone upperpath [ 786.481963][T21187] netlink: 'syz.3.2874': attribute type 10 has an invalid length. [ 786.488129][T21187] syz_tun: entered promiscuous mode [ 786.492387][T21187] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 786.543291][T21187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 786.578955][T21187] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 786.583596][T21187] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 787.732363][T21204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2885'. [ 787.736768][T21204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2885'. [ 788.675154][T21230] netlink: 'syz.2.2888': attribute type 4 has an invalid length. [ 789.179120][ T29] libceph: connect (1)[c::]:6789 error -22 [ 789.191303][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 789.207776][ T29] libceph: connect (1)[c::]:6789 error -22 [ 789.221914][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 789.336030][T21237] ceph: No mds server is up or the cluster is laggy [ 789.435297][T21243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2882'. [ 789.439168][T21243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2882'. [ 789.777468][T21250] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 791.108123][T21260] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 791.110406][T21260] tipc: Enabled bearer , priority 10 [ 791.268119][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 791.410177][T21270] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 791.412335][T21270] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 791.415856][T21270] vhci_hcd vhci_hcd.0: Device attached [ 791.525107][ T53] usb 42-1: device descriptor read/8, error -110 [ 791.556783][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 791.738915][ T29] usb 38-1: SetAddress Request (22) to port 0 [ 791.741300][ T29] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 791.937368][T21270] syz.0.2895 (21270): drop_caches: 1 [ 791.943131][ T53] usb usb42-port1: attempt power cycle [ 792.133951][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 792.194346][T21271] vhci_hcd: connection reset by peer [ 792.196232][ T8098] vhci_hcd: stop threads [ 792.197660][ T8098] vhci_hcd: release socket [ 792.199571][ T8098] vhci_hcd: disconnect device [ 792.434565][T21279] netlink: 'syz.2.2890': attribute type 4 has an invalid length. [ 792.552367][ T53] usb usb42-port1: unable to enumerate USB device [ 792.594910][T21287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2891'. [ 792.606911][T21287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2891'. [ 793.235144][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 794.347012][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 795.451893][T21331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2905'. [ 795.458373][T21331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2905'. [ 795.469432][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 795.830851][T21340] netlink: 'syz.0.2906': attribute type 4 has an invalid length. [ 796.053494][T21342] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2908'. [ 796.156261][T21359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2915'. [ 796.159696][T21359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2915'. [ 796.308494][T21364] netlink: 'syz.3.2916': attribute type 4 has an invalid length. [ 796.571255][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 797.036299][T21386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2924'. [ 797.066382][T21386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2924'. [ 797.122272][T21388] netlink: 'syz.2.2925': attribute type 4 has an invalid length. [ 797.169529][ T29] usb 38-1: device descriptor read/8, error -110 [ 797.186228][T21394] netlink: 'syz.2.2926': attribute type 4 has an invalid length. [ 797.354562][T21399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2927'. [ 797.641790][ T29] usb usb38-port1: attempt power cycle [ 797.682352][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 798.219182][T21416] __nla_validate_parse: 1 callbacks suppressed [ 798.219198][T21416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2932'. [ 798.224677][T21416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2932'. [ 798.240210][ T29] usb usb38-port1: unable to enumerate USB device [ 798.521749][T21421] netlink: 'syz.0.2934': attribute type 4 has an invalid length. [ 798.560009][T21423] netlink: 'syz.0.2935': attribute type 4 has an invalid length. [ 798.700422][T21429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2936'. [ 798.794556][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 799.052940][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 799.681334][T21442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2939'. [ 799.687244][T21442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2939'. [ 799.716655][T21446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2940'. [ 799.906001][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 800.251260][T21456] ceph: No mds server is up or the cluster is laggy [ 800.556726][T21463] netlink: 'syz.2.2943': attribute type 4 has an invalid length. [ 800.964025][T21477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2947'. [ 801.017941][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 801.070733][T21480] wlan0 speed is unknown, defaulting to 1000 [ 801.074206][T21480] wlan0 speed is unknown, defaulting to 1000 [ 801.078669][T21480] wlan0 speed is unknown, defaulting to 1000 [ 801.093591][T21478] vxcan1 speed is unknown, defaulting to 1000 [ 801.100362][T21480] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 801.235545][T21478] lo speed is unknown, defaulting to 1000 [ 801.316095][T21478] wlan0 speed is unknown, defaulting to 1000 [ 801.365667][T21480] wlan0 speed is unknown, defaulting to 1000 [ 801.368465][T21480] wlan0 speed is unknown, defaulting to 1000 [ 801.382654][T21480] wlan0 speed is unknown, defaulting to 1000 [ 801.392518][T21480] wlan0 speed is unknown, defaulting to 1000 [ 801.578688][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2951'. [ 801.583995][T21494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2951'. [ 801.600895][T21495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2950'. [ 802.129670][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 802.439870][T21517] netlink: 'syz.3.2954': attribute type 4 has an invalid length. [ 802.487862][T21522] netlink: 'syz.3.2956': attribute type 4 has an invalid length. [ 803.065594][T21533] nvme_fabrics: missing parameter 'transport=%s' [ 803.067418][T21533] nvme_fabrics: missing parameter 'nqn=%s' [ 803.124619][T21539] siw: device registration error -23 [ 803.241489][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 803.250650][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 803.250661][ T40] audit: type=1804 audit(1756912156.655:7584): pid=21541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2960" name="bus" dev="tmpfs" ino=4125 res=1 errno=0 [ 803.792753][T21553] netlink: 'syz.2.2964': attribute type 4 has an invalid length. [ 804.364034][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 804.434406][T21562] __nla_validate_parse: 7 callbacks suppressed [ 804.434492][T21562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2967'. [ 804.566115][T21566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2965'. [ 805.310948][T21574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2976'. [ 805.314137][T21574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2976'. [ 805.465285][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 806.110841][T21586] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2971'. [ 806.587598][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 806.849992][T21596] netlink: 'syz.3.2974': attribute type 10 has an invalid length. [ 806.852684][T21596] tipc: Resetting bearer [ 806.855065][T21594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2973'. [ 806.859549][T21594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2973'. [ 806.863423][T21596] tipc: Resetting bearer [ 806.866794][T21596] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.869865][T21596] team0: entered promiscuous mode [ 806.872029][T21596] bond0: (slave team0): Enslaving as an active interface with an up link [ 806.878521][T21596] netlink: 'syz.3.2974': attribute type 10 has an invalid length. [ 806.924058][T21596] bond2: option mode: unable to set because the bond device has slaves [ 806.931147][T21596] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 807.068800][T21604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2975'. [ 807.072119][T21604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2975'. [ 807.699444][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 807.774609][T19917] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 807.956811][T19917] usb 7-1: Using ep0 maxpacket: 32 [ 807.962515][T19917] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 807.966001][T19917] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 807.969506][T19917] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 807.972937][T19917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 807.977223][T19917] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 807.996440][T19917] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 808.002945][T19917] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 808.006616][T19917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.006752][T21625] ceph: No mds server is up or the cluster is laggy [ 808.031517][T19917] usb 7-1: config 0 descriptor?? [ 808.073396][T21632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2982'. [ 808.257787][T19917] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 808.270144][T19917] usb 7-1: USB disconnect, device number 11 [ 808.277578][T19917] usblp0: removed [ 808.811258][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 808.832637][ T1021] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 809.003938][ T1021] usb 7-1: Using ep0 maxpacket: 32 [ 809.014825][ T1021] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 809.018054][ T1021] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 809.020865][ T1021] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 809.024170][ T1021] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 809.028285][ T1021] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 809.031958][ T1021] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 809.036786][ T1021] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 809.039861][ T1021] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.044170][ T1021] usb 7-1: config 0 descriptor?? [ 809.171214][T21646] ceph: No mds server is up or the cluster is laggy [ 809.489079][T21658] netlink: 'syz.3.2987': attribute type 4 has an invalid length. [ 809.923164][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 810.018564][ T1021] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 810.025126][ T1021] usb 7-1: USB disconnect, device number 12 [ 810.035231][ T1021] usblp0: removed [ 811.034892][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 811.398573][T21692] netlink: 'syz.3.2997': attribute type 4 has an invalid length. [ 811.542579][T21699] __nla_validate_parse: 2 callbacks suppressed [ 811.542627][T21699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2999'. [ 811.874661][T21700] ceph: No mds server is up or the cluster is laggy [ 812.146739][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 812.272277][T21710] ceph: No mds server is up or the cluster is laggy [ 813.068847][T21726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3003'. [ 813.091852][T21721] : entered promiscuous mode [ 813.247883][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 813.642826][T21739] netlink: 'syz.0.3007': attribute type 4 has an invalid length. [ 813.786913][T21744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3008'. [ 813.790843][T21744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3008'. [ 814.274535][T21759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3011'. [ 814.362596][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 814.720091][T21769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3013'. [ 815.042150][T21770] nvme_fabrics: missing parameter 'transport=%s' [ 815.044598][T21770] nvme_fabrics: missing parameter 'nqn=%s' [ 815.223804][T21783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3014'. [ 815.228173][T21783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3014'. [ 815.471737][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 815.585008][T21785] netlink: 'syz.0.3016': attribute type 4 has an invalid length. [ 815.741524][T21792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3017'. [ 816.046321][T21796] vlan1: entered promiscuous mode [ 816.048498][T21796] vlan1: entered allmulticast mode [ 816.050709][T21796] veth0_vlan: entered allmulticast mode [ 816.052516][T21796] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 816.313036][T21807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3020'. [ 816.583370][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 816.603052][T21796] syz.3.3018 (21796) used greatest stack depth: 19192 bytes left [ 816.907911][T21818] Device name cannot be null; rc = [-22] [ 817.199340][T21825] netlink: 'syz.2.3025': attribute type 4 has an invalid length. [ 817.532281][T21830] overlayfs: missing 'lowerdir' [ 817.706291][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 818.353131][T21847] __nla_validate_parse: 2 callbacks suppressed [ 818.353166][T21847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3030'. [ 818.778965][T21856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3034'. [ 818.806999][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 819.303225][T21862] netlink: 'syz.1.3035': attribute type 4 has an invalid length. [ 819.418128][T21869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3036'. [ 819.490682][T21870] overlayfs: failed to clone lowerpath [ 819.503486][T21870] overlayfs: failed to clone upperpath [ 819.812757][T21876] netlink: 'syz.3.3039': attribute type 4 has an invalid length. [ 819.918872][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 819.939047][T21887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3041'. [ 820.150606][T21892] netlink: 'syz.3.3044': attribute type 4 has an invalid length. [ 820.919920][T21910] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.3050'. [ 820.925094][T21910] netlink: zone id is out of range [ 820.927307][T21910] netlink: zone id is out of range [ 820.929679][T21910] netlink: zone id is out of range [ 821.030721][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 821.082930][T21914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3049'. [ 821.174476][T21918] netlink: 'syz.2.3053': attribute type 4 has an invalid length. [ 821.365179][T21927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3055'. [ 821.907238][ T1021] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 821.948501][T21933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3056'. [ 822.068154][ T1021] usb 5-1: Using ep0 maxpacket: 32 [ 822.071334][ T1021] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 822.075697][ T1021] usb 5-1: config 0 has no interface number 0 [ 822.077754][ T1021] usb 5-1: config 0 interface 184 has no altsetting 0 [ 822.083691][ T1021] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 822.086636][ T1021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.089434][ T1021] usb 5-1: Product: syz [ 822.090974][ T1021] usb 5-1: Manufacturer: syz [ 822.092485][ T1021] usb 5-1: SerialNumber: syz [ 822.095748][ T1021] usb 5-1: config 0 descriptor?? [ 822.100244][ T1021] smsc75xx v1.0.0 [ 822.101497][ T1021] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 822.104975][ T1021] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 822.154161][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 822.224732][T21943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3057'. [ 823.264968][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 823.342098][T21962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3061'. [ 823.770065][T21968] netlink: 'syz.1.3063': attribute type 4 has an invalid length. [ 824.177268][T21981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3066'. [ 824.351922][T19917] usb 5-1: USB disconnect, device number 15 [ 824.376803][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 825.398739][T22006] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3074'. [ 825.411735][T22006] netlink: 'syz.2.3074': attribute type 21 has an invalid length. [ 825.414953][T22006] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3074'. [ 825.418662][T22006] netlink: 'syz.2.3074': attribute type 4 has an invalid length. [ 825.421788][T22006] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3074'. [ 825.443341][T22006] batadv1: entered promiscuous mode [ 825.447916][T22006] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 825.488794][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 826.060341][T22016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3077'. [ 826.589773][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 827.701662][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 827.978771][T22057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3086'. [ 828.098993][T22060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3087'. [ 828.651785][T22070] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 828.661327][T22070] tipc: Resetting bearer [ 828.813579][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 828.932378][T22080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3090'. [ 828.953643][T22081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3091'. [ 829.268829][T22091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3092'. [ 829.814352][ T40] audit: type=1326 audit(1756912181.509:7585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22103 comm="syz.3.3096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 829.823871][ T40] audit: type=1326 audit(1756912181.527:7586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22103 comm="syz.3.3096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 829.834846][ T40] audit: type=1326 audit(1756912181.537:7587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22103 comm="syz.3.3096" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 829.856429][ T40] audit: type=1326 audit(1756912181.537:7588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22103 comm="syz.3.3096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 829.869644][ T40] audit: type=1326 audit(1756912181.537:7589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22103 comm="syz.3.3096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 829.878976][ T40] audit: type=1326 audit(1756912181.537:7590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22103 comm="syz.3.3096" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 829.890663][ T40] audit: type=1326 audit(1756912181.537:7591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22103 comm="syz.3.3096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 829.898136][ T40] audit: type=1326 audit(1756912181.537:7592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22103 comm="syz.3.3096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 829.907714][ T40] audit: type=1326 audit(1756912181.546:7593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22103 comm="syz.3.3096" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 829.914751][ T40] audit: type=1326 audit(1756912181.546:7594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22103 comm="syz.3.3096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 829.925250][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 830.465570][T22116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3098'. [ 830.944812][T22124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3099'. [ 831.037051][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 831.801079][T22137] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3101'. [ 832.159638][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 832.218551][T22145] netlink: 'syz.2.3104': attribute type 4 has an invalid length. [ 832.615556][T22150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3105'. [ 833.260729][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 833.267523][T22166] overlayfs: failed to clone upperpath [ 833.304412][T22165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3108'. [ 834.185694][T22184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3119'. [ 834.372617][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 834.976731][T22194] netlink: 'syz.3.3113': attribute type 4 has an invalid length. [ 835.038894][T22198] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3115'. [ 835.495168][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 836.085468][T22218] netlink: 'syz.1.3122': attribute type 4 has an invalid length. [ 836.410693][T22226] netlink: 'syz.1.3123': attribute type 4 has an invalid length. [ 836.606867][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 836.701242][T22235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3124'. [ 837.664979][T22253] netlink: 'syz.1.3131': attribute type 4 has an invalid length. [ 837.708473][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 837.959648][T22262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3132'. [ 838.819899][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 838.887311][T22281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3137'. [ 839.524016][T22293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3139'. [ 839.931646][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 840.654794][T22314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3145'. [ 841.043561][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 841.472367][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 841.472384][ T40] audit: type=1326 audit(1756912192.415:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22318 comm="syz.2.3147" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 841.486003][ T40] audit: type=1326 audit(1756912192.425:7645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22318 comm="syz.2.3147" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 841.497077][ T40] audit: type=1326 audit(1756912192.425:7646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22318 comm="syz.2.3147" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 841.514090][ T40] audit: type=1326 audit(1756912192.425:7647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22318 comm="syz.2.3147" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 841.521008][ T40] audit: type=1326 audit(1756912192.425:7648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22318 comm="syz.2.3147" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 841.530425][ T40] audit: type=1326 audit(1756912192.444:7649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22318 comm="syz.2.3147" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 841.539332][ T40] audit: type=1326 audit(1756912192.444:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22318 comm="syz.2.3147" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 841.548110][ T40] audit: type=1326 audit(1756912192.444:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22318 comm="syz.2.3147" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 841.556951][ T40] audit: type=1326 audit(1756912192.444:7652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22318 comm="syz.2.3147" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 841.565826][ T40] audit: type=1326 audit(1756912192.444:7653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22318 comm="syz.2.3147" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 841.633214][T22329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3150'. [ 841.791598][T22334] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 841.794496][T22334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 841.808737][T22334] vhci_hcd vhci_hcd.0: Device attached [ 842.059410][ T29] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 842.166121][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 842.414683][T22335] vhci_hcd: connection reset by peer [ 842.418517][ T1138] vhci_hcd: stop threads [ 842.420087][ T1138] vhci_hcd: release socket [ 842.422146][ T1138] vhci_hcd: disconnect device [ 842.490648][T22349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3152'. [ 843.267171][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 843.603853][T22378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3163'. [ 843.684257][T22380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3156'. [ 844.379042][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 844.604586][T22393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3159'. [ 845.483124][T22402] netlink: 'syz.1.3162': attribute type 1 has an invalid length. [ 845.490898][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 845.514814][T22402] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 845.518807][T22402] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 845.568306][T22409] gretap1: entered promiscuous mode [ 845.572650][T22409] bond0: (slave gretap1): making interface the new active one [ 845.575653][T22409] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 845.588746][T22402] macvlan2: entered promiscuous mode [ 845.590814][T22402] macvlan2: entered allmulticast mode [ 845.592957][T22402] bond0: entered promiscuous mode [ 845.595020][T22402] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 845.598988][T22402] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 845.603779][T22402] bond0: left promiscuous mode [ 845.890436][ T5336] Bluetooth: hci2: unexpected event for opcode 0xfa20 [ 846.519982][T22425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3168'. [ 846.533788][T22426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3169'. [ 846.602610][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 846.663544][T22428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3169'. [ 847.543900][ T29] vhci_hcd: vhci_device speed not set [ 847.714562][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 847.775193][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 847.775206][ T40] audit: type=1800 audit(1756912198.299:7674): pid=22450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3175" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 847.896149][T22449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3174'. [ 848.826496][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 849.480686][T22481] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3181'. [ 849.750437][T22488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3183'. [ 849.799525][T22473] overlayfs: failed to clone upperpath [ 849.928843][T22491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3184'. [ 849.931754][T22491] netlink: 'syz.2.3184': attribute type 5 has an invalid length. [ 849.934583][T22491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3184'. [ 849.938456][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 849.954336][T22491] geneve2: entered promiscuous mode [ 849.956102][T22491] geneve2: entered allmulticast mode [ 849.962911][ T8154] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 849.966267][ T8154] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 849.969009][ T8154] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 849.972511][ T8154] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 851.049921][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 852.161906][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 852.348533][T22522] netlink: 'syz.3.3194': attribute type 4 has an invalid length. [ 852.517862][T22530] netlink: 'syz.3.3205': attribute type 4 has an invalid length. [ 853.285070][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 853.293087][T22539] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3199'. [ 853.732325][T22539] batadv1: entered allmulticast mode [ 854.193904][T22549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3201'. [ 854.385394][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 854.926402][T22556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3211'. [ 855.014771][T22557] bridge0: port 1(vlan2) entered blocking state [ 855.021918][T22557] bridge0: port 1(vlan2) entered disabled state [ 855.026452][T22557] vlan2: entered allmulticast mode [ 855.030813][T22557] bond0: entered allmulticast mode [ 855.034401][T22557] gretap1: entered allmulticast mode [ 855.043073][T22557] vlan2: entered promiscuous mode [ 855.044727][T22557] bond0: entered promiscuous mode [ 855.171674][T22561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3203'. [ 855.507950][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 855.906085][T22571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3204'. [ 856.619699][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 856.795476][T22580] netlink: 'syz.1.3210': attribute type 4 has an invalid length. [ 857.720948][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 857.877141][T22610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3217'. [ 858.394448][T22611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3219'. [ 858.503755][T22621] vxcan1 speed is unknown, defaulting to 1000 [ 858.673420][T22621] lo speed is unknown, defaulting to 1000 [ 858.715086][T22630] netlink: 'syz.3.3221': attribute type 4 has an invalid length. [ 858.764430][T22621] wlan0 speed is unknown, defaulting to 1000 [ 858.832769][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 858.941294][T22627] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 859.107003][T22642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3224'. [ 859.910003][T22656] vxcan1 speed is unknown, defaulting to 1000 [ 859.943859][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3228'. [ 859.946979][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 859.995498][T22656] lo speed is unknown, defaulting to 1000 [ 860.063236][T22663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3229'. [ 860.107777][T22656] wlan0 speed is unknown, defaulting to 1000 [ 860.363922][T22674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3231'. [ 860.421806][T22673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3231'. [ 861.030037][T22684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3232'. [ 861.056450][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 861.271808][T22694] block nbd0: Attempted send on invalid socket [ 861.273848][T22694] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 861.276898][T22694] vxfs: unable to read disk superblock at 1 [ 861.279099][T22694] block nbd0: Attempted send on invalid socket [ 861.281586][T22694] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 861.284661][T22694] vxfs: unable to read disk superblock at 8 [ 861.286596][T22694] vxfs: can't find superblock. [ 861.603269][T22701] netlink: 'syz.1.3235': attribute type 4 has an invalid length. [ 861.671699][T22703] netlink: 'syz.1.3236': attribute type 4 has an invalid length. [ 862.178825][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 862.444019][T22721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3241'. [ 862.448676][T22721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3241'. [ 862.849278][T22729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3243'. [ 862.982789][T22733] netlink: 'syz.3.3245': attribute type 4 has an invalid length. [ 863.018538][T22731] netlink: 'syz.1.3244': attribute type 4 has an invalid length. [ 863.166223][T22744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3247'. [ 863.283918][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 864.027843][T22764] netlink: 'syz.1.3255': attribute type 4 has an invalid length. [ 864.099245][T22767] netlink: 'syz.1.3256': attribute type 4 has an invalid length. [ 864.402451][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 864.439120][T22783] : entered promiscuous mode [ 864.639976][T22789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3264'. [ 864.751915][T22792] netlink: 'syz.0.3265': attribute type 4 has an invalid length. [ 864.785356][T22794] netlink: 'syz.0.3266': attribute type 4 has an invalid length. [ 864.945671][T22801] overlayfs: failed to clone upperpath [ 865.503631][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 865.572239][T22814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3271'. [ 866.428686][T22827] netlink: 'syz.2.3275': attribute type 4 has an invalid length. [ 866.428953][T22828] netlink: 'syz.1.3282': attribute type 10 has an invalid length. [ 866.433887][T22828] tipc: Resetting bearer [ 866.440853][T22828] netlink: 'syz.1.3282': attribute type 10 has an invalid length. [ 866.488419][T22834] netlink: 'syz.2.3277': attribute type 4 has an invalid length. [ 866.521402][T22828] 8021q: adding VLAN 0 to HW filter on device bond2 [ 866.555810][T22828] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 866.569420][T22828] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 866.633594][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 866.648263][ T8098] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 866.656403][ T8098] bond2: (slave macvlan2): link status up again after 0 ms [ 866.661527][ T8098] bond2: (slave macvlan2): failed to get link speed/duplex [ 866.776057][ T8098] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 866.779166][ T8098] bond2: (slave macvlan2): failed to get link speed/duplex [ 866.939668][ T8107] bond2: (slave macvlan2): failed to get link speed/duplex [ 866.984842][T22843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3279'. [ 867.861055][T22851] vlan1: entered promiscuous mode [ 867.863160][T22851] vlan1: entered allmulticast mode [ 867.865325][T22851] veth0_vlan: entered allmulticast mode [ 867.922133][T22859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3283'. [ 867.984583][T22861] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 868.106376][T22868] netlink: 'syz.2.3285': attribute type 4 has an invalid length. [ 868.327749][T22872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3293'. [ 868.657999][ T8098] net_ratelimit: 15 callbacks suppressed [ 868.658017][ T8098] bond2: (slave macvlan2): failed to get link speed/duplex [ 868.779967][ T8098] bond2: (slave macvlan2): failed to get link speed/duplex [ 868.839149][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 868.892635][ T8134] bond2: (slave macvlan2): failed to get link speed/duplex [ 868.906168][T22882] netlink: 'syz.3.3288': attribute type 4 has an invalid length. [ 868.969902][T22883] netlink: 'syz.1.3287': attribute type 4 has an invalid length. [ 869.022247][ T8134] bond2: (slave macvlan2): failed to get link speed/duplex [ 869.139259][ T8098] bond2: (slave macvlan2): failed to get link speed/duplex [ 869.174841][T22897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3291'. [ 869.190312][T22897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3291'. [ 869.255251][T22898] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.3292'. [ 869.258497][ T8107] bond2: (slave macvlan2): failed to get link speed/duplex [ 869.261689][T22898] netlink: zone id is out of range [ 869.265698][T22898] netlink: zone id is out of range [ 869.272920][T22898] netlink: zone id is out of range [ 870.159023][T22910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3302'. [ 870.256899][T22914] siw: device registration error -23 [ 870.437577][T22920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3304'. [ 871.274318][T22935] netlink: 'syz.0.3298': attribute type 4 has an invalid length. [ 871.307410][T22938] netlink: 'syz.0.3299': attribute type 4 has an invalid length. [ 871.462071][T22943] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3300'. [ 871.472824][T22943] netlink: 'syz.0.3300': attribute type 21 has an invalid length. [ 871.475442][T22943] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3300'. [ 871.478573][T22943] netlink: 'syz.0.3300': attribute type 4 has an invalid length. [ 871.482277][T22943] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3300'. [ 871.505721][T22943] batadv1: entered promiscuous mode [ 871.508754][T22943] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 872.071621][T22949] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 872.074685][T22949] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 872.079527][T22949] vhci_hcd vhci_hcd.0: Device attached [ 872.388432][ T29] usb 42-1: SetAddress Request (34) to port 0 [ 872.390299][ T29] usb 42-1: new SuperSpeed USB device number 34 using vhci_hcd [ 872.627610][T22962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3314'. [ 873.021815][T22950] vhci_hcd: connection reset by peer [ 873.027462][ T8154] vhci_hcd: stop threads [ 873.029965][ T8154] vhci_hcd: release socket [ 873.032564][ T8154] vhci_hcd: disconnect device [ 873.470276][T22971] syzkaller1: entered promiscuous mode [ 873.472259][T22971] syzkaller1: entered allmulticast mode [ 873.701754][T22976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3309'. [ 873.797888][T22980] overlayfs: failed to clone lowerpath [ 873.840243][T22980] overlayfs: failed to clone upperpath [ 873.853471][T22981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3310'. [ 874.047937][ T8107] net_ratelimit: 40 callbacks suppressed [ 874.047996][ T8107] bond2: (slave macvlan2): failed to get link speed/duplex [ 874.063440][T22988] netlink: 'syz.0.3311': attribute type 4 has an invalid length. [ 874.163100][ T8107] bond2: (slave macvlan2): failed to get link speed/duplex [ 874.294720][ T8098] bond2: (slave macvlan2): failed to get link speed/duplex [ 874.305709][T22993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3312'. [ 874.408874][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 874.409709][ T8154] bond2: (slave macvlan2): failed to get link speed/duplex [ 874.547878][ T8098] bond2: (slave macvlan2): failed to get link speed/duplex [ 874.637161][T22999] netlink: 'syz.1.3317': attribute type 4 has an invalid length. [ 874.665448][ T8154] bond2: (slave macvlan2): failed to get link speed/duplex [ 874.797766][T23010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3318'. [ 874.815659][ T8130] bond2: (slave macvlan2): failed to get link speed/duplex [ 874.954357][ T8154] bond2: (slave macvlan2): failed to get link speed/duplex [ 874.976695][ T40] audit: type=1804 audit(1756912223.758:7675): pid=23013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3321" name="/newroot/786/bus" dev="tmpfs" ino=4126 res=1 errno=0 [ 875.083403][ T8154] bond2: (slave macvlan2): failed to get link speed/duplex [ 875.772156][T23026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3330'. [ 875.795452][T23025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3323'. [ 876.649401][T23037] netlink: 'syz.0.3326': attribute type 4 has an invalid length. [ 876.837245][T23047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3329'. [ 876.967333][T23044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3324'. [ 877.283225][T23053] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 877.290488][T23053] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 877.672269][T23059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3331'. [ 877.819616][ T29] usb 42-1: device descriptor read/8, error -110 [ 878.019090][T23069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3334'. [ 878.239105][ T29] usb usb42-port1: attempt power cycle [ 878.755251][T23083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3336'. [ 878.860616][ T29] usb usb42-port1: unable to enumerate USB device [ 879.255111][T23086] netlink: 'syz.3.3337': attribute type 4 has an invalid length. [ 879.401918][ T8130] net_ratelimit: 37 callbacks suppressed [ 879.401931][ T8130] bond2: (slave macvlan2): failed to get link speed/duplex [ 879.519555][ T8154] bond2: (slave macvlan2): failed to get link speed/duplex [ 879.641970][ T8130] bond2: (slave macvlan2): failed to get link speed/duplex [ 879.758852][ T8130] bond2: (slave macvlan2): failed to get link speed/duplex [ 879.872362][ T8134] bond2: (slave macvlan2): failed to get link speed/duplex [ 879.957324][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 880.001856][T23098] vlan1: entered promiscuous mode [ 880.003890][T23098] vlan1: entered allmulticast mode [ 880.005566][T23098] veth0_vlan: entered allmulticast mode [ 880.007314][T23098] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 880.021812][ T8130] bond2: (slave macvlan2): failed to get link speed/duplex [ 880.142444][T23107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3343'. [ 880.172814][ T8130] bond2: (slave macvlan2): failed to get link speed/duplex [ 880.289120][ T8134] bond2: (slave macvlan2): failed to get link speed/duplex [ 880.766252][T23119] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 880.771417][T23119] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 881.022202][T23128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3346'. [ 881.094914][T23130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3348'. [ 882.471261][T23158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3354'. [ 882.478579][T23160] netlink: 'syz.0.3355': attribute type 4 has an invalid length. [ 882.686207][T23167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3356'. [ 883.021971][T23170] netlink: 'syz.3.3357': attribute type 4 has an invalid length. [ 883.281559][T23177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3358'. [ 883.651742][T23191] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3359'. [ 883.732882][T23188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3360'. [ 884.843146][ T8107] net_ratelimit: 40 callbacks suppressed [ 884.843164][ T8107] bond2: (slave macvlan2): failed to get link speed/duplex [ 884.953161][T23204] netlink: 'syz.2.3364': attribute type 4 has an invalid length. [ 884.973575][ T8107] bond2: (slave macvlan2): failed to get link speed/duplex [ 885.100002][ T8130] bond2: (slave macvlan2): failed to get link speed/duplex [ 885.217258][ T1138] bond2: (slave macvlan2): failed to get link speed/duplex [ 885.335086][ T1138] bond2: (slave macvlan2): failed to get link speed/duplex [ 885.463316][ T1138] bond2: (slave macvlan2): failed to get link speed/duplex [ 885.516510][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 885.581027][ T8098] bond2: (slave macvlan2): failed to get link speed/duplex [ 885.698925][ T8130] bond2: (slave macvlan2): failed to get link speed/duplex [ 885.816316][ T8130] bond2: (slave macvlan2): failed to get link speed/duplex [ 885.952291][T23209] netlink: 'syz.1.3366': attribute type 4 has an invalid length. [ 886.227945][T23222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3367'. [ 886.394242][T23227] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 886.396311][T23227] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 886.399546][T23227] vhci_hcd vhci_hcd.0: Device attached [ 886.682150][ T53] usb 38-1: SetAddress Request (26) to port 0 [ 886.684267][ T53] usb 38-1: new SuperSpeed USB device number 26 using vhci_hcd [ 887.062823][T23233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3371'. [ 887.376695][T23228] vhci_hcd: connection reset by peer [ 887.399058][ T1138] vhci_hcd: stop threads [ 887.400468][ T1138] vhci_hcd: release socket [ 887.401961][ T1138] vhci_hcd: disconnect device [ 887.624029][T23240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3372'. [ 887.627882][T23240] netlink: 'syz.1.3372': attribute type 5 has an invalid length. [ 887.631462][T23240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3372'. [ 888.064706][T23248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3374'. [ 889.116862][T23267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3380'. [ 889.223671][T23274] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 889.275794][T23273] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3378'. [ 889.361237][T23273] overlayfs: failed to clone upperpath [ 889.993407][T23286] netlink: 'syz.1.3382': attribute type 4 has an invalid length. [ 890.063833][T23291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3383'. [ 890.255294][ T8107] net_ratelimit: 37 callbacks suppressed [ 890.255307][ T8107] bond2: (slave macvlan2): failed to get link speed/duplex [ 890.371376][ T8098] bond2: (slave macvlan2): failed to get link speed/duplex [ 890.489894][ T8134] bond2: (slave macvlan2): failed to get link speed/duplex [ 890.648723][ T8107] bond2: (slave macvlan2): failed to get link speed/duplex [ 890.766169][ T8107] bond2: (slave macvlan2): failed to get link speed/duplex [ 890.884506][ T8098] bond2: (slave macvlan2): failed to get link speed/duplex [ 891.001224][ T8107] bond2: (slave macvlan2): failed to get link speed/duplex [ 891.086210][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 891.118874][ T8134] bond2: (slave macvlan2): failed to get link speed/duplex [ 891.235926][ T8134] bond2: (slave macvlan2): failed to get link speed/duplex [ 892.102127][ T53] usb 38-1: device descriptor read/8, error -110 [ 892.520567][ T53] usb usb38-port1: attempt power cycle [ 892.842944][T23321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3391'. [ 893.118386][ T53] usb usb38-port1: unable to enumerate USB device [ 893.315824][T23324] netlink: 'syz.1.3392': attribute type 4 has an invalid length. [ 893.511271][T23334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3393'. [ 893.726210][T23339] overlayfs: missing 'lowerdir' [ 893.817207][T23341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3395'. [ 894.328994][T23347] netlink: 'syz.0.3397': attribute type 4 has an invalid length. [ 894.413020][T23349] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3396'. [ 894.419654][T23349] netlink: 'syz.1.3396': attribute type 21 has an invalid length. [ 894.423985][T23349] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3396'. [ 894.427279][T23349] netlink: 'syz.1.3396': attribute type 4 has an invalid length. [ 894.429770][T23349] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3396'. [ 894.440459][T23349] batadv0: entered promiscuous mode [ 894.444622][T23349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.513454][T23366] overlayfs: missing 'lowerdir' [ 895.603585][T23363] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3399'. [ 895.673818][ T8098] net_ratelimit: 40 callbacks suppressed [ 895.673830][ T8098] bond2: (slave macvlan2): failed to get link speed/duplex [ 895.792157][ T8107] bond2: (slave macvlan2): failed to get link speed/duplex [ 895.908264][ T8107] bond2: (slave macvlan2): failed to get link speed/duplex [ 896.037671][ T8098] bond2: (slave macvlan2): failed to get link speed/duplex [ 896.154194][ T1138] bond2: (slave macvlan2): failed to get link speed/duplex [ 896.271488][ T8098] bond2: (slave macvlan2): failed to get link speed/duplex [ 896.298254][T23373] netlink: 'syz.1.3402': attribute type 4 has an invalid length. [ 896.400778][ T8107] bond2: (slave macvlan2): failed to get link speed/duplex [ 896.450876][T23383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3401'. [ 896.461411][T23384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3405'. [ 896.560232][ T8098] bond2: (slave macvlan2): failed to get link speed/duplex [ 896.634767][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 896.677399][ T8098] bond2: (slave macvlan2): failed to get link speed/duplex [ 897.373871][T23400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3417'. [ 897.924709][T23410] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3410'. [ 897.934962][T23410] netlink: 'syz.3.3410': attribute type 21 has an invalid length. [ 897.937394][T23410] netlink: 'syz.3.3410': attribute type 4 has an invalid length. [ 897.946949][T23410] batadv1: entered promiscuous mode [ 897.949371][T23410] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 898.128434][T23411] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 898.130579][T23411] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 898.136774][T23411] vhci_hcd vhci_hcd.0: Device attached [ 898.393270][T23411] Device name cannot be null; rc = [-22] [ 898.452455][ T53] usb 37-1: new high-speed USB device number 6 using vhci_hcd [ 899.050866][T23412] vhci_hcd: connection reset by peer [ 899.065215][ T8154] vhci_hcd: stop threads [ 899.066757][ T8154] vhci_hcd: release socket [ 899.068294][ T8154] vhci_hcd: disconnect device [ 899.102773][T23425] overlayfs: failed to clone upperpath [ 899.716297][T23427] netlink: 'syz.0.3414': attribute type 4 has an invalid length. [ 899.866484][T23437] __nla_validate_parse: 2 callbacks suppressed [ 899.866495][T23437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3416'. [ 900.027712][T23441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3418'. [ 900.801434][T23446] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 900.968680][T23446] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 901.057334][T23446] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 901.092645][ C2] net_ratelimit: 37 callbacks suppressed [ 901.092657][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 901.117539][T23446] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 901.225444][T23456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3430'. [ 901.312447][ T8134] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 901.323416][ T8154] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 901.333491][ T8154] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 901.452455][ T1138] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 901.455249][ T1138] bond2: (slave macvlan2): failed to get link speed/duplex [ 901.573805][ T1138] bond2: (slave macvlan2): failed to get link speed/duplex [ 901.583303][T23459] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3420'. [ 901.702097][ T8107] bond2: (slave macvlan2): failed to get link speed/duplex [ 901.819661][ T8107] bond2: (slave macvlan2): failed to get link speed/duplex [ 901.937794][ T8107] bond2: (slave macvlan2): failed to get link speed/duplex [ 902.054774][ T8107] bond2: (slave macvlan2): failed to get link speed/duplex [ 902.172506][ T8107] bond2: (slave macvlan2): failed to get link speed/duplex [ 902.193805][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 902.291008][ T8130] bond2: (slave macvlan2): failed to get link speed/duplex [ 903.093964][T23473] netlink: 'syz.1.3426': attribute type 4 has an invalid length. [ 903.732827][T23484] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3425'. [ 903.898036][ T53] vhci_hcd: vhci_device speed not set [ 904.069810][T23489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3429'. [ 905.020485][T23500] vxcan1: left allmulticast mode [ 905.067008][T23500] vlan0: left promiscuous mode [ 905.074120][T23500] vlan1: left promiscuous mode [ 905.080908][T23500] vlan1: left allmulticast mode [ 905.086378][T23500] veth0_vlan: left allmulticast mode [ 905.103628][T23500] veth3: left promiscuous mode [ 905.140384][T23500] veth7: left promiscuous mode [ 905.201027][T23517] netlink: 'syz.3.3435': attribute type 4 has an invalid length. [ 905.219669][T23515] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3439'. [ 905.221152][T23500] geneve2: left promiscuous mode [ 905.233179][T23500] geneve2: left allmulticast mode [ 905.465942][T23500] batadv0: left promiscuous mode [ 905.490760][ T1138] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 905.494646][ T1138] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 905.501322][ T1138] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 905.516524][ T1138] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 905.772930][T23523] netlink: 'syz.3.3437': attribute type 4 has an invalid length. [ 906.448641][T23533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3441'. [ 906.641218][ C2] net_ratelimit: 24 callbacks suppressed [ 906.641231][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 906.738642][T23538] wireguard0: entered promiscuous mode [ 906.740445][T23538] wireguard0: entered allmulticast mode [ 907.221880][T23554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3444'. [ 907.545970][T23557] netlink: 'syz.2.3446': attribute type 4 has an invalid length. [ 907.753071][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 908.198422][T23572] overlayfs: missing 'lowerdir' [ 908.373312][T23573] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3449'. [ 908.434820][T23573] overlayfs: failed to clone upperpath [ 908.875417][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 909.154365][T23586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3452'. [ 909.997237][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 910.265481][ T1021] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 910.437439][ T1021] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 910.440166][ T1021] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 910.443309][ T1021] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 910.446234][ T1021] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 910.449992][ T1021] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 910.458817][ T1021] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 910.461631][ T1021] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 910.464089][ T1021] usb 5-1: Product: syz [ 910.465409][ T1021] usb 5-1: Manufacturer: syz [ 910.472666][ T1021] cdc_wdm 5-1:1.0: skipping garbage [ 910.474322][ T1021] cdc_wdm 5-1:1.0: skipping garbage [ 910.479258][ T1021] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 910.481131][ T1021] cdc_wdm 5-1:1.0: Unknown control protocol [ 911.068202][T23620] overlayfs: missing 'lowerdir' [ 911.099067][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 911.340482][ T5978] usb 5-1: USB disconnect, device number 16 [ 911.642404][T23626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3462'. [ 912.095269][T23644] overlayfs: failed to clone upperpath [ 912.184680][ T40] audit: type=1804 audit(1756912258.545:7676): pid=23644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3466" name="bus" dev="tmpfs" ino=4898 res=1 errno=0 [ 912.210840][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 912.970989][T23654] netlink: 'syz.2.3470': attribute type 4 has an invalid length. [ 913.312338][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 913.388481][T23662] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3469'. [ 913.944415][T23661] overlayfs: missing 'lowerdir' [ 914.193349][ T40] audit: type=1804 audit(1756912260.444:7677): pid=23671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3473" name="bus" dev="tmpfs" ino=4853 res=1 errno=0 [ 914.361421][T23678] netlink: 'syz.1.3476': attribute type 4 has an invalid length. [ 914.434501][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 915.228297][T23689] netlink: 'syz.0.3479': attribute type 4 has an invalid length. [ 915.546325][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 915.576685][T23693] overlayfs: missing 'lowerdir' [ 916.033739][T23700] team0: Mode "l”›ÿalance" not found [ 916.036207][T23700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3489'. [ 916.116387][T23700] tipc: Disabling bearer [ 916.252344][T23707] overlayfs: missing 'lowerdir' [ 916.658198][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 916.689008][T23715] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 916.863456][T23718] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3483'. [ 916.910148][T23718] batadv1: entered allmulticast mode [ 917.115918][T23715] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 917.322010][T23715] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 917.329848][T23728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3487'. [ 917.412918][T23715] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 917.571071][ T8134] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 917.589835][T23730] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3486'. [ 917.597857][ T8098] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 917.609360][ T8098] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 917.616546][ T8098] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 917.759435][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 918.074011][T23737] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3488'. [ 918.169597][T23741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3490'. [ 918.871615][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 919.417078][T23758] overlayfs: missing 'lowerdir' [ 919.983054][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 920.209429][T23768] No control pipe specified [ 920.340862][T23774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3497'. [ 921.094882][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 921.740442][T23800] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3502'. [ 921.812988][T23794] tipc: Resetting bearer [ 921.817040][T23802] overlayfs: missing 'lowerdir' [ 921.845080][T23794] vlan0: left promiscuous mode [ 921.847443][T23794] vlan1: left promiscuous mode [ 921.849255][T23794] vlan1: left allmulticast mode [ 921.851169][T23794] veth0_vlan: left allmulticast mode [ 921.855477][T23794] batadv1: left promiscuous mode [ 921.922659][T23794] geneve2: left promiscuous mode [ 921.924324][T23794] geneve2: left allmulticast mode [ 921.929341][ T8130] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 921.932156][ T8130] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 921.934831][ T8130] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 921.937489][ T8130] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 922.206750][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 922.820809][T23816] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3508'. [ 922.825334][T23816] netlink: 'syz.1.3508': attribute type 6 has an invalid length. [ 922.828807][T23816] netlink: 'syz.1.3508': attribute type 5 has an invalid length. [ 922.831728][T23816] netlink: 'syz.1.3508': attribute type 4 has an invalid length. [ 923.318495][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 924.432348][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 924.644112][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 924.793279][T23847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3517'. [ 924.804631][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 924.807578][ T24] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 924.810142][ T24] usb 7-1: config 0 has no interface number 0 [ 924.814050][ T24] usb 7-1: config 0 interface 184 has no altsetting 0 [ 924.823167][ T24] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 924.826969][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.829612][ T24] usb 7-1: Product: syz [ 924.830954][ T24] usb 7-1: Manufacturer: syz [ 924.832425][ T24] usb 7-1: SerialNumber: syz [ 924.843459][ T24] usb 7-1: config 0 descriptor?? [ 924.856271][ T24] smsc75xx v1.0.0 [ 924.860026][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 924.867304][ T24] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 925.542118][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 926.653905][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 927.150134][T23872] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3523'. [ 927.494684][ T53] usb 7-1: USB disconnect, device number 13 [ 927.765718][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 928.029737][T23882] netlink: 'syz.0.3527': attribute type 4 has an invalid length. [ 928.215104][T23888] netlink: 'syz.1.3529': attribute type 4 has an invalid length. [ 928.436691][T23889] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3528'. [ 928.877541][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 929.278075][T23907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3541'. [ 929.756594][T23913] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 929.972076][T23913] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 930.189634][T23913] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 930.217617][T23920] netlink: 'syz.2.3536': attribute type 4 has an invalid length. [ 930.308478][T23913] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 930.382027][T23925] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 930.384803][T23925] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 930.408815][T23925] vhci_hcd vhci_hcd.0: Device attached [ 930.431458][ T8134] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 930.441380][T23925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3535'. [ 930.447511][ T8134] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 930.687901][ T53] usb 38-1: SetAddress Request (30) to port 0 [ 930.690575][ T53] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd [ 930.744707][ T8134] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 930.757245][ T8130] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 930.774487][T23935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3539'. [ 931.047965][T23926] vhci_hcd: connection reset by peer [ 931.051947][ T1138] vhci_hcd: stop threads [ 931.053806][ T1138] vhci_hcd: release socket [ 931.055941][ T1138] vhci_hcd: disconnect device [ 931.201125][T23943] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3542'. [ 931.274365][T23943] overlayfs: failed to clone upperpath [ 931.950698][T23956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3546'. [ 932.001686][T23958] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3545'. [ 932.025699][T23958] batadv2: entered allmulticast mode [ 932.111460][T23962] input: syz1 as /devices/virtual/input/input22 [ 933.123428][T23971] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=35 (70 ns) > initial count (64 ns). Using initial count to start timer. [ 933.388445][T23982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3550'. [ 934.247105][T23995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3553'. [ 934.707024][T10812] libceph: connect (1)[c::]:6789 error -22 [ 934.709279][T10812] libceph: mon0 (1)[c::]:6789 connect error [ 934.724128][T24004] ceph: No mds server is up or the cluster is laggy [ 935.602767][T24025] overlayfs: failed to clone upperpath [ 935.661725][ T40] audit: type=1804 audit(1756912280.518:7678): pid=24025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3561" name="bus" dev="tmpfs" ino=4975 res=1 errno=0 [ 936.071086][ T53] usb 38-1: device descriptor read/8, error -110 [ 936.275406][ T40] audit: type=1804 audit(1756912281.079:7679): pid=24034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3563" name="/newroot/830/bus" dev="tmpfs" ino=4392 res=1 errno=0 [ 936.472487][T24037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3565'. [ 936.475854][T24037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3565'. [ 936.480608][T24037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3565'. [ 936.485592][T24037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3565'. [ 936.488937][T24037] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3565'. [ 936.490085][ T53] usb usb38-port1: attempt power cycle [ 936.493549][T24037] netlink: 'syz.3.3565': attribute type 16 has an invalid length. [ 936.496201][T24037] netlink: 'syz.3.3565': attribute type 17 has an invalid length. [ 936.559579][T24037] tipc: Resetting bearer [ 936.589501][ T8107] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 936.596131][ T8107] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 936.598853][ T8107] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 936.605077][ T8107] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 936.612628][T24039] netlink: 'syz.2.3566': attribute type 4 has an invalid length. [ 936.731552][T24047] befs: (nbd2): No write support. Marking filesystem read-only [ 936.735840][T24047] block nbd2: Attempted send on invalid socket [ 936.738571][T24047] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 936.742817][T24047] befs: (nbd2): unable to read superblock [ 936.827750][T24049] fuse: Bad value for 'fd' [ 937.089181][ T53] usb usb38-port1: unable to enumerate USB device [ 937.984359][T24067] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3570'. [ 939.712702][T24088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3577'. [ 939.721779][T24088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3577'. [ 939.855107][T24091] vxcan1 speed is unknown, defaulting to 1000 [ 940.256702][T24091] lo speed is unknown, defaulting to 1000 [ 940.265065][ T40] audit: type=1804 audit(1756912284.605:7680): pid=24087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3574" name="/newroot/844/bus/bus" dev="overlay" ino=4454 res=1 errno=0 [ 940.273733][ T40] audit: type=1804 audit(1756912284.633:7681): pid=24087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3574" name="/newroot/844/bus/bus" dev="overlay" ino=4454 res=1 errno=0 [ 940.482781][T24091] wlan0 speed is unknown, defaulting to 1000 [ 940.504132][T24101] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3579'. [ 941.236756][T24112] overlayfs: missing 'lowerdir' [ 942.403372][T24125] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3586'. [ 942.407308][T24125] netlink: 'syz.2.3586': attribute type 6 has an invalid length. [ 942.410628][T24125] netlink: 'syz.2.3586': attribute type 5 has an invalid length. [ 942.416517][T24125] netlink: 'syz.2.3586': attribute type 4 has an invalid length. [ 942.529173][T24132] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3588'. [ 943.958336][T24142] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 944.426575][T24150] vxcan1 speed is unknown, defaulting to 1000 [ 944.681431][T24150] lo speed is unknown, defaulting to 1000 [ 944.800693][T24150] wlan0 speed is unknown, defaulting to 1000 [ 945.409389][T24161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3597'. [ 946.212196][T24160] ceph: No mds server is up or the cluster is laggy [ 946.242289][T24176] netlink: 'syz.0.3599': attribute type 4 has an invalid length. [ 946.523532][T24186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3604'. [ 947.327802][T24198] block nbd0: shutting down sockets [ 947.607098][T24206] netlink: 'syz.2.3608': attribute type 4 has an invalid length. [ 947.614093][T24207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3607'. [ 947.975236][T24217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3610'. [ 947.979211][T24217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3610'. [ 948.019261][T24219] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 948.319256][T24223] netlink: 'syz.1.3612': attribute type 27 has an invalid length. [ 948.607977][T24235] netlink: 'syz.3.3617': attribute type 4 has an invalid length. [ 948.938873][T24244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3619'. [ 948.953344][T24244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3619'. [ 950.065304][T24258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3622'. [ 950.119504][T24259] Bluetooth: hci4: Frame reassembly failed (-84) [ 950.137141][ T8134] Bluetooth: hci4: Frame reassembly failed (-84) [ 951.157607][T24269] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=35 (70 ns) > initial count (64 ns). Using initial count to start timer. [ 951.669635][T24275] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3626'. [ 951.760190][ T40] audit: type=1326 audit(1756912295.578:7682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 951.769209][ T40] audit: type=1326 audit(1756912295.578:7683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 951.779238][ T40] audit: type=1326 audit(1756912295.578:7684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 951.798349][ T40] audit: type=1326 audit(1756912295.578:7685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 951.807164][ T40] audit: type=1326 audit(1756912295.578:7686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 951.811965][T24281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3627'. [ 951.816443][ T40] audit: type=1326 audit(1756912295.606:7687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 951.832385][ T40] audit: type=1326 audit(1756912295.606:7688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 951.843948][T24281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3627'. [ 951.849136][ T40] audit: type=1326 audit(1756912295.606:7689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 951.872044][ T40] audit: type=1326 audit(1756912295.606:7690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 951.884165][ T40] audit: type=1326 audit(1756912295.606:7691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 952.311951][ T5336] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 952.312162][T21942] Bluetooth: hci4: command 0x1003 tx timeout [ 952.705574][T24291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3629'. [ 953.072408][T24304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3631'. [ 953.636530][T24311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3633'. [ 953.939303][T24316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3634'. [ 954.539537][T24323] netlink: 'syz.2.3637': attribute type 4 has an invalid length. [ 955.095698][T24335] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3639'. [ 956.245648][T24350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3644'. [ 956.662257][T24351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3642'. [ 957.242310][T24363] __nla_validate_parse: 1 callbacks suppressed [ 957.242327][T24363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3646'. [ 957.958621][T24379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3650'. [ 957.962474][T24379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3650'. [ 958.085418][T24382] fuse: Bad value for 'fd' [ 958.324513][T24389] netlink: 'syz.3.3654': attribute type 4 has an invalid length. [ 958.716941][T24395] vxcan1 speed is unknown, defaulting to 1000 [ 958.862029][T24395] lo speed is unknown, defaulting to 1000 [ 958.947618][T24395] wlan0 speed is unknown, defaulting to 1000 [ 959.448670][T24411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3660'. [ 961.564509][T24441] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3667'. [ 961.570603][ T40] kauditd_printk_skb: 264 callbacks suppressed [ 961.570618][ T40] audit: type=1800 audit(1756912304.763:7956): pid=24441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3667" name="nullb0" dev="tmpfs" ino=2075 res=0 errno=0 [ 962.042271][T24450] vxcan1 speed is unknown, defaulting to 1000 [ 962.184913][T24450] lo speed is unknown, defaulting to 1000 [ 962.269101][T24450] wlan0 speed is unknown, defaulting to 1000 [ 962.491883][T24455] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 962.718848][T24463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3670'. [ 962.729769][T24463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3670'. [ 963.678453][T24475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3673'. [ 963.689631][T24475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3673'. [ 964.261263][T24481] fuse: Bad value for 'fd' [ 964.268228][T24481] geneve3: entered promiscuous mode [ 964.270409][T24481] geneve3: entered allmulticast mode [ 964.273969][ T8107] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 964.279800][ T8107] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 964.282879][ T8107] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 964.286338][ T8107] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 965.309944][T24501] netlink: 'syz.2.3681': attribute type 4 has an invalid length. [ 965.651738][T24510] overlayfs: missing 'lowerdir' [ 966.224274][T24524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3687'. [ 966.228922][T24524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3687'. [ 966.837049][T24535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3691'. [ 967.541252][T24547] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=35 (70 ns) > initial count (64 ns). Using initial count to start timer. [ 967.568557][T24550] netlink: 'syz.1.3694': attribute type 4 has an invalid length. [ 968.468530][T24564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3697'. [ 968.472026][T24564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3697'. [ 969.030121][T24567] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=35 (70 ns) > initial count (64 ns). Using initial count to start timer. [ 969.323573][T24575] netlink: 'syz.3.3701': attribute type 2 has an invalid length. [ 969.331094][T24575] netlink: 'syz.3.3701': attribute type 4 has an invalid length. [ 969.384626][T24578] netlink: 'syz.3.3702': attribute type 4 has an invalid length. [ 969.503547][T24585] netlink: 'syz.1.3705': attribute type 4 has an invalid length. [ 970.501528][T24597] overlayfs: missing 'lowerdir' [ 970.827815][T24617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3710'. [ 970.907070][T24618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3710'. [ 971.491850][T24624] netlink: 'syz.1.3712': attribute type 4 has an invalid length. [ 971.595621][T24629] netlink: 'syz.1.3714': attribute type 4 has an invalid length. [ 971.600113][T24630] netlink: 'syz.0.3723': attribute type 4 has an invalid length. [ 973.181949][T24651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3721'. [ 973.701564][T24661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3724'. [ 973.711420][T24661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3724'. [ 973.956578][T24660] vxcan1 speed is unknown, defaulting to 1000 [ 974.166316][T24660] lo speed is unknown, defaulting to 1000 [ 974.375449][T24660] wlan0 speed is unknown, defaulting to 1000 [ 974.461899][T24665] netlink: 'syz.3.3725': attribute type 4 has an invalid length. [ 974.718643][T24680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3727'. [ 974.811486][T24679] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=35 (70 ns) > initial count (64 ns). Using initial count to start timer. [ 976.092578][T24703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3734'. [ 976.098163][T24703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3734'. [ 976.498366][T24708] netlink: 'syz.1.3736': attribute type 4 has an invalid length. [ 976.799865][T24717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3735'. [ 976.810113][T24717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3735'. [ 976.862263][T24722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3738'. [ 978.162208][T24737] netlink: 'syz.0.3743': attribute type 4 has an invalid length. [ 978.417044][T24745] netlink: 'syz.1.3746': attribute type 4 has an invalid length. [ 978.665426][T24670] libceph: connect (1)[c::]:6789 error -101 [ 978.667653][T24670] libceph: mon0 (1)[c::]:6789 connect error [ 978.672685][T24670] libceph: connect (1)[c::]:6789 error -101 [ 978.675150][T24670] libceph: mon0 (1)[c::]:6789 connect error [ 978.963424][T24670] libceph: connect (1)[c::]:6789 error -101 [ 978.967952][T24670] libceph: mon0 (1)[c::]:6789 connect error [ 979.228160][T24761] netlink: 'syz.0.3750': attribute type 4 has an invalid length. [ 979.476449][T24768] netlink: 'syz.0.3753': attribute type 4 has an invalid length. [ 979.482088][T24750] ceph: No mds server is up or the cluster is laggy [ 979.509556][T24670] libceph: connect (1)[c::]:6789 error -101 [ 979.519335][T24670] libceph: mon0 (1)[c::]:6789 connect error [ 979.698872][T24774] netlink: 'syz.1.3755': attribute type 4 has an invalid length. [ 980.190580][T24781] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=35 (70 ns) > initial count (64 ns). Using initial count to start timer. [ 980.202559][T24781] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 980.587366][T24796] netlink: 'syz.1.3762': attribute type 4 has an invalid length. [ 980.613864][T24786] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=35 (70 ns) > initial count (64 ns). Using initial count to start timer. [ 980.621164][T24786] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 980.839443][T24801] netlink: 'syz.1.3771': attribute type 4 has an invalid length. [ 981.154126][T24813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3765'. [ 981.158868][T24813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3765'. [ 981.300560][T24805] vxcan1 speed is unknown, defaulting to 1000 [ 981.437889][T24805] lo speed is unknown, defaulting to 1000 [ 981.578611][T24805] wlan0 speed is unknown, defaulting to 1000 [ 981.731753][T24814] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 981.800027][T24821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 981.813106][T24821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 982.698518][T24821] ------------[ cut here ]------------ [ 982.700788][T24821] WARNING: CPU: 1 PID: 24821 at mm/shmem.c:1420 shmem_evict_inode+0x8ee/0xbe0 [ 982.705490][T24821] Modules linked in: [ 982.707190][T24821] CPU: 1 UID: 0 PID: 24821 Comm: syz.3.3767 Not tainted syzkaller #0 PREEMPT(full) [ 982.712829][T24821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 982.717761][T24821] RIP: 0010:shmem_evict_inode+0x8ee/0xbe0 [ 982.720093][T24821] Code: fe e8 e6 4e be ff 45 85 ff 75 ac e8 9c 53 be ff 48 8b 74 24 28 48 8b 7c 24 30 e8 3d d8 96 ff e9 e5 fd ff ff e8 83 53 be ff 90 <0f> 0b 90 e9 51 f9 ff ff e8 75 53 be ff 4c 89 e2 48 b8 00 00 00 00 [ 982.720705][T24826] syz.0.3766: page allocation failure: order:0, mode:0x10cc0(GFP_KERNEL|__GFP_NORETRY), nodemask=(null) [ 982.728497][T24821] RSP: 0000:ffffc900075bf788 EFLAGS: 00010293 [ 982.735614][T24821] RAX: 0000000000000000 RBX: ffff88806e249518 RCX: ffffffff81fcb0ce [ 982.739613][T24821] RDX: ffff88802032a440 RSI: ffffffff81fcb77d RDI: 0000000000000007 [ 982.742825][T24821] RBP: ffffc900075bf8b0 R08: 0000000000000007 R09: 0000000000000000 [ 982.746074][T24821] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000008 [ 982.747646][T24826] ,cpuset= [ 982.750224][T24821] R13: 0000000000000000 R14: ffffed100dc4929f R15: 1ffff1100dc49281 [ 982.754981][T24821] FS: 0000000000000000(0000) GS:ffff8880975c0000(0000) knlGS:0000000000000000 [ 982.758593][T24826] /,mems_allowed=0-1 [ 982.759013][T24821] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 982.760379][T24826] CPU: 2 UID: 0 PID: 24826 Comm: syz.0.3766 Not tainted syzkaller #0 PREEMPT(full) [ 982.760401][T24826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 982.760411][T24826] Call Trace: [ 982.760419][T24826] [ 982.760425][T24826] dump_stack_lvl+0x16c/0x1f0 [ 982.760463][T24826] warn_alloc+0x248/0x3a0 [ 982.760492][T24826] ? __pfx_warn_alloc+0x10/0x10 [ 982.760515][T24826] ? psi_memstall_leave+0x19f/0x2d0 [ 982.760537][T24826] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 982.760555][T24826] ? psi_memstall_leave+0x1e1/0x2d0 [ 982.760577][T24826] ? psi_memstall_leave+0x1e6/0x2d0 [ 982.760600][T24826] __alloc_frozen_pages_noprof+0xea2/0x23f0 [ 982.760646][T24826] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 982.760676][T24826] ? lockdep_hardirqs_on+0x7c/0x110 [ 982.760703][T24826] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 982.760730][T24826] ? policy_nodemask+0xea/0x4e0 [ 982.760754][T24826] alloc_pages_mpol+0x1fb/0x550 [ 982.760778][T24826] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 982.760806][T24826] ? kimage_alloc_pages+0x1dc/0x350 [ 982.760835][T24826] alloc_pages_noprof+0x131/0x390 [ 982.760859][T24826] kimage_alloc_pages+0x75/0x350 [ 982.760887][T24826] kimage_alloc_control_pages+0x153/0xa00 [ 982.760910][T24826] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 982.760934][T24826] do_kexec_load+0x478/0x8a0 [ 982.760954][T24826] ? __pfx_do_kexec_load+0x10/0x10 [ 982.760979][T24826] __ia32_compat_sys_kexec_load+0x37f/0x400 [ 982.761001][T24826] ? __pfx___ia32_compat_sys_kexec_load+0x10/0x10 [ 982.761022][T24826] ? rcu_is_watching+0x12/0xc0 [ 982.761042][T24826] __do_fast_syscall_32+0x7c/0x3a0 [ 982.761069][T24826] do_fast_syscall_32+0x32/0x80 [ 982.761098][T24826] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 982.761121][T24826] RIP: 0023:0xf7fc1579 [ 982.761136][T24826] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 982.761153][T24826] RSP: 002b:00000000f54b555c EFLAGS: 00000296 ORIG_RAX: 000000000000011b [ 982.761169][T24826] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 982.761180][T24826] RDX: 0000000080001080 RSI: 00000000003e0000 RDI: 0000000000000000 [ 982.761191][T24826] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 982.761201][T24826] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 982.761211][T24826] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 982.761232][T24826] [ 982.761252][T24826] Mem-Info: [ 982.763086][T24821] CR2: 00000000320cc360 CR3: 0000000060f27000 CR4: 0000000000352ef0 [ 982.775229][T24826] active_anon:4319 inactive_anon:1280 isolated_anon:0 [ 982.775229][T24826] active_file:2503 inactive_file:7517 isolated_file:0 [ 982.775229][T24826] unevictable:1768 dirty:0 writeback:0 [ 982.775229][T24826] slab_reclaimable:6574 slab_unreclaimable:67435 [ 982.775229][T24826] mapped:29146 shmem:6237 pagetables:1687 [ 982.775229][T24826] sec_pagetables:336 bounce:0 [ 982.775229][T24826] kernel_misc_reclaimable:0 [ 982.775229][T24826] free:26583 free_pcp:404 free_cma:0 [ 982.776343][T24821] DR0: 000000005ffffffd DR1: 0000000000000000 DR2: 0000000000000000 [ 982.778143][T24826] Node 0 active_anon:48kB inactive_anon:276kB active_file:0kB inactive_file:476kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:588kB dirty:0kB writeback:0kB shmem:3564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7612kB pagetables:1636kB sec_pagetables:1144kB all_unreclaimable? no Balloon:0kB [ 982.780600][T24821] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 982.790380][T24826] Node 1 active_anon:4752kB inactive_anon:17516kB active_file:6508kB inactive_file:32440kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:115572kB dirty:0kB writeback:0kB shmem:21188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5604kB pagetables:5100kB sec_pagetables:200kB all_unreclaimable? no Balloon:0kB [ 982.792377][T24821] Call Trace: [ 982.794282][T24826] Node 0 [ 982.796352][T24821] [ 982.796368][T24821] ? __pfx_shmem_evict_inode+0x10/0x10 [ 982.798835][T24826] DMA free:1912kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 982.801714][T24821] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 982.805983][T24826] lowmem_reserve[]: [ 982.807634][T24821] ? find_held_lock+0x2b/0x80 [ 982.809771][T24826] 0 [ 982.812472][T24821] ? evict+0x3a2/0x920 [ 982.816807][T24826] 288 288 288 288 [ 982.816840][T24826] Node 0 DMA32 free:13496kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:212KB active_anon:0kB inactive_anon:412kB active_file:0kB inactive_file:284kB unevictable:3536kB writepending:0kB present:1032196kB managed:295120kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:0kB free_cma:0kB [ 982.818779][T24821] ? __pfx_shmem_evict_inode+0x10/0x10 [ 982.818805][T24821] evict+0x3e3/0x920 [ 982.818828][T24821] ? __pfx_evict+0x10/0x10 [ 982.818854][T24821] ? iput+0x519/0x880 [ 982.818880][T24821] iput+0x521/0x880 [ 982.818901][T24821] ? __pfx_generic_delete_inode+0x10/0x10 [ 982.818920][T24821] dentry_unlink_inode+0x29c/0x480 [ 982.818943][T24821] __dentry_kill+0x1d0/0x600 [ 982.818967][T24821] dput.part.0+0x4b1/0x9b0 [ 982.818991][T24821] dput+0x1f/0x30 [ 982.819013][T24821] __fput+0x51c/0xb70 [ 982.819038][T24821] ? _raw_spin_unlock_irq+0x23/0x50 [ 982.819060][T24821] task_work_run+0x14d/0x240 [ 982.819087][T24821] ? __pfx_task_work_run+0x10/0x10 [ 982.821656][T24826] lowmem_reserve[]: [ 982.824377][T24821] ? do_raw_spin_unlock+0x172/0x230 [ 982.826689][T24826] 0 [ 982.828584][T24821] do_exit+0x86f/0x2bf0 [ 982.828617][T24821] ? __pfx_do_exit+0x10/0x10 [ 982.828639][T24821] ? do_raw_spin_lock+0x12c/0x2b0 [ 982.828664][T24821] ? find_held_lock+0x2b/0x80 [ 982.830945][T24826] 0 [ 982.832886][T24821] do_group_exit+0xd3/0x2a0 [ 982.839011][T24826] 0 [ 982.846361][T24821] get_signal+0x2673/0x26d0 [ 982.849770][T24826] 0 [ 982.852583][T24821] ? __pfx_get_signal+0x10/0x10 [ 982.860556][T24826] 0 [ 982.862904][T24821] ? do_futex+0x122/0x350 [ 982.862933][T24821] ? __pfx_do_futex+0x10/0x10 [ 982.862956][T24821] arch_do_signal_or_restart+0x8f/0x790 [ 982.862980][T24821] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 982.863009][T24821] ? syscall_user_dispatch+0x78/0x140 [ 982.863040][T24821] exit_to_user_mode_loop+0x84/0x110 [ 982.863065][T24821] __do_fast_syscall_32+0x2ac/0x3a0 [ 982.863092][T24821] do_fast_syscall_32+0x32/0x80 [ 982.863115][T24821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 982.863136][T24821] RIP: 0023:0xf70be579 [ 982.863150][T24821] Code: Unable to access opcode bytes at 0xf70be54f. [ 982.863157][T24821] RSP: 002b:00000000f54ae60c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 982.863175][T24821] RAX: fffffffffffffe00 RBX: 00000000f7464f88 RCX: 0000000000000080 [ 982.863186][T24821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7464f8c [ 982.863197][T24821] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 982.863207][T24821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.863217][T24821] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 982.863239][T24821] [ 982.863248][T24821] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 982.863260][T24821] CPU: 1 UID: 0 PID: 24821 Comm: syz.3.3767 Not tainted syzkaller #0 PREEMPT(full) [ 982.863279][T24821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 982.863289][T24821] Call Trace: [ 982.863295][T24821] [ 982.863301][T24821] dump_stack_lvl+0x3d/0x1f0 [ 982.863324][T24821] vpanic+0x6e8/0x7a0 [ 982.863348][T24821] ? __pfx_vpanic+0x10/0x10 [ 982.863376][T24821] ? shmem_evict_inode+0x8ee/0xbe0 [ 982.863396][T24821] panic+0xca/0xd0 [ 982.863418][T24821] ? __pfx_panic+0x10/0x10 [ 982.863447][T24821] ? check_panic_on_warn+0x1f/0xb0 [ 982.863473][T24821] check_panic_on_warn+0xab/0xb0 [ 982.863498][T24821] __warn+0xf6/0x3c0 [ 982.863521][T24821] ? shmem_evict_inode+0x8ee/0xbe0 [ 982.863541][T24821] report_bug+0x3c3/0x580 [ 982.863561][T24821] ? shmem_evict_inode+0x8ee/0xbe0 [ 982.863580][T24821] handle_bug+0x184/0x210 [ 982.863604][T24821] exc_invalid_op+0x17/0x50 [ 982.863628][T24821] asm_exc_invalid_op+0x1a/0x20 [ 982.863643][T24821] RIP: 0010:shmem_evict_inode+0x8ee/0xbe0 [ 982.863662][T24821] Code: fe e8 e6 4e be ff 45 85 ff 75 ac e8 9c 53 be ff 48 8b 74 24 28 48 8b 7c 24 30 e8 3d d8 96 ff e9 e5 fd ff ff e8 83 53 be ff 90 <0f> 0b 90 e9 51 f9 ff ff e8 75 53 be ff 4c 89 e2 48 b8 00 00 00 00 [ 982.863678][T24821] RSP: 0000:ffffc900075bf788 EFLAGS: 00010293 [ 982.863690][T24821] RAX: 0000000000000000 RBX: ffff88806e249518 RCX: ffffffff81fcb0ce [ 982.863701][T24821] RDX: ffff88802032a440 RSI: ffffffff81fcb77d RDI: 0000000000000007 [ 982.863712][T24821] RBP: ffffc900075bf8b0 R08: 0000000000000007 R09: 0000000000000000 [ 982.863722][T24821] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000008 [ 982.863731][T24821] R13: 0000000000000000 R14: ffffed100dc4929f R15: 1ffff1100dc49281 [ 982.863748][T24821] ? shmem_evict_inode+0x23e/0xbe0 [ 982.863770][T24821] ? shmem_evict_inode+0x8ed/0xbe0 [ 982.863792][T24821] ? shmem_evict_inode+0x8ed/0xbe0 [ 982.863815][T24821] ? __pfx_shmem_evict_inode+0x10/0x10 [ 982.863835][T24821] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 982.863864][T24821] ? find_held_lock+0x2b/0x80 [ 982.863882][T24821] ? evict+0x3a2/0x920 [ 982.863905][T24821] ? __pfx_shmem_evict_inode+0x10/0x10 [ 982.863925][T24821] evict+0x3e3/0x920 [ 982.863948][T24821] ? __pfx_evict+0x10/0x10 [ 982.863973][T24821] ? iput+0x519/0x880 [ 982.863999][T24821] iput+0x521/0x880 [ 982.864028][T24821] ? __pfx_generic_delete_inode+0x10/0x10 [ 982.864047][T24821] dentry_unlink_inode+0x29c/0x480 [ 982.864093][T24821] __dentry_kill+0x1d0/0x600 [ 982.864119][T24821] dput.part.0+0x4b1/0x9b0 [ 982.864143][T24821] dput+0x1f/0x30 [ 982.864164][T24821] __fput+0x51c/0xb70 [ 982.864188][T24821] ? _raw_spin_unlock_irq+0x23/0x50 [ 982.864211][T24821] task_work_run+0x14d/0x240 [ 982.864239][T24821] ? __pfx_task_work_run+0x10/0x10 [ 982.864265][T24821] ? do_raw_spin_unlock+0x172/0x230 [ 982.864295][T24821] do_exit+0x86f/0x2bf0 [ 982.864322][T24821] ? __pfx_do_exit+0x10/0x10 [ 982.864344][T24821] ? do_raw_spin_lock+0x12c/0x2b0 [ 982.864368][T24821] ? find_held_lock+0x2b/0x80 [ 982.864387][T24821] do_group_exit+0xd3/0x2a0 [ 982.864411][T24821] get_signal+0x2673/0x26d0 [ 982.864454][T24821] ? __pfx_get_signal+0x10/0x10 [ 982.864472][T24821] ? do_futex+0x122/0x350 [ 982.864493][T24821] ? __pfx_do_futex+0x10/0x10 [ 982.864515][T24821] arch_do_signal_or_restart+0x8f/0x790 [ 982.864537][T24821] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 982.864565][T24821] ? syscall_user_dispatch+0x78/0x140 [ 982.864595][T24821] exit_to_user_mode_loop+0x84/0x110 [ 982.864620][T24821] __do_fast_syscall_32+0x2ac/0x3a0 [ 982.864644][T24821] do_fast_syscall_32+0x32/0x80 [ 982.864667][T24821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 982.864686][T24821] RIP: 0023:0xf70be579 [ 982.864697][T24821] Code: Unable to access opcode bytes at 0xf70be54f. [ 982.864705][T24821] RSP: 002b:00000000f54ae60c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 982.864719][T24821] RAX: fffffffffffffe00 RBX: 00000000f7464f88 RCX: 0000000000000080 [ 982.864729][T24821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7464f8c [ 982.864739][T24821] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 982.864748][T24821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.864762][T24821] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 982.864783][T24821] [ 982.867218][T24821] Kernel Offset: disabled VM DIAGNOSIS: 15:13:03 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=1ffff11009b9502a RSI=ffffffff8de287d5 RDI=ffff88804dca8150 RBP=0000000000000004 RSP=ffffc90000007c98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffff888023fff000 R14=0000000000000000 R15=ffff88804dca8000 RIP=ffffffff8195e37e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000031d24220 CR3=0000000068df9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000043 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85617a35 RDI=ffffffff9b0fc700 RBP=ffffffff9b0fc6c0 RSP=ffffc900075bf0f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000043 R14=ffffffff9b0fc6c0 R15=ffffffff856179d0 RIP=ffffffff85617a5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000320cc360 CR3=0000000060f27000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000015a2355 RBX=0000000000000002 RCX=ffffffff8b90fbf9 RDX=0000000000000000 RSI=ffffffff8de4dc69 RDI=ffffffff8c162f00 RBP=ffffed1003bdf910 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801defc880 R14=ffffffff90ab9290 R15=0000000000000000 RIP=ffffffff8b90e75f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000556bb7678660 CR3=0000000060f27000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000121 Opmask01=0000000000000001 Opmask02=00000000bfffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b6edc4b20 0000556be57eaae0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b6edc4b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69622f3a6e6962 732f7273752f3a6e 69622f7273752f00 0a732520202d2000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b4c470a1f4b4c47 560a5756500a1f4b 4c470a5756500a00 0a56000505080500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0600000100000011 0000000000000000 00007ffd8fa17a33 00007ffd8fa17a0d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8fa179e8 00007ffd8fa179c3 00007ffd8fa179a2 00007ffd8fa17980 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8fa17960 00007ffd8fa1794e 00007ffd8fa17943 00007ffd8fa17933 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8fa17927 00007ffd8fa17916 00007ffd8fa17905 00007ffd8fa178f7 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000600142c8eee88 071e292600000000 000080fe00010014 00000007fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a20630a0a63200a 6461613664202020 61612061200a2061 2020203500366400 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffff8880429e4b78 RCX=ffffffff8235aa1f RDX=1ffff1100853c974 RSI=ffffffff8235ae58 RDI=ffff8880429e4b88 RBP=0000000000000001 RSP=ffffc900031ffac8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=000000000000416d R13=0000000000000001 R14=00000000ffffbe92 R15=0000000000000000 RIP=ffffffff8235ae7c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8b60e19880 ffffffff 00c00000 GS =0000 ffff8880977c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffccc1d8fe8 CR3=0000000049c8d000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fc810000 Opmask01=0000000000410101 Opmask02=00000000ffffffff Opmask03=0000000001041000 Opmask04=00000000ffffdfff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005628f7a53920 00005628f7a53920 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005628f7a53920 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737373 7373737373737373 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffff0000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730cf8130c6803 7373255b84d66973 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737312 7373737373730a07 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 36706f6f6c2f6b63 6f6c622f6c617574 7269762f73656369 7665642f7379732f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 36706f6f6c2f6b63 6f6c622f6c617574 7269762f73656369 7665642f7379732f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000181 00736576616c732f 36706f6f6c2f6b63 6f6c622f6c617574 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000656539362f 303035372f343234 0000000000000021 000000003438312e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000061 0000000000007974 00736576616c7300 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000